last executing test programs: 8.133540548s ago: executing program 4 (id=1557): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x0, 0x7ad, &(0x7f00000007c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYBLOB="2e5113abb96490e8baa757031fd3113d8fd231aecab2c455591d3bec0b6d42a1d9572dc5078c0de5a68dc252aeb457f345aaef1744f717c71738086a77f819bf8ec2164ad9d225996868d5440c2a1f1759386c920214f5b07fdeaa34d7cbb895ee45108d8715e8678c9e65c8b76f3f4f2a1537de01264b0f6c5a5083f49b6737a25758553b72788c48c129ab89ff000e7d0b1da439dc5e7e6cfad150a664ab7d70dd127f473015976f8f2a3603f45a042d8c3578e6eb3060b986ee9e6b4dbf79896d68301c5d9ea34afe122934", @ANYBLOB="55ac88cf517af1b04be776ee9c0ec53f9628c15cb14edefde39762fe236b4ce8c60a7c43543970516a02d827011407c1362a6f3ee218574d1d03907f069e233eb8845406027ad215c6cb94b3c1660b0b307d92fda8ceeaee13ddad398c29967c9b3a2a2f4e8bcaccaa614de8b11d51221fd15e41511f4946f3ea66f5e4386903f94da6eafe8f943cbc7fb75ab04f9afe9f69e5bc6c21ca487b92ca6050937ae8af3ec55050ee8cccf22ea07fbe0f0eac590000000000000000000000002c4a6956a304640a061636c8a834f9bdf9ce332357af4b2a62d0fda693f4f22bc69e7ac38c41e010a61f8de542f687", @ANYRES32, @ANYRES8=r0, @ANYRES8, @ANYRES8, @ANYRES64], 0x1, 0x1cf, &(0x7f0000000fc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40286608, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x0, 0x0}) 6.897569956s ago: executing program 4 (id=1566): setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x837c}, 0x4) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@mpls_newroute={0xc0, 0x18, 0x100, 0x0, 0x25dfdbff, {0x1c, 0x80, 0x20, 0x0, 0xfe}, [@RTA_NEWDST={0x84, 0x13, [{0x9}, {}, {0x7}, {}, {0x100}, {}, {}, {0x23f}, {0x4}, {0x5}, {}, {}, {}, {}, {0x80}, {0x7, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xf7fff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xd9f4}, {0x8}, {}, {0x2}, {0x6, 0x0, 0x1}, {}, {}, {}, {0x3}, {0x8000}, {0x400, 0x0, 0x1}, {0x1}, {0x1, 0x0, 0x1}]}, @RTA_DST={0x8}, @RTA_DST={0x8, 0x1, {0x3, 0x0, 0x1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x20}, @RTA_DST={0x8, 0x1, {0x100}}]}, 0xc0}}, 0x0) 6.744682278s ago: executing program 4 (id=1569): syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104"], 0x0) 6.306482902s ago: executing program 2 (id=1571): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) close(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) poll(0x0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$VT_RELDISP(r2, 0x5450) 6.110337218s ago: executing program 2 (id=1573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r5, 0x11a, 0x4, &(0x7f00000001c0), 0x4) 6.108425948s ago: executing program 1 (id=1574): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, 0x0, 0xfffffecc) r1 = socket$packet(0x11, 0x3, 0x300) socket(0x0, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}}) 5.898690844s ago: executing program 1 (id=1575): add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe) 5.592061409s ago: executing program 1 (id=1576): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) gettid() rt_sigprocmask(0x0, &(0x7f0000000200), 0x0, 0x8) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="01"], 0x8) rt_sigreturn() poll(0x0, 0x0, 0x6c) rt_sigreturn() mlockall(0x3) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) uname(0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) 5.163975093s ago: executing program 2 (id=1578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) 5.118791756s ago: executing program 1 (id=1579): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xa) close(r2) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 4.872146556s ago: executing program 1 (id=1581): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/psched\x00') getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x1, @thr={&(0x7f00000000c0)="30f275796de6e2a11e965004dee676fef41dc825d23267a82843d53f8b84e810777453884ede7e963782cb4fb60f720be4b9555ad6116160cc63cc75f69f074b05f1bff4d9e6ce1e2579e1d16a1900b1b614f85e764ea50000000000", &(0x7f0000001780)="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"}}, &(0x7f0000000140)) eventfd(0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000240)={0x78, 0xfffffffffffffffe}, 0x78) socket$inet6_udp(0xa, 0x2, 0x0) rt_sigreturn() futex(&(0x7f0000000000)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCGETS(r1, 0x5401, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private1, 0x7d}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x0) 4.106267746s ago: executing program 4 (id=1583): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mlockall(0x1) socket$inet6_icmp(0xa, 0x2, 0x3a) 4.104507876s ago: executing program 2 (id=1584): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r2, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f0000000080)=@ethtool_dump={0x3f}}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x1, 0x29a, {{0xf, 0x4, 0x3, 0x0, 0x3c, 0x66, 0x0, 0x5, 0x7f, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x56, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@multicast2, 0x10001}, {@remote, 0x7ff}]}, @timestamp_addr={0x44, 0xc, 0x26, 0x1, 0x5, [{@multicast2, 0xf96}]}]}}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00001700000000001c0037800b0001006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000050403eeffffffffffff02000000", @ANYBLOB="a2ecedb96bdfb333cdf029d2f6edebe526ca5e3d58640a5adf1226cb471068cca56664", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000010000104000000000000000000fcee00", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n'], 0x28}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r13, @ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 3.80629533s ago: executing program 2 (id=1587): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) mkdir(&(0x7f0000001040)='./file0\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) setpgid(0x0, r1) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200400, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x848]}, 0x8, 0x80800) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f00000001c0)={0x4088, 0x20, '\x00', 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]}) r4 = syz_usb_connect(0x0, 0x242, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xec, 0x66, 0x7d, 0x40, 0x4dd, 0x9032, 0xfd0b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x230, 0x1, 0xfc, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x26, 0x0, 0x6, 0x2, 0xa, 0x0, 0x20, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x68}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3, 0x4, 0xff}, [@mdlm={0x15, 0x24, 0x12, 0x9}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x9, [0xfffa, 0x7, 0x7, 0x8]}, @obex={0x5, 0x24, 0x15, 0x8fd}, @country_functional={0xe, 0x24, 0x7, 0x2, 0x5, [0x6, 0x87a, 0x6, 0x1]}]}, @hid_hid={0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x684}}], [{{0x9, 0x5, 0x8, 0x1, 0x20, 0xa1, 0x0, 0x81, [@generic={0x2b, 0x31, "99cafb4059b853eeae2c08fe06940283435047a69c63082c1c96ff34589001f89870d566eec4745605"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x1, 0xd4, 0x9, [@generic={0x94, 0x9, "98ec4da9cdc3fb10db971c6b1bf8cf2ea074deb9a8b74be8d2b51b23410fa9fa43addd1a80f4bd3a76a7ac25f76914d2e169eb794561e1f6213f813800c491c38c9eff89761446e53d68bfa4f1dc2d1462466d71040a2ce1c354192e807a83579e1939f9fa2dd30326211b6066d1c9f2a606067e7ba2ba93e913ed95740af0587fcfc3155cbe9d1ee49d2d2b77a1ba3f3d35"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x40, 0x84, 0x1, [@generic={0xb0, 0xb, "bb3431f4d8cdb38cdfeee5854e3b1667f721d5dc1d4dce214ebb6acf117c16cbc721bcf8c9e34100844d834c36189e9718a49819a3821fa609b231fefc2a8245142e65cea1428d1c446981190e217cb98e6ba9e49faa6f651eb33bde7ef47bc7ba8582fd0609041201f2a2d6b8cf83ac9185e19ebbaded7811106d56892fbb0b14e1eb5bc19e8ef1aa32c14df1a54969b1f671a015031db45b227e1fdcd6f8fa67fac9fd1fcd089913e7e8a22e8d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x7, 0x7, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x8}]}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0x9, 0x6, 0xd2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40}]}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0x20, 0x5, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x3, 0x3}]}}]}}]}}]}}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000480)={r5, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x9}, &(0x7f0000000540)=0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90b24fc600400057a0a080200122582c137", 0x21}], 0x1}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20040810) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x67}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x8885) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x2, "41bf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000580)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000f00)={0xc4, 0x0, &(0x7f0000000d80)=[@increfs_done, @increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x3}, @exit_looper, @enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000700)={@ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/18, 0x12, 0x2, 0x24}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x1, &(0x7f0000000600)=""/200, 0xc8, 0x2, 0x2b}}, &(0x7f0000000800)={0x0, 0x28, 0x40}}, 0x40}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000cc0)={@ptr={0x70742a85, 0x0, &(0x7f0000000840)=""/35, 0x23, 0x1, 0x27}, @ptr={0x70742a85, 0x0, &(0x7f0000000880)=""/11, 0xb, 0x1, 0x6}, @ptr={0x70742a85, 0x0, &(0x7f0000000c00)=""/179, 0xb3, 0x2, 0x36}}, &(0x7f0000000d40)={0x0, 0x28, 0x50}}}], 0x56, 0x0, &(0x7f0000000e80)="8c382d8269b948e6cc0015388e07bf894cab0475b0bbda864524bb55d3491d2e6a3fff7ce86b6ce5bcbb34e0fd3f53d848186c797b0a02acc9456e5434ecc831f8032f9332af797a6d778416f5e41fe934b218c3a7c0"}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.746230485s ago: executing program 3 (id=1588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r5, 0x11a, 0x4, &(0x7f00000001c0), 0x4) 3.513966463s ago: executing program 0 (id=1589): gettid() r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) r4 = dup3(r2, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) close(r1) rt_sigreturn() futex(&(0x7f0000000000)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x0) pipe2(&(0x7f00000001c0)={0x0, 0x0}, 0x0) close(r5) r7 = socket$unix(0x1, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, 0x0, 0x3f) r8 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000004c0)=[@rights={{0x24, 0x1, 0x1, [r6, r8, r7, r6, r5]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x30, 0x1, 0x1, [r8, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r2, r3, r1]}}, @rights={{0x18, 0x1, 0x1, [r6, r1]}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0xc0, 0x20000000}, 0x800) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r9, 0x0) r10 = dup3(r9, r8, 0x0) accept$unix(r10, 0x0, 0x0) 2.818571338s ago: executing program 0 (id=1590): socket(0x10, 0x3, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCOUTQ(r0, 0x541b, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x5, &(0x7f000000d380)) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x4300) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e3502020001ffffffff685f1158e2fafc0e1f00020000000c00009c70baa363"], 0x38) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) creat(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x2000, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x658}, {@broadcast}, {@remote, 0x96}, {@loopback}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@broadcast}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20000}, {@broadcast, 0x52b1}, {@multicast2, 0x3}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0x0, [@empty, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x3, [@private=0xa010101, @multicast1, @private=0xa010102, @remote]}]}}}}}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0c000310"], 0xf) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 2.710299756s ago: executing program 3 (id=1591): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000640)="8ce2ad5f4f95ea87a7846d3f816a9c26488997", 0x13, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 2.709898746s ago: executing program 0 (id=1592): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x4, &(0x7f0000002880)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bb00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.639648302s ago: executing program 0 (id=1593): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f00000002c0)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) 2.607757885s ago: executing program 3 (id=1594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r3, 0x29, 0x19, 0x0, 0x0) 2.518313511s ago: executing program 4 (id=1595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095", @ANYRES32=r2], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) unshare(0x2a020400) semget$private(0x0, 0x2, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="1d22829213b87e101d3c809b421c233c5a11413fa6db85238ae47b3982f9706ca051c8d564463c828aa0d13754a66fa248c6ebddd5d1d65b71eb6db9c3bb73229ca6516242448bd7d299cfc27c1d896804a531b14a1b6e4536f5cdde041f6259492545a0ca86a8deb21d8f4d0f71eeaffc3d87ff500df61053f9839d089e9eeeb88df0662d9af419cfaefc1ff61aca8d25e7e2c4f43f0fcea19bfb0be1"], 0x7) r4 = socket(0x10, 0x80002, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095fc0dc125000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b24, &(0x7f0000000180)={'wlan0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_vhci(0x0, 0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_submit(r6, 0x1, &(0x7f0000000200)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r7, &(0x7f0000000080)='\r', 0xffffff1f}]) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) 2.463713066s ago: executing program 0 (id=1596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x800454d2, &(0x7f0000000040)={'wlan0\x00'}) 1.27383161s ago: executing program 3 (id=1597): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r2, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f0000000080)=@ethtool_dump={0x3f}}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x1, 0x29a, {{0xf, 0x4, 0x3, 0x0, 0x3c, 0x66, 0x0, 0x5, 0x7f, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x56, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@multicast2, 0x10001}, {@remote, 0x7ff}]}, @timestamp_addr={0x44, 0xc, 0x26, 0x1, 0x5, [{@multicast2, 0xf96}]}]}}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00001700000000001c0037800b0001006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000050403eeffffffffffff02000000", @ANYBLOB="a2ecedb96bdfb333cdf029d2f6edebe526ca5e3d58640a5adf1226cb471068cca56664", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000010000104000000000000000000fcee00", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n'], 0x28}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r13, @ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 998.387611ms ago: executing program 3 (id=1598): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x118, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_bpf={{0x8}, {0x68, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{}, {}, {}, {}, {}, {}, {}]}}, @TCA_BPF_FLAGS={0x8}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x70, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x5c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8}]}, @TCA_ROUTE4_FROM={0x8}]}}]}, 0x118}}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000140)="2a6964b6e862bbb7ace52f4024afa4a037aa7a2c42a917c9800a8355448b1022eb5829e387283555dbf20602b0befa124cf12670989c944e", 0x38}], 0x1, 0x0, 0x0) r0 = socket(0x10, 0x0, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x57}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x52}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x8}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 997.825032ms ago: executing program 0 (id=1599): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, 0x0, 0xfffffecc) r1 = socket$packet(0x11, 0x3, 0x300) socket(0x0, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001e00)={'lo\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, r2}) 888.0584ms ago: executing program 4 (id=1600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008412, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x5, 0x553b, &(0x7f000000ac00)="$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") ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x298) memfd_create(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071180600000000009500000000000000ca8c6f3101c074e1d5c073f1da6529485ed04d44d85b9953fc0766729fdcce8e89351e57db90cf673ba9fc53bb6e23f34beb6cbc0d299841b2ba3af4f577cea8fea5d95cc47df0d40fa37ff314df3f0c7b5ef1f7dcab83ce0e258ec2ca24922a58250ffd88bdd6303523f6a30e753c96489db349d65a79ff85f0fee518aea7f8cc671fcdd0af8162f9c2f1846a22e5639560d1deb761761836cc1dd43141e41aa4afbedf5768abd7f076e86206e3b80c9d38d31c4ebc5c49f3aa6736e180ba5368b0665a76e638a77e276b086365f7a39b54584f94"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) creat(&(0x7f0000000080)='./bus\x00', 