last executing test programs: 8m41.150786027s ago: executing program 0 (id=1687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20000010, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) 8m40.0950823s ago: executing program 0 (id=1688): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000280)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa"], 0x0) syz_open_dev$vim2m(0x0, 0x3fe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) getdents64(r5, &(0x7f0000000680)=""/4067, 0xfe3) ioctl$KVM_RUN(r2, 0xae80, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000080)={&(0x7f0000001000)={[{&(0x7f0000000040), 0x0, 0x1}]}, 0x1}, 0x1) 8m38.287142635s ago: executing program 0 (id=1693): socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x400000000010, 0x3, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) 8m37.083682684s ago: executing program 0 (id=1695): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000240)='./file0/file0\x00', 0x100, 0x159) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 8m34.868437505s ago: executing program 0 (id=1698): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xd0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909"], 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000001780)={&(0x7f0000000780)=[0x8, 0xfffffffe, 0x9, 0xff, 0x81, 0x0, 0xf4a, 0x7, 0x80000001, 0x49f8, 0x7ff, 0x7, 0x8001, 0x0, 0x6, 0x4, 0xd, 0xe, 0x6, 0x7fffffff, 0xb5, 0x1, 0x2, 0x9, 0x3, 0x9, 0x4, 0x80000001, 0x6, 0x3, 0x2, 0xffffffff, 0x6, 0x3ff, 0xfffffffd, 0x6, 0x400, 0x2, 0x80, 0xb, 0x1, 0x8, 0x91a3, 0x1, 0x0, 0xa6ec, 0x400, 0x6, 0x7, 0xf6be, 0xfffffffa, 0x7, 0x80000001, 0x4, 0x8, 0x200, 0x2082, 0xffffffff, 0x3, 0x80, 0x6, 0xe, 0x40, 0x9, 0x8, 0x7, 0x9, 0x4, 0x3, 0x401, 0x1, 0xbfa, 0xfffffff9, 0x8, 0x4, 0x9, 0x2, 0x8, 0x4, 0xdf5f, 0x7, 0x7, 0x8, 0x8, 0x0, 0x40, 0x1, 0x1, 0x5, 0x3, 0x8, 0x8, 0x5, 0x574, 0x3, 0xf7db, 0x50, 0xc0, 0x6, 0x1, 0x5, 0xb, 0x7, 0x11d5, 0x5, 0xffffffff, 0x3, 0x1400000, 0x0, 0x6, 0x80000001, 0x14b, 0x0, 0x6db5, 0x7, 0x75d, 0x8, 0x5, 0xaa0, 0xf26, 0x9, 0x36, 0x80, 0x6, 0x0, 0x9, 0x5, 0x8001, 0x9, 0x2, 0xfffffff7, 0x9, 0x8, 0x7b, 0x6, 0x10001, 0x80000001, 0x4, 0x100, 0x6, 0x7, 0xef5, 0x1, 0x0, 0x4, 0x5, 0x10001, 0x6, 0x1, 0x1, 0x5, 0xe83, 0x5, 0x87, 0x6, 0x10, 0xff, 0x1, 0xffff2f3c, 0x5, 0x8, 0x5, 0x9, 0x3, 0x7, 0xd66b, 0x1000, 0x9, 0x61e, 0x6, 0x3, 0x928f, 0x7, 0x0, 0x5a0d5c9c, 0x8b, 0x1000, 0xffffffff, 0x7ed, 0x5, 0x7fff, 0x3, 0x7f, 0x9, 0xc7, 0x6, 0x8, 0x691, 0xc, 0x2, 0x8, 0x7, 0x5, 0x7, 0x1ff, 0x8, 0x4, 0x8, 0x3, 0xf, 0x3, 0x400, 0x1, 0x5f0e, 0x0, 0x8, 0x3ff, 0x2, 0x7f, 0x2, 0xfffffffe, 0xe, 0x401, 0x0, 0xdf, 0xfffffffe, 0x9, 0x7, 0x4, 0x7, 0x5, 0x7fff, 0x2, 0x3, 0x2, 0xcb6, 0x4, 0x7, 0x0, 0x2, 0x4, 0x5f, 0x1, 0x3, 0x4, 0x9, 0x80, 0x1, 0x3, 0xfffffff7, 0x2, 0x3ff, 0x8, 0x5, 0x5, 0x5, 0x9bcd, 0x1b3d, 0x2, 0x3, 0x80000000, 0x2, 0x9, 0x9, 0x3, 0x3, 0x80000000, 0x8, 0x6, 0x5, 0x3, 0x0, 0x1, 0x8, 0x2, 0x2, 0x2, 0x2, 0x10001, 0x3, 0x800, 0x4, 0x100, 0xb, 0xfffffffd, 0x93, 0x5, 0x9, 0x2, 0x3, 0x7, 0x1, 0xfffff255, 0x0, 0x4, 0xde, 0x3, 0x0, 0x8000, 0x8, 0x5, 0x4, 0x4, 0xde52, 0x0, 0x2, 0x101, 0xfffffffe, 0xffffff7f, 0x7, 0x9, 0x800, 0x4, 0xd, 0x36, 0xffffc65c, 0x5, 0xf, 0x2, 0x4, 0x3, 0xf, 0x4, 0x7, 0x3, 0x3, 0x800000, 0x7ff, 0x1, 0x87d5, 0x9, 0x6, 0x4, 0x2000, 0xffff32f5, 0x9, 0x7, 0x4, 0xffffffff, 0x1, 0x8, 0x6, 0x8, 0x4, 0x0, 0xfffffff1, 0xffffffff, 0x0, 0x2, 0xea, 0x80af, 0x2, 0x3ff, 0x1, 0x1, 0x7, 0xd80, 0x3, 0x0, 0x7, 0x8001, 0xfffffffd, 0x800, 0x7fd, 0xf26, 0x500000, 0xfff, 0xae, 0x5, 0x0, 0xa2, 0x21, 0x7fffffff, 0x5, 0x9, 0xa5d, 0x213, 0x1416, 0x425, 0x5, 0x2, 0x0, 0x6, 0x10001, 0x6, 0x8001, 0xb, 0x0, 0x4, 0x2, 0x1, 0xffffffff, 0x9, 0x6, 0x9, 0x9, 0xa, 0x8, 0x3ff, 0x9, 0x0, 0x7, 0x400, 0x6, 0x7, 0xad, 0xfffff000, 0x0, 0x9, 0x4b5, 0x468, 0x7, 0xe3, 0x40, 0x4, 0xe3, 0x4, 0x3, 0x4, 0xba5, 0x4, 0x8, 0x1, 0x7fff, 0x2, 0x3, 0x5, 0x1, 0xffff, 0x0, 0x2, 0xf, 0x80000001, 0x7, 0x3, 0x3, 0xa874, 0x6, 0x101, 0x0, 0xfb2, 0x5, 0x10001, 0x3, 0x9, 0x3, 0x6, 0x9, 0x2, 0x7, 0x5, 0x10000, 0x3, 0x7, 0x31ac2816, 0xfffffffc, 0xfff, 0x8, 0x4, 0x4, 0x1, 0xa, 0x4, 0x800, 0x7, 0x9, 0x6dd2, 0x80000000, 0x9, 0xf, 0x7, 0xdc5, 0x2, 0xffff, 0xffff, 0x8001, 0x6, 0x4, 0x9, 0x4, 0x8, 0x400, 0x7, 0xeb2, 0x767, 0x80, 0xe7f, 0x9, 0x9, 0x1, 0x9, 0xffffffff, 0x5, 0x4, 0x3, 0x30c, 0x3, 0x8000, 0x2, 0x7, 0x7, 0x1, 0xfff, 0x1, 0x4, 0x9, 0x4, 0x1, 0x1, 0xff, 0x10, 0x5, 0x3, 0x80000000, 0x7, 0x6, 0xffffff80, 0x0, 0xfff, 0x3, 0x5, 0x7, 0xf, 0x3, 0x9, 0x9, 0xbd33, 0x8, 0x3, 0x0, 0x6, 0x8c1b, 0x3, 0x5, 0x5, 0xcd, 0xfffffffd, 0x8000, 0x9, 0x1, 0xc7, 0xfff, 0x4, 0x4, 0x6, 0x6, 0x5, 0xc, 0x101, 0x2, 0x6, 0x6, 0x1, 0x1, 0x100, 0xff, 0x7, 0x1d0f, 0x4, 0xf51, 0x7c, 0x3, 0x6, 0xcd83, 0x49, 0x6, 0x10000, 0x8, 0x1, 0x89, 0x3, 0x2, 0xd, 0x14a, 0x9, 0x5, 0x2, 0x7, 0x4, 0xe871, 0x80, 0x0, 0x80, 0x3, 0xfffffffe, 0x1288, 0x8, 0xffffffff, 0x9, 0x6b1, 0xfffffffe, 0x2, 0x8, 0x4, 0x8, 0x7, 0x8001, 0x0, 0x53, 0x8, 0x80000001, 0x4, 0x7, 0x2, 0x0, 0x6, 0x4, 0xfffffffc, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x5, 0x2, 0xfff, 0x3e2b, 0x6, 0x9, 0xffff, 0x9, 0x8001, 0x10001, 0x3, 0x3ff, 0x7ff, 0x98d3, 0x4, 0x4, 0x80000000, 0x6, 0x3ff, 0x590a, 0x4, 0x7f, 0xffffffff, 0x0, 0xe, 0x8, 0xfffffffd, 0x5, 0x8000, 0x2956, 0x401, 0xb, 0x1000, 0x0, 0x6, 0x8, 0x6, 0x45, 0x85d3, 0x18af, 0xf, 0x3, 0x3, 0x7, 0x3, 0x3ff, 0x8, 0x9, 0x7, 0xf60c, 0x6, 0x7, 0x80000000, 0x5, 0x275, 0x3, 0x4, 0x0, 0x6, 0x7, 0x3, 0x3, 0x7, 0x3, 0xa, 0x1, 0x7e, 0xa1f6, 0xb611c2dc, 0xb1a6, 0x6, 0x7, 0xdcd, 0x6e6, 0x1, 0x0, 0x3, 0x80, 0x4, 0x5, 0xfffffffa, 0x8, 0x38, 0x2, 0x8, 0x8, 0x9, 0xf, 0x81, 0x4, 0x1, 0xfd6f6f7, 0xffff, 0x80000001, 0x2000, 0x80000000, 0x3, 0x8001, 0x1, 0x10, 0xec2, 0x7, 0x7, 0x2, 0xfffffc01, 0x2, 0x9, 0x1, 0x6, 0x4, 0x5c3, 0xad46, 0x8, 0x6, 0x8, 0xd33, 0x3, 0x2, 0x100, 0x400, 0x8, 0xa, 0x8001, 0x6, 0x3, 0x5, 0xfffffffa, 0x35, 0x1a62, 0x7, 0xd, 0x2, 0x9, 0x790, 0x8, 0x3, 0x760, 0x7, 0x8, 0x1, 0x7, 0x3, 0x7, 0xffff, 0x7, 0x8, 0x6, 0x4a63, 0x3ff, 0x7, 0x8, 0x5, 0x5, 0x8, 0x5, 0x3b37, 0x9, 0x5, 0x2, 0xd0c9, 0x0, 0x8, 0x5a73, 0xb6, 0xa7, 0xe57, 0x0, 0x8, 0x8, 0x7fff, 0x80000001, 0x3, 0x1, 0x7fffffff, 0x3, 0x498, 0x6, 0x4, 0x9, 0x80000001, 0x7f, 0xffff7fff, 0xfffffffe, 0xffff, 0x5c, 0x0, 0x6, 0x2, 0x73, 0x7, 0x2, 0x8, 0x2, 0x6, 0x5, 0xb, 0x8, 0xae72, 0x5, 0x2, 0x9, 0x7fff, 0x8, 0x47, 0x10, 0x7f, 0xffffffff, 0x4, 0x401, 0xbd, 0x8000, 0x200000, 0xd, 0x8, 0x5, 0x532ec483, 0x6, 0x8, 0x7, 0x5, 0x3, 0x8, 0x7f, 0x6, 0x2, 0x4, 0x5, 0x3, 0x2, 0x20c, 0x52, 0x2933, 0x6, 0xa2b, 0x3ff, 0x9, 0x6, 0xe308, 0x0, 0x0, 0x4, 0x5, 0x2, 0x2, 0x6, 0x6, 0x7, 0x2, 0x8, 0x8, 0x56, 0x2, 0x6, 0x3, 0x7, 0x7fffffff, 0x40, 0x2, 0x6, 0xc0e, 0xffffff81, 0x0, 0x6, 0xfffffff9, 0x6, 0x1, 0x779d, 0x7ff, 0x2, 0x6, 0xd57d, 0x3, 0xfffffffd, 0x800, 0x1000, 0x4, 0x581b, 0x4db, 0x0, 0x0, 0xfff, 0x7ff, 0x950, 0x2, 0x80000001, 0x9, 0x3, 0x6, 0xdc23, 0x2, 0x3, 0x0, 0x1, 0x1, 0x3, 0x7, 0x7, 0x8, 0xfff, 0x8, 0x6, 0x8, 0x10000, 0x0, 0x6ca8, 0x8, 0x9c, 0xbe7, 0x8001, 0x9, 0x0, 0x4, 0x2, 0x0, 0x5, 0x0, 0x200, 0x207, 0x5, 0x8, 0xfffffe01, 0xfffffc01, 0x2, 0x8c4, 0x9, 0x2, 0x1, 0x6, 0x1, 0x76122c, 0x8, 0xe, 0x5, 0x7, 0x6, 0x6, 0xffffff80, 0x5, 0x9, 0x3, 0x6, 0x2, 0x200, 0x2, 0x3, 0x72c3, 0x1000, 0x8, 0x9, 0x8, 0x5, 0xfffffffd, 0x6, 0x6, 0x5, 0x6eba, 0x4, 0xffffffff, 0x4, 0x87, 0x100, 0x6, 0xb1, 0x5, 0xfffffffc, 0x1ff, 0xff, 0x101, 0x4, 0x7, 0x0, 0x9, 0x53, 0x5, 0xec2, 0x1, 0x40, 0x7, 0x5, 0x8, 0x6, 0xffffffca, 0x1, 0x2, 0x10, 0x6, 0x4, 0xd3c, 0x5, 0x9, 0x1, 0xffffff7f, 0x3, 0xffffffff, 0x9, 0x79, 0x400, 0x4, 0x3, 0x9, 0x8, 0x9, 0x3, 0xab, 0xa, 0x5, 0x3ff, 0xd0d, 0x1, 0x40, 0xffffffff, 0x7, 0x5, 0x4, 0x40, 0x7, 0x9ee, 0x3, 0x9, 0x7, 0x81, 0x200], 0x6, 0x400}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r1, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) 8m33.629441836s ago: executing program 0 (id=1700): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, 0x0, 0x800) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/90, 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) accept4(r2, 0x0, 0x0, 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r6, 0xe) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000007e1fc40b201407ca6b904ba3", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) listen(r1, 0x10000) r8 = socket(0x10, 0x803, 0x0) connect$phonet_pipe(r8, &(0x7f0000000040)={0x23, 0x9d, 0x38, 0x9}, 0x10) 8m33.249674752s ago: executing program 32 (id=1700): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, 0x0, 0x800) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/90, 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) accept4(r2, 0x0, 0x0, 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r6, 0xe) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000007e1fc40b201407ca6b904ba3", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) listen(r1, 0x10000) r8 = socket(0x10, 0x803, 0x0) connect$phonet_pipe(r8, &(0x7f0000000040)={0x23, 0x9d, 0x38, 0x9}, 0x10) 11.883731052s ago: executing program 3 (id=3045): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000a40)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e1ec103706d8b0bb468babe142dc2fe14205b8b103eddb77adad09c1cd3e78c0ab98a9d0600da41c52411b0bc760b0000000000000000000000008ea0e05be2ac47f4ba23042e3394cc134df55ab336103854782d00779d865d50bbb6c61f08784f127b2498604cdf3b96a1d4233d63", 0xa4}, {&(0x7f00000002c0)="7c1a2d6c68f2b19af5ad5b3fbc13c1398f392d4e4912a47fd97c06e88e711432b971d95d781d72632d1369d5bc4db51e6dedbc9dd35219282a22db679e0734d6f64f608f7db61ee9dcba4b43f11d902fb9ba9566c7f94f39dbcae20665c5e1172a2ea6060acb92714a17ee6714dc06068795e0892d041d8c2f35", 0x7a}, {0x0}, {&(0x7f0000000980)="daa783cd66e6cbbbe761ae363ca91d0f8a1045df4f9a9cd7a8add41c38c00df6cea93ba7396c327f6ae2bcb858d08a21269be6091e8e362d6512bc51b29efdbb313d21d11c4b0a6bb9acd9d29146205ecd9ebff1ea64713b1d959b2bf125b17cece0048ad53d337e6c35da2be8696ea6a8eaf61db2fb466ad55972df50c67b8963976381a454b9763bfe1fe54c638f5d86e693734e2ee396eca7782d29c9d912eb34a80d30164b03624bf7d276c30426acfdfee3bb5a6242f7dc67863bdb91", 0xbf}, {&(0x7f0000000780)="e4562c344990b6edfba22eb307933df7454c92ad4d6266de0c508ecec4d22f530e2327f8d8edf73c54257bfc7bb393243b5fcd5f56a49650811e03b2796eb019de5647a4ff4f117a3aae441e9826d45c4cfb9edb82ca009ecadf936755db280697d8fc0fc9a664186582b44242e82bd682a992b95c8724de45f89bb6fee4b7346cb39028e0ed564a02041ea3bfa729481fc09e97", 0x94}], 0x6}}, {{0x0, 0x0, &(0x7f0000001300)=[{0x0}, {&(0x7f0000000900)="e71dd690e092d1f7d9233f90328fc4d8e552aeacace7f18623c2a1a4fb1305b4cc04da7f1ca8b45b7ef4860dcf3b413c3d1150b9482d4e284bc3d8ed556680c03f55ca2beb3b11e780849db35e157a4cd187957c06335bbc3a69ac3e890289dfecefaa2a2d811c7332fb5fe2a705ef2a23501e5f0d6e7b7e", 0x78}], 0x2}}, {{&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10dbc2, 0x2}, 0x80, 0x0}}], 0x4, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x200000ea, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r2, 0x0, 0x0, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0xffff1000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0xb, 0x0, 0xb}, {0xd000, 0x2, 0x10, 0x3, 0x5, 0x7, 0x46, 0x6, 0x1, 0x4, 0xfa, 0xfc}, {0xf000, 0x8000000, 0x9, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x7, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xc, 0x7, 0x7f, 0x7, 0x2, 0x0, 0xfa, 0x29, 0xd, 0x9}, {0xeeee8000, 0xdddd0000, 0xf, 0x9, 0x5, 0x2, 0xa, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x8000000, 0x1000, 0xc, 0x2, 0x7, 0x2, 0x5, 0x5, 0x1, 0xd, 0x6, 0xa}, {0x10000, 0xdddd0000, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0x2000, 0xd, 0xe, 0x13, 0x3e, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x4000, 0x5}, {0x54000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x61, 0x1, 0xb800, 0x8000900, 0x0, [0x5, 0x2, 0x1, 0x1]}) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10.844201027s ago: executing program 1 (id=3049): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001280004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff02000000000000000000000000000104"], 0xfdef) 10.809717359s ago: executing program 3 (id=3050): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40e02, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/86, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000840)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0xfffffffe) 8.828538355s ago: executing program 3 (id=3051): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) write$ppp(r0, &(0x7f0000000240)='\"\b', 0x2) 8.581699406s ago: executing program 1 (id=3053): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x25dfdbff, {}, [{0x38, 0x1, [@m_vlan={0x34, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "6b05"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x408d4) 8.371511295s ago: executing program 1 (id=3056): syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_open_procfs$namespace(0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r3 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718", 0x50}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r1, @ANYBLOB="f1e46cfecf22c1a85e127e75b1262ddf5236b744a0a0f9802be44445f4ff0c869e6e6a1e962b56961d12", @ANYRESOCT=r3, @ANYRES8], 0x48) mmap(&(0x7f0000bdd000/0x1000)=nil, 0x1000, 0x2000002, 0x13, r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xfffffffffffffdff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000170a01010000fffffff7000000000008a1966862a68e67a03971537baadd09ffa552ac8bb9b86ca8f9c3a7da23c8aed6337a3ef8614aaacb644b7beec2a36c3a2c0cf60298672836d0fe398c63f9bfaf99c77de7a8f226503c0d218f4d38b26149a358b2aafec77e29b0efd643f4236110290dfe870118f5c02243cd6260506d63151327099d03000000c8b058e08d75a4e019bd5276fe716cdf0fee38d454ae0fbca751b862770b285a43924a01dc32f6fa64e39eb0b9bc398e23a4e609f15a142053051911380b8f324b01e8cc2fda5b9b33c16954a293bce01470c433e3485d2a9cd8c4605ea7f3"], 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r2], 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 8.299191478s ago: executing program 2 (id=3057): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x8000060000000001}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.356927849s ago: executing program 2 (id=3058): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9", 0x1e}, {&(0x7f00000006c0)='\b\f', 0x2}], 0x2}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00200001600018000000000000000000000000000bbfe800000004000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.355722909s ago: executing program 1 (id=3059): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40e02, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/86, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000840)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0xfffffffe) 5.879918534s ago: executing program 1 (id=3060): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000001c0)={0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 5.285923169s ago: executing program 3 (id=3061): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa57, 0x80000001, 0x0, 0x0, {0x40000006, 0x0, 0x0, 0x0, 0x1000001, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, r2, 0x10b, 0xb333}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000006840)={0x2020}, 0x2020) 5.209488893s ago: executing program 4 (id=3062): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001280004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff02000000000000000000000000000104"], 0xfdef) 4.974520253s ago: executing program 4 (id=3063): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) flock(r2, 0x1) flock(r2, 0x1) flock(r1, 0x5) 4.840000449s ago: executing program 2 (id=3064): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x25dfdbff, {}, [{0x38, 0x1, [@m_vlan={0x34, 0xc, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "6b05"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x408d4) 4.516280203s ago: executing program 2 (id=3065): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c}}], 0x20}, 0x40000002) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.504243243s ago: executing program 4 (id=3066): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) open(0x0, 0x84242, 0x1df2a23c5997fa7f) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 4.435324046s ago: executing program 4 (id=3067): syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_open_procfs$namespace(0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r3 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718", 0x50}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r1, @ANYBLOB="f1e46cfecf22c1a85e127e75b1262ddf5236b744a0a0f9802be44445f4ff0c869e6e6a1e962b56961d12", @ANYRESOCT=r3, @ANYRES8], 0x48) mmap(&(0x7f0000bdd000/0x1000)=nil, 0x1000, 0x2000002, 0x13, r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xfffffffffffffdff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000170a01010000fffffff7000000000008a1966862a68e67a03971537baadd09ffa552ac8bb9b86ca8f9c3a7da23c8aed6337a3ef8614aaacb644b7beec2a36c3a2c0cf60298672836d0fe398c63f9bfaf99c77de7a8f226503c0d218f4d38b26149a358b2aafec77e29b0efd643f4236110290dfe870118f5c02243cd6260506d63151327099d03000000c8b058e08d75a4e019bd5276fe716cdf0fee38d454ae0fbca751b862770b285a43924a01dc32f6fa64e39eb0b9bc398e23a4e609f15a142053051911380b8f324b01e8cc2fda5b9b33c16954a293bce01470c433e3485d2a9cd8c4605ea7f3"], 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r2], 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4.416150037s ago: executing program 2 (id=3068): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40e02, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000440)=""/53, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000840)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0xfffffffe) 359.716384ms ago: executing program 2 (id=3069): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x24008040) r0 = socket$inet6_udp(0xa, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x101, 0x4000, 0x0, 0xffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x8, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 256.856509ms ago: executing program 1 (id=3070): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xd0) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019bde521023398a71d7d801020301090224000105"], 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r1, &(0x7f00000004c0)="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", 0x17a, 0x805, 0x0, 0x0) recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) 256.670169ms ago: executing program 3 (id=3071): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001280004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff02000000000000000000000000000104"], 0xfdef) 236.43062ms ago: executing program 4 (id=3072): socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) io_uring_setup(0x631b, &(0x7f0000000540)={0x0, 0xd18d, 0x2, 0x2000000a, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x80, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_mems\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 73.017387ms ago: executing program 4 (id=3073): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newtaction={0x48, 0x1e, 0x109, 0x100, 0x25dfdbff, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x408d4) 0s ago: executing program 3 (id=3074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) flock(r2, 0x1) flock(r2, 0x1) flock(r1, 0x5) kernel console output (not intermixed with test programs): ] overlay: ./file0 is not a directory [ 1175.668423][T14892] syz_tun: entered allmulticast mode [ 1175.675738][T14891] syz_tun: left allmulticast mode [ 1175.695444][T11923] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1175.885651][T11923] usb 5-1: Using ep0 maxpacket: 8 [ 1175.898050][T11923] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.925639][T11923] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1175.936693][T14894] loop3: detected capacity change from 0 to 512 [ 1175.971110][T11923] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1175.986902][T11923] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1176.011541][T11923] usb 5-1: Product: syz [ 1176.019362][T14894] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1176.055488][T11923] usb 5-1: Manufacturer: syz [ 1176.069907][T11923] usb 5-1: SerialNumber: syz [ 1176.106493][T11923] usb 5-1: config 0 descriptor?? [ 1176.137752][T11923] imon_raw 5-1:0.0: IR endpoint missing [ 1176.157149][T14887] loop2: detected capacity change from 0 to 32768 [ 1176.196026][T14894] EXT4-fs error (device loop3): ext4_init_orphan_info:621: comm syz.3.2274: orphan file block 0: bad magic [ 1176.268565][T14894] EXT4-fs (loop3): mount failed [ 1176.365061][T14887] JBD2: Ignoring recovery information on journal [ 1176.368457][T11923] usb 5-1: USB disconnect, device number 19 [ 1177.542141][T14887] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1177.643625][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.652005][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.709836][T14887] overlayfs: upper fs does not support tmpfile. [ 1177.737153][T14887] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1177.784105][T14911] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1177.800249][T14887] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature [ 1177.841860][T14887] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1177.894160][T14887] OCFS2: File system is now read-only. [ 1177.904284][T14887] (syz.2.2272,14887,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 1177.930236][T14887] (syz.2.2272,14887,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 1177.940374][T14887] (syz.2.2272,14887,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 1177.960665][T14887] (syz.2.2272,14887,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 1177.975438][T14887] (syz.2.2272,14887,0):ocfs2_claim_metadata:2018 ERROR: status = -30 [ 1178.025472][T14887] (syz.2.2272,14887,0):ocfs2_claim_metadata:2031 ERROR: status = -30 [ 1178.036468][T14887] (syz.2.2272,14887,0):ocfs2_create_xattr_block:2887 ERROR: status = -30 [ 1178.044947][T14887] (syz.2.2272,14887,0):ocfs2_xattr_block_set:2968 ERROR: status = -30 [ 1178.065836][T14887] overlayfs: failed to set xattr on upper [ 1178.085484][T14887] overlayfs: ...falling back to redirect_dir=nofollow. [ 1178.092457][T14887] overlayfs: ...falling back to index=off. [ 1178.125426][T14887] overlayfs: ...falling back to uuid=null. [ 1178.145962][T14887] overlayfs: upper fs missing required features. [ 1178.226704][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 1178.443202][T14920] syz_tun: entered allmulticast mode [ 1178.457647][T14919] syz_tun: left allmulticast mode [ 1180.225537][T11923] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1181.226642][T11923] usb 5-1: Using ep0 maxpacket: 32 [ 1181.236052][T14941] Unsupported ieee802154 address type: 0 [ 1181.253211][T11923] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1181.261400][T11923] usb 5-1: config 0 has no interface number 0 [ 1181.277441][T11923] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1181.303247][T11923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.318755][T11923] usb 5-1: Product: syz [ 1181.326359][T11923] usb 5-1: Manufacturer: syz [ 1181.331078][T11923] usb 5-1: SerialNumber: syz [ 1181.356678][T11923] usb 5-1: config 0 descriptor?? [ 1181.379310][T11923] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1181.505488][T12406] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1181.576475][T11923] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1181.626021][T11923] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1181.695575][T12406] usb 2-1: Using ep0 maxpacket: 8 [ 1181.719612][T12406] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.779784][T12406] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1181.800713][T12406] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1181.812877][T12406] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1181.822337][T12406] usb 2-1: Product: syz [ 1181.829598][T12406] usb 2-1: Manufacturer: syz [ 1181.834304][T12406] usb 2-1: SerialNumber: syz [ 1181.845136][T12406] usb 2-1: config 0 descriptor?? [ 1181.900366][T12406] imon_raw 2-1:0.0: IR endpoint missing [ 1182.072240][T13750] usb 2-1: USB disconnect, device number 57 [ 1182.471470][T14958] syz_tun: entered allmulticast mode [ 1182.490511][T14957] syz_tun: left allmulticast mode [ 1183.745629][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1183.804838][ T27] usb 5-1: USB disconnect, device number 20 [ 1183.818542][ T27] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1183.833476][ T27] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1183.864221][ T27] quatech2 5-1:0.51: device disconnected [ 1184.231753][T14980] netlink: 'syz.1.2299': attribute type 4 has an invalid length. [ 1184.239672][T14980] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2299'. [ 1186.447898][T14987] Unsupported ieee802154 address type: 0 [ 1186.755465][T12406] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1188.606703][T12406] usb 4-1: Using ep0 maxpacket: 8 [ 1188.625457][T12406] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.636030][T12406] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1188.683006][T12406] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1188.706504][T12406] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1188.725960][T12406] usb 4-1: Product: syz [ 1188.734116][T12406] usb 4-1: Manufacturer: syz [ 1188.739209][T12406] usb 4-1: SerialNumber: syz [ 1188.746419][T12406] usb 4-1: config 0 descriptor?? [ 1188.755142][T12406] imon_raw 4-1:0.0: IR endpoint missing [ 1188.835609][ T969] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1188.895919][T15001] binder: BINDER_SET_CONTEXT_MGR already set [ 1188.901952][T15001] binder: 15000:15001 ioctl 4018620d 200000004a80 returned -16 [ 1188.976037][ T27] usb 4-1: USB disconnect, device number 51 [ 1189.035586][ T969] usb 2-1: Using ep0 maxpacket: 32 [ 1189.048334][ T969] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1189.060416][ T969] usb 2-1: config 0 has no interface number 0 [ 1189.073076][ T969] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1189.082660][ T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.091052][ T969] usb 2-1: Product: syz [ 1189.099485][ T969] usb 2-1: Manufacturer: syz [ 1189.104122][ T969] usb 2-1: SerialNumber: syz [ 1189.173674][T15007] netlink: 'syz.4.2310': attribute type 4 has an invalid length. [ 1189.181818][T15007] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2310'. [ 1190.362054][ T969] usb 2-1: config 0 descriptor?? [ 1190.375711][ T969] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1190.479594][ T969] usb 2-1: qt2_attach - failed to power on unit: -71 [ 1190.486706][ T969] quatech2: probe of 2-1:0.51 failed with error -71 [ 1190.546362][ T969] usb 2-1: USB disconnect, device number 58 [ 1190.564542][T15009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2313'. [ 1190.759899][T15011] loop2: detected capacity change from 0 to 2048 [ 1190.924146][T15011] loop2: p1 < > p4 < > [ 1190.955620][T15011] loop2: partition table partially beyond EOD, truncated [ 1191.044458][T15011] loop2: p4 start 42180 is beyond EOD, truncated [ 1191.077832][T15021] loop4: detected capacity change from 0 to 32768 [ 1191.087522][T15021] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2315 (15021) [ 1191.110077][T15021] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1191.120422][T15021] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1191.129323][T15021] BTRFS info (device loop4): turning on async discard [ 1191.136180][T15021] BTRFS info (device loop4): metadata ratio 0 [ 1191.142299][T15021] BTRFS info (device loop4): setting nodatasum [ 1191.148542][T15021] BTRFS info (device loop4): use zlib compression, level 3 [ 1191.155823][T15021] BTRFS info (device loop4): force clearing of disk cache [ 1191.162971][T15021] BTRFS info (device loop4): enabling auto defrag [ 1191.169481][T15021] BTRFS info (device loop4): using free space tree [ 1191.248982][T15021] BTRFS info (device loop4): enabling ssd optimizations [ 1191.269422][T15021] BTRFS info (device loop4): rebuilding free space tree [ 1191.349453][T15043] binder: BINDER_SET_CONTEXT_MGR already set [ 1191.365039][T15043] binder: 15042:15043 ioctl 4018620d 200000004a80 returned -16 [ 1191.378179][T12268] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1191.943251][T15054] Unsupported ieee802154 address type: 0 [ 1192.215518][ T969] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1192.371587][ T5792] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1192.382686][ T5792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1192.391862][ T5792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1192.429702][ T5792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1192.436843][ T969] usb 5-1: Using ep0 maxpacket: 8 [ 1192.446451][ T5792] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1192.453840][ T5792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1192.461629][ T969] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.474640][ T969] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1192.493479][ T969] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1192.503749][ T969] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1192.512054][ T969] usb 5-1: Product: syz [ 1192.516421][ T5785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1192.523466][ T969] usb 5-1: Manufacturer: syz [ 1192.528176][ T969] usb 5-1: SerialNumber: syz [ 1192.544470][ T5785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1192.552616][ T969] usb 5-1: config 0 descriptor?? [ 1192.557760][ T5785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1192.568378][ T969] imon_raw 5-1:0.0: IR endpoint missing [ 1192.595782][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1192.613664][ T5785] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1192.622219][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1192.717582][T15066] loop1: detected capacity change from 0 to 512 [ 1192.726578][T15066] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1192.789422][T15066] EXT4-fs error (device loop1): ext4_init_orphan_info:621: comm syz.1.2327: orphan file block 0: bad magic [ 1192.790431][ T5821] usb 5-1: USB disconnect, device number 21 [ 1192.824070][T15066] EXT4-fs (loop1): mount failed [ 1192.874384][ T9188] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1192.893607][T15069] binder: 15068:15069 ioctl c0306201 0 returned -14 [ 1194.080263][T15078] syz_tun: entered allmulticast mode [ 1194.316713][T15083] loop4: detected capacity change from 0 to 32768 [ 1194.329693][T15083] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2333 (15083) [ 1194.357343][T15083] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1194.367601][T15083] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1194.376304][T15083] BTRFS info (device loop4): turning on async discard [ 1194.383384][T15083] BTRFS info (device loop4): metadata ratio 0 [ 1194.389550][T15083] BTRFS info (device loop4): setting nodatasum [ 1194.395802][T15083] BTRFS info (device loop4): using free space tree [ 1194.528011][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.568401][T15083] BTRFS info (device loop4): enabling ssd optimizations [ 1194.588186][T15081] syz_tun: left allmulticast mode [ 1194.745610][ T5785] Bluetooth: hci4: command tx timeout [ 1194.799990][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.823357][T15108] binder: 15104:15108 ioctl c0306201 0 returned -14 [ 1195.001139][ T28] audit: type=1800 audit(1778601521.094:98): pid=15109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2333" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 1195.353116][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.398351][T15111] loop3: detected capacity change from 0 to 512 [ 1195.424161][T15111] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1195.454298][T15111] EXT4-fs error (device loop3): ext4_init_orphan_info:621: comm syz.3.2337: orphan file block 0: bad magic [ 1195.516956][T15111] EXT4-fs (loop3): mount failed [ 1195.524233][T12268] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1195.740612][T15118] Unsupported ieee802154 address type: 0 [ 1195.768345][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.831097][T15060] chnl_net:caif_netlink_parms(): no params data found [ 1196.024515][ T5821] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1196.097565][T15060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.104833][T15060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.112285][T15060] bridge_slave_0: entered allmulticast mode [ 1196.120260][T15060] bridge_slave_0: entered promiscuous mode [ 1196.132590][T15060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.140167][T15060] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.148124][T15060] bridge_slave_1: entered allmulticast mode [ 1196.155740][T15060] bridge_slave_1: entered promiscuous mode [ 1196.216397][T15060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.237709][T15060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1196.257490][ T5821] usb 2-1: Using ep0 maxpacket: 8 [ 1196.276533][ T5821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.314555][ T5821] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1196.339877][ T5821] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1196.355632][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1196.373901][ T5821] usb 2-1: Product: syz [ 1196.393111][ T5821] usb 2-1: Manufacturer: syz [ 1196.406782][ T5821] usb 2-1: SerialNumber: syz [ 1196.433340][ T5821] usb 2-1: config 0 descriptor?? [ 1196.444495][ T5821] imon_raw 2-1:0.0: IR endpoint missing [ 1196.463283][T15060] team0: Port device team_slave_0 added [ 1196.483372][T15060] team0: Port device team_slave_1 added [ 1196.572144][T15060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1196.595501][T15060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1196.646225][ T969] usb 2-1: USB disconnect, device number 59 [ 1196.663174][T15060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1196.697478][ T11] tipc: Left network mode [ 