last executing test programs: 13.083684566s ago: executing program 2 (id=555): r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x44000) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) timerfd_settime(0xffffffffffffffff, 0x5, &(0x7f0000000340), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x0, 0x9}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000640)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000018800529308ade313d08d4e7354e00"/36], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=r7, @ANYBLOB="0002"], 0x20}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 8.551860938s ago: executing program 0 (id=562): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x74000000, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) 8.487608963s ago: executing program 0 (id=564): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000480)='ext4_es_find_extent_range_enter\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) 8.296771599s ago: executing program 0 (id=566): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x2, 0xffff, 0x8}, 0x48) 7.784840931s ago: executing program 0 (id=568): bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.611263405s ago: executing program 2 (id=571): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) close(0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xb7, 0x93, 0xe3, 0x40, 0xeb1a, 0xe303, 0xfca0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xa1, 0x7, 0x8a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) 7.459745988s ago: executing program 3 (id=573): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pipe2$9p(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) open$dir(0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000001a0001002bbd7000fbdbdf250a201407fd00ff00", @ANYBLOB="08001009000037000000000041200adb3c7f6850fb2950cca170a01f4f281b342e2456cacf78412793b6add61ca0d1ac55e898dcc2ab483886369b8b27399457a51e754f5cead9a54f2986", @ANYRES32=0x0], 0x4c}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) r5 = syz_clone(0x100, &(0x7f0000000500), 0x0, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="b28d198a935f098234eac396c611c465717292111d55f56094828a0d49c118b0abc2067a46b18bcd0da484ed1d5df759d9753ba0146963c011e6cf6459ad2a0716632a911dfb8c258a9d9f03a6b108327354696fef978f7f16e66afd7d822df8af572746f0bf4f471cd519adbaa8379de514815e4349852a8b7bca94f4efc869705312349abd462d847b1aca0241a7017b") sched_setscheduler(r5, 0x3, &(0x7f00000006c0)=0x9) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x24, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @ldst={0x0, 0x2, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd9, &(0x7f00000008c0)=""/217, 0x0, 0x13, '\x00', r4, 0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) 7.459618388s ago: executing program 4 (id=574): r0 = mq_open(&(0x7f0000000440)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xceq\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 7.30247478s ago: executing program 4 (id=576): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000480)='ext4_es_find_extent_range_enter\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) 6.067992272s ago: executing program 0 (id=578): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) 5.890321676s ago: executing program 3 (id=579): r0 = io_uring_setup(0x7f7d, &(0x7f0000000000)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) getgroups(0x16, 0xfffffffffffffffe) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f00000001c0)=ANY=[], 0x1a8, 0x0) msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRESHEX], 0x401, 0x0) msgsnd(0x0, &(0x7f0000000700)=ANY=[], 0x375, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002440)={{0x1}, 0x167, 0x80000000, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x8}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) dup2(r0, r1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000d00)=ANY=[@ANYBLOB="5401000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000fe8000000000000000000000000000bb00"/131], 0x154}}, 0x0) 5.866909628s ago: executing program 4 (id=580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) pipe2(0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000040)=0x9100000000000000, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "546792"}}}, 0xd) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="03"], 0x7) 4.63173312s ago: executing program 4 (id=581): r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x44000) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) timerfd_settime(0xffffffffffffffff, 0x5, &(0x7f0000000340), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x0, 0x9}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000640)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000018800529308ade313d08d4e7354e00"/36], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=r7, @ANYBLOB="0002"], 0x20}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 4.6301314s ago: executing program 3 (id=582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) time(0xfffffffffffffffc) shmdt(0x0) 3.77521161s ago: executing program 2 (id=584): creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x11008, 0x0) mount$9p_rdma(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x109d4a1, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 3.65195075s ago: executing program 3 (id=585): arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000000)) 3.383850072s ago: executing program 2 (id=586): socket$inet6(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300)=0x2, 0x4) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000bf7000/0x1000)=nil, 0x1000, 0x64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x31, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4004040}, 0x80) r1 = socket(0x40000000015, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2713, &(0x7f0000019580)=""/102395, &(0x7f0000000100)=0x18ffb) 3.303716469s ago: executing program 3 (id=587): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x0, 0x0, {0xf}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@window, @sack_perm], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x2d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) modify_ldt$write(0x1, &(0x7f0000000000), 0x10) 3.203796877s ago: executing program 0 (id=588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2b, 0x801, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mlockall(0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x4, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) 2.295415211s ago: executing program 1 (id=589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_pts(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, 0x0, 0x0) 2.247455856s ago: executing program 2 (id=590): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000480)='ext4_es_find_extent_range_enter\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) 2.158511913s ago: executing program 4 (id=591): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pipe2$9p(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) open$dir(0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000001a0001002bbd7000fbdbdf250a201407fd00ff00", @ANYBLOB="08001009000037000000000041200adb3c7f6850fb2950cca170a01f4f281b342e2456cacf78412793b6add61ca0d1ac55e898dcc2ab483886369b8b27399457a51e754f5cead9a54f2986", @ANYRES32=0x0], 0x4c}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) r5 = syz_clone(0x100, &(0x7f0000000500), 0x0, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="b28d198a935f098234eac396c611c465717292111d55f56094828a0d49c118b0abc2067a46b18bcd0da484ed1d5df759d9753ba0146963c011e6cf6459ad2a0716632a911dfb8c258a9d9f03a6b108327354696fef978f7f16e66afd7d822df8af572746f0bf4f471cd519adbaa8379de514815e4349852a8b7bca94f4efc869705312349abd462d847b1aca0241a7017b") sched_setscheduler(r5, 0x3, &(0x7f00000006c0)=0x9) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x24, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x7}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @ldst={0x0, 0x2, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd9, &(0x7f00000008c0)=""/217, 0x0, 0x13, '\x00', r4, 0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) 1.795841602s ago: executing program 1 (id=592): r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000003ac0)={0x0, [[0x54d0626d], [0x7f7f], [0x1]], '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) 1.741394827s ago: executing program 1 (id=593): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 1.21182736s ago: executing program 1 (id=594): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000300)) 939.948803ms ago: executing program 1 (id=595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) time(0xfffffffffffffffc) shmdt(0x0) 938.200223ms ago: executing program 4 (id=596): socket$alg(0x26, 0x5, 0x0) inotify_init1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = syz_open_dev$dri(&(0x7f0000000540), 0x4260, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000580), 0x20, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, r2], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000180)={0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) open(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(0x0, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r4, &(0x7f0000000100)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000180)) 799.859185ms ago: executing program 2 (id=597): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000"]) 50.265936ms ago: executing program 3 (id=598): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/11], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="140100002b00b99f000000000000000001010080"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=599): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f000000e440)=@newtaction={0x44, 0x30, 0x0, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) recvmmsg(r1, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003300)=""/4088, 0xff8}], 0x1}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): .890331][ T3575] device veth1_macvtap entered promiscuous mode [ 51.904133][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.915119][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.925052][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.935631][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.946978][ T3577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.958356][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.970396][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.980369][ T3577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.990915][ T3577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.001984][ T3577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.013145][ T3583] device veth1_macvtap entered promiscuous mode [ 52.027178][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.035190][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.049819][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.059560][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.068754][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.077753][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.100703][ T3577] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.110090][ T3577] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.119542][ T3577] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.132555][ T3577] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.150137][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.162473][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.172778][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.184169][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.194210][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.205050][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.218842][ T3583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.243662][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.271092][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.284921][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.294674][ T3652] loop3: detected capacity change from 0 to 512 [ 52.300459][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.312349][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.323063][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.332976][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.343771][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.354695][ T3583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.372458][ T3575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.377503][ T3624] Bluetooth: hci4: command 0x040f tx timeout [ 52.391711][ T3624] Bluetooth: hci3: command 0x040f tx timeout [ 52.397906][ T3624] Bluetooth: hci1: command 0x040f tx timeout [ 52.404043][ T3624] Bluetooth: hci0: command 0x040f tx timeout [ 52.410615][ T3624] Bluetooth: hci2: command 0x040f tx timeout [ 52.421284][ T3575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.431598][ T3575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.442399][ T3575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.454019][ T3575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.464747][ T3575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.465262][ T3652] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 52.475021][ T3575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.491140][ T3652] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [ 52.497081][ T3575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.518214][ T3575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.526409][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.536338][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.555205][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.565228][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.579520][ T3583] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.589057][ T3583] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.598123][ T3583] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.607783][ T3583] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.631125][ T3575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.643109][ T3575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.653543][ T3575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.664465][ T3575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.675506][ T3575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.686086][ T3575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.697869][ T3575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.708533][ T3575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.721062][ T3575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.756264][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.766525][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.782117][ T3575] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.791538][ T3575] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.800650][ T3575] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.809704][ T3575] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.875786][ T3659] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 52.968282][ T3643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.996787][ T3643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.028166][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.036311][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.045393][ T404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.056410][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.066078][ T404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.074484][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.082661][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.129750][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.163555][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.179345][ T3662] loop3: detected capacity change from 0 to 512 [ 53.210580][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.211601][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.229972][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.244577][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.258029][ T3643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.266003][ T3643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.280022][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.296335][ T3664] xt_hashlimit: max too large, truncated to 1048576 [ 53.324855][ T3312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.336296][ T3662] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 53.338871][ T3312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.362036][ T3662] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038 (0x7fffffff) [ 53.369006][ T3312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.444981][ T3643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.475410][ T3643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.487771][ T3312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.556898][ T3672] loop4: detected capacity change from 0 to 2048 [ 53.652286][ T3679] loop0: detected capacity change from 0 to 512 [ 53.663159][ T3672] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 53.705058][ T3679] EXT4-fs error (device loop0): ext4_get_journal_inode:5159: comm syz.0.1: inode #196608: comm syz.0.1: iget: illegal inode # [ 53.714541][ T3672] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 53.753493][ T3679] EXT4-fs (loop0): Remounting filesystem read-only [ 53.755535][ T3685] Zero length message leads to an empty skb [ 53.763215][ T3679] EXT4-fs (loop0): no journal found [ 53.784135][ T3679] EXT4-fs (loop0): can't get journal size [ 53.793554][ T3685] fuse: Unknown parameter '0x0000000000000003' [ 53.823044][ T3679] EXT4-fs (loop0): failed to initialize system zone (-22) [ 53.846718][ T3678] capability: warning: `syz.1.8' uses deprecated v2 capabilities in a way that may be insecure [ 53.862007][ T3679] EXT4-fs (loop0): mount failed [ 53.879300][ T3312] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 53.893062][ T26] audit: type=1326 audit(1722509913.625:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3667 comm="syz.1.8" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9e49343b9 code=0x0 [ 54.156938][ T3312] usb 3-1: Using ep0 maxpacket: 32 [ 54.279001][ T3695] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 54.297725][ T3703] xt_hashlimit: max too large, truncated to 1048576 [ 54.376265][ T3706] loop0: detected capacity change from 0 to 1024 [ 54.397385][ T3312] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 54.408195][ T3312] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 54.489215][ T3312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.887948][ T3312] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 54.929167][ T1075] Bluetooth: hci2: command 0x0419 tx timeout [ 54.935914][ T1075] Bluetooth: hci0: command 0x0419 tx timeout [ 54.942128][ T1075] Bluetooth: hci1: command 0x0419 tx timeout [ 54.948685][ T1075] Bluetooth: hci3: command 0x0419 tx timeout [ 54.954879][ T1075] Bluetooth: hci4: command 0x0419 tx timeout [ 54.971989][ T3706] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.972323][ T3711] loop1: detected capacity change from 0 to 512 [ 54.983763][ T3312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.007154][ T3312] usb 3-1: Product: syz [ 55.011961][ T3312] usb 3-1: Manufacturer: syz [ 55.011982][ T3312] usb 3-1: SerialNumber: syz [ 55.122316][ T3683] can: request_module (can-proto-5) failed. [ 55.142085][ T3711] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 55.192507][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /2/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 55.290096][ T3720] loop4: detected capacity change from 0 to 256 [ 55.326940][ T3575] EXT4-fs error (device loop0): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 55.456834][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 55.477063][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /2/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 55.556866][ T3312] usb 3-1: 0:2 : does not exist [ 55.587592][ T3575] EXT4-fs error (device loop0): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 55.616098][ T3728] loop1: detected capacity change from 0 to 2048 [ 55.637066][ T3312] usb 3-1: USB disconnect, device number 2 [ 55.663951][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 55.685474][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /2/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 55.741573][ T3575] EXT4-fs error (device loop0): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 55.787516][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 55.821644][ T3728] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 55.825819][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /2/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 55.859662][ T3728] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.890548][ T3575] EXT4-fs error (device loop0): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 55.930229][ T3568] udevd[3568]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 55.954611][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 56.013155][ T3742] xt_hashlimit: max too large, truncated to 1048576 [ 56.014229][ T3575] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /2/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 56.119496][ T3744] loop1: detected capacity change from 0 to 128 [ 56.155493][ T3739] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 56.239541][ T3575] EXT4-fs error (device loop0): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 56.259296][ T3744] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 56.288811][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 56.306362][ T3744] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 56.311852][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 56.332790][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 56.458900][ T3312] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 56.549616][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 56.800387][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 56.887249][ T3312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.940065][ T3575] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.' [ 56.969564][ T3312] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.991068][ T3312] usb 3-1: config 1 interface 1 has no altsetting 0 [ 57.025779][ T26] audit: type=1326 audit(1722509916.755:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3750 comm="syz.4.33" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4087d963b9 code=0x0 [ 57.196884][ T3312] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.216440][ T3312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.238670][ T3312] usb 3-1: Product: syz [ 57.243017][ T3312] usb 3-1: Manufacturer: syz [ 57.253905][ T3312] usb 3-1: SerialNumber: syz [ 57.307893][ T3312] cdc_ncm 3-1:1.0: skipping garbage [ 57.320501][ T3312] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 57.351280][ T3312] cdc_ncm 3-1:1.0: bind() failure [ 57.372545][ T3312] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 57.379592][ T3312] cdc_ncm 3-1:1.1: bind() failure [ 57.396806][ T1291] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 57.529647][ T3749] loop2: detected capacity change from 0 to 1024 [ 57.589252][ T3643] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.632964][ T3749] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 57.679538][ T3643] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.722160][ T3756] can: request_module (can-proto-5) failed. [ 57.762897][ T3620] usb 3-1: USB disconnect, device number 3 [ 57.768464][ T3756] loop4: detected capacity change from 0 to 512 [ 57.783212][ T3643] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.807542][ T1291] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 57.836166][ T1291] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 57.850296][ T3756] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 57.863228][ T1291] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 57.899027][ T1291] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 57.909418][ T1291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.966285][ T3643] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.986597][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 58.210136][ T1291] snd-usb-audio: probe of 4-1:27.0 failed with error -12 [ 58.318331][ T1291] usb 4-1: USB disconnect, device number 2 [ 58.347633][ T3774] chnl_net:caif_netlink_parms(): no params data found [ 58.532552][ T3792] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 58.558078][ T3797] loop1: detected capacity change from 0 to 128 [ 58.622528][ T3797] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 59.099190][ T3797] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 59.205643][ T3798] udevd[3798]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 59.491678][ T3774] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.542304][ T3774] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.601404][ T3774] device bridge_slave_0 entered promiscuous mode [ 59.641582][ T3774] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.694044][ T3774] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.732328][ T3774] device bridge_slave_1 entered promiscuous mode [ 59.748244][ T26] audit: type=1326 audit(1722509919.485:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3819 comm="syz.2.51" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff77a7013b9 code=0x0 [ 59.831257][ T3833] netlink: 268 bytes leftover after parsing attributes in process `syz.4.55'. [ 59.954966][ T3774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.981416][ T3774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.046819][ T3312] Bluetooth: hci0: command 0x0409 tx timeout [ 60.078317][ T3850] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 60.122091][ T3774] team0: Port device team_slave_0 added [ 60.203564][ T3774] team0: Port device team_slave_1 added [ 60.274410][ T3774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.335701][ T3774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.410287][ T3774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.545343][ T3865] loop2: detected capacity change from 0 to 512 [ 60.914396][ T3774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.047505][ T3865] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 61.068326][ T3838] can: request_module (can-proto-5) failed. [ 61.083562][ T3774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.133104][ T26] audit: type=1800 audit(1722509920.805:5): pid=3869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.61" name="/" dev="fuse" ino=1 res=0 errno=0 [ 61.142076][ T3774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.456176][ T3774] device hsr_slave_0 entered promiscuous mode [ 61.487812][ T3774] device hsr_slave_1 entered promiscuous mode [ 61.497977][ T3774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.505559][ T3774] Cannot create hsr debugfs directory [ 61.568544][ T3888] loop4: detected capacity change from 0 to 128 [ 61.641685][ T26] audit: type=1326 audit(1722509921.375:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3897 comm="syz.3.76" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f505d2cb3b9 code=0x0 [ 61.754462][ T3902] sctp: [Deprecated]: syz.3.77 (pid 3902) Use of struct sctp_assoc_value in delayed_ack socket option. [ 61.754462][ T3902] Use struct sctp_sack_info instead [ 61.819798][ T3888] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 61.977705][ T3888] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 62.127751][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 62.562131][ T3643] device hsr_slave_0 left promiscuous mode [ 62.624355][ T3643] device hsr_slave_1 left promiscuous mode [ 62.672018][ T3643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.724355][ T3643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.750381][ T3643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.764176][ T3643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.806337][ T3643] device bridge_slave_1 left promiscuous mode [ 62.846244][ T3643] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.963774][ T3643] device bridge_slave_0 left promiscuous mode [ 62.977442][ T3643] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.076211][ T3643] device veth1_macvtap left promiscuous mode [ 63.130433][ T3643] device veth0_macvtap left promiscuous mode [ 63.168427][ T3643] device veth1_vlan left promiscuous mode [ 63.174902][ T3643] device veth0_vlan left promiscuous mode [ 63.208195][ T1291] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 63.537159][ T3643] team0 (unregistering): Port device team_slave_1 removed [ 63.552302][ T3643] team0 (unregistering): Port device team_slave_0 removed [ 63.575037][ T3643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.603974][ T3643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.628574][ T1291] usb 4-1: config 0 has an invalid interface number: 242 but max is 0 [ 63.642074][ T1291] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.661267][ T1291] usb 4-1: config 0 has no interface number 0 [ 63.673540][ T1291] usb 4-1: config 0 interface 242 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 63.687009][ T1291] usb 4-1: config 0 interface 242 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 63.698388][ T1291] usb 4-1: config 0 interface 242 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 63.721782][ T3643] bond0 (unregistering): Released all slaves [ 63.728384][ T1291] usb 4-1: config 0 interface 242 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 63.728416][ T1291] usb 4-1: config 0 interface 242 altsetting 1 has an invalid endpoint with address 0x93, skipping [ 63.728438][ T1291] usb 4-1: config 0 interface 242 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 15 [ 63.728462][ T1291] usb 4-1: config 0 interface 242 has no altsetting 0 [ 63.772358][ T3617] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.843361][ T3947] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 63.851125][ T3947] IPv6: NLM_F_CREATE should be set when creating new route [ 63.858417][ T3947] IPv6: NLM_F_CREATE should be set when creating new route [ 63.865635][ T3947] IPv6: NLM_F_CREATE should be set when creating new route [ 63.896911][ T1291] usb 4-1: New USB device found, idVendor=8b63, idProduct=6fac, bcdDevice=80.95 [ 63.906078][ T1291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.980036][ T1291] usb 4-1: Product: syz [ 64.001753][ T1291] usb 4-1: Manufacturer: syz [ 64.006407][ T1291] usb 4-1: SerialNumber: syz [ 64.026129][ T1291] usb 4-1: config 0 descriptor?? [ 64.059761][ T3617] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 64.060230][ T3932] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 64.148241][ T3617] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.158453][ T3617] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.166718][ T3657] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 64.170169][ T3617] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 64.207192][ T3617] usb 5-1: config 0 interface 0 has no altsetting 0 [ 64.224798][ T3312] Bluetooth: hci0: command 0x040f tx timeout [ 64.297389][ T3617] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.306387][ T3617] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.332080][ T1291] usb 4-1: USB disconnect, device number 3 [ 64.338088][ T3617] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 64.357393][ T3617] usb 5-1: config 0 interface 0 has no altsetting 0 [ 64.450195][ T3617] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.479699][ T3617] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.525378][ T3617] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 64.547138][ T3617] usb 5-1: config 0 interface 0 has no altsetting 0 [ 64.569534][ T3990] loop1: detected capacity change from 0 to 128 [ 64.582022][ T3657] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.586961][ T3774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.612684][ T3774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.625120][ T3774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.636963][ T3617] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.649990][ T3990] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 64.667035][ T3617] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.673574][ T3990] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.704101][ T3617] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 64.732750][ T3617] usb 5-1: config 0 interface 0 has no altsetting 0 [ 64.753946][ T3774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.786948][ T3657] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.816377][ T3657] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.832215][ T3617] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 64.834702][ T3657] usb 3-1: Product: syz [ 64.851339][ T3617] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 64.862513][ T3657] usb 3-1: Manufacturer: syz [ 64.862533][ T3657] usb 3-1: SerialNumber: syz [ 64.930542][ T3617] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 64.965266][ T3617] usb 5-1: config 0 interface 0 has no altsetting 0 [ 65.001801][ T3774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.073042][ T3312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.088077][ T3312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.102062][ T3617] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 65.121593][ T3617] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 65.140691][ T3774] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.166795][ T3617] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 65.206702][ T3617] usb 5-1: config 0 interface 0 has no altsetting 0 [ 65.220455][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.229875][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.271557][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.278898][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.297017][ T3617] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 65.306106][ T3617] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 65.332410][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.354206][ T3617] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 65.372725][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.381789][ T3617] usb 5-1: config 0 interface 0 has no altsetting 0 [ 65.395338][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.402568][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.417878][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.444699][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.459576][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.484471][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.502270][ T3617] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 65.533361][ T3774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.545388][ T3617] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 65.575160][ T3617] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 65.604986][ T3617] usb 5-1: config 0 interface 0 has no altsetting 0 [ 65.630223][ T3774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.660697][ T4035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 65.671477][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.695394][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.719675][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.747048][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.756972][ T3657] cdc_ncm 3-1:1.0: bind() failure [ 65.757544][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.767452][ T3657] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 65.771126][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.785013][ T3617] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 65.806138][ T3617] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 65.824885][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.826609][ T3657] cdc_ncm 3-1:1.1: bind() failure [ 65.835152][ T3617] usb 5-1: Product: syz [ 65.842421][ T3617] usb 5-1: Manufacturer: syz [ 65.849570][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.858066][ T3617] usb 5-1: SerialNumber: syz [ 65.864653][ T3617] usb 5-1: config 0 descriptor?? [ 65.885300][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.899912][ T3955] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 65.906015][ T3657] usb 3-1: USB disconnect, device number 4 [ 65.967259][ T3617] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 66.114589][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.127648][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.152643][ T3774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.159877][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 66.219358][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.231433][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 66.231826][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.291721][ T3620] Bluetooth: hci0: command 0x0419 tx timeout [ 66.313653][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.342423][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.359527][ T3774] device veth0_vlan entered promiscuous mode [ 66.374466][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.382563][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.395533][ T3774] device veth1_vlan entered promiscuous mode [ 66.460120][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.471925][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.489150][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.497841][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 66.514356][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.531993][ T7] usb 2-1: config 0 has an invalid interface number: 242 but max is 0 [ 66.532090][ T3774] device veth0_macvtap entered promiscuous mode [ 66.543730][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.560714][ T3774] device veth1_macvtap entered promiscuous mode [ 66.581235][ T7] usb 2-1: config 0 has no interface number 0 [ 66.589985][ T3774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.598999][ T7] usb 2-1: config 0 interface 242 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 66.614992][ T3774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.636366][ T7] usb 2-1: config 0 interface 242 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 66.644695][ T3774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.659401][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 66.676600][ T7] usb 2-1: config 0 interface 242 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 66.676859][ T23] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 66.697705][ T3774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.707948][ T3774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.712141][ T7] usb 2-1: config 0 interface 242 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 66.720801][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.737746][ T3774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.752047][ T3774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.763579][ T23] usb 4-1: config 0 descriptor?? [ 66.769004][ T3774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.780906][ T3774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.795342][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.796648][ T7] usb 2-1: config 0 interface 242 altsetting 1 has an invalid endpoint with address 0x93, skipping [ 66.811402][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.838267][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.863447][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.869605][ T7] usb 2-1: config 0 interface 242 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 15 [ 66.884469][ T3774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.910028][ T3774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.932082][ T3774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.937602][ T7] usb 2-1: config 0 interface 242 has no altsetting 0 [ 66.946050][ T3774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.961156][ T3774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.972287][ T3774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.982768][ T3774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.993797][ T3774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.006103][ T3774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.022208][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.037497][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.052038][ T23] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 67.076781][ T3774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.121587][ T3774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.152044][ T3774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.157923][ T7] usb 2-1: New USB device found, idVendor=8b63, idProduct=6fac, bcdDevice=80.95 [ 67.171700][ T3774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.193478][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.218066][ T7] usb 2-1: Product: syz [ 67.222270][ T7] usb 2-1: Manufacturer: syz [ 67.235183][ T7] usb 2-1: SerialNumber: syz [ 67.259308][ T7] usb 2-1: config 0 descriptor?? [ 67.287390][ T4037] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 67.372053][ T3760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.387409][ T23] usb 5-1: USB disconnect, device number 2 [ 67.406130][ T3760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.434989][ T23] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 67.435158][ T4093] device batadv0 entered promiscuous mode [ 67.484259][ T4093] device macsec1 entered promiscuous mode [ 67.524960][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.560696][ T3760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.626789][ T3760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.658016][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.709596][ T23] usb 2-1: USB disconnect, device number 2 [ 67.779257][ T3657] usb 4-1: USB disconnect, device number 4 [ 67.798350][ T3657] iowarrior 4-1:0.0: I/O-Warror #1 now disconnected [ 67.940556][ T4114] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 68.362677][ T9] tipc: Subscription rejected, illegal request [ 68.526742][ T3657] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 68.542139][ T4139] loop1: detected capacity change from 0 to 2048 [ 68.622802][ T4146] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 68.693950][ T4139] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.738646][ T4139] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 68.753979][ T4157] fuse: Bad value for 'fd' [ 68.816850][ T3621] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 68.847247][ T3657] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 68.926949][ T3657] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.936142][ T3657] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.947544][ T3657] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 68.958865][ T3657] usb 4-1: config 0 interface 0 has no altsetting 0 [ 69.006991][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.046882][ T3657] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.055965][ T3657] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.056672][ T3617] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.067448][ T3657] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 69.074696][ T3621] usb 3-1: Using ep0 maxpacket: 32 [ 69.085975][ T3657] usb 4-1: config 0 interface 0 has no altsetting 0 [ 69.166938][ T3620] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 