last executing test programs: 3.879889294s ago: executing program 3 (id=5508): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000040) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4) sendto(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x20008881, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @flat=@weak_handle={0x77682a85, 0xb, 0x1}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x0, 0x13}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 3.753817163s ago: executing program 3 (id=5509): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0xd}, 'port1\x00', 0xf3, 0x1b1c06, 0xfffffffa, 0x4, 0x1000000, 0x0, 0x1, 0x0, 0x0, 0x8}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) 3.649738936s ago: executing program 3 (id=5510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e032800008c71ef288563"], 0xffdd) 2.37858145s ago: executing program 0 (id=5533): timer_create(0x8, 0x0, &(0x7f0000002700)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x110, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@lifetime_val={0x24, 0x9, {0xf, 0xedcd, 0x9, 0x100}}]}, 0x110}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) 2.377692049s ago: executing program 0 (id=5534): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x4f89a66f80a8de43, 0x109031, 0xffffffffffffffff, 0x10000000) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00e9ffffff940200000200000040000000000000000000200000000000000000002d8f38000300feff0500030001000000030000002dffffffffffffff06"], 0xe8) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x6}], 0x1, 0x40002021, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100000100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x1, 0x4, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffa, 0x4, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xf9, 0x7]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa64fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.144427565s ago: executing program 0 (id=5535): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000440)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() signalfd4(r0, &(0x7f0000000180)={[0x8]}, 0x8, 0x40000) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 1.579936443s ago: executing program 3 (id=5536): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0xfffffffffffffdfb, 0x10103, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) close(r0) 1.380316937s ago: executing program 1 (id=5537): semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) 1.378691715s ago: executing program 1 (id=5538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000000824000180090001006d617371000000001400028008004140000000040800024000000001"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 1.22005857s ago: executing program 1 (id=5539): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000580), 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='naa.600140', 0xa) 1.139980607s ago: executing program 1 (id=5540): r0 = socket$kcm(0x29, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r0, r3, 0x0, 0x8000fb00) 1.029569778s ago: executing program 0 (id=5541): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r0, &(0x7f0000000000)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) 840.04293ms ago: executing program 0 (id=5542): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x98}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r3, 0xfffd, 0x7, 0x7, 0x0, 0x8}, 0x14) 729.90441ms ago: executing program 0 (id=5543): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x4004b, 0x4) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/7, 0x7}, 0xf}], 0x1, 0x0, 0x0) 479.877713ms ago: executing program 3 (id=5544): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x38, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x82}]}, 0x38}, 0x1, 0x0, 0x0, 0x44840}, 0x4) 428.527645ms ago: executing program 3 (id=5545): socket$tipc(0x1e, 0x5, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) signalfd(r0, &(0x7f00000000c0)={[0xc]}, 0x8) userfaultfd(0x801) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "6ffaac80b42d4daa69fd675276120fb9e784b22d8b9cf208", "637d2b0b241b123649b3588b3462d75cfebd1ba27800cf814c4e81820e71f96c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f00000000c0)=0xfe, 0x4) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x7fffffffffffffff}) 190.190891ms ago: executing program 2 (id=5547): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) 190.026817ms ago: executing program 2 (id=5548): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/nvmet/ports/1/subsystems/testnqn\x00') 164.134392ms ago: executing program 2 (id=5549): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ff"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x80, r0, 0x4000}, 0x38) 157.833553ms ago: executing program 1 (id=5550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000006c000000160a01040000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c000380140001006c6f00000000000000000000000000001400010064756d6d79300000000000000000000060000000030a01040000000000000000010000000900010073797a30000000000900030073797a3000000000200004801400030070696d7265673100000000000000000008000240000000000b00070066696c746572000008000a400000000158000000060a01040000000000000000010000000900010073797a30000000000900020073797a30000000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a300000000050000000030a01040000000000000000010000000900010073797a30000000000900030073797a31000000001400048008000140000000040800024000000064080007006e61740008000a400000000140000000"], 0x1fc}}, 0x0) 142.966503ms ago: executing program 2 (id=5551): semctl$SETALL(0x0, 0x0, 0x11, 0x0) 67.873639ms ago: executing program 2 (id=5552): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'s526\x00', [0x140, 0x8, 0xffffffd3, 0x2, 0x10000007, 0x7, 0x8002, 0x8000, 0xac, 0xc72d, 0x0, 0x6, 0x3, 0xa, 0x29, 0x72ef, 0x101, 0x6, 0x6, 0x9, 0x24, 0x6, 0xa2d8, 0x9, 0x1000, 0x8, 0x2, 0xffffff7f, 0x383, 0x8001, 0x4]}) 67.570706ms ago: executing program 2 (id=5553): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000006c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r2, 0x0, 0x2) 0s ago: executing program 1 (id=5554): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000300), 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') kernel console output (not intermixed with test programs): 14 [ 1372.937177][T22197] set match dimension is over the limit! [ 1373.578170][T22223] binder: 22221:22223 ioctl 400c620e 0 returned -14 [ 1374.249955][T22231] binder: 22226:22231 ioctl 400c620e 0 returned -14 [ 1375.770253][T22255] binder: 22253:22255 ioctl 400c620e 0 returned -14 [ 1377.677587][T22286] binder: 22283:22286 ioctl 400c620e 0 returned -14 [ 1378.607832][T22295] binder: 22293:22295 ioctl 400c620e 0 returned -14 [ 1378.818526][T22298] binder: 22296:22298 ioctl 400c620e 0 returned -14 [ 1379.599102][T22307] binder: 22299:22307 ioctl 400c620e 0 returned -14 [ 1380.316444][T22314] binder: 22310:22314 ioctl 400c620e 0 returned -14 [ 1380.698360][T22323] set match dimension is over the limit! [ 1381.852823][T22327] binder: 22325:22327 ioctl 400c620e 0 returned -14 [ 1382.797716][T22346] binder: 22344:22346 ioctl 400c620e 0 returned -14 [ 1384.677706][T22356] set match dimension is over the limit! [ 1385.095052][T22371] binder: 22369:22371 ioctl 400c620e 0 returned -14 [ 1385.781693][T22377] set match dimension is over the limit! [ 1386.008688][T22384] binder: 22381:22384 ioctl 400c620e 0 returned -14 [ 1386.612579][T22388] set match dimension is over the limit! [ 1388.316351][T22416] binder: 22413:22416 ioctl 400c620e 0 returned -14 [ 1388.629425][T22418] binder: 22415:22418 ioctl 400c620e 0 returned -14 [ 1391.080538][T22452] binder: 22448:22452 ioctl 400c620e 0 returned -14 [ 1391.251534][T22440] set match dimension is over the limit! [ 1392.076381][T22457] binder: 22455:22457 ioctl 400c620e 0 returned -14 [ 1393.096183][T22467] binder: 22465:22467 ioctl 400c620e 0 returned -14 [ 1394.156797][T22484] binder: 22481:22484 ioctl 400c620e 0 returned -14 [ 1394.574097][T22488] binder: 22486:22488 ioctl 400c620e 0 returned -14 [ 1396.654560][T22510] set match dimension is over the limit! [ 1397.180664][T22527] binder: 22523:22527 ioctl 400c620e 0 returned -14 [ 1397.202263][T22528] binder: 22525:22528 ioctl 400c620e 0 returned -14 [ 1401.035577][T22569] binder: 22565:22569 ioctl 400c620e 0 returned -14 [ 1402.178105][T22568] set match dimension is over the limit! [ 1402.481730][T22592] binder: 22588:22592 ioctl 400c620e 0 returned -14 [ 1403.958979][T22602] set match dimension is over the limit! [ 1404.236944][T22614] binder: 22612:22614 ioctl 400c620e 0 returned -14 [ 1406.249772][T22642] binder: 22640:22642 ioctl 400c620e 0 returned -14 [ 1407.556994][T22666] binder: 22660:22666 ioctl 400c620e 0 returned -14 [ 1408.587615][T22677] binder: 22675:22677 ioctl 400c620e 0 returned -14 [ 1408.807263][T22680] binder: 22678:22680 ioctl 400c620e 0 returned -14 [ 1409.518694][T22683] binder: 22681:22683 ioctl 400c620e 0 returned -14 [ 1409.954633][T22688] binder: 22685:22688 ioctl 400c620e 0 returned -14 [ 1410.541921][T22696] binder: 22694:22696 ioctl 400c620e 0 returned -14 [ 1413.021984][T22731] set match dimension is over the limit! [ 1415.966878][T22757] set match dimension is over the limit! [ 1418.156650][T22816] binder: 22814:22816 ioctl 400c620e 0 returned -14 [ 1418.874809][T22823] binder: 22821:22823 ioctl 400c620e 0 returned -14 [ 1420.573987][T22839] binder: 22835:22839 ioctl 400c620e 0 returned -14 [ 1420.597757][T22833] set match dimension is over the limit! [ 1421.017044][T22837] binder: 22832:22837 ioctl 400c620e 0 returned -14 [ 1421.608130][T22842] binder: 22840:22842 ioctl 400c620e 0 returned -14 [ 1421.752219][T22845] binder: 22843:22845 ioctl 400c620e 0 returned -14 [ 1422.232879][T22848] binder: 22846:22848 ioctl 400c620e 0 returned -14 [ 1422.674651][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.693599][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.766676][T22856] binder: 22853:22856 ioctl 400c620e 0 returned -14 [ 1424.338520][T22873] set match dimension is over the limit! [ 1426.849802][T22910] binder: 22907:22910 ioctl 400c620e 0 returned -14 [ 1427.035821][T22909] set match dimension is over the limit! [ 1428.441060][T22928] binder: 22925:22928 ioctl 400c620e 0 returned -14 [ 1428.774188][T22923] set match dimension is over the limit! [ 1429.677182][T22941] binder: 22936:22941 ioctl 400c620e 0 returned -14 [ 1432.037689][T22962] set match dimension is over the limit! [ 1432.952298][T22988] binder: 22984:22988 ioctl 400c620e 0 returned -14 [ 1437.106649][T23047] binder: 23045:23047 ioctl 400c620e 0 returned -14 [ 1437.635117][T23041] set match dimension is over the limit! [ 1438.414620][T23060] binder: 23056:23060 ioctl 400c620e 0 returned -14 [ 1438.517717][T23061] binder: 23058:23061 ioctl 400c620e 0 returned -14 [ 1439.494610][T23067] binder: 23064:23067 ioctl 400c620e 0 returned -14 [ 1439.969671][T23071] set match dimension is over the limit! [ 1440.895014][T23091] binder: 23089:23091 ioctl 400c620e 0 returned -14 [ 1444.587444][T23124] set match dimension is over the limit! [ 1445.933608][T23143] binder: 23140:23143 ioctl 400c620e 0 returned -14 [ 1446.759929][T23158] binder: 23153:23158 ioctl 400c620e 0 returned -14 [ 1446.852586][T23149] set match dimension is over the limit! [ 1448.851989][T23165] set match dimension is over the limit! [ 1448.914848][T23169] binder: 23166:23169 ioctl 400c620e 0 returned -14 [ 1449.992263][T23175] binder: 23171:23175 ioctl 400c620e 0 returned -14 [ 1450.295962][T23180] binder: 23177:23180 ioctl 400c620e 0 returned -14 [ 1451.988692][T23189] set match dimension is over the limit! [ 1452.016588][T23201] binder: 23199:23201 ioctl 400c620e 0 returned -14 [ 1454.053464][T23217] set match dimension is over the limit! [ 1454.561635][T23220] binder: 23215:23220 ioctl 400c620e 0 returned -14 [ 1455.235867][T23234] binder: 23229:23234 ioctl 400c620e 0 returned -14 [ 1460.577166][T23305] set match dimension is over the limit! [ 1461.767510][T23322] binder: 23320:23322 ioctl 400c620e 0 returned -14 [ 1465.286108][T23369] binder: 23367:23369 ioctl 400c620e 0 returned -14 [ 1465.545376][T23370] set match dimension is over the limit! [ 1467.319960][T23383] set match dimension is over the limit! [ 1469.041582][T23396] set match dimension is over the limit! [ 1469.788701][T23410] set match dimension is over the limit! [ 1472.028453][T23423] set match dimension is over the limit! [ 1475.732615][T23489] set match dimension is over the limit! [ 1476.811183][T23497] set match dimension is over the limit! [ 1481.931380][T23572] set match dimension is over the limit! [ 1484.083536][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.086584][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.306283][T23611] set match dimension is over the limit! [ 1486.103530][T23629] set match dimension is over the limit! [ 1490.597664][T23707] set match dimension is over the limit! [ 1502.286767][T23866] set match dimension is over the limit! [ 1502.413765][T23871] set match dimension is over the limit! [ 1507.810282][T23964] set match dimension is over the limit! [ 1521.602410][T24193] set match dimension is over the limit! [ 1545.514992][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.519011][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.178469][T24599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4309'. [ 1606.963426][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.965462][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 1625.115181][T25823] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4558'. [ 1634.972356][T26019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1634.975685][T26019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1635.015872][T26019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1635.021887][T26019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1635.102291][T21215] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.107616][T21215] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.113047][T21215] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.120855][T21215] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.703742][T26035] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4601'. [ 1636.813499][T26051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1636.815934][T26051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.886200][T26051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1636.897324][T26051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1636.992259][T21215] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.996004][T21215] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.000341][T21215] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.005638][T21215] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.288095][T26217] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4637'. [ 