1196.716942][T15060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1196.723953][T15060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1196.765524][ T5785] Bluetooth: hci4: command tx timeout [ 1196.780966][T15060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1196.831739][T15060] hsr_slave_0: entered promiscuous mode [ 1196.838647][T15060] hsr_slave_1: entered promiscuous mode [ 1196.845202][T15060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1196.852871][T15060] Cannot create hsr debugfs directory [ 1197.353305][T15146] binder: 15145:15146 ioctl c0306201 0 returned -14 [ 1197.393632][T15143] syz_tun: entered allmulticast mode [ 1197.452039][T15148] syz_tun: left allmulticast mode [ 1198.409678][T15157] loop1: detected capacity change from 0 to 32768 [ 1198.456048][T15157] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2347 (15157) [ 1198.491922][T15157] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1198.502233][T15157] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1198.510974][T15157] BTRFS info (device loop1): turning on async discard [ 1198.517999][T15157] BTRFS info (device loop1): metadata ratio 0 [ 1198.524109][T15157] BTRFS info (device loop1): setting nodatasum [ 1198.530406][T15157] BTRFS info (device loop1): using free space tree [ 1198.574839][T15157] BTRFS info (device loop1): enabling ssd optimizations [ 1198.849018][ T28] audit: type=1800 audit(1778601524.994:99): pid=15177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2347" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 1198.849174][ T5785] Bluetooth: hci4: command tx timeout [ 1199.348801][ T5782] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1199.451819][T15180] Unsupported ieee802154 address type: 0 [ 1199.605036][T15185] loop3: detected capacity change from 0 to 512 [ 1199.636765][T15185] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1199.682475][T15185] EXT4-fs error (device loop3): ext4_init_orphan_info:621: comm syz.3.2352: orphan file block 0: bad magic [ 1199.705748][T15185] EXT4-fs (loop3): mount failed [ 1199.726483][ T5821] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1199.956630][ T5821] usb 5-1: Using ep0 maxpacket: 8 [ 1199.977938][ T5821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.001672][ T5821] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1200.037698][ T5821] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1200.055433][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1200.063551][ T5821] usb 5-1: Product: syz [ 1200.105911][ T5821] usb 5-1: Manufacturer: syz [ 1200.110564][ T5821] usb 5-1: SerialNumber: syz [ 1200.146806][ T5821] usb 5-1: config 0 descriptor?? [ 1200.160236][ T5821] imon_raw 5-1:0.0: IR endpoint missing [ 1200.358483][ T27] usb 5-1: USB disconnect, device number 22 [ 1200.707975][ T11] hsr_slave_0: left promiscuous mode [ 1200.714079][ T11] hsr_slave_1: left promiscuous mode [ 1200.729044][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1200.741597][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1200.752477][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1200.766513][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1200.790506][ T11] bridge_slave_1: left allmulticast mode [ 1200.800427][ T11] bridge_slave_1: left promiscuous mode [ 1200.807887][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.822704][ T11] bridge_slave_0: left allmulticast mode [ 1200.829602][ T11] bridge_slave_0: left promiscuous mode [ 1200.840278][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.915692][ T5785] Bluetooth: hci4: command tx timeout [ 1200.943805][ T11] bond_slave_0: left promiscuous mode [ 1200.949621][ T11] bond_slave_1: left promiscuous mode [ 1201.027642][ T11] veth1_macvtap: left promiscuous mode [ 1201.033662][ T11] veth0_macvtap: left promiscuous mode [ 1201.054448][T15193] loop1: detected capacity change from 0 to 32768 [ 1201.097516][ T11] veth1_vlan: left promiscuous mode [ 1201.103080][ T11] veth0_vlan: left promiscuous mode [ 1201.153126][T15193] JBD2: Ignoring recovery information on journal [ 1201.258597][T15193] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1201.325543][T15193] overlayfs: upper fs does not support tmpfile. [ 1201.339947][T15193] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1201.475540][T15193] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature [ 1201.662468][T15193] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1201.855156][T15193] OCFS2: File system is now read-only. [ 1201.900133][T15193] (syz.1.2354,15193,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 1201.983092][T15193] (syz.1.2354,15193,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 1202.064226][T15193] (syz.1.2354,15193,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 1202.156121][T15193] (syz.1.2354,15193,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 1202.227017][T15193] (syz.1.2354,15193,0):ocfs2_claim_metadata:2018 ERROR: status = -30 [ 1202.235193][T15193] (syz.1.2354,15193,0):ocfs2_claim_metadata:2031 ERROR: status = -30 [ 1202.323291][T15193] (syz.1.2354,15193,0):ocfs2_create_xattr_block:2887 ERROR: status = -30 [ 1202.354316][T15193] (syz.1.2354,15193,0):ocfs2_xattr_block_set:2968 ERROR: status = -30 [ 1202.385846][T15193] overlayfs: failed to set xattr on upper [ 1202.391620][T15193] overlayfs: ...falling back to redirect_dir=nofollow. [ 1202.405821][T15193] overlayfs: ...falling back to index=off. [ 1202.412046][T15193] overlayfs: ...falling back to uuid=null. [ 1202.420200][T15193] overlayfs: upper fs missing required features. [ 1204.100543][ T5782] ocfs2: Unmounting device (7,1) on (node local) [ 1204.132296][ T11] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 1204.402265][T15223] Unsupported ieee802154 address type: 0 [ 1204.537696][ T11] bond1 (unregistering): Released all slaves [ 1204.685646][ T27] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1204.878063][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 1204.913891][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.004456][ T27] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1205.113652][ T27] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1205.185112][ T27] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1205.284104][ T27] usb 5-1: Product: syz [ 1205.331161][ T27] usb 5-1: Manufacturer: syz [ 1205.376274][ T27] usb 5-1: SerialNumber: syz [ 1205.492839][ T27] usb 5-1: config 0 descriptor?? [ 1205.549034][ T27] imon_raw 5-1:0.0: IR endpoint missing [ 1205.759466][ T27] usb 5-1: USB disconnect, device number 23 [ 1205.941385][T15236] loop3: detected capacity change from 0 to 512 [ 1205.958546][T15236] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1205.980394][T15236] EXT4-fs error (device loop3): ext4_init_orphan_info:621: comm syz.3.2365: orphan file block 0: bad magic [ 1205.993402][T15236] EXT4-fs (loop3): mount failed [ 1206.146850][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1206.202517][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1206.293749][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1206.399138][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1208.723232][ T11] bond0 (unregistering): Released all slaves [ 1208.975442][T15228] netlink: 'syz.1.2363': attribute type 4 has an invalid length. [ 1208.983207][T15228] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2363'. [ 1209.224517][T15060] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1209.250870][T15060] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1209.270228][T15060] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1209.316405][T15060] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1209.544066][T15272] syz_tun: entered allmulticast mode [ 1209.631839][T15271] syz_tun: left allmulticast mode [ 1209.734394][T15060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1209.803040][T15060] 8021q: adding VLAN 0 to HW filter on device team0 [ 1209.829883][T13600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.837089][T13600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1209.930571][T13600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.937808][T13600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1210.043947][T15285] loop4: detected capacity change from 0 to 512 [ 1210.113877][T15285] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1210.134019][T15060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1210.176409][T15285] EXT4-fs error (device loop4): ext4_init_orphan_info:621: comm syz.4.2377: orphan file block 0: bad magic [ 1210.220323][T15285] EXT4-fs (loop4): mount failed [ 1210.484220][ T11] IPVS: stop unused estimator thread 0... [ 1210.854532][T15060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1210.942429][T15306] netlink: 'syz.1.2379': attribute type 4 has an invalid length. [ 1210.950433][T15306] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2379'. [ 1211.967639][T15060] veth0_vlan: entered promiscuous mode [ 1211.999915][T15060] veth1_vlan: entered promiscuous mode [ 1212.097639][T15060] veth0_macvtap: entered promiscuous mode [ 1212.129078][T15060] veth1_macvtap: entered promiscuous mode [ 1212.227170][T15060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1212.266533][T15060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.302757][T15060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1212.335444][T15060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.345309][T15060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1212.387117][T15060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.407401][T15060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1212.460206][T15324] syz_tun: entered allmulticast mode [ 1212.480561][T15326] syz_tun: left allmulticast mode [ 1212.497403][T15060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1212.525449][T15060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.535315][T15060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1212.569150][T15060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.607311][T15060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1212.643115][T15060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.684498][T15060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1212.719349][T15060] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.756428][T15060] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.778204][T15060] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.805130][T15060] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.983748][T15315] loop1: detected capacity change from 0 to 32768 [ 1213.007026][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.022623][T15315] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2381 (15315) [ 1213.044373][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.111090][T15315] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1213.141971][T15315] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1213.170181][ T9093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.190111][T15315] BTRFS info (device loop1): turning on async discard [ 1213.207486][ T9093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.245909][T15315] BTRFS info (device loop1): metadata ratio 0 [ 1213.260754][T15315] BTRFS info (device loop1): setting nodatasum [ 1213.282481][T15315] BTRFS info (device loop1): use zlib compression, level 3 [ 1213.316117][T15315] BTRFS info (device loop1): force clearing of disk cache [ 1213.357744][T15315] BTRFS info (device loop1): enabling auto defrag [ 1213.364243][T15315] BTRFS info (device loop1): using free space tree [ 1213.580170][T15315] BTRFS info (device loop1): enabling ssd optimizations [ 1213.621240][T15315] BTRFS info (device loop1): rebuilding free space tree [ 1213.744615][ T28] audit: type=1800 audit(1778601539.884:100): pid=15315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2381" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 1213.849878][T15378] loop4: detected capacity change from 0 to 512 [ 1213.900116][T15378] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1213.932392][T15380] syz_tun: entered allmulticast mode [ 1213.944052][T15378] EXT4-fs error (device loop4): ext4_init_orphan_info:621: comm syz.4.2391: orphan file block 0: bad magic [ 1214.003175][T15380] syz_tun: left allmulticast mode [ 1214.015853][T15378] EXT4-fs (loop4): mount failed [ 1214.203851][ T5782] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1215.035975][T15407] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2400'. [ 1215.564082][T15421] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1215.574410][T15421] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1215.583235][T15421] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1215.593686][T15421] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1215.601852][T15421] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1215.611247][T15421] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1215.705765][T15423] syz_tun: entered allmulticast mode [ 1215.870277][T15423] syz_tun: left allmulticast mode [ 1216.142642][T15417] loop2: detected capacity change from 0 to 32768 [ 1216.157895][T15417] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2402 (15417) [ 1216.203848][T15417] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1216.225536][T15417] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1216.234227][T15417] BTRFS info (device loop2): turning on async discard [ 1216.255440][T15417] BTRFS info (device loop2): metadata ratio 0 [ 1216.261562][T15417] BTRFS info (device loop2): setting nodatasum [ 1216.285282][T15417] BTRFS info (device loop2): use zlib compression, level 3 [ 1216.306288][T15417] BTRFS info (device loop2): force clearing of disk cache [ 1216.313457][T15417] BTRFS info (device loop2): enabling auto defrag [ 1216.355626][T15417] BTRFS info (device loop2): using free space tree [ 1216.372764][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.562213][T15417] BTRFS info (device loop2): enabling ssd optimizations [ 1216.573589][T15417] BTRFS info (device loop2): rebuilding free space tree [ 1216.654601][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.676273][ T28] audit: type=1800 audit(1778601542.804:101): pid=15417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2402" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 1216.715438][ T5879] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1216.874166][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.897116][ T5879] usb 4-1: device descriptor read/64, error -71 [ 1216.980318][T15060] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1217.041954][T15419] chnl_net:caif_netlink_parms(): no params data found [ 1217.156231][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.170675][ T5879] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1217.356405][ T5879] usb 4-1: device descriptor read/64, error -71 [ 1217.494213][ T5879] usb usb4-port1: attempt power cycle [ 1217.500725][T15471] Bluetooth: MGMT ver 1.22 [ 1217.505298][T15471] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1217.563808][T15419] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.603576][T15419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.626140][T15419] bridge_slave_0: entered allmulticast mode [ 1217.641843][T15419] bridge_slave_0: entered promiscuous mode [ 1217.715931][ T5785] Bluetooth: hci0: command tx timeout [ 1217.735524][T15419] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.742885][T15419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.750840][T15419] bridge_slave_1: entered allmulticast mode [ 1217.758499][T15419] bridge_slave_1: entered promiscuous mode [ 1217.824257][T15419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.887840][T15419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1217.940989][ T5879] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1217.963137][T15419] team0: Port device team_slave_0 added [ 1217.977646][ T5879] usb 4-1: device descriptor read/8, error -71 [ 1217.988435][T15419] team0: Port device team_slave_1 added [ 1218.155984][T15419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1218.175451][T15419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1218.239178][T15419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1218.271007][ T5879] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1218.287694][T15419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1218.294754][T15419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1218.325018][ T5879] usb 4-1: device descriptor read/8, error -71 [ 1218.331497][T15419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1218.445631][ T5879] usb usb4-port1: unable to enumerate USB device [ 1218.454687][T15419] hsr_slave_0: entered promiscuous mode [ 1218.505806][T15419] hsr_slave_1: entered promiscuous mode [ 1218.525039][T15419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1218.534343][T15419] Cannot create hsr debugfs directory [ 1219.194725][T15498] loop4: detected capacity change from 0 to 32768 [ 1219.218654][T15498] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2415 (15498) [ 1219.257981][T15498] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1219.287039][T15498] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1219.296243][T15498] BTRFS info (device loop4): turning on async discard [ 1219.303145][T15498] BTRFS info (device loop4): metadata ratio 0 [ 1219.309779][T15498] BTRFS info (device loop4): setting nodatasum [ 1219.323460][T15498] BTRFS info (device loop4): use zlib compression, level 3 [ 1219.332325][T15498] BTRFS info (device loop4): force clearing of disk cache [ 1219.347783][T15498] BTRFS info (device loop4): enabling auto defrag [ 1219.354360][T15498] BTRFS info (device loop4): using free space tree [ 1219.505269][T15498] BTRFS info (device loop4): enabling ssd optimizations [ 1219.521674][T15498] BTRFS info (device loop4): rebuilding free space tree [ 1219.665538][ T28] audit: type=1800 audit(1778601545.804:102): pid=15498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2415" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 1219.795558][ T5785] Bluetooth: hci0: command tx timeout [ 1219.987384][T12268] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1220.170319][ T8271] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop4 scanned by udevd (8271) [ 1220.330771][T15542] netlink: 'syz.2.2425': attribute type 7 has an invalid length. [ 1220.362561][T15542] netlink: 'syz.2.2425': attribute type 8 has an invalid length. [ 1220.500584][ T11] hsr_slave_0: left promiscuous mode [ 1220.531612][ T11] hsr_slave_1: left promiscuous mode [ 1220.590555][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1220.624929][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1220.716344][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1220.723806][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1220.824601][ T11] bridge_slave_1: left allmulticast mode [ 1220.840351][ T11] bridge_slave_1: left promiscuous mode [ 1220.856661][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.149325][ T11] bridge_slave_0: left allmulticast mode [ 1221.155056][ T11] bridge_slave_0: left promiscuous mode [ 1221.161382][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.681709][ T5785] Bluetooth: hci0: command tx timeout [ 1222.714927][ T11] bond_slave_0: left promiscuous mode [ 1222.720428][ T11] bond_slave_1: left promiscuous mode [ 1222.733487][ T11] veth1_macvtap: left promiscuous mode [ 1222.761348][ T11] veth0_macvtap: left promiscuous mode [ 1222.786250][ T11] veth1_vlan: left promiscuous mode [ 1222.791620][ T11] veth0_vlan: left promiscuous mode [ 1222.836845][T15577] Unsupported ieee802154 address type: 0 [ 1223.127677][T12406] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1223.269871][ T11] bond1 (unregistering): (slave macvlan3): Releasing backup interface [ 1223.341423][T12406] usb 3-1: Using ep0 maxpacket: 8 [ 1223.363363][T12406] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.389147][T12406] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1223.416518][T12406] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1223.440137][T12406] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1223.455383][T12406] usb 3-1: Product: syz [ 1223.459599][T12406] usb 3-1: Manufacturer: syz [ 1223.464225][T12406] usb 3-1: SerialNumber: syz [ 1223.496685][T12406] usb 3-1: config 0 descriptor?? [ 1223.518330][T12406] imon_raw 3-1:0.0: IR endpoint missing [ 1223.574028][ T11] bond2 (unregistering): Released all slaves [ 1223.734500][ T5821] usb 3-1: USB disconnect, device number 47 [ 1223.890412][ T11] bond1 (unregistering): Released all slaves [ 1224.775526][ T5785] Bluetooth: hci0: command tx timeout [ 1224.937864][T15598] loop4: detected capacity change from 0 to 128 [ 1226.592727][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1226.601943][T15598] FAT-fs (loop4): Filesystem has been set read-only [ 1226.609219][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1226.625702][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1226.634191][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1226.643511][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1226.654864][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1226.665228][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1226.674074][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1226.689734][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1226.698565][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1226.707958][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1226.746334][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1226.754807][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1226.795504][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1226.811422][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1226.840369][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1226.865575][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1226.884330][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1226.906803][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1226.915287][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1226.947381][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1226.992757][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1227.022658][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1227.041270][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1227.052643][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1227.091650][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1227.101029][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1227.112349][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1227.132534][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1227.154629][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1227.185837][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1227.194324][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1227.223755][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1227.255831][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1227.264327][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1227.294067][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1227.304637][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1227.318687][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1227.329238][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1227.337996][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1227.351746][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1227.364633][T15598] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1227.412040][ T28] audit: type=1800 audit(1778601553.544:103): pid=15598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2444" name="file1" dev="loop4" ino=1048627 res=0 errno=0 [ 1227.445051][T15598] syz.4.2444 (15598) used greatest stack depth: 19568 bytes left [ 1227.807876][T15612] loop4: detected capacity change from 0 to 1764 [ 1228.576073][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1228.707872][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1228.783696][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1228.821146][T15621] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1228.862708][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1228.945566][ T969] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 1229.065255][T15625] Unsupported ieee802154 address type: 0 [ 1229.148117][ T969] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.158798][ T969] usb 3-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 1229.171751][ T969] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1229.181329][ T969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.189643][ T969] usb 3-1: Product: syz [ 1229.194018][ T969] usb 3-1: Manufacturer: syz [ 1229.199860][ T969] usb 3-1: SerialNumber: syz [ 1229.342629][ T11] bond0 (unregistering): Released all slaves [ 1229.346009][T11923] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1229.442156][ T969] usb 3-1: USB disconnect, device number 48 [ 1229.535669][T11923] usb 4-1: Using ep0 maxpacket: 8 [ 1229.569436][T11923] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.597311][T11923] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1229.634551][T11923] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1229.654793][T15419] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1229.681696][T11923] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1229.696486][T11923] usb 4-1: Product: syz [ 1229.700315][T15419] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1229.700681][T11923] usb 4-1: Manufacturer: syz [ 1229.732821][T11923] usb 4-1: SerialNumber: syz [ 1229.752384][T11923] usb 4-1: config 0 descriptor?? [ 1229.767332][T15419] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1229.784814][T11923] imon_raw 4-1:0.0: IR endpoint missing [ 1229.824409][T15419] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1229.988304][T11923] usb 4-1: USB disconnect, device number 56 [ 1230.147023][T15419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1230.191201][T15419] 8021q: adding VLAN 0 to HW filter on device team0 [ 1230.210672][T13600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.217859][T13600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1230.271568][T13600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.278758][T13600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1230.915671][T15660] netlink: 'syz.3.2458': attribute type 4 has an invalid length. [ 1230.925518][T15660] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2458'. [ 1231.134924][T15659] loop2: detected capacity change from 0 to 8192 [ 1231.175919][T15419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1231.333077][T15419] veth0_vlan: entered promiscuous mode [ 1231.357833][T15670] loop4: detected capacity change from 0 to 512 [ 1231.381297][T15670] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1231.400616][T15670] EXT4-fs error (device loop4): ext4_init_orphan_info:621: comm syz.4.2462: orphan file block 0: bad magic [ 1231.420993][T15670] EXT4-fs (loop4): mount failed [ 1231.454953][T15419] veth1_vlan: entered promiscuous mode [ 1231.757839][T15419] veth0_macvtap: entered promiscuous mode [ 1231.796295][T15419] veth1_macvtap: entered promiscuous mode [ 1231.888051][T15419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.940795][T15419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.960502][T15419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.995526][T15419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.033327][T15685] Bluetooth: hci0: unsupported parameter 255 [ 1232.051287][T15419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.056490][T15685] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1232.085198][T15419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.206114][T15419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1232.270605][T15419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.353858][T15419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.380648][T15688] loop2: detected capacity change from 0 to 32768 [ 1232.396383][T15688] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 1232.440476][T15419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.513982][T15419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.564619][T15419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.609592][T15419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.672235][T15419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1233.000604][ T8271] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 1233.041236][T15419] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.080818][T15419] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.135262][T15419] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.174854][T15419] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.599302][ T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.629879][ T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.650209][T15707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2469'. [ 1233.677721][T13600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.705718][T13600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.189488][T15717] syzkaller0: entered promiscuous mode [ 1234.195041][T15717] syzkaller0: entered allmulticast mode [ 1234.434286][T15703] loop2: detected capacity change from 0 to 32768 [ 1234.470038][T15703] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 1234.552640][ T8271] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1235.099512][T15733] loop4: detected capacity change from 0 to 32768 [ 1235.137373][T15733] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1235.148583][T15733] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1235.157404][T15733] BTRFS info (device loop4): turning on async discard [ 1235.164223][T15733] BTRFS info (device loop4): metadata ratio 0 [ 1235.170375][T15733] BTRFS info (device loop4): setting nodatasum [ 1235.176656][T15733] BTRFS info (device loop4): using free space tree [ 1235.397669][T15733] BTRFS info (device loop4): enabling ssd optimizations [ 1235.620199][T15757] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2476'. [ 1235.673511][T15758] loop2: detected capacity change from 0 to 128 [ 1237.248458][ T28] audit: type=1800 audit(1778601562.594:104): pid=15761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2475" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 1237.547073][T15758] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1237.657025][T15758] VFS: Lookup of 'file0' in vfat loop2 would have caused loop [ 1237.721503][T12268] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1238.084593][T15767] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2480'. [ 1238.136778][T15770] fuse: Unknown parameter 'grou00000000000000000000' [ 1238.319580][T15421] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1238.333787][T15421] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1238.343566][T15421] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1238.363614][T15421] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1238.375772][T15421] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1238.383661][T15421] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1238.455653][ T2974] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.607106][ T2974] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.758020][ T2974] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.904555][ T2974] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.086720][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.095423][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.369757][ T2974] tipc: Left network mode [ 1239.526108][T15787] loop1: detected capacity change from 0 to 32768 [ 1239.545518][T12406] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1239.564750][T15787] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2484 (15787) [ 1239.597768][T15787] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1239.610782][T15787] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1239.807974][T15787] BTRFS info (device loop1): turning on async discard [ 1239.815677][T15787] BTRFS info (device loop1): metadata ratio 0 [ 1239.822101][T15787] BTRFS info (device loop1): setting nodatasum [ 1239.830511][T15787] BTRFS info (device loop1): use zlib compression, level 3 [ 1239.839579][T15787] BTRFS info (device loop1): force clearing of disk cache [ 1239.848187][T15787] BTRFS info (device loop1): enabling auto defrag [ 1239.855790][T15787] BTRFS info (device loop1): using free space tree [ 1239.856173][T12406] usb 5-1: Using ep0 maxpacket: 32 [ 1239.877289][T15802] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2487'. [ 1240.004231][T12406] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1240.113211][T12406] usb 5-1: config 0 has no interface number 0 [ 1240.206325][T12406] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1240.258852][T12406] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.275748][T12406] usb 5-1: Product: syz [ 1240.287532][T12406] usb 5-1: Manufacturer: syz [ 1240.296059][T15774] chnl_net:caif_netlink_parms(): no params data found [ 1240.311677][T12406] usb 5-1: SerialNumber: syz [ 1240.337903][T12406] usb 5-1: config 0 descriptor?? [ 1240.363949][T12406] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1240.436383][T15421] Bluetooth: hci1: command tx timeout [ 1240.447159][T15787] BTRFS info (device loop1): enabling ssd optimizations [ 1240.459649][T15787] BTRFS info (device loop1): rebuilding free space tree [ 1240.509930][ T28] audit: type=1800 audit(1778601566.654:105): pid=15787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2484" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 1240.575819][T12406] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1240.600841][T12406] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1240.720835][T15826] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2488'. [ 1240.795007][T15419] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1240.918979][T15774] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.936527][T15774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.943807][T15774] bridge_slave_0: entered allmulticast mode [ 1240.986568][T15774] bridge_slave_0: entered promiscuous mode [ 1241.193945][T15774] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.203306][T15838] fuse: Unknown parameter 'grou00000000000000000000' [ 1241.244872][T15774] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.280125][T15774] bridge_slave_1: entered allmulticast mode [ 1241.300001][T15774] bridge_slave_1: entered promiscuous mode [ 1241.541213][T15774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1241.573109][T15774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1241.624688][ T2974] batman_adv: batadv0: Interface deactivated: gretap1 [ 1241.755488][ T2974] batman_adv: batadv0: Removing interface: gretap1 [ 1241.850131][T15774] team0: Port device team_slave_0 added [ 1241.861422][T15774] team0: Port device team_slave_1 added [ 1241.911271][T15774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1241.918451][T15774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1241.949671][T15774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1242.003515][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1242.056752][T11923] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1242.064815][ T969] usb 5-1: USB disconnect, device number 24 [ 1242.097071][ T969] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1242.133989][ T969] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1242.153652][ T969] quatech2 5-1:0.51: device disconnected [ 1242.159643][T15774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1242.159656][T15774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1242.209955][T15774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1242.215827][T11923] usb 3-1: device descriptor read/64, error -71 [ 1242.331390][T15774] hsr_slave_0: entered promiscuous mode [ 1242.339649][T15774] hsr_slave_1: entered promiscuous mode [ 1242.354749][T15774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1242.362803][T15774] Cannot create hsr debugfs directory [ 1242.432577][ T2974] hsr_slave_0: left promiscuous mode [ 1242.443734][ T2974] hsr_slave_1: left promiscuous mode [ 1242.464672][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1242.480764][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1242.497193][ T2974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1242.512253][ T2974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.519884][T11923] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1242.535027][T15421] Bluetooth: hci1: command tx timeout [ 1242.552396][ T2974] bridge_slave_1: left allmulticast mode [ 1242.559593][ T2974] bridge_slave_1: left promiscuous mode [ 1242.574504][ T2974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.596449][ T2974] bridge_slave_0: left allmulticast mode [ 1242.602140][ T2974] bridge_slave_0: left promiscuous mode [ 1242.624611][ T2974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.695456][T11923] usb 3-1: device descriptor read/64, error -71 [ 1242.732891][ T2974] bond_slave_0: left promiscuous mode [ 1242.738383][ T2974] bond_slave_1: left promiscuous mode [ 1242.756884][ T2974] veth1_macvtap: left promiscuous mode [ 1242.765217][ T2974] veth0_macvtap: left promiscuous mode [ 1242.774847][ T2974] veth1_vlan: left promiscuous mode [ 1242.781806][ T2974] veth0_vlan: left promiscuous mode [ 1242.825628][T11923] usb usb3-port1: attempt power cycle [ 1242.996693][T15866] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2496'. [ 1243.365715][T11923] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1243.426390][T11923] usb 3-1: device descriptor read/8, error -71 [ 1243.696279][T11923] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1243.762541][T11923] usb 3-1: device descriptor read/8, error -71 [ 1243.795020][T15874] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2497'. [ 1243.850471][ T2974] bond2 (unregistering): Released all slaves [ 1243.885067][ T2974] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 1243.900593][T11923] usb usb3-port1: unable to enumerate USB device [ 1244.040317][ T2974] bond1 (unregistering): Released all slaves [ 1244.566944][ T2974] team0 (unregistering): Port device team_slave_1 removed [ 1244.595604][T15421] Bluetooth: hci1: command tx timeout [ 1244.629793][ T2974] team0 (unregistering): Port device team_slave_0 removed [ 1244.678830][ T2974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1244.748173][ T2974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1244.807937][T15879] fuse: Unknown parameter 'grou00000000000000000000' [ 1245.300197][ T2974] bond0 (unregistering): Released all slaves [ 1245.484987][T15855] netlink: 'syz.4.2494': attribute type 7 has an invalid length. [ 1245.495370][T15855] netlink: 'syz.4.2494': attribute type 8 has an invalid length. [ 1246.365856][T11923] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1246.565496][T11923] usb 2-1: Using ep0 maxpacket: 32 [ 1246.588864][T11923] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1246.612905][T11923] usb 2-1: config 0 has no interface number 0 [ 1246.633306][T11923] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1246.659220][T11923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.667400][T11923] usb 2-1: Product: syz [ 1246.671608][T11923] usb 2-1: Manufacturer: syz [ 1246.676513][T15421] Bluetooth: hci1: command tx timeout [ 1246.687643][T11923] usb 2-1: SerialNumber: syz [ 1246.697293][T11923] usb 2-1: config 0 descriptor?? [ 1246.718213][T11923] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1246.934413][T15889] loop4: detected capacity change from 0 to 32768 [ 1246.944720][T11923] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1246.950878][T15774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1247.001373][T15774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1247.011346][T15889] JBD2: Ignoring recovery information on journal [ 1247.030029][T11923] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1247.100503][T15774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1247.144366][T15889] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1247.170722][T15774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1247.432489][T15774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1247.457573][T15774] 8021q: adding VLAN 0 to HW filter on device team0 [ 1247.533881][T13600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.541106][T13600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1247.590626][ T9093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.597924][ T9093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1247.606079][T12268] ocfs2: Unmounting device (7,4) on (node local) [ 1247.992021][T15917] netlink: 'syz.2.2505': attribute type 4 has an invalid length. [ 1248.000016][T15917] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2505'. [ 1248.178084][T15774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1248.442201][T15774] veth0_vlan: entered promiscuous mode [ 1248.466455][T15924] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3596000302 (14384001208 ns) > initial count (4696682236 ns). Using initial count to start timer. [ 1248.516583][T15774] veth1_vlan: entered promiscuous mode [ 1248.688819][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1248.755973][T13750] usb 2-1: USB disconnect, device number 60 [ 1248.786459][T13750] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1248.801204][T15774] veth0_macvtap: entered promiscuous mode [ 1248.828406][T15774] veth1_macvtap: entered promiscuous mode [ 1248.848866][T13750] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1248.895866][T15935] netlink: 'syz.1.2508': attribute type 7 has an invalid length. [ 1248.927867][T15935] netlink: 'syz.1.2508': attribute type 8 has an invalid length. [ 1248.936550][T13750] quatech2 2-1:0.51: device disconnected [ 1248.966964][T15937] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2507'. [ 1249.124312][T15774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1249.135153][T15774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.152425][T15774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1249.163431][T15774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.190834][T15774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1249.218032][T15774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.256383][T15774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1249.289083][T15774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.332295][T15774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.363186][T15774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.401761][T15774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.431111][T15774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.455165][T15774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.489036][T15774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1249.572829][T15774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.608965][T15774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.625377][T15774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.634112][T15774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.978018][T15952] loop1: detected capacity change from 0 to 32768 [ 1250.015701][ T2943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.065948][ T2943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.083500][T15952] JBD2: Ignoring recovery information on journal [ 1250.124954][T15952] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1250.227698][T13600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.244758][T15960] netlink: 'syz.2.2513': attribute type 4 has an invalid length. [ 1250.254142][T15960] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2513'. [ 1250.307361][T13600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.393130][T15419] ocfs2: Unmounting device (7,1) on (node local) [ 1250.702126][ T28] audit: type=1800 audit(1778601576.844:106): pid=15970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2514" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1251.235811][T13750] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1251.425511][T13750] usb 3-1: Using ep0 maxpacket: 32 [ 1251.436607][T13750] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1251.455028][T13750] usb 3-1: config 0 has no interface number 0 [ 1251.478862][T13750] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1251.491517][T13750] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.501248][T13750] usb 3-1: Product: syz [ 1251.505665][T13750] usb 3-1: Manufacturer: syz [ 1251.510363][T13750] usb 3-1: SerialNumber: syz [ 1251.520232][T13750] usb 3-1: config 0 descriptor?? [ 1251.538080][T13750] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1251.744923][T13750] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1251.765829][T15998] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2519'. [ 1251.781377][T13750] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1252.233185][T16005] loop4: detected capacity change from 0 to 32768 [ 1252.266238][T16008] netlink: 'syz.1.2522': attribute type 4 has an invalid length. [ 1252.274058][T16008] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2522'. [ 1252.337314][T16005] JBD2: Ignoring recovery information on journal [ 1252.399141][T16005] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1252.618674][T12268] ocfs2: Unmounting device (7,4) on (node local) [ 1252.856907][T13744] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1253.045824][T13744] usb 2-1: Using ep0 maxpacket: 32 [ 1253.053861][T13744] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.065618][T13744] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1253.078235][T13744] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1253.096579][T13744] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1253.106094][T13744] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.114317][T13744] usb 2-1: Product: syz [ 1253.119537][T13744] usb 2-1: Manufacturer: syz [ 1253.124304][T13744] usb 2-1: SerialNumber: syz [ 1253.153347][T13744] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1253.165889][T13744] imon 2-1:155.0: unable to initialize intf0, err -19 [ 1253.172952][T13744] imon:imon_probe: failed to initialize context! [ 1253.181623][T13744] imon 2-1:155.0: unable to register, err -19 [ 1253.470563][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1253.522895][ T5862] usb 3-1: USB disconnect, device number 53 [ 1253.572511][ T5862] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1253.634729][ T5862] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1253.674433][ T5862] quatech2 3-1:0.51: device disconnected [ 1254.169767][T16051] 9pnet_virtio: no channels available for device syz [ 1254.638388][T16058] loop4: detected capacity change from 0 to 32768 [ 1254.690237][T16058] JBD2: Ignoring recovery information on journal [ 1254.728559][T16059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.747998][T16059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.767547][T16058] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1255.093819][T12268] ocfs2: Unmounting device (7,4) on (node local) [ 1256.206386][T11923] usb 2-1: USB disconnect, device number 61 [ 1256.334598][ T5862] IPVS: starting estimator thread 0... [ 1256.439218][T16077] IPVS: using max 21 ests per chain, 50400 per kthread [ 1256.475443][ T969] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1256.675566][ T969] usb 5-1: Using ep0 maxpacket: 32 [ 1256.695805][ T969] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1256.728380][ T969] usb 5-1: config 0 has no interface number 0 [ 1256.740423][ T969] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1256.754150][ T969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.770950][ T969] usb 5-1: Product: syz [ 1256.781142][ T969] usb 5-1: Manufacturer: syz [ 1256.793312][ T969] usb 5-1: SerialNumber: syz [ 1256.813210][ T969] usb 5-1: config 0 descriptor?? [ 1256.906144][T16087] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2539'. [ 1257.045962][ T969] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1257.694894][ T969] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1257.710568][ T969] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1257.840760][T16092] tc action pedit 'at' offset 3425 out of bounds [ 1257.847620][T16092] tc action pedit 'at' offset 3425 out of bounds [ 1257.853989][T16092] tc action pedit 'at' offset 3425 out of bounds [ 1257.860402][T16092] tc action pedit 'at' offset 3425 out of bounds [ 1257.866788][T16092] tc action pedit 'at' offset 3425 out of bounds [ 1257.873158][T16092] tc action pedit 'at' offset 3425 out of bounds [ 1257.879591][T16092] tc action pedit 'at' offset 3425 out of bounds [ 1257.885992][T16092] tc action pedit 'at' offset 3425 out of bounds [ 1257.892385][T16092] tc action pedit 'at' offset 3425 out of bounds [ 1257.898751][T16092] tc action pedit 'at' offset 3425 out of bounds [ 1257.905101][T16092] TC_ACT_REPEAT abuse ? [ 1258.055399][ T9188] udevd[9188]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1258.078561][ T9188] udevd[9188]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1259.003172][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1259.064648][T12406] usb 5-1: USB disconnect, device number 25 [ 1259.134445][T12406] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1259.207429][T12406] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1259.279814][T12406] quatech2 5-1:0.51: device disconnected [ 1259.368613][T16117] syzkaller0: entered promiscuous mode [ 1259.374274][T16117] syzkaller0: entered allmulticast mode [ 1260.777849][T16137] binder: BINDER_SET_CONTEXT_MGR already set [ 1260.783894][T16137] binder: 16136:16137 ioctl 4018620d 200000004a80 returned -16 [ 1261.035452][ T969] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1261.215415][ T5862] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1261.245412][ T969] usb 4-1: Using ep0 maxpacket: 32 [ 1261.257020][ T969] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1261.265143][ T969] usb 4-1: config 0 has no interface number 0 [ 1261.288140][ T969] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1261.297491][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.316095][ T969] usb 4-1: Product: syz [ 1261.320333][ T969] usb 4-1: Manufacturer: syz [ 1261.325038][ T969] usb 4-1: SerialNumber: syz [ 1261.342397][ T969] usb 4-1: config 0 descriptor?? [ 1261.357782][ T969] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1261.410419][ T5862] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.426251][ T5862] usb 3-1: config 0 has no interfaces? [ 1261.450542][ T5862] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1261.470750][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.503053][ T5862] usb 3-1: Product: syz [ 1261.515431][ T5862] usb 3-1: Manufacturer: syz [ 1261.525465][ T5862] usb 3-1: SerialNumber: syz [ 1261.537922][ T5862] usb 3-1: config 0 descriptor?? [ 1261.584748][ T969] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1261.645756][ T969] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1262.003970][T16154] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2559'. [ 1263.009747][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1263.070669][T11923] usb 4-1: USB disconnect, device number 57 [ 1263.080280][T11923] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1263.104994][T11923] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1263.118728][T11923] quatech2 4-1:0.51: device disconnected [ 1263.423855][T16161] loop3: detected capacity change from 0 to 32768 [ 1263.463213][T16161] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2564 (16161) [ 1263.484425][T16161] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1263.494757][T16161] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1263.504169][T16161] BTRFS info (device loop3): turning on async discard [ 1263.511057][T16161] BTRFS info (device loop3): metadata ratio 0 [ 1263.517224][T16161] BTRFS info (device loop3): setting nodatasum [ 1263.523404][T16161] BTRFS info (device loop3): using free space tree [ 1263.606910][T16161] BTRFS info (device loop3): enabling ssd optimizations [ 1263.805812][ T28] audit: type=1800 audit(1778601589.954:107): pid=16161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2564" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 1263.991426][T15774] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1264.031512][ T5862] usb 3-1: USB disconnect, device number 54 [ 1265.432752][T16201] loop4: detected capacity change from 0 to 32768 [ 1265.592092][T16201] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2573 (16201) [ 1265.635256][T16201] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1265.646246][T16201] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1265.655799][T16201] BTRFS info (device loop4): turning on async discard [ 1265.662646][T16201] BTRFS info (device loop4): metadata ratio 0 [ 1265.668993][T16201] BTRFS info (device loop4): setting nodatasum [ 1265.675199][T16201] BTRFS info (device loop4): using free space tree [ 1265.785562][T16201] BTRFS info (device loop4): enabling ssd optimizations [ 1266.026759][ T5862] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1266.059674][ T28] audit: type=1800 audit(1778601592.184:108): pid=16201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2573" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 1266.237392][T12268] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1266.272035][ T5862] usb 4-1: Using ep0 maxpacket: 32 [ 1266.291605][ T5862] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1266.316573][ T5862] usb 4-1: config 0 has no interface number 0 [ 1266.358942][ T5862] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1266.393070][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.403374][ T5862] usb 4-1: Product: syz [ 1266.411534][ T5862] usb 4-1: Manufacturer: syz [ 1266.426298][ T5862] usb 4-1: SerialNumber: syz [ 1266.466354][ T5862] usb 4-1: config 0 descriptor?? [ 1266.499808][ T5862] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1266.695093][ T5862] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1266.736665][ T5862] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1267.464684][T16242] kvm: Disabled LAPIC found during irq injection [ 1267.608451][T16248] 9pnet_virtio: no channels available for device syz [ 1268.053556][T16250] loop2: detected capacity change from 0 to 32768 [ 1268.063308][T16250] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2582 (16250) [ 1268.091034][T16250] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1268.101495][T16250] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1268.110629][T16250] BTRFS info (device loop2): turning on async discard [ 1268.118572][T16250] BTRFS info (device loop2): metadata ratio 0 [ 1268.124720][T16250] BTRFS info (device loop2): setting nodatasum [ 1268.130981][T16250] BTRFS info (device loop2): using free space tree [ 1268.164821][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1268.231910][T12406] usb 4-1: USB disconnect, device number 58 [ 1268.242969][T12406] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1268.257611][T12406] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1268.269891][T12406] quatech2 4-1:0.51: device disconnected [ 1268.699989][T16250] BTRFS info (device loop2): enabling ssd optimizations [ 1269.152917][ T28] audit: type=1800 audit(1778601595.184:109): pid=16250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2582" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 1269.379237][T15060] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1269.738213][T16278] binder: BINDER_SET_CONTEXT_MGR already set [ 1269.744258][T16278] binder: 16277:16278 ioctl 4018620d 200000004a80 returned -16 [ 1270.229963][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2591'. [ 1271.058660][ T969] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1271.245930][ T969] usb 5-1: Using ep0 maxpacket: 32 [ 1271.262193][ T969] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1271.286311][ T969] usb 5-1: config 0 has no interface number 0 [ 1271.315571][ T969] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1271.334083][ T969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.351922][ T969] usb 5-1: Product: syz [ 1271.373137][ T969] usb 5-1: Manufacturer: syz [ 1271.390564][ T969] usb 5-1: SerialNumber: syz [ 1271.421781][ T969] usb 5-1: config 0 descriptor?? [ 1271.452427][ T969] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1271.666893][ T969] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1271.770369][ T969] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1272.057234][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1272.069692][ T969] usb 5-1: USB disconnect, device number 26 [ 1272.099623][ T969] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1272.162208][ T969] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1272.194583][ T969] quatech2 5-1:0.51: device disconnected [ 1273.078249][T16354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2612'. [ 1273.953803][ T8271] udevd[8271]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1274.061415][ T8271] udevd[8271]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1274.611703][T16379] loop3: detected capacity change from 0 to 512 [ 1274.620518][T16379] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1274.641614][T16379] EXT4-fs error (device loop3): ext4_init_orphan_info:621: comm syz.3.2619: orphan file block 0: bad magic [ 1274.653855][T16379] EXT4-fs (loop3): mount failed [ 1274.881597][T12404] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1275.425853][T12404] usb 2-1: Using ep0 maxpacket: 32 [ 1275.435061][T12404] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1275.543175][T12404] usb 2-1: config 0 has no interface number 0 [ 1275.554004][T12404] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1275.563708][T12404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.571792][T12404] usb 2-1: Product: syz [ 1275.577456][T12404] usb 2-1: Manufacturer: syz [ 1275.582119][T12404] usb 2-1: SerialNumber: syz [ 1275.590271][T12404] usb 2-1: config 0 descriptor?? [ 1275.628257][T12404] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1275.751693][T16391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2622'. [ 1275.805918][T16391] bond1: entered promiscuous mode [ 1275.811347][T16391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1275.834056][T12404] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1275.855108][T16394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1275.862378][T16394] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 1275.874296][T16394] bond1: (slave sit1): Error -95 calling set_mac_address [ 1275.896992][T12404] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1275.914562][T16395] tipc: Enabling of bearer rejected, failed to enable media [ 1276.234481][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1276.243622][T12406] usb 2-1: USB disconnect, device number 62 [ 1276.259102][T12406] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1276.288186][T12406] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1276.310337][T12406] quatech2 2-1:0.51: device disconnected [ 1276.365454][ T969] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1276.565473][ T969] usb 5-1: Using ep0 maxpacket: 8 [ 1276.572654][ T969] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.589910][ T969] usb 5-1: config 0 has no interfaces? [ 1276.595982][ T969] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1276.625413][ T969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.641820][ T969] usb 5-1: config 0 descriptor?? [ 1277.426412][T16428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2634'. [ 1278.290882][ T9188] udevd[9188]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1278.322202][ T8271] udevd[8271]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1279.034925][T16441] Bluetooth: MGMT ver 1.22 [ 1279.041217][T16441] Bluetooth: hci1: too big key_count value 41344 [ 1279.105617][ T969] usb 5-1: USB disconnect, device number 27 [ 1279.300469][ T5879] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1279.526446][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 1279.561822][ T5879] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1279.584933][ T5879] usb 2-1: config 0 has no interface number 0 [ 1279.601282][ T5879] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1279.610529][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.629821][ T5879] usb 2-1: Product: syz [ 1279.634293][ T5879] usb 2-1: Manufacturer: syz [ 1279.658875][ T5879] usb 2-1: SerialNumber: syz [ 1279.705028][ T5879] usb 2-1: config 0 descriptor?? [ 1279.727579][ T5879] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1279.937586][ T5879] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1279.964885][ T5879] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1280.489109][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1280.501582][ T5879] usb 2-1: USB disconnect, device number 63 [ 1280.526981][ T5879] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1281.270128][T16477] fuse: Bad value for 'fd' [ 1281.360374][ T5879] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1281.372320][ T5879] quatech2 2-1:0.51: device disconnected [ 1281.667269][T16490] Unsupported ieee802154 address type: 0 [ 1281.735484][ T5879] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1281.957167][T12406] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1282.301321][T12406] usb 5-1: Using ep0 maxpacket: 8 [ 1282.487360][T12406] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1282.613374][T12406] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1282.700857][T12406] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1282.744691][T12406] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1282.830289][T12406] usb 5-1: Product: syz [ 1282.870128][T12406] usb 5-1: Manufacturer: syz [ 1282.913464][T12406] usb 5-1: SerialNumber: syz [ 1283.192798][T12406] usb 5-1: config 0 descriptor?? [ 1283.536242][T12406] imon_raw 5-1:0.0: IR endpoint missing [ 1284.366315][ T5879] usb 2-1: Using ep0 maxpacket: 8 [ 1285.226280][ T5879] usb 2-1: device descriptor read/all, error -71 [ 1285.330071][T11923] usb 5-1: USB disconnect, device number 28 [ 1285.977881][T16517] fuse: Bad value for 'fd' [ 1286.378084][T16523] loop3: detected capacity change from 0 to 32768 [ 1286.449804][T16523] JBD2: Ignoring recovery information on journal [ 1286.616162][T16523] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1286.672279][T16523] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1286.681627][T16523] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1286.985619][ T5879] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1287.321302][T15774] ocfs2: Unmounting device (7,3) on (node local) [ 1287.335507][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 1287.370525][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.392268][ T5879] usb 5-1: config 0 has no interfaces? [ 1287.400554][ T5879] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1287.411189][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.452914][ T5879] usb 5-1: config 0 descriptor?? [ 1287.693682][T16538] Unsupported ieee802154 address type: 0 [ 1289.815492][T11923] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1290.055527][T11923] usb 3-1: Using ep0 maxpacket: 8 [ 1290.062588][T11923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.083096][T11923] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1290.908518][T11923] usb 3-1: string descriptor 0 read error: -71 [ 1290.931709][T11923] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1290.950415][ T969] usb 5-1: USB disconnect, device number 29 [ 1290.967168][T11923] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1291.006754][T11923] usb 3-1: config 0 descriptor?? [ 1291.012966][T11923] usb 3-1: can't set config #0, error -71 [ 1291.076129][T11923] usb 3-1: USB disconnect, device number 55 [ 1291.112884][T16555] fuse: Bad value for 'fd' [ 1291.317872][T16558] loop4: detected capacity change from 0 to 32768 [ 1291.380933][T16558] JBD2: Ignoring recovery information on journal [ 1291.423952][T16558] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1291.486658][T16558] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1291.497125][T16558] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1291.718884][T15421] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1291.731305][T15421] CPU: 0 PID: 15421 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1291.738998][T15421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1291.749092][T15421] Workqueue: hci1 hci_rx_work [ 1291.753828][T15421] Call Trace: [ 1291.757164][T15421] [ 1291.760125][T15421] dump_stack_lvl+0x18c/0x250 [ 1291.764879][T15421] ? show_regs_print_info+0x20/0x20 [ 1291.770113][T15421] ? load_image+0x420/0x420 [ 1291.774643][T15421] sysfs_create_dir_ns+0x26e/0x2a0 [ 1291.779763][T15421] ? sysfs_warn_dup+0xa0/0xa0 [ 1291.784441][T15421] ? do_raw_spin_unlock+0x121/0x230 [ 1291.789644][T15421] kobject_add_internal+0x61c/0xcc0 [ 1291.794852][T15421] kobject_add+0x164/0x240 [ 1291.799273][T15421] ? __rwlock_init+0x150/0x150 [ 1291.804042][T15421] ? kobject_init+0x1e0/0x1e0 [ 1291.808721][T15421] ? _raw_spin_unlock+0x28/0x40 [ 1291.813570][T15421] ? get_device_parent+0x366/0x390 [ 1291.818701][T15421] device_add+0x408/0xc20 [ 1291.823043][T15421] hci_conn_add_sysfs+0xd5/0x1e0 [ 1291.828177][T15421] le_conn_complete_evt+0xf5d/0x1540 [ 1291.833525][T15421] ? hci_event_packet+0x4cb/0x1270 [ 1291.838684][T15421] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1291.844978][T15421] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1291.850638][T15421] ? skb_pull_data+0xfb/0x200 [ 1291.855361][T15421] hci_le_conn_complete_evt+0x187/0x440 [ 1291.860956][T15421] ? hci_remote_host_features_evt+0x150/0x150 [ 1291.867045][T15421] hci_event_packet+0x7ba/0x1270 [ 1291.872018][T15421] ? bis_list+0x290/0x290 [ 1291.876384][T15421] ? lockdep_hardirqs_on+0x98/0x150 [ 1291.881634][T15421] ? hci_send_to_monitor+0xd7/0x4f0 [ 1291.886852][T15421] hci_rx_work+0x43a/0xd60 [ 1291.891297][T15421] ? process_scheduled_works+0x96f/0x15d0 [ 1291.897044][T15421] process_scheduled_works+0xa5d/0x15d0 [ 1291.902639][T15421] ? worker_attach_to_pool+0x380/0x380 [ 1291.908128][T15421] ? assign_work+0x3d2/0x5d0 [ 1291.912736][T15421] worker_thread+0xa55/0xfc0 [ 1291.917336][T15421] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1291.923239][T15421] ? _raw_spin_unlock+0x40/0x40 [ 1291.928110][T15421] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1291.934030][T15421] kthread+0x2fa/0x390 [ 1291.938137][T15421] ? pr_cont_work+0x560/0x560 [ 1291.942844][T15421] ? kthread_blkcg+0xd0/0xd0 [ 1291.947438][T15421] ret_from_fork+0x48/0x80 [ 1291.951859][T15421] ? kthread_blkcg+0xd0/0xd0 [ 1291.956449][T15421] ret_from_fork_asm+0x11/0x20 [ 1291.961225][T15421] [ 1291.966179][T15421] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1291.980841][T15421] Bluetooth: hci1: failed to register connection device [ 1292.270114][T12268] ocfs2: Unmounting device (7,4) on (node local) [ 1293.569918][T16593] loop3: detected capacity change from 0 to 32768 [ 1293.626056][T16593] JBD2: Ignoring recovery information on journal [ 1293.659980][T16593] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1293.713007][T16593] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1293.722128][T16593] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1293.939986][T15774] ocfs2: Unmounting device (7,3) on (node local) [ 1294.975290][T16619] xt_hashlimit: size too