69.177108][ T3657] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.186118][ T3657] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.197538][ T3657] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 69.206792][ T3621] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 69.209054][ T3657] usb 4-1: config 0 interface 0 has no altsetting 0 [ 69.223506][ T3621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 69.296818][ T3657] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.305723][ T3657] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.317847][ T3657] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 69.328986][ T3657] usb 4-1: config 0 interface 0 has no altsetting 0 [ 69.366973][ T7] usb 1-1: config 0 has an invalid interface number: 242 but max is 0 [ 69.375362][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.389238][ T3621] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 69.398373][ T7] usb 1-1: config 0 has no interface number 0 [ 69.404460][ T7] usb 1-1: config 0 interface 242 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 69.415904][ T3621] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 69.424818][ T3620] usb 2-1: Using ep0 maxpacket: 32 [ 69.430460][ T3621] usb 3-1: Product: syz [ 69.434631][ T3621] usb 3-1: Manufacturer: syz [ 69.436853][ T3657] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.439341][ T7] usb 1-1: config 0 interface 242 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 69.453984][ T3657] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.459326][ T3621] usb 3-1: SerialNumber: syz [ 69.470680][ T3657] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 69.475033][ T3617] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 69.491488][ T3657] usb 4-1: config 0 interface 0 has no altsetting 0 [ 69.497132][ T3621] usb 3-1: config 0 descriptor?? [ 69.506796][ T7] usb 1-1: config 0 interface 242 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 69.517809][ T3617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.526973][ T7] usb 1-1: config 0 interface 242 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 69.538661][ T3621] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 69.550440][ T3617] usb 5-1: config 0 descriptor?? [ 69.555480][ T7] usb 1-1: config 0 interface 242 altsetting 1 has an invalid endpoint with address 0x93, skipping [ 69.567366][ T3620] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 69.575710][ T3620] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 69.584811][ T7] usb 1-1: config 0 interface 242 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 15 [ 69.598488][ T3621] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 69.607171][ T3657] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.608380][ T3617] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 69.621701][ T3657] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.622567][ T3657] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 69.622594][ T3657] usb 4-1: config 0 interface 0 has no altsetting 0 [ 69.651667][ T3620] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 69.663702][ T3620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 69.673502][ T7] usb 1-1: config 0 interface 242 has no altsetting 0 [ 69.680427][ T3620] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 69.690162][ T3620] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 69.703365][ T3620] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 69.706826][ T3657] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.712480][ T3620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.728077][ T3657] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.734251][ T3620] usb 2-1: config 0 descriptor?? [ 69.753573][ T3657] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 69.764978][ T3657] usb 4-1: config 0 interface 0 has no altsetting 0 [ 69.768688][ T3621] usb 3-1: USB disconnect, device number 5 [ 69.786047][ T3621] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 69.816875][ T3617] gspca_sn9c2028: read1 error -32 [ 69.846851][ T7] usb 1-1: New USB device found, idVendor=8b63, idProduct=6fac, bcdDevice=80.95 [ 69.856001][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.864452][ T7] usb 1-1: Product: syz [ 69.866893][ T3657] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.868787][ T7] usb 1-1: Manufacturer: syz [ 69.882414][ T7] usb 1-1: SerialNumber: syz [ 69.882847][ T3657] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.897562][ T7] usb 1-1: config 0 descriptor?? [ 69.903554][ T1967] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 69.905505][ T3657] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 69.913046][ T1967] Bluetooth: hci3: Injecting HCI hardware error event [ 69.924252][ T4156] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 69.932524][ T3590] Bluetooth: hci3: hardware error 0x00 [ 69.944120][ T3657] usb 4-1: config 0 interface 0 has no altsetting 0 [ 70.008681][ T3620] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 70.022484][ T3620] usb 2-1: USB disconnect, device number 3 [ 70.035541][ T3620] usblp0: removed [ 70.106824][ T3657] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 70.116374][ T3657] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 70.125199][ T3657] usb 4-1: Product: syz [ 70.129962][ T3657] usb 4-1: Manufacturer: syz [ 70.135284][ T3657] usb 4-1: SerialNumber: syz [ 70.142523][ T3657] usb 4-1: config 0 descriptor?? [ 70.167003][ T4128] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 70.194767][ T3657] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 70.206168][ T3621] usb 1-1: USB disconnect, device number 2 [ 70.298178][ T7] usb 5-1: USB disconnect, device number 3 [ 70.589935][ T3620] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 70.846801][ T3620] usb 2-1: Using ep0 maxpacket: 32 [ 70.946859][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 70.979145][ T3620] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 70.992821][ T3620] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 71.004413][ T3620] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 71.006184][ T4179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.028223][ T3620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.040007][ T3620] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 71.050449][ T3620] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 71.066202][ T3620] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 71.076321][ T3620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.097962][ T3620] usb 2-1: config 0 descriptor?? [ 71.147855][ T4183] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.196830][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 71.316894][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.335629][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 71.348738][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 71.359567][ T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 71.372547][ T3620] usblp 2-1:0.0: usblp1: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 71.393503][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.414244][ T4187] loop4: detected capacity change from 0 to 2048 [ 71.428153][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.434729][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.496857][ T7] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 71.505919][ T7] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 71.559941][ T4187] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.575319][ T7] usb 3-1: Manufacturer: syz [ 71.612259][ T4187] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 71.629017][ T1075] usb 4-1: USB disconnect, device number 5 [ 71.633471][ T7] usb 3-1: config 0 descriptor?? [ 71.646603][ T1075] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 71.684140][ T4192] usb usb8: usbfs: process 4192 (syz.3.151) did not claim interface 0 before use [ 72.047064][ T7] rc_core: IR keymap rc-hauppauge not found [ 72.063808][ T7] Registered IR keymap rc-empty [ 72.081155][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 72.146835][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 72.188168][ T7] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 72.225655][ T7] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 72.294338][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 72.307033][ T3621] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 72.346756][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 72.381778][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 72.441050][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 72.506780][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 72.536724][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 72.587234][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 72.604564][ T23] usb 2-1: USB disconnect, device number 4 [ 72.626472][ T23] usblp1: removed [ 72.631326][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 72.672265][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 72.697448][ T3621] usb 4-1: config 0 has an invalid interface number: 242 but max is 0 [ 72.706753][ T7] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 72.716817][ T3621] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.737913][ T7] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 72.745933][ T7] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 72.770312][ T3621] usb 4-1: config 0 has no interface number 0 [ 72.797831][ T3621] usb 4-1: config 0 interface 242 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 72.826689][ T3621] usb 4-1: config 0 interface 242 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 72.856627][ T3621] usb 4-1: config 0 interface 242 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 72.883405][ T3621] usb 4-1: config 0 interface 242 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 72.906688][ T3621] usb 4-1: config 0 interface 242 altsetting 1 has an invalid endpoint with address 0x93, skipping [ 72.934957][ T3621] usb 4-1: config 0 interface 242 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 15 [ 72.959302][ T3621] usb 4-1: config 0 interface 242 has no altsetting 0 [ 73.121910][ T3621] usb 4-1: New USB device found, idVendor=8b63, idProduct=6fac, bcdDevice=80.95 [ 73.131530][ T3621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.145451][ T3621] usb 4-1: Product: syz [ 73.149821][ T3621] usb 4-1: Manufacturer: syz [ 73.154645][ T3621] usb 4-1: SerialNumber: syz [ 73.167146][ T3621] usb 4-1: config 0 descriptor?? [ 73.186641][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 73.188423][ T4207] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 73.453227][ T3620] usb 4-1: USB disconnect, device number 6 [ 73.487728][ T23] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 73.577630][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.602160][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 73.614741][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 73.628572][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 73.661198][ T3657] usb 3-1: USB disconnect, device number 6 [ 73.726717][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.744612][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 73.823776][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 73.849231][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 73.946974][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.975708][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.011770][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 74.026825][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.127190][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.148816][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.222897][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 74.307712][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.409992][ T4263] chnl_net:caif_netlink_parms(): no params data found [ 74.436942][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.463751][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.493133][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 74.512289][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.523244][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.530824][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.539907][ T4263] device bridge_slave_0 entered promiscuous mode [ 74.551639][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.559083][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.567254][ T4263] device bridge_slave_1 entered promiscuous mode [ 74.575501][ T4294] device veth1_macvtap left promiscuous mode [ 74.618376][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.627519][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.638928][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 74.666644][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.678010][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.693629][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.730336][ T4263] team0: Port device team_slave_0 added [ 74.739343][ T4263] team0: Port device team_slave_1 added [ 74.746994][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.757127][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.774816][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 74.786437][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.813198][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.826757][ T1075] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 74.834563][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.867294][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.891572][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.905173][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.914363][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.945290][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.969085][ T23] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 74.982547][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.992067][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.097561][ T1075] usb 5-1: Using ep0 maxpacket: 16 [ 75.113017][ T4263] device hsr_slave_0 entered promiscuous mode [ 75.123223][ T4263] device hsr_slave_1 entered promiscuous mode [ 75.161353][ T4263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.175168][ T4263] Cannot create hsr debugfs directory [ 75.181097][ T23] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 75.194928][ T23] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 75.206228][ T23] usb 2-1: Product: syz [ 75.216724][ T1075] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.228223][ T23] usb 2-1: Manufacturer: syz [ 75.233574][ T1075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.254314][ T23] usb 2-1: SerialNumber: syz [ 75.271090][ T23] usb 2-1: config 0 descriptor?? [ 75.278846][ T1075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 75.293182][ T1075] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 75.305297][ T1075] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.318776][ T4227] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 75.351375][ T23] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 75.426773][ T1075] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 75.445567][ T1075] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 75.470508][ T1075] usb 5-1: Manufacturer: syz [ 75.488537][ T1075] usb 5-1: config 0 descriptor?? [ 75.541645][ T4317] device syzkaller0 entered promiscuous mode [ 75.638998][ T4263] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.657198][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.665654][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.733388][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.740698][ T4323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.749106][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.756225][ T4323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.767398][ T4323] device bridge0 entered promiscuous mode [ 75.854059][ T4263] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.933263][ T1075] rc_core: IR keymap rc-hauppauge not found [ 75.943861][ T1075] Registered IR keymap rc-empty [ 75.971925][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 76.006666][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 76.026379][ T4263] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.037827][ T1075] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 76.088887][ T1075] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 76.126733][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 76.149897][ T4336] device pim6reg1 entered promiscuous mode [ 76.162950][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 76.207982][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 76.248691][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 76.258893][ T4263] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.276648][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 76.316758][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 76.347308][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 76.377386][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 76.395109][ T4345] loop3: detected capacity change from 0 to 2048 [ 76.417134][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 76.458080][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 76.496738][ T1075] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 76.533227][ T13] cfg80211: failed to load regulatory.db [ 76.546893][ T4263] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.547805][ T1075] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 76.563365][ T4345] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.573717][ T1075] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 76.593852][ T4345] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 76.643556][ T4263] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.751919][ T4263] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.823315][ T4263] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.896384][ T13] usb 2-1: USB disconnect, device number 5 [ 76.918126][ T13] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 77.363962][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.415162][ T1075] usb 5-1: USB disconnect, device number 4 [ 77.493512][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.515999][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.593794][ T4378] loop3: detected capacity change from 0 to 2048 [ 77.700016][ T4263] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.720078][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.729175][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.738070][ T21] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.745131][ T21] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.756688][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.773780][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.783556][ T4378] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.797794][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.810473][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.812597][ T4378] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, [ 77.817630][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.834537][ T4378] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 77.862577][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.873937][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.893318][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.903298][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.917028][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.925077][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.935114][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.954218][ T4263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.992489][ T4263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.006854][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.013776][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.030740][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.044944][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.054784][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.121572][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.206720][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 78.296950][ T7] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 78.323253][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.356313][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.395606][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.416890][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.426083][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.462078][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.467911][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 78.477687][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.482598][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 78.551871][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.567952][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.585971][ T4263] device veth0_vlan entered promiscuous mode [ 78.586961][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.602905][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.618425][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.626704][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.643296][ T4263] device veth1_vlan entered promiscuous mode [ 78.666709][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 78.689227][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 78.724927][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.753977][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.772228][ T4263] device veth0_macvtap entered promiscuous mode [ 78.780947][ T4423] netlink: 'syz.4.228': attribute type 1 has an invalid length. [ 78.789266][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.806334][ T4423] device bond1 entered promiscuous mode [ 78.813233][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 78.818018][ T4423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.228'. [ 78.847536][ T4423] device bond1 left promiscuous mode [ 78.853276][ T4423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.862162][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 78.876337][ T3617] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 78.887055][ T4263] device veth1_macvtap entered promiscuous mode [ 78.894584][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 78.960401][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.971938][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.976935][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 78.984596][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.001705][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.019672][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.041571][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.059559][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.079226][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 79.090758][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.090778][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.090800][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.090812][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.092013][ T4432] loop1: detected capacity change from 0 to 2048 [ 79.111403][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.146756][ T3617] usb 4-1: Using ep0 maxpacket: 16 [ 79.156430][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 79.167414][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.181568][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.190193][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.240873][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.249447][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.249488][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.249522][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 79.249545][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 79.289051][ T3617] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.303278][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.314860][ T3617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.315665][ T4432] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.346383][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.366267][ T3617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 79.383287][ T4432] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 79.399859][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.411322][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.420246][ T3617] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 79.422138][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.441679][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.451338][ T3617] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.452928][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.475357][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.485321][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.504894][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.516293][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.517343][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.533108][ T4263] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.542885][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.563333][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 79.575127][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 79.576925][ T4263] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.585122][ T3617] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 79.605406][ T4263] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.605543][ T3617] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 79.626332][ T4263] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.628927][ T3617] usb 4-1: Manufacturer: syz [ 79.651888][ T3617] usb 4-1: config 0 descriptor?? [ 79.658993][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.677250][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.695115][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.697331][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.730968][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 79.742474][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 79.831100][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.848554][ T3760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.865202][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.884411][ T3760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.896004][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 79.909032][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.941906][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.950476][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 79.984397][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.994514][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.026950][ T3617] rc_core: IR keymap rc-hauppauge not found [ 80.035947][ T3617] Registered IR keymap rc-empty [ 80.055522][ T3617] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 80.099951][ T3617] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 80.147015][ T7] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 80.156988][ T3617] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 80.194948][ T7] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 80.225151][ T3617] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 80.392525][ T4461] netlink: 16 bytes leftover after parsing attributes in process `syz.4.237'. [ 81.053892][ T7] usb 1-1: Product: syz [ 81.089862][ T7] usb 1-1: Manufacturer: syz [ 81.133722][ T7] usb 1-1: SerialNumber: syz [ 81.148695][ T3621] Bluetooth: hci5: command 0x040f tx timeout [ 81.155426][ T3617] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.742407][ T7] usb 1-1: config 0 descriptor?? [ 81.747650][ T3617] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.766821][ T7] usb 1-1: can't set config #0, error -71 [ 81.785567][ T7] usb 1-1: USB disconnect, device number 3 [ 81.791695][ T3617] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.836730][ T3617] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.853883][ T4472] loop3: detected capacity change from 0 to 2048 [ 81.886849][ T3617] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.956976][ T3617] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 81.988149][ T4472] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.000991][ T3617] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 82.014307][ T4478] netlink: 'syz.0.241': attribute type 10 has an invalid length. [ 82.091700][ T3617] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 82.116254][ T4472] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 82.188029][ T3617] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 82.226748][ T3617] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 82.259807][ T4478] team0: Port device netdevsim0 added [ 82.267792][ T3617] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 82.279848][ T3617] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 82.293714][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 82.297484][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 82.353036][ T4478] syz.0.241 (4478) used greatest stack depth: 19072 bytes left [ 82.384866][ T3617] usb 4-1: USB disconnect, device number 7 [ 82.391066][ T4495] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 82.513193][ T4501] netlink: 'syz.4.251': attribute type 4 has an invalid length. [ 82.559665][ T4501] netlink: 'syz.4.251': attribute type 17 has an invalid length. [ 82.573899][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 82.776923][ T3621] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 82.866631][ T3624] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 83.016757][ T3621] usb 3-1: Using ep0 maxpacket: 32 [ 83.036719][ T1075] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 83.045377][ T3657] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 83.170647][ T3312] Bluetooth: hci5: command 0x0419 tx timeout [ 83.196952][ T3624] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 83.234747][ T404] device hsr_slave_0 left promiscuous mode [ 83.243153][ T404] device hsr_slave_1 left promiscuous mode [ 83.258602][ T404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.266107][ T404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.282010][ T404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.289648][ T3624] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.296926][ T3621] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 83.298704][ T3624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.318213][ T3621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.318742][ T3657] usb 4-1: Using ep0 maxpacket: 16 [ 83.326475][ T3621] usb 3-1: Product: syz [ 83.326493][ T3621] usb 3-1: Manufacturer: syz [ 83.326505][ T3621] usb 3-1: SerialNumber: syz [ 83.345823][ T404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.354867][ T3621] usb 3-1: config 0 descriptor?? [ 83.358998][ T3624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 83.377991][ T3624] usb 1-1: config 0 interface 0 has no altsetting 0 [ 83.387809][ T404] device bridge_slave_1 left promiscuous mode [ 83.394101][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.398322][ T3621] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 83.411076][ T404] device bridge_slave_0 left promiscuous mode [ 83.423945][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.437801][ T404] device batadv0 left promiscuous mode [ 83.444034][ T404] device veth1_macvtap left promiscuous mode [ 83.451449][ T404] device veth0_macvtap left promiscuous mode [ 83.457892][ T404] device veth1_vlan left promiscuous mode [ 83.463755][ T404] device veth0_vlan left promiscuous mode [ 83.469889][ T3624] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.479129][ T1075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.490436][ T3624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.501497][ T1075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.511478][ T3657] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.521601][ T3624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 83.532806][ T1075] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 83.542033][ T3657] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.553235][ T1075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.561407][ T3624] usb 1-1: config 0 interface 0 has no altsetting 0 [ 83.569314][ T3657] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 83.579821][ T3657] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 83.590425][ T1075] usb 5-1: config 0 descriptor?? [ 83.595975][ T3657] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.696902][ T3624] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.705825][ T3624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.717930][ T3657] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 83.736613][ T3657] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 83.744621][ T3657] usb 4-1: Manufacturer: syz [ 83.766587][ T3624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 83.779606][ T3657] usb 4-1: config 0 descriptor?? [ 83.785031][ T3624] usb 1-1: config 0 interface 0 has no altsetting 0 [ 83.864726][ T404] team0 (unregistering): Port device team_slave_1 removed [ 83.877522][ T3624] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.877884][ T404] team0 (unregistering): Port device team_slave_0 removed [ 83.892785][ T3624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.905443][ T3624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 83.911656][ T404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.917159][ T3624] usb 1-1: config 0 interface 0 has no altsetting 0 [ 83.939996][ T404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.003262][ T404] bond0 (unregistering): Released all slaves [ 84.017060][ T3624] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.026135][ T3624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.040475][ T3624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 84.051855][ T3624] usb 1-1: config 0 interface 0 has no altsetting 0 [ 84.130630][ T3657] rc_core: IR keymap rc-hauppauge not found [ 84.136815][ T3657] Registered IR keymap rc-empty [ 84.141758][ T3657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 84.149292][ T3624] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.158317][ T3624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.169915][ T3624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 84.181066][ T3624] usb 1-1: config 0 interface 0 has no altsetting 0 [ 84.187806][ T3657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 84.227328][ T3657] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 84.241198][ T3657] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 84.267834][ T3657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 84.277115][ T3624] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.286036][ T3624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.297517][ T3657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 84.311487][ T3624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 84.324141][ T3624] usb 1-1: config 0 interface 0 has no altsetting 0 [ 84.336507][ T3657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 84.368634][ T3657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 84.406834][ T3657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 84.436906][ T3624] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.445904][ T3624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.456871][ T3657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 84.473255][ T3624] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 1414, setting to 1024 [ 84.484513][ T3624] usb 1-1: config 0 interface 0 has no altsetting 0 [ 84.491340][ T3657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 84.528739][ T4527] loop1: detected capacity change from 0 to 2048 [ 84.546892][ T3657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 84.580616][ T4527] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.596716][ T3657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 84.600952][ T4527] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 84.634282][ T3657] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 84.677811][ T3657] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 84.685798][ T3657] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 84.736890][ T3624] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 84.745966][ T3624] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 84.778247][ T3624] usb 1-1: Product: syz [ 84.782645][ T3624] usb 1-1: Manufacturer: syz [ 84.803962][ T3624] usb 1-1: SerialNumber: syz [ 84.827051][ T1075] usbhid 5-1:0.0: can't add hid device: -71 [ 84.840089][ T1075] usbhid: probe of 5-1:0.0 failed with error -71 [ 84.855734][ T3624] usb 1-1: config 0 descriptor?? [ 84.862857][ T4533] netlink: 'syz.1.259': attribute type 10 has an invalid length. [ 84.896968][ T4503] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 84.898714][ T1075] usb 5-1: USB disconnect, device number 5 [ 84.934572][ T3624] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 84.989375][ T4533] team0: Port device netdevsim0 added [ 85.586784][ T3621] gspca_ov534_9: sccb_read failed 1 [ 85.694807][ T1075] usb 4-1: USB disconnect, device number 8 [ 85.816775][ T3621] gspca_ov534_9: reg_w failed -71 [ 85.821905][ T3617] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 86.235189][ T3621] gspca_ov534_9: Unknown sensor 0000 [ 86.235262][ T3621] ov534_9: probe of 3-1:0.0 failed with error -22 [ 86.257824][ T3621] usb 3-1: USB disconnect, device number 7 [ 86.913476][ T3617] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 86.923855][ T3617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.957904][ T3617] usb 5-1: config 0 descriptor?? [ 86.992015][ T3620] usb 1-1: USB disconnect, device number 4 [ 87.012809][ T3620] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 87.029666][ T3617] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 87.110291][ T4567] loop3: detected capacity change from 0 to 2048 [ 87.214618][ T4567] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.236699][ T3617] gspca_sunplus: reg_w_riv err -71 [ 87.241896][ T3617] sunplus: probe of 5-1:0.0 failed with error -71 [ 87.439698][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 87.644518][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 87.961518][ T3617] usb 5-1: USB disconnect, device number 6 [ 87.995955][ T4582] netlink: 'syz.2.274': attribute type 10 has an invalid length. [ 88.049347][ T4567] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 88.124504][ T4582] team0: Port device netdevsim0 added [ 88.668288][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 88.975535][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 89.078216][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 89.441320][ T4620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.286'. [ 89.488197][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 89.506576][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 92.795396][ T4626] 9pnet: p9_fd_create_tcp (4626): problem connecting socket to 127.0.0.1 [ 92.926169][ T4624] loop1: detected capacity change from 0 to 2048 [ 93.839701][ T4624] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.928127][ T4624] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.967420][ T4641] netlink: 'syz.4.292': attribute type 10 has an invalid length. [ 94.011707][ T4641] team0: Port device netdevsim0 added [ 94.176741][ T3624] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 94.300741][ T4647] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 94.857592][ T3624] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 94.872184][ T3624] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.960941][ T3624] usb 4-1: config 0 descriptor?? [ 95.005901][ T3624] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 95.256798][ T3624] gspca_sunplus: reg_w_riv err -71 [ 95.274797][ T3624] sunplus: probe of 4-1:0.0 failed with error -71 [ 95.899307][ T3624] usb 4-1: USB disconnect, device number 9 [ 96.101512][ T4675] loop3: detected capacity change from 0 to 2048 [ 96.747275][ T3620] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 96.798572][ T4675] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.822984][ T4675] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 96.893390][ T4685] netlink: 'syz.2.309': attribute type 10 has an invalid length. [ 97.056802][ T3620] usb 1-1: Using ep0 maxpacket: 16 [ 97.216967][ T3620] usb 1-1: config index 0 descriptor too short (expected 9243, got 27) [ 97.279649][ T3620] usb 1-1: config 0 has too many interfaces: 52, using maximum allowed: 32 [ 97.301256][ T3620] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.995815][ T3620] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 52 [ 98.187028][ T3620] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 98.208146][ T3620] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.236705][ T3620] usb 1-1: Product: syz [ 98.249165][ T3620] usb 1-1: Manufacturer: syz [ 98.272238][ T3620] usb 1-1: SerialNumber: syz [ 98.288508][ T3620] usb 1-1: config 0 descriptor?? [ 98.506136][ T3620] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 99.196679][ T3621] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 99.217590][ T3803] usb 1-1: Failed to submit usb control message: -71 [ 99.242078][ T3620] usb 1-1: USB disconnect, device number 5 [ 99.242822][ T3803] usb 1-1: unable to send the bmi data to the device: -71 [ 99.280233][ T4728] loop3: detected capacity change from 0 to 2048 [ 99.292763][ T3803] usb 1-1: unable to get target info from device [ 99.301196][ T3803] usb 1-1: could not get target info (-71) [ 99.312999][ T3803] usb 1-1: could not probe fw (-71) [ 99.385120][ T4728] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.471524][ T4728] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 100.376843][ T3621] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 100.393079][ T3621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.481279][ T3621] usb 3-1: config 0 descriptor?? [ 101.188067][ T3621] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 101.335517][ T4768] loop4: detected capacity change from 0 to 2048 [ 101.346773][ T3621] gspca_sunplus: reg_w_riv err -71 [ 101.352196][ T3621] sunplus: probe of 3-1:0.0 failed with error -71 [ 102.065249][ T3621] usb 3-1: USB disconnect, device number 8 [ 102.867787][ T4768] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.982918][ T4768] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 103.647090][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.106368][ T23] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 104.137974][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.157686][ T23] usb 2-1: config 0 descriptor?? [ 104.198574][ T23] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 104.447818][ T23] gspca_sunplus: reg_w_riv err -71 [ 104.453569][ T23] sunplus: probe of 2-1:0.0 failed with error -71 [ 104.534684][ T23] usb 2-1: USB disconnect, device number 6 [ 105.085331][ T4825] loop3: detected capacity change from 0 to 2048 [ 105.927591][ T4825] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.995610][ T4836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.360'. [ 106.004630][ T4836] device bridge_slave_1 left promiscuous mode [ 106.010965][ T4836] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.050041][ T4825] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 