1646.506407][T26250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4642'. [ 1646.510572][T26250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4642'. [ 1648.564216][T26284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4649'. [ 1651.125916][T26325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4658'. [ 1651.128939][T26325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4658'. [ 1652.195872][T26337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4660'. [ 1664.617633][T26599] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4712'. [ 1665.666410][T26612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1665.668866][T26612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1665.931306][T26612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1665.957628][T26612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1666.432384][T26022] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.436526][T26022] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.443743][T26022] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.452123][T26022] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.393214][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.395440][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.014394][ T5750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1669.018080][ T5750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1669.021480][ T5750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1669.026297][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1669.029787][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1669.955659][T26022] bridge_slave_1: left allmulticast mode [ 1669.957485][T26022] bridge_slave_1: left promiscuous mode [ 1669.961208][T26022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1669.968053][T26022] bridge_slave_0: left allmulticast mode [ 1669.986403][T26022] bridge_slave_0: left promiscuous mode [ 1669.990861][T26022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.254935][T26022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1670.264409][T26022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1670.272815][T26022] bond0 (unregistering): Released all slaves [ 1670.306396][ T5459] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1670.719217][T26022] hsr_slave_0: left promiscuous mode [ 1670.722086][T26022] hsr_slave_1: left promiscuous mode [ 1670.724881][T26022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1670.727646][T26022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1671.001257][T26022] team0 (unregistering): Port device team_slave_1 removed [ 1671.024665][T26022] team0 (unregistering): Port device team_slave_0 removed [ 1671.112427][ T64] Bluetooth: hci0: command tx timeout [ 1671.144673][ T5459] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1671.320916][T26688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1671.327019][T26688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.330415][T26688] bridge_slave_0: entered allmulticast mode [ 1671.337746][T26688] bridge_slave_0: entered promiscuous mode [ 1671.347254][T26688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1671.350525][T26688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.355490][T26688] bridge_slave_1: entered allmulticast mode [ 1671.360546][T26688] bridge_slave_1: entered promiscuous mode [ 1671.406609][T26688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1671.416831][T26688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1671.454607][T26688] team0: Port device team_slave_0 added [ 1671.460526][T26688] team0: Port device team_slave_1 added [ 1671.478897][T26688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1671.481191][T26688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1671.491727][T26688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1671.496405][T26688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1671.498633][T26688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1671.506830][T26688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1671.540557][ T5459] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1671.555810][T26688] hsr_slave_0: entered promiscuous mode [ 1671.558891][T26688] hsr_slave_1: entered promiscuous mode [ 1671.561705][T26688] debugfs: 'hsr0' already exists in 'hsr' [ 1671.564289][T26688] Cannot create hsr debugfs directory [ 1672.289010][T26688] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1672.297005][T26688] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1672.300060][T26688] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1672.304997][T26688] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1672.308976][T26688] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1672.319602][T26688] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1672.331401][T26688] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1672.341782][T26688] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1672.425210][T26688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1672.450019][T26688] 8021q: adding VLAN 0 to HW filter on device team0 [ 1672.465132][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.467525][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1672.479360][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.481647][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1672.905049][T26688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1672.950960][T26688] veth0_vlan: entered promiscuous mode [ 1672.958258][T26688] veth1_vlan: entered promiscuous mode [ 1672.989354][T26688] veth0_macvtap: entered promiscuous mode [ 1672.995525][T26688] veth1_macvtap: entered promiscuous mode [ 1673.028347][T26688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1673.046503][T26688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1673.122258][T26022] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.125901][T26022] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.143977][T21215] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.159763][T21215] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.171139][ T9625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1673.178267][ T9625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1673.191425][ T9625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1673.194125][ T64] Bluetooth: hci0: command tx timeout [ 1673.198150][ T9625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1674.186196][T26842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1674.190303][T26842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.275967][T26842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1674.284711][T26842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1674.422405][T21215] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.426919][T21215] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.432236][T21215] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.436791][T21215] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.272509][T26861] warning: `syz.0.4755' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1675.282600][ T64] Bluetooth: hci0: command tx timeout [ 1676.630941][T26904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.633897][T26904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.741471][T26904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1676.747859][T26904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1676.823888][T21215] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.830174][T21215] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.842579][T21215] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.845761][T21215] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.352526][ T64] Bluetooth: hci0: command tx timeout [ 1680.184340][ T5750] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1680.192128][ T5750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1680.197390][ T5750] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1680.203783][ T5750] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1680.210454][ T5750] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1680.794089][T26984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1680.797385][T26984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.800545][T26984] bridge_slave_0: entered allmulticast mode [ 1680.804765][T26984] bridge_slave_0: entered promiscuous mode [ 1680.809854][T26984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.813219][T26984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.816479][T26984] bridge_slave_1: entered allmulticast mode [ 1680.820443][T26984] bridge_slave_1: entered promiscuous mode [ 1680.877456][T26984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1680.916829][T26984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1680.978213][T21215] bridge_slave_1: left allmulticast mode [ 1680.979926][T21215] bridge_slave_1: left promiscuous mode [ 1680.981854][T21215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.986380][T21215] bridge_slave_0: left allmulticast mode [ 1680.988752][T21215] bridge_slave_0: left promiscuous mode [ 1680.991190][T21215] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.129048][T21215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1681.138691][T21215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1681.147431][T21215] bond0 (unregistering): Released all slaves [ 1681.161474][T26984] team0: Port device team_slave_0 added [ 1681.166357][T26984] team0: Port device team_slave_1 added [ 1681.180230][T26984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1681.182662][T26984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1681.190650][T26984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1681.195253][ T5459] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1681.200256][T26984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1681.202625][T26984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1681.216325][T26984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1681.277090][T26984] hsr_slave_0: entered promiscuous mode [ 1681.279631][T26984] hsr_slave_1: entered promiscuous mode [ 1681.281757][T26984] debugfs: 'hsr0' already exists in 'hsr' [ 1681.283938][T26984] Cannot create hsr debugfs directory [ 1681.435846][T21215] hsr_slave_0: left promiscuous mode [ 1681.438776][T21215] hsr_slave_1: left promiscuous mode [ 1681.441368][T21215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1681.445997][T21215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1681.580257][T21215] team0 (unregistering): Port device team_slave_1 removed [ 1681.596640][T21215] team0 (unregistering): Port device team_slave_0 removed [ 1681.712886][ T5459] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1682.242326][ T5750] Bluetooth: hci4: command tx timeout [ 1682.387589][T26984] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1682.418416][T26984] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1682.424422][T26984] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1682.451365][T26984] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1682.461966][T26984] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1682.477284][T26984] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1682.484263][T26984] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1682.494882][T26984] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1682.615868][T26984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1682.642547][T26984] 8021q: adding VLAN 0 to HW filter on device team0 [ 1682.651973][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.654905][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1682.681270][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.684209][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1683.172120][T26984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1683.306534][T26984] veth0_vlan: entered promiscuous mode [ 1683.335888][T26984] veth1_vlan: entered promiscuous mode [ 1683.383387][T26984] veth0_macvtap: entered promiscuous mode [ 1683.397765][T26984] veth1_macvtap: entered promiscuous mode [ 1683.427346][T26984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1683.452581][T26984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1683.492494][T26022] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.497653][T26022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.522942][T26022] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.530590][T26022] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.581468][T12560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1683.591540][T12560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1683.621571][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1683.624325][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1684.322461][ T5750] Bluetooth: hci4: command tx timeout [ 1684.749136][T27113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1684.753748][T27113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.004146][T27113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1685.029592][T27113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1685.367126][T26709] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.392337][T26709] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.432004][T26709] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.439675][T26709] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.392456][ T5750] Bluetooth: hci4: command tx timeout [ 1687.432721][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1687.441437][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1687.445558][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1687.451071][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1687.456933][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1688.169705][T27171] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.174176][T27171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.178769][T27171] bridge_slave_0: entered allmulticast mode [ 1688.183624][T27171] bridge_slave_0: entered promiscuous mode [ 1688.220467][T27171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.224509][T27171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.228821][T27171] bridge_slave_1: entered allmulticast mode [ 1688.236276][T27171] bridge_slave_1: entered promiscuous mode [ 1688.271122][T27171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1688.277629][T27171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1688.370297][T27171] team0: Port device team_slave_0 added [ 1688.393306][T26709] bridge_slave_1: left allmulticast mode [ 1688.398725][T26709] bridge_slave_1: left promiscuous mode [ 1688.403866][T26709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.413661][T26709] bridge_slave_0: left allmulticast mode [ 1688.418773][T26709] bridge_slave_0: left promiscuous mode [ 1688.423709][T26709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.493709][ T5750] Bluetooth: hci4: command tx timeout [ 1688.583336][T26709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1688.603461][T26709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1688.607062][T26709] bond0 (unregistering): Released all slaves [ 1688.623219][T27171] team0: Port device team_slave_1 added [ 1688.683601][T27171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1688.696737][T27171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1688.708697][T27171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1688.715915][T27171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1688.718595][T27171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1688.732504][T27171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1688.787692][T27171] hsr_slave_0: entered promiscuous mode [ 1688.798128][T27171] hsr_slave_1: entered promiscuous mode [ 1688.993732][T26709] hsr_slave_0: left promiscuous mode [ 1689.000133][T26709] hsr_slave_1: left promiscuous mode [ 1689.007171][T26709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1689.015792][T26709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1689.329003][T26709] team0 (unregistering): Port device team_slave_1 removed [ 1689.356706][T26709] team0 (unregistering): Port device team_slave_0 removed [ 1689.512520][ T5750] Bluetooth: hci2: command tx timeout [ 1689.611023][ T5459] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1690.226483][T27171] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1690.238081][T27171] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1690.242861][T27171] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1690.249555][T27171] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1690.255387][T27171] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1690.273153][T27171] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1690.277583][T27171] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1690.286326][T27171] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1690.432070][T27171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1690.460495][T27171] 8021q: adding VLAN 0 to HW filter on device team0 [ 1690.469448][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1690.471834][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1690.484014][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1690.486357][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1691.060044][T27171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1691.112509][T27171] veth0_vlan: entered promiscuous mode [ 1691.126314][T27171] veth1_vlan: entered promiscuous mode [ 1691.159212][T27171] veth0_macvtap: entered promiscuous mode [ 1691.167782][T27171] veth1_macvtap: entered promiscuous mode [ 1691.198503][T27171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1691.214171][T27171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1691.292296][T21215] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.300765][ T9625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1691.305564][ T9625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1691.340039][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1691.342345][T21215] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.342878][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1691.346347][T21215] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.382744][T21215] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1691.592341][ T5750] Bluetooth: hci2: command tx timeout [ 1693.672705][ T5750] Bluetooth: hci2: command tx timeout [ 1695.753017][ T5750] Bluetooth: hci2: command tx timeout [ 1700.210891][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1700.218160][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1700.223331][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1700.230137][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1700.234141][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1701.230998][T26022] bridge_slave_1: left allmulticast mode [ 1701.233696][T26022] bridge_slave_1: left promiscuous mode [ 1701.237671][T26022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.242740][T26022] bridge_slave_0: left allmulticast mode [ 1701.245177][T26022] bridge_slave_0: left promiscuous mode [ 1701.247758][T26022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.324431][T26022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1701.329187][T26022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1701.336375][T26022] bond0 (unregistering): Released all slaves [ 1701.396423][T27483] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.399431][T27483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.403430][T27483] bridge_slave_0: entered allmulticast mode [ 1701.406211][T27483] bridge_slave_0: entered promiscuous mode [ 1701.409519][T27483] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.411924][T27483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.415432][T27483] bridge_slave_1: entered allmulticast mode [ 1701.424756][T27483] bridge_slave_1: entered promiscuous mode [ 1701.458783][T27483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1701.464608][T27483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1701.501343][T27483] team0: Port device team_slave_0 added [ 1701.513442][T27483] team0: Port device team_slave_1 added [ 1701.566899][ T5459] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1701.579222][T27483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1701.585451][T27483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1701.593486][T27483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1701.598307][T27483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1701.601376][T27483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1701.609388][T27483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1701.635101][T27483] hsr_slave_0: entered promiscuous mode [ 1701.637575][T27483] hsr_slave_1: entered promiscuous mode [ 1701.639794][T27483] debugfs: 'hsr0' already exists in 'hsr' [ 1701.641712][T27483] Cannot create hsr debugfs directory [ 1701.702329][T26022] hsr_slave_0: left promiscuous mode [ 1701.704839][T26022] hsr_slave_1: left promiscuous mode [ 1701.707118][T26022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1701.710267][T26022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1701.838965][T26022] team0 (unregistering): Port device team_slave_1 removed [ 1701.849020][T26022] team0 (unregistering): Port device team_slave_0 removed [ 1701.961890][ T5459] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1702.322603][ T64] Bluetooth: hci1: command tx timeout [ 1702.704346][T27483] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1702.733299][T27483] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1702.737102][T27483] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1702.755528][T27483] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1702.759889][T27483] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1702.768567][T27483] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1702.772844][T27483] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1702.778267][T27483] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1702.831997][T27483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1702.841118][T27483] 8021q: adding VLAN 0 to HW filter on device team0 [ 1702.849258][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.851648][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1702.861142][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.863409][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1703.231531][T27483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1703.259225][T27483] veth0_vlan: entered promiscuous mode [ 1703.269696][T27483] veth1_vlan: entered promiscuous mode [ 1703.286039][T27483] veth0_macvtap: entered promiscuous mode [ 1703.290994][T27483] veth1_macvtap: entered promiscuous mode [ 1703.300128][T27483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1703.306594][T27483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1703.357841][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1703.362894][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1703.379610][ T9625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1703.382791][T26022] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.383043][ T9625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1703.386013][T26022] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.386037][T26022] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.412869][T26022] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.392451][ T64] Bluetooth: hci1: command tx timeout [ 1705.429802][T27670] tmpfs: Unknown parameter './file0' [ 1705.697324][T27678] tmpfs: Unknown parameter './file0' [ 1705.843041][T27682] tmpfs: Unknown parameter './file0' [ 1706.399808][T27693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.403111][T27693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.482304][ T64] Bluetooth: hci1: command tx timeout [ 1706.496021][T27693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1706.513454][T27693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1706.672362][T26022] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.678403][T26022] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.686064][T26022] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.689662][T26022] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.562282][ T64] Bluetooth: hci1: command tx timeout [ 1709.088057][T27777] tmpfs: Unknown parameter 'n' [ 1710.649515][T27807] tmpfs: Unknown parameter 'n' [ 1711.505448][T27831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.508129][T27831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.587440][T27831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1711.603525][T27831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1711.742328][T26022] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.745424][T26022] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.748290][T26022] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.751234][T26022] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.236416][T27849] tmpfs: Bad value for 'huge' [ 1713.225658][T27871] tmpfs: Unknown parameter 'nr_blo' [ 1714.052040][T27890] tmpfs: Unknown parameter 'nr_blo' [ 1714.968013][T27914] tmpfs: Unknown parameter 'n' [ 1715.169627][T27923] tmpfs: Unknown parameter './file0' [ 1715.174324][T27925] tmpfs: Unknown parameter './file0' [ 1716.135360][T27946] tmpfs: Bad value for 'nr_blocks' [ 1716.832340][T27959] tmpfs: Bad value for 'nr_blocks' [ 1719.058778][T28016] tmpfs: Unknown parameter 'n' [ 1719.570289][T28026] tmpfs: Unknown parameter 'nr_blo' [ 1720.839649][T28056] tmpfs: Unknown parameter 'nr_blo' [ 1721.408628][T28074] tmpfs: Bad value for 'nr_blocks' [ 1721.893651][T16468] IPVS: starting estimator thread 0... [ 1721.904213][T26815] IPVS: starting estimator thread 0... [ 1722.002803][T28096] IPVS: using max 43 ests per chain, 103200 per kthread [ 1722.022587][T28097] IPVS: using max 43 ests per chain, 103200 per kthread [ 1723.958903][T26815] IPVS: starting estimator thread 0... [ 1724.011778][T16468] IPVS: starting estimator thread 0... [ 1724.043552][T28122] IPVS: using max 43 ests per chain, 103200 per kthread [ 1724.102296][T28124] IPVS: using max 42 ests per chain, 100800 per kthread [ 1729.833562][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.835691][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 1739.869996][T28350] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1740.601071][T28365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5030'. [ 1749.920168][T28508] IPVS: Error connecting to the multicast addr [ 1750.293006][T28534] nvmet: adding nsid 1 to subsystem testnqn [ 1750.305206][ T42] audit: type=1800 audit(1785986552.583:2): pid=28534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5070" name="device_path" dev="configfs" ino=108449 res=0 errno=0 [ 1750.306748][T28534] nvmet: failed to open block device (null): (-22) [ 1750.322582][ T42] audit: type=1800 audit(1785986552.583:3): pid=28534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5070" name="enable" dev="configfs" ino=108450 res=0 errno=0 [ 1750.339014][ T42] audit: type=1800 audit(1785986552.623:4): pid=28534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5070" name="addr_adrfam" dev="configfs" ino=108456 res=0 errno=0 [ 1750.440115][T28544] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5075'. [ 1750.445461][T28544] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5075'. [ 1751.706016][ T42] audit: type=1326 audit(1785986553.973:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28621 comm="syz.3.5086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1751.713425][ T42] audit: type=1326 audit(1785986553.973:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28621 comm="syz.3.5086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1751.720309][ T42] audit: type=1326 audit(1785986553.983:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28621 comm="syz.3.5086" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1751.739935][ T42] audit: type=1326 audit(1785986553.983:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28621 comm="syz.3.5086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1751.753180][ T42] audit: type=1326 audit(1785986553.983:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28621 comm="syz.3.5086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70befec code=0x7ffc0000 [ 1751.772267][ T6179] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1751.851452][T28628] ======================================================= [ 1751.851452][T28628] WARNING: The mand mount option has been deprecated and [ 1751.851452][T28628] and is ignored by this kernel. Remove the mand [ 1751.851452][T28628] option from the mount to silence this warning. [ 1751.851452][T28628] ======================================================= [ 1751.934474][ T6179] usb 5-1: Using ep0 maxpacket: 16 [ 1751.942103][ T6179] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1751.946294][ T6179] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1751.951344][ T6179] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1751.956279][ T6179] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.958815][ T6179] usb 5-1: Product: syz [ 1751.960029][ T6179] usb 5-1: Manufacturer: syz [ 1751.961471][ T6179] usb 5-1: SerialNumber: syz [ 1751.969830][ T6179] usb 5-1: 0:2 : does not exist [ 1752.264785][ T1041] usb 5-1: USB disconnect, device number 59 [ 1752.660783][T28639] batman_adv: batadv0: Adding interface: dummy0 [ 1752.663594][T28639] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1752.674012][T28639] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1752.686106][T28639] netlink: 'syz.2.5092': attribute type 10 has an invalid length. [ 1752.691083][T28639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1752.696050][T28639] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1753.222243][T26021] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1753.372314][T26021] usb 6-1: Using ep0 maxpacket: 32 [ 1753.375735][T26021] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 1753.378893][T26021] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1753.383207][T26021] usb 6-1: config 0 has no interface number 0 [ 1753.385195][T26021] usb 6-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1753.391949][T26021] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1753.396145][T26021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.399311][T26021] usb 6-1: Product: syz [ 1753.401016][T26021] usb 6-1: Manufacturer: syz [ 1753.403043][T26021] usb 6-1: SerialNumber: syz [ 1753.406965][T26021] usb 6-1: config 0 descriptor?? [ 1753.418488][T26021] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.119/input/input5 [ 1753.482322][ T6179] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1753.633788][ T6179] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1753.637426][ T6179] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1753.642659][ T6179] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1753.645592][ T6179] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.648171][ T6179] usb 7-1: Product: syz [ 1753.649512][ T6179] usb 7-1: Manufacturer: syz [ 1753.651174][ T6179] usb 7-1: SerialNumber: syz [ 1753.681765][T26815] usb 6-1: USB disconnect, device number 55 [ 1753.867464][ T6179] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1754.074476][ T6179] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1754.081414][ T6179] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 1754.322284][ T1041] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1754.471532][ T6179] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 1754.482380][ T1041] usb 5-1: Using ep0 maxpacket: 8 [ 1754.486865][ T1041] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1754.491883][ T1041] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1754.495052][ T1041] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1754.498348][ T1041] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1754.503160][ T1041] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1754.506483][ T1041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.523417][ T6179] usb 7-1: USB disconnect, device number 53 [ 1754.572086][ T6429] udevd[6429]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1754.718913][ T1041] usb 5-1: GET_CAPABILITIES returned 0 [ 1754.722862][ T1041] usbtmc 5-1:16.0: can't read capabilities [ 1754.923899][ T1041] usb 5-1: USB disconnect, device number 60 [ 1755.862054][T28711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5120'. [ 1755.872209][T28711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5120'. [ 1756.539285][T28720] ubi0: attaching mtd0 [ 1756.546753][T28720] ubi0: scanning is finished [ 1756.548612][T28720] ubi0: empty MTD device detected [ 1756.789991][T28720] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1756.809967][T28720] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1756.815656][T28720] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1756.817866][T28720] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1756.824638][T28720] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1756.826737][T28720] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1756.837519][T28720] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 318203871 [ 1756.847661][T28720] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1756.855451][T28727] ubi0: background thread "ubi_bgt0d" started, PID 28727 [ 1757.234100][ T42] audit: type=1800 audit(1785986559.523:10): pid=28737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5127" name="device_path" dev="configfs" ino=111787 res=0 errno=0 [ 1757.237705][T28737] nvmet: failed to open block device (null): (-22) [ 1757.241817][ T42] audit: type=1800 audit(1785986559.523:11): pid=28737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5127" name="enable" dev="configfs" ino=111788 res=0 errno=0 [ 1757.250649][T28737] nvmet_tcp: malformed ip/port passed: :4420 [ 1757.251686][ T42] audit: type=1800 audit(1785986559.533:12): pid=28737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5127" name="addr_trtype" dev="configfs" ino=111789 res=0 errno=0 [ 1757.260356][ T42] audit: type=1800 audit(1785986559.533:13): pid=28737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5127" name="addr_adrfam" dev="configfs" ino=111790 res=0 errno=0 [ 1757.267150][ T42] audit: type=1800 audit(1785986559.533:14): pid=28737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5127" name="addr_traddr" dev="configfs" ino=111791 res=0 errno=0 [ 1757.274706][ T42] audit: type=1800 audit(1785986559.533:15): pid=28737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5127" name="addr_trsvcid" dev="configfs" ino=111792 res=0 errno=0 [ 1757.892376][T26021] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1758.043899][T26021] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1758.048156][T26021] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1758.052599][T26021] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1758.056179][T26021] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1758.060864][T26021] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1758.068848][T26021] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1758.072989][T26021] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1758.076237][T26021] usb 8-1: Product: syz [ 1758.077909][T26021] usb 8-1: Manufacturer: syz [ 1758.085157][T26021] cdc_wdm 8-1:1.0: skipping garbage [ 1758.090836][T26021] cdc_wdm 8-1:1.0: skipping garbage [ 1758.101020][T26021] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1758.103172][T26021] cdc_wdm 8-1:1.0: Unknown control protocol [ 1758.359943][T26021] usb 8-1: USB disconnect, device number 52 [ 1758.360032][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1758.360150][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1758.360164][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1758.888697][T28809] ptrace attach of "/syz-executor exec"[26984] was attempted by ""[28809] [ 1759.124458][T28813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5153'. [ 1759.318559][T28820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5156'. [ 1760.712427][ T1041] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 1760.733451][T28875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5178'. [ 1760.813119][T28879] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.5180'. [ 1760.832262][T26021] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1760.874164][ T1041] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1760.876132][ T1041] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1760.876157][ T1041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.876174][ T1041] usb 5-1: Product: syz [ 1760.876188][ T1041] usb 5-1: Manufacturer: syz [ 1760.876201][ T1041] usb 5-1: SerialNumber: syz [ 1760.982226][T26021] usb 7-1: Using ep0 maxpacket: 32 [ 1760.985094][T26021] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1760.987514][T26021] usb 7-1: config 0 has no interface number 0 [ 1760.990917][T26021] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1760.993784][T26021] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.996177][T26021] usb 7-1: Product: syz [ 1760.997465][T26021] usb 7-1: Manufacturer: syz [ 1760.998881][T26021] usb 7-1: SerialNumber: syz [ 1761.001653][T26021] usb 7-1: config 0 descriptor?? [ 1761.005510][T26021] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1761.008172][T26021] usb 7-1: selecting invalid altsetting 1 [ 1761.009881][T26021] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1761.020969][T26021] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1761.024291][T26021] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1761.028048][T26021] usb 7-1: media controller created [ 1761.039549][T26021] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1761.088256][ T1041] snd-usb-caiaq 5-1:1.0: invalid EPs [ 1761.090092][ T1041] usb 5-1: unable to init card! (ret=-22) [ 1761.095003][ T1041] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 1761.098267][T28890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5185'. [ 1761.213455][T26021] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1761.217803][T26021] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1761.220990][T26021] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1761.273273][T26021] usb 7-1: USB disconnect, device number 54 [ 1761.287375][ T6179] usb 5-1: USB disconnect, device number 61 [ 1761.744873][T28915] Illegal XDP return value 696150023 on prog (id 922) dev N/A, expect packet loss! [ 1762.045130][ T6179] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1762.215018][ T6179] usb 7-1: Using ep0 maxpacket: 16 [ 1762.224213][ T6179] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1762.230092][ T6179] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1762.244716][ T6179] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1762.249539][ T6179] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.254787][ T6179] usb 7-1: Product: syz [ 1762.256246][ T6179] usb 7-1: Manufacturer: syz [ 1762.257774][ T6179] usb 7-1: SerialNumber: syz [ 1762.261575][ T6179] usb 7-1: config 0 descriptor?? [ 1762.267637][ T6179] hub 7-1:0.0: bad descriptor, ignoring hub [ 1762.269816][ T6179] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1762.273638][ T6179] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1762.406295][ T6179] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1762.437140][ T5747] udevd[5747]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1762.595821][ T6179] usb 7-1: USB disconnect, device number 55 [ 1762.601125][T28949] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5199'. [ 1762.647138][T28946] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1762.650044][T28946] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1762.660803][T28946] vhci_hcd vhci_hcd.0: Device attached [ 1762.751307][T28960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5202'. [ 1762.811673][T28952] vhci_hcd: connection closed [ 1762.822720][T26022] vhci_hcd vhci_hcd.0: stop threads [ 1762.827857][T26022] vhci_hcd vhci_hcd.0: release socket [ 1762.837472][T26022] vhci_hcd vhci_hcd.0: disconnect device [ 1762.837564][T26021] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1762.885476][T28968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5203'. [ 1762.891947][T28968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5203'. [ 1762.942342][ T1041] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1763.092768][T28972] Invalid source name [ 1763.104198][ T1041] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1763.112283][ T1041] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1763.119695][ T1041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.130813][ T1041] usb 6-1: config 0 descriptor?? [ 1763.254452][T28982] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 1763.347821][ T1041] usbhid 6-1:0.0: can't add hid device: -71 [ 1763.349800][ T1041] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1763.359139][ T1041] usb 6-1: USB disconnect, device number 56 [ 1763.802326][T16468] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1763.964514][T16468] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1763.969395][T16468] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1763.973051][T16468] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.979574][T16468] usb 6-1: config 0 descriptor?? [ 1764.783802][T29015] usb usb8: usbfs: process 29015 (syz.2.5223) did not claim interface 0 before use [ 1764.792877][T16468] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 1764.796099][T16468] input: Aiptek as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input6 [ 1764.991915][T29017] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5224'. [ 1765.097188][T16468] usb 6-1: USB disconnect, device number 57 [ 1765.099180][ C3] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1765.345114][T29025] overlayfs: failed to resolve './file1': -2 [ 1765.352540][ T42] audit: type=1326 audit(1785986567.643:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29022 comm="syz.3.5227" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70befec code=0x0 [ 1765.902645][T26815] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 1766.118632][T26815] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1766.125214][T26815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.132229][T26815] usb 6-1: Product: syz [ 1766.138353][T26815] usb 6-1: Manufacturer: syz [ 1766.144658][T26815] usb 6-1: SerialNumber: syz [ 1766.580307][T26815] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1766.650918][T29040] Invalid source name [ 1766.696128][T29044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5235'. [ 1768.582831][T26815] usb 7-1: new low-speed USB device number 56 using dummy_hcd [ 1768.755442][T26815] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1768.765642][T26815] usb 7-1: config 0 has no interface number 0 [ 1768.774434][T26815] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1768.788016][T26815] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1768.793715][T26815] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1768.798874][T26815] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1768.805642][ T6179] usb 6-1: USB disconnect, device number 58 [ 1768.807142][T26815] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1768.813277][T26815] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1768.823503][ T6179] usblp0: removed [ 1768.850966][T26815] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1768.867586][T26815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1768.927887][T26815] usb 7-1: config 0 descriptor?? [ 1768.936223][T29126] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1768.939369][T29126] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1768.982748][T26815] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1769.024913][T29142] random: crng reseeded on system resumption [ 1769.167255][ T6179] usb 7-1: USB disconnect, device number 56 [ 1769.179305][ T6179] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1769.609544][T29158] syz.1.5272 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=1000 [ 1769.613723][T29158] CPU: 2 UID: 0 PID: 29158 Comm: syz.1.5272 Not tainted syzkaller #0 PREEMPT(full) [ 