last executing test programs: 13.093757931s ago: executing program 0 (id=2732): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000340)) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x16) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 12.668427372s ago: executing program 1 (id=2734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x61) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ffffffff000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000218500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.106950004s ago: executing program 1 (id=2735): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = fsopen(&(0x7f0000000080)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) socket$inet6_sctp(0xa, 0x1, 0x84) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r3, &(0x7f0000000100)=""/107, 0x6b) write$nci(r3, &(0x7f0000000100)=ANY=[], 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x40, 0x10, 0x4b, 0x4, {{0x6, 0x4, 0x2, 0x10, 0x18, 0x68, 0x0, 0x8, 0x29, 0x0, @loopback, @broadcast, {[@end]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x5, 0x4}, @enum={0x7, 0x1, 0x0, 0x6, 0x4, [{0x10, 0x9}]}, @fwd={0xe}, @enum={0x5}, @union={0x10, 0x1, 0x0, 0x5, 0x1, 0x7fff, [{0x1, 0x3, 0x7fffffff}]}]}}, &(0x7f0000000180), 0x6e, 0x0, 0x0, 0xffffe18b, 0x10000}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b00050000000800171f4e214e22080001"], 0x5c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r5, &(0x7f0000000380)=[{&(0x7f0000000180)=""/117, 0x75}], 0x1) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x0, "ff0000bb719b98fb73e53a0000000600"}) ioctl$TCSETS(r5, 0x5402, &(0x7f00000000c0)={0xd, 0xb, 0xf, 0x3, 0x16, "43db4c9554938a92b052134851317440023bd9"}) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000740)=0x1004af) socket$inet6(0xa, 0x3, 0xfa) 11.050287244s ago: executing program 2 (id=2736): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 10.199568928s ago: executing program 0 (id=2737): socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xd9}) 10.154677769s ago: executing program 3 (id=2738): socket$caif_seqpacket(0x25, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) tgkill(0x0, 0x0, 0x1d) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, 0x0, &(0x7f00000003c0)) 9.159378146s ago: executing program 0 (id=2739): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$vsock_stream(0x28, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000380)=0x7fffffff, 0x4) 9.101105255s ago: executing program 2 (id=2740): r0 = fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x5000003a, r4, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL={0x8, 0x7, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 8.466264088s ago: executing program 3 (id=2741): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = fsopen(&(0x7f0000000080)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) read$nci(0xffffffffffffffff, &(0x7f0000000100)=""/107, 0x6b) write$nci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x40, 0x10, 0x4b, 0x4, {{0x6, 0x4, 0x2, 0x10, 0x18, 0x68, 0x0, 0x8, 0x29, 0x0, @loopback, @broadcast, {[@end]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x5, 0x4}, @enum={0x7, 0x1, 0x0, 0x6, 0x4, [{0x10, 0x9}]}, @fwd={0xe}, @enum={0x5}, @union={0x10, 0x1, 0x0, 0x5, 0x1, 0x7fff, [{0x1, 0x3, 0x7fffffff}]}]}}, &(0x7f0000000180), 0x6e, 0x0, 0x0, 0xffffe18b, 0x10000}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b00050000000800171f4e214e22080001"], 0x5c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000180)=""/117, 0x75}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x0, "ff0000bb719b98fb73e53a0000000600"}) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000740)=0x1004af) socket$inet6(0xa, 0x3, 0xfa) 7.93390343s ago: executing program 2 (id=2742): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) io_setup(0x5, &(0x7f0000000e80)=0x0) io_pgetevents(r0, 0x1, 0x1, &(0x7f00000000c0)=[{}], 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0xa) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_submit(r0, 0x0, &(0x7f0000001580)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0xd54b, 0x2, 0x4, 0x345}) r5 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000840)=""/225, &(0x7f0000000540)=0xe1) syz_usb_control_io$hid(r5, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0xb7b4, &(0x7f0000000140)) io_uring_enter(r4, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x14) 7.557716991s ago: executing program 3 (id=2743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x61) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ffffffff000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000218500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.855220608s ago: executing program 3 (id=2744): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 5.712857171s ago: executing program 1 (id=2745): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000340)) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x16) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 5.440313641s ago: executing program 0 (id=2746): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000440)="66baa000b842878779efb805000000b9006000000f01c12e0f1dfdf236f01186d7f7000066420f380599f93f000066b83e018ed80f01c88f8970948547000000400f096567460f08", 0x48}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.318366015s ago: executing program 1 (id=2747): socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xd9}) 4.179610239s ago: executing program 2 (id=2748): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.793113824s ago: executing program 1 (id=2749): socket$caif_seqpacket(0x25, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) tgkill(0x0, 0x0, 0x1d) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, 0x0, &(0x7f00000003c0)) 2.728847762s ago: executing program 2 (id=2750): r0 = fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x5000003a, r4, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL={0x8, 0x7, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 2.674864852s ago: executing program 0 (id=2751): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = fsopen(&(0x7f0000000080)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) socket$inet6_sctp(0xa, 0x1, 0x84) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) read$nci(0xffffffffffffffff, 0x0, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x40, 0x10, 0x4b, 0x4, {{0x6, 0x4, 0x2, 0x10, 0x18, 0x68, 0x0, 0x8, 0x29, 0x0, @loopback, @broadcast, {[@end]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x5, 0x4}, @enum={0x7, 0x1, 0x0, 0x6, 0x4, [{0x10, 0x9}]}, @fwd={0xe}, @enum={0x5}, @union={0x10, 0x1, 0x0, 0x5, 0x1, 0x7fff, [{0x1, 0x3, 0x7fffffff}]}]}}, &(0x7f0000000180), 0x6e, 0x0, 0x0, 0xffffe18b, 0x10000}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b00050000000800171f4e214e22080001"], 0x5c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000180)=""/117, 0x75}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x0, "ff0000bb719b98fb73e53a0000000600"}) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000740)=0x1004af) socket$inet6(0xa, 0x3, 0xfa) 1.768613815s ago: executing program 2 (id=2752): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @val={0x2, 0x87, 0x80, 0xfc, 0xb, 0x80}, @eth={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@can={0xc, {{0x3, 0x0, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "8481433c13e736b4"}}}}}, 0x28) sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0xffffff99}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="e8000000000000001701000002000000cf00000062783c54cdc47da6cdb7f03d8cab5abe1a2c7fba3106730d09833a5f362901e8998d1bdb7b17d2231b63942a4e156500be1246b02efe051a238dc81ee8438f6b2ff7e93b21ff348844f5e5a67df0de01ec340585f874125320137c0bd3c5ea253f30729a229af1f07def7e9c5681f97cb16eb40f0447708b51899084186b7ef0e9431a107bf991abef4bbe24aa287d12171617a1748f0d13a7951392b8c8bd22c7d29d83480a7d720f738e8b2e22d5d6adb8656c6be7f8d4c74b19e9be637735447ed3b0d157c47581a13a9ca3cadaee1b605a000000000018000000000000001701000004000001070000000000000018000000000000001701000003000000000000000000000018000000000000001701000004000000070000000000000018000000000000001701000004000000800000000000000018000000000000001701000004000000e50a0000000000004000000000000000170100000200000025000000bd2dfdf3a35167789d1e86eb11d3da70196a98ded037398fd10a44e4483892f9e41494aeae000000000000000000000000000000170100000200000000000000a1525e4edb3ed20038351cbec9986b7f1548bae5344672d70bc4d90e089d8633b56f8225904f42e78f6230ee768d387680c1bf7e20c820e147bd8f79440392b7eefd4c5864e0f2a352fd407542c5ea9c24721e1a50f1c8fbc4e8483928334ef4890430eaf0a72d1e68b1d11113c773cd53225e60024023b723f721683d79a8533a6cd2b3b7eb0862c4f44eb51800000000000000170100000300000000000000000000003000000000000000000000e186f696fd1013a29e3da8955ad005d353361442a1000000000000000000000000000000008fb8960464426840b10d787ac586579c9c4d60a3e27a71ecb0b4143f970ce5ea4801a1a383fdd533c730259c405cb1e2b4ffc4de079c810c2900010eed1e00d253c25b74fc946869b75397a8c5fd9a26c45f9d327d5c577dfba562a6919210a820089b4245840b2c1eecd2865bc9f030fb50d8cdb6e494486e97a2c075809c"], 0x200, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000000017010000040000000900000000005000000000000000170100000200000038000000ad9d57ae1a34cd169d6fad8561a7ecad9a52c724a11e24510fc61cfeb3470c372d2eff433cea2fec76c92d3482c3c6692d8275cd566690ad000000001800000000000000170100000300000000000000000000004001000000000000170100000200000028010000526b0e047fbc4fc252eaaa51f7070028035fd68fb6a92539435a12fdd225925548abd17a81e91752f591a67510f95fed70277e530a0b2df40e11706c22ec31fa53c1633bdd18cae8d5f81a9cdbf6cbe2071e0bc29a15a0f8da17b970b2a255f66034ee2b8d5279aebd84430400f736cc8877f63cf74b1ea57afcffff685b654790d2808056973ed5942a0b1eff9f9a579ff973f5ea72daa97da16b68e3673a015aba3a67d562dcf23d9c0d49fad7dc7a393c5930587e7134f5223a8d448c9eea6096d5daee0474879430adc1c28c5261a66ccbc39669576bb8e4cf5ebe4b2bd49a4edd6323179758dd152f4467c2de203fa6d1221b0c0d11e37a6e3a2b484bc9c07b9f91f394da7fe4bea5dcabafc0e4add1cfb250702f606ded8df35eff331aedfd9aacc8b7656d0000000018000000000000001701000004000000ed0e000000000000"], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000ac0)="e57b2098eebbf00e85c066cd616ac4c7f7aad46ad25398631c11a50d045d08af9c20922a4d95b0e6f376a6acf9baffa30229d37793c31505429b9aeb02ebbce4a2", 0x41}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000170100000300000000000000000000001800000000000000170100000400000007000800000000000000000000000000170100000400000001000000000000000000000000170100000200000065000000433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d3fda90bbe4fc93ce397e33566a5f1637eabb82231e64719d3529d653ab937022831b3a638704fe05ac900800000000000000000"], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 1.567018698s ago: executing program 0 (id=2753): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = fsopen(&(0x7f0000000080)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) socket$inet6_sctp(0xa, 0x1, 0x84) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r3, &(0x7f0000000100)=""/107, 0x6b) write$nci(r3, &(0x7f0000000100)=ANY=[], 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x40, 0x10, 0x4b, 0x4, {{0x6, 0x4, 0x2, 0x10, 0x18, 0x68, 0x0, 0x8, 0x29, 0x0, @loopback, @broadcast, {[@end]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x5, 0x4}, @enum={0x7, 0x1, 0x0, 0x6, 0x4, [{0x10, 0x9}]}, @fwd={0xe}, @enum={0x5}, @union={0x10, 0x1, 0x0, 0x5, 0x1, 0x7fff, [{0x1, 0x3, 0x7fffffff}]}]}}, &(0x7f0000000180), 0x6e, 0x0, 0x0, 0xffffe18b, 0x10000}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b00050000000800171f4e214e22080001"], 0x5c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r5, &(0x7f0000000380)=[{&(0x7f0000000180)=""/117, 0x75}], 0x1) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x0, "ff0000bb719b98fb73e53a0000000600"}) ioctl$TCSETS(r5, 0x5402, &(0x7f00000000c0)={0xd, 0xb, 0xf, 0x3, 0x16, "43db4c9554938a92b052134851317440023bd9"}) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000740)=0x1004af) socket$inet6(0xa, 0x3, 0xfa) 210.426018ms ago: executing program 3 (id=2754): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$vsock_stream(0x28, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000380)=0x7fffffff, 0x4) 4.40451ms ago: executing program 1 (id=2755): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000340)) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x16) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 0s ago: executing program 3 (id=2756): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) io_setup(0x5, &(0x7f0000000e80)=0x0) io_pgetevents(r0, 0x1, 0x1, &(0x7f00000000c0)=[{}], 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0xa) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_submit(r0, 0x0, &(0x7f0000001580)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0xd54b, 0x2, 0x4, 0x345}) r5 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000840)=""/225, &(0x7f0000000540)=0xe1) syz_usb_control_io$hid(r5, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0xb7b4, &(0x7f0000000140)) io_uring_enter(r4, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x14) kernel console output (not intermixed with test programs): .448518][ T969] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 783.660784][ T969] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 783.686966][ T969] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 783.714968][ T969] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 783.727763][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.745348][T10760] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 783.779851][ T969] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 783.981046][ T969] usb 3-1: USB disconnect, device number 40 [ 784.005838][T10494] udevd[10494]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 785.124154][T10782] overlayfs: missing 'lowerdir' [ 789.284802][ T5779] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 789.694259][ T5779] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 789.814902][ T5779] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 789.838111][ T5779] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 789.850395][ T5779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.873045][T10818] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 789.910765][ T5779] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 790.150768][ T5779] usb 2-1: USB disconnect, device number 37 [ 790.256880][T10830] overlayfs: missing 'lowerdir' [ 794.078447][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 794.306551][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.338607][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.370160][ T9] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 794.390954][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.422270][ T9] usb 2-1: config 0 descriptor?? [ 794.488476][ T5870] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 794.718121][ T5870] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 794.739377][ T5870] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 794.758797][ T5870] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 794.768015][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.824526][T10871] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 794.981613][ T5870] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 795.336057][ T5870] usb 4-1: USB disconnect, device number 31 [ 795.634790][ T9] hid-led 0003:27B8:01ED.0012: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 795.684870][ T9] hid-led 0003:27B8:01ED.0012: ThingM blink(1) initialized [ 796.268863][T10881] overlayfs: missing 'lowerdir' [ 796.744369][ T5811] usb 2-1: USB disconnect, device number 38 [ 796.806833][T10882] fido_id[10882]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 800.121111][T10920] overlayfs: missing 'lowerdir' [ 804.988887][T10956] overlayfs: missing 'lowerdir' [ 807.978689][ T27] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 808.238576][ T27] usb 1-1: device descriptor read/64, error -71 [ 808.518425][ T27] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 808.699402][ T27] usb 1-1: device descriptor read/64, error -71 [ 808.831784][ T27] usb usb1-port1: attempt power cycle [ 809.665274][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.671729][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.368806][T10992] overlayfs: missing 'lowerdir' [ 810.830690][ T27] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 811.088609][ T27] usb 1-1: device not accepting address 34, error -71 [ 813.568633][ T5870] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 813.821389][ T5870] usb 4-1: config 0 has no interfaces? [ 813.838702][ T5870] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 813.854856][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.885084][ T5870] usb 4-1: config 0 descriptor?? [ 815.636995][T11033] fuse: Bad value for 'fd' [ 817.368853][T11038] overlayfs: missing 'lowerdir' [ 818.303246][ T27] usb 4-1: USB disconnect, device number 32 [ 819.158522][ T5773] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 819.338462][ T5773] usb 1-1: device descriptor read/64, error -71 [ 819.618408][ T5773] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 819.647494][T11060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1345'. [ 819.660455][T11060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1345'. [ 820.638496][ T5773] usb 1-1: device descriptor read/64, error -71 [ 820.758801][ T5773] usb usb1-port1: attempt power cycle [ 821.168662][ T5773] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 821.211083][ T5773] usb 1-1: device descriptor read/8, error -71 [ 821.488461][ T5773] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 821.529248][ T5773] usb 1-1: device descriptor read/8, error -71 [ 821.649974][ T5773] usb usb1-port1: unable to enumerate USB device [ 821.740307][ T5811] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 822.150424][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.389396][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.536123][ T5811] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 822.578393][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.628017][ T5811] usb 2-1: config 0 descriptor?? [ 822.689773][T11082] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1350'. [ 823.279067][T11079] overlayfs: missing 'lowerdir' [ 823.990130][T11069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1346'. [ 824.398802][T11074] orangefs_mount: mount request failed with -4 [ 824.440543][ T5811] hid-led 0003:27B8:01ED.0013: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 824.501193][ T5811] hid-led 0003:27B8:01ED.0013: ThingM blink(1) initialized [ 824.708851][ T5773] usb 2-1: USB disconnect, device number 39 [ 825.557687][T11098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1355'. [ 825.572381][T11098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1355'. [ 826.808434][ T5811] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 827.023835][ T5811] usb 1-1: config 0 has no interfaces? [ 827.050024][ T5811] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 827.183223][ T5779] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 827.233855][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.251890][ T5811] usb 1-1: config 0 descriptor?? [ 827.398739][ T5779] usb 2-1: device descriptor read/64, error -71 [ 827.768805][T11118] process 'syz.3.1358' launched './file0' with NULL argv: empty string added [ 828.083331][ T5779] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 828.248667][ T5779] usb 2-1: device descriptor read/64, error -71 [ 829.661767][ T5779] usb usb2-port1: attempt power cycle [ 830.343363][T11132] autofs4:pid:11132:autofs_fill_super: called with bogus options [ 831.268172][ T27] usb 1-1: USB disconnect, device number 40 [ 835.068681][ T5773] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 836.168426][ T5773] usb 3-1: device descriptor read/64, error -71 [ 836.335061][T11183] binder: 11182:11183 ioctl c0306201 2000000002c0 returned -14 [ 836.448437][ T5773] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 836.538422][ T23] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 836.668406][ T5773] usb 3-1: device descriptor read/64, error -71 [ 836.714841][T11189] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 836.829210][ T5773] usb usb3-port1: attempt power cycle [ 836.838537][ T23] usb 4-1: config 0 has no interfaces? [ 836.844087][ T23] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 836.955454][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.000372][ T23] usb 4-1: config 0 descriptor?? [ 838.648565][ T5773] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 838.919950][ T5773] usb 3-1: device not accepting address 43, error -71 [ 839.645101][T11208] autofs4:pid:11208:autofs_fill_super: called with bogus options [ 841.688793][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 843.373888][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.397767][ T27] usb 4-1: USB disconnect, device number 33 [ 843.408493][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.428454][ T9] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 843.437886][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.491666][ T9] usb 3-1: config 0 descriptor?? [ 845.375542][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 845.408124][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 845.470556][ T9] usb 3-1: USB disconnect, device number 45 [ 846.093539][T11245] autofs4:pid:11245:autofs_fill_super: called with bogus options [ 847.219887][T11249] 9pnet_fd: Insufficient options for proto=fd [ 848.146888][T11260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1397'. [ 848.167501][T11260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1397'. [ 850.328734][ T969] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 850.534807][ T969] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 850.543424][ T969] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.568661][ T969] usb 4-1: config 0 has no interfaces? [ 850.606471][ T969] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 850.668629][ T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.702909][ T969] usb 4-1: config 0 descriptor?? [ 850.789588][ T5811] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 851.164563][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.192800][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.284237][ T5811] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 851.298704][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.324140][ T5811] usb 2-1: config 0 descriptor?? [ 853.899007][ T5811] hid-led 0003:27B8:01ED.0014: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 853.935016][ T5811] hid-led 0003:27B8:01ED.0014: ThingM blink(1) initialized [ 854.178616][ T5811] usb 2-1: USB disconnect, device number 43 [ 854.343153][ T969] usb 4-1: USB disconnect, device number 34 [ 854.556005][T11300] 9pnet_fd: Insufficient options for proto=fd [ 856.736866][T11319] autofs4:pid:11319:autofs_fill_super: called with bogus options [ 857.459702][T11324] ufs: You didn't specify the type of your ufs filesystem [ 857.459702][T11324] [ 857.459702][T11324] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 857.459702][T11324] [ 857.459702][T11324] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 857.490792][T11324] ufs: ufstype=old is supported read-only [ 857.498204][T11324] ufs: ufs_fill_super(): bad magic number [ 861.428678][T11335] orangefs_mount: mount request failed with -4 [ 861.629516][T11339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1410'. [ 861.644935][T11339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1410'. [ 863.042133][T11343] overlayfs: missing 'lowerdir' [ 867.478902][T11367] 9pnet_fd: Insufficient options for proto=fd [ 868.891980][T11384] overlayfs: missing 'lowerdir' [ 870.503374][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.541703][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.607474][T11409] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1429'. [ 871.713443][T11409] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1429'. [ 871.949321][T11412] 9pnet_fd: Insufficient options for proto=fd [ 872.625334][T11430] overlayfs: missing 'lowerdir' [ 875.075534][T11452] 9pnet_fd: Insufficient options for proto=fd [ 876.741956][T11463] overlayfs: missing 'lowerdir' [ 877.900011][T11469] ntfs3: nbd1: try to read out of volume at offset 0x0 [ 878.310965][T11469] netlink: 'syz.1.1447': attribute type 10 has an invalid length. [ 878.612150][T11460] nfs: Unknown parameter 'ÿÿÿÿ' [ 878.907255][T11469] team0: Port device dummy0 added [ 881.682902][T11497] 9pnet_fd: Insufficient options for proto=fd [ 881.767581][T11504] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1449'. [ 881.780837][T11504] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1449'. [ 884.921826][T11521] overlayfs: missing 'lowerdir' [ 886.091225][T11526] binder: 11525:11526 ioctl c0306201 2000000002c0 returned -14 [ 890.788542][T11549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1467'. [ 890.801192][T11549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1467'. [ 892.801776][T11559] overlayfs: missing 'lowerdir' [ 894.476814][T11572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1474'. [ 895.018780][ T27] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 895.110898][T11571] orangefs_mount: mount request failed with -4 [ 895.321370][ T27] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 895.411942][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.462437][ T27] usb 4-1: config 0 has no interfaces? [ 895.468454][ T27] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 895.477696][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.539492][ T27] usb 4-1: config 0 descriptor?? [ 899.618575][T11597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1478'. [ 899.632548][T11597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1478'. [ 899.925315][ T5811] usb 4-1: USB disconnect, device number 35 [ 901.131792][T11605] overlayfs: missing 'lowerdir' [ 906.668525][T11637] binder: BINDER_SET_CONTEXT_MGR already set [ 906.679343][T11637] binder: 11636:11637 ioctl 4018620d 200000000100 returned -16 [ 907.212089][T11639] overlayfs: missing 'lowerdir' [ 908.079422][T11637] binder: BINDER_SET_CONTEXT_MGR already set [ 908.148435][ T5779] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 908.209825][T11637] binder: 11636:11637 ioctl 4018620d 200000004a80 returned -16 [ 908.230177][T11643] binder: 11636:11643 ioctl c0306201 2000000002c0 returned -14 [ 914.648625][ T5811] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 914.879630][ T5811] usb 1-1: Using ep0 maxpacket: 16 [ 914.885712][ T5811] usb 1-1: no configurations [ 914.890718][ T5811] usb 1-1: can't read configurations, error -22 [ 915.068402][ T5811] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 915.293503][ T5811] usb 1-1: Using ep0 maxpacket: 16 [ 915.329322][ T5811] usb 1-1: no configurations [ 915.333997][ T5811] usb 1-1: can't read configurations, error -22 [ 915.348627][ T5811] usb usb1-port1: attempt power cycle [ 915.863532][ T5811] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 915.899688][ T5811] usb 1-1: Using ep0 maxpacket: 16 [ 915.909938][ T5811] usb 1-1: no configurations [ 916.672720][ T5811] usb 1-1: can't read configurations, error -22 [ 916.838454][ T5811] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 917.189101][ T5811] usb 1-1: device not accepting address 44, error -71 [ 917.206504][ T5811] usb usb1-port1: unable to enumerate USB device [ 917.697055][T11693] binder_alloc: 11691: binder_alloc_buf, no vma [ 918.898423][ T5811] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 919.098645][ T5811] usb 4-1: Using ep0 maxpacket: 16 [ 919.115846][ T5811] usb 4-1: no configurations [ 919.123668][ T5811] usb 4-1: can't read configurations, error -22 [ 919.288571][ T5811] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 920.301476][ T5811] usb 4-1: Using ep0 maxpacket: 16 [ 920.333798][ T5811] usb 4-1: no configurations [ 920.340127][ T5811] usb 4-1: can't read configurations, error -22 [ 920.367526][ T5811] usb usb4-port1: attempt power cycle [ 920.698458][T11723] binder_alloc: 11722: binder_alloc_buf, no vma [ 920.878432][ T5811] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 920.951129][ T5811] usb 4-1: Using ep0 maxpacket: 16 [ 920.982736][ T5811] usb 4-1: no configurations [ 921.009848][ T5811] usb 4-1: can't read configurations, error -22 [ 921.178710][ T5811] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 921.441515][ T5811] usb 4-1: device not accepting address 40, error -71 [ 921.751074][ T5811] usb usb4-port1: unable to enumerate USB device [ 925.118674][ T5773] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 925.338452][ T5773] usb 2-1: Using ep0 maxpacket: 16 [ 925.407498][ T5773] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.418438][ T5773] usb 2-1: config 0 has no interfaces? [ 925.500474][ T5773] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 925.509739][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.517925][ T5773] usb 2-1: Product: syz [ 925.522602][ T5773] usb 2-1: Manufacturer: syz [ 925.548946][ T5773] usb 2-1: SerialNumber: syz [ 925.584793][ T5773] usb 2-1: config 0 descriptor?? [ 928.158532][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 928.460176][ T5811] usb 2-1: USB disconnect, device number 44 [ 928.485367][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.538143][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 928.584048][ T9] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 928.631782][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.699544][ T9] usb 1-1: config 0 descriptor?? [ 930.559469][ T9] hid-led 0003:27B8:01ED.0015: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 930.605817][ T9] hid-led 0003:27B8:01ED.0015: ThingM blink(1) initialized [ 931.255190][T11817] binder: BINDER_SET_CONTEXT_MGR already set [ 931.276830][T11817] binder: 11815:11817 ioctl 4018620d 200000000100 returned -16 [ 931.305772][T11817] binder: BINDER_SET_CONTEXT_MGR already set [ 931.312202][T11817] binder: 11815:11817 ioctl 4018620d 200000004a80 returned -16 [ 931.850532][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.856922][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.150821][ T27] usb 1-1: USB disconnect, device number 45 [ 932.848593][ T27] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 933.258448][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 933.423086][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.518324][ T27] usb 1-1: config 0 has no interfaces? [ 933.546666][ T27] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 933.574062][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.612719][ T27] usb 1-1: Product: syz [ 933.624338][ T27] usb 1-1: Manufacturer: syz [ 933.658820][ T27] usb 1-1: SerialNumber: syz [ 933.683296][ T27] usb 1-1: config 0 descriptor?? [ 935.902020][ T5870] usb 1-1: USB disconnect, device number 46 [ 936.558789][T11849] binder: BINDER_SET_CONTEXT_MGR already set [ 936.639067][T11849] binder: 11847:11849 ioctl 4018620d 200000000100 returned -16 [ 936.685587][T11849] binder: BINDER_SET_CONTEXT_MGR already set [ 936.705743][T11849] binder: 11847:11849 ioctl 4018620d 200000004a80 returned -16 [ 941.868497][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 942.068549][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 942.077517][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 942.128379][ T9] usb 2-1: config 0 has no interfaces? [ 942.162345][ T9] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 942.198311][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.206405][ T9] usb 2-1: Product: syz [ 942.248398][ T9] usb 2-1: Manufacturer: syz [ 942.253253][ T9] usb 2-1: SerialNumber: syz [ 942.289637][ T9] usb 2-1: config 0 descriptor?? [ 944.101881][ T5773] usb 2-1: USB disconnect, device number 45 [ 948.707132][T11914] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 948.977183][T11929] loop7: detected capacity change from 0 to 1 [ 949.823077][T11929] loop7: detected capacity change from 1 to 0 [ 952.031042][T11953] nfs: Unknown parameter 'ÿÿÿÿ' [ 952.135184][ T9] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 953.748427][ T9] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 953.763661][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.798443][ T9] usb 4-1: config 0 has no interfaces? [ 953.824625][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 953.846144][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.871306][ T9] usb 4-1: config 0 descriptor?? [ 954.351164][T11972] ntfs3: nbd2: try to read out of volume at offset 0x0 [ 958.332885][ T8] usb 4-1: USB disconnect, device number 41 [ 965.448844][T12040] nfs: Unknown parameter 'ÿÿÿÿ' [ 966.439382][T12052] block device autoloading is deprecated and will be removed. [ 970.344819][T12083] nfs: Unknown parameter 'ÿÿÿÿ' [ 976.199563][T12118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1614'. [ 978.202388][T12117] orangefs_mount: mount request failed with -4 [ 985.720027][T12171] loop7: detected capacity change from 0 to 1 [ 986.692632][T12171] loop7: detected capacity change from 1 to 0 [ 990.805075][T12203] loop7: detected capacity change from 0 to 1 [ 990.978804][T12203] loop7: detected capacity change from 1 to 0 [ 994.217020][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.231941][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.134708][ T27] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 996.350748][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.396520][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.548353][ T27] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 996.571776][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.654601][ T27] usb 4-1: config 0 descriptor?? [ 997.573954][T12245] loop7: detected capacity change from 0 to 1 [ 998.375372][T12245] loop7: detected capacity change from 1 to 0 [ 998.532798][ T27] hid-led 0003:27B8:01ED.0016: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 998.618130][ T27] hid-led 0003:27B8:01ED.0016: ThingM blink(1) initialized [ 998.969027][ T5772] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 1000.601812][ T27] usb 4-1: USB disconnect, device number 42 [ 1012.957615][T12360] netlink: 'syz.0.1671': attribute type 5 has an invalid length. [ 1022.656187][ T28] audit: type=1800 audit(1772701758.262:6): pid=12390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1688" name="bus" dev="ramfs" ino=35364 res=0 errno=0 [ 1029.322534][T12434] nfs: Unknown parameter 'ÿÿÿÿ' [ 1030.938516][ T28] audit: type=1800 audit(1772701766.542:7): pid=12442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1698" name="bus" dev="ramfs" ino=35503 res=0 errno=0 [ 1036.238937][ T28] audit: type=1800 audit(1772701771.842:8): pid=12474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1709" name="bus" dev="ramfs" ino=35560 res=0 errno=0 [ 1036.336703][T12480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1705'. [ 1039.291030][T12505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1715'. [ 1039.915504][T12510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1706'. [ 1040.064636][T12503] orangefs_mount: mount request failed with -4 [ 1041.978356][T12509] orangefs_mount: mount request failed with -4 [ 1045.038824][ T28] audit: type=1800 audit(1772701780.622:9): pid=12524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1720" name="bus" dev="ramfs" ino=35680 res=0 errno=0 [ 1045.548426][ T8888] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 1045.769240][ T8888] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1045.794511][ T8888] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1045.824796][ T8888] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.868292][ T8888] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1045.908994][ T8888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1046.078376][ T8888] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1046.118119][ T8888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.130395][ T8888] usb 2-1: config 0 descriptor?? [ 1046.548490][ T8888] usbhid 2-1:0.0: can't add hid device: -71 [ 1046.554506][ T8888] usbhid: probe of 2-1:0.0 failed with error -71 [ 1047.527448][ T8888] usb 2-1: USB disconnect, device number 46 [ 1047.872145][T12544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1721'. [ 1050.331322][T12551] orangefs_mount: mount request failed with -4 [ 1052.288361][ T28] audit: type=1800 audit(1772701787.872:10): pid=12567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1730" name="bus" dev="ramfs" ino=35795 res=0 errno=0 [ 1052.462269][ T5870] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1052.690339][ T5870] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1052.728395][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.759584][ T5870] usb 1-1: config 0 descriptor?? [ 1053.739848][ T5870] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1054.512884][ T5870] gspca_stv06xx: I2C: Read error writing address: -71 [ 1054.543873][ T5870] usb 1-1: USB disconnect, device number 47 [ 1054.722190][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.729204][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.486227][ T5811] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1059.942192][ T5811] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1059.968366][ T5811] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1060.000014][ T5811] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.058382][ T5811] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1060.095163][ T5811] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1060.112236][ T5811] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1060.165199][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.215991][ T5811] usb 2-1: config 0 descriptor?? [ 1061.712848][T12612] geneve1: entered promiscuous mode [ 1061.779547][T12612] macsec1: entered promiscuous mode [ 1061.865595][T12612] macsec1: entered allmulticast mode [ 1061.889106][T12612] geneve1: entered allmulticast mode [ 1061.921775][ T5811] usbhid 2-1:0.0: can't add hid device: -71 [ 1061.933752][ T5811] usbhid: probe of 2-1:0.0 failed with error -71 [ 1062.009877][ T5811] usb 2-1: USB disconnect, device number 47 [ 1064.432022][T12626] orangefs_mount: mount request failed with -4 [ 1065.218810][ T28] audit: type=1800 audit(1772701800.802:11): pid=12629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1742" name="bus" dev="ramfs" ino=36898 res=0 errno=0 [ 1066.717600][ T5773] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 1067.014001][ T5773] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1067.154401][ T5773] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1067.182172][ T5773] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.236436][ T5773] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1067.284675][ T5773] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1067.309747][ T5773] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1067.340495][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.349866][ T5773] usb 3-1: config 0 descriptor?? [ 1068.977772][ T5773] usbhid 3-1:0.0: can't add hid device: -71 [ 1069.018473][ T5773] usbhid: probe of 3-1:0.0 failed with error -71 [ 1069.059491][ T5773] usb 3-1: USB disconnect, device number 46 [ 1069.854157][T12664] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1761'. [ 1071.826350][T12663] orangefs_mount: mount request failed with -4 [ 1078.408822][ T8888] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1079.142676][ T8888] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1079.159169][ T8888] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1079.208440][ T8888] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.230272][ T8888] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1079.258425][ T8888] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1079.271084][ T8888] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1079.290329][ T8888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.325982][ T8888] usb 3-1: config 0 descriptor?? [ 1081.242909][ T8888] usbhid 3-1:0.0: can't add hid device: -71 [ 1081.288530][ T8888] usbhid: probe of 3-1:0.0 failed with error -71 [ 1081.349547][ T8888] usb 3-1: USB disconnect, device number 47 [ 1086.359022][T12766] ntfs3: nbd2: try to read out of volume at offset 0x0 [ 1086.417881][T12766] netlink: 'syz.2.1787': attribute type 10 has an invalid length. [ 1086.451405][T12766] team0: Port device dummy0 added [ 1086.468487][ T9] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 1086.720841][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1086.738476][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1086.772001][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.798431][ T9] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1086.830875][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1086.854470][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1086.886431][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.923398][ T9] usb 2-1: config 0 descriptor?? [ 1087.360155][ T9] ryos 0003:1E7D:3138.0017: item fetching failed at offset 4/5 [ 1087.376866][ T9] ryos 0003:1E7D:3138.0017: parse failed [ 1087.389577][ T9] ryos: probe of 0003:1E7D:3138.0017 failed with error -22 [ 1087.558057][T12765] usb 2-1: USB disconnect, device number 48 [ 1089.722967][T12784] nfs: Unknown parameter 'ÿÿÿÿ' [ 1091.519073][T12791] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1097.012590][T12819] nfs: Unknown parameter 'ÿÿÿÿ' [ 1102.298494][ T8888] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 1102.530265][ T8888] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1102.541806][ T8888] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1102.552848][ T8888] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.570575][ T8888] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1102.610929][ T8888] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1102.617800][ T8888] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1102.630817][ T8888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.675072][ T8888] usb 3-1: config 0 descriptor?? [ 1104.876499][ T8888] ryos 0003:1E7D:3138.0018: item fetching failed at offset 4/5 [ 1104.892747][ T8888] ryos 0003:1E7D:3138.0018: parse failed [ 1104.908295][ T8888] ryos: probe of 0003:1E7D:3138.0018 failed with error -22 [ 1105.091147][ T8888] usb 3-1: USB disconnect, device number 48 [ 1111.866778][ T27] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1112.123710][T12891] nfs: Unknown parameter 'ÿÿÿÿ' [ 1112.165585][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 1112.230492][ T27] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1112.263976][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.308436][ T27] usb 3-1: Product: syz [ 1112.338386][ T27] usb 3-1: Manufacturer: syz [ 1112.344331][ T27] usb 3-1: SerialNumber: syz [ 1112.668342][ T27] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1113.028454][ T27] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1113.538477][ T27] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1113.589961][ T27] usb 3-1: media controller created [ 1113.676922][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1113.736169][ T27] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1113.842253][ T27] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 1115.285980][ T27] usb 3-1: USB disconnect, device number 49 [ 1115.443916][T12903] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1827'. [ 1115.780279][T12903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.788627][T12903] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.173286][T12908] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1827'. [ 1116.184158][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.190746][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.650930][T12923] nfs: Unknown parameter 'ÿÿÿÿ' [ 1122.481724][T12939] overlayfs: missing 'lowerdir' [ 1123.359684][T12932] orangefs_mount: mount request failed with -4 [ 1132.711943][T12979] overlayfs: missing 'lowerdir' [ 1134.378316][ T27] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 1134.583639][ T27] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1134.639495][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1134.675507][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.698227][ T27] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1134.738607][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1134.778726][ T27] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1134.787847][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.855397][ T27] usb 1-1: config 0 descriptor?? [ 1136.194113][ T27] ryos 0003:1E7D:3138.0019: unknown main item tag 0x3 [ 1136.232732][ T27] ryos 0003:1E7D:3138.0019: item fetching failed at offset 4/5 [ 1136.308577][ T27] ryos 0003:1E7D:3138.0019: parse failed [ 1136.453144][ T27] ryos: probe of 0003:1E7D:3138.0019 failed with error -22 [ 1137.179750][ T27] usb 1-1: USB disconnect, device number 48 [ 1140.681878][T13028] overlayfs: missing 'lowerdir' [ 1141.707592][T13018] nfs: Unknown parameter 'ÿÿÿÿ' [ 1141.904136][T13034] 9pnet_fd: Insufficient options for proto=fd [ 1142.032316][T13036] binder: BINDER_SET_CONTEXT_MGR already set [ 1143.450728][T13036] binder: 13035:13036 ioctl 4018620d 200000000100 returned -16 [ 1143.509581][T13036] binder: BINDER_SET_CONTEXT_MGR already set [ 1143.515647][T13036] binder: 13035:13036 ioctl 4018620d 200000004a80 returned -16 [ 1145.109419][T13052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1866'. [ 1145.599605][T13049] orangefs_mount: mount request failed with -4 [ 1146.123140][T13058] kvm: MONITOR instruction emulated as NOP! [ 1146.921876][T13066] overlayfs: missing 'lowerdir' [ 1153.541320][T13100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1876'. [ 1153.826732][T13099] orangefs_mount: mount request failed with -4 [ 1157.412159][T13120] ntfs3: nbd2: try to read out of volume at offset 0x0 [ 1157.811904][T13120] netlink: 'syz.2.1883': attribute type 10 has an invalid length. [ 1158.359538][T13123] orangefs_mount: mount request failed with -4 [ 1158.790043][T13134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1886'. [ 1160.683997][ T5772] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 1160.686987][ T28] audit: type=1326 audit(1772701896.292:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13137 comm="syz.1.1882" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad2d99c799 code=0x0 [ 1160.761600][T13133] orangefs_mount: mount request failed with -4 [ 1163.444336][T13153] sctp: [Deprecated]: syz.2.1893 (pid 13153) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1163.444336][T13153] Use struct sctp_sack_info instead [ 1164.783035][T13166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1895'. [ 1165.347635][T13165] orangefs_mount: mount request failed with -4 [ 1165.564647][T13173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1897'. [ 1167.249996][T13172] orangefs_mount: mount request failed with -4 [ 1168.507997][T13192] ntfs3: nbd1: try to read out of volume at offset 0x0 [ 1168.616043][T13193] netlink: 'syz.1.1902': attribute type 10 has an invalid length. [ 1169.930537][T13197] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1169.938098][ T5773] IPVS: starting estimator thread 0... [ 1170.152931][T13208] IPVS: using max 16 ests per chain, 38400 per kthread [ 1170.308444][ T5773] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 1170.532405][ T5773] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1170.552081][ T5773] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1170.566411][ T5773] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.614531][ T5773] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1170.688562][ T5773] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1170.700110][ T5773] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1170.718499][ T5773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.231802][ T5773] usb 1-1: config 0 descriptor?? [ 1171.363345][T13218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1909'. [ 1171.575250][T13217] orangefs_mount: mount request failed with -4 [ 1172.878175][ C0] sched: RT throttling activated [ 1173.119532][ T5773] usbhid 1-1:0.0: can't add hid device: -71 [ 1173.125646][ T5773] usbhid: probe of 1-1:0.0 failed with error -71 [ 1173.171117][ T5773] usb 1-1: USB disconnect, device number 49 [ 1173.906327][T13232] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 1176.239567][T13227] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1913'. [ 1177.601989][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.608618][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.464697][T13244] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1919'. [ 1178.862794][T13243] orangefs_mount: mount request failed with -4 [ 1182.688344][T13275] ntfs3: nbd1: try to read out of volume at offset 0x0 [ 1182.886384][T13272] netlink: 'syz.1.1912': attribute type 10 has an invalid length. [ 1183.220053][T13281] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1183.273542][T13282] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1929'. [ 1183.316124][T13277] kvm: kvm [13276]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1183.327567][T13281] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1183.333837][T13277] kvm: kvm [13276]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1184.905375][T13282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1184.993538][T13282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1185.063782][T13282] bond0 (unregistering): Released all slaves [ 1185.135885][T13281] siw: device registration error -19 [ 1185.539622][T13291] nfs: Unknown parameter 'ÿÿÿÿ' [ 1187.054242][ T5772] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 1188.394540][T13304] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.508301][ T5773] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 1188.781483][ T5773] usb 1-1: config 0 has no interfaces? [ 1188.813627][T13304] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.990398][ T5773] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1189.018464][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1189.809348][ T5773] usb 1-1: Product: syz [ 1189.814373][ T5773] usb 1-1: Manufacturer: syz [ 1189.834330][ T5773] usb 1-1: SerialNumber: syz [ 1189.878409][ T5773] usb 1-1: config 0 descriptor?? [ 1189.923491][T13304] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.175618][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1190.208637][T13304] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.368605][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1190.432695][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1190.454311][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1190.490810][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1190.500363][T13304] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.568339][T10603] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 1190.582190][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1190.584121][T13304] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.634128][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1190.666821][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.709963][T13304] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.772044][T13304] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.802332][T10603] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1190.836205][T10603] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1190.860091][T10603] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.925704][ T5773] usb 1-1: USB disconnect, device number 50 [ 1190.947252][T10603] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1190.971207][T10603] usb 3-1: config 1 has no interface number 0 [ 1190.987372][T10603] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1191.148437][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 1191.154068][T10603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.162430][ T9] usbtmc 2-1:16.0: can't read capabilities [ 1191.193749][T10603] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1191.297963][T13321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.307789][T13321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.323487][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1192.923612][T10603] snd_usb_pod 3-1:1.1: set_interface failed [ 1192.959083][T10603] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1192.987425][T10603] snd_usb_pod: probe of 3-1:1.1 failed with error -71 [ 1193.021532][T10603] usb 3-1: USB disconnect, device number 50 [ 1193.061563][ T5811] usb 2-1: USB disconnect, device number 49 [ 1194.090244][T13334] nfs: Unknown parameter 'ÿÿÿÿ' [ 1201.051168][T13384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1956'. [ 1201.698866][T13383] orangefs_mount: mount request failed with -4 [ 1202.652713][T13390] 9pnet_fd: Insufficient options for proto=fd [ 1202.759787][T13392] binder: BINDER_SET_CONTEXT_MGR already set [ 1202.772534][T13392] binder: 13391:13392 ioctl 4018620d 200000004a80 returned -16 [ 1207.624414][T13425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1967'. [ 1209.130575][T13426] orangefs_mount: mount request failed with -4 [ 1212.808492][ T969] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1212.988657][ T969] usb 1-1: device descriptor read/64, error -71 [ 1213.318483][ T969] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1213.478396][ T969] usb 1-1: device descriptor read/64, error -71 [ 1213.616618][ T969] usb usb1-port1: attempt power cycle [ 1214.058334][ T969] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1214.129882][ T969] usb 1-1: device descriptor read/8, error -71 [ 1214.242953][T13459] ntfs3: nbd1: try to read out of volume at offset 0x0 [ 1214.310609][T13457] netlink: 'syz.1.1974': attribute type 10 has an invalid length. [ 1214.598515][ T5779] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1215.522669][T13469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1978'. [ 1215.945988][T13468] orangefs_mount: mount request failed with -4 [ 1215.948734][ T5779] usb 3-1: Using ep0 maxpacket: 16 [ 1215.960842][ T5779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1215.971987][ T5779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1215.993402][ T5779] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1216.028386][ T5779] usb 3-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 1216.056939][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.234335][ T5779] usb 3-1: config 0 descriptor?? [ 1217.850068][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1217.856975][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.038376][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.048389][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.055324][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.063088][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.073083][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.092716][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.112216][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.157090][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.191777][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.224938][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.270463][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.306442][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.338348][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.373863][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.408404][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.445897][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.480137][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.518247][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.550552][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.587594][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.621233][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.647490][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.748322][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.755225][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.787275][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.810365][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.846635][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.876186][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.896166][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.903906][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1218.999678][T13491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1983'. [ 1219.016600][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1983'. [ 1219.126176][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1219.367687][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1219.572323][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1219.642805][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1219.711552][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1219.728244][ T5779] ortek 0003:05A4:2000.001A: unknown main item tag 0x0 [ 1219.762604][ T5779] ortek 0003:05A4:2000.001A: hidraw0: USB HID v0.00 Device [HID 05a4:2000] on usb-dummy_hcd.2-1/input0 [ 1220.348442][ T5779] usb 3-1: USB disconnect, device number 51 [ 1220.522231][T13499] fido_id[13499]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1220.928528][ T5779] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1221.098348][ T5779] usb 3-1: device descriptor read/64, error -71 [ 1222.168746][ T5779] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1227.692862][T13549] 9pnet_fd: Insufficient options for proto=fd [ 1228.408981][T13559] nfs: Unknown parameter 'ÿÿÿÿ' [ 1233.183825][T13592] 9pnet_fd: Insufficient options for proto=fd [ 1233.406589][T13599] ntfs3: nbd3: try to read out of volume at offset 0x0 [ 1233.473666][T13599] netlink: 'syz.3.2014': attribute type 10 has an invalid length. [ 1233.670501][T13599] team0: Port device dummy0 added [ 1239.948715][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.955131][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.489971][T13643] 9pnet_fd: Insufficient options for proto=fd [ 1245.622192][T13646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2028'. [ 1253.485124][T13684] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2037'. [ 1254.640984][T13684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.648418][T13684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.731256][T13685] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2037'. [ 1256.602324][T13711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2044'. [ 1257.108492][T13710] orangefs_mount: mount request failed with -4 [ 1264.019983][T13746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2054'. [ 1264.701539][T13745] orangefs_mount: mount request failed with -4 [ 1266.489365][T13758] netem: change failed [ 1269.957122][T13788] Bluetooth: MGMT ver 1.22 [ 1271.966973][T13794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2063'. [ 1272.418742][T13793] orangefs_mount: mount request failed with -4 [ 1277.601168][T13826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2074'. [ 1277.772196][T13830] No such timeout policy "syz1" [ 1278.659816][T13825] orangefs_mount: mount request failed with -4 [ 1282.702098][T13849] binder: BINDER_SET_CONTEXT_MGR already set [ 1282.712053][T13849] binder: 13848:13849 ioctl 4018620d 200000000100 returned -16 [ 1282.762621][T13849] binder: 13848:13849 ioctl c0306201 0 returned -14 [ 1282.800122][T13849] binder: BINDER_SET_CONTEXT_MGR already set [ 1282.806187][T13849] binder: 13848:13849 ioctl 4018620d 200000004a80 returned -16 [ 1284.193838][T13856] nfs: Unknown parameter 'ÿÿÿÿ' [ 1286.430368][T13872] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2084'. [ 1286.876820][T13866] orangefs_mount: mount request failed with -4 [ 1288.195690][T13885] input: syz0 as /devices/virtual/input/input34 [ 1289.299336][T13889] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2090'. [ 1291.258433][ T5870] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1291.568061][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.578425][ T5870] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1291.590676][ T5870] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1291.601019][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.688592][ T5870] usb 2-1: config 0 descriptor?? [ 1294.370597][T13924] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2097'. [ 1295.396684][T13920] orangefs_mount: mount request failed with -4 [ 1295.434616][T10603] usb 2-1: USB disconnect, device number 50 [ 1298.235362][T13960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2110'. [ 1298.313978][T13956] nfs: Unknown parameter 'ÿÿÿÿ' [ 1300.623214][T13959] orangefs_mount: mount request failed with -4 [ 1300.668770][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.675145][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.189878][T13973] binder: 13972:13973 ioctl c0306201 0 returned -14 [ 1302.365647][T13987] 9pnet_fd: Insufficient options for proto=fd [ 1302.445716][T13989] binder: BINDER_SET_CONTEXT_MGR already set [ 1302.454084][T13989] binder: 13988:13989 ioctl 4018620d 200000000100 returned -16 [ 1303.045499][T13997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2121'. [ 1303.090367][T13989] binder: BINDER_SET_CONTEXT_MGR already set [ 1303.096556][T13989] binder: 13988:13989 ioctl 4018620d 200000004a80 returned -16 [ 1303.227392][T13996] binder: 13988:13996 ioctl c0306201 2000000002c0 returned -14 [ 1303.323166][T14004] binder: BINDER_SET_CONTEXT_MGR already set [ 1303.331183][T13991] orangefs_mount: mount request failed with -4 [ 1303.348778][T14004] binder: 14003:14004 ioctl 4018620d 200000000100 returned -16 [ 1303.389318][T14004] binder: BINDER_SET_CONTEXT_MGR already set [ 1303.395488][T14004] binder: 14003:14004 ioctl 4018620d 200000004a80 returned -16 [ 1303.439627][T14004] binder: 14003:14004 ioctl c0306201 0 returned -14 [ 1303.454260][T14009] input: syz0 as /devices/virtual/input/input35 [ 1303.617610][T14011] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2127'. [ 1306.250394][T14015] nfs: Unknown parameter 'ÿÿÿÿ' [ 1306.397798][T14039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2136'. [ 1307.136038][T14038] orangefs_mount: mount request failed with -4 [ 1310.400594][T14079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2150'. [ 1311.770429][T14078] orangefs_mount: mount request failed with -4 [ 1315.713525][T14104] binder: BINDER_SET_CONTEXT_MGR already set [ 1315.737066][T14104] binder: 14103:14104 ioctl 4018620d 200000000100 returned -16 [ 1315.775509][T14104] binder: BINDER_SET_CONTEXT_MGR already set [ 1315.818160][T14104] binder: 14103:14104 ioctl 4018620d 200000004a80 returned -16 [ 1316.168687][T14113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2160'. [ 1316.826915][T14112] orangefs_mount: mount request failed with -4 [ 1320.961448][T14142] binder: BINDER_SET_CONTEXT_MGR already set [ 1320.989341][T14142] binder: 14141:14142 ioctl 4018620d 200000000100 returned -16 [ 1321.010728][T14142] binder: BINDER_SET_CONTEXT_MGR already set [ 1321.016837][T14142] binder: 14141:14142 ioctl 4018620d 200000004a80 returned -16 [ 1321.728468][T14144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2170'. [ 1321.900025][T14148] orangefs_mount: mount request failed with -4 [ 1321.943754][T14156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2171'. [ 1321.957265][T14156] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 1326.518813][ T5772] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 1329.001595][T14198] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2181'. [ 1330.198277][T14197] orangefs_mount: mount request failed with -4 [ 1330.298537][ T28] audit: type=1326 audit(1772702065.852:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14201 comm="syz.3.2184" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c2bb9c799 code=0x0 [ 1334.848356][T14239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2193'. [ 1334.848492][ T5811] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1335.527392][ T5811] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.594636][T14238] orangefs_mount: mount request failed with -4 [ 1335.599492][ T5811] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1335.648294][ T5811] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1335.673858][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.705569][ T5811] usb 4-1: config 0 descriptor?? [ 1335.735729][ T5811] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1338.172953][T14257] netlink: 'syz.0.2197': attribute type 25 has an invalid length. [ 1338.896909][ T5811] usb 4-1: USB disconnect, device number 43 [ 1343.852777][T14283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2203'. [ 1344.345413][T14282] orangefs_mount: mount request failed with -4 [ 1345.513742][T14301] netlink: 'syz.3.2207': attribute type 25 has an invalid length. [ 1350.509977][T14317] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2213'. [ 1351.215661][T14314] orangefs_mount: mount request failed with -4 [ 1351.845312][T14333] loop7: detected capacity change from 0 to 1 [ 1355.493470][T14351] ntfs3: nbd0: try to read out of volume at offset 0x0 [ 1355.528575][T14352] netlink: 'syz.0.2219': attribute type 10 has an invalid length. [ 1356.057241][T14352] team0: Port device dummy0 added [ 1356.199167][T14353] nfs: Unknown parameter 'ÿÿÿÿ' [ 1359.278648][T14373] loop7: detected capacity change from 1 to 0 [ 1359.808615][T14377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2227'. [ 1361.623142][T14376] orangefs_mount: mount request failed with -4 [ 1361.924235][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.936567][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.427801][T14394] ntfs3: nbd0: try to read out of volume at offset 0x0 [ 1362.483347][T14393] netlink: 'syz.0.2231': attribute type 10 has an invalid length. [ 1364.872035][T14413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2235'. [ 1365.044789][T14421] loop7: detected capacity change from 0 to 1 [ 1365.149793][T14421] loop7: detected capacity change from 1 to 0 [ 1365.608247][T14412] orangefs_mount: mount request failed with -4 [ 1365.749059][T14427] nfs: Unknown parameter 'ÿÿÿÿ' [ 1366.061607][T14437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2240'. [ 1368.406064][T14454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2244'. [ 1369.101896][T14453] orangefs_mount: mount request failed with -4 [ 1369.499399][ T5772] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 1370.642827][T14473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2250'. [ 1372.241444][T14484] loop7: detected capacity change from 0 to 1 [ 1372.548490][T14484] loop7: detected capacity change from 1 to 0 [ 1372.989224][T14495] ntfs3: nbd3: try to read out of volume at offset 0x0 [ 1373.049458][T14496] netlink: 'syz.3.2255': attribute type 10 has an invalid length. [ 1374.913123][T14501] nfs: Unknown parameter 'ÿÿÿÿ' [ 1376.972425][T14513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2259'. [ 1377.323061][T14512] orangefs_mount: mount request failed with -4 [ 1378.087671][T14527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2262'. [ 1381.367397][ T5772] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 1383.296787][T14564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2272'. [ 1385.897500][T14579] nfs: Unknown parameter 'ÿÿÿÿ' [ 1388.099107][T14594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2278'. [ 1389.091050][T14592] orangefs_mount: mount request failed with -4 [ 1395.428317][T14629] nfs: Unknown parameter 'ÿÿÿÿ' [ 1400.141284][T14655] ntfs3: nbd1: try to read out of volume at offset 0x0 [ 1400.300683][T14656] netlink: 'syz.1.2284': attribute type 10 has an invalid length. [ 1409.499750][T14693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2305'. [ 1410.457538][T14692] orangefs_mount: mount request failed with -4 [ 1413.129076][ T5772] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 1413.205010][T14717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2303'. [ 1413.452177][T14715] orangefs_mount: mount request failed with -4 [ 1417.091521][T14738] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2316'. [ 1417.723902][T14742] orangefs_mount: mount request failed with -4 [ 1420.671980][T14764] ntfs3: nbd3: try to read out of volume at offset 0x0 [ 1420.680825][T14764] netlink: 'syz.3.2324': attribute type 10 has an invalid length. [ 1420.850509][T14768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2325'. [ 1421.417682][T14767] orangefs_mount: mount request failed with -4 [ 1421.916250][ T5772] Bluetooth: hci0: unexpected event for opcode 0x0c20 [ 1422.088320][T10603] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1422.369116][T14784] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2329'. [ 1422.482645][T10603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1422.530633][T10603] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1422.572744][T10603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.590850][T10603] usb 1-1: config 0 descriptor?? [ 1422.846556][T10603] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1423.026074][T14783] orangefs_mount: mount request failed with -4 [ 1423.371334][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.411741][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.611224][ T8888] usb 1-1: USB disconnect, device number 55 [ 1426.060528][T14818] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2336'. [ 1426.746074][T14817] orangefs_mount: mount request failed with -4 [ 1426.993140][T14821] nfs: Unknown parameter 'ÿÿÿÿ' [ 1428.959571][T14834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2341'. [ 1429.655853][T14833] orangefs_mount: mount request failed with -4 [ 1429.788511][ T5772] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 1430.473302][T14851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2347'. [ 1431.480443][T14852] orangefs_mount: mount request failed with -4 [ 1432.019912][T14859] 9pnet_fd: Insufficient options for proto=fd [ 1433.584084][T14871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1433.594015][T14871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1433.603014][T14871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1433.623598][T14871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1433.631471][T14871] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1433.638884][T14871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1434.820897][T14875] orangefs_mount: mount request failed with -4 [ 1434.886696][T14876] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2352'. [ 1435.159042][T14880] ntfs3: nbd1: try to read out of volume at offset 0x0 [ 1435.280009][T14880] netlink: 'syz.1.2353': attribute type 10 has an invalid length. [ 1435.534310][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.691093][ T5772] Bluetooth: hci4: command tx timeout [ 1436.031252][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.088359][T14889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2356'. [ 1437.258961][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.330012][ T5772] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 1437.758469][ T5772] Bluetooth: hci4: command tx timeout [ 1437.961179][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.112031][T14869] chnl_net:caif_netlink_parms(): no params data found [ 1438.850083][T14869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.073772][T14869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.338440][T14869] bridge_slave_0: entered allmulticast mode [ 1439.346269][T14869] bridge_slave_0: entered promiscuous mode [ 1439.356229][T14869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.398592][T14869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.405957][T14869] bridge_slave_1: entered allmulticast mode [ 1439.440605][T14869] bridge_slave_1: entered promiscuous mode [ 1439.508091][T14913] nfs: Unknown parameter 'ÿÿÿÿ' [ 1439.870624][ T5772] Bluetooth: hci4: command tx timeout [ 1439.879936][T14922] ERROR: device name not specified. [ 1440.086438][T14869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.119828][T14869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1440.271242][T14922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2358'. [ 1440.527959][ T42] tipc: Left network mode [ 1440.536992][T14869] team0: Port device team_slave_0 added [ 1440.884320][T14869] team0: Port device team_slave_1 added [ 1441.021225][T14930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2361'. [ 1441.133451][T14869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1441.181225][T14869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.208776][T14937] ntfs3: nbd1: try to read out of volume at offset 0x0 [ 1441.234160][T14869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.267557][T14937] netlink: 'syz.1.2362': attribute type 10 has an invalid length. [ 1441.324162][T14928] orangefs_mount: mount request failed with -4 [ 1441.918208][ T5772] Bluetooth: hci4: command tx timeout [ 1442.535669][T14869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1442.546021][T14869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1442.806303][T14869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1442.913243][T14949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2364'. [ 1445.318652][T14869] hsr_slave_0: entered promiscuous mode [ 1445.409649][T14869] hsr_slave_1: entered promiscuous mode [ 1445.498532][T14869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1445.517592][T14869] Cannot create hsr debugfs directory [ 1447.351358][T14988] nfs: Unknown parameter 'ÿÿÿÿ' [ 1449.909958][T14997] ERROR: device name not specified. [ 1451.440084][T15001] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1451.476361][T14997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2371'. [ 1452.571574][T15006] orangefs_mount: mount request failed with -4 [ 1452.629510][T15008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2374'. [ 1453.193430][ T42] hsr_slave_0: left promiscuous mode [ 1453.331158][ T42] hsr_slave_1: left promiscuous mode [ 1453.362834][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1453.388276][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1453.457769][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1453.508240][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1453.588881][ T42] bridge_slave_1: left allmulticast mode [ 1453.611884][ T42] bridge_slave_1: left promiscuous mode [ 1453.886017][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.134549][ T42] bridge_slave_0: left allmulticast mode [ 1454.166551][ T42] bridge_slave_0: left promiscuous mode [ 1454.241735][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.431474][ T42] veth1_macvtap: left promiscuous mode [ 1454.437479][ T42] veth0_macvtap: left promiscuous mode [ 1454.448911][ T42] veth1_vlan: left promiscuous mode [ 1454.461155][ T42] veth0_vlan: left promiscuous mode [ 1458.642596][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1458.658693][ T5811] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1458.720105][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1458.774228][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1458.844849][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1458.862223][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1458.889046][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1458.901636][ T5811] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1458.911161][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.922271][ T5811] usb 2-1: config 0 descriptor?? [ 1459.353092][ T42] team0 (unregistering): Port device dummy0 removed [ 1459.420871][ T42] bond0 (unregistering): Released all slaves [ 1459.608438][T15038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2373'. [ 1461.740206][ T5811] hid-led: probe of 0003:27B8:01ED.001B failed with error -71 [ 1461.776589][T14869] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1461.789230][ T5811] usb 2-1: USB disconnect, device number 51 [ 1461.862613][T14869] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1461.975381][T14869] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1462.013920][T14869] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1462.283739][ T42] IPVS: stop unused estimator thread 0... [ 1462.318662][T15068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2383'. [ 1462.610976][T14869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1462.672778][T14869] 8021q: adding VLAN 0 to HW filter on device team0 [ 1462.792350][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.799626][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1462.829446][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.836703][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1462.854598][T15066] orangefs_mount: mount request failed with -4 [ 1463.856955][T15090] ERROR: device name not specified. [ 1463.877278][T15090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2381'. [ 1465.508633][T14869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1467.103078][T14869] veth0_vlan: entered promiscuous mode [ 1467.203038][T14869] veth1_vlan: entered promiscuous mode [ 1467.312052][T14869] veth0_macvtap: entered promiscuous mode [ 1467.351399][T14869] veth1_macvtap: entered promiscuous mode [ 1467.427378][T14869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1467.468178][T14869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1467.498652][T14869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1467.524609][T14869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1467.548146][T14869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1467.575763][T14869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1467.604133][T14869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1467.643474][T14869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1467.682716][T14869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1467.708203][T14869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1467.745899][T14869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1467.771632][T14869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1467.798642][T14869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1467.826718][T14869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1467.857110][T14869] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.902796][T14869] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.948467][T14869] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.957325][T14869] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1468.229070][T11833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1468.293686][T11833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1468.496948][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1468.514290][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.238517][ T969] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1471.246843][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1471.408266][ T969] usb 1-1: device descriptor read/64, error -32 [ 1471.688197][ T969] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1471.974968][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1472.022460][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1472.064831][ T969] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1472.108463][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.256698][T15164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2395'. [ 1472.622092][ T969] usb 1-1: config 0 descriptor?? [ 1473.116010][T11833] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.968976][T14871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1474.986413][T14871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1474.996306][T14871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1475.014396][T14871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1475.046415][T14871] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1475.054397][T14871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1475.194262][T11833] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.320848][T15179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2397'. [ 1475.484566][T11833] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.607893][T15177] orangefs_mount: mount request failed with -4 [ 1475.689216][ T969] usb 1-1: can't set config #0, error -71 [ 1475.722836][ T969] usb 1-1: USB disconnect, device number 57 [ 1475.771000][T11833] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.979319][T15188] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1476.986207][T15188] macsec1: left promiscuous mode [ 1477.118724][T14871] Bluetooth: hci0: command tx timeout [ 1477.752783][T15175] chnl_net:caif_netlink_parms(): no params data found [ 1477.852957][T11833] tipc: Left network mode [ 1478.406741][T14871] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 1479.133608][T15175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.174522][T15175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.191906][T15175] bridge_slave_0: entered allmulticast mode [ 1479.202778][T15175] bridge_slave_0: entered promiscuous mode [ 1479.216270][T15175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.231960][T15175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.241550][T14871] Bluetooth: hci0: command tx timeout [ 1479.260672][T15175] bridge_slave_1: entered allmulticast mode [ 1479.283248][T15175] bridge_slave_1: entered promiscuous mode [ 1479.438687][T15219] Bluetooth: MGMT ver 1.22 [ 1479.743751][T15175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1479.907126][T15175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1480.729650][T15228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2404'. [ 1480.838752][T15175] team0: Port device team_slave_0 added [ 1480.936938][T15175] team0: Port device team_slave_1 added [ 1481.138316][T15175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1481.145336][T15175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.233736][T15175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1481.282487][T14871] Bluetooth: hci0: command tx timeout [ 1481.482215][T15175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1481.507643][T15175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.548139][T15175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1482.681511][ T969] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1482.801207][T15175] hsr_slave_0: entered promiscuous mode [ 1482.809535][T15175] hsr_slave_1: entered promiscuous mode [ 1482.837365][T11833] hsr_slave_0: left promiscuous mode [ 1482.854321][T11833] hsr_slave_1: left promiscuous mode [ 