106.161033][ T4836] device bridge_slave_0 left promiscuous mode [ 106.187646][ T4836] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.177627][ T4857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.366'. [ 107.606705][ T21] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 107.981282][ T21] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 108.004302][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.043326][ T21] usb 2-1: config 0 descriptor?? [ 108.101789][ T21] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 108.899227][ T21] gspca_sunplus: reg_w_riv err -71 [ 108.914602][ T21] sunplus: probe of 2-1:0.0 failed with error -71 [ 108.938292][ T21] usb 2-1: USB disconnect, device number 7 [ 109.127202][ T4879] loop4: detected capacity change from 0 to 2048 [ 109.260701][ T4879] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.333056][ T4879] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 109.417969][ T4897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'. [ 109.451518][ T4897] device bridge_slave_1 left promiscuous mode [ 109.459267][ T4897] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.489801][ T4897] device bridge_slave_0 left promiscuous mode [ 109.502874][ T4897] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.625246][ T4911] input: syz0 as /devices/virtual/input/input10 [ 109.656738][ T3618] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 109.952011][ T4930] loop4: detected capacity change from 0 to 2048 [ 110.026928][ T3618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 110.043056][ T3618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 110.076669][ T3618] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 110.107568][ T3618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.131536][ T3618] usb 3-1: config 0 descriptor?? [ 110.154252][ T4930] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.168866][ T4930] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 110.370270][ T4965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'. [ 110.396699][ T3618] ath6kl: Failed to submit usb control message: -71 [ 110.405535][ T3618] ath6kl: unable to send the bmi data to the device: -71 [ 110.415802][ T3618] ath6kl: Unable to send get target info: -71 [ 110.421717][ T3312] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 110.430196][ T3618] ath6kl: Failed to init ath6kl core: -71 [ 110.442758][ T3618] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 110.452488][ T3618] usb 3-1: USB disconnect, device number 9 [ 110.757366][ T3312] usb 1-1: Using ep0 maxpacket: 16 [ 112.056541][ C0] sched: RT throttling activated [ 112.166907][ T3312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 112.336829][ T3312] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 112.355829][ T3312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.460501][ T3312] usb 1-1: Product: syz [ 112.579677][ T3312] usb 1-1: Manufacturer: syz [ 112.676246][ T3312] usb 1-1: SerialNumber: syz [ 112.891189][ T3312] usb 1-1: config 0 descriptor?? [ 113.010094][ T3312] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 113.047290][ T4995] loop1: detected capacity change from 0 to 2048 [ 113.063270][ T3312] input: failed to attach handler mousedev to device input11, error: -5 [ 113.122789][ T3312] usb 1-1: USB disconnect, device number 6 [ 113.142026][ T4995] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.212517][ T5003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.416'. [ 113.224193][ T4995] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 113.227069][ T5003] device bridge_slave_1 left promiscuous mode [ 113.245694][ T5003] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.255681][ T5003] device bridge_slave_0 left promiscuous mode [ 113.262517][ T5003] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.511549][ T5018] device team_slave_0 entered promiscuous mode [ 113.518346][ T5018] device team_slave_1 entered promiscuous mode [ 113.726712][ T3621] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 114.448922][ T3621] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 114.459151][ T3621] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 114.550424][ T3621] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 114.582304][ T3621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.609981][ T3621] usb 5-1: config 0 descriptor?? [ 114.640054][ T5031] tipc: Started in network mode [ 114.649123][ T5031] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 114.656932][ T5031] tipc: Enabled bearer , priority 0 [ 114.664432][ T5018] device team_slave_0 left promiscuous mode [ 114.671637][ T5018] device team_slave_1 left promiscuous mode [ 114.976831][ T3621] ath6kl: Failed to submit usb control message: -71 [ 114.989422][ T3621] ath6kl: unable to send the bmi data to the device: -71 [ 115.252545][ T5048] loop2: detected capacity change from 0 to 2048 [ 115.398192][ T3621] ath6kl: Unable to send get target info: -71 [ 115.406110][ T3621] ath6kl: Failed to init ath6kl core: -71 [ 115.420717][ T3621] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 115.432158][ T3621] usb 5-1: USB disconnect, device number 7 [ 115.455466][ T5048] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.478362][ T5048] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 115.773733][ T3618] tipc: Node number set to 15444650 [ 115.860557][ T5068] device team_slave_0 entered promiscuous mode [ 115.866798][ T5068] device team_slave_1 entered promiscuous mode [ 115.873010][ T5068] device netdevsim0 entered promiscuous mode [ 117.686709][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 117.733381][ T5085] loop2: detected capacity change from 0 to 2048 [ 117.880735][ T5085] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.911068][ T5085] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.057406][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 118.070685][ T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 118.107324][ T3312] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 118.132951][ T23] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 118.337265][ T23] usb 1-1: New USB device found, idVendor=067b, idProduct=23c3, bcdDevice=18.a2 [ 118.441070][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.485071][ T23] usb 1-1: Product: syz [ 118.517074][ T23] usb 1-1: Manufacturer: syz [ 118.532082][ T3312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 118.546120][ T23] usb 1-1: SerialNumber: syz [ 118.568574][ T3312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 118.579292][ T3312] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 118.589184][ T3312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.603932][ T3312] usb 2-1: config 0 descriptor?? [ 118.604364][ T23] usb 1-1: config 0 descriptor?? [ 118.976762][ T3312] ath6kl: Failed to submit usb control message: -71 [ 118.985021][ T5071] device team_slave_0 left promiscuous mode [ 118.991006][ T5071] device team_slave_1 left promiscuous mode [ 118.996933][ T5071] device netdevsim0 left promiscuous mode [ 119.004311][ T23] usb 1-1: can't set config #0, error -71 [ 119.009582][ T3312] ath6kl: unable to send the bmi data to the device: -71 [ 119.017313][ T3312] ath6kl: Unable to send get target info: -71 [ 119.033652][ T23] usb 1-1: USB disconnect, device number 7 [ 119.066957][ T3312] ath6kl: Failed to init ath6kl core: -71 [ 119.099270][ T3312] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 119.157612][ T3312] usb 2-1: USB disconnect, device number 8 [ 120.145828][ T5142] netlink: 104 bytes leftover after parsing attributes in process `syz.4.455'. [ 120.381696][ T3617] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 121.247889][ T3617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.260015][ T3617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.297904][ T3617] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 121.307943][ T3617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.324337][ T3617] usb 2-1: config 0 descriptor?? [ 121.420893][ T5154] device team_slave_0 entered promiscuous mode [ 121.427131][ T5154] device team_slave_1 entered promiscuous mode [ 122.234189][ T3617] hid-steam 0003:28DE:1142.0001: : USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 122.337870][ T3617] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 123.319536][ T3617] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 123.324329][ T5178] netlink: 44 bytes leftover after parsing attributes in process `syz.4.469'. [ 123.378373][ T3617] usb 2-1: USB disconnect, device number 9 [ 123.419325][ T5179] loop2: detected capacity change from 0 to 2048 [ 123.435662][ T3617] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 123.567278][ T5179] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.588081][ T3312] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 123.644790][ T5179] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 123.986734][ T3312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 124.023324][ T3312] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 124.110493][ T3312] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 124.379046][ T5154] device team_slave_0 left promiscuous mode [ 124.385168][ T5154] device team_slave_1 left promiscuous mode [ 124.407143][ T3312] usb 4-1: New USB device found, idVendor=067b, idProduct=23c3, bcdDevice=18.a2 [ 124.426669][ T3312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.485308][ T3312] usb 4-1: Product: syz [ 124.492907][ T3312] usb 4-1: Manufacturer: syz [ 124.533165][ T3312] usb 4-1: config 0 descriptor?? [ 124.568214][ T3312] usb 4-1: can't set config #0, error -71 [ 124.589535][ T3312] usb 4-1: USB disconnect, device number 10 [ 125.833234][ T5214] netlink: 32 bytes leftover after parsing attributes in process `syz.3.480'. [ 126.865033][ T5227] loop2: detected capacity change from 0 to 2048 [ 126.938855][ T5227] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.969213][ T5227] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.996873][ T3312] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 127.158503][ T5238] device team_slave_0 entered promiscuous mode [ 127.164795][ T5238] device team_slave_1 entered promiscuous mode [ 127.456846][ T3312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.473654][ T3312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.498376][ T3312] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 127.957727][ T3312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.026646][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 128.053363][ T3312] usb 2-1: config 0 descriptor?? [ 128.396955][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 128.427210][ T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 128.480450][ T23] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 129.345404][ T3312] hid-steam 0003:28DE:1142.0003: : USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 129.395938][ T3312] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 129.536870][ T23] usb 3-1: New USB device found, idVendor=067b, idProduct=23c3, bcdDevice=18.a2 [ 129.549684][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.552055][ T3312] hid-steam 0003:28DE:1142.0003: Steam wireless receiver connected [ 129.571109][ T23] usb 3-1: Product: syz [ 129.575298][ T23] usb 3-1: Manufacturer: syz [ 129.606079][ T23] usb 3-1: SerialNumber: syz [ 129.612654][ T3312] usb 2-1: USB disconnect, device number 10 [ 129.623683][ T23] usb 3-1: config 0 descriptor?? [ 129.656001][ T5276] netlink: 104 bytes leftover after parsing attributes in process `syz.0.502'. [ 129.687062][ T3312] hid-steam 0003:28DE:1142.0003: Steam wireless receiver disconnected [ 129.742231][ T23] pl2303 3-1:0.0: required endpoints missing [ 130.002623][ T5238] netlink: 'syz.2.488': attribute type 10 has an invalid length. [ 130.390302][ T5238] device team_slave_0 left promiscuous mode [ 130.406714][ T5238] device team_slave_1 left promiscuous mode [ 130.608098][ T5238] device team_slave_0 entered promiscuous mode [ 130.614333][ T5238] device team_slave_1 entered promiscuous mode [ 130.666175][ T5238] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.712614][ T5238] bond0: (slave team0): Enslaving as an active interface with an up link [ 130.801014][ T23] usb 3-1: USB disconnect, device number 10 [ 130.830854][ T5236] device team_slave_0 left promiscuous mode [ 130.836869][ T5236] device team_slave_1 left promiscuous mode [ 131.857807][ T21] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 132.095177][ T5331] loop1: detected capacity change from 0 to 2048 [ 132.156717][ T3620] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 132.221361][ T5331] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.436713][ T3620] usb 5-1: Using ep0 maxpacket: 8 [ 132.436884][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.477638][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.501171][ T21] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 132.522569][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.550696][ T21] usb 4-1: config 0 descriptor?? [ 132.591973][ T3620] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 132.611390][ T3620] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.662880][ T3620] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.693276][ T3620] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.731535][ T3620] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.772642][ T3620] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.792699][ T3620] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.857583][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.864142][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.044558][ T21] hid-steam 0003:28DE:1142.0005: : USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 133.060620][ T21] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 133.082947][ T3620] usb 5-1: usb_control_msg returned -32 [ 133.089430][ T3620] usbtmc 5-1:16.0: can't read capabilities [ 133.136678][ T21] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected [ 133.200365][ T5375] device team_slave_0 entered promiscuous mode [ 133.206628][ T5375] device team_slave_1 entered promiscuous mode [ 133.212848][ T5375] device netdevsim0 entered promiscuous mode [ 133.346927][ T3618] usb 4-1: USB disconnect, device number 11 [ 133.372583][ T3618] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected [ 133.466872][ T5380] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 133.478303][ T3312] usb 5-1: USB disconnect, device number 8 [ 133.592889][ T5384] loop2: detected capacity change from 0 to 2048 [ 133.601743][ T3620] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 133.694365][ T5384] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.046892][ T3620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 134.068343][ T3620] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 134.100990][ T3620] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 134.316941][ T3620] usb 2-1: New USB device found, idVendor=067b, idProduct=23c3, bcdDevice=18.a2 [ 134.335309][ T3620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.369080][ T5411] netlink: 60 bytes leftover after parsing attributes in process `syz.3.549'. [ 134.382345][ T3620] usb 2-1: Product: syz [ 134.393914][ T3620] usb 2-1: Manufacturer: syz [ 134.404227][ T3620] usb 2-1: SerialNumber: syz [ 134.425555][ T5411] unsupported nlmsg_type 40 [ 134.436195][ T3620] usb 2-1: config 0 descriptor?? [ 134.498077][ T3620] pl2303 2-1:0.0: required endpoints missing [ 134.574896][ T5413] loop2: detected capacity change from 0 to 2048 [ 134.683702][ T5413] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.733892][ T5375] netlink: 'syz.1.537': attribute type 10 has an invalid length. [ 134.789348][ T5375] device team_slave_0 left promiscuous mode [ 134.798237][ T5375] device team_slave_1 left promiscuous mode [ 134.805853][ T5375] device netdevsim0 left promiscuous mode [ 134.986088][ T5375] device team_slave_0 entered promiscuous mode [ 134.992329][ T5375] device team_slave_1 entered promiscuous mode [ 134.996624][ T23] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 134.998575][ T5375] device netdevsim0 entered promiscuous mode [ 135.078973][ T5375] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.133613][ T5375] bond0: (slave team0): Enslaving as an active interface with an up link [ 137.150419][ T5432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.148503][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.183675][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.201303][ T23] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 139.213335][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.239281][ T23] usb 4-1: config 0 descriptor?? [ 139.252400][ T21] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 139.266753][ T23] usb 4-1: can't set config #0, error -71 [ 139.282069][ T21] Bluetooth: hci2: Injecting HCI hardware error event [ 139.299596][ T23] usb 4-1: USB disconnect, device number 12 [ 139.314180][ T3590] Bluetooth: hci2: hardware error 0x00 [ 139.364728][ T3618] usb 2-1: USB disconnect, device number 11 [ 140.163557][ T5372] device team_slave_0 left promiscuous mode [ 140.169648][ T5372] device team_slave_1 left promiscuous mode [ 140.175572][ T5372] device netdevsim0 left promiscuous mode [ 140.187609][ T5423] block nbd2: shutting down sockets [ 140.503683][ T26] audit: type=1800 audit(1722510000.235:7): pid=5456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.567" name="/" dev="sockfs" ino=40079 res=0 errno=0 [ 140.673811][ T5475] netlink: 48 bytes leftover after parsing attributes in process `syz.3.573'. [ 141.036270][ T21] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 141.951101][ T5483] loop4: detected capacity change from 0 to 2048 [ 142.006785][ T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 142.050899][ T21] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 142.065895][ T5483] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.486796][ T21] usb 3-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice=fc.a0 [ 142.560331][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.632781][ T21] usb 3-1: Product: syz [ 142.638333][ T21] usb 3-1: Manufacturer: syz [ 142.836793][ T21] usb 3-1: SerialNumber: syz [ 142.844554][ T21] usb 3-1: config 0 descriptor?? [ 142.895749][ T21] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (eb1a:e303, interface 0, class 0) [ 142.895828][ T21] em28xx 3-1:0.0: Video interface 0 found: bulk [ 143.426856][ T21] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 143.512853][ T5503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.487376][ T21] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 144.562088][ T21] em28xx 3-1:0.0: board has no eeprom [ 144.604858][ T5502] block nbd4: shutting down sockets [ 144.686667][ T21] em28xx 3-1:0.0: Identified as Kaiomy TVnPC U2 (card=63) [ 144.694028][ T21] em28xx 3-1:0.0: analog set to bulk mode. [ 144.726945][ T21] usb 3-1: USB disconnect, device number 11 [ 144.741079][ T21] em28xx 3-1:0.0: Disconnecting em28xx [ 144.768391][ T3653] em28xx 3-1:0.0: Registering V4L2 extension [ 144.779234][ T4816] Bluetooth: hci4: command 0x0409 tx timeout [ 145.780272][ T3653] i2c i2c-1: Invalid 7-bit I2C address 0x00 [ 146.279187][ T5539] loop2: detected capacity change from 0 to 2048 [ 146.413088][ T5546] netlink: 48 bytes leftover after parsing attributes in process `syz.4.591'. [ 146.790270][ T3653] tuner: 1-0061: Tuner -1 found with type(s) Radio TV. [ 146.822375][ T3653] failing symbol_get of non-GPLONLY symbol xc2028_attach. [ 146.939599][ T5539] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.997764][ T3653] failing symbol_get of non-GPLONLY symbol xc2028_attach. [ 147.004927][ T3653] DVB: Unable to find symbol xc2028_attach() [ 147.042035][ T3653] tuner: 1-0061: Tuner has no way to set tv freq [ 147.048640][ T3653] em28xx 3-1:0.0: Config register raw data: 0xffffffed [ 147.055601][ T3653] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 147.065794][ T3653] em28xx 3-1:0.0: No AC97 audio processor [ 147.072270][ T3653] tuner: 1-0061: Tuner has no way to set tv freq [ 147.113391][ T3653] em28xx 3-1:0.0: Registered radio device as radio32 [ 147.130921][ T3653] usb 3-1: Decoder not found [ 147.155931][ T3653] em28xx 3-1:0.0: failed to create media graph [ 147.173598][ T3653] em28xx 3-1:0.0: V4L2 device radio32 deregistered [ 147.210932][ T3653] em28xx 3-1:0.0: V4L2 device video71 deregistered [ 148.054248][ T5557] ================================================================== [ 148.062789][ T5557] BUG: KASAN: use-after-free in v4l2_fh_open+0xc7/0x430 [ 148.069760][ T5557] Read of size 8 at addr ffff8880780818d0 by task v4l_id/5557 [ 148.077211][ T5557] [ 148.079543][ T5557] CPU: 1 PID: 5557 Comm: v4l_id Not tainted 5.15.164-syzkaller #0 [ 148.087574][ T5557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 148.097728][ T5557] Call Trace: [ 148.101001][ T5557] [ 148.103912][ T5557] dump_stack_lvl+0x1e3/0x2d0 [ 148.108665][ T5557] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 148.114288][ T5557] ? _printk+0xd1/0x120 [ 148.118435][ T5557] ? __wake_up_klogd+0xcc/0x100 [ 148.123280][ T5557] ? panic+0x860/0x860 [ 148.127328][ T5557] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 148.133123][ T5557] print_address_description+0x63/0x3b0 [ 148.138649][ T5557] ? v4l2_fh_open+0xc7/0x430 [ 148.143398][ T5557] kasan_report+0x16b/0x1c0 [ 148.147900][ T5557] ? v4l2_fh_open+0xc7/0x430 [ 148.152501][ T5557] v4l2_fh_open+0xc7/0x430 [ 148.156898][ T5557] em28xx_v4l2_open+0x15d/0xa10 [ 148.162102][ T5557] v4l2_open+0x228/0x360 [ 148.166329][ T5557] chrdev_open+0x54a/0x630 [ 148.170727][ T5557] ? cd_forget+0x160/0x160 [ 148.175209][ T5557] ? do_raw_spin_unlock+0x137/0x8b0 [ 148.180473][ T5557] ? fsnotify_perm+0x47b/0x590 [ 148.185390][ T5557] ? cd_forget+0x160/0x160 [ 148.190216][ T5557] do_dentry_open+0x807/0xfb0 [ 148.194964][ T5557] path_openat+0x2705/0x2f20 [ 148.199632][ T5557] ? do_filp_open+0x460/0x460 [ 148.204297][ T5557] do_filp_open+0x21c/0x460 [ 148.208777][ T5557] ? vfs_tmpfile+0x2e0/0x2e0 [ 148.213440][ T5557] ? _raw_spin_unlock+0x24/0x40 [ 148.218441][ T5557] ? alloc_fd+0x598/0x630 [ 148.222846][ T5557] do_sys_openat2+0x13b/0x4f0 [ 148.227591][ T5557] ? do_sys_open+0x220/0x220 [ 148.232162][ T5557] __x64_sys_openat+0x243/0x290 [ 148.237074][ T5557] ? __ia32_sys_open+0x270/0x270 [ 148.241992][ T5557] ? syscall_enter_from_user_mode+0x2e/0x240 [ 148.247951][ T5557] ? lockdep_hardirqs_on+0x94/0x130 [ 148.253197][ T5557] ? syscall_enter_from_user_mode+0x2e/0x240 [ 148.259181][ T5557] do_syscall_64+0x3b/0xb0 [ 148.263634][ T5557] ? clear_bhb_loop+0x15/0x70 [ 148.268304][ T5557] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.274383][ T5557] RIP: 0033:0x7f63344c29a4 [ 148.278881][ T5557] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 148.298471][ T5557] RSP: 002b:00007ffed08f0cd0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 148.307048][ T5557] RAX: ffffffffffffffda RBX: 00007ffed08f0ee8 RCX: 00007f63344c29a4 [ 148.315013][ T5557] RDX: 0000000000000000 RSI: 00007ffed08f2f20 RDI: 00000000ffffff9c [ 148.323067][ T5557] RBP: 00007ffed08f2f20 R08: 0000000000000000 R09: 0000000000000000 [ 148.331023][ T5557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.339002][ T5557] R13: 00007ffed08f0f00 R14: 000055ec1cc75670 R15: 00007f633490ba80 [ 148.347067][ T5557] [ 148.350080][ T5557] [ 148.352409][ T5557] The buggy address belongs to the page: [ 148.358139][ T5557] page:ffffea0001e02040 refcount:0 mapcount:0 mapping:0000000000000000 index:0x100 pfn:0x78081 [ 148.368463][ T5557] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 148.375586][ T5557] raw: 00fff00000000000 0000000000000000 ffffffff01e00201 0000000000000000 [ 148.384166][ T5557] raw: 0000000000000100 0000000000000000 00000000ffffffff 0000000000000000 [ 148.392721][ T5557] page dumped because: kasan: bad access detected [ 148.399112][ T5557] page_owner tracks the page as freed [ 148.404539][ T5557] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_COMP|__GFP_ZERO), pid 3653, ts 144776281589, free_ts 148052543955 [ 148.420222][ T5557] get_page_from_freelist+0x322a/0x33c0 [ 148.425767][ T5557] __alloc_pages+0x272/0x700 [ 148.430330][ T5557] kmalloc_order+0x41/0x150 [ 148.434808][ T5557] kmalloc_order_trace+0x15/0xe0 [ 148.439722][ T5557] em28xx_v4l2_init+0xe2/0x2d50 [ 148.444648][ T5557] em28xx_init_extension+0x11b/0x1c0 [ 148.449925][ T5557] process_one_work+0x8a1/0x10c0 [ 148.454845][ T5557] worker_thread+0xd83/0x1280 [ 148.459505][ T5557] kthread+0x3f6/0x4f0 [ 148.463570][ T5557] ret_from_fork+0x1f/0x30 [ 148.467969][ T5557] page last free stack trace: [ 148.472644][ T5557] free_unref_page_prepare+0xc34/0xcf0 [ 148.478094][ T5557] free_unref_page+0x95/0x2d0 [ 148.482745][ T5557] free_nonslab_page+0xe4/0x150 [ 148.487589][ T5557] kfree+0x1cf/0x270 [ 148.491459][ T5557] em28xx_v4l2_init+0x15d7/0x2d50 [ 148.496548][ T5557] em28xx_init_extension+0x11b/0x1c0 [ 148.501927][ T5557] process_one_work+0x8a1/0x10c0 [ 148.506856][ T5557] worker_thread+0xd83/0x1280 [ 148.511526][ T5557] kthread+0x3f6/0x4f0 [ 148.515573][ T5557] ret_from_fork+0x1f/0x30 [ 148.520009][ T5557] [ 148.522310][ T5557] Memory state around the buggy address: [ 148.527915][ T5557] ffff888078081780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 148.535953][ T5557] ffff888078081800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 148.544135][ T5557] >ffff888078081880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 148.552194][ T5557] ^ [ 148.558970][ T5557] ffff888078081900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 148.567015][ T5557] ffff888078081980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 148.575051][ T5557] ================================================================== [ 148.583346][ T5557] Disabling lock debugging due to kernel taint [ 148.589535][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.623043][ T3653] em28xx 3-1:0.0: Registering input extension [ 148.635238][ T21] em28xx 3-1:0.0: Closing input extension [ 149.487233][ T5557] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 149.494451][ T5557] CPU: 0 PID: 5557 Comm: v4l_id Tainted: G B 5.15.164-syzkaller #0 [ 149.503734][ T5557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 149.513794][ T5557] Call Trace: [ 149.517069][ T5557] [ 149.519992][ T5557] dump_stack_lvl+0x1e3/0x2d0 [ 149.524667][ T5557] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 149.530293][ T5557] ? panic+0x860/0x860 [ 149.534358][ T5557] ? rcu_is_watching+0x11/0xa0 [ 149.539218][ T5557] ? preempt_schedule_common+0xa6/0xd0 [ 149.544679][ T5557] panic+0x318/0x860 [ 149.548573][ T5557] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 149.554811][ T5557] ? check_panic_on_warn+0x1d/0xa0 [ 149.559922][ T5557] ? fb_is_primary_device+0xd0/0xd0 [ 149.565464][ T5557] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 149.571446][ T5557] ? _raw_spin_unlock+0x40/0x40 [ 149.576295][ T5557] check_panic_on_warn+0x7e/0xa0 [ 149.581317][ T5557] ? v4l2_fh_open+0xc7/0x430 [ 149.586002][ T5557] end_report+0x6d/0xf0 [ 149.590242][ T5557] kasan_report+0x18e/0x1c0 [ 149.594739][ T5557] ? v4l2_fh_open+0xc7/0x430 [ 149.599333][ T5557] v4l2_fh_open+0xc7/0x430 [ 149.603763][ T5557] em28xx_v4l2_open+0x15d/0xa10 [ 149.608619][ T5557] v4l2_open+0x228/0x360 [ 149.612858][ T5557] chrdev_open+0x54a/0x630 [ 149.617270][ T5557] ? cd_forget+0x160/0x160 [ 149.621677][ T5557] ? do_raw_spin_unlock+0x137/0x8b0 [ 149.626869][ T5557] ? fsnotify_perm+0x47b/0x590 [ 149.631629][ T5557] ? cd_forget+0x160/0x160 [ 149.636038][ T5557] do_dentry_open+0x807/0xfb0 [ 149.640712][ T5557] path_openat+0x2705/0x2f20 [ 149.645321][ T5557] ? do_filp_open+0x460/0x460 [ 149.650013][ T5557] do_filp_open+0x21c/0x460 [ 149.654522][ T5557] ? vfs_tmpfile+0x2e0/0x2e0 [ 149.659118][ T5557] ? _raw_spin_unlock+0x24/0x40 [ 149.664056][ T5557] ? alloc_fd+0x598/0x630 [ 149.668384][ T5557] do_sys_openat2+0x13b/0x4f0 [ 149.673146][ T5557] ? do_sys_open+0x220/0x220 [ 149.677825][ T5557] __x64_sys_openat+0x243/0x290 [ 149.682769][ T5557] ? __ia32_sys_open+0x270/0x270 [ 149.687743][ T5557] ? syscall_enter_from_user_mode+0x2e/0x240 [ 149.693811][ T5557] ? lockdep_hardirqs_on+0x94/0x130 [ 149.699366][ T5557] ? syscall_enter_from_user_mode+0x2e/0x240 [ 149.705343][ T5557] do_syscall_64+0x3b/0xb0 [ 149.709743][ T5557] ? clear_bhb_loop+0x15/0x70 [ 149.714489][ T5557] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 149.720356][ T5557] RIP: 0033:0x7f63344c29a4 [ 149.724817][ T5557] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 149.745114][ T5557] RSP: 002b:00007ffed08f0cd0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 149.753514][ T5557] RAX: ffffffffffffffda RBX: 00007ffed08f0ee8 RCX: 00007f63344c29a4 [ 149.761473][ T5557] RDX: 0000000000000000 RSI: 00007ffed08f2f20 RDI: 00000000ffffff9c [ 149.769432][ T5557] RBP: 00007ffed08f2f20 R08: 0000000000000000 R09: 0000000000000000 [ 149.777492][ T5557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.785466][ T5557] R13: 00007ffed08f0f00 R14: 000055ec1cc75670 R15: 00007f633490ba80 [ 149.793435][ T5557] [ 149.796646][ T5557] Kernel Offset: disabled [ 149.801059][ T5557] Rebooting in 86400 seconds..