1769.613742][T29158] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1769.613750][T29158] Call Trace: [ 1769.613764][T29158] [ 1769.613771][T29158] dump_stack_lvl+0x100/0x190 [ 1769.613798][T29158] dump_header+0xfb/0x606 [ 1769.613816][T29158] oom_kill_process.cold+0xd/0x330 [ 1769.613831][T29158] out_of_memory+0x340/0x14f0 [ 1769.613858][T29158] ? __pfx_out_of_memory+0x10/0x10 [ 1769.613882][T29158] mem_cgroup_out_of_memory+0xc6/0x130 [ 1769.613899][T29158] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1769.613912][T29158] ? find_held_lock+0x2b/0x80 [ 1769.613931][T29158] ? do_raw_spin_unlock+0x145/0x1e0 [ 1769.613945][T29158] ? _raw_spin_unlock+0x28/0x50 [ 1769.613962][T29158] try_charge_memcg+0x6e5/0xdf0 [ 1769.613981][T29158] ? __pfx_try_charge_memcg+0x10/0x10 [ 1769.613998][T29158] ? find_held_lock+0x2b/0x80 [ 1769.614018][T29158] ? rcu_read_unlock+0x17/0x60 [ 1769.614037][T29158] ? rcu_read_unlock+0x17/0x60 [ 1769.614061][T29158] __memcg_slab_post_alloc_hook+0x469/0x1160 [ 1769.614086][T29158] ? kasan_unpoison+0x27/0x60 [ 1769.614103][T29158] __kmalloc_node_track_caller_noprof+0x64f/0x830 [ 1769.614122][T29158] ? proc_sys_evict_inode+0xf1/0x170 [ 1769.614138][T29158] ? __pfx_is_module_address+0x10/0x10 [ 1769.614151][T29158] ? register_net_sysctl_sz+0x222/0x430 [ 1769.614170][T29158] ? __addrconf_sysctl_register+0xbb/0x360 [ 1769.614189][T29158] kmemdup_noprof+0x29/0x60 [ 1769.614203][T29158] __addrconf_sysctl_register+0xbb/0x360 [ 1769.614218][T29158] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 1769.614234][T29158] ? lockdep_init_map_type+0x5c/0x250 [ 1769.614244][T29158] ? mld_in_v1_mode+0x2b2/0x3a0 [ 1769.614262][T29158] addrconf_sysctl_register+0x163/0x200 [ 1769.614278][T29158] ipv6_add_dev+0xaf2/0x1520 [ 1769.614296][T29158] addrconf_notify+0x5db/0x1ba0 [ 1769.614316][T29158] ? __pfx_tls_dev_event+0x10/0x10 [ 1769.614328][T29158] ? __pfx_addrconf_notify+0x10/0x10 [ 1769.614345][T29158] ? ip6mr_device_event+0x1c4/0x230 [ 1769.614364][T29158] notifier_call_chain+0x99/0x3f0 [ 1769.614384][T29158] call_netdevice_notifiers_info+0xbe/0x110 [ 1769.614398][T29158] register_netdevice+0x1998/0x25a0 [ 1769.614419][T29158] ? __pfx_register_netdevice+0x10/0x10 [ 1769.614436][T29158] ? register_vlan_dev+0x5f8/0x910 [ 1769.614459][T29158] register_vlan_dev+0x36c/0x910 [ 1769.614480][T29158] vlan_newlink+0x48c/0x750 [ 1769.614495][T29158] ? __pfx_vlan_newlink+0x10/0x10 [ 1769.614508][T29158] rtnl_newlink+0x1499/0x2380 [ 1769.614531][T29158] ? __pfx_rtnl_newlink+0x10/0x10 [ 1769.614547][T29158] ? is_bpf_text_address+0x8a/0x1a0 [ 1769.614565][T29158] ? __kernel_text_address+0xd/0x30 [ 1769.614582][T29158] ? unwind_get_return_address+0x59/0xa0 [ 1769.614616][T29158] ? find_held_lock+0x2b/0x80 [ 1769.614630][T29158] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1769.614647][T29158] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1769.614665][T29158] ? __pfx_rtnl_newlink+0x10/0x10 [ 1769.614682][T29158] rtnetlink_rcv_msg+0x95e/0xe90 [ 1769.614701][T29158] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1769.614720][T29158] ? __lock_acquire+0x49f/0x1a40 [ 1769.614740][T29158] netlink_rcv_skb+0x159/0x420 [ 1769.614755][T29158] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1769.614774][T29158] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1769.614792][T29158] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1769.614808][T29158] netlink_unicast+0x585/0x850 [ 1769.614823][T29158] ? __pfx_netlink_unicast+0x10/0x10 [ 1769.614840][T29158] netlink_sendmsg+0x8b0/0xda0 [ 1769.614855][T29158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1769.614871][T29158] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1769.614890][T29158] ____sys_sendmsg+0xa4d/0xbe0 [ 1769.614903][T29158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1769.614917][T29158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1769.614935][T29158] ___sys_sendmsg+0x190/0x1e0 [ 1769.614949][T29158] ? __pfx____sys_sendmsg+0x10/0x10 [ 1769.614963][T29158] ? futex_wait+0x11e/0x370 [ 1769.614984][T29158] ? find_held_lock+0x2b/0x80 [ 1769.615008][T29158] __sys_sendmsg+0x160/0x210 [ 1769.615033][T29158] ? __pfx___sys_sendmsg+0x10/0x10 [ 1769.615060][T29158] __do_fast_syscall_32+0xe7/0x970 [ 1769.615083][T29158] do_fast_syscall_32+0x32/0x70 [ 1769.615099][T29158] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1769.615114][T29158] RIP: 0023:0xf709efec [ 1769.615128][T29158] Code: Unable to access opcode bytes at 0xf709efc2. [ 1769.615133][T29158] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1769.615145][T29158] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000080000280 [ 1769.615152][T29158] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1769.615159][T29158] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1769.615165][T29158] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1769.615171][T29158] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1769.615186][T29158] [ 1769.615191][T29158] memory: usage 96kB, limit 96kB, failcnt 35 [ 1769.762395][T16468] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1769.785512][T29158] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 1769.788271][T29158] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 1769.790569][T29158] Memory cgroup stats for /syz1/test: [ 1769.790812][T29158] cache 0 [ 1769.793595][T29158] rss 0 [ 1769.794518][T29158] rss_huge 0 [ 1769.795574][T29158] shmem 0 [ 1769.796528][T29158] mapped_file 0 [ 1769.797668][T29158] dirty 0 [ 1769.798698][T29158] writeback 0 [ 1769.799767][T29158] workingset_refault_anon 0 [ 1769.801199][T29158] workingset_refault_file 0 [ 1769.802894][T29158] swap 0 [ 1769.804300][T29158] swapcached 0 [ 1769.805874][T29158] pgpgin 0 [ 1769.807142][T29158] pgpgout 0 [ 1769.808439][T29158] pgfault 17 [ 1769.809669][T29158] pgmajfault 0 [ 1769.810763][T29158] inactive_anon 0 [ 1769.811945][T29158] active_anon 0 [ 1769.813198][T29158] inactive_file 0 [ 1769.814459][T29158] active_file 0 [ 1769.815668][T29158] unevictable 0 [ 1769.816819][T29158] hierarchical_memory_limit 98304 [ 1769.818443][T29158] hierarchical_memsw_limit 9223372036854771712 [ 1769.820480][T29158] total_cache 0 [ 1769.821692][T29158] total_rss 0 [ 1769.826322][T29158] total_rss_huge 0 [ 1769.827754][T29158] total_shmem 0 [ 1769.829119][T29158] total_mapped_file 0 [ 1769.830648][T29158] total_dirty 0 [ 1769.832121][T29158] total_writeback 0 [ 1769.833437][T29158] total_workingset_refault_anon 0 [ 1769.835030][T29158] total_workingset_refault_file 0 [ 1769.836627][T29158] total_swap 0 [ 1769.837731][T29158] total_swapcached 0 [ 1769.838998][T29158] total_pgpgin 0 [ 1769.840142][T29158] total_pgpgout 0 [ 1769.841311][T29158] total_pgfault 17 [ 1769.842617][T29158] total_pgmajfault 0 [ 1769.843914][T29158] total_inactive_anon 0 [ 1769.845230][T29158] total_active_anon 0 [ 1769.846505][T29158] total_inactive_file 0 [ 1769.847836][T29158] total_active_file 0 [ 1769.849140][T29158] total_unevictable 0 [ 1769.850424][T29158] anon_cost 0 [ 1769.851497][T29158] file_cost 0 [ 1769.852658][T29158] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.5272,pid=29157,uid=0 [ 1769.857813][T29158] Memory cgroup out of memory: Killed process 29157 (syz.1.5272) total-vm:104072kB, anon-rss:1304kB, file-rss:23304kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 1769.982252][T16468] usb 8-1: Using ep0 maxpacket: 16 [ 1769.985415][T16468] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1769.988960][T16468] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1769.993522][T16468] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1769.996405][T16468] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.998936][T16468] usb 8-1: Product: syz [ 1770.000246][T16468] usb 8-1: Manufacturer: syz [ 1770.001726][T16468] usb 8-1: SerialNumber: syz [ 1770.010514][T16468] usb 8-1: 0:2 : does not exist [ 1770.215217][T16468] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1770.235970][T16468] usb 8-1: USB disconnect, device number 53 [ 1770.257272][ T6429] udevd[6429]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1770.708742][T29168] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5275'. [ 1770.758717][T29170] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1770.956459][ T42] audit: type=1800 audit(1785986573.243:17): pid=29176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5279" name="zone_nr_conv" dev="configfs" ino=112125 res=0 errno=0 [ 1771.195980][T29188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5284'. [ 1771.243646][T29191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5285'. [ 1771.405507][T29197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5289'. [ 1771.423148][T29199] No source specified [ 1771.624713][T29208] ip6gretap1: entered promiscuous mode [ 1771.754669][T15940] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 1771.914427][T15940] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1771.919905][T15940] usb 6-1: config 0 has no interface number 0 [ 1771.922849][T15940] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1771.927785][T15940] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1771.932313][T15940] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1771.939318][T15940] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1771.943492][T15940] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1771.947085][T15940] usb 6-1: Product: syz [ 1771.948948][T15940] usb 6-1: SerialNumber: syz [ 1771.954626][T15940] usb 6-1: config 0 descriptor?? [ 1771.963761][T15940] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 1771.968651][T15940] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input7 [ 1772.170529][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1772.170614][T16468] usb 6-1: USB disconnect, device number 59 [ 1772.173721][ C2] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1772.189950][T16468] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1772.214711][ T42] audit: type=1326 audit(1785986574.503:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29219 comm="syz.0.5299" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc3fec code=0x0 [ 1772.270152][T29224] netlink: 'syz.0.5299': attribute type 1 has an invalid length. [ 1772.705306][T29226] batman_adv: batadv0: Removing interface: dummy0 [ 1772.715908][T29226] bond0: (slave batadv0): Releasing backup interface [ 1772.727337][T29226] bridge_slave_0: left allmulticast mode [ 1772.731639][T29226] bridge_slave_0: left promiscuous mode [ 1772.736103][T29226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1772.748527][T29226] bridge_slave_1: left allmulticast mode [ 1772.752978][T29226] bridge_slave_1: left promiscuous mode [ 1772.756851][T29226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.781956][T29226] bond0: (slave bond_slave_0): Releasing backup interface [ 1772.792047][T29226] bond0: (slave bond_slave_1): Releasing backup interface [ 1772.807849][T29226] team0: Port device team_slave_0 removed [ 1772.817112][T29226] team0: Port device team_slave_1 removed [ 1772.819853][T29226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1772.824073][T29226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1772.827866][T29226] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1772.836770][T29231] team0: Port device xfrm0 added [ 1772.839447][T29235] tipc: Started in network mode [ 1772.842221][T29235] tipc: Node identity 6a137f8e1194, cluster identity 4711 [ 1772.844571][T29235] tipc: Enabled bearer , priority 0 [ 1773.025728][T29252] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 1773.340094][T29285] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 1773.641378][T29301] tipc: Started in network mode [ 1773.643050][T29301] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1773.646094][T29301] tipc: Enabling of bearer rejected, failed to enable media [ 1773.738956][T29314] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1773.818593][T29320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5332'. [ 1773.850487][T29323] program syz.1.5333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1773.932546][ T1041] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1773.984767][T26021] tipc: Node number set to 2072477582 [ 1774.092250][ T1041] usb 5-1: Using ep0 maxpacket: 32 [ 1774.095758][ T1041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1774.100117][ T1041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1774.104324][ T1041] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1774.108022][ T1041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.112819][ T1041] usb 5-1: config 0 descriptor?? [ 1774.118898][ T1041] hub 5-1:0.0: USB hub found [ 1774.192323][T16002] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1774.322385][ T1041] hub 5-1:0.0: 1 port detected [ 1774.362312][T16002] usb 6-1: Using ep0 maxpacket: 16 [ 1774.369473][T16002] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1774.373049][T16002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.376090][T16002] usb 6-1: Product: syz [ 1774.377556][T16002] usb 6-1: Manufacturer: syz [ 1774.379128][T16002] usb 6-1: SerialNumber: syz [ 1774.707144][T29336] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1774.929483][ T1041] hub 5-1:0.0: activate --> -90 [ 1775.000427][T16002] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1775.011293][T16002] usb 6-1: USB disconnect, device number 60 [ 1775.028980][T29344] binder_alloc: 29343: binder_alloc_buf, no vma [ 1775.541067][T29358] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1775.581498][T29360] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.2863311530.2863311530), cmd(6) [ 1775.737594][ T1041] usb 5-1-port1: over-current condition [ 1775.941138][T26021] usb 5-1: USB disconnect, device number 62 [ 1776.452607][T29388] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1776.457491][T29388] block device autoloading is deprecated and will be removed. [ 1776.746435][T29406] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1777.053397][T29425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5372'. [ 1777.058548][T29425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5372'. [ 1777.069813][T29426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5373'. [ 1777.073833][T29426] bridge_slave_1: left allmulticast mode [ 1777.075816][T29426] bridge_slave_1: left promiscuous mode [ 1777.079775][T29426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1777.109227][T29426] bridge_slave_0: left allmulticast mode [ 1777.125091][T29426] bridge_slave_0: left promiscuous mode [ 1777.129120][T29426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1777.251082][T29437] kAFS: Can only specify source 'none' with -o dyn [ 1777.478205][T29442] binder: BINDER_SET_CONTEXT_MGR already set [ 1777.480301][T29442] binder: 29441:29442 ioctl 4018620d 80000040 returned -16 [ 1777.607965][T29447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5382'. [ 1777.611690][T29447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5382'. [ 1777.651778][T29453] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5384'. [ 1777.916709][T29460] nbd0: detected capacity change from 0 to 63 [ 1777.920868][T29461] block nbd0: NBD_DISCONNECT [ 1777.923641][T29461] block nbd0: Disconnected due to user request. [ 1777.927720][T29461] block nbd0: shutting down sockets [ 1777.937751][ C2] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1777.941125][ C2] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1777.943731][ C2] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1777.946212][ C2] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1777.948702][ C2] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1777.953560][ T9294] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1777.961128][ T9294] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1777.964369][ T9294] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1777.966897][ T9294] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1777.969379][ T9294] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1777.974604][ T9294] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1777.977599][ T9294] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1777.980070][ T9294] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1777.982897][ T9294] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1777.986082][ T9294] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1777.990658][ T9294] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1777.993983][ T9294] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1777.997111][ T9294] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1778.002639][ T9294] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1778.005796][ T9294] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1778.009364][ T6429] ldm_validate_partition_table(): Disk read failed. [ 1778.013196][ T6429] Dev nbd0: unable to read RDB block 0 [ 1778.015966][ T6429] nbd0: unable to read partition table [ 1778.023255][ T6429] ldm_validate_partition_table(): Disk read failed. [ 1778.026127][ T6429] Dev nbd0: unable to read RDB block 0 [ 1778.029476][ T6429] nbd0: unable to read partition table [ 1778.033293][T29433] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1778.040056][T29433] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1778.077665][T29433] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1778.086001][T29433] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1778.088738][T29433] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1778.094804][T29433] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1778.102218][T29433] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1778.104256][T29433] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1778.109021][T29433] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1778.525309][T29473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5391'. [ 1778.529100][T29473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5391'. [ 1778.678188][T29478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5393'. [ 1778.686892][T29478] hsr_slave_1 (unregistering): left promiscuous mode [ 1779.236347][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1779.241295][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1779.244769][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xf712 instead [ 1779.248036][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x605f instead [ 1779.251284][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1779.254668][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1779.257963][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1779.261187][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1779.270412][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1779.272293][ T64] Bluetooth: hci4: command 0x0c1a tx timeout [ 1779.274057][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1779.279764][T29494] jffs2: Further such events for this erase block will not be printed [ 1779.285213][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1779.291609][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1779.295914][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xf712 instead [ 1779.299229][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x605f instead [ 1779.302551][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1779.305850][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1779.309060][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1779.312477][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1779.315782][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1779.319095][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1779.322650][T29494] jffs2: Further such events for this erase block will not be printed [ 1779.325558][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1779.328901][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1779.332231][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xf712 instead [ 1779.335617][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x605f instead [ 1779.338934][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1779.342264][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1779.345440][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xf712 instead [ 1779.348680][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x605f instead [ 1779.351998][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1779.355368][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1779.358650][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xf712 instead [ 1779.361838][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x605f instead [ 1779.365231][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1779.368468][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1779.371664][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xf712 instead [ 1779.374966][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x605f instead [ 1779.378199][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1779.381408][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1779.384698][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xf712 instead [ 1779.387918][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x605f instead [ 1779.391143][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1779.394634][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1779.398600][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xf712 instead [ 1779.402880][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x605f instead [ 1779.407060][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1779.411276][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1779.415559][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xf712 instead [ 1779.419682][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x605f instead [ 1779.424099][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1779.428325][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1779.432672][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xf712 instead [ 1779.436836][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x605f instead [ 1779.440900][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1779.443952][T29500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5402'. [ 1779.445170][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1779.450031][T29500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5402'. [ 1779.451970][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xf712 instead [ 1779.451990][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x605f instead [ 1779.452037][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1779.466868][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1779.470526][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xf712 instead [ 1779.474204][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x605f instead [ 1779.477709][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1779.481680][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1779.485756][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xf712 instead [ 1779.489735][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x605f instead [ 1779.494671][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1779.498720][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1779.503344][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xf712 instead [ 1779.507372][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x605f instead [ 1779.511448][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1779.515822][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1779.519739][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xf712 instead [ 1779.524038][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x605f instead [ 1779.527764][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1779.531803][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1779.535958][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xf712 instead [ 1779.539992][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x605f instead [ 1779.545001][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1779.548913][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1779.552090][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xf712 instead [ 1779.555502][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x605f instead [ 1779.558745][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1779.561971][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1779.565459][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xf712 instead [ 1779.568731][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x605f instead [ 1779.571870][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1779.575137][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1779.578414][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xf712 instead [ 1779.581632][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x605f instead [ 1779.584830][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1779.588014][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1779.591147][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xf712 instead [ 1779.594422][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x605f instead [ 1779.597629][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1779.600829][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1779.604383][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xf712 instead [ 1779.607569][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x605f instead [ 1779.610830][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1779.614511][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1779.617735][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xf712 instead [ 1779.620959][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x605f instead [ 1779.624448][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1779.627694][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1779.630949][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xf712 instead [ 1779.634156][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x605f instead [ 1779.637363][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1779.640569][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1779.643861][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xf712 instead [ 1779.646995][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x605f instead [ 1779.650192][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1779.653434][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1779.656578][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xf712 instead [ 1779.659778][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x605f instead [ 1779.663059][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1779.666211][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1779.669378][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xf712 instead [ 1779.672640][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x605f instead [ 1779.675869][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1779.679158][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1779.682399][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xf712 instead [ 1779.685576][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x605f instead [ 1779.688794][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1779.691985][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1779.695249][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xf712 instead [ 1779.698418][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x605f instead [ 1779.701692][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1779.704954][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1779.708127][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xf712 instead [ 1779.711368][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x605f instead [ 1779.714689][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1779.717884][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1779.721078][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xf712 instead [ 1779.724959][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x605f instead [ 1779.728524][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1779.731766][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1779.735186][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xf712 instead [ 1779.738403][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x605f instead [ 1779.741629][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1779.744939][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1779.748130][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xf712 instead [ 1779.751339][T29494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x605f instead [ 1779.754653][T29494] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1779.757518][T29494] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1779.870292][T29512] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1779.874519][T29512] block device autoloading is deprecated and will be removed. [ 1779.875845][T29515] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1779.881193][T29515] block device autoloading is deprecated and will be removed. [ 1780.162343][ T5750] Bluetooth: hci2: command 0x0c1a tx timeout [ 1780.164568][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 1780.403868][T29529] ptrace attach of "/syz-executor exec"[27483] was attempted by ""[29529] [ 1781.268768][T29550] X25: received unknown 00 with LCI 000 [ 1781.358672][T29556] ieee802154 phy0 wpan0: encryption failed: -22 [ 1781.362221][ T64] Bluetooth: hci4: command 0x0c1a tx timeout [ 1781.658051][T29585] X25: received