last executing test programs: 17.420256768s ago: executing program 0 (id=2439): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xca13, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x20) 16.973809109s ago: executing program 0 (id=2442): syz_emit_ethernet(0x6a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000500)=""/212, 0xd4) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r1, @ANYBLOB="010300400000002200001f0000000c0006000100000001"], 0x20}, 0x1, 0x3000000}, 0x0) 16.153046496s ago: executing program 0 (id=2445): getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x100}, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f00000005c0)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) socket$inet6(0xa, 0x6, 0x0) 13.764907621s ago: executing program 0 (id=2448): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9b000/0x2000)=nil}) r3 = dup(r2) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="449fa00908c01f0894adebc3816a1b4970f0779780c263bb97186b6b1301e73c23aaa78e97ca5fa6ff021a3bf1c3fd08d604e470da872a48fdfc225965a9bb39f7db7fab9000d49a57c0efc3910875213403c32873b8840b315068a0819380ee2a91506a05e07606edc2c1b6bfe9fad30e8ad721c9df73eb8c4a2dd07a99d2947392a5ac7b74", 0x86}], 0x1, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.841099714s ago: executing program 0 (id=2452): socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000f00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e0, 0x390, 0x298, 0xd8, 0x1c0, 0x390, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@multicast1}}}, {{@ip={@dev, @remote, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan0\x00', {}, {}, 0x0, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) 12.448762092s ago: executing program 0 (id=2455): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 12.251138309s ago: executing program 1 (id=2457): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) setuid(0x0) linkat(r0, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1400) 11.832786741s ago: executing program 1 (id=2459): syz_usb_connect(0x0, 0x0, 0x0, 0x0) 10.827812691s ago: executing program 1 (id=2464): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_submit(r0, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 9.512337059s ago: executing program 1 (id=2467): syz_emit_ethernet(0x6a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000500)=""/212, 0xd4) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r1, @ANYBLOB="010300400000002200001f0000000c0006000100000001"], 0x20}, 0x1, 0x3000000}, 0x0) 9.079917988s ago: executing program 1 (id=2469): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008060001080006040002"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f000000000000000000c6c94371920a00000000003cf2c33337e16174c7f8b3"], &(0x7f0000000000)='GPL\x00'}, 0xc9) 8.356518897s ago: executing program 1 (id=2472): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) 8.243520808s ago: executing program 3 (id=2473): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7a, 0xd8, 0x83, 0x0, 0xd46, 0x2012, 0xd35f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x8e, 0xd3}}]}}]}}, 0x0) 6.389054241s ago: executing program 4 (id=2480): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x100010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)='G', 0xfffffffffffffca0, 0x8001, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r0, 0x20, &(0x7f0000000200)={&(0x7f0000000280)=""/149, 0x95, 0x0, &(0x7f00000003c0)=""/75, 0x4b}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$isdn(0x22, 0x2, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001880)=[{{0x0, 0x2, 0x0}}], 0xf000, 0x10002, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000480)=0x80000001) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x68, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}, [@mark={0xc}, @replay_esn_val={0x1c}]}, 0x68}}, 0x0) 5.614319749s ago: executing program 4 (id=2482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5.528505097s ago: executing program 2 (id=2483): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), 0x4) sendfile(r0, r1, 0x0, 0x8000002b) 4.966674499s ago: executing program 3 (id=2484): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) 4.100301821s ago: executing program 3 (id=2485): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xca13, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x20) 3.689180733s ago: executing program 2 (id=2486): syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) 3.539413069s ago: executing program 3 (id=2487): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153}, 0x15) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) pipe(&(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', 0x0}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 3.125636897s ago: executing program 4 (id=2488): syz_emit_ethernet(0x6a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000500)=""/212, 0xd4) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r1, @ANYBLOB="010300400000002200001f0000000c0006000100000001"], 0x20}, 0x1, 0x3000000}, 0x0) 2.964616673s ago: executing program 2 (id=2489): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_submit(r0, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0x8010aa02, 0x0) 2.894547039s ago: executing program 3 (id=2490): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) timer_create(0x2, 0x0, &(0x7f0000000280)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 2.720348223s ago: executing program 4 (id=2491): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x100010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)='G', 0xfffffffffffffca0, 0x8001, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r0, 0x20, &(0x7f0000000200)={&(0x7f0000000280)=""/149, 0x95, 0x0, &(0x7f00000003c0)=""/75, 0x4b}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$isdn(0x22, 0x2, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001880)=[{{0x0, 0x2, 0x0}}], 0xf000, 0x10002, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000480)=0x80000001) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x68, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}, [@mark={0xc}, @replay_esn_val={0x1c}]}, 0x68}}, 0x0) 1.905807943s ago: executing program 3 (id=2493): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7a, 0xd8, 0x83, 0x0, 0xd46, 0x2012, 0xd35f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe3, 0x8e, 0xd3}}]}}]}}, 0x0) 1.792716372s ago: executing program 2 (id=2494): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff81", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.378128261s ago: executing program 4 (id=2495): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) dup3(0xffffffffffffffff, r0, 0x0) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) 478.975395ms ago: executing program 2 (id=2496): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xca13, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x20) 202.36422ms ago: executing program 4 (id=2497): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x8, 0x7fe2, 0x1}, 0x48) vmsplice(r0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=2498): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) kernel console output (not intermixed with test programs): s: Mfr=0, Product=0, SerialNumber=0 [ 736.629530][ T10] usb 1-1: config 0 descriptor?? [ 737.141358][ T10] aquacomputer_d5next 0003:0C70:F0B6.0004: item fetching failed at offset 2/5 [ 737.220040][ T10] aquacomputer_d5next 0003:0C70:F0B6.0004: probe with driver aquacomputer_d5next failed with error -22 [ 737.333592][ T10] usb 1-1: USB disconnect, device number 44 [ 738.438513][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 738.681814][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 738.704932][ T10] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.716501][ T10] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.726752][ T10] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 738.745823][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 738.757026][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 738.767704][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.832568][ T10] usb 5-1: config 0 descriptor?? [ 739.327275][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 739.334134][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 739.413672][ T10] usb 5-1: USB disconnect, device number 39 [ 739.558885][T10653] fuse: Unknown parameter 'group_i00000000000000000000' [ 741.015756][ T25] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 741.272192][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 741.323485][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.336156][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.346419][ T25] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 741.355909][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.415854][ T25] usb 4-1: config 0 descriptor?? [ 741.425840][ T3840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.434232][ T3840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.700151][ T4087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.709088][ T4087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.949338][ T25] aquacomputer_d5next 0003:0C70:F0B6.0005: item fetching failed at offset 2/5 [ 742.047980][ T25] aquacomputer_d5next 0003:0C70:F0B6.0005: probe with driver aquacomputer_d5next failed with error -22 [ 742.171880][ T25] usb 4-1: USB disconnect, device number 38 [ 742.385721][ T5233] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 742.612009][ T5233] usb 2-1: Using ep0 maxpacket: 16 [ 742.683385][ T5233] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.694894][ T5233] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.705432][ T5233] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 742.718621][ T5233] usb 2-1: config 0 interface 0 has no altsetting 0 [ 742.725706][ T5233] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 742.735658][ T5233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.799808][ T5233] usb 2-1: config 0 descriptor?? [ 742.986800][T10696] fuse: Unknown parameter 'group_i00000000000000000000' [ 743.079534][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1782'. [ 743.089143][T10698] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1782'. [ 743.294724][ T5233] usbhid 2-1:0.0: can't add hid device: -71 [ 743.301565][ T5233] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 743.348942][ T5233] usb 2-1: USB disconnect, device number 51 [ 745.023305][ T5233] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 745.252534][ T5233] usb 2-1: Using ep0 maxpacket: 16 [ 745.267275][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1795'. [ 745.278077][T10736] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1795'. [ 745.323408][T10740] fuse: Unknown parameter 'group_i00000000000000000000' [ 745.380255][ T5233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.391873][ T5233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.402009][ T5233] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 745.415074][ T5233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.539155][ T5233] usb 2-1: config 0 descriptor?? [ 746.111833][ T5233] aquacomputer_d5next 0003:0C70:F0B6.0006: item fetching failed at offset 3/5 [ 746.262147][ T5233] aquacomputer_d5next 0003:0C70:F0B6.0006: probe with driver aquacomputer_d5next failed with error -22 [ 746.383649][ T5233] usb 2-1: USB disconnect, device number 52 [ 746.981926][ T25] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 747.222019][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 747.236028][ T25] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.250080][ T25] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.261111][ T25] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 747.274459][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 747.281362][ T25] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 747.290833][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.321844][T10758] loop2: detected capacity change from 0 to 2048 [ 747.379702][ T25] usb 5-1: config 0 descriptor?? [ 747.472966][T10758] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 747.553277][T10758] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 747.567998][T10758] UDF-fs: Scanning with blocksize 512 failed [ 747.785663][T10758] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 747.867067][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 747.873978][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 747.935058][ T25] usb 5-1: USB disconnect, device number 40 [ 748.874820][T10785] fuse: Unknown parameter 'group_i00000000000000000000' [ 749.511629][ T1020] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 749.741708][ T1020] usb 1-1: Using ep0 maxpacket: 16 [ 749.766298][ T1020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.777754][ T1020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.787982][ T1020] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 749.797521][ T1020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.892678][ T1020] usb 1-1: config 0 descriptor?? [ 750.403903][ T1020] aquacomputer_d5next 0003:0C70:F0B6.0007: item fetching failed at offset 3/5 [ 750.448509][ T1020] aquacomputer_d5next 0003:0C70:F0B6.0007: probe with driver aquacomputer_d5next failed with error -22 [ 750.582404][ T1020] usb 1-1: USB disconnect, device number 45 [ 750.791146][T10811] loop4: detected capacity change from 0 to 2048 [ 750.912986][T10811] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 750.925028][T10811] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 750.936625][T10811] UDF-fs: Scanning with blocksize 512 failed [ 751.022051][ T7922] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 751.042071][T10811] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 751.264814][ T7922] usb 3-1: Using ep0 maxpacket: 16 [ 751.355783][ T7922] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.367731][ T7922] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.381379][ T7922] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 751.394801][ T7922] usb 3-1: config 0 interface 0 has no altsetting 0 [ 751.401798][ T7922] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 751.411124][ T7922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.496332][ T7922] usb 3-1: config 0 descriptor?? [ 752.205444][ T7922] usbhid 3-1:0.0: can't add hid device: -71 [ 752.212188][ T7922] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 752.352550][ T7922] usb 3-1: USB disconnect, device number 33 [ 752.437640][T10839] fuse: Unknown parameter 'group_i00000000000000000000' [ 753.758221][ T7922] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 753.811975][T10862] loop0: detected capacity change from 0 to 512 [ 753.831856][T10862] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 753.991717][ T7922] usb 3-1: Using ep0 maxpacket: 16 [ 754.036173][ T7922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.047762][ T7922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.058191][ T7922] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 754.067608][ T7922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.078807][T10862] EXT4-fs (loop0): 1 orphan inode deleted [ 754.087347][T10862] EXT4-fs (loop0): 1 truncate cleaned up [ 754.095762][T10862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 754.128701][ T7922] usb 3-1: config 0 descriptor?? [ 754.318793][T10862] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 754.375743][T10862] EXT4-fs (loop0): Remounting filesystem read-only [ 754.679779][ T7922] aquacomputer_d5next 0003:0C70:F0B6.0008: item fetching failed at offset 3/5 [ 754.708694][ T7922] aquacomputer_d5next 0003:0C70:F0B6.0008: probe with driver aquacomputer_d5next failed with error -22 [ 754.844538][ T8963] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.878231][ T7922] usb 3-1: USB disconnect, device number 34 [ 754.976134][T10882] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1844'. [ 756.556735][T10910] loop4: detected capacity change from 0 to 512 [ 756.625708][T10910] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 756.767877][T10910] EXT4-fs (loop4): 1 orphan inode deleted [ 756.780154][T10910] EXT4-fs (loop4): 1 truncate cleaned up [ 756.789739][T10910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 756.985683][T10910] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 757.071995][T10910] EXT4-fs (loop4): Remounting filesystem read-only [ 757.467735][ T8919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.915109][T10957] loop2: detected capacity change from 0 to 512 [ 759.013116][T10957] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 759.192760][T10957] EXT4-fs (loop2): 1 orphan inode deleted [ 759.198854][T10957] EXT4-fs (loop2): 1 truncate cleaned up [ 759.207642][T10957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 759.646504][T10394] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.616305][T11003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1890'. [ 764.926833][T11045] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1906'. [ 765.952544][T11058] loop3: detected capacity change from 0 to 764 [ 765.980929][T11058] rock: directory entry would overflow storage [ 765.990253][T11058] rock: sig=0x4654, size=5, remaining=4 [ 767.357331][ T1646] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 767.936923][ T1646] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.948202][ T1646] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 767.958086][ T1646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.032683][ T1646] usb 3-1: config 0 descriptor?? [ 768.053372][ T1646] pwc: Askey VC010 type 2 USB webcam detected. [ 768.437263][ T1646] pwc: send_video_command error -71 [ 768.442753][ T1646] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 768.453130][ T1646] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 768.489521][T11078] loop3: detected capacity change from 0 to 512 [ 768.578968][T11078] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 768.592966][ T1646] usb 3-1: USB disconnect, device number 35 [ 768.614446][T11078] EXT4-fs (loop3): orphan cleanup on readonly fs [ 768.685349][T11078] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 768.760954][T11078] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 768.872160][T11078] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.1918: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 768.937029][T11078] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1918: couldn't read orphan inode 13 (err -117) [ 769.010900][T11078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 769.102263][ T1646] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 769.348762][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 769.348837][ T29] audit: type=1326 audit(1721993627.178:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11074 comm="syz.3.1918" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd56e977299 code=0x0 [ 769.369500][ T1646] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.388395][ T1646] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 769.397867][ T1646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.414126][T11091] Invalid ELF section header overflow [ 769.464510][ T1646] usb 3-1: config 0 descriptor?? [ 769.530246][ T1646] pwc: Askey VC010 type 2 USB webcam detected. [ 769.695262][T11094] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1924'. [ 769.916415][ T1646] pwc: recv_control_msg error -32 req 02 val 2b00 [ 769.940320][ T7849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.953193][ T1646] pwc: recv_control_msg error -32 req 02 val 2700 [ 769.977242][ T1646] pwc: recv_control_msg error -32 req 02 val 2c00 [ 770.042406][ T1646] pwc: recv_control_msg error -32 req 04 val 1000 [ 770.082537][ T1646] pwc: recv_control_msg error -32 req 04 val 1300 [ 770.121903][ T1646] pwc: recv_control_msg error -32 req 04 val 1400 [ 770.162329][ T1646] pwc: recv_control_msg error -32 req 02 val 2000 [ 770.197675][ T1646] pwc: recv_control_msg error -32 req 02 val 2100 [ 770.242206][ T1646] pwc: recv_control_msg error -32 req 04 val 1500 [ 770.290276][ T1646] pwc: recv_control_msg error -32 req 02 val 2500 [ 770.512285][ T1646] pwc: recv_control_msg error -71 req 02 val 2600 [ 770.561220][ T1646] pwc: recv_control_msg error -71 req 02 val 2900 [ 770.612304][ T1646] pwc: recv_control_msg error -71 req 02 val 2800 [ 770.635561][ T1646] pwc: recv_control_msg error -71 req 04 val 1100 [ 770.662995][ T1646] pwc: recv_control_msg error -71 req 04 val 1200 [ 770.691291][ T1646] pwc: Registered as video71. [ 770.703250][ T1646] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input38 [ 770.782571][ T1646] usb 3-1: USB disconnect, device number 36 [ 772.019945][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 772.026825][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 [ 772.280258][T11127] loop1: detected capacity change from 0 to 256 [ 772.797822][T11140] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1941'. [ 773.472414][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 773.732801][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.743452][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 773.753564][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.834840][ T10] usb 4-1: config 0 descriptor?? [ 773.865654][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 774.108978][ T10] pwc: send_video_command error -71 [ 774.114639][ T10] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 774.123195][ T10] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 774.156796][ T10] usb 4-1: USB disconnect, device number 39 [ 774.751725][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 775.034168][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.045391][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 775.056285][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.139402][ T10] usb 4-1: config 0 descriptor?? [ 775.185269][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 775.358755][T11175] digital: digital_start_poll: Unknown protocol [ 775.585664][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 775.632067][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 775.669222][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 775.712609][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 775.745182][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 775.754741][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 775.770947][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 775.786963][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 775.831783][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 775.878800][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 776.104607][T11185] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1960'. [ 776.198136][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 776.221595][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 776.248849][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 776.263958][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 776.278210][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 776.298394][ T10] pwc: Registered as video71. [ 776.306714][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input39 [ 776.380774][ T10] usb 4-1: USB disconnect, device number 40 [ 777.936742][T11208] digital: digital_start_poll: Unknown protocol [ 779.526376][ T1646] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 779.754051][ T1646] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.765351][ T1646] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 779.774857][ T1646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.839191][ T1646] usb 4-1: config 0 descriptor?? [ 779.880232][ T1646] pwc: Askey VC010 type 2 USB webcam detected. [ 780.150965][ T1646] pwc: send_video_command error -71 [ 780.156582][ T1646] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 780.164877][ T1646] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 780.277786][ T1646] usb 4-1: USB disconnect, device number 41 [ 780.811061][ T1646] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 781.061869][ T1646] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.073044][ T1646] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 781.082403][ T1646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.175035][ T1646] usb 4-1: config 0 descriptor?? [ 781.263622][ T1646] pwc: Askey VC010 type 2 USB webcam detected. [ 781.626903][ T1646] pwc: recv_control_msg error -32 req 02 val 2b00 [ 781.651836][ T1646] pwc: recv_control_msg error -32 req 02 val 2700 [ 781.689079][ T1646] pwc: recv_control_msg error -32 req 02 val 2c00 [ 781.736176][ T1646] pwc: recv_control_msg error -32 req 04 val 1000 [ 781.754585][ T1646] pwc: recv_control_msg error -32 req 04 val 1300 [ 781.791765][ T1646] pwc: recv_control_msg error -32 req 04 val 1400 [ 781.833771][ T1646] pwc: recv_control_msg error -32 req 02 val 2000 [ 781.862239][ T1646] pwc: recv_control_msg error -32 req 02 val 2100 [ 781.881714][ T1646] pwc: recv_control_msg error -32 req 04 val 1500 [ 781.928292][ T1646] pwc: recv_control_msg error -32 req 02 val 2500 [ 782.158596][ T1646] pwc: recv_control_msg error -71 req 02 val 2600 [ 782.212148][ T1646] pwc: recv_control_msg error -71 req 02 val 2900 [ 782.252493][ T1646] pwc: recv_control_msg error -71 req 02 val 2800 [ 782.293039][ T1646] pwc: recv_control_msg error -71 req 04 val 1100 [ 782.327346][ T1646] pwc: recv_control_msg error -71 req 04 val 1200 [ 782.383381][ T1646] pwc: Registered as video71. [ 782.391771][ T1646] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input40 [ 782.466050][ T1646] usb 4-1: USB disconnect, device number 42 [ 785.584451][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 785.872334][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.882952][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 785.892473][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.965705][ T10] usb 4-1: config 0 descriptor?? [ 785.999097][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 786.259082][ T10] pwc: send_video_command error -71 [ 786.273163][ T10] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 786.281291][ T10] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 786.405261][ T10] usb 4-1: USB disconnect, device number 43 [ 786.942800][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 787.264714][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.275460][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 787.284965][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.384617][ T10] usb 4-1: config 0 descriptor?? [ 787.483480][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 787.838577][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 787.882229][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 787.921909][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 787.955620][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 788.005249][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 788.031846][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 788.066816][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 788.114234][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 788.125531][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 788.202256][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 788.443271][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 788.476655][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 788.502431][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 788.534698][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 788.561919][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 788.588940][ T10] pwc: Registered as video71. [ 788.597565][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input41 [ 788.728253][ T10] usb 4-1: USB disconnect, device number 44 [ 789.677851][ T5187] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 792.291942][ T7922] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 792.534425][ T7922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.545579][ T7922] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 792.555112][ T7922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.624220][ T7922] usb 3-1: config 0 descriptor?? [ 792.647268][ T5187] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 792.682990][ T7922] pwc: Askey VC010 type 2 USB webcam detected. [ 792.899924][ T7922] pwc: send_video_command error -71 [ 792.908155][ T7922] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 792.916663][ T7922] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 793.039859][ T7922] usb 3-1: USB disconnect, device number 37 [ 793.592057][ T7922] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 793.797240][ T7922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.807945][ T7922] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 793.817329][ T7922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.903470][ T7922] usb 3-1: config 0 descriptor?? [ 793.921019][ T7922] pwc: Askey VC010 type 2 USB webcam detected. [ 794.330739][ T7922] pwc: recv_control_msg error -32 req 02 val 2b00 [ 794.381779][ T7922] pwc: recv_control_msg error -32 req 02 val 2700 [ 794.451811][ T7922] pwc: recv_control_msg error -32 req 02 val 2c00 [ 794.512775][ T7922] pwc: recv_control_msg error -32 req 04 val 1000 [ 794.562386][ T7922] pwc: recv_control_msg error -32 req 04 val 1300 [ 794.584453][ T7922] pwc: recv_control_msg error -32 req 04 val 1400 [ 794.621859][ T7922] pwc: recv_control_msg error -32 req 02 val 2000 [ 794.668619][ T7922] pwc: recv_control_msg error -32 req 02 val 2100 [ 794.683198][ T29] audit: type=1326 audit(1721993652.468:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11455 comm="syz.4.