large, truncated to 1048576 [ 1295.133124][T16625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2697'. [ 1296.233019][ T9188] udevd[9188]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1296.259382][ T8271] udevd[8271]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1298.313358][T16651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2705'. [ 1298.335791][T16648] Bluetooth: hci0: unsupported parameter 255 [ 1298.341847][T16648] Bluetooth: hci0: unsupported parameter 255 [ 1300.576602][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.582914][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.971589][T16677] Bluetooth: hci0: unsupported parameter 255 [ 1300.998932][T16677] Bluetooth: hci0: unsupported parameter 255 [ 1301.338060][T16686] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 1303.266666][T16704] Bluetooth: hci0: unsupported parameter 255 [ 1303.290673][T16704] Bluetooth: hci0: unsupported parameter 255 [ 1303.375570][ T5879] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1303.585487][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 1303.602432][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.615855][T16711] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 1303.632693][ T5879] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1303.655062][ T5879] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1303.664526][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.683639][ T5879] usb 3-1: config 0 descriptor?? [ 1304.137558][T16722] Unsupported ieee802154 address type: 0 [ 1304.435482][ T5879] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1304.675523][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 1304.732860][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.827307][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1304.926261][ T5879] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1304.997987][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1305.074784][ T5879] usb 5-1: Product: syz [ 1305.155058][ T5879] usb 5-1: Manufacturer: syz [ 1305.193295][ T5879] usb 5-1: SerialNumber: syz [ 1305.272569][ T5879] usb 5-1: config 0 descriptor?? [ 1305.379674][ T5879] imon_raw 5-1:0.0: IR endpoint missing [ 1306.996849][T13744] usb 3-1: USB disconnect, device number 56 [ 1308.576523][ T5862] usb 5-1: USB disconnect, device number 30 [ 1309.152835][T16747] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 1309.736841][ T5785] Bluetooth: hci0: hcon ffff888079664000 sent 1 < count 107 [ 1309.954647][T16763] Unsupported ieee802154 address type: 0 [ 1309.960764][T11923] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1310.205474][T11923] usb 5-1: Using ep0 maxpacket: 8 [ 1310.249389][T11923] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.305648][T13744] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1310.350412][T11923] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1310.441979][T11923] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1310.535206][T11923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.605671][T13744] usb 4-1: Using ep0 maxpacket: 8 [ 1310.693530][T13744] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.706183][T11923] usb 5-1: config 0 descriptor?? [ 1310.874481][T13744] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1311.049709][T13744] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1311.225212][T13744] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1311.338732][T13744] usb 4-1: Product: syz [ 1311.392493][T13744] usb 4-1: Manufacturer: syz [ 1311.454787][T13744] usb 4-1: SerialNumber: syz [ 1311.600933][T13744] usb 4-1: config 0 descriptor?? [ 1311.765010][T13744] imon_raw 4-1:0.0: IR endpoint missing [ 1313.626101][ T5862] usb 4-1: USB disconnect, device number 59 [ 1313.681980][ T5821] usb 5-1: USB disconnect, device number 31 [ 1314.699210][T16784] Bluetooth: hci0: unsupported parameter 255 [ 1314.726200][T16784] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1315.194528][T16799] Unsupported ieee802154 address type: 0 [ 1315.476015][ T5821] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1317.195516][ T5821] usb 3-1: Using ep0 maxpacket: 8 [ 1317.218766][ T5821] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.261229][ T5821] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1317.295736][ T5821] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1317.312869][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1318.716569][T15421] Bluetooth: hci4: command 0x0406 tx timeout [ 1318.717769][ T5821] usb 3-1: Product: syz [ 1318.726804][ T5821] usb 3-1: Manufacturer: syz [ 1318.731424][ T5821] usb 3-1: SerialNumber: syz [ 1318.738443][ T5821] usb 3-1: config 0 descriptor?? [ 1318.753891][ T5821] imon_raw 3-1:0.0: IR endpoint missing [ 1318.995454][ T969] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1319.075033][ T5821] usb 3-1: USB disconnect, device number 57 [ 1319.186248][ T969] usb 4-1: Using ep0 maxpacket: 8 [ 1319.200560][ T969] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.217030][ T969] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1319.266536][ T969] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1319.289000][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.464817][ T969] usb 4-1: config 0 descriptor?? [ 1320.400892][T16824] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 1320.690607][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1320.700681][ T5785] CPU: 1 PID: 5785 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 1320.708302][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1320.718402][ T5785] Workqueue: hci0 hci_rx_work [ 1320.723143][ T5785] Call Trace: [ 1320.726464][ T5785] [ 1320.729428][ T5785] dump_stack_lvl+0x18c/0x250 [ 1320.734155][ T5785] ? show_regs_print_info+0x20/0x20 [ 1320.739413][ T5785] ? load_image+0x420/0x420 [ 1320.743985][ T5785] sysfs_create_dir_ns+0x26e/0x2a0 [ 1320.749154][ T5785] ? sysfs_warn_dup+0xa0/0xa0 [ 1320.753895][ T5785] ? do_raw_spin_unlock+0x121/0x230 [ 1320.759178][ T5785] kobject_add_internal+0x61c/0xcc0 [ 1320.764448][ T5785] kobject_add+0x164/0x240 [ 1320.768919][ T5785] ? __rwlock_init+0x150/0x150 [ 1320.773745][ T5785] ? kobject_init+0x1e0/0x1e0 [ 1320.778487][ T5785] ? _raw_spin_unlock+0x28/0x40 [ 1320.783400][ T5785] ? get_device_parent+0x366/0x390 [ 1320.788559][ T5785] device_add+0x408/0xc20 [ 1320.792907][ T5785] hci_conn_add_sysfs+0xd5/0x1e0 [ 1320.797853][ T5785] le_conn_complete_evt+0xf5d/0x1540 [ 1320.803138][ T5785] ? hci_event_packet+0x4cb/0x1270 [ 1320.808265][ T5785] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1320.814511][ T5785] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1320.820153][ T5785] ? skb_pull_data+0xfb/0x200 [ 1320.824845][ T5785] hci_le_conn_complete_evt+0x187/0x440 [ 1320.830420][ T5785] ? hci_remote_host_features_evt+0x150/0x150 [ 1320.836506][ T5785] hci_event_packet+0x7ba/0x1270 [ 1320.841467][ T5785] ? bis_list+0x290/0x290 [ 1320.845803][ T5785] ? lockdep_hardirqs_on+0x98/0x150 [ 1320.851008][ T5785] ? hci_send_to_monitor+0xd7/0x4f0 [ 1320.856222][ T5785] hci_rx_work+0x43a/0xd60 [ 1320.860698][ T5785] ? process_scheduled_works+0x96f/0x15d0 [ 1320.866427][ T5785] process_scheduled_works+0xa5d/0x15d0 [ 1320.872004][ T5785] ? worker_attach_to_pool+0x380/0x380 [ 1320.877518][ T5785] ? assign_work+0x3d2/0x5d0 [ 1320.882143][ T5785] worker_thread+0xa55/0xfc0 [ 1320.886753][ T5785] kthread+0x2fa/0x390 [ 1320.890826][ T5785] ? pr_cont_work+0x560/0x560 [ 1320.895506][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 1320.900094][ T5785] ret_from_fork+0x48/0x80 [ 1320.904513][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 1320.909111][ T5785] ret_from_fork_asm+0x11/0x20 [ 1320.913888][ T5785] [ 1320.925541][ T5785] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1320.939628][ T5785] Bluetooth: hci0: failed to register connection device [ 1320.966241][ T969] usb 4-1: USB disconnect, device number 60 [ 1321.373368][T16831] kvm: pic: non byte read [ 1321.440697][T16835] Unsupported ieee802154 address type: 0 [ 1321.471863][T16831] kvm: pic: level sensitive irq not supported [ 1321.517491][T16831] kvm: pic: non byte read [ 1321.707394][T16831] kvm: pic: level sensitive irq not supported [ 1321.722199][T16831] kvm: pic: non byte read [ 1321.784316][ T5821] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1321.906382][T16831] kvm: pic: level sensitive irq not supported [ 1321.908128][T16831] kvm: pic: non byte read [ 1322.065686][ T5821] usb 2-1: Using ep0 maxpacket: 8 [ 1322.144878][ T5821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.314179][ T5821] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1322.385487][T16831] kvm: pic: level sensitive irq not supported [ 1322.407195][T16831] kvm: pic: non byte read [ 1322.508510][ T5821] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1322.791805][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1323.251297][ T5821] usb 2-1: Product: syz [ 1323.442050][ T5821] usb 2-1: Manufacturer: syz [ 1323.504373][ T5821] usb 2-1: SerialNumber: syz [ 1323.620588][ T5821] usb 2-1: config 0 descriptor?? [ 1323.933244][ T5821] imon_raw 2-1:0.0: IR endpoint missing [ 1324.408210][ T5821] usb 2-1: USB disconnect, device number 66 [ 1326.572177][T16855] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 1330.940222][ T5785] Bluetooth: hci1: Malformed Event: 0x02 [ 1332.008465][T16941] Unsupported ieee802154 address type: 0 [ 1332.135500][T12404] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 1332.346935][T11923] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1332.635563][T11923] usb 2-1: Using ep0 maxpacket: 8 [ 1332.682670][T11923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.782256][T11923] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1332.908626][T11923] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1332.990975][T11923] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1333.053951][T11923] usb 2-1: Product: syz [ 1333.094392][T11923] usb 2-1: Manufacturer: syz [ 1333.123397][T11923] usb 2-1: SerialNumber: syz [ 1333.229651][T11923] usb 2-1: config 0 descriptor?? [ 1333.350878][T11923] imon_raw 2-1:0.0: IR endpoint missing [ 1334.502994][T12404] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1334.917793][T12404] usb 3-1: config 0 has no interface number 0 [ 1334.924123][T12404] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1334.935663][T12404] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1334.946532][T12404] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1334.955805][T12404] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.967756][T12404] usb 3-1: config 0 descriptor?? [ 1335.090664][T12404] usb 3-1: can't set config #0, error -71 [ 1335.104556][T11923] usb 2-1: USB disconnect, device number 67 [ 1335.115406][T12404] usb 3-1: USB disconnect, device number 58 [ 1335.860772][T16986] Unsupported ieee802154 address type: 0 [ 1336.155509][T12404] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1336.405412][T12404] usb 2-1: Using ep0 maxpacket: 8 [ 1336.443128][T12404] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.597225][T12404] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1336.781630][T12404] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1336.882396][T12404] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1336.984793][T12404] usb 2-1: Product: syz [ 1337.065777][T12404] usb 2-1: Manufacturer: syz [ 1337.135912][T12404] usb 2-1: SerialNumber: syz [ 1337.332972][T12404] usb 2-1: config 0 descriptor?? [ 1337.584494][T12404] imon_raw 2-1:0.0: IR endpoint missing [ 1338.435445][T15421] Bluetooth: hci0: command 0x0406 tx timeout [ 1338.923238][T13744] usb 2-1: USB disconnect, device number 68 [ 1339.085352][T16999] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2822'. [ 1339.503600][T16998] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 1340.141310][T17030] fuse: Bad value for 'fd' [ 1340.250983][T17033] Unsupported ieee802154 address type: 0 [ 1340.575805][ T5821] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1340.872833][ T5821] usb 5-1: Using ep0 maxpacket: 8 [ 1340.953919][ T5821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.095239][ T5821] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1341.273461][ T5821] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1341.401886][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1341.522125][ T5821] usb 5-1: Product: syz [ 1341.606420][ T5821] usb 5-1: Manufacturer: syz [ 1341.686725][ T5821] usb 5-1: SerialNumber: syz [ 1341.862467][ T5821] usb 5-1: config 0 descriptor?? [ 1342.049105][ T5821] imon_raw 5-1:0.0: IR endpoint missing [ 1343.339211][T12404] usb 5-1: USB disconnect, device number 32 [ 1343.628395][ T5785] Bluetooth: hci0: unexpected event for opcode 0x2011 [ 1344.769513][T17071] Unsupported ieee802154 address type: 0 [ 1345.075631][T13744] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1345.400110][T13744] usb 3-1: Using ep0 maxpacket: 8 [ 1345.478329][T13744] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.653937][T13744] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1345.857338][T13744] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1345.996272][T13744] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1346.120443][T13744] usb 3-1: Product: syz [ 1346.193276][T13744] usb 3-1: Manufacturer: syz [ 1346.266088][T13744] usb 3-1: SerialNumber: syz [ 1346.409730][T13744] usb 3-1: config 0 descriptor?? [ 1346.576334][T13744] imon_raw 3-1:0.0: IR endpoint missing [ 1347.965751][T17040] usb 3-1: USB disconnect, device number 59 [ 1348.173734][T17089] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2848'. [ 1348.647271][ T8271] udevd[8271]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1348.684220][ T8271] udevd[8271]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1348.719002][ T5785] Bluetooth: hci4: unexpected event for opcode 0x2011 [ 1348.974541][T17111] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2855'. [ 1349.528927][T17115] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 1351.400595][ T5785] Bluetooth: hci4: unexpected event for opcode 0x0009 [ 1352.126521][T17138] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2864'. [ 1352.298204][ T5785] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1352.455218][ T8271] udevd[8271]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1352.482156][T17151] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 1355.155621][T12406] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1355.389233][T12406] usb 5-1: Using ep0 maxpacket: 8 [ 1355.402561][T12406] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.423267][T12406] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1355.443263][T12406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.471223][T12406] usb 5-1: config 0 descriptor?? [ 1355.492013][T12406] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1355.697083][T12406] gspca_vc032x: reg_r err -32 [ 1355.706499][T12406] vc032x: probe of 5-1:0.0 failed with error -32 [ 1356.239142][T15421] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1356.545011][T17193] comedi comedi3: das16m1: I/O port conflict (0x500,8) [ 1356.779027][T17197] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 1357.686623][T17211] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2884'. [ 1357.921566][T11923] usb 5-1: USB disconnect, device number 33 [ 1359.340213][ T5785] Bluetooth: hci0: unexpected event for opcode 0x0009 [ 1359.485392][T12406] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1359.685515][T12406] usb 4-1: Using ep0 maxpacket: 8 [ 1359.698627][T12406] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.714212][T12406] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1359.725450][T12406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.746317][T12406] usb 4-1: config 0 descriptor?? [ 1359.768178][T12406] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1359.959884][T12406] gspca_vc032x: reg_r err -32 [ 1359.980116][T12406] vc032x: probe of 4-1:0.0 failed with error -32 [ 1360.592289][T17263] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 1360.796182][T17268] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2899'. [ 1361.066374][ T9188] udevd[9188]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1361.081270][ T8271] udevd[8271]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1361.615120][T17287] input: syz0 as /devices/virtual/input/input10 [ 1361.965645][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.972159][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.283285][T12406] usb 4-1: USB disconnect, device number 61 [ 1363.815393][T17040] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1364.036736][T15421] Bluetooth: hci1: command 0x0406 tx timeout [ 1364.805456][T17040] usb 4-1: Using ep0 maxpacket: 8 [ 1364.812441][T17040] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.830220][T17040] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1364.851276][T17040] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.900068][T17040] usb 4-1: config 0 descriptor?? [ 1364.918900][T17040] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1365.535611][T17040] gspca_vc032x: reg_r err -32 [ 1365.543719][T17040] vc032x: probe of 4-1:0.0 failed with error -32 [ 1366.586297][ T5821] usb 4-1: USB disconnect, device number 62 [ 1367.481309][T17402] input: syz0 as /devices/virtual/input/input11 [ 1367.615545][ T5821] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1367.805473][ T5821] usb 3-1: Using ep0 maxpacket: 8 [ 1367.818647][ T5821] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.856739][ T5821] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1367.885469][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.906535][ T5821] usb 3-1: config 0 descriptor?? [ 1367.916647][ T5821] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1368.535900][ T5821] gspca_vc032x: reg_r err -32 [ 1368.558162][ T5821] vc032x: probe of 3-1:0.0 failed with error -32 [ 1370.417408][ T9138] usb 3-1: USB disconnect, device number 60 [ 1371.235604][T12404] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1371.448417][T12404] usb 3-1: Using ep0 maxpacket: 8 [ 1371.476169][T12404] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1371.484484][T12404] usb 3-1: config 179 has no interface number 0 [ 1371.511338][T12404] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1371.522777][T12404] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1371.534515][T12404] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1371.549972][T12404] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1371.575158][T12404] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1371.588786][T12404] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.596691][T17468] input: syz0 as /devices/virtual/input/input12 [ 1371.619107][T17464] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1371.856299][T12404] usb 3-1: USB disconnect, device number 61 [ 1372.405459][T11923] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1372.735530][T11923] usb 2-1: Using ep0 maxpacket: 8 [ 1372.750823][T11923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.770286][T11923] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1372.780097][T11923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.808872][T11923] usb 2-1: config 0 descriptor?? [ 1372.820652][T11923] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1373.455568][T11923] gspca_vc032x: reg_r err -32 [ 1373.460569][T11923] vc032x: probe of 2-1:0.0 failed with error -32 [ 1375.179398][T17074] usb 2-1: USB disconnect, device number 69 [ 1377.285498][T12404] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1377.495724][T12404] usb 3-1: Using ep0 maxpacket: 8 [ 1377.511490][T12404] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.529908][T12404] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1377.552943][T12404] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.582185][T12404] usb 3-1: config 0 descriptor?? [ 1377.618986][T12404] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1377.678101][T17544] warning: `syz.3.2989' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1378.316213][T12404] gspca_vc032x: reg_r err -32 [ 1378.324109][T12404] vc032x: probe of 3-1:0.0 failed with error -32 [ 1380.054003][T17074] usb 3-1: USB disconnect, device number 62 [ 1380.277595][T17576] kvm: pic: non byte read [ 1380.282932][T17576] kvm: pic: non byte read [ 1380.291356][T17576] kvm: pic: non byte read [ 1380.302192][T17576] kvm: pic: level sensitive irq not supported [ 1380.302261][T17576] kvm: pic: non byte read [ 1380.317820][T17576] kvm: pic: single mode not supported [ 1380.317838][T17576] kvm: pic: level sensitive irq not supported [ 1380.323902][T17576] kvm: pic: non byte read [ 1380.340523][T17576] kvm: pic: level sensitive irq not supported [ 1380.340581][T17576] kvm: pic: non byte read [ 1380.352907][T17576] kvm: pic: single mode not supported [ 1380.352925][T17576] kvm: pic: level sensitive irq not supported [ 1380.363016][T17576] kvm: pic: non byte read [ 1380.373885][T17576] kvm: pic: single mode not supported [ 1380.373943][T17576] kvm: pic: non byte read [ 1380.389339][T17576] kvm: pic: non byte read [ 1380.393995][T17576] kvm: pic: non byte read [ 1380.400280][T17576] kvm: pic: single mode not supported [ 1380.400531][T17576] kvm: pic: level sensitive irq not supported [ 1380.414609][T17576] kvm: pic: level sensitive irq not supported [ 1380.422317][T17576] kvm: pic: level sensitive irq not supported [ 1380.425534][ T9138] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1380.450686][T17576] kvm: pic: single mode not supported [ 1380.450934][T17576] kvm: pic: single mode not supported [ 1380.456534][T17576] kvm: pic: level sensitive irq not supported [ 1380.467909][T17576] kvm: pic: level sensitive irq not supported [ 1380.474669][T17576] kvm: pic: single mode not supported [ 1380.483651][T17576] kvm: pic: single mode not supported [ 1380.489232][T17576] kvm: pic: level sensitive irq not supported [ 1380.500597][T17576] kvm: pic: single mode not supported [ 1380.655606][ T9138] usb 2-1: Using ep0 maxpacket: 8 [ 1380.688679][ T9138] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.717540][ T9138] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1380.739434][ T9138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.768299][ T9138] usb 2-1: config 0 descriptor?? [ 1380.788397][ T9138] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1382.063139][ T9138] gspca_vc032x: reg_r err -32 [ 1382.075412][ T9138] vc032x: probe of 2-1:0.0 failed with error -32 [ 1383.169505][T13744] usb 2-1: USB disconnect, device number 70 [ 1385.845573][T17074] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1386.039204][T17074] usb 5-1: Using ep0 maxpacket: 8 [ 1386.052382][ T5785] Bluetooth: hci4: unexpected event for opcode 0x2011 [ 1386.065028][T17074] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1386.075467][T17074] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1386.084838][T17074] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.098558][T17074] usb 5-1: config 0 descriptor?? [ 1386.114808][T17074] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1386.778160][T17074] gspca_vc032x: reg_r err -32 [ 1386.784754][T17074] vc032x: probe of 5-1:0.0 failed with error -32 [ 1389.364175][T13744] usb 5-1: USB disconnect, device number 34 [ 1389.684682][T17679] loop4: detected capacity change from 0 to 32768 [ 1389.700091][T17679] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3034 (17679) [ 1389.719233][T17679] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1389.729463][T17679] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1389.738145][T17679] BTRFS info (device loop4): turning on async discard [ 1389.744920][T17679] BTRFS info (device loop4): metadata ratio 0 [ 1389.751008][T17679] BTRFS info (device loop4): setting nodatasum [ 1389.757202][T17679] BTRFS info (device loop4): using free space tree [ 1389.901012][T17679] BTRFS info (device loop4): enabling ssd optimizations [ 1389.975865][ T28] audit: type=1800 audit(1778601716.124:110): pid=17679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3034" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 1390.130144][T12268] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1392.351862][T12406] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1392.375783][T17674] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1392.550700][T12406] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1392.575323][T12406] usb 2-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 1392.600274][T17725] netlink: 'syz.3.3043': attribute type 7 has an invalid length. [ 1392.610023][T12406] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1392.618655][T17725] netlink: 'syz.3.3043': attribute type 8 has an invalid length. [ 1392.625701][T12406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.655544][T12406] usb 2-1: Product: syz [ 1392.677825][T12406] usb 2-1: Manufacturer: syz [ 1392.682492][T12406] usb 2-1: SerialNumber: syz [ 1392.885461][T13744] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1392.969043][T12404] usb 2-1: USB disconnect, device number 71 [ 1393.095318][T13744] usb 3-1: Using ep0 maxpacket: 8 [ 1393.107763][T13744] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.125581][T13744] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1393.145175][T13744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.165168][T13744] usb 3-1: config 0 descriptor?? [ 1393.189305][T13744] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1395.733300][T13744] gspca_vc032x: reg_w err -110 [ 1395.747753][T13744] vc032x: probe of 3-1:0.0 failed with error -110 [ 1395.798926][T13744] usb 3-1: USB disconnect, device number 63 [ 1396.087639][T17758] netlink: 'syz.1.3053': attribute type 7 has an invalid length. [ 1396.105818][T17758] netlink: 'syz.1.3053': attribute type 8 has an invalid length. [ 1396.525713][T12404] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1396.850618][T12404] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.953724][T12404] usb 5-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 1397.036194][T12404] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1397.125499][T12404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.133632][T12404] usb 5-1: Product: syz [ 1397.175348][T12404] usb 5-1: Manufacturer: syz [ 1397.179968][T12404] usb 5-1: SerialNumber: syz [ 1398.789788][ T9138] usb 5-1: USB disconnect, device number 35 [ 1399.852385][T17791] netlink: 'syz.2.3064': attribute type 7 has an invalid length. [ 1399.864474][T17791] netlink: 'syz.2.3064': attribute type 8 has an invalid length. [ 1399.885488][ T9138] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1400.195574][ T9138] usb 2-1: Using ep0 maxpacket: 8 [ 1404.216250][ T9138] usb 2-1: unable to read config index 0 descriptor/all [ 1404.240055][ T9138] usb 2-1: can't read configurations, error -71 [ 1404.365245][T17812] Bluetooth: hci0: unsupported parameter 255 [ 1404.379531][T17812] Bluetooth: hci0: unsupported parameter 255 [ 1404.586503][T17819] netlink: 'syz.4.3073': attribute type 6 has an invalid length. [ 1404.793114][ T9138] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1509.875254][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1509.882249][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2974/1:b..l [ 1509.890709][ C1] rcu: (detected by 1, t=10502 jiffies, g=129281, q=196 ncpus=2) [ 1509.898517][ C1] task:kworker/u4:10 state:R running task stack:21456 pid:2974 ppid:2 flags:0x00004000 [ 1509.910417][ C1] Workqueue: bat_events batadv_nc_worker [ 1509.916078][ C1] Call Trace: [ 1509.919359][ C1] [ 1509.922293][ C1] __schedule+0x1553/0x45a0 [ 1509.926841][ C1] ? asan.module_dtor+0x20/0x20 [ 1509.931705][ C1] ? mark_lock+0x94/0x320 [ 1509.936054][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1509.942049][ C1] ? preempt_schedule_irq+0xb4/0x150 [ 1509.947337][ C1] preempt_schedule_irq+0xbf/0x150 [ 1509.952446][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 1509.958170][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1509.963983][ C1] irqentry_exit+0x67/0x70 [ 1509.968495][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1509.974482][ C1] RIP: 0010:lock_acquire+0x208/0x420 [ 1509.979774][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 1509.999430][ C1] RSP: 0018:ffffc9000bde7a40 EFLAGS: 00000206 [ 1510.005507][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: d1b89e953a530300 [ 1510.013500][ C1] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8fa0 [ 1510.021489][ C1] RBP: ffffc9000bde7b48 R08: dffffc0000000000 R09: 1ffffffff2238ca0 [ 1510.029464][ C1] R10: dffffc0000000000 R11: fffffbfff2238ca1 R12: 1ffff920017bcf54 [ 1510.037446][ C1] R13: ffffffff8d1320e0 R14: 0000000000000246 R15: dffffc0000000000 [ 1510.045484][ C1] ? batadv_nc_worker+0xd2/0x610 [ 1510.050443][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1510.055825][ C1] ? batadv_nc_worker+0xd2/0x610 [ 1510.060765][ C1] ? batadv_nc_worker+0xd2/0x610 [ 1510.065706][ C1] ? batadv_nc_worker+0xd2/0x610 [ 1510.070667][ C1] batadv_nc_worker+0xef/0x610 [ 1510.075460][ C1] ? batadv_nc_worker+0xd2/0x610 [ 1510.080408][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 1510.086155][ C1] process_scheduled_works+0xa5d/0x15d0 [ 1510.091741][ C1] ? worker_attach_to_pool+0x380/0x380 [ 1510.097226][ C1] ? assign_work+0x3d2/0x5d0 [ 1510.101838][ C1] worker_thread+0xa55/0xfc0 [ 1510.106457][ C1] kthread+0x2fa/0x390 [ 1510.110541][ C1] ? pr_cont_work+0x560/0x560 [ 1510.115343][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1510.119955][ C1] ret_from_fork+0x48/0x80 [ 1510.124381][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1510.128972][ C1] ret_from_fork_asm+0x11/0x20 [ 1510.133755][ C1] [ 1510.136781][ C1] rcu: rcu_preempt kthread starved for 10246 jiffies! g129281 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1510.148063][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1510.158035][ C1] rcu: RCU grace-period kthread stack dump: [ 1510.163918][ C1] task:rcu_preempt state:R running task stack:27112 pid:17 ppid:2 flags:0x00004000 [ 1510.174693][ C1] Call Trace: [ 1510.177970][ C1] [ 1510.180905][ C1] __schedule+0x1553/0x45a0 [ 1510.185445][ C1] ? _raw_spin_unlock_irqrestore+0x51/0x120 [ 1510.191384][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1510.197291][ C1] ? asan.module_dtor+0x20/0x20 [ 1510.202154][ C1] ? enqueue_timer+0x23d/0x550 [ 1510.206917][ C1] ? __mod_timer+0x984/0xdb0 [ 1510.211521][ C1] schedule+0xbd/0x170 [ 1510.215604][ C1] schedule_timeout+0x188/0x2d0 [ 1510.220455][ C1] ? console_conditional_schedule+0x40/0x40 [ 1510.226359][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1510.232264][ C1] ? update_process_times+0x1b0/0x1b0 [ 1510.237647][ C1] ? prepare_to_swait_event+0x339/0x360 [ 1510.243206][ C1] rcu_gp_fqs_loop+0x313/0x1590 [ 1510.248053][ C1] ? rcu_gp_init+0x1162/0x1560 [ 1510.252812][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 1510.257665][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 1510.263826][ C1] ? rcu_gp_init+0x1560/0x1560 [ 1510.268591][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 1510.273467][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1510.278685][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1510.283897][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 1510.288510][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1510.293668][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 1510.298618][ C1] ? __kthread_parkme+0x162/0x1c0 [ 1510.303650][ C1] kthread+0x2fa/0x390 [ 1510.307726][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1510.312845][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1510.317431][ C1] ret_from_fork+0x48/0x80 [ 1510.321853][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1510.326445][ C1] ret_from_fork_asm+0x11/0x20 [ 1510.331221][ C1] [ 1510.334324][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1510.340648][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1510.345893][ C0] NMI backtrace for cpu 0 [ 1510.345903][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 1510.345919][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1510.345928][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 1510.345952][ C0] Code: 19 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 d3 41 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 1510.345967][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c6 [ 1510.345981][ C0] RAX: af69ce7f0bdb6d00 RBX: ffffffff8162a8f1 RCX: af69ce7f0bdb6d00 [ 1510.345996][ C0] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fa0 [ 1510.346007][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 1510.346020][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: 1ffffffff19c0fbc [ 1510.346032][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 1510.346044][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1510.346057][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1510.346069][ C0] CR2: 00007fc16ef00815 CR3: 0000000078813000 CR4: 00000000003506f0 [ 1510.346085][ C0] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 1510.346094][ C0] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1510.346104][ C0] Call Trace: [ 1510.346111][ C0] [ 1510.346116][ C0] default_idle+0x13/0x20 [ 1510.346137][ C0] default_idle_call+0x6c/0xa0 [ 1510.346159][ C0] do_idle+0x221/0x590 [ 1510.346182][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1510.346208][ C0] ? do_idle+0x56d/0x590 [ 1510.346229][ C0] cpu_startup_entry+0x43/0x60 [ 1510.346255][ C0] rest_init+0x2e2/0x300 [ 1510.346276][ C0] ? time_init+0x40/0x40 [ 1510.346295][ C0] arch_call_rest_init+0xe/0x10 [ 1510.346317][ C0] start_kernel+0x459/0x4e0 [ 1510.346339][ C0] x86_64_start_reservations+0x2a/0x30 [ 1510.346359][ C0] x86_64_start_kernel+0x60/0x60 [ 1510.346377][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1510.346407][ C0]