unknown 00 with LCI 000 [ 1781.782253][T29597] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5434'. [ 1782.090951][T29603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5436'. [ 1782.132831][ T42] audit: type=1800 audit(1785986584.413:19): pid=29605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5437" name="zoned" dev="configfs" ino=115097 res=0 errno=0 [ 1782.144562][ T42] audit: type=1800 audit(1785986584.433:20): pid=29605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5437" name="zone_nr_conv" dev="configfs" ino=112512 res=0 errno=0 [ 1782.164978][ T42] audit: type=1800 audit(1785986584.443:21): pid=29605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5437" name="power" dev="configfs" ino=112513 res=0 errno=0 [ 1782.176047][ T42] audit: type=1800 audit(1785986584.443:22): pid=29605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5437" name="power" dev="configfs" ino=112514 res=0 errno=0 [ 1782.220749][T29605] null_blk: disk nullb2 created [ 1782.244637][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 1782.244694][ T5750] Bluetooth: hci2: command 0x0c1a tx timeout [ 1782.380690][T29623] X25: received unknown 00 with LCI 000 [ 1782.647267][T29643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5447'. [ 1782.654547][T29643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5447'. [ 1782.686827][ T42] audit: type=1326 audit(1785986584.973:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29645 comm="syz.0.5448" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 1782.695407][ T42] audit: type=1326 audit(1785986584.973:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29645 comm="syz.0.5448" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 1782.702417][ T42] audit: type=1326 audit(1785986584.983:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29645 comm="syz.0.5448" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 1782.709212][ T42] audit: type=1326 audit(1785986584.983:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29645 comm="syz.0.5448" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 1782.718905][ T42] audit: type=1326 audit(1785986584.983:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29645 comm="syz.0.5448" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 1782.732919][ T42] audit: type=1326 audit(1785986584.993:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29645 comm="syz.0.5448" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7fc3fec code=0x7ffc0000 [ 1783.410230][T29656] nvmet: failed to open block device (null): (-22) [ 1783.416975][T29656] nvmet_tcp: malformed ip/port passed: :4420 [ 1783.442305][ T5750] Bluetooth: hci4: command 0x0c1a tx timeout [ 1783.582899][T26815] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1783.733983][T26815] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1783.744139][T26815] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1783.753282][T26815] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1783.760500][T26815] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1783.770190][T26815] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1783.782270][T26815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.042486][ T29] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1784.192233][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 1784.197389][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1784.201034][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1784.204864][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1784.218440][ T29] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1784.225372][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.246641][ T29] usb 5-1: config 0 descriptor?? [ 1784.249707][T26815] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 1784.252765][T26815] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 1784.255645][T26815] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 1784.266750][ T29] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input8 [ 1784.270505][T26815] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 1784.273084][T26815] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 1784.281876][T26815] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 1784.290127][T26815] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 1784.292665][T26815] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 1784.296210][T26815] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 1784.297941][ T5142] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1784.298760][T26815] lg-g15 0003:046D:C222.0002: unknown main item tag 0x0 [ 1784.305881][T26815] lg-g15 0003:046D:C222.0002: unbalanced collection at end of report description [ 1784.312869][ T5750] Bluetooth: hci2: command 0x0c1a tx timeout [ 1784.313093][T26815] lg-g15 0003:046D:C222.0002: probe with driver lg-g15 failed with error -22 [ 1784.323734][ T5142] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1784.339528][ T5142] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1784.356403][ T5754] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1784.361504][ T5142] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1784.376564][ T5142] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1784.381296][ T5142] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1784.410219][T26021] usb 7-1: USB disconnect, device number 57 [ 1784.598538][T29670] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1784.606446][T16002] usb 5-1: USB disconnect, device number 63 [ 1784.955175][T29681] ip6gretap1: left promiscuous mode [ 1785.178019][T29687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5463'. [ 1785.328395][T29695] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1785.355352][T29697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5467'. [ 1785.361440][T29697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5467'. [ 1785.426054][T29705] kAFS: bad VL server IP address [ 1785.696922][T29716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5475'. [ 1785.744944][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1785.748630][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1785.751935][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xf712 instead [ 1785.756434][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x605f instead [ 1785.759927][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1785.765194][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1785.768489][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1785.771700][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1785.775735][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1785.779160][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1785.782688][T29719] jffs2: Further such events for this erase block will not be printed [ 1785.786128][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1785.789525][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1785.793136][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xf712 instead [ 1785.796540][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x605f instead [ 1785.800339][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1785.803927][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1785.807255][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1785.810480][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1785.814577][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1785.817871][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1785.821161][T29719] jffs2: Further such events for this erase block will not be printed [ 1785.824356][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 1785.827615][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 1785.830854][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xf712 instead [ 1785.834650][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x605f instead [ 1785.837928][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 1785.841165][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 1785.844758][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xf712 instead [ 1785.847914][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x605f instead [ 1785.851163][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 1785.854567][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 1785.857866][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xf712 instead [ 1785.861090][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x605f instead [ 1785.864550][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 1785.867832][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 1785.871038][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xf712 instead [ 1785.874428][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x605f instead [ 1785.877870][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 1785.881081][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 1785.884624][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xf712 instead [ 1785.887873][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x605f instead [ 1785.898261][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 1785.901542][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 1785.904833][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xf712 instead [ 1785.908023][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x605f instead [ 1785.911200][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 1785.914515][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 1785.917711][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xf712 instead [ 1785.920886][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x605f instead [ 1785.924267][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 1785.927473][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 1785.930679][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xf712 instead [ 1785.934041][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x605f instead [ 1785.937314][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 1785.940520][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 1785.943855][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xf712 instead [ 1785.947056][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x605f instead [ 1785.950292][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 1785.953618][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 1785.956809][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xf712 instead [ 1785.960070][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x605f instead [ 1785.964419][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 1785.967586][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 1785.970734][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xf712 instead [ 1785.974056][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x605f instead [ 1785.977321][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 1785.980575][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 1785.983926][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xf712 instead [ 1785.987135][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x605f instead [ 1785.990341][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 1785.993844][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 1785.997122][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xf712 instead [ 1786.000376][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x605f instead [ 1786.003697][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 1786.006909][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 1786.010138][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xf712 instead [ 1786.013429][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x605f instead [ 1786.016650][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 1786.019757][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 1786.023020][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xf712 instead [ 1786.026211][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x605f instead [ 1786.029377][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 1786.032725][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 1786.035798][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xf712 instead [ 1786.038987][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x605f instead [ 1786.042287][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 1786.045467][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 1786.048649][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xf712 instead [ 1786.051880][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x605f instead [ 1786.055198][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 1786.058394][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 1786.061642][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xf712 instead [ 1786.064936][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x605f instead [ 1786.068168][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 1786.071418][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 1786.074714][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xf712 instead [ 1786.077908][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x605f instead [ 1786.081142][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 1786.084400][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 1786.087610][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xf712 instead [ 1786.090829][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x605f instead [ 1786.094155][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 1786.097345][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 1786.100561][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xf712 instead [ 1786.103938][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x605f instead [ 1786.107245][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 1786.110453][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 1786.113745][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xf712 instead [ 1786.116933][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x605f instead [ 1786.120155][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 1786.123465][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 1786.126686][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xf712 instead [ 1786.130004][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x605f instead [ 1786.133382][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 1786.136569][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 1786.139805][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xf712 instead [ 1786.143086][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x605f instead [ 1786.146306][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 1786.149506][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 