0x0) lsetxattr$security_ima(0x0, &(0x7f0000000040), 0x0, 0x2, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfe3c) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xae3, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40086602, &(0x7f0000000000)) creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c6e6f6465766d61702c63616368653d667363616368652c6163636573733d636c69656e742c866d61702c616e616d653d25"]) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8000c61) 833.174285ms ago: executing program 3 (id=1601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r5, 0x11a, 0x4, &(0x7f00000001c0), 0x4) 662.465078ms ago: executing program 1 (id=1602): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000002280), 0x0, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) r1 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r1, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) close(r2) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x5451, 0x0) 0s ago: executing program 2 (id=1603): socket(0x10, 0x3, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCOUTQ(r0, 0x541b, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x5, &(0x7f000000d380)) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x4300) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e3502020001ffffffff685f1158e2fafc0e1f00020000000c00009c70baa363"], 0x38) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) creat(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x2000, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x658}, {@broadcast}, {@remote, 0x96}, {@loopback}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@broadcast}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20000}, {@broadcast, 0x52b1}, {@multicast2, 0x3}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0x0, [@empty, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x3, [@private=0xa010101, @multicast1, @private=0xa010102, @remote]}]}}}}}) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0c000310"], 0xf) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): tooth: hci1: unknown advertising packet type: 0x63 [ 250.792299][ T3554] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 250.996388][ T3792] usb 5-1: Using ep0 maxpacket: 32 [ 251.347799][ T3792] usb 5-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=e7.87 [ 252.039682][ T3792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.150166][ T3792] usb 5-1: config 0 descriptor?? [ 252.230983][ T3792] usb 5-1: probing VID:PID(2201:012C) [ 252.238126][ T3792] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 252.340258][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1044'. [ 252.365305][ T3792] vub300: probe of 5-1:0.0 failed with error -22 [ 252.431446][ T3792] usb 5-1: USB disconnect, device number 15 [ 252.508989][ T1148] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 252.608857][ T3554] Bluetooth: hci4: command tx timeout [ 252.708849][ T1148] usb 2-1: device descriptor read/64, error -71 [ 252.978954][ T1148] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 253.144038][ T7480] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 253.178916][ T1148] usb 2-1: device descriptor read/64, error -71 [ 253.209372][ T7480] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 253.273598][ T7480] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 253.299004][ T1148] usb usb2-port1: attempt power cycle [ 253.330665][ T7628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1048'. [ 253.359970][ T7480] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 253.683425][ T7480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.709349][ T1148] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 253.759876][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.769012][ T3599] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 253.789968][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.808918][ T1148] usb 2-1: device descriptor read/8, error -71 [ 253.830666][ T7480] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.892356][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.909833][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.941922][ T3594] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.949139][ T3594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.987464][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.008005][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.028013][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.035262][ T3594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.044118][ T3599] usb 5-1: Using ep0 maxpacket: 16 [ 254.071381][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.086229][ T1148] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 254.122007][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.131618][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.140846][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.161518][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.177713][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.197239][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.205537][ T1148] usb 2-1: device descriptor read/8, error -71 [ 254.233193][ T7480] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.248980][ T3599] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 254.263843][ T3599] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 254.301789][ T7480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.329041][ T1148] usb usb2-port1: unable to enumerate USB device [ 254.363413][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 254.378987][ T3599] usb 5-1: language id specifier not provided by device, defaulting to English [ 254.403171][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.431056][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.450631][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.461045][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.492503][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 254.529159][ T3599] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.548434][ T3599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.613883][ T3599] usb 5-1: Product: 㰊 [ 254.638527][ T3599] usb 5-1: Manufacturer: 굗R뼁ࢠ曓䲌䊃첵ᝬ牉걾⴨ॣḴ睱㕧۔ꛓꗲ잙럂⵻㫭ྯ鮢ఙϘ兿餎 [ 254.659309][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'. [ 254.689878][ T3599] usb 5-1: SerialNumber: ఊ [ 254.849357][ T3554] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 254.858048][ T3554] Bluetooth: hci1: Injecting HCI hardware error event [ 254.861352][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1056'. [ 254.870963][ T48] Bluetooth: hci1: hardware error 0x00 [ 255.028941][ T7632] IPVS: Error connecting to the multicast addr [ 255.110248][ T3599] cdc_ncm 5-1:1.0: skipping garbage [ 255.119436][ T3599] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 255.126904][ T3599] cdc_ncm 5-1:1.0: bind() failure [ 255.182736][ T3599] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 255.212679][ T7480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.230802][ T3599] cdc_ncm 5-1:1.1: bind() failure [ 255.248860][ T1148] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 255.280360][ T3599] usb 5-1: USB disconnect, device number 16 [ 255.328484][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 255.338685][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 255.357029][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 255.370821][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.421846][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.428181][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.436020][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 255.444921][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.460831][ T7480] device veth0_vlan entered promiscuous mode [ 255.508795][ T1148] usb 4-1: Using ep0 maxpacket: 32 [ 255.539615][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.547839][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 255.568020][ T7480] device veth1_vlan entered promiscuous mode [ 255.612684][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 255.629292][ T1148] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=e7.87 [ 255.639813][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 255.651076][ T7480] device veth0_macvtap entered promiscuous mode [ 255.658927][ T1148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.668817][ T3593] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 255.693797][ T1148] usb 4-1: config 0 descriptor?? [ 255.719441][ T7480] device veth1_macvtap entered promiscuous mode [ 255.771248][ T1148] usb 4-1: probing VID:PID(2201:012C) [ 255.788009][ T1148] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 255.791410][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.824698][ T1148] vub300: probe of 4-1:0.0 failed with error -22 [ 255.835308][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.887734][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.917915][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.935155][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.946160][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.956732][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.981139][ T1148] usb 4-1: USB disconnect, device number 14 [ 256.000399][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.017426][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.037860][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.048036][ T3593] usb 2-1: config 252 has an invalid interface number: 38 but max is 0 [ 256.051072][ T7480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.067151][ T3593] usb 2-1: config 252 has no interface number 0 [ 256.074432][ T3593] usb 2-1: config 252 interface 38 altsetting 0 endpoint 0x8 has an invalid bInterval 161, changing to 7 [ 256.091368][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1066'. [ 256.099927][ T3593] usb 2-1: config 252 interface 38 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 256.119360][ T3593] usb 2-1: config 252 interface 38 altsetting 0 endpoint 0xB has an invalid bInterval 32, changing to 9 [ 256.136657][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 256.145596][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 256.157120][ T3593] usb 2-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 256.166442][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 256.189590][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 256.198142][ T3593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.220015][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.235593][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.246259][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.257452][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.271420][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.288453][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.308212][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.328516][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.349850][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.368893][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.390270][ T7480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.425162][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'. [ 256.451319][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 256.479435][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 256.500313][ T7480] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.546014][ T7480] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.577183][ T7480] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.588883][ T3593] usb 2-1: string descriptor 0 read error: -71 [ 256.595820][ T3593] usb 2-1: unsupported MDLM descriptors [ 256.625689][ T7480] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.633602][ T3593] usb 2-1: USB disconnect, device number 20 [ 256.929365][ T48] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 257.165216][ T5691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.191900][ T5691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.200475][ T6515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.213445][ T6515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.230306][ T3596] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 257.253396][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 257.278938][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 257.448897][ T3596] usb 5-1: device descriptor read/64, error -71 [ 257.520589][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'. [ 257.583624][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1077'. [ 257.592809][ T4558] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 257.614092][ T7744] device bridge_slave_1 left promiscuous mode [ 257.630247][ T7744] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.651353][ T7744] device bridge_slave_0 left promiscuous mode [ 257.657579][ T7744] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.718896][ T3596] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 257.848865][ T4558] usb 2-1: Using ep0 maxpacket: 16 [ 257.929164][ T3596] usb 5-1: device descriptor read/64, error -71 [ 258.306940][ T4558] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 258.317185][ T3596] usb usb5-port1: attempt power cycle [ 258.323520][ T4558] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 258.378915][ T4558] usb 2-1: language id specifier not provided by device, defaulting to English [ 258.509676][ T4558] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.535443][ T4558] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.572778][ T4558] usb 2-1: Product: 㰊 [ 258.590466][ T4558] usb 2-1: Manufacturer: 굗R뼁ࢠ曓䲌䊃첵ᝬ牉걾⴨ॣḴ睱㕧۔ꛓꗲ잙럂⵻㫭ྯ鮢ఙϘ兿餎 [ 258.633343][ T4558] usb 2-1: SerialNumber: ఊ [ 258.739131][ T3596] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 258.839235][ T3596] usb 5-1: device descriptor read/8, error -71 [ 258.887754][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1089'. [ 258.956036][ T7731] IPVS: Error connecting to the multicast addr [ 259.058631][ T7799] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1091'. [ 259.059957][ T4558] cdc_ncm 2-1:1.0: skipping garbage [ 259.093027][ T4558] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 259.108879][ T4558] cdc_ncm 2-1:1.0: bind() failure [ 259.130540][ T4558] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 259.137451][ T4558] cdc_ncm 2-1:1.1: bind() failure [ 259.143079][ T3596] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 259.175588][ T4558] usb 2-1: USB disconnect, device number 21 [ 259.259312][ T3596] usb 5-1: device descriptor read/8, error -71 [ 259.399397][ T3596] usb usb5-port1: unable to enumerate USB device [ 259.488966][ T3627] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 259.714503][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1095'. [ 259.849062][ T3627] usb 1-1: New USB device found, idVendor=07ca, idProduct=a309, bcdDevice= 9.4f [ 259.871575][ T3627] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.918039][ T3627] usb 1-1: config 0 descriptor?? [ 259.981199][ T3627] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 260.012603][ T7820] loop1: detected capacity change from 0 to 4096 [ 260.020438][ T3627] dvb_usb_af9015: probe of 1-1:0.0 failed with error -22 [ 260.223445][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'. [ 260.325465][ T7815] ntfs3: loop1: failed to convert "0000" to iso8859-3 [ 260.342209][ T7815] ntfs3: loop1: failed to convert name for inode 1e. [ 260.738941][ T3627] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 260.828804][ T3594] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 260.916890][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1110'. [ 260.938844][ T3627] usb 4-1: device descriptor read/64, error -71 [ 260.946296][ T7852] device bridge_slave_1 left promiscuous mode [ 260.978907][ T7852] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.019377][ T7852] device bridge_slave_0 left promiscuous mode [ 261.025654][ T7852] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.068802][ T3594] usb 5-1: Using ep0 maxpacket: 16 [ 261.219009][ T3627] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 261.277950][ T3594] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 261.290614][ T3594] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 261.359042][ T3594] usb 5-1: language id specifier not provided by device, defaulting to English [ 261.438860][ T3627] usb 4-1: device descriptor read/64, error -71 [ 261.559825][ T3627] usb usb4-port1: attempt power cycle [ 261.644677][ T3594] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.654905][ T3594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.663742][ T3594] usb 5-1: Product: 㰊 [ 261.667932][ T3594] usb 5-1: Manufacturer: 굗R뼁ࢠ曓䲌䊃첵ᝬ牉걾⴨ॣḴ睱㕧۔