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097a977299 code=0x7ffc0000 [ 794.706220][ T29] audit: type=1326 audit(1721993652.498:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11455 comm="syz.4.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097a977299 code=0x7ffc0000 [ 794.721097][ T7922] pwc: recv_control_msg error -32 req 04 val 1500 [ 794.729004][ T29] audit: type=1326 audit(1721993652.508:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11455 comm="syz.4.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f097a977299 code=0x7ffc0000 [ 794.758506][ T29] audit: type=1326 audit(1721993652.518:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11455 comm="syz.4.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097a977299 code=0x7ffc0000 [ 794.783580][ T29] audit: type=1326 audit(1721993652.528:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11455 comm="syz.4.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f097a977299 code=0x7ffc0000 [ 794.807243][ T29] audit: type=1326 audit(1721993652.528:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11455 comm="syz.4.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097a977299 code=0x7ffc0000 [ 794.813112][ T7922] pwc: recv_control_msg error -32 req 02 val 2500 [ 794.829878][ T29] audit: type=1326 audit(1721993652.528:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11455 comm="syz.4.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097a977299 code=0x7ffc0000 [ 794.859196][ T29] audit: type=1326 audit(1721993652.538:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11455 comm="syz.4.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f097a977299 code=0x7ffc0000 [ 794.989015][ T29] audit: type=1326 audit(1721993652.778:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11455 comm="syz.4.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097a977299 code=0x7ffc0000 [ 795.012720][ T29] audit: type=1326 audit(1721993652.778:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11455 comm="syz.4.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097a977299 code=0x7ffc0000 [ 795.130975][ T7922] pwc: recv_control_msg error -71 req 02 val 2600 [ 795.196905][ T7922] pwc: recv_control_msg error -71 req 02 val 2900 [ 795.222247][ T7922] pwc: recv_control_msg error -71 req 02 val 2800 [ 795.266094][ T7922] pwc: recv_control_msg error -71 req 04 val 1100 [ 795.351921][ T7922] pwc: recv_control_msg error -71 req 04 val 1200 [ 795.387597][ T7922] pwc: Registered as video71. [ 795.396039][ T7922] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input42 [ 795.544413][ T7922] usb 3-1: USB disconnect, device number 38 [ 796.582569][ T7922] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 796.697422][ T5187] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 796.827858][ T7922] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 796.839540][ T7922] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.850199][ T7922] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 796.861761][ T7922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.991069][ T7922] hub 4-1:128.0: USB hub found [ 797.326917][ T7922] hub 4-1:128.0: config failed, hub doesn't have any ports! (err -19) [ 798.114077][T11489] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2067'. [ 798.414738][ T7922] usbhid 4-1:128.0: can't add hid device: -71 [ 798.421774][ T7922] usbhid 4-1:128.0: probe with driver usbhid failed with error -71 [ 798.544249][ T7922] usb 4-1: USB disconnect, device number 45 [ 798.846006][ T5258] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 798.889139][T11493] loop4: detected capacity change from 0 to 512 [ 798.967812][T11493] ext4: Unknown parameter 'noacl' [ 799.112511][ T5258] usb 3-1: Using ep0 maxpacket: 8 [ 799.160369][ T5258] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 799.171656][ T5258] usb 3-1: config 179 has no interface number 0 [ 799.178140][ T5258] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 799.190023][ T5258] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 799.201662][ T5258] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 799.213117][ T5258] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 799.224993][ T5258] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 799.238688][ T5258] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 799.248119][ T5258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.291958][T11491] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 799.776809][T11491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.794247][T11491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.067676][T11491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.078721][T11491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.413860][T11499] xt_CT: You must specify a L4 protocol and not use inversions on it [ 803.742598][ T7922] usb 3-1: USB disconnect, device number 39 [ 803.742626][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 803.742992][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 805.612801][ T1646] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 805.942682][ T1646] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.953400][ T1646] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 805.963038][ T1646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.164696][ T1646] usb 3-1: config 0 descriptor?? [ 806.220148][ T1646] pwc: Askey VC010 type 2 USB webcam detected. [ 806.615580][ T5184] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 806.662293][ T1646] pwc: send_video_command error -71 [ 806.662578][ T5184] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 806.667818][ T1646] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 806.682886][ T1646] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 806.702798][ T5184] Bluetooth: hci5: unexpected event for opcode 0x0809 [ 806.718919][ T5184] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 806.847730][ T1646] usb 3-1: USB disconnect, device number 40 [ 806.851593][ T5194] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 806.891738][ T5194] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 806.901213][ T5194] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 807.335103][ T1646] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 807.641102][ T1646] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.652086][ T1646] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 807.661284][ T1646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.786120][ T1646] usb 3-1: config 0 descriptor?? [ 807.942570][ T1646] pwc: Askey VC010 type 2 USB webcam detected. [ 808.056093][T11529] loop4: detected capacity change from 0 to 512 [ 808.191882][T11529] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent [ 808.256199][ T1646] pwc: recv_control_msg error -32 req 02 val 2b00 [ 808.302038][ T1646] pwc: recv_control_msg error -32 req 02 val 2700 [ 808.335376][ T1646] pwc: recv_control_msg error -32 req 02 val 2c00 [ 808.393811][ T1646] pwc: recv_control_msg error -32 req 04 val 1000 [ 808.881998][ T1646] pwc: recv_control_msg error -32 req 04 val 1300 [ 808.905980][ T1646] pwc: recv_control_msg error -32 req 04 val 1400 [ 808.922891][ T1646] pwc: recv_control_msg error -32 req 02 val 2000 [ 808.950711][ T1646] pwc: recv_control_msg error -32 req 02 val 2100 [ 808.965278][ T5187] Bluetooth: hci4: command tx timeout [ 808.998554][ T1646] pwc: recv_control_msg error -32 req 04 val 1500 [ 809.007375][ T1646] pwc: recv_control_msg error -32 req 02 val 2500 [ 809.054105][T11533] netlink: 'syz.4.2079': attribute type 4 has an invalid length. [ 809.146317][T11533] netlink: 'syz.4.2079': attribute type 4 has an invalid length. [ 809.233349][ T1646] pwc: recv_control_msg error -71 req 02 val 2600 [ 809.251945][ T1646] pwc: recv_control_msg error -71 req 02 val 2900 [ 809.275267][ T1646] pwc: recv_control_msg error -71 req 02 val 2800 [ 809.332465][ T1646] pwc: recv_control_msg error -71 req 04 val 1100 [ 809.350804][ T1646] pwc: recv_control_msg error -71 req 04 val 1200 [ 809.369599][T11513] chnl_net:caif_netlink_parms(): no params data found [ 809.416257][ T1646] pwc: Registered as video71. [ 809.425338][ T1646] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input43 [ 809.530789][ T1646] usb 3-1: USB disconnect, device number 41 [ 809.851075][T11538] loop0: detected capacity change from 0 to 256 [ 809.963994][T11539] loop3: detected capacity change from 0 to 512 [ 810.098612][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 810.098697][ T29] audit: type=1800 audit(1721993667.958:85): pid=11538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2082" name="bus" dev="loop0" ino=1048643 res=0 errno=0 [ 810.283794][T11539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 810.297412][T11539] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 811.047056][ T5187] Bluetooth: hci4: command tx timeout [ 811.132354][ T7849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 811.365331][T11554] loop2: detected capacity change from 0 to 256 [ 811.794225][ T4286] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.882400][T11513] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.890219][T11513] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.900031][T11513] bridge_slave_0: entered allmulticast mode [ 811.912216][T11513] bridge_slave_0: entered promiscuous mode [ 812.036895][ T4286] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.146732][T11513] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.154691][T11513] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.162787][T11513] bridge_slave_1: entered allmulticast mode [ 812.175622][T11513] bridge_slave_1: entered promiscuous mode [ 812.266319][ T4286] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.447991][ T5194] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 812.612815][ T4286] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.732079][T11566] loop3: detected capacity change from 0 to 128 [ 812.745952][T11566] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 812.873045][T11513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.977107][T11513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.122236][ T5194] Bluetooth: hci4: command tx timeout [ 813.365692][T11513] team0: Port device team_slave_0 added [ 813.390799][ T4286] bridge_slave_1: left allmulticast mode [ 813.396791][ T4286] bridge_slave_1: left promiscuous mode [ 813.411313][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.487151][ T4286] bridge_slave_0: left allmulticast mode [ 813.493146][ T4286] bridge_slave_0: left promiscuous mode [ 813.499736][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.104133][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.172942][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.198965][ T4286] bond0 (unregistering): Released all slaves [ 814.269645][T11513] team0: Port device team_slave_1 added [ 814.478156][T11513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.485512][T11513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.512007][T11513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.607695][T11513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.615006][T11513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.644280][T11513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.013694][T11571] loop0: detected capacity change from 0 to 256 [ 815.136954][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2094'. [ 815.201715][ T5194] Bluetooth: hci4: command tx timeout [ 815.289743][ T5187] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 815.294333][ T29] audit: type=1800 audit(1721993673.028:86): pid=11571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2093" name="bus" dev="loop0" ino=1048651 res=0 errno=0 [ 815.318877][ T4286] hsr_slave_0: left promiscuous mode [ 815.330527][ T5187] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 815.339125][ T4286] hsr_slave_1: left promiscuous mode [ 815.363451][ T5187] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 815.385270][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 815.386707][ T5187] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 815.393316][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.427948][ T5187] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 815.432015][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 815.443076][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.463267][ T5187] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 815.545561][ T4286] veth1_macvtap: left promiscuous mode [ 815.556416][ T4286] veth0_macvtap: left promiscuous mode [ 815.562496][ T4286] veth1_vlan: left promiscuous mode [ 815.568047][ T4286] veth0_vlan: left promiscuous mode [ 817.217505][ T4286] team0 (unregistering): Port device team_slave_1 removed [ 817.300446][ T4286] team0 (unregistering): Port device team_slave_0 removed [ 817.632630][ T5187] Bluetooth: hci1: command tx timeout [ 817.824558][T11513] hsr_slave_0: entered promiscuous mode [ 817.877697][T11513] hsr_slave_1: entered promiscuous mode [ 817.947306][T11513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 817.955311][T11513] Cannot create hsr debugfs directory [ 818.816580][T11588] loop0: detected capacity change from 0 to 512 [ 818.844013][T11588] ext4: Unknown parameter 'nouser_xattr' [ 818.986512][ T4286] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.329954][ T4286] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.349087][ T5187] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 819.353195][ T5258] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 819.370410][ T5187] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 819.382522][ T5187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 819.417406][ T5187] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 819.432500][ T5187] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 819.446869][ T5187] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 819.455262][ T4286] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.575039][ T5258] usb 1-1: Using ep0 maxpacket: 16 [ 819.613617][ T5258] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.625677][ T5258] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.636395][ T5258] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 819.650223][ T5258] usb 1-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.00 [ 819.662759][ T5258] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.687136][ T5194] Bluetooth: hci1: command tx timeout [ 819.706632][ T4286] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.711117][ T5258] usb 1-1: config 0 descriptor?? [ 820.163686][ T5258] wacom 0003:056A:0323.0009: unknown main item tag 0x0 [ 820.170922][ T5258] wacom 0003:056A:0323.0009: unknown main item tag 0x0 [ 820.178736][ T5258] wacom 0003:056A:0323.0009: unknown main item tag 0x1 [ 820.186051][ T5258] wacom 0003:056A:0323.0009: unknown main item tag 0x0 [ 820.193440][ T5258] wacom 0003:056A:0323.0009: unknown main item tag 0x0 [ 820.200630][ T5258] wacom 0003:056A:0323.0009: unknown main item tag 0x0 [ 820.208017][ T5258] wacom 0003:056A:0323.0009: unknown main item tag 0x0 [ 820.493841][ T5258] wacom 0003:056A:0323.0009: Unknown device_type for 'HID 056a:0323'. Assuming pen. [ 820.518510][ T4286] bridge_slave_1: left allmulticast mode [ 820.525639][ T4286] bridge_slave_1: left promiscuous mode [ 820.532727][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.573527][ T5258] wacom 0003:056A:0323.0009: hidraw0: USB HID v0.00 Device [HID 056a:0323] on usb-dummy_hcd.0-1/input0 [ 820.589292][ T5258] input: Wacom Intuos P M Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0323.0009/input/input44 [ 820.687179][ T4286] bridge_slave_0: left allmulticast mode [ 820.693499][ T4286] bridge_slave_0: left promiscuous mode [ 820.700125][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.806594][ T5258] usb 1-1: USB disconnect, device number 46 [ 821.379228][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 821.415224][ T5194] Bluetooth: hci5: unexpected event for opcode 0x0809 [ 821.439859][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 821.496636][ T4286] bond0 (unregistering): Released all slaves [ 821.616050][ T5194] Bluetooth: hci2: command tx timeout [ 821.764083][ T5194] Bluetooth: hci1: command tx timeout [ 822.201812][T11513] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 822.305811][T11513] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 822.349049][T11574] chnl_net:caif_netlink_parms(): no params data found [ 822.393296][T11513] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 822.489954][T11513] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 822.680860][T11613] loop3: detected capacity change from 0 to 256 [ 823.009994][ T29] audit: type=1800 audit(1721993680.798:87): pid=11613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2103" name="bus" dev="loop3" ino=1048655 res=0 errno=0 [ 823.090710][ T4286] hsr_slave_0: left promiscuous mode [ 823.140984][ T4286] hsr_slave_1: left promiscuous mode [ 823.149863][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.158185][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.224881][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 823.237073][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.347533][ T4286] veth1_macvtap: left promiscuous mode [ 823.353553][ T4286] veth0_macvtap: left promiscuous mode [ 823.359514][ T4286] veth1_vlan: left promiscuous mode [ 823.365318][ T4286] veth0_vlan: left promiscuous mode [ 823.682137][ T5194] Bluetooth: hci2: command tx timeout [ 823.853509][ T5194] Bluetooth: hci1: command tx timeout [ 824.311840][ T4286] team0 (unregistering): Port device team_slave_1 removed [ 824.408783][ T4286] team0 (unregistering): Port device team_slave_0 removed [ 824.878340][T11617] loop0: detected capacity change from 0 to 512 [ 825.161123][T11617] EXT4-fs (loop0): 1 truncate cleaned up [ 825.168705][T11617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 825.363386][T11593] chnl_net:caif_netlink_parms(): no params data found [ 825.408374][T11617] EXT4-fs error (device loop0): ext4_find_dest_de:2067: inode #2: block 13: comm syz.0.2104: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 825.559571][ T4286] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.761918][ T5194] Bluetooth: hci2: command tx timeout [ 825.916102][ T4286] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.121740][ T4286] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.258889][T11513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.268171][ T1646] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 826.285238][T11574] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.293188][T11574] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.305907][T11574] bridge_slave_0: entered allmulticast mode [ 826.315127][T11574] bridge_slave_0: entered promiscuous mode [ 826.346474][ T4286] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.412654][T11574] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.420346][T11574] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.428656][T11574] bridge_slave_1: entered allmulticast mode [ 826.437824][T11574] bridge_slave_1: entered promiscuous mode [ 826.526591][T11513] 8021q: adding VLAN 0 to HW filter on device team0 [ 826.562284][ T1646] usb 4-1: config 1 has an invalid interface number: 112 but max is 1 [ 826.570872][ T1646] usb 4-1: config 1 has an invalid descriptor of length 58, skipping remainder of the config [ 826.581610][ T1646] usb 4-1: config 1 has no interface number 0 [ 826.587973][ T1646] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.599658][ T1646] usb 4-1: too many endpoints for config 1 interface 112 altsetting 114: 101, using maximum allowed: 30 [ 826.613229][ T1646] usb 4-1: config 1 interface 112 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 826.627823][ T1646] usb 4-1: config 1 interface 112 has no altsetting 0 [ 826.753818][ T1646] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 826.763373][ T1646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.771795][ T1646] usb 4-1: Product: syz [ 826.776193][ T1646] usb 4-1: Manufacturer: syz [ 826.781018][ T1646] usb 4-1: SerialNumber: syz [ 826.782666][ T8963] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.871726][ T1646] usb 4-1: selecting invalid altsetting 1 [ 826.879043][ T4286] bridge_slave_1: left allmulticast mode [ 826.889546][ T4286] bridge_slave_1: left promiscuous mode [ 826.896768][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.963080][ T4286] bridge_slave_0: left allmulticast mode [ 826.969203][ T4286] bridge_slave_0: left promiscuous mode [ 826.977160][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.371029][ T1646] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 827.379882][ T1646] cdc_ncm 4-1:1.1: bind() failure [ 827.504158][ T1646] usb 4-1: USB disconnect, device number 46 [ 827.790058][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.842737][ T5194] Bluetooth: hci2: command tx timeout [ 827.843349][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.876797][ T4286] bond0 (unregistering): Released all slaves [ 827.904080][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.911944][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.953780][T11574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.120407][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.128312][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.171033][ T1646] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 828.185834][T11574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.338737][T11593] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.352641][T11593] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.360440][T11593] bridge_slave_0: entered allmulticast mode [ 828.369408][T11593] bridge_slave_0: entered promiscuous mode [ 828.371666][ T1646] usb 1-1: Using ep0 maxpacket: 16 [ 828.394283][ T1646] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.406802][ T1646] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.417077][ T1646] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 828.430324][ T1646] usb 1-1: config 0 interface 0 has no altsetting 0 [ 828.437483][ T1646] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 828.447135][ T1646] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.474116][ T1646] usb 1-1: config 0 descriptor?? [ 828.605941][T11574] team0: Port device team_slave_0 added [ 828.620789][T11593] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.629487][T11593] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.637946][T11593] bridge_slave_1: entered allmulticast mode [ 828.652731][T11593] bridge_slave_1: entered promiscuous mode [ 828.747559][T11574] team0: Port device team_slave_1 added [ 828.935136][ T1646] hid (null): usage index exceeded [ 828.940425][ T1646] hid (null): usage index exceeded [ 829.020532][ T1646] hid-generic 0003:045E:05DA.000A: unknown main item tag 0x0 [ 829.030571][ T1646] hid-generic 0003:045E:05DA.000A: ignoring exceeding usage max [ 829.045541][ T1646] hid-generic 0003:045E:05DA.000A: usage index exceeded [ 829.053071][ T1646] hid-generic 0003:045E:05DA.000A: item 0 1 2 0 parsing failed [ 829.086794][ T1646] hid-generic 0003:045E:05DA.000A: probe with driver hid-generic failed with error -22 [ 829.151297][T11593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.185392][ T1646] usb 1-1: USB disconnect, device number 47 [ 829.298305][ T4286] hsr_slave_0: left promiscuous mode [ 829.315422][ T4286] hsr_slave_1: left promiscuous mode [ 829.338831][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 829.347077][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.371113][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 829.380096][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.417523][ T4286] veth1_macvtap: left promiscuous mode [ 829.423693][ T4286] veth0_macvtap: left promiscuous mode [ 829.429471][ T4286] veth1_vlan: left promiscuous mode [ 829.435060][ T4286] veth0_vlan: left promiscuous mode [ 830.264602][ T4286] team0 (unregistering): Port device team_slave_1 removed [ 830.298977][ T4286] team0 (unregistering): Port device team_slave_0 removed [ 830.625703][T11593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.715852][T11574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.723286][T11574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.749895][T11574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.967055][T11513] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 831.006315][T11574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.014682][T11574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.041586][T11574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.108931][T11593] team0: Port device team_slave_0 added [ 831.165318][T11593] team0: Port device team_slave_1 added [ 831.232957][ T29] audit: type=1326 audit(1721993688.998:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c977299 code=0x7ffc0000 [ 831.256832][ T29] audit: type=1326 audit(1721993689.038:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff57c977299 code=0x7ffc0000 [ 831.279941][ T29] audit: type=1326 audit(1721993689.038:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c977299 code=0x7ffc0000 [ 831.302877][ T29] audit: type=1326 audit(1721993689.038:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c977299 code=0x7ffc0000 [ 831.327817][ T29] audit: type=1326 audit(1721993689.068:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff57c977299 code=0x7ffc0000 [ 831.351255][ T29] audit: type=1326 audit(1721993689.068:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c977299 code=0x7ffc0000 [ 831.374298][ T29] audit: type=1326 audit(1721993689.068:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c977299 code=0x7ffc0000 [ 831.397164][ T29] audit: type=1326 audit(1721993689.068:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff57c977299 code=0x7ffc0000 [ 831.420913][ T29] audit: type=1326 audit(1721993689.068:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c977299 code=0x7ffc0000 [ 831.445724][ T29] audit: type=1326 audit(1721993689.078:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11666 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c977299 code=0x7ffc0000 [ 831.655738][T11593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.664242][T11593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.692015][T11593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.857674][T11593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.866257][T11593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.893326][T11593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.043793][T11574] hsr_slave_0: entered promiscuous mode [ 832.065915][T11574] hsr_slave_1: entered promiscuous mode [ 832.301644][ T1020] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 832.510275][T11593] hsr_slave_0: entered promiscuous mode [ 832.531093][ T1020] usb 1-1: config 1 has an invalid descriptor of length 58, skipping remainder of the config [ 832.542152][ T1020] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 832.553847][ T1020] usb 1-1: config 1 has no interface number 0 [ 832.560197][ T1020] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.572368][ T1020] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 832.593571][T11593] hsr_slave_1: entered promiscuous mode [ 832.609727][T11593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 832.609910][ T1020] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 832.617710][T11593] Cannot create hsr debugfs directory [ 832.626893][ T1020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.627030][ T1020] usb 1-1: Product: syz [ 832.645548][ T1020] usb 1-1: Manufacturer: syz [ 832.652828][ T1020] usb 1-1: SerialNumber: syz [ 832.695331][ T1020] usb 1-1: selecting invalid altsetting 1 [ 832.907210][T11513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.098316][ T1020] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 833.105858][ T1020] cdc_ncm 1-1:1.1: bind() failure [ 833.485324][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 833.492252][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 [ 833.507526][ T1235] eth4 selects TX queue 0, but real number of TX queues is 0 [ 833.832188][T11513] veth0_vlan: entered promiscuous mode [ 833.945070][T11513] veth1_vlan: entered promiscuous mode [ 834.242600][T11513] veth0_macvtap: entered promiscuous mode [ 834.283753][T11513] veth1_macvtap: entered promiscuous mode [ 834.395202][T11593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 834.425985][T11593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 834.457611][T11593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 834.521749][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 834.531033][T11593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 834.608996][T11513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.619878][T11513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.630207][T11513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.641006][T11513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.655808][T11513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.723966][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 834.748843][ T10] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.760727][ T10] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.762696][T11513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 834.770850][ T10] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 834.781782][T11513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.794246][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 834.805467][T11513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 834.805562][T11513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.810128][T11513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.813981][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 