1482.890764][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1482.919252][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1482.930106][T11833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1482.937564][T11833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1482.938093][ T969] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1482.962712][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.976297][ T969] usb 3-1: config 0 descriptor?? [ 1482.985916][T11833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1482.996169][T11833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1483.023691][T11833] bridge_slave_1: left allmulticast mode [ 1483.038154][T11833] bridge_slave_1: left promiscuous mode [ 1483.044183][T11833] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.072481][T11833] bridge_slave_0: left allmulticast mode [ 1483.105928][T11833] bridge_slave_0: left promiscuous mode [ 1483.119493][T11833] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.183381][T11833] veth1_macvtap: left promiscuous mode [ 1483.209681][T11833] veth0_macvtap: left promiscuous mode [ 1484.577753][T14871] Bluetooth: hci0: command tx timeout [ 1484.608416][T11833] veth1_vlan: left promiscuous mode [ 1484.623940][T11833] veth0_vlan: left promiscuous mode [ 1484.758923][ T969] usbhid 3-1:0.0: can't add hid device: -71 [ 1484.764996][ T969] usbhid: probe of 3-1:0.0 failed with error -71 [ 1484.802229][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.809772][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.868441][ T969] usb 3-1: USB disconnect, device number 54 [ 1486.731194][T11833] team0 (unregistering): Port device team_slave_1 removed [ 1487.112887][T15276] orangefs_mount: mount request failed with -4 [ 1487.226465][T11833] team0 (unregistering): Port device team_slave_0 removed [ 1487.816250][T11833] team0 (unregistering): Port device dummy0 removed [ 1487.994658][T11833] lo (unregistering): left allmulticast mode [ 1488.055865][T15277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2408'. [ 1488.074854][T15285] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2412'. [ 1489.777021][T15302] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2415'. [ 1489.896097][T15302] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2415'. [ 1490.184573][T11833] IPVS: stop unused estimator thread 0... [ 1491.828310][ T8888] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1492.346193][T15175] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1492.379524][T15175] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1492.400224][T15175] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1492.419653][T15175] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1492.470253][ T8888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1492.488750][ T8888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1492.532352][ T8888] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1492.562745][ T8888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.589312][ T8888] usb 1-1: config 0 descriptor?? [ 1492.920267][T15339] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2421'. [ 1492.982754][T15175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1493.385571][T15175] 8021q: adding VLAN 0 to HW filter on device team0 [ 1493.418481][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1493.425727][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1493.501229][T15338] orangefs_mount: mount request failed with -4 [ 1493.508606][ T4537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.515786][ T4537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1493.656250][ T8888] hid-led 0003:27B8:01ED.001C: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 1493.742915][ T8888] hid-led 0003:27B8:01ED.001C: ThingM blink(1) initialized [ 1495.231348][T15175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1495.471823][T15175] veth0_vlan: entered promiscuous mode [ 1495.554389][T15175] veth1_vlan: entered promiscuous mode [ 1495.686570][T15175] veth0_macvtap: entered promiscuous mode [ 1495.730889][T15370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2424'. [ 1495.768834][T15175] veth1_macvtap: entered promiscuous mode [ 1495.850609][T15175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.924792][ T5870] usb 1-1: USB disconnect, device number 58 [ 1495.949599][T15175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.995186][T15175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1496.040935][T15175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.065853][T15175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1496.097772][T15175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.136272][T15175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1496.239689][T15175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1496.302194][T15175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.314743][T15369] orangefs_mount: mount request failed with -4 [ 1496.328239][T15175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1496.355975][T15175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.373700][T15175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1496.426831][T15175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.489295][T15175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1496.547645][T15175] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.620647][T15175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.658273][T15175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1496.707976][T15175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.270646][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1497.291376][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1497.415649][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1497.485499][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1499.108365][T15408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2429'. [ 1499.751382][T15406] orangefs_mount: mount request failed with -4 [ 1503.051627][T15445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2436'. [ 1503.694998][T15444] orangefs_mount: mount request failed with -4 [ 1506.979082][ T5768] syz_tun (unregistering): left allmulticast mode [ 1507.073679][ T5772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1507.084804][ T5772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1507.093379][ T5772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1507.102248][ T5772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1507.110958][ T5772] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1507.118829][ T5772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1508.862468][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.205532][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.206009][ T5772] Bluetooth: hci2: command tx timeout [ 1509.385327][T15474] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2439'. [ 1509.663344][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.727649][T15473] orangefs_mount: mount request failed with -4 [ 1509.974067][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.539137][T15463] chnl_net:caif_netlink_parms(): no params data found [ 1512.158145][ T5772] Bluetooth: hci2: command tx timeout [ 1512.166027][ T42] tipc: Left network mode [ 1513.080487][T15463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.087769][T15463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.128355][T15463] bridge_slave_0: entered allmulticast mode [ 1513.155040][T15463] bridge_slave_0: entered promiscuous mode [ 1513.179232][T15499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2445'. [ 1513.256833][T15463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.300566][T15463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.314164][T15463] bridge_slave_1: entered allmulticast mode [ 1513.341454][T15463] bridge_slave_1: entered promiscuous mode [ 1513.372902][T15498] orangefs_mount: mount request failed with -4 [ 1513.609064][T15463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1513.647673][T15463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1514.248611][ T5772] Bluetooth: hci2: command tx timeout [ 1514.512522][T15463] team0: Port device team_slave_0 added [ 1514.807181][T15463] team0: Port device team_slave_1 added [ 1515.026155][T15463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.404846][ T5772] Bluetooth: hci2: command tx timeout [ 1516.410859][T15463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.437455][T15463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.879462][T15463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1517.098251][T15463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1517.134605][T15463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1517.977514][T15533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2451'. [ 1519.703957][T15463] hsr_slave_0: entered promiscuous mode [ 1519.739580][T15463] hsr_slave_1: entered promiscuous mode [ 1519.764325][T15463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1519.786630][T15463] Cannot create hsr debugfs directory [ 1520.404879][ T42] hsr_slave_0: left promiscuous mode [ 1520.450093][ T42] hsr_slave_1: left promiscuous mode [ 1520.456792][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1520.488124][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1520.499905][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1520.529356][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1520.559650][ T42] bridge_slave_1: left allmulticast mode [ 1520.565365][ T42] bridge_slave_1: left promiscuous mode [ 1520.605954][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1520.630806][ T42] bridge_slave_0: left allmulticast mode [ 1520.636689][ T42] bridge_slave_0: left promiscuous mode [ 1520.669289][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1520.771742][ T42] veth1_macvtap: left promiscuous mode [ 1520.777366][ T42] veth0_macvtap: left promiscuous mode [ 1520.812945][ T42] veth1_vlan: left promiscuous mode [ 1520.838260][ T42] veth0_vlan: left promiscuous mode [ 1522.972746][T15564] orangefs_mount: mount request failed with -4 [ 1524.137699][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1524.196579][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1524.840727][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1524.947754][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1525.865920][ T42] team0 (unregistering): Port device dummy0 removed [ 1525.926552][ T42] bond0 (unregistering): Released all slaves [ 1526.054266][T15565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2455'. [ 1526.086032][T15586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2461'. [ 1529.684596][T15631] ERROR: device name not specified. [ 1529.927067][T15631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2469'. [ 1530.422777][T15463] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1530.493412][T15463] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1530.517402][T15463] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1530.556944][T15463] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1530.858423][T15463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1531.897420][T15463] 8021q: adding VLAN 0 to HW filter on device team0 [ 1532.032827][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.040151][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1532.105279][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1532.112780][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1533.094745][T15652] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2473'. [ 1533.244747][T15652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.253205][T15652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.314000][T15655] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2473'. [ 1535.403912][T15681] ERROR: device name not specified. [ 1535.433210][T15681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2478'. [ 1535.882832][T15463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1536.117253][T15463] veth0_vlan: entered promiscuous mode [ 1536.200008][T15463] veth1_vlan: entered promiscuous mode [ 1537.350663][T15463] veth0_macvtap: entered promiscuous mode [ 1537.465171][T15463] veth1_macvtap: entered promiscuous mode [ 1538.309574][T15463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1538.363862][T15463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.381803][T15463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1538.414633][T15463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.476859][T15463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1538.516314][T15463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.566190][T15463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1538.699937][T15463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1538.743982][T15463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.788220][T15463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1538.836028][T15463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.873523][T15463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1538.885442][T15463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.897136][T15463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1538.911021][T15463] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.919846][T15463] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.928747][T15463] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.937472][T15463] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.157006][T15706] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2482'. [ 1539.169891][T15706] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.177682][T15706] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.241624][T11833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1539.271087][T15706] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2482'. [ 1539.297226][T11833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1539.471872][T15659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1539.498711][T15659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1545.129107][T14871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1545.157885][T14871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1545.171219][T14871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1545.181230][T14871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1545.191590][T14871] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1545.199751][T14871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1545.268487][T15748] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2490'. [ 1545.306201][T15749] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2490'. [ 1545.472675][ T2951] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.741197][ T2951] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.562321][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.569661][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.875965][ T2951] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.984621][ T5772] Bluetooth: hci1: command tx timeout [ 1548.937519][ T2951] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.602221][T15750] chnl_net:caif_netlink_parms(): no params data found [ 1550.003085][ T5772] Bluetooth: hci1: command tx timeout [ 1550.938210][T15750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.974312][T15750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.023498][T15750] bridge_slave_0: entered allmulticast mode [ 1551.073446][T15750] bridge_slave_0: entered promiscuous mode [ 1551.217680][T15750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.283007][T15750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.327476][T15750] bridge_slave_1: entered allmulticast mode [ 1551.363843][T15750] bridge_slave_1: entered promiscuous mode [ 1551.394947][ T2951] tipc: Left network mode [ 1551.524285][T15750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1551.561913][T15750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1551.956118][T15750] team0: Port device team_slave_0 added [ 1552.016209][T15750] team0: Port device team_slave_1 added [ 1552.078111][T15817] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2499'. [ 1552.078384][ T5772] Bluetooth: hci1: command tx timeout [ 1552.147379][T15818] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2499'. [ 1552.298415][T15750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1552.305434][T15750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1552.415201][T15750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1553.042666][T15750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1553.071028][T15750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1553.128188][T15750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1553.488913][T15750] hsr_slave_0: entered promiscuous mode [ 1553.505267][T15750] hsr_slave_1: entered promiscuous mode [ 1553.512061][T15750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1553.538127][T15750] Cannot create hsr debugfs directory [ 1554.158316][ T5772] Bluetooth: hci1: command tx timeout [ 1554.288483][ T5870] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1554.575764][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1554.615544][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1554.770278][ T5870] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1554.833499][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.881855][ T5870] usb 4-1: config 0 descriptor?? [ 1555.411489][ T2951] hsr_slave_0: left promiscuous mode [ 1555.506553][ T2951] hsr_slave_1: left promiscuous mode [ 1555.605529][ T2951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1555.623298][ T2951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1555.673748][ T2951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1555.692201][ T2951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1555.790032][ T2951] bridge_slave_1: left allmulticast mode [ 1555.825645][ T2951] bridge_slave_1: left promiscuous mode [ 1555.868915][ T2951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.895951][ T2951] bridge_slave_0: left allmulticast mode [ 1555.907078][ T2951] bridge_slave_0: left promiscuous mode [ 1555.926135][ T2951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.958192][ T2951] geneve1: left allmulticast mode [ 1555.963475][ T2951] geneve1: left promiscuous mode [ 1555.991327][ T2951] veth1_macvtap: left promiscuous mode [ 1555.996948][ T2951] veth0_macvtap: left promiscuous mode [ 1556.028480][ T2951] veth1_vlan: left promiscuous mode [ 1556.033850][ T2951] veth0_vlan: left promiscuous mode [ 1558.580248][ T5772] Bluetooth: hci4: command 0x0406 tx timeout [ 1561.198825][ T5870] usbhid 4-1:0.0: can't add hid device: -110 [ 1561.208744][ T5870] usbhid: probe of 4-1:0.0 failed with error -110 [ 1561.836156][ T2951] team0 (unregistering): Port device team_slave_1 removed [ 1561.948913][ T2951] team0 (unregistering): Port device team_slave_0 removed [ 1562.826944][ T2951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1562.999370][ T2951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1563.869548][ T2951] team0 (unregistering): Port device dummy0 removed [ 1563.973560][ T2951] bond0 (unregistering): Released all slaves [ 1564.338788][T15317] usb 4-1: USB disconnect, device number 44 [ 1565.467655][T15901] ERROR: device name not specified. [ 1565.483049][T15901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2515'. [ 1566.180218][ T2951] IPVS: stop unused estimator thread 0... [ 1566.243478][T15750] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1566.262533][T15750] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1566.381936][T15750] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1566.590908][T15750] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1567.009390][T15750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1567.034615][T15750] 8021q: adding VLAN 0 to HW filter on device team0 [ 1567.092969][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.100303][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1567.648092][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.655289][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1567.931135][T15750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1569.339548][ T969] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1569.453332][T15750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1569.741832][T15750] veth0_vlan: entered promiscuous mode [ 1569.777042][ T969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1569.796951][T15750] veth1_vlan: entered promiscuous mode [ 1569.818261][ T969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1569.838149][ T969] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1569.865399][ T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.891286][ T969] usb 2-1: config 0 descriptor?? [ 1570.078969][T15750] veth0_macvtap: entered promiscuous mode [ 1570.114837][T15750] veth1_macvtap: entered promiscuous mode [ 1570.239657][T15750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1570.282223][T15750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1570.332896][T15750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1570.384969][T15750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1570.442211][T15750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1570.481831][T15750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1570.530109][T15750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1570.602203][T15750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1570.650453][T15750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1570.691776][T15750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1570.739262][T15750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1570.809742][T15750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1570.873225][T15750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1570.933024][T15750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1571.024430][T15750] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.118439][T15750] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.145272][T15750] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.161116][T15750] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.675488][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.728168][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.851675][T15797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.895750][T15797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1572.894179][ T969] usbhid 2-1:0.0: can't add hid device: -71 [ 1572.925497][ T969] usbhid: probe of 2-1:0.0 failed with error -71 [ 1573.029203][ T969] usb 2-1: USB disconnect, device number 52 [ 1573.227117][T15967] ERROR: device name not specified. [ 1573.240832][T15967] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2525'. [ 1573.742095][T15973] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2526'. [ 1574.685400][T15973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.693296][T15973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.752797][T15978] ERROR: device name not specified. [ 1575.278981][T15978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2486'. [ 1577.128647][T15997] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2532'. [ 1583.060398][T16025] ntfs3: nbd2: try to read out of volume at offset 0x0 [ 1584.329119][T15704] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1584.521597][T15704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1584.578059][T15704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1584.601350][T15704] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1584.642740][T15704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.699040][T15704] usb 1-1: config 0 descriptor?? [ 1585.283411][T16042] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2542'. [ 1585.292697][T16042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2542'. [ 1586.283236][T16051] binder: 16048:16051 ioctl c0306201 0 returned -14 [ 1586.347943][T16052] ERROR: device name not specified. [ 1586.364299][T16052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2543'. [ 1586.952120][T16051] binder: 16048:16051 ioctl c0306201 2000000002c0 returned -14 [ 1588.909654][T15704] usbhid 1-1:0.0: can't add hid device: -71 [ 1588.915692][T15704] usbhid: probe of 1-1:0.0 failed with error -71 [ 1589.092629][T15704] usb 1-1: USB disconnect, device number 59 [ 1589.114671][T16060] loop7: detected capacity change from 0 to 1 [ 1590.662288][T16060] loop7: detected capacity change from 1 to 0 [ 1592.279830][T16078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2552'. [ 1592.289729][T16078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2552'. [ 1593.290791][T16087] binder: 16083:16087 ioctl c0306201 2000000002c0 returned -14 [ 1593.735289][T16092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2554'. [ 1595.389084][T16088] orangefs_mount: mount request failed with -4 [ 1595.858166][ T5779] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1596.103256][ T5779] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1596.121733][ T5779] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1596.198228][ T5779] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1596.482183][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.605899][ T5779] usb 1-1: config 0 descriptor?? [ 1599.074292][T16119] loop7: detected capacity change from 0 to 1 [ 1599.168066][T16119] loop7: detected capacity change from 1 to 0 [ 1599.419468][ T5779] usbhid 1-1:0.0: can't add hid device: -71 [ 1599.425552][ T5779] usbhid: probe of 1-1:0.0 failed with error -71 [ 1599.510104][ T5779] usb 1-1: USB disconnect, device number 60 [ 1599.828881][T16129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2561'. [ 1599.839676][T16129] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2561'. [ 1599.841264][ T5772] Bluetooth: hci0: command 0x0406 tx timeout [ 1602.163759][T16144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2566'. [ 1602.773247][T16143] orangefs_mount: mount request failed with -4 [ 1606.148607][ T27] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1606.351277][T16169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2572'. [ 1606.393705][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1606.422940][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1606.461828][ T27] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1606.493229][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.524789][ T27] usb 4-1: config 0 descriptor?? [ 1607.934051][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.946485][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.953797][ T27] usbhid 4-1:0.0: can't add hid device: -71 [ 1609.988423][ T27] usbhid: probe of 4-1:0.0 failed with error -71 [ 1610.028672][ T27] usb 4-1: USB disconnect, device number 45 [ 1612.195795][T16200] ntfs3: nbd2: try to read out of volume at offset 0x0 [ 1613.244751][T16202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2579'. [ 1613.456165][T16211] loop7: detected capacity change from 0 to 1 [ 1613.505868][T16203] orangefs_mount: mount request failed with -4 [ 1613.508135][T16211] loop7: detected capacity change from 1 to 0 [ 1613.530027][T16213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2581'. [ 1614.179887][T16209] orangefs_mount: mount request failed with -4 [ 1614.254358][T15332] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1616.290326][T15332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1616.332035][T15332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1616.377802][T15332] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1616.397167][T15332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.452267][T15332] usb 2-1: config 0 descriptor?? [ 1617.232115][T16234] ntfs3: nbd2: try to read out of volume at offset 0x0 [ 1618.294186][T16239] loop7: detected capacity change from 0 to 1 [ 1618.358345][T16239] loop7: detected capacity change from 1 to 0 [ 1619.221665][T16250] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2592'. [ 1619.500962][T15332] usbhid 2-1:0.0: can't add hid device: -71 [ 1619.520071][T15332] usbhid: probe of 2-1:0.0 failed with error -71 [ 1619.562972][T15332] usb 2-1: USB disconnect, device number 53 [ 1619.899243][T16249] orangefs_mount: mount request failed with -4 [ 1619.920747][T16254] binder: BINDER_SET_CONTEXT_MGR already set [ 1619.941858][T16254] binder: 16253:16254 ioctl 4018620d 200000004a80 returned -16 [ 1619.969094][T16254] binder: 16253:16254 ioctl c0306201 2000000002c0 returned -14 [ 1621.997888][T16268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2597'. [ 1622.032007][T16263] nfs: Unknown parameter 'ÿÿÿÿ' [ 1622.424894][T16265] orangefs_mount: mount request failed with -4 [ 1623.095810][T16279] loop7: detected capacity change from 0 to 1 [ 1623.138146][T16279] loop7: detected capacity change from 1 to 0 [ 1624.620097][T16284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2602'. [ 1624.968359][T16298] ntfs3: nbd2: try to read out of volume at offset 0x0 [ 1625.061984][T16288] binder: 16287:16288 ioctl c0306201 2000000002c0 returned -14 [ 1625.116114][ T5779] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1625.339288][T16285] orangefs_mount: mount request failed with -4 [ 1625.535150][ T5779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1625.571938][ T5779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1625.608047][ T5779] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1625.873781][ T5779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.905603][ T5779] usb 2-1: config 0 descriptor?? [ 1628.768175][ T5779] usb 2-1: can't set config #0, error -71 [ 1629.068374][ T5779] usb 2-1: USB disconnect, device number 54 [ 1630.050317][T16321] loop7: detected capacity change from 0 to 1 [ 1630.218380][T16321] loop7: detected capacity change from 1 to 0 [ 1630.242007][ T5772] Bluetooth: hci2: command 0x0406 tx timeout [ 1631.288592][T16329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2611'. [ 1632.742814][T16326] orangefs_mount: mount request failed with -4 [ 1633.399600][T16339] ntfs3: nbd3: try to read out of volume at offset 0x0 [ 1634.948242][T15332] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1635.189340][T15332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1635.245283][T15332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1635.318076][T15332] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1635.362913][T15332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.422203][T15332] usb 4-1: config 0 descriptor?? [ 1636.062093][T16352] binder: 16351:16352 ioctl c0306201 2000000002c0 returned -14 [ 1636.295900][T16355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2615'. [ 1636.387896][T15332] hid-led 0003:27B8:01ED.001D: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 1636.421050][T15332] hid-led 0003:27B8:01ED.001D: ThingM blink(1) initialized [ 1637.609158][ T5870] usb 4-1: USB disconnect, device number 46 [ 1638.137644][T16359] fido_id[16359]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1638.798760][T16365] loop7: detected capacity change from 0 to 1 [ 1640.310036][T16365] loop7: detected capacity change from 1 to 0 [ 1640.669036][T16383] ntfs3: nbd2: try to read out of volume at offset 0x0 [ 1641.465268][T16385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2627'. [ 1643.505087][T16397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2628'. [ 1644.074650][T16391] orangefs_mount: mount request failed with -4 [ 1644.088088][T15704] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1644.287484][T15704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1644.307534][T15704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1644.327776][T15704] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1644.337312][T15704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.359186][T15704] usb 2-1: config 0 descriptor?? [ 1645.473682][T15704] hid-led 0003:27B8:01ED.001E: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 1645.745667][T15704] hid-led 0003:27B8:01ED.001E: ThingM blink(1) initialized [ 1646.367766][T16414] nfs: Unknown parameter 'ÿÿÿÿ' [ 1646.883035][T16417] loop7: detected capacity change from 0 to 1 [ 1646.969290][T16417] loop7: detected capacity change from 1 to 0 [ 1647.059157][ T5870] usb 2-1: USB disconnect, device number 55 [ 1647.338303][T16423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2631'. [ 1649.446688][T16435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2637'. [ 1650.182944][T16441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2640'. [ 1652.228611][T16440] orangefs_mount: mount request failed with -4 [ 1653.068324][ T5870] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1653.068836][T16460] nfs: Unknown parameter 'ÿÿÿÿ' [ 1653.287428][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1653.388889][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1653.495729][ T5870] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1653.542486][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.560664][ T5870] usb 1-1: config 0 descriptor?? [ 1656.960178][ T5870] hid-led: probe of 0003:27B8:01ED.001F