1786.152956][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xf712 instead [ 1786.156173][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x605f instead [ 1786.159414][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 1786.162733][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 1786.165934][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xf712 instead [ 1786.169125][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x605f instead [ 1786.172470][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 1786.175697][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 1786.178878][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xf712 instead [ 1786.182242][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x605f instead [ 1786.185470][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 1786.188695][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 1786.191887][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xf712 instead [ 1786.195215][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x605f instead [ 1786.198451][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 1786.201685][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 1786.204965][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xf712 instead [ 1786.208147][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x605f instead [ 1786.211388][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 1786.214769][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 1786.218007][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xf712 instead [ 1786.221202][T29719] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x605f instead [ 1786.224495][T29719] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1786.227360][T29719] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1786.779939][T29748] kAFS: unable to lookup cell 'ÿ' [ 1786.912613][T26021] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1787.065308][T26021] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1787.068351][T26021] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1787.071451][T26021] usb 7-1: Product: syz [ 1787.073256][T26021] usb 7-1: SerialNumber: syz [ 1787.078216][T26021] usb 7-1: config 0 descriptor?? [ 1787.293960][T26021] hso 7-1:0.0: Failed to find BULK eps [ 1787.397012][T29756] block nbd1: NBD_DISCONNECT [ 1787.490760][T26021] usb 7-1: USB disconnect, device number 58 [ 1787.508744][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 1787.508760][ T42] audit: type=1800 audit(1785986589.793:45): pid=29762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5493" name="device_path" dev="configfs" ino=115845 res=0 errno=0 [ 1787.521330][ T42] audit: type=1800 audit(1785986589.803:46): pid=29762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5493" name="enable" dev="configfs" ino=115846 res=0 errno=0 [ 1787.522278][T29762] nvmet: failed to open block device (null): (-22) [ 1787.538412][ T42] audit: type=1800 audit(1785986589.823:47): pid=29762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5493" name="addr_adrfam" dev="configfs" ino=115219 res=0 errno=0 [ 1787.538908][T29762] nvmet_tcp: malformed ip/port passed: :4420 [ 1788.112603][ T42] audit: type=1800 audit(1785986590.403:48): pid=29778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5503" name="device_path" dev="configfs" ino=115865 res=0 errno=0 [ 1788.113779][T29778] nvmet: failed to open block device (null): (-22) [ 1788.121987][ T42] audit: type=1800 audit(1785986590.403:49): pid=29778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5503" name="enable" dev="configfs" ino=115866 res=0 errno=0 [ 1788.138404][ T42] audit: type=1800 audit(1785986590.423:50): pid=29778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5503" name="addr_adrfam" dev="configfs" ino=115867 res=0 errno=0 [ 1788.138622][T29778] nvmet_tcp: malformed ip/port passed: :4420 [ 1788.502801][T29797] syzkaller0: entered promiscuous mode [ 1788.504705][T29797] syzkaller0: entered allmulticast mode [ 1789.043789][T29801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5512'. [ 1789.178120][ T42] audit: type=1800 audit(1785986591.463:51): pid=29811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5517" name="nexus" dev="configfs" ino=114429 res=0 errno=0 [ 1789.320733][ T42] audit: type=1800 audit(1785986591.603:52): pid=29823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5522" name="blocks" dev="configfs" ino=113502 res=0 errno=0 [ 1789.383722][T29826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5524'. [ 1789.384896][ T42] audit: type=1800 audit(1785986591.673:53): pid=29827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5522" name="dev" dev="configfs" ino=113509 res=0 errno=0 [ 1789.403264][ T42] audit: type=1800 audit(1785986591.693:54): pid=29819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5521" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1789.420054][T29823] block device autoloading is deprecated and will be removed. [ 1789.603235][T29843] nvmet: failed to open block device (null): (-22) [ 1789.658630][T29843] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 1789.708908][T29845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5533'. [ 1789.742658][T15940] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1789.802242][T16002] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1789.894806][T15940] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1789.898302][T15940] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1789.903336][T15940] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1789.908132][T15940] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1789.910898][T15940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.913544][T15940] usb 6-1: Product: syz [ 1789.914866][T15940] usb 6-1: Manufacturer: syz [ 1789.916411][T15940] usb 6-1: SerialNumber: syz [ 1789.924432][T15940] usb 6-1: selecting invalid altsetting 1 [ 1789.972320][T16002] usb 7-1: Using ep0 maxpacket: 32 [ 1789.975434][T16002] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1789.980981][T16002] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1789.984455][T16002] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1789.987066][T16002] usb 7-1: Product: syz [ 1789.988413][T16002] usb 7-1: Manufacturer: syz [ 1789.990127][T16002] usb 7-1: SerialNumber: syz [ 1790.004241][T16002] usb 7-1: config 0 descriptor?? [ 1790.011300][T29839] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1790.029362][T16002] hub 7-1:0.0: bad descriptor, ignoring hub [ 1790.029545][T15940] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1790.031988][T16002] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1790.063389][ T6429] udevd[6429]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1790.125394][T16002] usb 6-1: USB disconnect, device number 61 [ 1791.137734][T29869] Bluetooth: ISO socket layer initialized [ 1791.274117][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.280451][T19635] usb 7-1: USB disconnect, device number 59 [ 1792.108053][T29899] [ 1792.108942][T29899] ====================================================== [ 1792.111598][T29899] WARNING: possible circular locking dependency detected [ 1792.114422][T29899] syzkaller #0 Not tainted [ 1792.116317][T29899] ------------------------------------------------------ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1792.119080][T29899] syz.1.5554/29899 is trying to acquire lock: [ 1792.121753][T29899] ffffffff901d39e8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 1792.126165][T29899] [ 1792.126165][T29899] but task is already holding lock: [ 1792.129066][T29899] ffff888013af6500 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 1792.133201][T29899] [ 1792.133201][T29899] which lock already depends on the new lock. [ 1792.133201][T29899] [ 1792.136577][T29899] [ 1792.136577][T29899] the existing dependency chain (in reverse order) is: [ 1792.139972][T29899] [ 1792.139972][T29899] -> #2 (&sb->s_type->i_mutex_key#25){++++}-{4:4}: [ 1792.142913][T29899] lock_acquire+0x1b9/0x370 [ 1792.144510][T29899] down_write+0x8b/0x1f0 [ 1792.146050][T29899] configfs_depend_item_unlocked+0xf3/0x6a0 [ 1792.148009][T29899] usbg_make_tpg+0x261/0x620 [ 1792.149606][T29899] target_fabric_make_tpg+0xab/0x8c0 [ 1792.151414][T29899] configfs_mkdir+0x51e/0xb70 [ 1792.153051][T29899] vfs_mkdir+0x361/0x850 [ 1792.154581][T29899] filename_mkdirat+0x48b/0x5e0 [ 1792.156258][T29899] __ia32_sys_mkdirat+0x88/0xc0 [ 1792.157952][T29899] __do_fast_syscall_32+0xe7/0x970 [ 1792.159748][T29899] do_fast_syscall_32+0x32/0x70 [ 1792.161424][T29899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1792.163571][T29899] [ 1792.163571][T29899] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 1792.165919][T29899] lock_acquire+0x1b9/0x370 [ 1792.167507][T29899] __mutex_lock+0x1a4/0x1bd0 [ 1792.169129][T29899] tcm_set_name+0x29/0xb0 [ 1792.170682][T29899] function_make+0x21c/0x3f0 [ 1792.172301][T29899] configfs_mkdir+0x51e/0xb70 [ 1792.173958][T29899] vfs_mkdir+0x361/0x850 [ 1792.175474][T29899] filename_mkdirat+0x48b/0x5e0 [ 1792.177152][T29899] __ia32_sys_mkdirat+0x88/0xc0 [ 1792.178874][T29899] __do_fast_syscall_32+0xe7/0x970 [ 1792.180627][T29899] do_fast_syscall_32+0x32/0x70 [ 1792.182321][T29899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1792.184440][T29899] [ 1792.184440][T29899] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 1792.186989][T29899] check_prev_add+0xeb/0xe60 [ 1792.188612][T29899] __lock_acquire+0x136c/0x1a40 [ 1792.190311][T29899] lock_acquire+0x1b9/0x370 [ 1792.191908][T29899] __mutex_lock+0x1a4/0x1bd0 [ 1792.193520][T29899] uvcg_streaming_header_allow_link+0x7c/0x650 [ 1792.195606][T29899] configfs_symlink+0x540/0x11f0 [ 1792.197312][T29899] vfs_symlink+0x178/0x4d0 [ 1792.198906][T29899] filename_symlinkat+0x2a6/0x560 [ 1792.200637][T29899] __ia32_sys_symlinkat+0x9b/0xe0 [ 1792.202390][T29899] __do_fast_syscall_32+0xe7/0x970 [ 1792.204138][T29899] do_fast_syscall_32+0x32/0x70 [ 1792.205837][T29899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1792.207965][T29899] [ 1792.207965][T29899] other info that might help us debug this: [ 1792.207965][T29899] [ 1792.211047][T29899] Chain exists of: [ 1792.211047][T29899] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#25 [ 1792.211047][T29899] [ 1792.215601][T29899] Possible unsafe locking scenario: [ 1792.215601][T29899] [ 1792.218489][T29899] CPU0 CPU1 [ 1792.220389][T29899] ---- ---- [ 1792.222089][T29899] lock(&sb->s_type->i_mutex_key#25); [ 1792.223801][T29899] lock(&opts->dep_lock); [ 1792.225960][T29899] lock(&sb->s_type->i_mutex_key#25); [ 1792.228450][T29899] lock(gadget_subsys.su_mutex); [ 1792.230052][T29899] [ 1792.230052][T29899] *** DEADLOCK *** [ 1792.230052][T29899] [ 1792.232548][T29899] 2 locks held by syz.1.5554/29899: [ 1792.234200][T29899] #0: ffff88801ded0450 (sb_writers#14){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 1792.237134][T29899] #1: ffff888013af6500 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 1792.240512][T29899] [ 1792.240512][T29899] stack backtrace: [ 1792.242385][T29899] CPU: 1 UID: 0 PID: 29899 Comm: syz.1.5554 Not tainted syzkaller #0 PREEMPT(full) [ 1792.242399][T29899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1792.242406][T29899] Call Trace: [ 1792.242412][T29899] [ 1792.242419][T29899] dump_stack_lvl+0x100/0x190 [ 1792.242437][T29899] print_circular_bug.cold+0x178/0x1c7 [ 1792.242457][T29899] check_noncircular+0x146/0x160 [ 1792.242478][T29899] check_prev_add+0xeb/0xe60 [ 1792.242495][T29899] ? try_to_unlazy+0x296/0x910 [ 1792.242511][T29899] __lock_acquire+0x136c/0x1a40 [ 1792.242530][T29899] ? __kasan_slab_free+0x5f/0x80 [ 1792.242547][T29899] lock_acquire+0x1b9/0x370 [ 1792.242563][T29899] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1792.242581][T29899] ? __pfx___might_resched+0x10/0x10 [ 1792.242599][T29899] __mutex_lock+0x1a4/0x1bd0 [ 1792.242615][T29899] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1792.242631][T29899] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1792.242647][T29899] ? __lock_acquire+0x49f/0x1a40 [ 1792.242664][T29899] ? __pfx___mutex_lock+0x10/0x10 [ 1792.242680][T29899] ? make_vfsuid+0xec/0x140 [ 1792.242697][T29899] ? __pfx___might_resched+0x10/0x10 [ 1792.242713][T29899] ? make_vfsgid+0xf1/0x140 [ 1792.242729][T29899] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 1792.242745][T29899] ? security_inode_permission+0xbf/0x250 [ 1792.242763][T29899] uvcg_streaming_header_allow_link+0x7c/0x650 [ 1792.242779][T29899] ? inode_permission+0x374/0x620 [ 1792.242793][T29899] ? mntput_no_expire+0xe7/0x220 [ 1792.242811][T29899] configfs_symlink+0x540/0x11f0 [ 1792.242826][T29899] ? bpf_lsm_inode_permission+0x9/0x10 [ 1792.242844][T29899] ? security_inode_permission+0xbf/0x250 [ 1792.242858][T29899] ? __pfx_configfs_symlink+0x10/0x10 [ 1792.242873][T29899] vfs_symlink+0x178/0x4d0 [ 1792.242888][T29899] filename_symlinkat+0x2a6/0x560 [ 1792.242902][T29899] ? __pfx_filename_symlinkat+0x10/0x10 [ 1792.242914][T29899] ? strncpy_from_user+0x19d/0x2d0 [ 1792.242933][T29899] ? do_getname+0x191/0x390 [ 1792.242947][T29899] __ia32_sys_symlinkat+0x9b/0xe0 [ 1792.242960][T29899] __do_fast_syscall_32+0xe7/0x970 [ 1792.242977][T29899] do_fast_syscall_32+0x32/0x70 [ 1792.242993][T29899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1792.243007][T29899] RIP: 0023:0xf709efec [ 1792.243023][T29899] Code: Unable to access opcode bytes at 0xf709efc2. [ 1792.243029][T29899] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 1792.243040][T29899] RAX: ffffffffffffffda RBX: 0000000080001500 RCX: 00000000ffffff9c [ 1792.243047][T29899] RDX: 0000000080001600 RSI: 0000000000000000 RDI: 0000000000000000 [ 1792.243054][T29899] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1792.243060][T29899] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1792.243067][T29899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1792.243077][T29899] [ 1793.048446][ T5823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1793.051995][ T5823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1793.055262][ T5823] bond0 (unregistering): Released all slaves [ 1793.162790][ T5459] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1793.289187][ T5459] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1793.387688][ T5823] hsr_slave_0: left promiscuous mode [ 1793.390311][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1793.393840][ T5823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1793.459545][ T5823] team0 (unregistering): Port device team_slave_1 removed [ 1793.471785][ T5823] team0 (unregistering): Port device team_slave_0 removed [ 1793.523874][ T5459] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1793.638299][ T5459] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1793.856555][ T5823] IPVS: stop unused estimator thread 0...