834.851122][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.874416][T11513] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.884351][ T10] usb 4-1: config 0 descriptor?? [ 834.884421][T11513] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.899100][T11513] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.909331][T11513] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.926770][T11574] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 835.019003][T11574] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 835.053510][T11574] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 835.113564][T11574] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 835.240228][ T25] usb 1-1: USB disconnect, device number 48 [ 835.438325][ T10] hid (null): usage index exceeded [ 835.444402][ T10] hid (null): usage index exceeded [ 835.579527][ T10] hid-generic 0003:045E:05DA.000B: unknown main item tag 0x0 [ 835.587543][ T10] hid-generic 0003:045E:05DA.000B: ignoring exceeding usage max [ 835.602216][ T10] hid-generic 0003:045E:05DA.000B: usage index exceeded [ 835.609412][ T10] hid-generic 0003:045E:05DA.000B: item 0 1 2 0 parsing failed [ 835.708338][ T10] hid-generic 0003:045E:05DA.000B: probe with driver hid-generic failed with error -22 [ 835.848615][ T10] usb 4-1: USB disconnect, device number 47 [ 836.085200][T11593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 836.308013][T11593] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.458322][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.466123][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.507801][T11574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 836.567707][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.575515][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.771724][T11574] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.888157][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.895969][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.968081][T11593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 837.057333][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.065119][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.088637][T11593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.431923][T11574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.591738][ T1646] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 839.846176][T11574] veth0_vlan: entered promiscuous mode [ 839.862016][ T1646] usb 1-1: config 1 has an invalid descriptor of length 58, skipping remainder of the config [ 839.872758][ T1646] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 839.882050][ T1646] usb 1-1: config 1 has no interface number 0 [ 839.888395][ T1646] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.899712][ T1646] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 839.941986][ T1646] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 839.951627][ T1646] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.959898][ T1646] usb 1-1: Product: syz [ 839.964533][ T1646] usb 1-1: Manufacturer: syz [ 839.969364][ T1646] usb 1-1: SerialNumber: syz [ 840.006745][ T1646] usb 1-1: selecting invalid altsetting 1 [ 840.014724][T11574] veth1_vlan: entered promiscuous mode [ 840.264240][T11574] veth0_macvtap: entered promiscuous mode [ 840.323099][T11574] veth1_macvtap: entered promiscuous mode [ 840.447976][ T1646] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 840.454899][ T1646] cdc_ncm 1-1:1.1: bind() failure [ 840.460229][T11574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.471100][T11574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.481582][T11574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.494138][T11574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.504732][T11574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.515529][T11574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.532723][T11574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 840.679789][T11574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.690636][T11574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.701069][T11574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.711872][T11574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.724291][T11574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.736078][T11574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.754870][T11574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 840.810104][T11574] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.819340][T11574] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.828570][T11574] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.837675][T11574] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.536612][T11593] veth0_vlan: entered promiscuous mode [ 841.670242][T11593] veth1_vlan: entered promiscuous mode [ 841.962637][T11593] veth0_macvtap: entered promiscuous mode [ 842.042486][T11593] veth1_macvtap: entered promiscuous mode [ 842.198763][T11593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.211158][T11593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.221586][T11593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.232473][T11593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.242725][T11593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.253513][T11593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.263689][T11593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.275584][T11593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.291487][T11593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.339679][ T3123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.347936][ T3123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.472160][ T5230] usb 1-1: USB disconnect, device number 49 [ 842.521282][T11593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.532410][T11593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.542871][T11593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.553729][T11593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.565354][T11593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.577201][T11593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.588942][T11593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.600118][T11593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.615993][T11593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.704434][ T4087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.712735][ T4087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.747799][ T7922] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 842.951980][T11593] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.961203][T11593] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.971924][T11593] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.980941][T11593] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.995445][ T7922] usb 4-1: Using ep0 maxpacket: 16 [ 843.074378][ T7922] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.087385][ T7922] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.103124][ T7922] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 843.117257][ T7922] usb 4-1: config 0 interface 0 has no altsetting 0 [ 843.125097][ T7922] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 843.134562][ T7922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.205520][ T7922] usb 4-1: config 0 descriptor?? [ 843.871960][ T7922] usbhid 4-1:0.0: can't add hid device: -71 [ 843.878604][ T7922] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 843.973047][ T7922] usb 4-1: USB disconnect, device number 48 [ 844.241676][T11785] loop1: detected capacity change from 0 to 512 [ 844.364104][T11785] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 844.536307][T11785] EXT4-fs (loop1): 1 orphan inode deleted [ 844.542589][T11785] EXT4-fs (loop1): 1 truncate cleaned up [ 844.550087][T11785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 844.693989][T11785] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 844.781800][T11785] EXT4-fs (loop1): Remounting filesystem read-only [ 845.208165][T11513] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.971707][ T1646] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 846.209907][ T1646] usb 1-1: config 1 has an invalid descriptor of length 58, skipping remainder of the config [ 846.220657][ T1646] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 846.229953][ T1646] usb 1-1: config 1 has no interface number 0 [ 846.236530][ T1646] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.252036][ T1646] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 846.320472][ T1646] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 846.331085][ T1646] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.339906][ T1646] usb 1-1: Product: syz [ 846.344445][ T1646] usb 1-1: Manufacturer: syz [ 846.349281][ T1646] usb 1-1: SerialNumber: syz [ 846.407143][ T1646] usb 1-1: selecting invalid altsetting 1 [ 846.842092][ T1646] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 846.848549][ T1646] cdc_ncm 1-1:1.1: bind() failure [ 847.035676][ T3028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.044163][ T3028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.196933][ T4087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.205480][ T4087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.692394][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 847.937851][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 847.957268][ T10] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.968703][ T10] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.971841][ T1646] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 847.979390][ T10] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 847.999725][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 848.007288][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 848.019176][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.081118][ T10] usb 4-1: config 0 descriptor?? [ 848.340324][ T1646] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.351017][ T1646] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 848.360604][ T1646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.383005][ T1646] usb 3-1: config 0 descriptor?? [ 848.432367][ T1646] pwc: Askey VC010 type 2 USB webcam detected. [ 848.688532][ T1646] pwc: send_video_command error -71 [ 848.694260][ T1646] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 848.704117][ T1646] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 848.782098][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 848.788714][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 848.877183][ T1646] usb 3-1: USB disconnect, device number 42 [ 848.881657][ T10] usb 4-1: USB disconnect, device number 49 [ 849.013680][ T5258] usb 1-1: USB disconnect, device number 50 [ 849.357167][ T1646] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 849.597900][ T1646] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.608798][ T1646] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 849.618312][ T1646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.660027][ T1646] usb 3-1: config 0 descriptor?? [ 849.688221][ T1646] pwc: Askey VC010 type 2 USB webcam detected. [ 850.009073][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.017638][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.100557][ T1646] pwc: recv_control_msg error -32 req 02 val 2b00 [ 850.128601][ T1646] pwc: recv_control_msg error -32 req 02 val 2700 [ 850.196521][ T1646] pwc: recv_control_msg error -32 req 02 val 2c00 [ 850.227373][ T1646] pwc: recv_control_msg error -32 req 04 val 1000 [ 850.257036][ T1646] pwc: recv_control_msg error -32 req 04 val 1300 [ 850.277419][ T1646] pwc: recv_control_msg error -32 req 04 val 1400 [ 850.294452][ T1646] pwc: recv_control_msg error -32 req 02 val 2000 [ 850.305189][ T1646] pwc: recv_control_msg error -32 req 02 val 2100 [ 850.316000][ T1646] pwc: recv_control_msg error -32 req 04 val 1500 [ 850.326230][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.334596][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.382817][ T1646] pwc: recv_control_msg error -32 req 02 val 2500 [ 850.613078][ T1646] pwc: recv_control_msg error -71 req 02 val 2600 [ 850.642166][ T1646] pwc: recv_control_msg error -71 req 02 val 2900 [ 850.677802][ T1646] pwc: recv_control_msg error -71 req 02 val 2800 [ 850.692205][ T1646] pwc: recv_control_msg error -71 req 04 val 1100 [ 850.720365][ T1646] pwc: recv_control_msg error -71 req 04 val 1200 [ 850.768025][ T1646] pwc: Registered as video71. [ 850.778669][ T1646] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input47 [ 850.848771][ T1646] usb 3-1: USB disconnect, device number 43 [ 851.472304][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88812dbaf600: rx timeout, send abort [ 851.561577][T11868] loop0: detected capacity change from 0 to 1024 [ 851.715481][T11868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 851.980985][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88812dbaf600: abort rx timeout. Force session deactivation [ 852.122955][ T1020] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 852.157388][ T8963] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.181853][ T1646] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 852.339933][ T1020] usb 2-1: config 1 has an invalid interface number: 102 but max is 1 [ 852.348621][ T1020] usb 2-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 852.359436][ T1020] usb 2-1: config 1 has no interface number 0 [ 852.365901][ T1020] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.377197][ T1020] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 852.386586][ T1020] usb 2-1: too many endpoints for config 1 interface 102 altsetting 114: 97, using maximum allowed: 30 [ 852.398054][ T1020] usb 2-1: config 1 interface 102 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 852.416139][ T1020] usb 2-1: config 1 interface 102 has no altsetting 0 [ 852.435307][ T1646] usb 5-1: Using ep0 maxpacket: 16 [ 852.477404][ T1646] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.490515][ T1646] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.500541][ T1646] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 852.513750][ T1646] usb 5-1: config 0 interface 0 has no altsetting 0 [ 852.523707][ T1646] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 852.533943][ T1646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.645352][ T1646] usb 5-1: config 0 descriptor?? [ 852.649078][ T1020] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 852.659895][ T1020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.668516][ T1020] usb 2-1: Product: syz [ 852.673211][ T1020] usb 2-1: Manufacturer: syz [ 852.678037][ T1020] usb 2-1: SerialNumber: syz [ 852.742584][ T1020] usb 2-1: selecting invalid altsetting 1 [ 853.155669][ T1020] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 853.162316][ T1020] cdc_ncm 2-1:1.1: bind() failure [ 853.298595][ T1020] usb 2-1: USB disconnect, device number 53 [ 853.331301][ T1646] usbhid 5-1:0.0: can't add hid device: -71 [ 853.350159][ T1646] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 853.425553][ T1646] usb 5-1: USB disconnect, device number 41 [ 854.702100][ T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 854.857269][T11909] loop2: detected capacity change from 0 to 1024 [ 854.937832][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.949346][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 854.959334][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.022794][ T10] usb 2-1: config 0 descriptor?? [ 855.042178][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 855.054136][T11909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 855.321908][ T10] pwc: send_video_command error -71 [ 855.327424][ T10] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 855.335704][ T10] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 855.369400][T11918] loop0: detected capacity change from 0 to 2048 [ 855.532590][ T10] usb 2-1: USB disconnect, device number 54 [ 855.628641][T11574] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.656858][T11918] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 855.707750][T11918] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 855.716016][T11918] UDF-fs: Scanning with blocksize 512 failed [ 855.817501][T11918] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 855.993079][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 856.117368][T11918] netlink: 892 bytes leftover after parsing attributes in process `syz.0.2175'. [ 856.268049][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801a43ec00: rx timeout, send abort [ 856.287915][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.298543][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 856.311047][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.415128][ T10] usb 2-1: config 0 descriptor?? [ 856.445046][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 856.776753][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801a43ec00: abort rx timeout. Force session deactivation [ 856.868560][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 856.940151][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 857.014141][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 857.085058][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 857.183913][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 857.203529][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 857.229029][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 857.350805][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 857.383358][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 857.393797][ T7922] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 857.413199][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 857.628825][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 857.653623][ T7922] usb 4-1: config 1 has an invalid interface number: 102 but max is 1 [ 857.662244][ T7922] usb 4-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 857.672849][ T7922] usb 4-1: config 1 has no interface number 0 [ 857.679212][ T7922] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.690495][ T7922] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 857.699987][ T7922] usb 4-1: too many endpoints for config 1 interface 102 altsetting 114: 97, using maximum allowed: 30 [ 857.711595][ T7922] usb 4-1: config 1 interface 102 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 857.725379][ T7922] usb 4-1: config 1 interface 102 has no altsetting 0 [ 857.762532][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 857.780639][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 857.804620][ T7922] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 857.819892][ T7922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.828296][ T7922] usb 4-1: Product: syz [ 857.832898][ T7922] usb 4-1: Manufacturer: syz [ 857.837721][ T7922] usb 4-1: SerialNumber: syz [ 857.861045][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 857.882420][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 857.902674][ T10] pwc: Registered as video71. [ 857.912472][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input48 [ 857.936795][ T7922] usb 4-1: selecting invalid altsetting 1 [ 857.973472][ T10] usb 2-1: USB disconnect, device number 55 [ 858.310461][ T1646] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 858.423671][ T7922] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 858.430138][ T7922] cdc_ncm 4-1:1.1: bind() failure [ 858.562208][ T1646] usb 5-1: Using ep0 maxpacket: 16 [ 858.592288][ T7922] usb 4-1: USB disconnect, device number 50 [ 858.593257][ T1646] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.610340][ T1646] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.620470][ T1646] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 858.633748][ T1646] usb 5-1: config 0 interface 0 has no altsetting 0 [ 858.640658][ T1646] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 858.650191][ T1646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.754400][ T1646] usb 5-1: config 0 descriptor?? [ 859.398958][T11951] loop0: detected capacity change from 0 to 1024 [ 859.450660][ T1646] usbhid 5-1:0.0: can't add hid device: -71 [ 859.457536][ T1646] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 859.500702][ T1646] usb 5-1: USB disconnect, device number 42 [ 859.590486][T11951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 859.640707][T11950] loop2: detected capacity change from 0 to 2048 [ 859.763795][T11950] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2185: bad orphan inode 8192 [ 859.840350][T11950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 860.010125][ T8963] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.038262][T11950] 9p: Unknown access argument 18446744073709551615: -34 [ 860.251933][T11959] loop1: detected capacity change from 0 to 2048 [ 860.355988][T11959] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 860.382929][T11959] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 860.390826][T11959] UDF-fs: Scanning with blocksize 512 failed [ 860.415597][T11574] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.588355][T11959] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 860.944058][T11959] netlink: 892 bytes leftover after parsing attributes in process `syz.1.2188'. [ 862.019028][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888020696e00: rx timeout, send abort [ 862.527724][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888020696e00: abort rx timeout. Force session deactivation [ 862.719095][T11991] loop0: detected capacity change from 0 to 1024 [ 862.885095][ T1646] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 862.887480][T11991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 862.937635][ T5233] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 863.102275][ T1646] usb 3-1: config 1 has an invalid interface number: 102 but max is 1 [ 863.110910][ T1646] usb 3-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 863.122327][ T1646] usb 3-1: config 1 has no interface number 0 [ 863.128672][ T1646] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.140004][ T1646] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 863.149477][ T1646] usb 3-1: too many endpoints for config 1 interface 102 altsetting 114: 97, using maximum allowed: 30 [ 863.161112][ T1646] usb 3-1: config 1 interface 102 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 863.179686][ T1646] usb 3-1: config 1 interface 102 has no altsetting 0 [ 863.215410][ T5233] usb 2-1: Using ep0 maxpacket: 16 [ 863.239426][ T1646] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 863.249170][ T1646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.257896][ T1646] usb 3-1: Product: syz [ 863.262391][ T1646] usb 3-1: Manufacturer: syz [ 863.272678][ T1646] usb 3-1: SerialNumber: syz [ 863.276480][ T5233] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.288843][ T5233] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.299000][ T5233] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 863.312233][ T5233] usb 2-1: config 0 interface 0 has no altsetting 0 [ 863.319170][ T5233] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 863.328661][ T5233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.406281][ T8963] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.420295][ T1646] usb 3-1: selecting invalid altsetting 1 [ 863.426013][ T5233] usb 2-1: config 0 descriptor?? [ 863.928906][ T1646] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 863.935639][ T1646] cdc_ncm 3-1:1.1: bind() failure [ 864.131894][ T1646] usb 3-1: USB disconnect, device number 44 [ 864.155440][ T5233] usbhid 2-1:0.0: can't add hid device: -71 [ 864.183790][ T5233] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 864.278239][ T5233] usb 2-1: USB disconnect, device number 56 [ 865.567446][T12022] dccp_invalid_packet: P.Data Offset(0) too small [ 865.612187][T12021] netlink: 'syz.1.2210': attribute type 4 has an invalid length. [ 865.772551][T12026] netlink: 'syz.1.2210': attribute type 4 has an invalid length. [ 865.992423][T12021] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2210'. [ 866.509242][T12036] loop3: detected capacity change from 0 to 1024 [ 866.555408][T12026] Bluetooth: MGMT ver 1.23 [ 866.692938][T12036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 867.124526][ T7849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.211120][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801bd8d000: rx timeout, send abort [ 867.719931][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801bd8d000: abort rx timeout. Force session deactivation [ 868.092703][ T1646] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 868.631785][ T1646] usb 2-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 868.649071][ T1646] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 868.661048][ T1646] usb 2-1: config 1 has no interface number 0 [ 868.667531][ T1646] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.679313][ T1646] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 868.688720][ T1646] usb 2-1: too many endpoints for config 1 interface 1 altsetting 114: 97, using maximum allowed: 30 [ 868.704858][ T1646] usb 2-1: config 1 interface 1 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 868.720174][ T1646] usb 2-1: config 1 interface 1 has no altsetting 1 [ 868.818448][ T1646] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 868.829028][ T1646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.838318][ T1646] usb 2-1: Product: syz [ 868.843926][ T1646] usb 2-1: Manufacturer: syz [ 868.848741][ T1646] usb 2-1: SerialNumber: syz [ 869.025524][ T1646] usb 2-1: selecting invalid altsetting 1 [ 869.522553][ T1646] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 869.529008][ T1646] cdc_ncm 2-1:1.1: bind() failure [ 869.554390][T12071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2225'. [ 869.608141][T12072] netlink: 'syz.2.2226': attribute type 4 has an invalid length. [ 869.881844][T12073] netlink: 'syz.2.2226': attribute type 4 has an invalid length. [ 870.384314][T12078] netlink: 'syz.3.2228': attribute type 4 has an invalid length. [ 870.417521][T12076] loop4: detected capacity change from 0 to 1024 [ 870.502009][T12079] netlink: 'syz.3.2228': attribute type 4 has an invalid length. [ 870.599498][T12076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 870.750230][T12078] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2228'. [ 870.951649][ T7922] usb 2-1: USB disconnect, device number 57 [ 871.186138][T11593] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.233839][T12118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2239'. [ 873.643228][T12121] netlink: 'syz.3.2241': attribute type 1 has an invalid length. [ 873.651232][T12121] nbd: couldn't find a device at index 2097172 [ 873.922258][ T5258] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 874.036546][T12127] netlink: 'syz.4.2244': attribute type 4 has an invalid length. [ 874.157533][T12127] netlink: 'syz.4.2244': attribute type 4 has an invalid length. [ 874.207767][ T5258] usb 3-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 874.218467][ T5258] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 874.232656][ T5258] usb 3-1: config 1 has no interface number 0 [ 874.239011][ T5258] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.252059][ T5258] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 874.261652][ T5258] usb 3-1: too many endpoints for config 1 interface 1 altsetting 114: 97, using maximum allowed: 30 [ 874.272955][ T5258] usb 3-1: config 1 interface 1 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 874.286596][ T5258] usb 3-1: config 1 interface 1 has no altsetting 1 [ 874.313326][T12129] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2244'. [ 874.373435][ T5258] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 874.383021][ T5258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.391294][ T5258] usb 3-1: Product: syz [ 874.395926][ T5258] usb 3-1: Manufacturer: syz [ 874.400718][ T5258] usb 3-1: SerialNumber: syz [ 874.517348][ T5258] usb 3-1: selecting invalid altsetting 1 [ 874.932810][ T5258] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 874.939168][ T5258] cdc_ncm 3-1:1.1: bind() failure [ 876.549190][T12157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2255'. [ 876.847099][ T5258] usb 3-1: USB disconnect, device number 45 [ 877.611242][T12175] netlink: 'syz.0.2262': attribute type 4 has an invalid length. [ 877.863559][T12175] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2262'. [ 877.953221][T12176] netlink: 'syz.0.2262': attribute type 4 has an invalid length. [ 878.649580][T12186] xt_CT: You must specify a L4 protocol and not use inversions on it [ 878.675355][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2265'. [ 879.576887][ T5233] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 879.658026][ T5238] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 879.830121][ T5233] usb 2-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 879.840934][ T5233] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 879.850241][ T5233] usb 2-1: config 1 has no interface number 0 [ 879.860669][ T5233] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.876080][ T5233] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 879.888172][ T5233] usb 2-1: too many endpoints for config 1 interface 1 altsetting 114: 97, using maximum allowed: 30 [ 879.899455][ T5233] usb 2-1: config 1 interface 1 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 879.901669][ T5238] usb 3-1: Using ep0 maxpacket: 8 [ 879.912976][ T5233] usb 2-1: config 1 interface 1 has no altsetting 1 [ 879.978531][ T5233] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 879.987827][ T5238] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 879.988062][ T5238] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 880.000992][ T5233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.001131][ T5233] usb 2-1: Product: syz [ 880.001232][ T5233] usb 2-1: Manufacturer: syz [ 880.001398][ T5233] usb 2-1: SerialNumber: syz [ 880.010784][ T5238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.084012][ T5238] usb 3-1: config 0 descriptor?? [ 880.115833][ T5233] usb 2-1: selecting invalid altsetting 1 [ 880.137628][ T5238] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 880.380420][ T5238] usb 3-1: USB disconnect, device number 46 [ 880.562184][ T5233] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 880.568566][ T5233] cdc_ncm 2-1:1.1: bind() failure [ 881.261742][T12230] netlink: 'syz.2.2279': attribute type 4 has an invalid length. [ 881.405271][T12232] netlink: 'syz.2.2279': attribute type 4 has an invalid length. [ 881.540642][T12230] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2279'. [ 882.484250][ T5233] usb 2-1: USB disconnect, device number 58 [ 884.309054][T12267] loop0: detected capacity change from 0 to 2048 [ 884.421815][T12267] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 884.512582][T12267] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 884.520483][T12267] UDF-fs: Scanning with blocksize 512 failed [ 884.625944][T12267] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 884.972684][ T5233] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 885.052728][T12267] netlink: 860 bytes leftover after parsing attributes in process `syz.0.2292'. [ 885.302101][ T5233] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 885.311547][ T5233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.319789][ T5233] usb 2-1: Product: syz [ 885.324505][ T5233] usb 2-1: Manufacturer: syz [ 885.329329][ T5233] usb 2-1: SerialNumber: syz [ 885.410350][ T5233] usb 2-1: config 0 descriptor?? [ 885.497027][ T5233] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 059 [ 886.122083][ T5233] i2c i2c-1: failure reading functionality [ 886.187333][ T5233] i2c i2c-1: connected i2c-tiny-usb device [ 886.242656][ T5233] usb 2-1: USB disconnect, device number 59 [ 887.993093][T12318] loop0: detected capacity change from 0 to 7 [ 888.022713][T12318] Dev loop0: unable to read RDB block 7 [ 888.028778][T12318] loop0: unable to read partition table [ 888.035790][T12311] loop4: detected capacity change from 0 to 2048 [ 888.107493][T12318] loop0: partition table beyond EOD, truncated [ 888.115138][T12318] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 888.115138][T12318] ) failed (rc=-5) [ 888.117852][T12311] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 888.242007][T12311] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 888.249902][T12311] UDF-fs: Scanning with blocksize 512 failed [ 888.400003][T12311] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 888.735485][T12311] netlink: 860 bytes leftover after parsing attributes in process `syz.4.2310'. [ 889.873907][T12346] ntfs3: Bad value for 'gid' [ 889.878775][T12346] ntfs3: Bad value for 'gid' [ 890.080804][T12350] dccp_invalid_packet: P.Data Offset(0) too small [ 891.311796][ T5258] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 891.554427][ T5258] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.565128][ T5258] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 891.574702][ T5258] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.650848][ T5258] usb 4-1: config 0 descriptor?? [ 891.678547][ T5258] pwc: Askey VC010 type 2 USB webcam detected. [ 891.920534][ T5258] pwc: send_video_command error -71 [ 891.926223][ T5258] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 891.934863][ T5258] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 892.081189][ T5258] usb 4-1: USB disconnect, device number 51 [ 892.416341][T12382] process 'syz.4.2341' launched './file0' with NULL argv: empty string added [ 892.692275][ T5258] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 892.916109][ T5258] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.926804][ T5258] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 892.936494][ T5258] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.004394][ T5258] usb 4-1: config 0 descriptor?? [ 893.046303][ T5258] pwc: Askey VC010 type 2 USB webcam detected. [ 893.425171][ T5258] pwc: recv_control_msg error -32 req 02 val 2b00 [ 893.443667][ T5258] pwc: recv_control_msg error -32 req 02 val 2700 [ 893.461892][ T5258] pwc: recv_control_msg error -32 req 02 val 2c00 [ 893.481690][ T5258] pwc: recv_control_msg error -32 req 04 val 1000 [ 893.501218][ T5258] pwc: recv_control_msg error -32 req 04 val 1300 [ 893.514090][ T5258] pwc: recv_control_msg error -32 req 04 val 1400 [ 893.536164][ T5258] pwc: recv_control_msg error -32 req 02 val 2000 [ 893.759354][ T5258] pwc: recv_control_msg error -32 req 04 val 1500 [ 894.010813][ T5258] pwc: recv_control_msg error -71 req 02 val 2400 [ 894.029895][ T5258] pwc: recv_control_msg error -71 req 02 val 2600 [ 894.068226][ T5258] pwc: recv_control_msg error -71 req 02 val 2900 [ 894.100347][ T5258] pwc: recv_control_msg error -71 req 02 val 2800 [ 894.134058][ T5258] pwc: recv_control_msg error -71 req 04 val 1100 [ 894.163825][ T5258] pwc: recv_control_msg error -71 req 04 val 1200 [ 894.213096][ T5258] pwc: Registered as video71. [ 894.221638][ T5258] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input49 [ 894.334997][ T5258] usb 4-1: USB disconnect, device number 52 [ 894.547436][T12394] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 894.924312][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 894.931107][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 [ 895.367829][T12409] mmap: syz.4.2347 (12409) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 895.466926][ T6366] udevd[6366]: 'v4l_id /dev/video71' [12401] terminated by signal 33 (Unknown signal 33) [ 897.287258][T12422] netlink: 'syz.3.2355': attribute type 12 has an invalid length. [ 899.373089][T12427] bridge0: entered promiscuous mode [ 899.464252][T12427] bridge0: left promiscuous mode [ 899.900485][T12437] loop0: detected capacity change from 0 to 7 [ 899.923830][T12437] Dev loop0: unable to read RDB block 7 [ 899.934490][T12437] loop0: unable to read partition table [ 899.962684][T12437] loop0: partition table beyond EOD, truncated [ 899.969099][T12437] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 899.969099][T12437] ) failed (rc=-5) [ 900.703340][T12442] netlink: 'syz.0.2362': attribute type 4 has an invalid length. [ 900.843173][T12442] netlink: 'syz.0.2362': attribute type 4 has an invalid length. [ 901.056351][T12442] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2362'. [ 901.336472][T12448] batman_adv: batadv0: Adding interface: wlan1 [ 901.343680][T12448] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.375085][T12448] batman_adv: batadv0: Interface activated: wlan1 [ 901.569958][T12448] batman_adv: batadv0: Interface deactivated: wlan1 [ 901.886904][T12448] batman_adv: batadv0: Removing interface: wlan1 [ 902.063397][T12457] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2367'. [ 902.201215][ C0] eth0: bad gso: type: 1, size: 1408 [ 902.520729][T12464] loop0: detected capacity change from 0 to 7 [ 902.550503][T12464] Dev loop0: unable to read RDB block 7 [ 902.556802][T12464] loop0: unable to read partition table [ 902.602081][T12464] loop0: partition table beyond EOD, truncated [ 902.608598][T12464] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 902.608598][T12464] ) failed (rc=-5) [ 903.193253][ T5187] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 903.225132][ T5187] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 903.238262][ T5187] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 903.261309][ T5187] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 903.274714][ T5187] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 903.290757][ T5187] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 903.300923][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 903.300996][ T29] audit: type=1326 audit(1721993761.168:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12472 comm="syz.3.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56e977299 code=0x7ffc0000 [ 903.335472][ T29] audit: type=1326 audit(1721993761.168:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12472 comm="syz.3.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56e977299 code=0x7ffc0000 [ 903.431870][ T29] audit: type=1326 audit(1721993761.288:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12472 comm="syz.3.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd56e977299 code=0x7ffc0000 [ 903.454959][ T29] audit: type=1326 audit(1721993761.288:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12472 comm="syz.3.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56e977299 code=0x7ffc0000 [ 903.478136][ T29] audit: type=1326 audit(1721993761.288:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12472 comm="syz.3.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56e977299 code=0x7ffc0000 [ 903.501748][ T29] audit: type=1326 audit(1721993761.338:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12472 comm="syz.3.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd56e977299 code=0x7ffc0000 [ 903.528174][ T29] audit: type=1326 audit(1721993761.338:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12472 comm="syz.3.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56e977299 code=0x7ffc0000 [ 904.707095][T12487] netlink: 'syz.1.2378': attribute type 4 has an invalid length. [ 904.835736][T12488] netlink: 'syz.1.2378': attribute type 4 has an invalid length. [ 905.023259][T12487] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2378'. [ 905.442879][ T5187] Bluetooth: hci3: command tx timeout [ 905.615676][T12468] chnl_net:caif_netlink_parms(): no params data found [ 905.840573][T12501] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2383'. [ 906.003217][ T4286] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.157683][ T29] audit: type=1326 audit(1721993763.948:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12503 comm="syz.0.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c977299 code=0x7ffc0000 [ 906.184299][ T29] audit: type=1326 audit(1721993763.958:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12503 comm="syz.0.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c977299 code=0x7ffc0000 [ 906.208381][ T29] audit: type=1326 audit(1721993763.998:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12503 comm="syz.0.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff57c977299 code=0x7ffc0000 [ 906.318543][ T4286] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.538699][ T4286] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.705409][ T4286] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.270980][ T4286] bridge_slave_1: left allmulticast mode [ 907.277037][ T4286] bridge_slave_1: left promiscuous mode [ 907.283602][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.377194][ T4286] bridge_slave_0: left allmulticast mode [ 907.385197][ T4286] bridge_slave_0: left promiscuous mode [ 907.393583][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.527258][ T5187] Bluetooth: hci3: command tx timeout [ 908.448138][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 908.561987][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 908.671125][ T4286] bond0 (unregistering): Released all slaves [ 909.024558][T12540] netlink: 'syz.3.2395': attribute type 4 has an invalid length. [ 909.157590][T12542] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2395'. [ 909.363830][T12541] netlink: 'syz.3.2395': attribute type 4 has an invalid length. [ 909.520382][T12468] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.528322][T12468] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.536154][T12468] bridge_slave_0: entered allmulticast mode [ 909.544250][T12468] bridge_slave_0: entered promiscuous mode [ 909.608550][ T5187] Bluetooth: hci3: command tx timeout [ 909.903743][T12468] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.911781][T12468] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.919692][T12468] bridge_slave_1: entered allmulticast mode [ 909.928873][T12468] bridge_slave_1: entered promiscuous mode [ 910.368548][T12553] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2398'. [ 910.438576][ T4286] hsr_slave_0: left promiscuous mode [ 910.477547][ T4286] hsr_slave_1: left promiscuous mode [ 910.510241][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 910.518686][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.578063][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 910.586830][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.673802][ T4286] veth1_macvtap: left promiscuous mode [ 910.684500][ T4286] veth0_macvtap: left promiscuous mode [ 910.690458][ T4286] veth1_vlan: left promiscuous mode [ 910.696192][ T4286] veth0_vlan: left promiscuous mode [ 911.711638][ T5187] Bluetooth: hci3: command tx timeout [ 911.984909][ T4286] team0 (unregistering): Port device team_slave_1 removed [ 912.144307][ T4286] team0 (unregistering): Port device team_slave_0 removed [ 912.572500][T12468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.713234][T12468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.967384][T12468] team0: Port device team_slave_0 added [ 913.091853][T12468] team0: Port device team_slave_1 added [ 913.265940][T12468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.273510][T12468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.300627][T12468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.388165][T12468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.397137][T12468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.423932][T12468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.817633][T12596] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2412'. [ 913.841935][T12468] hsr_slave_0: entered promiscuous mode [ 913.879202][T12468] hsr_slave_1: entered promiscuous mode [ 914.880671][T12602] sctp: failed to load transform for md5: -2 [ 916.710755][T12468] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 916.746197][T12468] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 916.781559][T12468] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 916.866721][T12468] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 918.124682][T12468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.304197][T12468] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.375492][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.383298][ T5230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.512272][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.520109][ T5230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.536878][T12665] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2430'. [ 919.547521][T12665] unsupported nlmsg_type 40 [ 921.766572][T12468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.387873][T12468] veth0_vlan: entered promiscuous mode [ 922.529520][T12468] veth1_vlan: entered promiscuous mode [ 922.795668][T12468] veth0_macvtap: entered promiscuous mode [ 922.856115][T12468] veth1_macvtap: entered promiscuous mode [ 922.970307][T12468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 922.981199][T12468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.991664][T12468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.002443][T12468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.012612][T12468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.023446][T12468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.036418][T12468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 923.047325][T12468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.063199][T12468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.103858][T12468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.114624][T12468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.125403][T12468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.136019][T12468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.146011][T12468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.156591][T12468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.166562][T12468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 923.179478][T12468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 923.193483][T12468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.280880][T12468] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.292875][T12468] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.301858][T12468] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.310736][T12468] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.139357][T12767] netlink: 'syz.3.2461': attribute type 29 has an invalid length. [ 928.175106][T12767] netlink: 'syz.3.2461': attribute type 29 has an invalid length. [ 930.593829][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.602541][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.725004][ T1823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.733296][ T1823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.960992][T12806] batman_adv: batadv0: Adding interface: wlan1 [ 930.967738][T12806] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 930.993496][T12806] batman_adv: batadv0: Interface activated: wlan1 [ 931.311829][T12810] loop2: detected capacity change from 0 to 512 [ 931.330334][T12810] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 931.430953][T12810] EXT4-fs (loop2): 1 orphan inode deleted [ 931.437162][T12810] EXT4-fs (loop2): 1 truncate cleaned up [ 931.444800][T12810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 931.587409][T12810] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 931.661746][T12810] EXT4-fs (loop2): Remounting filesystem read-only [ 931.841567][ T5233] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 931.964029][T12468] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.051635][ T5233] usb 4-1: device descriptor read/64, error -71 [ 932.351772][ T5233] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 932.408980][T12828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 932.419366][T12828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 932.430559][T12828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 932.453352][T12828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 932.464706][T12828] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 932.473976][T12828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 932.542895][ T5233] usb 4-1: device descriptor read/64, error -71 [ 932.801752][ T5194] Bluetooth: hci4: command 0x0406 tx timeout [ 932.822713][ T5233] usb usb4-port1: attempt power cycle [ 933.293760][ T5233] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 933.374442][ T5233] usb 4-1: device descriptor read/8, error -71 [ 933.607284][T12827] chnl_net:caif_netlink_parms(): no params data found [ 933.658268][ T5233] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 933.779393][ T5233] usb 4-1: device descriptor read/8, error -71 [ 933.933558][ T5233] usb usb4-port1: unable to enumerate USB device [ 934.578271][ T5187] Bluetooth: hci1: command tx timeout [ 935.231763][ T3028] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.445085][ T3028] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.626986][T12827] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.635244][T12827] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.643270][T12827] bridge_slave_0: entered allmulticast mode [ 935.652631][T12827] bridge_slave_0: entered promiscuous mode [ 935.725802][ T3028] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.808638][T12827] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.816816][T12827] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.824806][T12827] bridge_slave_1: entered allmulticast mode [ 935.834067][T12827] bridge_slave_1: entered promiscuous mode [ 935.892243][ T3028] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.110071][T12827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.187939][T12827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.444480][T12827] team0: Port device team_slave_0 added [ 936.527796][T12827] team0: Port device team_slave_1 added [ 936.542230][ T3028] bridge_slave_1: left allmulticast mode [ 936.548121][ T3028] bridge_slave_1: left promiscuous mode [ 936.555156][ T3028] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.641782][ T5187] Bluetooth: hci1: command tx timeout [ 936.648645][ T3028] bridge_slave_0: left allmulticast mode [ 936.654981][ T3028] bridge_slave_0: left promiscuous mode [ 936.661640][ T3028] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.299917][ T3028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.444981][ T3028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.496174][ T3028] bond0 (unregistering): Released all slaves [ 937.949990][T12827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.957332][T12827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 937.984093][T12827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 938.091921][ T25] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 938.153018][T12882] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2494'. [ 938.192070][T12827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.199244][T12827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 938.228210][T12827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.336749][ T25] usb 4-1: device descriptor read/64, error -71 [ 938.442659][ T3028] hsr_slave_0: left promiscuous mode [ 938.451130][ T3028] hsr_slave_1: left promiscuous mode [ 938.461286][ T3028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 938.471798][ T3028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.483258][ T5194] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 938.496581][ T3028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 938.500236][ T5194] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 938.505274][ T3028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.524310][ T5194] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 938.548255][ T3028] veth1_macvtap: left promiscuous mode [ 938.554779][ T3028] veth0_macvtap: left promiscuous mode [ 938.560746][ T3028] veth1_vlan: left promiscuous mode [ 938.566521][ T3028] veth0_vlan: left promiscuous mode [ 938.578400][ T5194] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 938.629947][ T5194] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 938.641270][ T5194] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 938.661470][ T25] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 938.722316][ T5194] Bluetooth: hci1: command tx timeout [ 938.901168][ T25] usb 4-1: device descriptor read/64, error -71 [ 939.080474][ T25] usb usb4-port1: attempt power cycle [ 939.384465][ T3028] team0 (unregistering): Port device team_slave_1 removed [ 939.424830][ T3028] team0 (unregistering): Port device team_slave_0 removed [ 939.745479][T12892] ===================================================== [ 939.753081][T12892] BUG: KMSAN: uninit-value in tcf_ct_flow_table_get+0x611/0x2260 [ 939.765602][T12892] tcf_ct_flow_table_get+0x611/0x2260 [ 939.771190][T12892] tcf_ct_init+0xa67/0x2890 [ 939.777347][T12892] tcf_action_init_1+0x6cc/0xb30 [ 939.782703][T12892] tcf_action_init+0x458/0xf00 [ 939.787744][T12892] tc_ctl_action+0x4be/0x19d0 [ 939.792745][T12892] rtnetlink_rcv_msg+0x12fc/0x1410 [ 939.798037][T12892] netlink_rcv_skb+0x375/0x650 [ 939.803192][T12892] rtnetlink_rcv+0x34/0x40 [ 939.808178][T12892] netlink_unicast+0xf52/0x1260 [ 939.813389][T12892] netlink_sendmsg+0x10da/0x11e0 [ 939.818494][T12892] __sock_sendmsg+0x30f/0x380 [ 939.823500][T12892] ____sys_sendmsg+0x877/0xb60 [ 939.828518][T12892] ___sys_sendmsg+0x28d/0x3c0 [ 939.833490][T12892] __x64_sys_sendmsg+0x307/0x4a0 [ 939.838604][T12892] x64_sys_call+0x2dd6/0x3c10 [ 939.843713][T12892] do_syscall_64+0xcd/0x1e0 [ 939.848431][T12892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.856439][T12892] [ 939.858861][T12892] Local variable key created at: [ 939.869099][T12892] tcf_ct_flow_table_get+0x4a/0x2260 [ 939.875825][T12892] tcf_ct_init+0xa67/0x2890 [ 939.880582][T12892] [ 939.883148][T12892] CPU: 0 UID: 0 PID: 12892 Comm: syz.2.2498 Tainted: G W 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 939.895579][T12892] Tainted: [W]=WARN [ 939.899499][T12892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 939.909865][T12892] ===================================================== [ 939.917122][T12892] Disabling lock debugging due to kernel taint [ 939.923602][T12892] Kernel panic - not syncing: kmsan.panic set ... [ 939.930157][T12892] CPU: 0 UID: 0 PID: 12892 Comm: syz.2.2498 Tainted: G B W 6.10.0-syzkaller-12562-g1722389b0d86 #0 [ 939.942376][T12892] Tainted: [B]=BAD_PAGE, [W]=WARN [ 939.947510][T12892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 939.957730][T12892] Call Trace: [ 939.961127][T12892] [ 939.964162][T12892] dump_stack_lvl+0x216/0x2d0 [ 939.969076][T12892] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 939.975120][T12892] dump_stack+0x1e/0x30 [ 939.979479][T12892] panic+0x4e2/0xcd0 [ 939.983567][T12892] ? kmsan_get_metadata+0xf1/0x1c0 [ 939.988900][T12892] kmsan_report+0x2c7/0x2d0 [ 939.993602][T12892] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 939.999609][T12892] ? __msan_warning+0x95/0x120 [ 940.004547][T12892] ? tcf_ct_flow_table_get+0x611/0x2260 [ 940.010270][T12892] ? tcf_ct_init+0xa67/0x2890 [ 940.015101][T12892] ? tcf_action_init_1+0x6cc/0xb30 [ 940.020390][T12892] ? tcf_action_init+0x458/0xf00 [ 940.025499][T12892] ? tc_ctl_action+0x4be/0x19d0 [ 940.030527][T12892] ? rtnetlink_rcv_msg+0x12fc/0x1410 [ 940.035985][T12892] ? netlink_rcv_skb+0x375/0x650 [ 940.041075][T12892] ? rtnetlink_rcv+0x34/0x40 [ 940.045815][T12892] ? netlink_unicast+0xf52/0x1260 [ 940.051034][T12892] ? netlink_sendmsg+0x10da/0x11e0 [ 940.056303][T12892] ? __sock_sendmsg+0x30f/0x380 [ 940.061335][T12892] ? ____sys_sendmsg+0x877/0xb60 [ 940.066444][T12892] ? ___sys_sendmsg+0x28d/0x3c0 [ 940.071457][T12892] ? __x64_sys_sendmsg+0x307/0x4a0 [ 940.076734][T12892] ? x64_sys_call+0x2dd6/0x3c10 [ 940.081775][T12892] ? do_syscall_64+0xcd/0x1e0 [ 940.086653][T12892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.092926][T12892] ? kmsan_get_metadata+0x13e/0x1c0 [ 940.098321][T12892] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 940.104841][T12892] ? kmsan_get_metadata+0x13e/0x1c0 [ 940.110231][T12892] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 940.116241][T12892] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 940.122234][T12892] ? kmsan_get_metadata+0x13e/0x1c0 [ 940.127621][T12892] ? kmsan_get_metadata+0x13e/0x1c0 [ 940.133016][T12892] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 940.139018][T12892] ? kmsan_get_metadata+0x13e/0x1c0 [ 940.144409][T12892] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 940.150415][T12892] __msan_warning+0x95/0x120 [ 940.155182][T12892] tcf_ct_flow_table_get+0x611/0x2260 [ 940.160749][T12892] ? nf_ct_tmpl_alloc+0xbd/0x2d0 [ 940.165877][T12892] ? kmsan_get_metadata+0x13e/0x1c0 [ 940.171278][T12892] tcf_ct_init+0xa67/0x2890 [ 940.175996][T12892] tcf_action_init_1+0x6cc/0xb30 [ 940.181112][T12892] ? __pfx_tcf_ct_init+0x10/0x10 [ 940.186227][T12892] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 940.192248][T12892] tcf_action_init+0x458/0xf00 [ 940.197190][T12892] ? kmsan_get_metadata+0x13e/0x1c0 [ 940.202590][T12892] ? psi_group_change+0x1073/0x1510 [ 940.208050][T12892] tc_ctl_action+0x4be/0x19d0 [ 940.212978][T12892] ? __pfx_tc_ctl_action+0x10/0x10 [ 940.218272][T12892] ? __pfx_tc_ctl_action+0x10/0x10 [ 940.223561][T12892] rtnetlink_rcv_msg+0x12fc/0x1410 [ 940.228843][T12892] ? kmsan_get_metadata+0x13e/0x1c0 [ 940.234254][T12892] netlink_rcv_skb+0x375/0x650 [ 940.239192][T12892] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 940.244831][T12892] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 940.250097][T12892] rtnetlink_rcv+0x34/0x40 [ 940.254754][T12892] netlink_unicast+0xf52/0x1260 [ 940.259825][T12892] netlink_sendmsg+0x10da/0x11e0 [ 940.264941][T12892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.270386][T12892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.275917][T12892] __sock_sendmsg+0x30f/0x380 [ 940.280783][T12892] ____sys_sendmsg+0x877/0xb60 [ 940.285733][T12892] ___sys_sendmsg+0x28d/0x3c0 [ 940.290580][T12892] ? __rcu_read_unlock+0x7b/0xe0 [ 940.295724][T12892] ? __fget_files+0x4fe/0x5d0 [ 940.300577][T12892] ? kmsan_get_metadata+0x13e/0x1c0 [ 940.305971][T12892] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 940.311980][T12892] __x64_sys_sendmsg+0x307/0x4a0 [ 940.317104][T12892] x64_sys_call+0x2dd6/0x3c10 [ 940.321966][T12892] do_syscall_64+0xcd/0x1e0 [ 940.326667][T12892] ? clear_bhb_loop+0x25/0x80 [ 940.331495][T12892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.337599][T12892] RIP: 0033:0x7f1a13b77299 [ 940.342147][T12892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 940.361936][T12892] RSP: 002b:00007f1a1499b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 940.370512][T12892] RAX: ffffffffffffffda RBX: 00007f1a13d05f80 RCX: 00007f1a13b77299 [ 940.378633][T12892] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 940.386732][T12892] RBP: 00007f1a13be48e6 R08: 0000000000000000 R09: 0000000000000000 [ 940.394832][T12892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.402927][T12892] R13: 000000000000000b R14: 00007f1a13d05f80 R15: 00007ffc7dbd0d58 [ 940.411050][T12892] [ 940.414399][T12892] Kernel Offset: disabled [ 940.418789][T12892] Rebooting in 86400 seconds..