failed with error -32 [ 1657.675353][ T5870] usb 1-1: USB disconnect, device number 61 [ 1658.077519][T16476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2650'. [ 1658.928929][T16479] ntfs3: nbd0: try to read out of volume at offset 0x0 [ 1660.053547][T16484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2652'. [ 1660.458272][T16487] loop7: detected capacity change from 0 to 1 [ 1660.486811][T16483] orangefs_mount: mount request failed with -4 [ 1661.658492][T16487] loop7: detected capacity change from 1 to 0 [ 1662.428790][T16507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2648'. [ 1663.015946][T16504] nfs: Unknown parameter 'ÿÿÿÿ' [ 1665.644367][T16520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2659'. [ 1665.815318][T16523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2661'. [ 1666.717183][T16522] orangefs_mount: mount request failed with -4 [ 1666.922719][T16529] loop7: detected capacity change from 0 to 1 [ 1667.028934][T16529] loop7: detected capacity change from 1 to 0 [ 1669.124674][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.131341][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.347743][T16544] ERROR: device name not specified. [ 1669.380145][T16544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2667'. [ 1671.198065][T14871] Bluetooth: hci1: command 0x0406 tx timeout [ 1673.281720][T16557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2670'. [ 1673.932657][T16562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2672'. [ 1674.620544][T16565] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2665'. [ 1674.687870][T16565] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2665'. [ 1674.697108][T16561] orangefs_mount: mount request failed with -4 [ 1676.616497][T16580] loop7: detected capacity change from 0 to 1 [ 1676.678542][T16580] loop7: detected capacity change from 1 to 0 [ 1677.004015][T16586] ERROR: device name not specified. [ 1677.068772][T16586] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2676'. [ 1679.450192][T16603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2681'. [ 1679.620608][ T5772] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 1680.199500][T16599] orangefs_mount: mount request failed with -4 [ 1680.968897][T16613] loop7: detected capacity change from 0 to 1 [ 1680.998209][T16613] loop7: detected capacity change from 1 to 0 [ 1684.281209][T16632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2693'. [ 1685.309322][T16631] orangefs_mount: mount request failed with -4 [ 1685.411130][T16642] loop7: detected capacity change from 0 to 1 [ 1685.488421][T16642] loop7: detected capacity change from 1 to 0 [ 1688.121263][T16660] ntfs3: nbd0: try to read out of volume at offset 0x0 [ 1688.650794][T16665] ERROR: device name not specified. [ 1688.697597][T16664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2690'. [ 1689.718537][T16671] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2703'. [ 1689.777107][T16671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.784636][T16671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.906594][T16672] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2703'. [ 1690.432384][T16681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2705'. [ 1690.465531][T16680] loop7: detected capacity change from 0 to 1 [ 1690.508545][T16680] loop7: detected capacity change from 1 to 0 [ 1692.106962][T16678] orangefs_mount: mount request failed with -4 [ 1693.822850][T16698] ERROR: device name not specified. [ 1693.883979][T16698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2711'. [ 1694.643136][T16705] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2715'. [ 1694.670836][T16705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.678611][T16705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.834140][T16708] binder: 16706:16708 ioctl c0306201 0 returned -14 [ 1698.319952][T16738] ERROR: device name not specified. [ 1698.344136][T16738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2723'. [ 1700.542313][T16746] binder: 16745:16746 ioctl c0306201 0 returned -14 [ 1701.365357][T16754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2717'. [ 1702.171276][T16753] orangefs_mount: mount request failed with -4 [ 1705.183352][T16776] binder: BINDER_SET_CONTEXT_MGR already set [ 1705.203213][T16776] binder: 16775:16776 ioctl 4018620d 200000004a80 returned -16 [ 1705.274177][T16778] binder: 16775:16778 ioctl c0306201 0 returned -14 [ 1707.005803][T16790] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2741'. [ 1707.488012][T16795] ERROR: device name not specified. [ 1707.603287][T16795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2735'. [ 1707.777251][T16789] orangefs_mount: mount request failed with -4 [ 1710.228066][T15317] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1710.837373][T16811] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1711.042505][T15317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1711.063857][T15317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1711.082629][T15317] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1711.122905][T15317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.157745][T15317] usb 3-1: config 0 descriptor?? [ 1711.194860][T15317] usb 3-1: can't set config #0, error -71 [ 1711.215996][T15317] usb 3-1: USB disconnect, device number 55 [ 1713.324369][T16833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2751'. [ 1713.746664][T16832] orangefs_mount: mount request failed with -4 [ 1714.191944][T16842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2753'. [ 1715.532149][T16840] orangefs_mount: mount request failed with -4 [ 1715.607581][T16855] ================================================================== [ 1715.615719][T16855] BUG: KASAN: slab-use-after-free in dvb_device_open+0xca/0x370 [ 1715.623482][T16855] Read of size 8 at addr ffff888026edac18 by task syz.1.2755/16855 [ 1715.631400][T16855] [ 1715.633763][T16855] CPU: 1 PID: 16855 Comm: syz.1.2755 Not tainted syzkaller #0 [ 1715.641245][T16855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1715.651416][T16855] Call Trace: [ 1715.654716][T16855] [ 1715.657668][T16855] dump_stack_lvl+0x18c/0x250 [ 1715.662389][T16855] ? __lock_acquire+0x7d40/0x7d40 [ 1715.667536][T16855] ? show_regs_print_info+0x20/0x20 [ 1715.672772][T16855] ? load_image+0x400/0x400 [ 1715.677331][T16855] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1715.682821][T16855] ? __virt_addr_valid+0x18c/0x540 [ 1715.688313][T16855] ? __virt_addr_valid+0x469/0x540 [ 1715.693476][T16855] print_report+0xa8/0x210 [ 1715.697949][T16855] ? dvb_device_open+0xca/0x370 [ 1715.702933][T16855] kasan_report+0x117/0x150 [ 1715.707474][T16855] ? chrdev_open+0x3e3/0x6a0 [ 1715.712097][T16855] ? dvb_device_open+0xca/0x370 [ 1715.716983][T16855] dvb_device_open+0xca/0x370 [ 1715.721695][T16855] ? do_raw_spin_unlock+0x121/0x230 [ 1715.726928][T16855] chrdev_open+0x5cc/0x6a0 [ 1715.731379][T16855] ? cd_forget+0x160/0x160 [ 1715.735839][T16855] ? fsnotify_perm+0x3ed/0x5e0 [ 1715.740656][T16855] ? cd_forget+0x160/0x160 [ 1715.745206][T16855] do_dentry_open+0x8c6/0x1500 [ 1715.750028][T16855] path_openat+0x27f1/0x3230 [ 1715.754668][T16855] ? do_sys_openat2+0xda/0x1d0 [ 1715.759467][T16855] ? verify_lock_unused+0x140/0x140 [ 1715.764700][T16855] ? do_filp_open+0x430/0x430 [ 1715.769409][T16855] ? asan.module_dtor+0x20/0x20 [ 1715.774319][T16855] do_filp_open+0x1f5/0x430 [ 1715.778952][T16855] ? vfs_tmpfile+0x490/0x490 [ 1715.783567][T16855] ? preempt_schedule_common+0x82/0xc0 [ 1715.789167][T16855] ? _raw_spin_unlock+0x3a/0x40 [ 1715.794133][T16855] ? alloc_fd+0x58f/0x630 [ 1715.798498][T16855] do_sys_openat2+0x134/0x1d0 [ 1715.803237][T16855] ? do_sys_open+0xe0/0xe0 [ 1715.807679][T16855] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1715.813692][T16855] ? lock_chain_count+0x20/0x20 [ 1715.818576][T16855] __x64_sys_openat+0x139/0x160 [ 1715.823456][T16855] do_syscall_64+0x55/0xa0 [ 1715.827910][T16855] ? clear_bhb_loop+0x40/0x90 [ 1715.832616][T16855] ? clear_bhb_loop+0x40/0x90 [ 1715.837416][T16855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1715.843354][T16855] RIP: 0033:0x7fcc1b55cfce [ 1715.847800][T16855] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1715.867444][T16855] RSP: 002b:00007fcc1c3c0b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1715.875985][T16855] RAX: ffffffffffffffda RBX: 00007fcc1c3c16c0 RCX: 00007fcc1b55cfce [ 1715.884249][T16855] RDX: 0000000000000e82 RSI: 00007fcc1c3c0c00 RDI: ffffffffffffff9c [ 1715.892242][T16855] RBP: 00007fcc1c3c0c00 R08: 0000000000000000 R09: 0000000000000000 [ 1715.900323][T16855] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1715.908419][T16855] R13: 00007fcc1b816128 R14: 00007fcc1b816090 R15: 00007ffd0dcdb058 [ 1715.916685][T16855] [ 1715.919729][T16855] [ 1715.922080][T16855] Allocated by task 1: [ 1715.926159][T16855] kasan_set_track+0x4e/0x70 [ 1715.930779][T16855] __kasan_kmalloc+0x8f/0xa0 [ 1715.935394][T16855] dvb_register_device+0x2fd/0x2210 [ 1715.940622][T16855] dvb_register_frontend+0x649/0x930 [ 1715.945935][T16855] vidtv_bridge_probe+0x9ab/0xf80 [ 1715.950986][T16855] platform_probe+0x13b/0x1c0 [ 1715.955692][T16855] really_probe+0x25b/0xb20 [ 1715.960227][T16855] __driver_probe_device+0x18c/0x330 [ 1715.965567][T16855] driver_probe_device+0x4f/0x420 [ 1715.971057][T16855] __driver_attach+0x44e/0x6e0 [ 1715.975933][T16855] bus_for_each_dev+0x235/0x2b0 [ 1715.980819][T16855] bus_add_driver+0x340/0x630 [ 1715.985539][T16855] driver_register+0x23a/0x310 [ 1715.990326][T16855] vidtv_bridge_init+0x3d/0x70 [ 1715.995212][T16855] do_one_initcall+0x242/0x790 [ 1716.000024][T16855] do_initcall_level+0x137/0x1f0 [ 1716.005019][T16855] do_initcalls+0x69/0xd0 [ 1716.009398][T16855] kernel_init_freeable+0x3ed/0x580 [ 1716.014726][T16855] kernel_init+0x1d/0x1c0 [ 1716.019079][T16855] ret_from_fork+0x48/0x80 [ 1716.023577][T16855] ret_from_fork_asm+0x11/0x20 [ 1716.028337][T16855] [ 1716.030759][T16855] Freed by task 16811: [ 1716.034828][T16855] kasan_set_track+0x4e/0x70 [ 1716.039438][T16855] kasan_save_free_info+0x2e/0x50 [ 1716.044475][T16855] ____kasan_slab_free+0x126/0x1e0 [ 1716.049599][T16855] slab_free_freelist_hook+0x130/0x1a0 [ 1716.055053][T16855] __kmem_cache_free+0xba/0x1e0 [ 1716.059900][T16855] dvb_device_open+0x2ee/0x370 [ 1716.064743][T16855] chrdev_open+0x5cc/0x6a0 [ 1716.069246][T16855] do_dentry_open+0x8c6/0x1500 [ 1716.074007][T16855] path_openat+0x27f1/0x3230 [ 1716.078591][T16855] do_filp_open+0x1f5/0x430 [ 1716.083086][T16855] do_sys_openat2+0x134/0x1d0 [ 1716.087936][T16855] __x64_sys_openat+0x139/0x160 [ 1716.092815][T16855] do_syscall_64+0x55/0xa0 [ 1716.097328][T16855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1716.103301][T16855] [ 1716.105618][T16855] The buggy address belongs to the object at ffff888026edac00 [ 1716.105618][T16855] which belongs to the cache kmalloc-256 of size 256 [ 1716.120099][T16855] The buggy address is located 24 bytes inside of [ 1716.120099][T16855] freed 256-byte region [ffff888026edac00, ffff888026edad00) [ 1716.134404][T16855] [ 1716.136722][T16855] The buggy address belongs to the physical page: [ 1716.143121][T16855] page:ffffea00009bb680 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26eda [ 1716.153524][T16855] head:ffffea00009bb680 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1716.162455][T16855] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1716.170426][T16855] page_type: 0xffffffff() [ 1716.174748][T16855] raw: 00fff00000000840 ffff888017c41b40 dead000000000122 0000000000000000 [ 1716.183410][T16855] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1716.192241][T16855] page dumped because: kasan: bad access detected [ 1716.198745][T16855] page_owner tracks the page as allocated [ 1716.204457][T16855] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12984564954, free_ts 0 [ 1716.224261][T16855] post_alloc_hook+0x1c1/0x200 [ 1716.229035][T16855] get_page_from_freelist+0x1951/0x19e0 [ 1716.234606][T16855] __alloc_pages+0x1f0/0x460 [ 1716.239190][T16855] alloc_page_interleave+0x24/0x1e0 [ 1716.244408][T16855] alloc_slab_page+0x5d/0x160 [ 1716.249086][T16855] new_slab+0x87/0x2d0 [ 1716.253245][T16855] ___slab_alloc+0xc5d/0x12f0 [ 1716.257924][T16855] __kmem_cache_alloc_node+0x19e/0x250 [ 1716.263396][T16855] kmalloc_trace+0x2a/0xe0 [ 1716.267828][T16855] bus_add_driver+0x162/0x630 [ 1716.272613][T16855] driver_register+0x23a/0x310 [ 1716.277464][T16855] usb_register_driver+0x206/0x3d0 [ 1716.282683][T16855] do_one_initcall+0x242/0x790 [ 1716.287451][T16855] do_initcall_level+0x137/0x1f0 [ 1716.292393][T16855] do_initcalls+0x69/0xd0 [ 1716.296912][T16855] kernel_init_freeable+0x3ed/0x580 [ 1716.302208][T16855] page_owner free stack trace missing [ 1716.307630][T16855] [ 1716.309966][T16855] Memory state around the buggy address: [ 1716.315763][T16855] ffff888026edab00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1716.323874][T16855] ffff888026edab80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1716.331939][T16855] >ffff888026edac00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1716.340345][T16855] ^ [ 1716.345184][T16855] ffff888026edac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1716.353245][T16855] ffff888026edad00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1716.361304][T16855] ================================================================== [ 1716.371377][T16855] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1716.378656][T16855] CPU: 1 PID: 16855 Comm: syz.1.2755 Not tainted syzkaller #0 [ 1716.386150][T16855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1716.396227][T16855] Call Trace: [ 1716.399537][T16855] [ 1716.402490][T16855] dump_stack_lvl+0x18c/0x250 [ 1716.407218][T16855] ? show_regs_print_info+0x20/0x20 [ 1716.412889][T16855] ? load_image+0x400/0x400 [ 1716.417429][T16855] panic+0x2dc/0x730 [ 1716.421354][T16855] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1716.427547][T16855] ? bpf_jit_dump+0xd0/0xd0 [ 1716.432088][T16855] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1716.438188][T16855] ? _raw_spin_unlock+0x40/0x40 [ 1716.443064][T16855] ? dvb_device_open+0xca/0x370 [ 1716.448030][T16855] check_panic_on_warn+0x84/0xa0 [ 1716.453003][T16855] ? dvb_device_open+0xca/0x370 [ 1716.457877][T16855] end_report+0x6f/0x130 [ 1716.462151][T16855] kasan_report+0x128/0x150 [ 1716.466683][T16855] ? chrdev_open+0x3e3/0x6a0 [ 1716.471291][T16855] ? dvb_device_open+0xca/0x370 [ 1716.476221][T16855] dvb_device_open+0xca/0x370 [ 1716.480980][T16855] ? do_raw_spin_unlock+0x121/0x230 [ 1716.486170][T16855] chrdev_open+0x5cc/0x6a0 [ 1716.490639][T16855] ? cd_forget+0x160/0x160 [ 1716.495140][T16855] ? fsnotify_perm+0x3ed/0x5e0 [ 1716.499902][T16855] ? cd_forget+0x160/0x160 [ 1716.504322][T16855] do_dentry_open+0x8c6/0x1500 [ 1716.509099][T16855] path_openat+0x27f1/0x3230 [ 1716.513699][T16855] ? do_sys_openat2+0xda/0x1d0 [ 1716.518466][T16855] ? verify_lock_unused+0x140/0x140 [ 1716.523772][T16855] ? do_filp_open+0x430/0x430 [ 1716.528475][T16855] ? asan.module_dtor+0x20/0x20 [ 1716.533328][T16855] do_filp_open+0x1f5/0x430 [ 1716.537914][T16855] ? vfs_tmpfile+0x490/0x490 [ 1716.542510][T16855] ? preempt_schedule_common+0x82/0xc0 [ 1716.548059][T16855] ? _raw_spin_unlock+0x3a/0x40 [ 1716.552904][T16855] ? alloc_fd+0x58f/0x630 [ 1716.557232][T16855] do_sys_openat2+0x134/0x1d0 [ 1716.561905][T16855] ? do_sys_open+0xe0/0xe0 [ 1716.566316][T16855] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1716.572292][T16855] ? lock_chain_count+0x20/0x20 [ 1716.577226][T16855] __x64_sys_openat+0x139/0x160 [ 1716.582072][T16855] do_syscall_64+0x55/0xa0 [ 1716.586489][T16855] ? clear_bhb_loop+0x40/0x90 [ 1716.591275][T16855] ? clear_bhb_loop+0x40/0x90 [ 1716.596123][T16855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1716.602100][T16855] RIP: 0033:0x7fcc1b55cfce [ 1716.606510][T16855] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1716.626216][T16855] RSP: 002b:00007fcc1c3c0b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1716.634819][T16855] RAX: ffffffffffffffda RBX: 00007fcc1c3c16c0 RCX: 00007fcc1b55cfce [ 1716.642825][T16855] RDX: 0000000000000e82 RSI: 00007fcc1c3c0c00 RDI: ffffffffffffff9c [ 1716.650803][T16855] RBP: 00007fcc1c3c0c00 R08: 0000000000000000 R09: 0000000000000000 [ 1716.658880][T16855] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1716.666850][T16855] R13: 00007fcc1b816128 R14: 00007fcc1b816090 R15: 00007ffd0dcdb058 [ 1716.674839][T16855] [ 1716.678296][T16855] Kernel Offset: disabled [ 1716.682623][T16855] Rebooting in 86400 seconds..