ꛓꗲ잙럂⵻㫭ྯ鮢ఙϘ兿餎 [ 261.680433][ T3594] usb 5-1: SerialNumber: ఊ [ 262.176331][ T7837] IPVS: Error connecting to the multicast addr [ 262.317085][ T1148] usb 1-1: USB disconnect, device number 19 [ 262.369709][ T3594] cdc_ncm 5-1:1.0: skipping garbage [ 262.378451][ T3594] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 262.408772][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1114'. [ 262.421420][ T3594] cdc_ncm 5-1:1.0: bind() failure [ 262.438920][ T3627] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 262.469174][ T3594] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 262.488831][ T3594] cdc_ncm 5-1:1.1: bind() failure [ 262.521496][ T3594] usb 5-1: USB disconnect, device number 21 [ 262.609568][ T3627] usb 4-1: device descriptor read/8, error -71 [ 262.761857][ T7873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.837730][ T7873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.859514][ T7873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.889670][ T3627] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 262.999656][ T3627] usb 4-1: device descriptor read/8, error -71 [ 263.140010][ T3627] usb usb4-port1: unable to enumerate USB device [ 263.184331][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1122'. [ 263.368792][ T1148] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 263.710031][ T7901] loop1: detected capacity change from 0 to 2048 [ 263.730614][ T1148] usb 5-1: config 252 has an invalid interface number: 38 but max is 0 [ 263.740926][ T1148] usb 5-1: config 252 has no interface number 0 [ 263.747262][ T1148] usb 5-1: config 252 interface 38 altsetting 0 endpoint 0x8 has an invalid bInterval 161, changing to 7 [ 263.778478][ T7902] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 263.787388][ T7901] syz.1.1128: attempt to access beyond end of device [ 263.787388][ T7901] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 263.806153][ T1148] usb 5-1: config 252 interface 38 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 263.817797][ T48] Bluetooth: hci4: command tx timeout [ 263.857806][ T1148] usb 5-1: config 252 interface 38 altsetting 0 endpoint 0xB has an invalid bInterval 32, changing to 9 [ 263.869757][ T1148] usb 5-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 263.879075][ T1148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.882546][ T7901] syz.1.1128: attempt to access beyond end of device [ 263.882546][ T7901] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 264.007559][ T7903] syz.1.1128: attempt to access beyond end of device [ 264.007559][ T7903] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 264.044056][ T7903] syz.1.1128: attempt to access beyond end of device [ 264.044056][ T7903] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 264.107906][ T7903] syz.1.1128: attempt to access beyond end of device [ 264.107906][ T7903] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 264.190427][ T7903] syz.1.1128: attempt to access beyond end of device [ 264.190427][ T7903] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 264.258894][ T1148] usb 5-1: string descriptor 0 read error: -71 [ 264.267843][ T1148] usb 5-1: unsupported MDLM descriptors [ 264.280478][ T7905] syz.1.1128: attempt to access beyond end of device [ 264.280478][ T7905] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 264.328596][ T1148] usb 5-1: USB disconnect, device number 22 [ 264.962419][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'. [ 265.699096][ T4551] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 266.008999][ T4551] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 266.108967][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.128864][ T4551] usb 5-1: config 0 has no interfaces? [ 266.219023][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.238380][ T4551] usb 5-1: config 0 has no interfaces? [ 266.348857][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.369169][ T4551] usb 5-1: config 0 has no interfaces? [ 266.478814][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.497785][ T4551] usb 5-1: config 0 has no interfaces? [ 266.618884][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.638600][ T4551] usb 5-1: config 0 has no interfaces? [ 266.654637][ T7942] tipc: Enabling of bearer rejected, failed to enable media [ 266.739380][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.769829][ T4551] usb 5-1: config 0 has no interfaces? [ 266.884531][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.919187][ T4551] usb 5-1: config 0 has no interfaces? [ 267.249298][ T7952] loop0: detected capacity change from 0 to 40427 [ 267.259082][ T7952] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 267.266854][ T7952] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 267.288882][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.299221][ T4551] usb 5-1: config 0 has no interfaces? [ 267.316778][ T7952] F2FS-fs (loop0): Found nat_bits in checkpoint [ 267.364033][ T7952] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 267.371221][ T7952] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 267.521020][ T4551] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 267.540517][ T7960] syz.0.1144: attempt to access beyond end of device [ 267.540517][ T7960] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 267.565237][ T27] audit: type=1804 audit(1719965316.360:26): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1144" name="/newroot/267/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 267.588148][ T4551] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 267.588188][ T4551] usb 5-1: Product: syz [ 267.588203][ T4551] usb 5-1: Manufacturer: syz [ 267.588222][ T4551] usb 5-1: SerialNumber: syz [ 267.670405][ T4551] usb 5-1: config 0 descriptor?? [ 267.883088][ T27] audit: type=1804 audit(1719965316.660:27): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1144" name="/newroot/267/bus/file0" dev="loop0" ino=11 res=1 errno=0 [ 267.976480][ T1148] usb 5-1: USB disconnect, device number 23 [ 268.363343][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1147'. [ 268.695094][ T7982] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 268.858119][ T7989] sctp: [Deprecated]: syz.4.1152 (pid 7989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.858119][ T7989] Use struct sctp_sack_info instead [ 268.929074][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 269.122426][ T7999] xt_TCPMSS: Only works on TCP SYN packets [ 269.266099][ T7997] loop0: detected capacity change from 0 to 40427 [ 269.275065][ T7997] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 269.282919][ T7997] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 269.316838][ T7997] F2FS-fs (loop0): Found nat_bits in checkpoint [ 269.376298][ T7997] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 269.383518][ T7997] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 269.545220][ T8008] syz.0.1156: attempt to access beyond end of device [ 269.545220][ T8008] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 269.561901][ T27] audit: type=1804 audit(1719965318.360:28): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1156" name="/newroot/271/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 269.746059][ T27] audit: type=1804 audit(1719965318.490:29): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1156" name="/newroot/271/bus/file0" dev="loop0" ino=11 res=1 errno=0 [ 269.780301][ T8013] device hsr_slave_0 left promiscuous mode [ 269.839850][ T8008] 9pnet_fd: Insufficient options for proto=fd [ 270.012647][ T8013] device hsr_slave_1 left promiscuous mode [ 270.708870][ T4551] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 270.999008][ T4551] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 271.073026][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1173'. [ 271.091117][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.097803][ T8042] device bridge_slave_1 left promiscuous mode [ 271.121560][ T4551] usb 5-1: config 0 has no interfaces? [ 271.137139][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.156442][ T8042] device bridge_slave_0 left promiscuous mode [ 271.166479][ T8047] xt_TCPMSS: Only works on TCP SYN packets [ 271.176472][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.209005][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.238731][ T4551] usb 5-1: config 0 has no interfaces? [ 271.339072][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.368734][ T4551] usb 5-1: config 0 has no interfaces? [ 271.448943][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.489406][ T4551] usb 5-1: config 0 has no interfaces? [ 271.569227][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.599465][ T4551] usb 5-1: config 0 has no interfaces? [ 271.688966][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.708782][ T4551] usb 5-1: config 0 has no interfaces? [ 271.798930][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.819049][ T4551] usb 5-1: config 0 has no interfaces? [ 271.888942][ T3594] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 271.909068][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.948745][ T4551] usb 5-1: config 0 has no interfaces? [ 272.109485][ T4551] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 272.118568][ T4551] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 272.138812][ T3594] usb 4-1: Using ep0 maxpacket: 32 [ 272.157756][ T4551] usb 5-1: Product: syz [ 272.162186][ T4551] usb 5-1: Manufacturer: syz [ 272.166801][ T4551] usb 5-1: SerialNumber: syz [ 272.193599][ T4551] usb 5-1: config 0 descriptor?? [ 272.259005][ T3594] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=e7.87 [ 272.282926][ T3594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.314523][ T3594] usb 4-1: config 0 descriptor?? [ 272.374709][ T3594] usb 4-1: probing VID:PID(2201:012C) [ 272.391847][ T3594] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 272.412104][ T3594] vub300: probe of 4-1:0.0 failed with error -22 [ 272.450269][ T3594] usb 5-1: USB disconnect, device number 24 [ 272.575442][ T3792] usb 4-1: USB disconnect, device number 19 [ 274.848947][ T3792] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 275.098946][ T3792] usb 1-1: Using ep0 maxpacket: 16 [ 275.319589][ T3792] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 275.348927][ T3792] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 275.449041][ T3792] usb 1-1: language id specifier not provided by device, defaulting to English [ 275.499143][ T8085] xt_TCPMSS: Only works on TCP SYN packets [ 275.578969][ T3792] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.598805][ T3792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.624559][ T3792] usb 1-1: Product: 㰊 [ 275.639042][ T3792] usb 1-1: Manufacturer: 굗R뼁ࢠ曓䲌䊃첵ᝬ牉걾⴨ॣḴ睱㕧۔ꛓꗲ잙럂⵻㫭ྯ鮢ఙϘ兿餎 [ 275.718759][ T3792] usb 1-1: SerialNumber: ఊ [ 275.865418][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1187'. [ 276.015989][ T8079] IPVS: Error connecting to the multicast addr [ 276.109792][ T3792] cdc_ncm 1-1:1.0: skipping garbage [ 276.117162][ T3792] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 276.147345][ T3792] cdc_ncm 1-1:1.0: bind() failure [ 276.179531][ T3792] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 276.193134][ T3792] cdc_ncm 1-1:1.1: bind() failure [ 276.222034][ T3792] usb 1-1: USB disconnect, device number 20 [ 276.628938][ T4551] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 276.969116][ T4551] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 277.058955][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.088993][ T4551] usb 5-1: config 0 has no interfaces? [ 277.198843][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.222811][ T4551] usb 5-1: config 0 has no interfaces? [ 277.318934][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.348729][ T4551] usb 5-1: config 0 has no interfaces? [ 277.438875][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.468776][ T4551] usb 5-1: config 0 has no interfaces? [ 277.548958][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.578774][ T4551] usb 5-1: config 0 has no interfaces? [ 277.689001][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.709002][ T4551] usb 5-1: config 0 has no interfaces? [ 277.789109][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.809345][ T4551] usb 5-1: config 0 has no interfaces? [ 277.891957][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.919495][ T4551] usb 5-1: config 0 has no interfaces? [ 278.078870][ T4551] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 278.098134][ T4551] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 278.128456][ T4551] usb 5-1: Product: syz [ 278.138557][ T4551] usb 5-1: Manufacturer: syz [ 278.147647][ T4551] usb 5-1: SerialNumber: syz [ 278.190622][ T4551] usb 5-1: config 0 descriptor?? [ 278.604049][ T3627] usb 5-1: USB disconnect, device number 25 [ 278.907749][ T8138] loop0: detected capacity change from 0 to 2048 [ 278.984070][ T8141] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 278.995012][ T8138] syz.0.1202: attempt to access beyond end of device [ 278.995012][ T8138] loop0: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 279.045540][ T8138] syz.0.1202: attempt to access beyond end of device [ 279.045540][ T8138] loop0: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 279.121377][ T8138] syz.0.1202: attempt to access beyond end of device [ 279.121377][ T8138] loop0: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 279.203235][ T8138] syz.0.1202: attempt to access beyond end of device [ 279.203235][ T8138] loop0: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 279.238470][ T8144] syz.0.1202: attempt to access beyond end of device [ 279.238470][ T8144] loop0: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 279.280633][ T8144] syz.0.1202: attempt to access beyond end of device [ 279.280633][ T8144] loop0: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 279.409123][ T8138] syz.0.1202: attempt to access beyond end of device [ 279.409123][ T8138] loop0: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 280.618886][ T3627] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 280.835896][ T8191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.879939][ T3792] wlan1: authenticate with 08:02:11:00:00:00 [ 280.888389][ T3792] wlan1: No basic rates, using min rate instead [ 280.915236][ T3792] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 280.920512][ T8191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.931211][ T5935] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 65532 (expected 2) [ 280.949214][ T3627] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 280.980233][ T8191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.039152][ T3627] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.059164][ T3627] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.068049][ T3627] usb 5-1: config 0 interface 0 has no altsetting 0 [ 281.179015][ T3627] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.198789][ T3627] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.207748][ T3627] usb 5-1: config 0 interface 0 has no altsetting 0 [ 281.309245][ T3627] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.328720][ T3627] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.337700][ T3627] usb 5-1: config 0 interface 0 has no altsetting 0 [ 281.460101][ T3627] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.509408][ T3627] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.518442][ T3627] usb 5-1: config 0 interface 0 has no altsetting 0 [ 281.538765][ T5935] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 281.643960][ T3627] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.655347][ T5935] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 281.676192][ T3627] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.696896][ T3627] usb 5-1: config 0 interface 0 has no altsetting 0 [ 281.778856][ T9] wlan1: authentication with 08:02:11:00:00:00 timed out [ 281.789016][ T3627] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.829334][ T3627] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.851655][ T3627] usb 5-1: config 0 interface 0 has no altsetting 0 [ 281.958902][ T3627] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.989778][ T3627] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 282.009734][ T3627] usb 5-1: config 0 interface 0 has no altsetting 0 [ 282.089574][ T3627] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.120208][ T3627] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 282.128856][ T1148] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 282.150534][ T3627] usb 5-1: config 0 interface 0 has no altsetting 0 [ 282.358948][ T3627] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 282.388967][ T1148] usb 3-1: Using ep0 maxpacket: 32 [ 282.409781][ T3627] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 282.429563][ T3627] usb 5-1: Product: syz [ 282.433749][ T3627] usb 5-1: Manufacturer: syz [ 282.438354][ T3627] usb 5-1: SerialNumber: syz [ 282.464597][ T3627] usb 5-1: config 0 descriptor?? [ 282.509012][ T1148] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.530629][ T3627] yurex 5-1:0.0: Could not find endpoints [ 282.542212][ T1148] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 282.735212][ T1148] usb 3-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 282.744781][ T1148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.755883][ T3627] usb 5-1: USB disconnect, device number 26 [ 282.760730][ T1148] usb 3-1: config 0 descriptor?? [ 283.518607][ T8230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.637910][ T8230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.889020][ T8244] loop4: detected capacity change from 0 to 512 [ 283.931200][ T8244] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 283.988914][ T8244] System zones: 0-5 [ 283.995042][ T8244] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 284.175088][ T8244] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1239: bg 0: block 161: padding at end of block bitmap is not set [ 284.297409][ T8249] loop0: detected capacity change from 0 to 40427 [ 284.307465][ T8249] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 284.315308][ T8249] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 284.334877][ T3557] EXT4-fs (loop4): unmounting filesystem. [ 284.368149][ T8249] F2FS-fs (loop0): Found nat_bits in checkpoint [ 284.447067][ T8249] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 284.454519][ T8249] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 284.605876][ T8257] syz.0.1240: attempt to access beyond end of device [ 284.605876][ T8257] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 284.626883][ T27] audit: type=1804 audit(1719965333.420:30): pid=8257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1240" name="/newroot/294/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 284.782858][ T8262] loop4: detected capacity change from 0 to 256 [ 284.834361][ T8262] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 284.957418][ T8262] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 285.014524][ T3627] usb 3-1: USB disconnect, device number 9 [ 285.981630][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1247'. [ 287.054112][ T4551] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 287.478909][ T4551] usb 3-1: config 252 has an invalid interface number: 38 but max is 0 [ 287.498417][ T4551] usb 3-1: config 252 has no interface number 0 [ 287.527750][ T4551] usb 3-1: config 252 interface 38 altsetting 0 endpoint 0x8 has an invalid bInterval 161, changing to 7 [ 287.539378][ T4551] usb 3-1: config 252 interface 38 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 287.575068][ T4551] usb 3-1: config 252 interface 38 altsetting 0 endpoint 0xB has an invalid bInterval 32, changing to 9 [ 287.607210][ T4551] usb 3-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 287.648433][ T4551] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.424827][ T8310] loop1: detected capacity change from 0 to 1024 [ 288.640294][ T8310] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 288.700015][ T8310] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 288.718051][ T27] audit: type=1800 audit(1719965337.510:31): pid=8310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1259" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 288.758947][ T4551] usb 3-1: string descriptor 0 read error: -71 [ 288.765812][ T4551] usb 3-1: unsupported MDLM descriptors [ 289.004759][ T4551] usb 3-1: USB disconnect, device number 10 [ 289.027036][ T6257] EXT4-fs (loop1): unmounting filesystem. [ 289.768385][ T8322] netlink: 'syz.3.1263': attribute type 27 has an invalid length. [ 289.795555][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1263'. [ 290.985409][ T8330] loop0: detected capacity change from 0 to 32768 [ 291.026046][ T8330] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1264 (8330) [ 291.054832][ T8345] loop4: detected capacity change from 0 to 4096 [ 291.182856][ T8330] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 291.212954][ T8330] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 291.273180][ T8330] BTRFS info (device loop0): force zlib compression, level 3 [ 291.300166][ T8330] BTRFS info (device loop0): force clearing of disk cache [ 291.317595][ T8330] BTRFS info (device loop0): setting nodatasum [ 291.327725][ T8330] BTRFS info (device loop0): allowing degraded mounts [ 291.345079][ T8330] BTRFS info (device loop0): enabling disk space caching [ 291.368838][ T8330] BTRFS info (device loop0): disk space caching is enabled [ 291.391482][ T8352] loop1: detected capacity change from 0 to 4096 [ 291.429463][ T8352] ntfs3: Unknown parameter 'iochar_et' [ 291.501233][ T8330] BTRFS info (device loop0): rebuilding free space tree [ 291.569977][ T8330] BTRFS info (device loop0): disabling free space tree [ 291.619724][ T8330] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 291.665650][ T8330] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 291.816876][ T8330] overlayfs: missing 'workdir' [ 291.831072][ T8347] loop2: detected capacity change from 0 to 32768 [ 291.881222][ T8347] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1270 (8347) [ 291.946393][ T8330] BTRFS info (device loop0): balance: start [ 291.959364][ T8330] BTRFS info (device loop0): balance: ended with status: 0 [ 291.978162][ T8347] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 292.011758][ T8347] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 292.068826][ T8347] BTRFS info (device loop2): turning on flush-on-commit [ 292.095939][ T8347] BTRFS info (device loop2): turning off barriers [ 292.124768][ T8347] BTRFS info (device loop2): doing ref verification [ 292.155901][ T3548] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 292.168904][ T8347] BTRFS info (device loop2): force clearing of disk cache [ 292.176763][ T8347] BTRFS info (device loop2): enabling disk space caching [ 292.215660][ T8347] BTRFS info (device loop2): turning on sync discard [ 292.318268][ T8347] BTRFS info (device loop2): using default commit interval 30s [ 292.364027][ T8347] BTRFS info (device loop2): disk space caching is enabled [ 292.559212][ T8347] BTRFS info (device loop2): enabling ssd optimizations [ 292.586354][ T8347] BTRFS info (device loop2): rebuilding free space tree [ 292.624514][ T8352] loop1: detected capacity change from 0 to 32768 [ 292.636020][ T8322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.662520][ T8352] jfs: Unrecognized mount option "prealloc" or missing value [ 292.679714][ T8347] BTRFS info (device loop2): disabling free space tree [ 292.697224][ T8347] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 292.724369][ T8347] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 292.788823][ T8345] loop4: detected capacity change from 0 to 32768 [ 292.805868][ T8345] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 292.819805][ T8322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.844650][ T8345] CPU: 0 PID: 8345 Comm: syz.4.1269 Not tainted 6.1.96-syzkaller #0 [ 292.852680][ T8345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 292.862763][ T8345] Call Trace: [ 292.866072][ T8345] [ 292.869016][ T8345] dump_stack_lvl+0x1e3/0x2cb [ 292.873750][ T8345] ? nf_tcp_handle_invalid+0x642/0x642 [ 292.879230][ T8345] ? panic+0x764/0x764 [ 292.883323][ T8345] sysfs_create_dir_ns+0x2c6/0x390 [ 292.888461][ T8345] ? sysfs_warn_dup+0xa0/0xa0 [ 292.893172][ T8345] kobject_add_internal+0x6df/0xd10 [ 292.898396][ T8345] kobject_init_and_add+0x120/0x190 [ 292.903610][ T8345] ? lockdep_softirqs_off+0x420/0x420 [ 292.909003][ T8345] ? widen_string+0x3a/0x310 [ 292.913612][ T8345] ? kobject_add+0x210/0x210 [ 292.918221][ T8345] ? __init_swait_queue_head+0xaa/0x140 [ 292.923796][ T8345] gfs2_sys_fs_add+0x237/0x4a0 [ 292.928588][ T8345] ? gfs2_recover_set+0x240/0x240 [ 292.933634][ T8345] ? snprintf+0xd6/0x120 [ 292.937900][ T8345] ? vscnprintf+0x80/0x80 [ 292.942254][ T8345] ? read_word_at_a_time+0xe/0x20 [ 292.947304][ T8345] ? strscpy+0x89/0x220 [ 292.951482][ T8345] gfs2_fill_super+0x1228/0x26e0 [ 292.956457][ T8345] ? gfs2_reconfigure+0xcf0/0xcf0 [ 292.961496][ T8345] ? ptr_to_hashval+0x70/0x70 [ 292.966190][ T8345] ? up_write+0x19d/0x580 [ 292.970554][ T8345] ? set_blocksize+0x1c6/0x350 [ 292.975333][ T8345] get_tree_bdev+0x3fe/0x620 [ 292.979943][ T8345] ? gfs2_reconfigure+0xcf0/0xcf0 [ 292.984992][ T8345] gfs2_get_tree+0x50/0x210 [ 292.989522][ T8345] ? bpf_lsm_capable+0x5/0x10 [ 292.994230][ T8345] vfs_get_tree+0x88/0x270 [ 292.998674][ T8345] do_new_mount+0x2ba/0xb40 [ 293.003198][ T8345] ? ns_capable+0x85/0xe0 [ 293.007547][ T8345] ? do_move_mount_old+0x160/0x160 [ 293.012711][ T8345] __se_sys_mount+0x2d5/0x3c0 [ 293.016501][ T8394] tipc: Failed to remove unknown binding: 66,1,1/0:53097797/53097799 [ 293.017422][ T8345] ? __x64_sys_mount+0xc0/0xc0 [ 293.030615][ T8345] ? syscall_enter_from_user_mode+0x2e/0x230 [ 293.036613][ T8345] ? lockdep_hardirqs_on+0x94/0x130 [ 293.039879][ T8394] tipc: Failed to remove unknown binding: 66,1,1/0:53097797/53097799 [ 293.041907][ T8345] ? __x64_sys_mount+0x1c/0xc0 [ 293.041945][ T8345] do_syscall_64+0x3b/0xb0 [ 293.058735][ T8394] tipc: Failed to remove unknown binding: 66,1,1/0:53097797/53097799 [ 293.059454][ T8345] ? clear_bhb_loop+0x45/0xa0 [ 293.072222][ T8345] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.078147][ T8345] RIP: 0033:0x7f8a3077761a [ 293.082583][ T8345] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.102196][ T8345] RSP: 002b:00007f8a31533e78 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 293.110612][ T8345] RAX: ffffffffffffffda RBX: 00007f8a31533f00 RCX: 00007f8a3077761a [ 293.118583][ T8345] RDX: 00000000200003c0 RSI: 0000000020037f80 RDI: 00007f8a31533ec0 [ 293.126549][ T8345] RBP: 00000000200003c0 R08: 00007f8a31533f00 R09: 0000000000008000 [ 293.134511][ T8345] R10: 0000000000008000 R11: 0000000000000206 R12: 0000000020037f80 [ 293.142489][ T8345] R13: 00007f8a31533ec0 R14: 0000000000037f59 R15: 0000000020000400 [ 293.150487][ T8345] [ 293.155159][ T3599] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 293.247715][ T8345] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 293.308125][ T8345] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 293.519120][ T3599] usb 1-1: New USB device found, idVendor=07ca, idProduct=a309, bcdDevice= 9.4f [ 293.539578][ T3599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.561988][ T3599] usb 1-1: config 0 descriptor?? [ 293.601062][ T3599] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 293.608455][ T3599] dvb_usb_af9015: probe of 1-1:0.0 failed with error -22 [ 293.691347][ T8345] loop4: detected capacity change from 0 to 512 [ 293.721949][ T8345] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 293.752005][ T7480] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 293.797959][ T8345] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.1269: casefold flag without casefold feature [ 293.846370][ T8345] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.1269: missing EA_INODE flag [ 293.861682][ T8345] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1269: error while reading EA inode 12 err=-117 [ 293.876576][ T8345] EXT4-fs (loop4): 1 orphan inode deleted [ 293.894842][ T8345] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 294.073797][ T3557] EXT4-fs (loop4): unmounting filesystem. [ 294.319432][ T8322] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.329022][ T8322] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.337922][ T8322] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.347599][ T8322] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.568408][ T8388] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1273'. [ 294.600603][ T4553] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 295.088994][ T4553] usb 5-1: config 252 has an invalid interface number: 38 but max is 0 [ 295.115314][ T4553] usb 5-1: config 252 has no interface number 0 [ 295.161440][ T4553] usb 5-1: config 252 interface 38 altsetting 0 endpoint 0x8 has an invalid bInterval 161, changing to 7 [ 295.205375][ T4553] usb 5-1: config 252 interface 38 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 295.260053][ T4553] usb 5-1: config 252 interface 38 altsetting 0 endpoint 0xB has an invalid bInterval 32, changing to 9 [ 295.306008][ T4553] usb 5-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 295.335858][ T4553] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.665744][ T3594] usb 1-1: USB disconnect, device number 21 [ 295.838781][ T4553] usb 5-1: string descriptor 0 read error: -71 [ 296.464931][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1286'. [ 296.510863][ T4553] usb 5-1: unsupported MDLM descriptors [ 296.592252][ T4553] usb 5-1: USB disconnect, device number 27 [ 297.204116][ T8446] netlink: 'syz.0.1291': attribute type 27 has an invalid length. [ 297.254186][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1291'. [ 297.796203][ T8434] loop1: detected capacity change from 0 to 40427 [ 297.815141][ T8434] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 297.831800][ T8434] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 297.913653][ T8434] F2FS-fs (loop1): Found nat_bits in checkpoint [ 298.215344][ T8434] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 298.222740][ T8434] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 298.389749][ T27] audit: type=1800 audit(1719965347.190:32): pid=8434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1287" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 298.415592][ T8434] syz.1.1287: attempt to access beyond end of device [ 298.415592][ T8434] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 300.228759][ T4557] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 300.327358][ T8446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.430983][ T8446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.799342][ T4557] usb 2-1: config 252 has an invalid interface number: 38 but max is 0 [ 300.824599][ T4557] usb 2-1: config 252 has no interface number 0 [ 300.861118][ T4557] usb 2-1: config 252 interface 38 altsetting 0 endpoint 0x8 has an invalid bInterval 161, changing to 7 [ 300.916998][ T4557] usb 2-1: config 252 interface 38 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 300.968369][ T4557] usb 2-1: config 252 interface 38 altsetting 0 endpoint 0xB has an invalid bInterval 32, changing to 9 [ 301.022544][ T4557] usb 2-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 301.065897][ T4557] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.424018][ T8446] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.433207][ T8446] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.449177][ T8446] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.468333][ T8446] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.528949][ T4557] usb 2-1: string descriptor 0 read error: -71 [ 301.536402][ T4557] usb 2-1: unsupported MDLM descriptors [ 301.569807][ T4557] usb 2-1: USB disconnect, device number 22 [ 301.644053][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1300'. [ 301.664366][ T8483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1301'. [ 302.988834][ T4558] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 303.279615][ T4558] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 303.411755][ T8526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1315'. [ 304.086951][ T4558] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.098773][ T4558] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.107741][ T4558] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.131191][ T4558] usb 5-1: config 0 interface 0 has no altsetting 0 [ 304.259022][ T4558] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.318762][ T4558] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.337905][ T4558] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.355022][ T4558] usb 5-1: config 0 interface 0 has no altsetting 0 [ 304.439013][ T4558] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.455779][ T4558] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.475516][ T4558] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.507993][ T4558] usb 5-1: config 0 interface 0 has no altsetting 0 [ 304.551066][ T8538] netlink: 'syz.0.1319': attribute type 27 has an invalid length. [ 304.561448][ T8538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1319'. [ 304.619137][ T4558] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.652040][ T4558] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.679219][ T4558] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.708895][ T3593] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 304.726712][ T4558] usb 5-1: config 0 interface 0 has no altsetting 0 [ 304.818974][ T4558] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.839331][ T4558] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.848235][ T4558] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.929282][ T4558] usb 5-1: config 0 interface 0 has no altsetting 0 [ 305.048967][ T4558] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.078987][ T3593] usb 4-1: config 252 has an invalid interface number: 38 but max is 0 [ 305.080725][ T4558] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 305.097067][ T3593] usb 4-1: config 252 has no interface number 0 [ 305.104733][ T3593] usb 4-1: config 252 interface 38 altsetting 0 endpoint 0x8 has an invalid bInterval 161, changing to 7 [ 305.117633][ T3593] usb 4-1: config 252 interface 38 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 305.150522][ T4558] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 305.182231][ T3593] usb 4-1: config 252 interface 38 altsetting 0 endpoint 0xB has an invalid bInterval 32, changing to 9 [ 305.202565][ T4558] usb 5-1: config 0 interface 0 has no altsetting 0 [ 305.207396][ T3593] usb 4-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 305.219707][ T3593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.309295][ T4558] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.325608][ T4558] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 305.352283][ T4558] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 305.373824][ T4558] usb 5-1: config 0 interface 0 has no altsetting 0 [ 305.458954][ T4558] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.469220][ T4558] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 305.478290][ T4558] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 305.491832][ T4558] usb 5-1: config 0 interface 0 has no altsetting 0 [ 305.608872][ T3593] usb 4-1: string descriptor 0 read error: -71 [ 305.630628][ T3593] usb 4-1: unsupported MDLM descriptors [ 305.668948][ T4558] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 305.678584][ T3593] usb 4-1: USB disconnect, device number 20 [ 305.688415][ T4558] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 306.592514][ T4558] usb 5-1: Product: syz [ 306.596915][ T4558] usb 5-1: Manufacturer: syz [ 306.601993][ T4558] usb 5-1: SerialNumber: syz [ 306.620283][ T4558] usb 5-1: config 0 descriptor?? [ 306.639237][ T4558] usb 5-1: can't set config #0, error -71 [ 306.654303][ T4558] usb 5-1: USB disconnect, device number 28 [ 306.982512][ T8567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1328'. [ 308.599086][ T26] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 308.814393][ T3562] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 308.825203][ T3562] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 308.834192][ T3562] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 308.844985][ T3562] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 308.854136][ T3562] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 308.862204][ T3562] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 308.898974][ T26] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 309.009537][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.020498][ T26] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.029851][ T26] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 309.043171][ T26] usb 5-1: config 0 interface 0 has no altsetting 0 [ 309.129144][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.140509][ T26] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.150057][ T26] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 309.163437][ T26] usb 5-1: config 0 interface 0 has no altsetting 0 [ 309.208896][ T8598] chnl_net:caif_netlink_parms(): no params data found [ 309.238936][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.259156][ T26] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.309004][ T26] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 309.340116][ T26] usb 5-1: config 0 interface 0 has no altsetting 0 [ 309.408135][ T8598] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.415365][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.422919][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.434097][ T8598] device bridge_slave_0 entered promiscuous mode [ 309.440612][ T26] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.451596][ T8598] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.458761][ T26] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 309.472173][ T8598] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.480771][ T8598] device bridge_slave_1 entered promiscuous mode [ 309.487184][ T26] usb 5-1: config 0 interface 0 has no altsetting 0 [ 309.608058][ T8598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.619147][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.639585][ T26] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 309.671862][ T8598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.682326][ T26] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 309.705954][ T26] usb 5-1: config 0 interface 0 has no altsetting 0 [ 309.809324][ T3562] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 310.006256][ T8598] team0: Port device team_slave_0 added [ 310.104798][ T8598] team0: Port device team_slave_1 added [ 310.138850][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 310.379546][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.408844][ T26] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 310.417803][ T26] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 310.519223][ T26] usb 5-1: config 0 interface 0 has no altsetting 0 [ 310.560537][ T8598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.567509][ T8598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.604532][ T8598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.616099][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.634395][ T26] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 310.645113][ T8598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.652303][ T26] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 310.678822][ T8598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.714985][ T26] usb 5-1: config 0 interface 0 has no altsetting 0 [ 310.724359][ T8598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.799218][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.817220][ T26] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 310.824336][ T3792] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 310.830256][ T26] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 310.854341][ T26] usb 5-1: config 0 interface 0 has no altsetting 0 [ 310.905948][ T8598] device hsr_slave_0 entered promiscuous mode [ 310.926046][ T8598] device hsr_slave_1 entered promiscuous mode [ 310.932308][ T3554] Bluetooth: hci6: command tx timeout [ 311.038801][ T3792] usb 1-1: device descriptor read/64, error -71 [ 311.045469][ T26] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 311.059017][ T26] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 311.077664][ T26] usb 5-1: Product: syz [ 311.086643][ T26] usb 5-1: Manufacturer: syz [ 311.095898][ T26] usb 5-1: SerialNumber: syz [ 311.101511][ T8638] loop2: detected capacity change from 0 to 32768 [ 311.110820][ T8638] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1354 (8638) [ 311.128169][ T8638] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 311.133187][ T26] usb 5-1: config 0 descriptor?? [ 311.138659][ T8638] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 311.155610][ T8638] BTRFS info (device loop2): turning on flush-on-commit [ 311.163460][ T8638] BTRFS info (device loop2): turning off barriers [ 311.193375][ T8638] BTRFS info (device loop2): doing ref verification [ 311.217901][ T8638] BTRFS info (device loop2): force clearing of disk cache [ 311.230260][ T26] yurex 5-1:0.0: Could not find endpoints [ 311.235627][ T8638] BTRFS info (device loop2): enabling disk space caching [ 311.299128][ T8638] BTRFS info (device loop2): turning on sync discard [ 311.308893][ T8638] BTRFS info (device loop2): using default commit interval 30s [ 311.316472][ T8638] BTRFS info (device loop2): disk space caching is enabled [ 311.318957][ T3792] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 311.348344][ T3627] usb 5-1: USB disconnect, device number 29 [ 311.534963][ T3792] usb 1-1: device descriptor read/64, error -71 [ 311.611410][ T8638] BTRFS info (device loop2): enabling ssd optimizations [ 311.613019][ T8674] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1359'. [ 311.645947][ T8638] BTRFS info (device loop2): rebuilding free space tree [ 311.662760][ T3792] usb usb1-port1: attempt power cycle [ 311.677731][ T8638] BTRFS info (device loop2): disabling free space tree [ 311.693320][ T8638] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 311.703306][ T8638] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 311.919667][ T8683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.958749][ T3791] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 311.990132][ T8683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.020733][ T8683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.078890][ T3792] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 312.169053][ T3792] usb 1-1: device descriptor read/8, error -71 [ 312.329167][ T3791] usb 5-1: New USB device found, idVendor=07ca, idProduct=a309, bcdDevice= 9.4f [ 312.343682][ T7480] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 312.352062][ T3791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.371024][ T3791] usb 5-1: config 0 descriptor?? [ 312.394751][ T8598] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 312.421170][ T3791] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 312.438254][ T3791] dvb_usb_af9015: probe of 5-1:0.0 failed with error -22 [ 312.445687][ T3792] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 312.539113][ T3792] usb 1-1: device descriptor read/8, error -71 [ 312.572600][ T8598] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 312.620978][ T8598] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 312.659077][ T3792] usb usb1-port1: unable to enumerate USB device [ 313.029406][ T3554] Bluetooth: hci6: command tx timeout [ 313.322084][ T8598] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 313.828301][ T48] Bluetooth: hci4: unknown advertising packet type: 0x63 [ 313.836161][ T48] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 313.970817][ T3739] device hsr_slave_0 left promiscuous mode [ 314.012004][ T3739] device hsr_slave_1 left promiscuous mode [ 314.024317][ T3739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.053873][ T3739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.318799][ T22] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 314.640234][ T3794] usb 5-1: USB disconnect, device number 30 [ 314.720556][ T22] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 314.798875][ T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.808064][ T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 314.819457][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 314.929036][ T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 314.965859][ T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 314.997282][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.007633][ T3739] team0 (unregistering): Port device team_slave_1 removed [ 315.019815][ T8742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.088986][ T48] Bluetooth: hci6: command tx timeout [ 315.098384][ T8742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.109239][ T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.122115][ T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 315.154726][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.162425][ T3739] team0 (unregistering): Port device team_slave_0 removed [ 315.208912][ T8742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.269052][ T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.293808][ T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 315.313928][ T3739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.319556][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.391129][ T3739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.439241][ T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.450512][ T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 315.468329][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.574783][ T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.589789][ T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 315.613192][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.708873][ T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.717810][ T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 315.780508][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 315.868982][ T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.892155][ T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 315.938776][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 316.119037][ T22] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 316.132638][ T22] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 316.142321][ T22] usb 3-1: Product: syz [ 316.311708][ T22] usb 3-1: Manufacturer: syz [ 316.316856][ T22] usb 3-1: SerialNumber: syz [ 316.325514][ T22] usb 3-1: config 0 descriptor?? [ 316.369890][ T3739] bond0 (unregistering): Released all slaves [ 316.370376][ T22] yurex 3-1:0.0: Could not find endpoints [ 316.608471][ T22] usb 3-1: USB disconnect, device number 11 [ 316.929723][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.936820][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.168971][ T48] Bluetooth: hci6: command tx timeout [ 317.213990][ T8598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.255692][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 317.264455][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.289701][ T8598] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.309956][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 317.321458][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.340445][ T3715] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.347592][ T3715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.379060][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 317.397183][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 317.406088][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.415097][ T3715] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.422278][ T3715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.444319][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 317.468366][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 317.478221][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 317.487919][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 317.497818][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 317.514945][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 317.706301][ T8598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 317.722189][ T8598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.760450][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 317.769236][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 317.778109][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 317.786956][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 317.804523][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 317.833768][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 317.889088][ T3554] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 317.897934][ T3554] Bluetooth: hci4: Injecting HCI hardware error event [ 317.909184][ T3554] Bluetooth: hci4: hardware error 0x00 [ 318.110822][ T8778] overlayfs: missing 'workdir' [ 318.184853][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 318.199580][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 318.232361][ T8598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.256938][ T8781] loop1: detected capacity change from 0 to 2048 [ 318.302245][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 318.316433][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.344205][ T8784] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 318.379534][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 318.398462][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.430362][ T8598] device veth0_vlan entered promiscuous mode [ 318.439253][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.449142][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.462920][ T8781] syz.1.1382: attempt to access beyond end of device [ 318.462920][ T8781] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 318.514219][ T8598] device veth1_vlan entered promiscuous mode [ 318.525595][ T8781] syz.1.1382: attempt to access beyond end of device [ 318.525595][ T8781] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 