last executing test programs: 14.153780609s ago: executing program 2 (id=3295): r0 = creat(0x0, 0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x1000, 0x1, 0x1}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r2, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvfrom(r0, &(0x7f0000000280)=""/236, 0xec, 0x0, 0x0, 0x0) 13.38165596s ago: executing program 2 (id=3297): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffff980c0464, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6c, 0x4}}, 0x50) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$tcp_congestion(0xffffffffffffffff, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(0xffffffffffffffff, r0) 12.393727285s ago: executing program 2 (id=3307): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12.344143376s ago: executing program 2 (id=3309): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4180a0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba2100b066eeb9e00a00000f32646467660f01000000000000007124c4a179d64a0067362e0f"], 0x56}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.141185189s ago: executing program 2 (id=3311): r0 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000001080)=ANY=[@ANYBLOB="2442c129f8d705a80f4e3ce68a149634685f17362cb2e81861a8964abcb5fe9656a296a0d6eea389e3853d381f51f2de4553011dbbfee7ab2fbdb1100f399af8df12d1cc207f939773a1571ddd4db2ebf5508ede2bc81e3fa906590d6c8907"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000001040)='jbd2_checkpoint_stats\x00', r1, 0x0, 0x1}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000"], 0x310) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x10, @mcast1}}, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x108) read(0xffffffffffffffff, &(0x7f0000000040)=""/148, 0xffffff96) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$kcm(0x10, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r3, 0x3b80, &(0x7f0000000080)={0x8, r4}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000300)=0x4f) 11.532126718s ago: executing program 2 (id=3312): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) listen(r0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvfrom$inet6(r0, &(0x7f0000000180)=""/67, 0x43, 0x142, 0x0, 0x0) 11.236404412s ago: executing program 32 (id=3312): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) listen(r0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvfrom$inet6(r0, &(0x7f0000000180)=""/67, 0x43, 0x142, 0x0, 0x0) 4.801650598s ago: executing program 3 (id=3336): r0 = creat(0x0, 0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x1000, 0x1, 0x1}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r2, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvfrom(r0, &(0x7f0000000280)=""/236, 0xec, 0x0, 0x0, 0x0) 3.969087301s ago: executing program 3 (id=3338): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000000bc0)={0x2020}, 0x2020) r2 = io_uring_setup(0x5ae4, &(0x7f0000005840)) r3 = epoll_create1(0x0) r4 = dup3(r3, r2, 0x0) epoll_pwait2(r4, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffffff3}]}}]}, 0x38}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x21, &(0x7f0000000440), 0x1) 3.189022592s ago: executing program 1 (id=3340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000010010000010000008c0fbd20"], 0x10}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x7c, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x3c, 0x6, "efca0000000000f36aa6e891bfd573ce45d3752b53410c9643e7be0016deee8027c75649e9234b0e237b1949d874e8df9fdeb0b0fdf29e7f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='rxrpc_local\x00', 0xffffffffffffffff, 0x0, 0x5}, 0xfffffe2e) kexec_load(0x0, 0x0, 0x0, 0x320000) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[0x0]}) openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) 3.146920213s ago: executing program 3 (id=3341): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='tlb_flush\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) 1.801942953s ago: executing program 1 (id=3344): sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1090, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 1.009363865s ago: executing program 1 (id=3346): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r0) 863.370277ms ago: executing program 0 (id=3348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000801000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 752.244489ms ago: executing program 0 (id=3349): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf4240}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000001780)="000000000000000002b2138373ef", 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 694.859309ms ago: executing program 1 (id=3350): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 581.862762ms ago: executing program 0 (id=3351): sendto$inet6(0xffffffffffffffff, &(0x7f0000000480)="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", 0x101, 0x4000010, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 581.538862ms ago: executing program 1 (id=3352): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 511.165712ms ago: executing program 0 (id=3353): sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1090, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 479.052533ms ago: executing program 1 (id=3354): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1, 0xd}, 0x1c) 293.618586ms ago: executing program 3 (id=3355): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 219.236727ms ago: executing program 0 (id=3356): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 203.910137ms ago: executing program 3 (id=3357): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000001500)='mm_page_alloc\x00', r0}, 0x10) syz_clone(0xa49a4400, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x10) 85.902258ms ago: executing program 0 (id=3358): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 0s ago: executing program 3 (id=3359): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): : Adding to iommu group 0 [ 1207.005732][T12849] sp0: Synchronizing with TNC [ 1212.020644][T12864] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1212.792339][T12865] orangefs_mount: mount request failed with -4 [ 1213.445493][T11182] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1214.215406][T11182] usb 2-1: Using ep0 maxpacket: 16 [ 1214.264257][T11182] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.295176][T11182] usb 2-1: config 0 has no interfaces? [ 1214.590572][T11182] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1214.763937][T11182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.248331][T11182] usb 2-1: Product: syz [ 1215.252587][T11182] usb 2-1: Manufacturer: syz [ 1215.257660][T11182] usb 2-1: SerialNumber: syz [ 1215.291609][T11182] usb 2-1: config 0 descriptor?? [ 1215.523503][T11182] usb 2-1: USB disconnect, device number 9 [ 1218.287623][T12900] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1218.391112][T12900] sp0: Synchronizing with TNC [ 1223.380740][ T28] audit: type=1326 audit(1752911411.080:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12924 comm="syz.1.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845c38e9a9 code=0x7ffc0000 [ 1223.491847][ T28] audit: type=1326 audit(1752911411.120:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12924 comm="syz.1.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845c38e9a9 code=0x7ffc0000 [ 1223.555495][ T28] audit: type=1326 audit(1752911411.120:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12924 comm="syz.1.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f845c38e9a9 code=0x7ffc0000 [ 1223.577739][ C1] vkms_vblank_simulate: vblank timer overrun [ 1223.592869][ T28] audit: type=1326 audit(1752911411.120:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12924 comm="syz.1.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845c38e9a9 code=0x7ffc0000 [ 1223.955203][ T28] audit: type=1326 audit(1752911411.120:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12924 comm="syz.1.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845c38e9a9 code=0x7ffc0000 [ 1224.139520][ T28] audit: type=1326 audit(1752911411.130:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12924 comm="syz.1.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f845c38e9a9 code=0x7ffc0000 [ 1224.192560][T12933] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1224.518914][ T28] audit: type=1326 audit(1752911411.130:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12924 comm="syz.1.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845c38e9a9 code=0x7ffc0000 [ 1224.541179][ C1] vkms_vblank_simulate: vblank timer overrun [ 1224.621028][ T28] audit: type=1326 audit(1752911411.130:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12924 comm="syz.1.1883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845c38e9a9 code=0x7ffc0000 [ 1228.011109][T12958] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1228.066234][T12958] sp0: Synchronizing with TNC [ 1236.301392][T13000] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1236.523550][T13000] sp0: Synchronizing with TNC [ 1239.059168][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.253341][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.419403][T13019] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1242.985842][T13014] orangefs_mount: mount request failed with -4 [ 1245.583389][T13053] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1246.078024][T13054] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1246.114727][T13054] sp0: Synchronizing with TNC [ 1250.592260][T13077] syz.0.1922 uses obsolete (PF_INET,SOCK_PACKET) [ 1251.371276][T13072] delete_channel: no stack [ 1253.151819][T13094] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1253.239534][T13094] sp0: Synchronizing with TNC [ 1256.306746][T13100] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1256.989895][T13100] orangefs_mount: mount request failed with -4 [ 1262.710446][T13126] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1262.717452][T13126] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1262.756789][T13126] vhci_hcd vhci_hcd.0: Device attached [ 1262.812589][T13129] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 1262.819280][T13129] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1262.896000][T13126] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1262.928682][T13129] vhci_hcd vhci_hcd.0: Device attached [ 1262.985566][ T27] vhci_hcd: vhci_device speed not set [ 1263.053509][T13132] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(17) [ 1263.060184][T13132] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1263.085386][ T27] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 1263.105405][T13132] vhci_hcd vhci_hcd.0: Device attached [ 1263.183568][T13126] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(13) [ 1263.190260][T13126] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1263.205587][T13126] vhci_hcd vhci_hcd.0: Device attached [ 1263.240697][T13129] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(21) [ 1263.247379][T13129] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1263.316987][T13126] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1263.358059][T13126] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1263.400593][T13129] vhci_hcd vhci_hcd.0: Device attached [ 1263.475162][T13126] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(26) [ 1263.481855][T13126] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1263.545710][T13126] vhci_hcd vhci_hcd.0: Device attached [ 1263.597136][T13135] vhci_hcd: connection closed [ 1263.603354][T13127] vhci_hcd: connection reset by peer [ 1263.614200][T13130] vhci_hcd: connection closed [ 1263.951190][T13137] vhci_hcd: connection closed [ 1263.959003][T13133] vhci_hcd: connection closed [ 1263.963925][ T48] vhci_hcd: stop threads [ 1264.188727][ T48] vhci_hcd: release socket [ 1264.227050][ T48] vhci_hcd: disconnect device [ 1264.244623][T13141] vhci_hcd: connection closed [ 1264.246103][ T48] vhci_hcd: stop threads [ 1264.305332][ T48] vhci_hcd: release socket [ 1264.312484][ T48] vhci_hcd: disconnect device [ 1264.365524][ T48] vhci_hcd: stop threads [ 1264.369855][ T48] vhci_hcd: release socket [ 1264.425253][ T48] vhci_hcd: disconnect device [ 1264.432519][ T48] vhci_hcd: stop threads [ 1264.437101][ T48] vhci_hcd: release socket [ 1264.441955][ T48] vhci_hcd: disconnect device [ 1264.449578][ T48] vhci_hcd: stop threads [ 1264.454967][ T48] vhci_hcd: release socket [ 1264.469048][ T48] vhci_hcd: disconnect device [ 1264.474205][ T48] vhci_hcd: stop threads [ 1264.486285][ T48] vhci_hcd: release socket [ 1264.492832][ T48] vhci_hcd: disconnect device [ 1265.550960][T13150] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1265.897095][T13152] orangefs_mount: mount request failed with -4 [ 1266.000215][T13157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1939'. [ 1268.437362][ T27] vhci_hcd: vhci_device speed not set [ 1268.443372][ T5834] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1268.815433][ T5834] usb 1-1: Using ep0 maxpacket: 16 [ 1269.089563][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.100312][ T5834] usb 1-1: config 0 has no interfaces? [ 1269.118976][ T5834] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1269.165937][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.174219][ T5834] usb 1-1: Product: syz [ 1269.180081][ T5834] usb 1-1: Manufacturer: syz [ 1269.184910][ T5834] usb 1-1: SerialNumber: syz [ 1269.205913][ T5834] usb 1-1: config 0 descriptor?? [ 1269.427192][ T5834] usb 1-1: USB disconnect, device number 15 [ 1270.587046][T11182] usb usb34-port1: attempt power cycle [ 1272.579737][T11182] usb usb34-port1: unable to enumerate USB device [ 1276.856822][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1276.865889][T13241] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1278.081410][T13250] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1278.115153][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 1278.667964][ T23] usb 4-1: unable to read config index 0 descriptor/all [ 1278.676925][ T23] usb 4-1: can't read configurations, error -71 [ 1278.931215][T13250] orangefs_mount: mount request failed with -4 [ 1295.215374][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 1297.364840][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 1300.507903][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.514340][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1312.095337][ T5834] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1312.425197][ T5834] usb 1-1: Using ep0 maxpacket: 16 [ 1312.445396][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.456961][ T5834] usb 1-1: config 0 has no interfaces? [ 1313.208090][ T5834] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1313.225143][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.255091][ T5834] usb 1-1: Product: syz [ 1313.259748][ T5834] usb 1-1: Manufacturer: syz [ 1313.264393][ T5834] usb 1-1: SerialNumber: syz [ 1313.283013][ T5834] usb 1-1: config 0 descriptor?? [ 1313.326552][T13462] binder: BINDER_SET_CONTEXT_MGR already set [ 1313.346033][T13462] binder: 13461:13462 ioctl 4018620d 200000000040 returned -16 [ 1313.866361][ T787] usb 1-1: USB disconnect, device number 16 [ 1314.591127][T13482] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1317.607130][T13510] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1318.089944][T13511] orangefs_mount: mount request failed with -4 [ 1320.783897][T13531] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1324.467381][T13555] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1324.538630][T13555] sp0: Synchronizing with TNC [ 1334.715350][ T23] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1335.203042][ T23] usb 4-1: not running at top speed; connect to a high speed hub [ 1335.382160][ T23] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1335.397048][ T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1335.406330][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.414412][ T23] usb 4-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1335.583778][ T23] usb 4-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1335.695744][ T23] usb 4-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1335.925727][ T23] usb 4-1: can't set config #1, error -71 [ 1336.097112][ T23] usb 4-1: USB disconnect, device number 12 [ 1344.230726][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2075'. [ 1344.245300][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2075'. [ 1354.036236][T13742] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2087'. [ 1354.487849][T13745] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1358.294477][T13788] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1362.018426][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.027081][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.186692][T13814] overlayfs: failed to resolve './file1': -2 [ 1362.567141][T13814] comedi comedi0: Minor 14 could not be opened [ 1363.223808][T13819] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1364.036536][T13822] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1364.036536][T13822] program syz.3.2105 not setting count and/or reply_len properly [ 1367.107043][T13846] lo: entered promiscuous mode [ 1367.399605][T13846] tunl0: entered promiscuous mode [ 1367.440869][T13846] gre0: entered promiscuous mode [ 1368.475590][T13846] gretap0: entered promiscuous mode [ 1368.502107][T13846] erspan0: entered promiscuous mode [ 1368.517879][T13846] ip_vti0: entered promiscuous mode [ 1368.528247][T13846] ip6_vti0: entered promiscuous mode [ 1368.534461][T13846] sit0: entered promiscuous mode [ 1369.158518][T13846] ip6tnl0: entered promiscuous mode [ 1369.414942][T13846] ip6gre0: entered promiscuous mode [ 1369.422950][T13846] syz_tun: entered promiscuous mode [ 1369.457606][T13846] ip6gretap0: entered promiscuous mode [ 1369.463910][T13846] bridge0: entered promiscuous mode [ 1369.495864][T13846] vcan0: entered promiscuous mode [ 1369.505894][T13846] bond0: entered promiscuous mode [ 1369.511118][T13846] bond_slave_0: entered promiscuous mode [ 1369.548745][T13846] bond_slave_1: entered promiscuous mode [ 1369.576891][T13846] team0: entered promiscuous mode [ 1369.582003][T13846] team_slave_0: entered promiscuous mode [ 1369.592949][T13846] team_slave_1: entered promiscuous mode [ 1369.606563][T13846] dummy0: entered promiscuous mode [ 1369.612606][T13846] nlmon0: entered promiscuous mode [ 1369.647329][T13846] caif0: entered promiscuous mode [ 1369.667425][T13846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1371.472977][T13874] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1373.262452][T13878] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1373.366634][T13878] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1373.428483][T13878] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1373.444869][T13878] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1373.456148][T13878] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1375.310150][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 1375.466506][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 1375.539706][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 1376.949370][T13924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2135'. [ 1378.144399][T12145] Bluetooth: hci2: command 0x0406 tx timeout [ 1378.155168][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 1378.757848][T13939] warning: `syz.2.2138' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1383.490450][T13974] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1392.024563][T14024] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1392.165488][T14026] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1396.217858][T14058] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1396.217858][T14058] program syz.3.2169 not setting count and/or reply_len properly [ 1397.702893][T14063] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1398.065842][T14064] orangefs_mount: mount request failed with -4 [ 1398.794705][T14069] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1402.495298][T14101] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1403.189021][T14102] orangefs_mount: mount request failed with -4 [ 1405.325537][T14138] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1405.425093][T11116] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1406.092679][T14138] orangefs_mount: mount request failed with -4 [ 1406.295249][T11116] usb 2-1: Using ep0 maxpacket: 16 [ 1406.316367][T11116] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1406.327683][T11116] usb 2-1: config 0 has no interfaces? [ 1406.345427][T11116] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1406.354688][T11116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.362899][T11116] usb 2-1: Product: syz [ 1406.385467][T11116] usb 2-1: Manufacturer: syz [ 1406.390444][T11116] usb 2-1: SerialNumber: syz [ 1406.422735][T11116] usb 2-1: config 0 descriptor?? [ 1406.641976][T11116] usb 2-1: USB disconnect, device number 10 [ 1406.913497][T14152] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1410.414405][T14186] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1411.180591][T14187] orangefs_mount: mount request failed with -4 [ 1412.037361][T14195] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1412.083075][T14195] sp0: Synchronizing with TNC [ 1414.585132][T14198] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1418.159247][T14228] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1418.718471][T14229] orangefs_mount: mount request failed with -4 [ 1419.516209][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2220'. [ 1419.526175][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2220'. [ 1419.710592][T14235] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1419.775111][T14235] sp0: Synchronizing with TNC [ 1423.453950][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.462733][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.196389][T14269] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1425.246212][T14269] sp0: Synchronizing with TNC [ 1426.761262][T14275] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 1432.844862][T14312] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1432.908843][T14312] sp0: Synchronizing with TNC [ 1432.925711][T13185] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1433.778769][T13185] usb 1-1: not running at top speed; connect to a high speed hub [ 1433.820018][T13185] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1434.034902][T13185] usb 1-1: string descriptor 0 read error: -71 [ 1434.068103][T13185] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1434.102725][T13185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.575521][T13185] usb 1-1: can't set config #1, error -71 [ 1434.594530][T13185] usb 1-1: USB disconnect, device number 17 [ 1434.622443][T14327] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1434.622443][T14327] program syz.2.2250 not setting count and/or reply_len properly [ 1436.818336][T14351] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1436.918008][T14350] sp0: Synchronizing with TNC [ 1437.664113][T14353] binder: BINDER_SET_CONTEXT_MGR already set [ 1437.674143][T14353] binder: 14352:14353 ioctl 4018620d 200000000040 returned -16 [ 1439.661711][ T8] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1439.778555][T14370] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1439.858123][ T8] usb 2-1: not running at top speed; connect to a high speed hub [ 1440.548685][T14371] orangefs_mount: mount request failed with -4 [ 1440.556296][ T8] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1440.569158][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1440.592309][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.603075][ T8] usb 2-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1440.641731][ T8] usb 2-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1440.675512][ T8] usb 2-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1440.864546][T14376] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1442.086088][T14385] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1442.138717][T14385] sp0: Synchronizing with TNC [ 1442.196751][T14376] orangefs_mount: mount request failed with -4 [ 1443.624490][ T8] usb 2-1: can't set config #1, error -71 [ 1443.657940][ T8] usb 2-1: USB disconnect, device number 11 [ 1445.814004][T14423] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1446.563267][T14424] orangefs_mount: mount request failed with -4 [ 1446.870819][T14427] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1446.933661][T14427] sp0: Synchronizing with TNC [ 1449.969037][T14434] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1451.335334][T11182] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1452.181195][T11182] usb 4-1: not running at top speed; connect to a high speed hub [ 1452.213486][T11182] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1452.227084][T11182] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1452.238412][T11182] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.282463][T11182] usb 4-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1452.332711][T11182] usb 4-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1452.369272][T11182] usb 4-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1452.634787][T14462] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1453.375424][T14463] orangefs_mount: mount request failed with -4 [ 1453.408617][T14459] overlayfs: failed to get inode (-116) [ 1453.425421][T14459] overlayfs: failed to get inode (-116) [ 1453.545672][T11182] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1453.566923][T11182] usb 4-1: USB disconnect, device number 13 [ 1453.582872][T11182] usblp0: removed [ 1454.290946][T14474] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1454.290946][T14474] program syz.0.2290 not setting count and/or reply_len properly [ 1454.843746][T14473] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1454.879886][T14475] sp0: Synchronizing with TNC [ 1461.647692][T14515] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1461.721994][T14515] sp0: Synchronizing with TNC [ 1463.615790][ T787] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 1463.640161][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1464.145166][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 1464.157987][ T787] usb 1-1: not running at top speed; connect to a high speed hub [ 1464.170540][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.181264][ T8] usb 3-1: config 0 has no interfaces? [ 1464.191396][ T787] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1464.199851][ T8] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1464.211296][ T787] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1464.220439][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.229190][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.244755][ T8] usb 3-1: Product: syz [ 1464.250188][ T8] usb 3-1: Manufacturer: syz [ 1464.254882][ T787] usb 1-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1464.290889][ T8] usb 3-1: SerialNumber: syz [ 1464.305195][ T787] usb 1-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1464.337335][ T8] usb 3-1: config 0 descriptor?? [ 1464.379434][ T787] usb 1-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1464.620308][T13185] usb 3-1: USB disconnect, device number 7 [ 1464.743334][ T787] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1464.789963][ T787] usb 1-1: USB disconnect, device number 18 [ 1464.811432][ T787] usblp0: removed [ 1467.943305][T14560] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1468.008088][T14560] sp0: Synchronizing with TNC [ 1470.928211][ T5790] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1471.775092][T13185] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1474.804853][T13185] usb 1-1: device descriptor read/all, error -71 [ 1476.516555][T14608] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1476.577916][T14608] sp0: Synchronizing with TNC [ 1477.215401][T12145] Bluetooth: hci3: command 0x0406 tx timeout [ 1478.266655][T14620] block device autoloading is deprecated and will be removed. [ 1478.951579][T14631] input: syz0 as /devices/virtual/input/input49 [ 1480.274710][T14644] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1481.174869][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1481.197890][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1481.501654][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1481.625993][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1481.634029][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1481.635319][T14644] Falling back ldisc for ptm1. [ 1481.642461][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1481.669144][ T3527] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.876229][ T3527] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.118743][ T3527] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.302091][ T3527] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.250871][T14640] chnl_net:caif_netlink_parms(): no params data found [ 1483.775337][ T5790] Bluetooth: hci1: command tx timeout [ 1484.098939][T14640] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.151666][T14689] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1484.819441][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.825895][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.940564][T14640] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.036051][T14689] Falling back ldisc for ptm1. [ 1485.182729][T14640] bridge_slave_0: entered allmulticast mode [ 1485.382904][T14640] bridge_slave_0: entered promiscuous mode [ 1485.617313][T14640] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.625434][T14640] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.633002][T14640] bridge_slave_1: entered allmulticast mode [ 1485.662812][T14640] bridge_slave_1: entered promiscuous mode [ 1485.860958][T14640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1485.870380][ T5790] Bluetooth: hci1: command tx timeout [ 1485.914904][T14640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1486.159457][T14640] team0: Port device team_slave_0 added [ 1486.170798][T14640] team0: Port device team_slave_1 added [ 1486.242801][T14640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1486.258178][T14640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1486.285479][T14640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1486.376898][T14640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1486.391700][T14640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1486.439755][T14640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1486.624280][T14640] hsr_slave_0: entered promiscuous mode [ 1486.631311][T14640] hsr_slave_1: entered promiscuous mode [ 1486.638068][T14640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1486.654413][T14640] Cannot create hsr debugfs directory [ 1486.960719][ T3527] hsr_slave_0: left promiscuous mode [ 1486.986727][ T3527] hsr_slave_1: left promiscuous mode [ 1487.009463][ T3527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1487.039503][ T3527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1487.076396][ T3527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1487.090991][ T3527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1487.106984][ T3527] bridge_slave_1: left allmulticast mode [ 1487.113106][ T3527] bridge_slave_1: left promiscuous mode [ 1487.122207][ T3527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.275109][ T3527] bridge_slave_0: left allmulticast mode [ 1487.288244][ T3527] bridge_slave_0: left promiscuous mode [ 1487.328513][ T3527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.397823][T14731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2354'. [ 1487.407386][T14731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2354'. [ 1487.932861][ T3527] veth1_macvtap: left promiscuous mode [ 1487.944097][ T3527] veth0_macvtap: left promiscuous mode [ 1487.945112][ T5790] Bluetooth: hci1: command tx timeout [ 1487.950533][ T3527] veth1_vlan: left promiscuous mode [ 1487.965369][ T3527] veth0_vlan: left promiscuous mode [ 1488.748216][ T3527] bond1 (unregistering): Released all slaves [ 1489.972054][ T3527] team0 (unregistering): Port device team_slave_1 removed [ 1490.015160][ T5790] Bluetooth: hci1: command tx timeout [ 1490.062090][ T3527] team0 (unregistering): Port device team_slave_0 removed [ 1490.132840][ T3527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1490.212130][ T3527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1490.797282][ T3527] bond0 (unregistering): Released all slaves [ 1490.893073][T14721] bridge_slave_0: left allmulticast mode [ 1490.923100][T14721] bridge_slave_0: left promiscuous mode [ 1490.949371][T14721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.982462][T14721] bridge_slave_1: left allmulticast mode [ 1491.001450][T14721] bridge_slave_1: left promiscuous mode [ 1491.019607][T14721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.032875][T14721] bond0: (slave bond_slave_0): Releasing backup interface [ 1491.054524][T14721] bond0: (slave bond_slave_1): Releasing backup interface [ 1491.079366][T14721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1491.090062][T14721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1491.100353][T14721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1491.108736][T14721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1493.595177][ T5835] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 1493.876417][ T5835] usb 1-1: not running at top speed; connect to a high speed hub [ 1493.902213][ T5835] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1493.965229][ T5835] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1493.975114][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.983249][ T5835] usb 1-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1494.155316][ T5835] usb 1-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1494.218423][ T5835] usb 1-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1494.735424][ T5835] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1494.772873][ T5835] usb 1-1: USB disconnect, device number 21 [ 1494.799694][ T5835] usblp0: removed [ 1494.912007][T14640] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1494.944572][T14640] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1494.961752][T14640] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1494.979923][T14640] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1495.138271][T14640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1495.188748][T14640] 8021q: adding VLAN 0 to HW filter on device team0 [ 1495.240491][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.247749][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1495.293964][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.301247][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.758158][T14805] 9pnet_virtio: no channels available for device syz [ 1495.774225][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2371'. [ 1496.650251][T14640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1496.884492][T14640] veth0_vlan: entered promiscuous mode [ 1496.907051][T14640] veth1_vlan: entered promiscuous mode [ 1497.329172][T14640] veth0_macvtap: entered promiscuous mode [ 1497.368977][T14640] veth1_macvtap: entered promiscuous mode [ 1497.423356][T14640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1497.455259][T14640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.485133][T14640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1497.504798][T14640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.550270][T14640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1497.574600][T14640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1497.603358][T14640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.618676][T14640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1497.639153][T14640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.652284][T14640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1497.673079][T14640] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.689366][T14640] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.702686][T14640] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.714659][T14640] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.226333][ T7169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1498.373189][ T7169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1498.908223][ T2967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1498.925850][ T2967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1500.128045][T12145] Bluetooth: hci4: command 0x1003 tx timeout [ 1500.186194][ T5790] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1500.835427][ T8] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 1501.110115][ T8] usb 4-1: not running at top speed; connect to a high speed hub [ 1501.128376][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1501.134803][ T2967] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.142844][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1501.166203][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.173889][T12145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1501.175477][ T8] usb 4-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1501.219102][ T8] usb 4-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1501.222696][T12145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1501.251277][ T8] usb 4-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1501.289544][T12145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1501.306413][T12145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1501.317463][T12145] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1501.324909][T12145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1501.527548][ T2967] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.172580][ T8] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1502.213454][ T8] usb 4-1: USB disconnect, device number 14 [ 1502.241677][ T8] usblp0: removed [ 1502.404033][ T2967] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.596079][ T2967] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.906972][T14926] netlink: 'syz.3.2395': attribute type 30 has an invalid length. [ 1502.931629][T14926] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1502.941153][T14926] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1502.951060][T14926] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1502.960097][T14926] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1503.091215][T14926] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1503.100640][T14926] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1503.109647][T14926] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1503.118701][T14926] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1503.375189][ T5790] Bluetooth: hci2: command tx timeout [ 1503.631315][T14893] chnl_net:caif_netlink_parms(): no params data found [ 1504.095897][T14947] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1504.095897][T14947] program syz.3.2400 not setting count and/or reply_len properly [ 1504.849524][T14932] syz.0.2398 (14932): drop_caches: 2 [ 1504.968106][T14893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.000871][T14893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1505.025272][T14893] bridge_slave_0: entered allmulticast mode [ 1505.032799][T14893] bridge_slave_0: entered promiscuous mode [ 1505.125640][T14893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.139271][T14893] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.163259][T14893] bridge_slave_1: entered allmulticast mode [ 1505.183360][T14893] bridge_slave_1: entered promiscuous mode [ 1505.455368][ T5790] Bluetooth: hci2: command tx timeout [ 1506.068683][T14893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1506.445038][T14893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1506.685154][ T5835] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1507.431584][ T5835] usb 4-1: not running at top speed; connect to a high speed hub [ 1507.480209][ T5835] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1507.511499][ T5835] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1507.535119][ T5790] Bluetooth: hci2: command tx timeout [ 1507.553030][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.572223][ T5835] usb 4-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1507.612679][ T5835] usb 4-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1507.679927][ T5835] usb 4-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1507.721527][T14893] team0: Port device team_slave_0 added [ 1507.907248][T14893] team0: Port device team_slave_1 added [ 1507.972562][ T5835] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1508.014860][ T5835] usb 4-1: USB disconnect, device number 15 [ 1508.052671][ T5835] usblp0: removed [ 1508.325805][T14893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1508.332830][T14893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1508.410239][T14893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1508.547622][T14893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1508.584873][T14893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1508.686334][T14893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1509.104556][T14893] hsr_slave_0: entered promiscuous mode [ 1509.157852][T14893] hsr_slave_1: entered promiscuous mode [ 1509.176344][T14893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1509.183977][T14893] Cannot create hsr debugfs directory [ 1509.292691][T14998] syz.0.2410 (14998): drop_caches: 2 [ 1509.335272][ T2967] hsr_slave_0: left promiscuous mode [ 1509.356026][ T2967] hsr_slave_1: left promiscuous mode [ 1509.416377][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1509.423997][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1509.444433][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1509.462497][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1509.481120][ T2967] bridge_slave_1: left allmulticast mode [ 1509.491116][ T2967] bridge_slave_1: left promiscuous mode [ 1509.504672][ T2967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.519646][ T2967] bridge_slave_0: left allmulticast mode [ 1509.527920][ T2967] bridge_slave_0: left promiscuous mode [ 1509.533755][ T2967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.616628][ T5790] Bluetooth: hci2: command tx timeout [ 1509.674304][ T2967] veth1_macvtap: left promiscuous mode [ 1509.684875][ T2967] veth0_macvtap: left promiscuous mode [ 1509.699800][ T2967] veth1_vlan: left promiscuous mode [ 1509.721114][ T2967] veth0_vlan: left promiscuous mode [ 1509.902472][T15019] binder: 15018:15019 unknown command 0 [ 1509.915170][T15019] binder: 15018:15019 ioctl c0306201 200000000080 returned -22 [ 1512.203495][ T2967] team0 (unregistering): Port device team_slave_1 removed [ 1512.329794][ T2967] team0 (unregistering): Port device team_slave_0 removed [ 1512.370348][T15045] binder: 15044:15045 unknown command 0 [ 1512.376134][T15045] binder: 15044:15045 ioctl c0306201 200000000080 returned -22 [ 1512.488142][ T2967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1512.594595][ T2967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1512.656080][T15036] syz.2.2421 (15036): drop_caches: 2 [ 1513.646737][ T2967] bond0 (unregistering): Released all slaves [ 1515.578452][T15077] binder: 15076:15077 unknown command 0 [ 1515.593211][T15077] binder: 15076:15077 ioctl c0306201 200000000080 returned -22 [ 1515.629890][T14893] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1515.704245][T14893] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1515.752314][T14893] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1515.794195][T14893] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1516.161246][T15094] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1516.399796][T14893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1516.493860][T14893] 8021q: adding VLAN 0 to HW filter on device team0 [ 1516.523226][ T9808] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.530514][ T9808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1516.593011][ T9808] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.601293][ T9808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1516.929303][T15094] orangefs_mount: mount request failed with -4 [ 1517.526355][T14893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1517.730148][T14893] veth0_vlan: entered promiscuous mode [ 1517.796671][T14893] veth1_vlan: entered promiscuous mode [ 1517.913886][T14893] veth0_macvtap: entered promiscuous mode [ 1517.955287][T14893] veth1_macvtap: entered promiscuous mode [ 1518.006885][T14893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1518.035046][T14893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.057060][T14893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1518.085077][T14893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.118075][T14893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1518.164056][T14893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1518.255726][T14893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.275598][T14893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1518.288285][T14893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.300861][T14893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1518.368143][T14893] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.391985][T14893] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.423895][T14893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.464491][T14893] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.644811][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.676724][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1519.769636][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.799394][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.112209][T15138] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1521.629519][T15152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2446'. [ 1521.638989][T15152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2446'. [ 1524.381788][T15169] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1524.931064][ T7169] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.947516][T12145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1524.960071][T12145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1524.969667][T12145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1525.039114][T12145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1525.048117][T12145] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1525.059055][T12145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1525.143981][ T7169] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.230420][T15183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2456'. [ 1525.240456][T15183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2456'. [ 1525.841147][ T7169] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.697167][ T7169] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.135428][T12145] Bluetooth: hci3: command tx timeout [ 1527.235169][T13185] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1527.264803][T15200] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1527.629578][T13185] usb 4-1: not running at top speed; connect to a high speed hub [ 1527.645971][T13185] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1527.672437][T13185] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1527.682305][T13185] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.690753][T13185] usb 4-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1527.726178][ C0] vkms_vblank_simulate: vblank timer overrun [ 1527.734609][T13185] usb 4-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1527.765687][ C0] vkms_vblank_simulate: vblank timer overrun [ 1527.784069][T13185] usb 4-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1527.811684][ C0] vkms_vblank_simulate: vblank timer overrun [ 1528.081144][T13185] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1528.121481][T13185] usb 4-1: USB disconnect, device number 16 [ 1528.144501][T13185] usblp0: removed [ 1528.287514][T15177] chnl_net:caif_netlink_parms(): no params data found [ 1529.225259][T12145] Bluetooth: hci3: command tx timeout [ 1529.933358][T15177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.953646][T15177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.962590][T15244] overlayfs: failed to resolve './file1': -2 [ 1529.971179][T15177] bridge_slave_0: entered allmulticast mode [ 1529.980052][T15177] bridge_slave_0: entered promiscuous mode [ 1529.998256][T15177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1530.015195][T15177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1530.025788][T15177] bridge_slave_1: entered allmulticast mode [ 1530.034649][T15177] bridge_slave_1: entered promiscuous mode [ 1530.377587][T15177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1530.500777][T15247] syz.1.2471 (15247): drop_caches: 2 [ 1530.525883][T15177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1530.779385][T15177] team0: Port device team_slave_0 added [ 1530.890442][T15177] team0: Port device team_slave_1 added [ 1531.052269][ T7169] hsr_slave_0: left promiscuous mode [ 1531.073035][ T7169] hsr_slave_1: left promiscuous mode [ 1531.088364][ T7169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1531.112792][ T7169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1531.146755][ T7169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1531.154399][ T7169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1531.170964][ T7169] bridge_slave_1: left allmulticast mode [ 1531.185233][ T7169] bridge_slave_1: left promiscuous mode [ 1531.191119][ T7169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1531.245914][ T7169] bridge_slave_0: left allmulticast mode [ 1531.251648][ T7169] bridge_slave_0: left promiscuous mode [ 1531.275304][ T7169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1531.327501][T12145] Bluetooth: hci3: command tx timeout [ 1532.017209][ T7169] veth1_macvtap: left promiscuous mode [ 1532.086461][ T7169] veth0_macvtap: left promiscuous mode [ 1532.146561][ T7169] veth1_vlan: left promiscuous mode [ 1532.276773][ T7169] veth0_vlan: left promiscuous mode [ 1532.401211][T15282] overlayfs: failed to resolve './file1': -2 [ 1532.605317][T13862] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1532.851620][T13862] usb 1-1: not running at top speed; connect to a high speed hub [ 1532.883429][T13862] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1532.898076][T13862] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1532.908022][T13862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.923213][T13862] usb 1-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1532.966166][T13862] usb 1-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1532.997508][T13862] usb 1-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1533.384846][T13862] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1533.396487][T12145] Bluetooth: hci3: command tx timeout [ 1533.412459][T13862] usb 1-1: USB disconnect, device number 22 [ 1533.445796][T13862] usblp0: removed [ 1533.753522][T15292] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1534.821058][ T7169] team_slave_1 (unregistering): left promiscuous mode [ 1534.834852][ T7169] team0 (unregistering): Port device team_slave_1 removed [ 1534.885414][ T7169] team_slave_0 (unregistering): left promiscuous mode [ 1534.894816][ T7169] team0 (unregistering): Port device team_slave_0 removed [ 1534.951317][ T7169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1534.960877][ T7169] bond_slave_1 (unregistering): left promiscuous mode [ 1534.967838][T13862] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1535.022757][ T7169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1535.032352][ T7169] bond_slave_0 (unregistering): left promiscuous mode [ 1535.173246][T13862] usb 4-1: Using ep0 maxpacket: 16 [ 1535.182472][T13862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.192990][T13862] usb 4-1: config 0 has no interfaces? [ 1535.217658][T13862] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1535.228116][T13862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.236651][T13862] usb 4-1: Product: syz [ 1535.240969][T13862] usb 4-1: Manufacturer: syz [ 1535.245670][T13862] usb 4-1: SerialNumber: syz [ 1535.265314][T13862] usb 4-1: config 0 descriptor?? [ 1535.451237][T15303] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1535.493364][ T23] usb 4-1: USB disconnect, device number 17 [ 1535.850961][ T7169] bond0 (unregistering): Released all slaves [ 1535.953404][T15177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.961582][T15177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1535.988213][T15177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1536.046165][T15177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1536.078144][T15177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1536.149038][T15177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1536.245949][T15303] orangefs_mount: mount request failed with -4 [ 1536.316906][T15177] hsr_slave_0: entered promiscuous mode [ 1536.334217][T15311] overlayfs: failed to resolve './file0': -2 [ 1536.350450][T15177] hsr_slave_1: entered promiscuous mode [ 1537.288745][T15321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2489'. [ 1537.304542][T15321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2489'. [ 1538.176940][T15340] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1538.217653][T15340] sp0: Synchronizing with TNC [ 1538.345136][T11116] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1540.166012][T11116] usb 4-1: Using ep0 maxpacket: 16 [ 1540.183663][T11116] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1540.956501][T11116] usb 4-1: config 0 has no interfaces? [ 1540.995791][T15357] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1541.097466][T11116] usb 4-1: string descriptor 0 read error: -71 [ 1541.103840][T11116] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1541.117577][T11116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.150065][T11116] usb 4-1: config 0 descriptor?? [ 1541.160635][T11116] usb 4-1: can't set config #0, error -71 [ 1541.274318][T11116] usb 4-1: USB disconnect, device number 18 [ 1542.034500][T15370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2501'. [ 1542.043694][T15370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2501'. [ 1542.524418][T15177] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1542.620157][T15177] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1542.674780][T15177] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1542.870545][T15177] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1542.954412][T15382] fuse: Bad value for 'fd' [ 1544.561280][T15177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1544.650153][T15393] binder: 15392:15393 unknown command 0 [ 1544.656042][T15393] binder: 15392:15393 ioctl c0306201 200000000080 returned -22 [ 1544.696653][T15393] binder_alloc: 15392: binder_alloc_buf, no vma [ 1544.701114][T15177] 8021q: adding VLAN 0 to HW filter on device team0 [ 1544.746337][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.753532][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1545.317932][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.325162][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1545.576910][T15403] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1546.022281][T15420] binder: 15419:15420 ioctl c0306201 0 returned -14 [ 1546.164587][T15177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1546.275820][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.282209][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.284749][T15177] veth0_vlan: entered promiscuous mode [ 1546.307597][T15177] veth1_vlan: entered promiscuous mode [ 1546.456974][T15177] veth0_macvtap: entered promiscuous mode [ 1546.503901][T15177] veth1_macvtap: entered promiscuous mode [ 1546.572737][T15177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.618195][T15177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.652950][T15177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.679118][T15439] binder: 15438:15439 unknown command 0 [ 1546.694106][T15177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.704092][T15439] binder: 15438:15439 ioctl c0306201 200000000080 returned -22 [ 1546.721081][T15439] binder_alloc: 15438: binder_alloc_buf, no vma [ 1546.776735][T15177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1546.845270][T15177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.888451][T15177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.938991][T15177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.979776][T15177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1547.019657][T15177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1547.075290][T15177] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.155665][T15177] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.174823][T15177] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.201274][T15177] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.044475][T15450] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1548.085102][ T9808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1548.094406][ T9808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1548.308722][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1548.343231][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1548.804716][T15450] orangefs_mount: mount request failed with -4 [ 1551.661169][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.138008][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.150154][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1552.160260][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1552.170579][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1552.185129][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1552.194408][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1552.895118][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1553.288030][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.848992][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.063665][T12145] Bluetooth: hci0: command tx timeout [ 1555.261139][T15496] chnl_net:caif_netlink_parms(): no params data found [ 1555.334319][T15535] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1555.999222][T15523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2530'. [ 1556.008383][T15523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2530'. [ 1556.484824][T15552] overlayfs: failed to resolve './file1': -2 [ 1556.546654][ T11] tipc: Left network mode [ 1556.546916][T15496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.579013][T15496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.616748][T15496] bridge_slave_0: entered allmulticast mode [ 1556.627301][T15496] bridge_slave_0: entered promiscuous mode [ 1556.698966][T15496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.486041][T15496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.493295][T15496] bridge_slave_1: entered allmulticast mode [ 1557.500485][T15496] bridge_slave_1: entered promiscuous mode [ 1557.565195][T12145] Bluetooth: hci0: command tx timeout [ 1557.922491][T15496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1557.967981][T15496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1558.310033][T15584] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1559.001441][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2543'. [ 1559.010727][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2543'. [ 1559.063894][T15584] Falling back ldisc for ptm1. [ 1559.071752][T15496] team0: Port device team_slave_0 added [ 1559.094589][T15496] team0: Port device team_slave_1 added [ 1559.394421][T15496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1559.423904][T15496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1559.497546][T15590] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1559.497546][T15590] program syz.2.2544 not setting count and/or reply_len properly [ 1559.554987][T15496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1559.634252][T12145] Bluetooth: hci0: command tx timeout [ 1559.666010][T15496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1559.683089][T15496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1559.782195][T15496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1560.185425][T15496] hsr_slave_0: entered promiscuous mode [ 1560.201789][T15496] hsr_slave_1: entered promiscuous mode [ 1560.245674][T15496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1560.265976][T15496] Cannot create hsr debugfs directory [ 1561.705207][T12145] Bluetooth: hci0: command tx timeout [ 1561.884295][ T11] hsr_slave_0: left promiscuous mode [ 1561.955230][ T11] hsr_slave_1: left promiscuous mode [ 1562.122417][ T11] veth1_macvtap: left promiscuous mode [ 1562.170456][ T11] veth0_macvtap: left promiscuous mode [ 1562.200964][ T11] veth1_vlan: left promiscuous mode [ 1562.220097][ T11] veth0_vlan: left promiscuous mode [ 1562.262637][T15623] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1562.933659][T15633] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1563.082188][T15623] orangefs_mount: mount request failed with -4 [ 1563.248902][ T2967] Bluetooth: hci4: Frame reassembly failed (-84) [ 1564.873665][ T11] bond0 (unregistering): Released all slaves [ 1565.256620][T11640] nci: nci_rx_work: unknown MT 0x7 [ 1565.295328][T12145] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1565.301909][ T5790] Bluetooth: hci4: command 0x1003 tx timeout [ 1566.435974][T15496] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1566.486911][T15496] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1566.518342][T15496] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1566.589273][T15496] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1567.419212][T15686] orangefs_mount: mount request failed with -4 [ 1567.496433][T15496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1567.601655][T15496] 8021q: adding VLAN 0 to HW filter on device team0 [ 1568.568802][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1568.576022][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1568.646939][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1568.654202][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1569.375769][ T5835] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1569.431987][T15496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1569.550027][T15496] veth0_vlan: entered promiscuous mode [ 1569.567858][T15496] veth1_vlan: entered promiscuous mode [ 1569.576248][ T5835] usb 3-1: Using ep0 maxpacket: 16 [ 1569.586380][ T5835] usb 3-1: config 0 has no interfaces? [ 1569.591901][ T5835] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1569.611418][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.650161][ T5835] usb 3-1: config 0 descriptor?? [ 1569.703280][T15496] veth0_macvtap: entered promiscuous mode [ 1569.721135][T15496] veth1_macvtap: entered promiscuous mode [ 1569.757185][T15496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1569.767937][T15496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.779254][T15496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1569.790332][T15496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.814494][T15496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1569.825761][T15496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.840390][T15496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1569.854317][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2575'. [ 1569.869758][T15746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1569.877758][T15746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1569.896970][T15746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1569.900880][ T23] usb 3-1: USB disconnect, device number 8 [ 1569.913585][T15746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1569.948502][T15732] orangefs_mount: mount request failed with -4 [ 1570.100753][T15496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1570.244797][T15496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1570.280745][T15496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1570.294296][T15496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1570.308939][T15496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1570.358935][T15496] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.372490][T15496] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.382314][T15496] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.402872][T15496] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.677343][ T7169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1570.725066][ T7169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1570.786255][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2581'. [ 1570.795378][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2581'. [ 1570.825197][ T7169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1570.857072][ T7169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1572.531158][T15804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2591'. [ 1572.540200][T15804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2591'. [ 1572.615104][ T2195] hid-generic 0005:16C0:05DF.0004: item fetching failed at offset 0/1 [ 1572.624717][ T2195] hid-generic: probe of 0005:16C0:05DF.0004 failed with error -22 [ 1574.171161][T15833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2601'. [ 1574.192321][T15833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2601'. [ 1574.234363][ T2195] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1574.934128][ T2195] usb 1-1: not running at top speed; connect to a high speed hub [ 1574.943023][ T2195] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1574.952554][ T2195] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1574.963982][ T2195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.986515][ T2195] usb 1-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1575.096866][ T2195] usb 1-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1575.179598][ T2195] usb 1-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1576.650082][ T2195] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1576.680341][ T2195] usb 1-1: USB disconnect, device number 23 [ 1576.699439][ T2195] usblp0: removed [ 1577.482842][T15870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2613'. [ 1577.494427][T15870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2613'. [ 1578.744705][ T2195] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1578.967271][ T2195] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1578.976482][ T2195] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1578.996999][ T2195] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1579.023215][ T2195] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1579.043570][ T2195] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1579.068579][ T2195] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1579.079755][ T2195] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1579.090552][ T2195] usb 3-1: Product: syz [ 1579.095067][ T2195] usb 3-1: Manufacturer: syz [ 1579.122814][ T2195] cdc_wdm 3-1:1.0: skipping garbage [ 1579.157463][ T2195] cdc_wdm 3-1:1.0: skipping garbage [ 1579.188949][ T2195] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1579.196108][ T2195] cdc_wdm 3-1:1.0: Unknown control protocol [ 1580.325478][T15897] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2622'. [ 1580.493807][T15900] fuse: Bad value for 'fd' [ 1580.833934][T15909] 9pnet_virtio: no channels available for device syz [ 1581.654984][ T2195] usb 3-1: USB disconnect, device number 9 [ 1581.916918][T15923] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1581.968835][T15923] sp0: Synchronizing with TNC [ 1582.133483][ T23] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1584.631777][ T23] usb 1-1: device descriptor read/all, error -71 [ 1586.416148][T15971] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1586.578366][T15971] sp0: Synchronizing with TNC [ 1587.411246][T15975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2648'. [ 1587.447905][T15975] netlink: 'syz.3.2648': attribute type 30 has an invalid length. [ 1587.504011][T15975] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1587.513144][T15975] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1587.522054][T15975] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1587.532000][T15975] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1587.623987][T15983] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1587.767400][T15990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2653'. [ 1587.779458][T15990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2653'. [ 1588.677081][T15983] orangefs_mount: mount request failed with -4 [ 1588.817692][T16001] binder: BINDER_SET_CONTEXT_MGR already set [ 1588.837330][T16001] binder: 16000:16001 ioctl 4018620d 200000000040 returned -16 [ 1588.920104][T16001] syz.0.2659 (16001): drop_caches: 2 [ 1590.136570][T16021] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1591.201957][T16029] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1591.288754][T16034] binder: 16033:16034 unknown command 0 [ 1591.294684][T16034] binder: 16033:16034 ioctl c0306201 200000000080 returned -22 [ 1591.640497][T16040] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1591.640497][T16040] program syz.2.2670 not setting count and/or reply_len properly [ 1592.096162][T16029] orangefs_mount: mount request failed with -4 [ 1592.480961][T16050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2674'. [ 1592.495041][T16050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2674'. [ 1593.593043][T16064] binder: 16063:16064 unknown command 0 [ 1593.601295][T16064] binder: 16063:16064 ioctl c0306201 200000000080 returned -22 [ 1593.724736][T16066] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1594.537566][T16066] orangefs_mount: mount request failed with -4 [ 1596.160993][T15537] Bluetooth: hci4: Frame reassembly failed (-84) [ 1596.236695][T16100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2692'. [ 1596.275938][T16098] syz.2.2694 (16098): drop_caches: 2 [ 1596.510008][T16112] 9pnet_virtio: no channels available for device syz [ 1597.104369][T16101] orangefs_mount: mount request failed with -4 [ 1597.216815][T16122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2700'. [ 1597.243380][T16122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1597.251082][T16122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1597.272166][T16122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1597.282440][T16122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1597.385991][ T2195] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1597.780378][ T2195] usb 4-1: not running at top speed; connect to a high speed hub [ 1597.979038][ T2195] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1598.008025][ T2195] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1598.027933][ T2195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.038109][ T2195] usb 4-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1598.078219][ T2195] usb 4-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1598.112030][ T2195] usb 4-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1598.176098][ T5790] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1598.376500][ T2195] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1598.395648][ T2195] usb 4-1: USB disconnect, device number 19 [ 1598.406580][ T2195] usblp0: removed [ 1598.799657][T16139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2706'. [ 1598.809573][T16139] netlink: 'syz.0.2706': attribute type 30 has an invalid length. [ 