318.576076][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 318.588820][ T3792] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 318.589942][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 318.618574][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 318.640726][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 318.653739][ T8598] device veth0_macvtap entered promiscuous mode [ 318.672018][ T8787] syz.1.1382: attempt to access beyond end of device [ 318.672018][ T8787] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 318.702997][ T8598] device veth1_macvtap entered promiscuous mode [ 318.715974][ T8789] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1385'. [ 318.726061][ T8787] syz.1.1382: attempt to access beyond end of device [ 318.726061][ T8787] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 318.746806][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.767859][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.822276][ T8790] syz.1.1382: attempt to access beyond end of device [ 318.822276][ T8790] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 318.849846][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.859157][ T3792] usb 1-1: Using ep0 maxpacket: 32 [ 318.868207][ T8790] syz.1.1382: attempt to access beyond end of device [ 318.868207][ T8790] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 318.882949][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.882972][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.882987][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.883004][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.883017][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.900195][ T8598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.952727][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 318.963993][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 318.969986][ T8791] syz.1.1382: attempt to access beyond end of device [ 318.969986][ T8791] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 318.972961][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 318.997230][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 318.999034][ T3792] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 319.019904][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.032613][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.038859][ T3792] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 319.043429][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.089491][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.098781][ T3792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.107291][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.107349][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.107365][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.158793][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.189055][ T22] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 319.198140][ T8598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.224075][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 319.241273][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 319.265111][ T3792] usb 1-1: config 0 descriptor?? [ 319.276005][ T8598] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.305766][ T8598] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.335810][ T8598] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.363701][ T8598] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.555343][ T3637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.564154][ T22] usb 3-1: New USB device found, idVendor=07ca, idProduct=a309, bcdDevice= 9.4f [ 319.583643][ T3637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.583691][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.652149][ T22] usb 3-1: config 0 descriptor?? [ 319.673763][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 319.690839][ T22] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 319.705258][ T22] dvb_usb_af9015: probe of 3-1:0.0 failed with error -22 [ 319.731894][ T3643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.759604][ T3643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.800762][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 319.972591][ T3554] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 320.592005][ T8812] overlayfs: missing 'workdir' [ 320.718884][ T22] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 321.009753][ T22] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 321.099503][ T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 321.108620][ T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 321.119295][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 321.198834][ T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 321.207720][ T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 321.238758][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 321.287693][ T3794] usb 1-1: USB disconnect, device number 26 [ 321.318935][ T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 321.327844][ T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 321.377696][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 321.638995][ T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 321.659984][ T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 321.681905][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 321.715260][ T3710] usb 3-1: USB disconnect, device number 12 [ 321.762065][ T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 321.796599][ T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 321.826023][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 321.919069][ T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 321.936133][ T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 321.946481][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 322.028960][ T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.041705][ T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 322.068888][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 322.159230][ T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 322.173053][ T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 322.198117][ T22] usb 2-1: config 0 interface 0 has no altsetting 0 [ 322.343942][ T8843] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 322.448859][ T22] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 322.464649][ T22] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 322.483437][ T22] usb 2-1: Product: syz [ 322.493565][ T22] usb 2-1: Manufacturer: syz [ 322.503720][ T22] usb 2-1: SerialNumber: syz [ 322.516187][ T22] usb 2-1: config 0 descriptor?? [ 322.570359][ T22] yurex 2-1:0.0: Could not find endpoints [ 322.678801][ T3710] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 322.797437][ T22] usb 2-1: USB disconnect, device number 23 [ 322.918769][ T3710] usb 4-1: Using ep0 maxpacket: 32 [ 323.039009][ T3710] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 323.054024][ T3710] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 323.064772][ T3710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.075099][ T3710] usb 4-1: config 0 descriptor?? [ 323.100982][ T8862] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1408'. [ 323.162591][ T8863] overlayfs: missing 'workdir' [ 323.394038][ T3794] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 323.819270][ T3794] usb 3-1: New USB device found, idVendor=07ca, idProduct=a309, bcdDevice= 9.4f [ 323.835843][ T3794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.858210][ T3794] usb 3-1: config 0 descriptor?? [ 323.911335][ T3794] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 323.921751][ T3794] dvb_usb_af9015: probe of 3-1:0.0 failed with error -22 [ 324.111392][ T3794] usb 3-1: USB disconnect, device number 13 [ 325.052038][ T8906] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1419'. [ 325.237843][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'. [ 325.773662][ T3794] usb 4-1: USB disconnect, device number 21 [ 326.075471][ T8926] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1429'. [ 326.393189][ T22] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 326.799067][ T22] usb 2-1: New USB device found, idVendor=07ca, idProduct=a309, bcdDevice= 9.4f [ 326.814404][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.876154][ T22] usb 2-1: config 0 descriptor?? [ 326.941117][ T22] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 326.975197][ T22] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22 [ 327.143944][ T3710] usb 2-1: USB disconnect, device number 24 [ 327.186132][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1439'. [ 327.278795][ T22] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 327.545889][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 327.555227][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 327.565196][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 327.573695][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 327.581681][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 327.589376][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 327.662593][ T22] usb 1-1: config 252 has an invalid interface number: 38 but max is 0 [ 327.677011][ T22] usb 1-1: config 252 has no interface number 0 [ 327.691157][ T22] usb 1-1: config 252 interface 38 altsetting 0 endpoint 0x8 has an invalid bInterval 161, changing to 7 [ 327.754669][ T22] usb 1-1: config 252 interface 38 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 327.775354][ T22] usb 1-1: config 252 interface 38 altsetting 0 endpoint 0xB has an invalid bInterval 32, changing to 9 [ 327.808724][ T22] usb 1-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 327.817777][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.032263][ T5691] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.070265][ T8967] chnl_net:caif_netlink_parms(): no params data found [ 328.218839][ T22] usb 1-1: string descriptor 0 read error: -71 [ 328.227082][ T22] usb 1-1: unsupported MDLM descriptors [ 328.276221][ T22] usb 1-1: USB disconnect, device number 27 [ 328.707900][ T5691] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.160808][ T5691] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.214973][ T8967] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.233781][ T8967] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.267760][ T8967] device bridge_slave_0 entered promiscuous mode [ 329.319704][ T5691] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.348308][ T8967] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.361508][ T8967] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.386705][ T8967] device bridge_slave_1 entered promiscuous mode [ 329.388807][ T3595] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 329.497959][ T8967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.532391][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1455'. [ 329.570799][ T8967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.650463][ T3554] Bluetooth: hci4: command tx timeout [ 329.659566][ T3595] usb 2-1: Using ep0 maxpacket: 16 [ 329.796718][ T8967] team0: Port device team_slave_0 added [ 329.825837][ T8967] team0: Port device team_slave_1 added [ 329.879194][ T3595] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 329.905829][ T3595] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 329.959126][ T3595] usb 2-1: language id specifier not provided by device, defaulting to English [ 330.002497][ T8967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.010306][ T8967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.040154][ T8967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.086282][ T8967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.097887][ T8967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.168765][ T8967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.299073][ T3595] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 330.316046][ T3595] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.339782][ T3595] usb 2-1: Product: 㰊 [ 330.354575][ T3595] usb 2-1: Manufacturer: 굗R뼁ࢠ曓䲌䊃첵ᝬ牉걾⴨ॣḴ睱㕧۔ꛓꗲ잙럂⵻㫭ྯ鮢ఙϘ兿餎 [ 330.472140][ T8967] device hsr_slave_0 entered promiscuous mode [ 330.509283][ T8967] device hsr_slave_1 entered promiscuous mode [ 330.530407][ T8967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.567459][ T8967] Cannot create hsr debugfs directory [ 330.666647][ T9005] IPVS: Error connecting to the multicast addr [ 330.729784][ T3595] cdc_ncm 2-1:1.0: skipping garbage [ 330.734994][ T3595] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 330.778203][ T3595] cdc_ncm 2-1:1.0: bind() failure [ 330.795678][ T3595] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 330.955156][ T3595] cdc_ncm 2-1:1.1: bind() failure [ 331.012061][ T3593] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 331.718957][ T3595] usb 2-1: USB disconnect, device number 25 [ 331.729070][ T3554] Bluetooth: hci4: command tx timeout [ 331.799030][ T3593] usb 5-1: config 252 has an invalid interface number: 38 but max is 0 [ 331.807601][ T3593] usb 5-1: config 252 has no interface number 0 [ 331.854416][ T3593] usb 5-1: config 252 interface 38 altsetting 0 endpoint 0x8 has an invalid bInterval 161, changing to 7 [ 331.866642][ T3593] usb 5-1: config 252 interface 38 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 331.879003][ T3593] usb 5-1: config 252 interface 38 altsetting 0 endpoint 0xB has an invalid bInterval 32, changing to 9 [ 331.890667][ T3593] usb 5-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 331.907157][ T3593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.318855][ T3593] usb 5-1: string descriptor 0 read error: -71 [ 332.330654][ T3593] usb 5-1: unsupported MDLM descriptors [ 332.375207][ T3593] usb 5-1: USB disconnect, device number 31 [ 332.399620][ T9080] overlayfs: missing 'workdir' [ 332.406815][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1467'. [ 332.449140][ T3554] Bluetooth: hci6: command tx timeout [ 332.636846][ T5691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.652312][ T5691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.672978][ T5691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.688352][ T5691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.767272][ T5691] device veth1_macvtap left promiscuous mode [ 332.774856][ T5691] device veth0_macvtap left promiscuous mode [ 332.788302][ T5691] device veth1_vlan left promiscuous mode [ 332.794526][ T5691] device veth0_vlan left promiscuous mode [ 333.810167][ T48] Bluetooth: hci4: command tx timeout [ 334.299479][ T3554] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 334.756270][ T5691] team0 (unregistering): Port device team_slave_1 removed [ 334.844227][ T5691] team0 (unregistering): Port device team_slave_0 removed [ 334.977082][ T5691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.033597][ T5691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.918986][ T3554] Bluetooth: hci4: command tx timeout [ 336.308260][ T5691] bond0 (unregistering): Released all slaves [ 336.776956][ T8967] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 336.790976][ T8967] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 336.811501][ T8967] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 336.854180][ T8967] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 337.115908][ T8967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.156875][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 337.199505][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 337.239152][ T9179] loop1: detected capacity change from 0 to 40427 [ 337.250036][ T9179] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 337.257808][ T9179] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 337.270619][ T8967] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.278091][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 337.327129][ T8967] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 337.346189][ T9179] F2FS-fs (loop1): Found nat_bits in checkpoint [ 337.368777][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 337.376184][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 337.396411][ T9179] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 337.404211][ T9179] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 337.424636][ T8967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 337.590811][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 337.598301][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 337.606970][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 337.743841][ T9192] syz.1.1497: attempt to access beyond end of device [ 337.743841][ T9192] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 337.745959][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 337.829072][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 337.843509][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 337.854509][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 337.871316][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 337.910113][ T27] audit: type=1804 audit(1719965386.560:33): pid=9192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1497" name="/newroot/147/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 340.350442][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.438235][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.469836][ T27] audit: type=1804 audit(1719965389.140:34): pid=9192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1497" name="/newroot/147/bus/file0" dev="loop1" ino=11 res=1 errno=0 [ 340.477390][ T9202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.501144][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.538813][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.576723][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.598755][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.606153][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.631845][ T9202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.659053][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.660149][ T9202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.700051][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.725634][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.752410][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.798786][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.806191][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.838738][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.859098][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.866624][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.898717][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.906122][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.938860][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.946259][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 340.982464][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 341.000235][ T8967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.007974][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 341.039019][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 341.046425][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 341.077827][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 341.089127][ T8967] device veth0_vlan entered promiscuous mode [ 341.108755][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 341.116218][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 341.134786][ T8967] device veth1_vlan entered promiscuous mode [ 341.140895][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 341.148283][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 341.179519][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 341.202168][ T8967] device veth0_macvtap entered promiscuous mode [ 341.229876][ T3791] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 341.240737][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 341.248563][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 341.523208][ T9211] delete_channel: no stack [ 341.737978][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 341.746831][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 341.755353][ T3593] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.762492][ T3593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.770326][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 341.779113][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 341.787614][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.794743][ T3593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.803625][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 341.812951][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 341.822222][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 341.832629][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 341.842049][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 341.850945][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.859711][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 341.868160][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 341.886669][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 341.908004][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 341.932154][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 341.940513][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 341.947937][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 341.956884][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 341.965745][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 341.974241][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 341.982992][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 341.991445][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 341.999710][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 342.008238][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 342.019251][ T8967] device veth1_macvtap entered promiscuous mode [ 342.041858][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 342.051133][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 342.089484][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 342.097219][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 342.129673][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 342.137426][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 342.205922][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.228765][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.248916][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.272117][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.296337][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.317848][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.330136][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.349574][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.393281][ T8967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.426581][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 342.439499][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 342.475311][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.508696][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.518518][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.568744][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.578571][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.638692][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.648520][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.701082][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.740044][ T8967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.747381][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 342.768778][ T3794] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 342.779844][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 342.807364][ T8967] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.842534][ T8967] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.869093][ T8967] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.877805][ T8967] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.028915][ T3794] usb 5-1: Using ep0 maxpacket: 16 [ 343.223132][ T3643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.264271][ T3643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.389468][ T3794] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 343.400051][ T3593] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 343.457705][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.497810][ T3794] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 343.517486][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.722447][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 343.732519][ T3794] usb 5-1: language id specifier not provided by device, defaulting to English [ 343.872706][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 344.069147][ T3794] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 344.072170][ T9270] loop1: detected capacity change from 0 to 128 [ 344.078210][ T3794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.078234][ T3794] usb 5-1: Product: 㰊 [ 344.078248][ T3794] usb 5-1: Manufacturer: 굗R뼁ࢠ曓䲌䊃첵ᝬ牉걾⴨ॣḴ睱㕧۔ꛓꗲ잙럂⵻㫭ྯ鮢ఙϘ兿餎 [ 344.122898][ T9270] FAT-fs (loop1): bogus number of reserved sectors [ 344.132030][ T9270] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 344.142305][ T9270] FAT-fs (loop1): Can't find a valid FAT filesystem [ 344.192610][ T3593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 344.198906][ T4785] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 344.204207][ T3593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 344.218299][ T9274] loop2: detected capacity change from 0 to 2048 [ 344.253911][ T3593] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 344.287592][ T3593] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 344.310770][ T3593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.339444][ T3593] usb 4-1: config 0 descriptor?? [ 344.353898][ T9281] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 344.359934][ T9274] syz.2.1440: attempt to access beyond end of device [ 344.359934][ T9274] loop2: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 344.392280][ T9257] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 344.437565][ T9238] IPVS: Error connecting to the multicast addr [ 344.465676][ T9274] syz.2.1440: attempt to access beyond end of device [ 344.465676][ T9274] loop2: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 344.543016][ T9274] syz.2.1440: attempt to access beyond end of device [ 344.543016][ T9274] loop2: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 344.634062][ T9274] syz.2.1440: attempt to access beyond end of device [ 344.634062][ T9274] loop2: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 344.660621][ T3794] cdc_ncm 5-1:1.0: skipping garbage [ 344.678947][ T3794] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 344.721459][ T3794] cdc_ncm 5-1:1.0: bind() failure [ 344.743666][ T9288] syz.2.1440: attempt to access beyond end of device [ 344.743666][ T9288] loop2: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 344.776613][ T3794] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 344.807832][ T3794] cdc_ncm 5-1:1.1: bind() failure [ 344.848984][ T3794] usb 5-1: USB disconnect, device number 32 [ 344.855977][ T9288] syz.2.1440: attempt to access beyond end of device [ 344.855977][ T9288] loop2: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 344.892080][ T3593] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 344.924402][ T3593] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 344.952479][ T9296] syz.2.1440: attempt to access beyond end of device [ 344.952479][ T9296] loop2: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 345.050943][ T3593] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 345.465195][ T9302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.586004][ T9302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.632904][ T9302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.900860][ T9317] loop0: detected capacity change from 0 to 512 [ 345.929406][ T9317] EXT4-fs: Ignoring removed i_version option [ 345.959286][ T9317] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 345.975325][ T9317] System zones: 1-12 [ 346.000146][ T9317] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1522: bg 0: block 131: padding at end of block bitmap is not set [ 346.026087][ T9317] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 346.053581][ T9317] EXT4-fs (loop0): 1 truncate cleaned up [ 346.059402][ T9317] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 346.104721][ T9322] loop1: detected capacity change from 0 to 256 [ 346.197908][ T3548] EXT4-fs (loop0): unmounting filesystem. [ 346.296548][ T9324] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1524'. [ 346.395943][ T9324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1524'. [ 346.403224][ T9332] loop1: detected capacity change from 0 to 512 [ 346.432511][ T9332] EXT4-fs: Ignoring removed i_version option [ 346.451273][ T3595] kernel write not supported for file bpf-prog (pid: 3595 comm: kworker/1:4) [ 346.466656][ T9332] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 346.479096][ T9332] System zones: 1-12 [ 346.484173][ T9332] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1526: bg 0: block 131: padding at end of block bitmap is not set [ 346.526010][ T9332] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 346.553206][ T9332] EXT4-fs (loop1): 1 truncate cleaned up [ 346.559506][ T9332] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 346.673515][ T6257] EXT4-fs (loop1): unmounting filesystem. [ 346.733838][ T9341] loop4: detected capacity change from 0 to 8 [ 346.778536][ T9345] loop1: detected capacity change from 0 to 128 [ 346.786285][ T9341] SQUASHFS error: lzo decompression failed, data probably corrupt [ 346.812789][ T9341] SQUASHFS error: Failed to read block 0x91: -5 [ 346.829629][ T9341] SQUASHFS error: Unable to read metadata cache entry [8f] [ 346.840485][ T9345] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 346.888843][ T9341] SQUASHFS error: Unable to read inode 0x11f [ 346.902146][ T9345] ext4 filesystem being mounted at /157/mnt supports timestamps until 2038 (0x7fffffff) [ 346.936212][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1534'. [ 347.118306][ T26] usb 4-1: USB disconnect, device number 22 [ 347.166146][ T6257] EXT4-fs (loop1): unmounting filesystem. [ 347.336143][ T9353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.374760][ T9363] loop1: detected capacity change from 0 to 1024 [ 347.411475][ T9365] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1538'. [ 347.438830][ T9365] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1538'. [ 347.462105][ T9353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.499436][ T9353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.607380][ T27] audit: type=1326 audit(1719965396.400:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9369 comm="syz.4.1541" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a30775f19 code=0x0 [ 347.681200][ T5935] hfsplus: b-tree write err: -5, ino 4 [ 347.886312][ T9382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1546'. [ 348.700738][ T9392] loop1: detected capacity change from 0 to 128 [ 348.781718][ T9392] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 348.803369][ T9402] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1551'. [ 348.852513][ T9392] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038 (0x7fffffff) [ 348.901150][ T9402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1551'. [ 349.042193][ T6257] EXT4-fs (loop1): unmounting filesystem. [ 349.100154][ T9414] loop4: detected capacity change from 0 to 2048 [ 349.142606][ T9418] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1559'. [ 349.211313][ T9414] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 349.233912][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'. [ 349.328828][ T3293] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 349.438949][ T3794] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 349.501180][ T9414] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full [ 349.669766][ T3293] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 349.762054][ T3557] EXT4-fs (loop4): unmounting filesystem. [ 349.819695][ T3293] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 349.869234][ T3794] usb 2-1: New USB device found, idVendor=07ca, idProduct=a309, bcdDevice= 9.4f [ 349.895572][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 349.919895][ T3794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.044267][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 350.073058][ T3293] usb 4-1: config 0 interface 0 has no altsetting 0 [ 350.081507][ T3794] usb 2-1: config 0 descriptor?? [ 350.132536][ T3794] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 350.144127][ T3794] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22 [ 350.189071][ T3293] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.222564][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.284485][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 350.306045][ T3293] usb 4-1: config 0 interface 0 has no altsetting 0 [ 350.333035][ T3593] usb 2-1: USB disconnect, device number 26 [ 350.389042][ T3293] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.408151][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.419643][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 350.429860][ T3293] usb 4-1: config 0 interface 0 has no altsetting 0 [ 350.518936][ T3293] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.530457][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.552142][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 350.562406][ T3293] usb 4-1: config 0 interface 0 has no altsetting 0 [ 350.588787][ T3794] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 350.626607][ T9452] loop2: detected capacity change from 0 to 2048 [ 350.651607][ T9452] EXT4-fs error (device loop2): __ext4_fill_super:5399: inode #2: comm syz.2.1570: casefold flag without casefold feature [ 350.664688][ T3792] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 350.672479][ T3293] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.676005][ T9452] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 350.688816][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.705290][ T9452] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 350.713205][ T9452] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 350.722445][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 350.748774][ T3293] usb 4-1: config 0 interface 0 has no altsetting 0 [ 350.795698][ T8967] EXT4-fs (loop2): unmounting filesystem. [ 350.839029][ T3293] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.858822][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.870130][ T3794] usb 1-1: Using ep0 maxpacket: 16 [ 350.876958][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 350.888369][ T3293] usb 4-1: config 0 interface 0 has no altsetting 0 [ 350.953061][ T3792] usb 5-1: Using ep0 maxpacket: 8 [ 350.969277][ T3293] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.978207][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 351.000071][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 351.174719][ T3293] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.182059][ T3794] usb 1-1: unable to get BOS descriptor or descriptor too short [ 351.208852][ T3792] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 351.217215][ T3792] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 351.229197][ T3792] usb 5-1: config 179 has no interface number 0 [ 351.250058][ T3792] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 351.262571][ T3794] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 351.276443][ T3792] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 351.312919][ T3293] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.328496][ T3794] usb 1-1: can't read configurations, error -71 [ 351.342021][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 351.443543][ T3792] usb 5-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 351.478273][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 351.627506][ T3293] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.646766][ T3792] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 351.816836][ T3792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.934757][ T9449] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 351.949052][ T3293] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 351.956050][ T9473] loop0: detected capacity change from 0 to 2048 [ 351.994098][ T3293] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 352.011679][ T3293] usb 4-1: Product: syz [ 352.016014][ T3293] usb 4-1: Manufacturer: syz [ 352.016895][ T9473] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 352.021578][ T3293] usb 4-1: SerialNumber: syz [ 352.035859][ T3293] usb 4-1: config 0 descriptor?? [ 352.068970][ T3293] usb 4-1: can't set config #0, error -71 [ 352.079123][ T3293] usb 4-1: USB disconnect, device number 23 [ 352.186313][ T3792] usb 5-1: USB disconnect, device number 33 [ 352.938594][ T9473] EXT4-fs warning (device loop0): verify_group_input:169: Last group not full [ 353.097786][ T9497] __nla_validate_parse: 2 callbacks suppressed [ 353.097803][ T9497] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1584'. [ 353.152368][ T3548] EXT4-fs (loop0): unmounting filesystem. [ 353.161935][ T9500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1584'. [ 353.718767][ T3715] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 354.109251][ T3715] usb 3-1: config 252 has an invalid interface number: 38 but max is 0 [ 354.154586][ T3715] usb 3-1: config 252 has no interface number 0 [ 354.264272][ T3715] usb 3-1: config 252 interface 38 altsetting 0 endpoint 0x8 has an invalid bInterval 161, changing to 7 [ 354.329148][ T3715] usb 3-1: config 252 interface 38 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 354.399470][ T3715] usb 3-1: config 252 interface 38 altsetting 0 endpoint 0xB has an invalid bInterval 32, changing to 9 [ 354.448736][ T3715] usb 3-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 354.481397][ T3715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.848854][ T3715] usb 3-1: string descriptor 0 read error: -71 [ 355.859906][ T3715] usb 3-1: unsupported MDLM descriptors [ 355.903571][ T9537] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1597'. [ 355.928142][ T3715] usb 3-1: USB disconnect, device number 14 [ 355.971528][ T9537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1597'. [ 356.597430][ T9547] loop4: detected capacity change from 0 to 40427 [ 356.620313][ T9547] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 356.628064][ T9547] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 356.668514][ T9547] F2FS-fs (loop4): Found nat_bits in checkpoint [ 357.229651][ T28] INFO: task syz-executor:3558 blocked for more than 143 seconds. [ 357.245779][ T28] Not tainted 6.1.96-syzkaller #0 [ 357.310483][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 357.329865][ T28] task:syz-executor state:D stack:21224 pid:3558 ppid:1 flags:0x00004004 [ 357.350465][ T28] Call Trace: [ 357.357495][ T28] [ 357.365278][ T28] __schedule+0x142d/0x4550 [ 357.378118][ T28] ? _raw_spin_unlock+0x40/0x40 [ 357.390482][ T28] ? __mod_timer+0x956/0xee0 [ 357.401097][ T28] ? __sched_text_start+0x8/0x8 [ 357.412178][ T28] ? lockdep_softirqs_off+0x420/0x420 [ 357.428331][ T9547] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 357.435544][ T9547] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 357.446556][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 357.452622][ T28] ? _raw_spin_unlock+0x40/0x40 [ 357.457581][ T28] schedule+0xbf/0x180 [ 357.462799][ T28] schedule_timeout+0x1b9/0x300 [ 357.467688][ T28] ? console_conditional_schedule+0x40/0x40 [ 357.473656][ T28] ? update_process_times+0x1b0/0x1b0 [ 357.479113][ T28] ? prepare_to_wait_event+0x3b5/0x3f0 [ 357.484614][ T28] gfs2_gl_hash_clear+0x19f/0x310 [ 357.489757][ T28] ? gfs2_jindex_free+0x468/0x4f0 [ 357.494812][ T28] ? withdraw_dq+0x240/0x240 [ 357.499496][ T28] ? gfs2_jindex_free+0x495/0x4f0 [ 357.504710][ T28] ? wake_bit_function+0x210/0x210 [ 357.509930][ T28] ? gfs2_setbit+0x630/0x630 [ 357.514775][ T28] ? gfs2_clear_rgrpd+0x6e6/0x710 [ 357.519965][ T28] gfs2_put_super+0x823/0x890 [ 357.524863][ T28] ? gfs2_evict_inode+0x1280/0x1280 [ 357.531439][ T28] generic_shutdown_super+0x130/0x340 [ 357.538246][ T28] kill_block_super+0x7a/0xe0 [ 357.543027][ T28] deactivate_locked_super+0xa0/0x110 [ 357.548442][ T28] cleanup_mnt+0x490/0x520 [ 357.553013][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 357.559160][ T28] task_work_run+0x246/0x300 [ 357.564718][ T28] ? task_work_cancel+0x2b0/0x2b0 [ 357.571350][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 357.576837][ T28] exit_to_user_mode_loop+0xde/0x100 [ 357.582390][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 357.588415][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 357.594073][ T28] do_syscall_64+0x47/0xb0 [ 357.598517][ T28] ? clear_bhb_loop+0x45/0xa0 [ 357.602047][ T9561] syz.4.1600: attempt to access beyond end of device [ 357.602047][ T9561] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 357.603335][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.624563][ T27] audit: type=1804 audit(1719965406.420:36): pid=9561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1600" name="/newroot/342/bus/bus" dev="loop4" ino=10 res=1 errno=0 [ 357.630802][ T28] RIP: 0033:0x7f6f5b577247 [ 357.658689][ T28] RSP: 002b:00007ffe09c99908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 357.667124][ T28] RAX: 0000000000000000 RBX: 00007f6f5b5e365d RCX: 00007f6f5b577247 [ 357.676397][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe09c999c0 [ 357.685610][ T28] RBP: 00007ffe09c999c0 R08: 0000000000000000 R09: 0000000000000000 [ 357.694799][ T28] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe09c9aa90 [ 357.703408][ T28] R13: 00007f6f5b5e365d R14: 0000000000030b04 R15: 0000000000000005 [ 357.715941][ T28] [ 357.719103][ T28] [ 357.719103][ T28] Showing all locks held in the system: [ 357.726921][ T28] 1 lock held by rcu_tasks_kthre/12: [ 357.732344][ T28] #0: ffffffff8d12ae90 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 357.782438][ T28] 1 lock held by rcu_tasks_trace/13: [ 357.791816][ T9547] syz.4.1600: attempt to access beyond end of device [ 357.791816][ T9547] loop4: rw=2049, sector=45224, nr_sectors = 8 limit=40427 [ 357.817648][ T28] #0: ffffffff8d12b690 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 357.840272][ T48] Bluetooth: hci4: unknown advertising packet type: 0x63 [ 357.847377][ T28] 1 lock held by khungtaskd/28: [ 357.878786][ T28] #0: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 357.890295][ T28] 2 locks held by getty/3309: [ 357.896269][ T28] #0: ffff888028a66098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 357.938530][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 357.968462][ T28] 1 lock held by syz-executor/3557: [ 357.978728][ T28] #0: ffffffff8d1302b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 357.990491][ T28] 1 lock held by syz-executor/3558: [ 357.995733][ T28] #0: ffff888013a7e0e0 (&type->s_umount_key#57){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 358.006012][ T28] 2 locks held by kworker/1:11/3715: [ 358.011410][ T28] #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 358.022457][ T28] #1: ffffc90004cf7d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 358.034147][ T28] [ 358.034980][ T3557] syz-executor: attempt to access beyond end of device [ 358.034980][ T3557] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 358.036701][ T28] ============================================= [ 358.036701][ T28] [ 358.080134][ T28] NMI backtrace for cpu 0 [ 358.084491][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.96-syzkaller #0 [ 358.092307][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 358.102379][ T28] Call Trace: [ 358.105666][ T28] [ 358.108589][ T28] dump_stack_lvl+0x1e3/0x2cb [ 358.113273][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 358.118733][ T28] ? panic+0x764/0x764 [ 358.122812][ T28] ? vprintk_emit+0x622/0x740 [ 358.127508][ T28] ? printk_sprint+0x490/0x490 [ 358.132277][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 358.137397][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 358.142344][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 358.148525][ T28] ? _printk+0xd1/0x111 [ 358.152679][ T28] ? panic+0x764/0x764 [ 358.156746][ T28] ? __wake_up_klogd+0xcc/0x100 [ 358.161596][ T28] ? panic+0x764/0x764 [ 358.165677][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 358.171750][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 358.177823][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 358.183805][ T28] watchdog+0xf88/0xfd0 [ 358.187965][ T28] ? watchdog+0x1f8/0xfd0 [ 358.192306][ T28] kthread+0x28d/0x320 [ 358.196373][ T28] ? hungtask_pm_notify+0x50/0x50 [ 358.201397][ T28] ? kthread_blkcg+0xd0/0xd0 [ 358.205981][ T28] ret_from_fork+0x1f/0x30 [ 358.210404][ T28] [ 358.214230][ T28] Sending NMI from CPU 0 to CPUs 1: [ 358.219764][ C1] NMI backtrace for cpu 1 [ 358.219773][ C1] CPU: 1 PID: 5691 Comm: kworker/u4:8 Not tainted 6.1.96-syzkaller #0 [ 358.219789][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 358.219798][ C1] Workqueue: phy21 ieee80211_iface_work [ 358.219820][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x32/0x60 [ 358.219842][ C1] Code: 64 db 77 7e 65 8b 15 65 db 77 7e f7 c2 00 01 ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 <83> fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc [ 358.219854][ C1] RSP: 0018:ffffc900030cf430 EFLAGS: 00000246 [ 358.219866][ C1] RAX: ffffffff89e6da5f RBX: 0000000000256a20 RCX: ffff8880224ebb80 [ 358.219877][ C1] RDX: 0000000000000000 RSI: 0000000000256a20 RDI: 0000000000256a20 [ 358.219905][ C1] RBP: ffff888076b1b7bc R08: ffffffff89e6d9f4 R09: ffffffff89e6d441 [ 358.219917][ C1] R10: 0000000000000006 R11: ffff8880224ebb80 R12: 000000000000000d [ 358.219928][ C1] R13: ffff888076b1b7c0 R14: 0000000000000008 R15: 0000000000256a20 [ 358.219939][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 358.219953][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.219964][ C1] CR2: 00007fff39ca4eb8 CR3: 000000000ce8e000 CR4: 00000000003506e0 [ 358.219982][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 358.219991][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 358.220001][ C1] Call Trace: [ 358.220006][ C1] [ 358.220011][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 358.220036][ C1] ? read_lock_is_recursive+0x10/0x10 [ 358.220062][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 358.220087][ C1] ? nmi_handle+0x25/0x440 [ 358.220118][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 358.220142][ C1] ? nmi_handle+0x12e/0x440 [ 358.220165][ C1] ? nmi_handle+0x25/0x440 [ 358.220189][ C1] ? __sanitizer_cov_trace_pc+0x32/0x60 [ 358.220208][ C1] ? default_do_nmi+0x62/0x150 [ 358.220225][ C1] ? exc_nmi+0xa8/0x100 [ 358.220239][ C1] ? end_repeat_nmi+0x16/0x31 [ 358.220264][ C1] ? ieee80211_channel_to_freq_khz+0x31/0x1a0 [ 358.220284][ C1] ? ieee80211_get_channel_khz+0x104/0x910 [ 358.220303][ C1] ? ieee80211_get_channel_khz+0x16f/0x910 [ 358.220324][ C1] ? __sanitizer_cov_trace_pc+0x32/0x60 [ 358.220350][ C1] ? __sanitizer_cov_trace_pc+0x32/0x60 [ 358.220371][ C1] ? __sanitizer_cov_trace_pc+0x32/0x60 [ 358.220391][ C1] [ 358.220395][ C1] [ 358.220399][ C1] ieee80211_get_channel_khz+0x16f/0x910 [ 358.220422][ C1] cfg80211_inform_bss_frame_data+0x4da/0x1680 [ 358.220448][ C1] ? cfg80211_parse_mbssid_data+0x3410/0x3410 [ 358.220474][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 358.220504][ C1] ieee80211_bss_info_update+0x847/0xf00 [ 358.220532][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 358.220555][ C1] ? ieee80211_rx_bss_put+0x60/0x60 [ 358.220583][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xeba/0x2dd0 [ 358.220602][ C1] ? ieee80211_vif_get_shift+0x225/0x280 [ 358.220627][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 358.220648][ C1] ? ieee80211_sta_get_rates+0x65c/0x720 [ 358.220673][ C1] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2dd0 [ 358.220700][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xeba/0x2dd0 [ 358.220719][ C1] ? ieee80211_ibss_rx_no_sta+0x740/0x740 [ 358.220742][ C1] ? mark_lock+0x9a/0x340 [ 358.220767][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 358.220791][ C1] ? print_irqtrace_events+0x210/0x210 [ 358.220815][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 358.220832][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 358.220851][ C1] ? skb_dequeue+0x10f/0x140 [ 358.220870][ C1] ieee80211_iface_work+0x7aa/0xce0 [ 358.220892][ C1] ? process_one_work+0x7a9/0x11d0 [ 358.220910][ C1] process_one_work+0x8a9/0x11d0 [ 358.220936][ C1] ? worker_detach_from_pool+0x260/0x260 [ 358.220956][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 358.220975][ C1] ? kthread_data+0x4e/0xc0 [ 358.221000][ C1] ? wq_worker_running+0x97/0x190 [ 358.221025][ C1] worker_thread+0xa47/0x1200 [ 358.221056][ C1] kthread+0x28d/0x320 [ 358.221069][ C1] ? worker_clr_flags+0x190/0x190 [ 358.221086][ C1] ? kthread_blkcg+0xd0/0xd0 [ 358.221100][ C1] ret_from_fork+0x1f/0x30 [ 358.221129][ C1] [ 358.275392][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 358.275406][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.96-syzkaller #0 [ 358.275426][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 358.275437][ T28] Call Trace: [ 358.275444][ T28] [ 358.275452][ T28] dump_stack_lvl+0x1e3/0x2cb [ 358.275489][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 358.275519][ T28] ? panic+0x764/0x764 [ 358.275539][ T28] ? llist_add_batch+0x160/0x1d0 [ 358.275569][ T28] ? vscnprintf+0x59/0x80 [ 358.275594][ T28] panic+0x318/0x764 [ 358.275616][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 358.275647][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 358.275690][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 358.275721][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 358.275755][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 358.275790][ T28] watchdog+0xfc7/0xfd0 [ 358.275822][ T28] ? watchdog+0x1f8/0xfd0 [ 358.275871][ T28] kthread+0x28d/0x320 [ 358.275889][ T28] ? hungtask_pm_notify+0x50/0x50 [ 358.275916][ T28] ? kthread_blkcg+0xd0/0xd0 [ 358.275937][ T28] ret_from_fork+0x1f/0x30 [ 358.275981][ T28] [ 358.282745][ T28] Kernel Offset: disabled [ 358.760845][ T28] Rebooting in 86400 seconds..