1598.822282][T16139] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1598.831123][T16139] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1598.839908][T16139] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1598.848741][T16139] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1598.997576][T16143] Failed to get privilege flags for destination (handle=0x2:0x4000d56d) [ 1599.443230][T16148] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1599.832190][T16154] kvm: emulating exchange as write [ 1600.182620][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2716'. [ 1600.193056][T16168] netlink: 'syz.3.2716': attribute type 30 has an invalid length. [ 1601.236026][T16187] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1601.876463][T16201] fuse: Bad value for 'fd' [ 1603.159733][T16220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2734'. [ 1603.210336][T16221] Bluetooth: MGMT ver 1.22 [ 1603.433312][T16226] binder: 16224:16226 ioctl c0306201 0 returned -14 [ 1603.611065][T16229] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1603.757006][T16233] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1604.524432][T16229] orangefs_mount: mount request failed with -4 [ 1604.668150][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 1604.969781][T16242] fuse: Bad value for 'fd' [ 1606.039324][T16256] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1606.112270][ T28] audit: type=1326 audit(1752911793.810:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.0.2744" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b0618e9a9 code=0x0 [ 1606.135196][ C0] vkms_vblank_simulate: vblank timer overrun [ 1606.135723][T16263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2745'. [ 1606.359375][T16272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2749'. [ 1606.369291][ T23] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1606.575190][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 1606.586551][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.603465][ T23] usb 4-1: config 0 has no interfaces? [ 1606.622891][ T23] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1606.639887][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.664812][ T23] usb 4-1: Product: syz [ 1606.679347][ T23] usb 4-1: Manufacturer: syz [ 1606.694401][ T23] usb 4-1: SerialNumber: syz [ 1606.718075][ T23] usb 4-1: config 0 descriptor?? [ 1607.012999][T11116] usb 4-1: USB disconnect, device number 20 [ 1607.041076][T16288] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1607.041076][T16288] program syz.0.2756 not setting count and/or reply_len properly [ 1607.701096][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.715612][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.739243][T16302] binder: 16301:16302 ioctl 4018620d 0 returned -22 [ 1608.776149][T16302] binder: 16301:16302 unknown command 0 [ 1608.796906][T16302] binder: 16301:16302 ioctl c0306201 200000000080 returned -22 [ 1609.775177][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1609.965056][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 1609.980473][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1609.990802][ T23] usb 3-1: config 0 has no interfaces? [ 1610.002181][ T23] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1610.011510][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.019915][ T23] usb 3-1: Product: syz [ 1610.024237][ T23] usb 3-1: Manufacturer: syz [ 1610.029243][ T23] usb 3-1: SerialNumber: syz [ 1610.039481][ T23] usb 3-1: config 0 descriptor?? [ 1610.941454][T16367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2782'. [ 1611.961641][T16384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2789'. [ 1612.156230][T16395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2791'. [ 1612.498591][T16404] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1612.835868][ T2195] usb 3-1: USB disconnect, device number 10 [ 1613.249225][T16405] orangefs_mount: mount request failed with -4 [ 1613.712501][T16426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2802'. [ 1613.935088][ T2195] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1614.125282][ T2195] usb 3-1: Using ep0 maxpacket: 32 [ 1614.138761][ T2195] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1614.156011][ T2195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.179656][ T2195] usb 3-1: config 0 descriptor?? [ 1614.199090][ T2195] as10x_usb: device has been detected [ 1614.211803][ T2195] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1614.281957][ T2195] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1614.475845][ T2195] as10x_usb: error during firmware upload part1 [ 1614.494012][ T2195] Registered device nBox DVB-T Dongle [ 1614.504153][ T2195] usb 3-1: USB disconnect, device number 11 [ 1614.643448][ T2195] Unregistered device nBox DVB-T Dongle [ 1614.669991][ T2195] as10x_usb: device has been disconnected [ 1615.226133][T16447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2810'. [ 1615.475108][T16450] trusted_key: encrypted_key: insufficient parameters specified [ 1615.951831][T16452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2812'. [ 1615.973189][T16452] netlink: 'syz.2.2812': attribute type 30 has an invalid length. [ 1616.024041][T16452] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1616.033243][T16452] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1616.042340][T16452] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1616.051195][T16452] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1617.025236][T16459] orangefs_mount: mount request failed with -4 [ 1618.765130][T16476] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1618.765130][T16476] program syz.0.2819 not setting count and/or reply_len properly [ 1619.383044][T16480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2820'. [ 1619.688134][ T5835] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1619.887082][ T5835] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1619.896243][ T5835] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1619.905698][ T5835] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1619.916842][ T5835] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1619.925107][ T5835] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1619.934200][ T5835] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1619.945342][ T5835] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1619.953059][ T5835] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1619.962138][ T5835] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1619.973179][ T5835] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1619.981735][ T5835] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1619.991508][ T5835] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1620.003635][ T5835] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1620.013049][ T5835] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1620.022200][ T5835] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1620.033304][ T5835] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1620.041151][ T5835] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1620.050190][ T5835] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1620.061240][ T5835] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1620.065111][ T8] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1620.069442][ T5835] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1620.084450][ T5835] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1620.095962][ T5835] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1620.103700][ T5835] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1620.117280][ T5835] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1620.128338][ T5835] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1620.137723][ T5835] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1620.147540][ T5835] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1620.156268][ T5835] usb 4-1: Product: syz [ 1620.161019][ T5835] usb 4-1: Manufacturer: syz [ 1620.165719][ T5835] usb 4-1: SerialNumber: syz [ 1620.173264][ T5835] usb 4-1: config 0 descriptor?? [ 1620.188445][ T5835] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1620.256782][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 1620.271478][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1620.283990][ T8] usb 1-1: config 0 has no interfaces? [ 1620.297333][ T8] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1620.307919][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.317348][ T8] usb 1-1: Product: syz [ 1620.321710][ T8] usb 1-1: Manufacturer: syz [ 1620.327587][ T8] usb 1-1: SerialNumber: syz [ 1620.505227][T16486] orangefs_mount: mount request failed with -4 [ 1620.516271][ T8] usb 1-1: config 0 descriptor?? [ 1621.659995][T16507] kvm: pic: level sensitive irq not supported [ 1621.660293][T16507] kvm: pic: non byte read [ 1621.681540][T16507] kvm: pic: non byte read [ 1621.686481][T16507] kvm: pic: non byte read [ 1621.698274][T16507] kvm: pic: non byte read [ 1621.708526][T16507] kvm: pic: non byte read [ 1621.720470][T16507] kvm: pic: non byte read [ 1621.732899][T16507] kvm: pic: non byte read [ 1621.742129][T16507] kvm: pic: non byte read [ 1621.753614][T16507] kvm: pic: non byte read [ 1621.762485][T16507] kvm: pic: non byte read [ 1622.010952][T16513] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1622.010952][T16513] program syz.2.2832 not setting count and/or reply_len properly [ 1622.395766][ C1] usb 4-1: yurex_control_callback - control failed: -2 [ 1622.742434][ T2195] usb 4-1: USB disconnect, device number 21 [ 1622.757223][ T2195] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1622.807007][ T8] usb 1-1: USB disconnect, device number 26 [ 1623.606523][T16539] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1623.651143][T16539] sp0: Synchronizing with TNC [ 1623.787783][T16524] orangefs_mount: mount request failed with -4 [ 1625.798162][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 1626.815456][T16558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2850'. [ 1627.419191][T16567] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1627.463178][T16567] sp0: Synchronizing with TNC [ 1628.284261][T16557] orangefs_mount: mount request failed with -4 [ 1630.560628][T16574] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 1630.607476][T16574] binder: 16572:16574 ioctl 4018620d 200000000040 returned -1 [ 1631.939790][T16590] orangefs_mount: mount request failed with -4 [ 1632.891849][T16618] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1633.118992][T16618] ERROR: device name not specified. [ 1633.821923][T16620] orangefs_mount: mount request failed with -4 [ 1634.280149][T16632] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1634.280149][T16632] program syz.0.2878 not setting count and/or reply_len properly [ 1635.001386][T16635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2879'. [ 1635.010626][T16635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2879'. [ 1635.118072][T16638] binder: 16637:16638 ioctl c0306201 0 returned -14 [ 1635.910184][T16653] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1636.944187][T16662] netlink: 'syz.2.2887': attribute type 3 has an invalid length. [ 1636.979784][T16662] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.2887'. [ 1637.274594][T16672] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1637.274594][T16672] program syz.0.2890 not setting count and/or reply_len properly [ 1637.785687][T16678] binder: 16677:16678 ioctl c0306201 0 returned -14 [ 1637.898729][T16682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2893'. [ 1637.943618][T16686] capability: warning: `syz.1.2896' uses 32-bit capabilities (legacy support in use) [ 1638.518810][T16711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2906'. [ 1638.936622][T16729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2916'. [ 1639.083867][T16733] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1639.986641][T16755] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1640.225323][ T23] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1640.951911][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1640.970728][T16770] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1640.998720][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1641.110426][T16770] sp0: Synchronizing with TNC [ 1641.196577][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1641.208340][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1641.221305][ T23] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1641.234105][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.245731][ T23] usb 1-1: Product: syz [ 1641.250050][ T23] usb 1-1: Manufacturer: syz [ 1641.254794][ T23] usb 1-1: SerialNumber: syz [ 1641.276832][ T23] usb 1-1: config 0 descriptor?? [ 1641.577988][ T23] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1641.605719][T16777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2933'. [ 1641.665284][T16777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1641.702831][T16777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1641.751993][T16777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1641.759816][T16777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1641.840764][T16749] usb 1-1: Couldn't submit interrupt_out_urb -90 [ 1641.861354][ T5835] usb 1-1: USB disconnect, device number 27 [ 1641.983470][T16784] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1642.103605][T16786] binder: 16785:16786 ioctl c0306201 0 returned -14 [ 1642.140782][T16786] syz.3.2937 (16786): drop_caches: 2 [ 1642.538094][T16809] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1642.760414][T16816] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1643.439546][T16821] binder: 16813:16821 unknown command 0 [ 1643.473465][T16817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2949'. [ 1643.482600][T16821] binder: 16813:16821 ioctl c0306201 200000000080 returned -22 [ 1643.493364][T16809] sp0: Synchronizing with TNC [ 1643.510890][T16821] binder: 16813:16821 ioctl c0306201 0 returned -14 [ 1643.750208][T16828] binder: 16827:16828 ioctl c0306201 0 returned -14 [ 1643.804270][T16828] syz.0.2952 (16828): drop_caches: 2 [ 1643.935338][T16839] binder: 16838:16839 ioctl 4018620d 0 returned -22 [ 1643.971714][T16843] binder: 16840:16843 unknown command 0 [ 1643.981069][T16843] binder: 16840:16843 ioctl c0306201 200000000080 returned -22 [ 1644.075307][T16850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2959'. [ 1644.167571][T16856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2962'. [ 1644.280271][T16858] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1644.440416][T16858] sp0: Synchronizing with TNC [ 1645.010600][T16873] binder: 16872:16873 ioctl 4018620d 0 returned -22 [ 1646.159239][T16899] binder: 16898:16899 unknown command 0 [ 1646.174147][T16899] binder: 16898:16899 ioctl c0306201 200000000080 returned -22 [ 1646.356243][T16907] binder: 16904:16907 ioctl 4018620d 0 returned -22 [ 1648.861612][T16952] netlink: 'syz.0.2999': attribute type 3 has an invalid length. [ 1648.891307][T16952] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2999'. [ 1649.198991][T16967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3004'. [ 1649.222704][T16967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1649.242687][T16967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1649.255286][T16967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1649.263494][T16967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1649.899472][T16973] ======================================================= [ 1649.899472][T16973] WARNING: The mand mount option has been deprecated and [ 1649.899472][T16973] and is ignored by this kernel. Remove the mand [ 1649.899472][T16973] option from the mount to silence this warning. [ 1649.899472][T16973] ======================================================= [ 1649.946168][T16973] overlayfs: failed to clone upperpath [ 1650.735164][T13936] Bluetooth: hci3: command 0x0406 tx timeout [ 1652.540064][T17014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3019'. [ 1654.992733][T17042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3029'. [ 1655.005236][T17042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3029'. [ 1655.632897][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3030'. [ 1655.711939][T17054] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1656.447057][T17054] orangefs_mount: mount request failed with -4 [ 1656.875949][T17066] syz.2.3035 (17066): drop_caches: 2 [ 1658.468027][T17084] sg_write: process 365 (syz.2.3041) changed security contexts after opening file descriptor, this is not allowed. [ 1658.858606][T17096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3042'. [ 1659.127058][T17104] syz.2.3046 (17104): drop_caches: 2 [ 1660.141984][T17125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3052'. [ 1660.151083][T17125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3052'. [ 1661.050227][T17141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3056'. [ 1661.311981][T17153] binder: 17152:17153 ioctl 4018620d 0 returned -22 [ 1661.323419][T17153] syz.0.3062 (17153): drop_caches: 2 [ 1662.521920][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805fc82c00: rx timeout, send abort [ 1662.533175][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805fc82c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1663.577921][T17185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3069'. [ 1663.770173][T17189] binder: 17188:17189 ioctl 4018620d 0 returned -22 [ 1663.802005][T17189] syz.2.3071 (17189): drop_caches: 2 [ 1663.837601][T17195] sch_tbf: peakrate 16 is lower than or equals to rate 2819869185 ! [ 1667.285222][T17249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3090'. [ 1667.666300][T17259] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1667.666300][T17259] program syz.2.3095 not setting count and/or reply_len properly [ 1668.127528][T17258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3093'. [ 1668.982018][T17272] binder: 17267:17272 ioctl c0306201 200000000240 returned -11 [ 1669.145287][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.162092][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.384410][T17284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3101'. [ 1669.548715][T17288] syz_tun: entered allmulticast mode [ 1669.571450][T17288] syz_tun: left allmulticast mode [ 1669.655983][T17290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3104'. [ 1670.818061][T17319] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1531215282 (3062430564 ns) > initial count (1473793136 ns). Using initial count to start timer. [ 1670.846739][T17319] kvm: Disabled LAPIC found during irq injection [ 1670.906045][T17322] netlink: 'syz.1.3117': attribute type 3 has an invalid length. [ 1670.920927][T17322] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.3117'. [ 1671.774979][ T2195] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1671.818269][T17347] syz.2.3125 (17347): drop_caches: 2 [ 1671.965024][ T2195] usb 1-1: Using ep0 maxpacket: 32 [ 1671.977067][ T2195] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1671.991157][ T2195] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1672.010631][ T2195] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1672.024984][ T2195] usb 1-1: Product: syz [ 1672.033781][ T2195] usb 1-1: Manufacturer: syz [ 1672.047430][ T2195] usb 1-1: SerialNumber: syz [ 1672.079447][ T2195] usb 1-1: config 0 descriptor?? [ 1672.110724][T17340] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1672.124411][ T2195] hub 1-1:0.0: bad descriptor, ignoring hub [ 1672.134958][ T2195] hub: probe of 1-1:0.0 failed with error -5 [ 1672.592091][ T23] usb 1-1: USB disconnect, device number 28 [ 1672.858588][T17376] overlayfs: failed to clone upperpath [ 1673.727844][T17388] syz.3.3140 (17388): drop_caches: 2 [ 1674.039202][T17402] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1674.058974][T17402] sp0: Synchronizing with TNC [ 1674.518377][T17409] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1674.518377][T17409] program syz.2.3146 not setting count and/or reply_len properly [ 1675.124603][T17415] syz.0.3150 (17415): drop_caches: 2 [ 1675.260938][T17423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3153'. [ 1675.328414][T17428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3153'. [ 1675.727688][T17443] xt_hashlimit: size too large, truncated to 1048576 [ 1676.473604][T17456] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1676.522681][T17456] sp0: Synchronizing with TNC [ 1680.215182][T13992] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 1680.433274][T13992] usb 3-1: not running at top speed; connect to a high speed hub [ 1680.444667][T13992] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1680.463869][T13992] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1680.492179][T13992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.521744][T13992] usb 3-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1680.570106][T13992] usb 3-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1680.614278][T13992] usb 3-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1681.475019][ T787] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1681.625113][ T787] usb 4-1: device descriptor read/64, error -71 [ 1681.863043][T17491] overlayfs: failed to clone upperpath [ 1681.916974][ T787] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1682.085000][ T787] usb 4-1: device descriptor read/64, error -71 [ 1682.205629][ T787] usb usb4-port1: attempt power cycle [ 1682.616189][T13992] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1682.650402][T13992] usb 3-1: USB disconnect, device number 12 [ 1682.657306][ T787] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1683.119109][ T787] usb 4-1: device descriptor read/8, error -71 [ 1683.126408][T13992] usblp0: removed [ 1683.474988][ T787] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1683.525627][ T787] usb 4-1: device descriptor read/8, error -71 [ 1683.657441][ T787] usb usb4-port1: unable to enumerate USB device [ 1683.666246][T17510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3184'. [ 1683.685042][T17510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3184'. [ 1685.700122][T17536] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1685.744597][T17536] sp0: Synchronizing with TNC [ 1687.361467][T17541] loop6: detected capacity change from 0 to 524287999 [ 1687.394462][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1687.403877][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1687.415672][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1687.424943][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1687.448369][T16649] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1687.458419][T16649] Buffer I/O error on dev loop6, logical block 0, async page read [ 1687.467081][T16649] ldm_validate_partition_table(): Disk read failed. [ 1687.479815][T16649] Dev loop6: unable to read RDB block 0 [ 1687.487423][T16649] loop6: unable to read partition table [ 1687.493645][T16649] loop6: partition table beyond EOD, truncated [ 1687.696118][ T23] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1687.855007][ T23] usb 4-1: device descriptor read/64, error -71 [ 1687.964034][T17562] overlayfs: failed to resolve './file1': -2 [ 1687.981448][T17563] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1688.037638][T17563] sp0: Synchronizing with TNC [ 1688.124961][ T23] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1688.975134][ T23] usb 4-1: device descriptor read/64, error -71 [ 1689.097166][ T23] usb usb4-port1: attempt power cycle [ 1689.395220][ T787] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 1689.454236][T17582] syz.2.3212 (17582): drop_caches: 2 [ 1689.531934][ T23] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1689.562078][T17587] overlayfs: failed to resolve './file1': -2 [ 1689.566001][ T23] usb 4-1: device descriptor read/8, error -71 [ 1689.607851][ T787] usb 1-1: not running at top speed; connect to a high speed hub [ 1689.629978][ T787] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1689.668667][ T787] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1689.684439][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.703150][ T787] usb 1-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1689.775845][ T787] usb 1-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1689.838658][ T23] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1689.844913][ T787] usb 1-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1689.920447][ T23] usb 4-1: device descriptor read/8, error -71 [ 1690.136077][ T23] usb usb4-port1: unable to enumerate USB device [ 1691.031262][T17611] syz.3.3224 (17611): drop_caches: 2 [ 1691.345007][ T23] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1691.544967][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 1691.575226][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1691.608561][ T23] usb 3-1: config 0 has no interfaces? [ 1691.627835][ T23] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1691.638640][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.647417][ T23] usb 3-1: Product: syz [ 1691.651654][ T23] usb 3-1: Manufacturer: syz [ 1691.656390][ T23] usb 3-1: SerialNumber: syz [ 1691.663813][ T23] usb 3-1: config 0 descriptor?? [ 1691.966209][ T787] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1691.985950][ T787] usb 1-1: USB disconnect, device number 29 [ 1691.999538][ T787] usblp0: removed [ 1692.131942][T17635] syz.3.3234 (17635): drop_caches: 2 [ 1692.398662][T17643] binder: 17642:17643 unknown command 0 [ 1692.404340][T17643] binder: 17642:17643 ioctl c0306201 200000000080 returned -22 [ 1693.721802][T17668] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1693.721802][T17668] program syz.3.3244 not setting count and/or reply_len properly [ 1693.949969][T17669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3243'. [ 1694.298656][ T5835] usb 3-1: USB disconnect, device number 13 [ 1695.105005][ T8] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1695.288131][ T8] usb 4-1: not running at top speed; connect to a high speed hub [ 1695.303118][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1695.317328][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1695.329720][T17704] xt_hashlimit: size too large, truncated to 1048576 [ 1695.335156][ T5835] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1695.344455][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.364953][ T8] usb 4-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1695.401113][ T8] usb 4-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1695.432542][ T8] usb 4-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1695.581754][ T5835] usb 1-1: Using ep0 maxpacket: 16 [ 1695.594163][ T5835] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1695.614057][T17708] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3257'. [ 1695.619543][ T5835] usb 1-1: config 0 has no interfaces? [ 1695.657296][ T5835] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1695.676277][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.692586][ T5835] usb 1-1: Product: syz [ 1695.703202][ T5835] usb 1-1: Manufacturer: syz [ 1695.713568][ T5835] usb 1-1: SerialNumber: syz [ 1695.729075][ T5835] usb 1-1: config 0 descriptor?? [ 1697.395035][ T5835] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1697.589441][ T5835] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1697.599792][ T5835] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1697.615041][ T5835] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1697.634154][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.650125][ T5835] usb 3-1: Product: syz [ 1697.659173][ T5835] usb 3-1: Manufacturer: syz [ 1697.668376][ T5835] usb 3-1: SerialNumber: syz [ 1697.686661][ T5835] usb 3-1: config 0 descriptor?? [ 1697.791236][ T8] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1697.827628][ T8] usb 4-1: USB disconnect, device number 30 [ 1697.849519][ T8] usblp0: removed [ 1698.035077][ T787] usb 1-1: USB disconnect, device number 30 [ 1698.294714][T17733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3266'. [ 1698.627286][T17738] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1699.236188][T17740] binder: 17739:17740 ioctl c0306201 200000000240 returned -11 [ 1699.732867][T17763] binder: 17762:17763 ioctl c0306201 200000000240 returned -11 [ 1699.807525][T17768] xt_hashlimit: size too large, truncated to 1048576 [ 1700.184590][ T27] usb 3-1: USB disconnect, device number 14 [ 1701.105170][ T5834] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1701.342227][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.352611][ T5834] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1701.373272][ T5834] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1701.383054][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.409777][ T5834] usb 1-1: Product: syz [ 1701.414397][ T5834] usb 1-1: Manufacturer: syz [ 1701.419435][ T5834] usb 1-1: SerialNumber: syz [ 1701.453324][ T5834] usb 1-1: config 0 descriptor?? [ 1702.652422][T17836] binder: 17835:17836 ioctl c0306201 200000000240 returned -11 [ 1703.630946][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1703.674938][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.893355][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1703.906588][ T8] usb 1-1: USB disconnect, device number 31 [ 1703.935552][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.098535][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1704.137445][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.259382][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1704.282371][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.590698][T13936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1704.614665][T13936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1704.636654][T13936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1704.667280][T13936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1704.684398][T13936] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1704.695744][T13936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1705.343999][T17892] Illegal XDP return value 65535 on prog (id 243) dev N/A, expect packet loss! [ 1705.496634][T17864] chnl_net:caif_netlink_parms(): no params data found [ 1705.756450][ T5834] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1705.916837][T17864] bridge0: port 1(bridge_slave_0) entered blocking state [ 1705.940152][T17864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1705.956915][T17864] bridge_slave_0: entered allmulticast mode [ 1705.964753][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1705.976877][T17864] bridge_slave_0: entered promiscuous mode [ 1705.984037][ T5834] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1705.990174][T17864] bridge0: port 2(bridge_slave_1) entered blocking state [ 1706.003590][T17864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.012893][ T5834] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1706.014291][T17864] bridge_slave_1: entered allmulticast mode [ 1706.022871][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.040219][T17864] bridge_slave_1: entered promiscuous mode [ 1706.050634][ T5834] usb 1-1: Product: syz [ 1706.060186][ T5834] usb 1-1: Manufacturer: syz [ 1706.075333][ T5834] usb 1-1: SerialNumber: syz [ 1706.106242][ T5834] usb 1-1: config 0 descriptor?? [ 1706.331587][T17864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1706.392492][ T12] hsr_slave_0: left promiscuous mode [ 1706.413037][ T12] hsr_slave_1: left promiscuous mode [ 1706.447187][ T12] bridge_slave_1: left allmulticast mode [ 1706.461759][ T12] bridge_slave_1: left promiscuous mode [ 1706.475177][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.496719][ T12] bridge_slave_0: left allmulticast mode [ 1706.502462][ T12] bridge_slave_0: left promiscuous mode [ 1706.519903][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.586380][ T12] veth1_macvtap: left promiscuous mode [ 1706.592443][ T12] veth0_macvtap: left promiscuous mode [ 1706.602430][ T12] veth1_vlan: left promiscuous mode [ 1706.615883][ T12] veth0_vlan: left promiscuous mode [ 1706.815458][T13936] Bluetooth: hci3: command tx timeout [ 1708.232044][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1708.297652][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1708.360412][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1708.420255][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1708.494430][ T8] usb 1-1: USB disconnect, device number 32 [ 1708.907817][T13936] Bluetooth: hci3: command tx timeout [ 1709.280965][ T12] bond0 (unregistering): Released all slaves [ 1709.427779][T17864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1709.494128][T17864] team0: Port device team_slave_0 added [ 1709.573052][T17864] team0: Port device team_slave_1 added [ 1709.713461][T17864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1709.722615][T17864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1709.761063][T17864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1709.826517][T17864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1709.854963][T17864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1709.943689][T17864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1710.108493][T17864] hsr_slave_0: entered promiscuous mode [ 1710.118737][T17864] hsr_slave_1: entered promiscuous mode [ 1710.991364][T13936] Bluetooth: hci3: command tx timeout [ 1711.829951][T17976] veth0_vlan: entered allmulticast mode [ 1712.158682][T17977] veth0_vlan: left promiscuous mode [ 1712.173159][T17977] veth0_vlan: entered promiscuous mode [ 1712.871884][T17864] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1712.914045][T17993] binder: 17992:17993 ioctl 4018620d 0 returned -22 [ 1712.928083][T17993] binder: 17992:17993 ioctl c0306201 200000000240 returned -11 [ 1712.931112][T17864] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1713.055069][T13936] Bluetooth: hci3: command tx timeout [ 1713.066427][T17864] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1713.100889][T17864] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1713.217844][T18001] overlayfs: failed to resolve './file1/file0': -2 [ 1714.072314][T17864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1714.143058][T17864] 8021q: adding VLAN 0 to HW filter on device team0 [ 1714.176791][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.184160][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1714.230314][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1714.237598][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1714.743674][T17864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1715.169026][T18052] [ 1715.171935][T18052] ============================= [ 1715.177261][T18052] WARNING: suspicious RCU usage [ 1715.182181][T18052] 6.6.99-syzkaller #0 Not tainted [ 1715.187373][T18052] ----------------------------- [ 1715.192385][T18052] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 1715.201208][T18052] [ 1715.201208][T18052] other info that might help us debug this: [ 1715.201208][T18052] [ 1715.211670][T18052] [ 1715.211670][T18052] rcu_scheduler_active = 2, debug_locks = 1 [ 1715.221084][T18052] 1 lock held by syz.3.3359/18052: [ 1715.226678][T18052] #0: ffffffff8cd2fd40 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 1715.237058][T18052] [ 1715.237058][T18052] stack backtrace: [ 1715.243006][T18052] CPU: 0 PID: 18052 Comm: syz.3.3359 Not tainted 6.6.99-syzkaller #0 [ 1715.251123][T18052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1715.261233][T18052] Call Trace: [ 1715.264531][T18052] [ 1715.267478][T18052] dump_stack_lvl+0x16c/0x230 [ 1715.272188][T18052] ? show_regs_print_info+0x20/0x20 [ 1715.277410][T18052] ? load_image+0x3b0/0x3b0 [ 1715.281951][T18052] lockdep_rcu_suspicious+0x1e1/0x300 [ 1715.287356][T18052] get_callchain_entry+0x2a9/0x3c0 [ 1715.292579][T18052] get_perf_callchain+0xa3/0x4b0 [ 1715.297541][T18052] ? put_callchain_entry+0xb0/0xb0 [ 1715.302671][T18052] ? plist_add+0x3d8/0x490 [ 1715.307116][T18052] __bpf_get_stack+0x2d7/0x510 [ 1715.311910][T18052] ? stack_map_get_build_id_offset+0x720/0x720 [ 1715.318090][T18052] ? __cant_sleep+0x210/0x210 [ 1715.322792][T18052] ? bpf_prog_d43750871481577d+0x45/0x49 [ 1715.328449][T18052] bpf_get_stack_raw_tp+0x1a9/0x210 [ 1715.333676][T18052] bpf_prog_d43750871481577d+0x45/0x49 [ 1715.339160][T18052] bpf_prog_run_pin_on_cpu+0xa8/0x140 [ 1715.344644][T18052] bpf_prog_test_run_syscall+0x311/0x490 [ 1715.350309][T18052] ? sock_gen_cookie+0x60/0x60 [ 1715.355126][T18052] ? sock_gen_cookie+0x60/0x60 [ 1715.359942][T18052] bpf_prog_test_run+0x321/0x390 [ 1715.364930][T18052] __sys_bpf+0x440/0x800 [ 1715.369210][T18052] ? bpf_link_show_fdinfo+0x350/0x350 [ 1715.374615][T18052] ? lock_chain_count+0x20/0x20 [ 1715.379497][T18052] __x64_sys_bpf+0x7c/0x90 [ 1715.384024][T18052] do_syscall_64+0x55/0xb0 [ 1715.388463][T18052] ? clear_bhb_loop+0x40/0x90 [ 1715.393157][T18052] ? clear_bhb_loop+0x40/0x90 [ 1715.397880][T18052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1715.403813][T18052] RIP: 0033:0x7f08e198e9a9 [ 1715.408243][T18052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1715.428660][T18052] RSP: 002b:00007f08e271a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1715.437291][T18052] RAX: ffffffffffffffda RBX: 00007f08e1bb5fa0 RCX: 00007f08e198e9a9 [ 1715.445290][T18052] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 1715.453284][T18052] RBP: 00007f08e1a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1715.461274][T18052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1715.469351][T18052] R13: 0000000000000000 R14: 00007f08e1bb5fa0 R15: 00007ffc36ec92e8 [ 1715.477353][T18052] [ 1715.580929][T17864] veth0_vlan: entered promiscuous mode [ 1716.471901][ T9808] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.754747][ T9808] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.870789][ T9808] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.982249][ T9808] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1718.078620][ T9808] hsr_slave_0: left promiscuous mode [ 1718.087029][ T9808] hsr_slave_1: left promiscuous mode [ 1718.093361][ T9808] bridge_slave_1: left allmulticast mode [ 1718.099203][ T9808] bridge_slave_1: left promiscuous mode [ 1718.107834][ T9808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1718.117418][ T9808] bridge_slave_0: left allmulticast mode [ 1718.123089][ T9808] bridge_slave_0: left promiscuous mode [ 1718.129320][ T9808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1718.158762][ T9808] veth1_macvtap: left promiscuous mode [ 1718.164343][ T9808] veth0_macvtap: left promiscuous mode [ 1718.170232][ T9808] veth1_vlan: left promiscuous mode [ 1718.177326][ T9808] veth0_vlan: left promiscuous mode [ 1718.820828][ T9808] team0 (unregistering): Port device team_slave_1 removed [ 1718.878383][ T9808] team0 (unregistering): Port device team_slave_0 removed [ 1718.928270][ T9808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1718.981260][ T9808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1719.560986][ T9808] bond0 (unregistering): Released all slaves [ 1720.276715][ T9808] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1720.287462][ T9808] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.367063][ T9808] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1720.377600][ T9808] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.457330][ T9808] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1720.467677][ T9808] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.532728][ T9808] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1720.543676][ T9808] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.716220][ T9808] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1720.727835][ T9808] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.806622][ T9808] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1720.817767][ T9808] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.905414][ T9808] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1720.915925][ T9808] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.007935][ T9808] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1721.018474][ T9808] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.493570][ T9808] hsr_slave_0: left promiscuous mode [ 1722.499787][ T9808] hsr_slave_1: left promiscuous mode [ 1722.507444][ T9808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1722.515656][ T9808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1722.523687][ T9808] bridge_slave_1: left allmulticast mode [ 1722.530388][ T9808] bridge_slave_1: left promiscuous mode [ 1722.536470][ T9808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.547063][ T9808] bridge_slave_0: left allmulticast mode [ 1722.552734][ T9808] bridge_slave_0: left promiscuous mode [ 1722.559085][ T9808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.573348][ T9808] hsr_slave_0: left promiscuous mode [ 1722.579571][ T9808] hsr_slave_1: left promiscuous mode [ 1722.585801][ T9808] bridge_slave_1: left allmulticast mode [ 1722.591458][ T9808] bridge_slave_1: left promiscuous mode [ 1722.597304][ T9808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.608671][ T9808] bridge_slave_0: left allmulticast mode [ 1722.614807][ T9808] bridge_slave_0: left promiscuous mode [ 1722.620968][ T9808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.636501][ T9808] hsr_slave_0: left promiscuous mode [ 1722.642431][ T9808] hsr_slave_1: left promiscuous mode [ 1722.649336][ T9808] bridge_slave_1: left allmulticast mode [ 1722.655158][ T9808] bridge_slave_1: left promiscuous mode [ 1722.660862][ T9808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.671128][ T9808] bridge_slave_0: left allmulticast mode [ 1722.677188][ T9808] bridge_slave_0: left promiscuous mode [ 1722.682876][ T9808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.739399][ T9808] veth0_vlan: left promiscuous mode [ 1722.747436][ T9808] veth1_macvtap: left promiscuous mode [ 1722.752990][ T9808] veth0_macvtap: left promiscuous mode [ 1722.758711][ T9808] veth1_vlan: left promiscuous mode [ 1722.764025][ T9808] veth0_vlan: left promiscuous mode [ 1722.772030][ T9808] veth1_macvtap: left promiscuous mode [ 1722.778201][ T9808] veth0_macvtap: left promiscuous mode [ 1722.783797][ T9808] veth1_vlan: left promiscuous mode [ 1722.789237][ T9808] veth0_vlan: left promiscuous mode [ 1723.374729][ T9808] team0 (unregistering): Port device team_slave_1 removed [ 1723.430569][ T9808] team0 (unregistering): Port device team_slave_0 removed [ 1723.484361][ T9808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1723.540747][ T9808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1724.070338][ T9808] bond0 (unregistering): Released all slaves [ 1724.645672][ T9808] team0 (unregistering): Port device team_slave_1 removed [ 1724.698436][ T9808] team0 (unregistering): Port device team_slave_0 removed [ 1724.750651][ T9808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1724.803495][ T9808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface