last executing test programs: 3m12.817074491s ago: executing program 0 (id=2058): r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x9, 0x0, 0xffffffffffffffff, 0x0, r0, 0x3, 0x0, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3m0.104524935s ago: executing program 0 (id=2058): r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x9, 0x0, 0xffffffffffffffff, 0x0, r0, 0x3, 0x0, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m59.840219246s ago: executing program 0 (id=2155): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x381, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2m59.576780587s ago: executing program 0 (id=2156): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m58.554249377s ago: executing program 0 (id=2164): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000900)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 2m58.180654324s ago: executing program 0 (id=2166): r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0xd8) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 2m57.600566765s ago: executing program 32 (id=2166): r0 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0xd8) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 1m37.561306193s ago: executing program 4 (id=2854): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000071000040"]) 1m37.391420494s ago: executing program 4 (id=2855): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0)={0x41}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x9}, 0x1) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m37.379311536s ago: executing program 4 (id=2856): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r2 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4}) read$eventfd(r2, &(0x7f0000000000), 0x8) 1m37.164172783s ago: executing program 4 (id=2857): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) 1m37.060634164s ago: executing program 4 (id=2858): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) unshare(0x26060680) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x4000000, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m36.799314418s ago: executing program 4 (id=2859): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m36.374330813s ago: executing program 33 (id=2859): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m21.16191469s ago: executing program 3 (id=2964): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001200)="f78d9ca38fff48f3be52163448412ba8ec58047f4a2ef5591555b1db85bad405", 0x20}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000844}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1m20.885815037s ago: executing program 3 (id=2966): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r1, &(0x7f0000000200)=""/224, 0x94) getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0) 1m20.614930598s ago: executing program 3 (id=2968): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000300)="260f2266c4c221060a66ba4000b0fceec4e27d19da0f2379c4e249deb3000000000f23710f080f7868742e0f18b6bb7b0000", 0x32}], 0x1, 0x5bc253712760c8c1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m19.959865701s ago: executing program 3 (id=2976): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x245) 1m19.714437359s ago: executing program 3 (id=2981): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, 0x1}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x4000003, @mcast1}, 0x1c) 1m19.187366361s ago: executing program 3 (id=2989): mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 1m18.510065135s ago: executing program 34 (id=2989): mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) 1m15.035277531s ago: executing program 6 (id=3007): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f00000013c0)=[{0x0}, {&(0x7f00000012c0)=""/45, 0x2d}], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0x0, "00edbdfab1449d12632e0316c708db72085de5"}) r1 = syz_open_pts(r0, 0x42) r2 = dup3(r1, r0, 0x0) write$UHID_INPUT(r2, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) 1m14.826866875s ago: executing program 6 (id=3010): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) 1m14.613066034s ago: executing program 6 (id=3012): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000072000040"]) 1m14.231387603s ago: executing program 6 (id=3014): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) 1m14.184019905s ago: executing program 6 (id=3015): io_setup(0x9, &(0x7f0000000240)=0x0) r1 = eventfd2(0x7, 0x0) io_submit(r0, 0x1, &(0x7f0000004500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x1, r1, 0x0}]) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x10}) read$eventfd(r1, &(0x7f0000000000), 0x43) 1m13.143460298s ago: executing program 6 (id=3018): unshare(0x28020480) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x7fff, 0x0, 0x1, r2, 0x5}) 1m12.696700382s ago: executing program 35 (id=3018): unshare(0x28020480) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x7fff, 0x0, 0x1, r2, 0x5}) 7.428925247s ago: executing program 8 (id=3579): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x8, &(0x7f00000020c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0xfc, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f0000001ec0)={&(0x7f00000021c0)={0x50, 0x0, 0x8, {0x7, 0x29, 0x9f53, 0x10000008, 0xc0f7, 0x48e, 0x8, 0x7fff, 0x0, 0x0, 0x80, 0x101}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000000)="d2c113c29ca1f0329c09333c4e57bb838cfea716579dab7d1cbdce058b04b86cd2573f5a46ec9ad1bb3c276903ebcad8758f3bdb0ea994c5ea01d7771c5b21040018c812e3b3d2c92d14193a28633e7a06c3239d8e97c69f11a821f535082d74ee0c1925c46bfba566d8c9647889a9dde67089b24871471415a695730085f81a0b7c8dc2eae85ccd015b85d7d1fecd2528f2a8369ee0315327ba0d506a583c716ea4fa23575566c8cf1a2a844691717179b82f10998b7d540188e57e864820665ab70db2d483c4fdcb115ea6bbd4a888f9d383f6fea063635b69686590f540c638a77fe8e8cb266cf72667e61871faf1d1810c749c30c5a7b61609d81114f7aa0355967a7513f659d021338ddb687b0f7372386170902b612c56f58dc73a1ccecb389ccd39f926ee91220a5c053dc277919ed4e32b63da14781cb46227a71388f2aeb37e8971d4a554824bb05f7e6861a916c94204feae48f115680a40b7b2da6ec3af295979016cb78ee53d347a2a8de81c26d0468db8b59df449513e109f26ccdff64403180deba17211813b69ef3f0c42f498a6f3d05a4e7f47f99a8b9ff6bb375fcd1cf444a794a7c2a274f2786c8c220b1f80f2d0c1f311960b37357e31198a44f1e25aaa320f6daad7a42c0367de29a2d0d5567098dfc4ac2b0393a7accfaed79afeec5c9d526503e8fbbd3d1f6365c698775999e5109bada3ec51a9d4b884631086bcfa4fe99135a7c482d9e3d2cbd0a58a42f8cd737a812c21185d909bab234d412bd450da975be70eac2a8db479f7030ff5f41817cd798d59a2db9d8d829765459531044ba3bfa6fc89d046c75e707133e5211fd05d20f63d4f493b23bcd966e3f4314a512451b761fb3b3ed815da07c604f71d2a86937142ede6fce427766dbde15f74f2c45d4c3c08e815b507bb05ee97ddf7ed79ea2ddd5c6ef057d455d84c79bdfd6e68ba6f5cd806a6b9dfd5ed65e394554fb59df7aba2676779a547cf8a7c97379abc760e94e01264a2a23c8c63296ec0d9a4e0aa5c9c470fe46beb8db8322372f3649b7d2ad0b8d09e77e4757a2f40835860b56d41382fabc35d891deedd2168ff3b20f3345ec3238ce795fd9b0311fbd7cf10bbefe4e9349bdf7ea5294f3fc3ded1203c01c9a057641ea122eea48e30b942fdebdc4e7263353361dfcf3562eb3f7eb491fe5394ac1e9af734950b3de71b557bd1baf334d39c5dd9e6842a3ef24004eafc5eb85fbdad5c1e49f60f565da146b119f27ec9077774e21300edf2883f34e299ae0465779ab80ba2d097f5d791a72785f35090dbc369864476c33d3279382a49ac45be1706211659d6fac1ae12d772fa270eb3746a69082e67664f4be335f2d172d52f5083a0768e5d4332352be40eb41e3406de4498e740a470141032ea251c144cdb5352d8049281898c72f13a5d3509c9c77308fe45016abfd7d42b1a022a60b9a5bbcece7c0a10bf9f157995465729b38fdcadd0d977574636206982a6b4e8f24bc75e3eb054fb9ae81e878afd24cfa9756f053bb89f0e4a42e195bd2af8a91a6dd5c9fbccd938681a7387ed22a0e3a8284d3182aa7ef1905a267850fc405494d7079f6d0364287cf7b16dc2310b15bc49fb68d1a96075cb5f30f4fc2ec0c51d0b7e806e78f108f4060a55b8c23b3c89a2f2fa321d5138019c417a504d230ec496583933daba2998e20d8f9a2e6798f681e1d4df88fa4e084513d3648ed4f6624d8b894470cf325e837ad177a634bf58d21378fa0d3370bcb724fa88314bbd0749bbe6ff9dd5d7826701891c180278833c3327a8b1500c3e86fbdaacaaba0e0f708052ddecaae4fe142689c812aeccc7211f61159e0787a8f639d1f0a4db373c17317fea5d3ca1c6060fc44a2d02502f0230334acb69861f0cdb82220827f5887a14e7eab133ce4ecd9a414b2a6b31d8c631325319bbb65ad01aaea7e157fea6cbb434c67f4582028c32f5890ceb243dc972e61e122cb36840d5838dff32d4b613ae1909f3970404fb1973f1e80b0e388141b2e24d47276be045880a4ac18fd136c08cf266b35c75e9b796f6210817439833b613195fe4688b22127a978d20f8b32e3df3297e09a565e659857d8052bf69c5006c5870bd25e6c3aeb411553924d06ccb849cdeca659448cb220d259b4ee20d256d44149814b5e13ab365c448369a43553e01874acded99d24da7d1c9c283dae95b0b5311344af85c7c9a8483fb18a5bfd7a4fb4bbade211edfa4c30f3d1b5bc9672a02adb5d638faea66424e2c82540937dc4cf21392fe16e05811f1bcfb83132deb1cf2a522f9b543758b25d6949400af5d2a7a566f4ab0f5fe0b0a8e8379850e3ed78cb823f5b59b3df4de700427b197720ec69b86c76080b2cfdc4a2619e9d2a901e247e591d79dea91257c0d4a3c7ebb86af42de6833aaaa2d69b71e684236705744b79c62079236759def4a37a0b97742dcdc1af8e54385ad496af31cffe7539e4a69d65ae28845439e5e3eea34785e6065c32f3c7b71ef4edfdb16ca9ee9d5d4e066a60f9919461ce932a61c4100276dad7a22447c681bfebac9186f23dd38509090e0c0fd60219d33174d0d1f5a2b3eb194ae1c7003b159dd560e909fcd0b14b803ded8a94f2a61ca59f9015a673c018515b7605512ecdec58b60aafcba88e88b790e6dabc09a6721613d4e60ffd8d01b07ccacc1c7f2415347f5f5aa9eb7e5d27090403a55d0364721bf0363e34bdf9d92c8e83fe39e8d23e0a038717c00f82dd27709ea69a7a857575f0e039b067750b0e226dd01091b6aecae409d563a72e0805c8c101401a9d4356c532ec27cf25ad0ea92eb137e5bb367623155b3e62baa1cb29d86e4765a635d180d26f37f58a24683494cca93547b1f9ff0cc81c085cc4509b746c5327f1f169ca3bd059d324ac91e3c05bb225e5f81655d2f5b5f0cd6389d35be14f63cf76ef856634c5c42f5f6763a457be1745d9ddc4e7a77cbe86398585dd18159eb7dadc2da143cabd5794c4caafab774c5b0ad661f6f9e7bd5163af6f214bbd6351560cfb5e9fe42d3b67912e0bb52926429a43c27aa6c52e904660029285c4b763d6becb5cd4e9a029fb092ae20df18e073627d896a8de5f89474cbc2d2a525edbaa635a9704ec9f30bc0d18dea437a986553da723befb7f91d73a9976a528d2ff2ff80aef0fb80b4c84fca0d810e1f0c3857aef2616c9908aa7dc6a02e28085ccbb88e13c8c8c1acc631e4121e39b453a5897602dfcff5629f88d75ae7375cb9d08969dc6e870870c7aaad3c62f1f39c363d7edfda2d5ce1e9e62b25cf3b31bf4da9b90616a79d3be8f031837844c13fa6ea8af83db6eaa6abcb5158c38abe7fd39b8710c7d8d830ac93d5d3cec1d038c7947861c4ea118b3c205be5c441d35ef856c9a81f970c2850397e735a2fb991fe2dd0f293224ed263963a1041dcefc67b77b25b82d6ab047eb282702ddab528cc4bfb8c82d86352057e893bfd4b41e3396d64d7f1a78f6a0d4cd420d4bf84eb791a513163f837556c1a2e7c4e84ab9bfaa3a23a7114bfd301ea1f6b5e5c94e076e8f42a4da7e05224589005625245672ef85a11d6ac4b379b72660583ccb62b3d6cf00090c9c0ef7f3e3bce7bc6e10baa0498799de647451281afb45cf053c7a57eca0732a8f9e9f02437be51649bc7d1a391aca1561fb6b2d47817394e97e426afda0fb9fdd248579b8eb768ef9e249dbef8b0ebbd0e8dec2f149e2356df3a9f728b5392875ea476b54a1c990040ef4e63373566611c5b555b5d60a0e69f32e05db3f9047ea3e261ee6e3d87516bb0fff783333eef6444c8d9d17f8b23514d6358c62cd34dbf0e9dd60f54f286c533d68f2610c82eaedd9e512884f37211f190a08cd3766c7ca6a5043ee9dbabf5994c48d03a2fa5ccedce7ffbe9cee1e9d54036ca4ca7c4fdc339011448c7aad3d14b639dc179e7a97f03b606b0e47a32b8c9ab82c59fbba5e0ab663538aba9ba71d27216614f59bdccb050cc2512f65f465e8476d36855df64b8bb181907e91f45c6262dba02b35dc238bb32b9cc7070d31f7f95f2193b5fca347874a64041ab629cb5c3a3d77ba999793badacf01c4244ae13c0d77fe01fae16c489fcd58010afc3084ffadb9bf7264f23f1ad0e8d9d762dcc431163c343054181812c9cd1a6ecdc9964caa0a2ba8cd29271e6824891129b89efc1ea2996100f1932940a49a324e8eb688d05ac7d6ba273aade15c2be8cc74ef1eafad9b9ebfdfa36edc5c6d109485a48ac6a8395ccdf23779919953cf3c61c3a635c7e782f84098f3cc6bea7644cf3924c2352c97c76bc7141227dd29f1d47ef209adc3aaefd8cf204fb265e6b262e83736c2f26b22d80870af83095338c23a47a5a86af2ae7decd1aaabd925ae900bfe8e82728e14fd82677769bc9962dbb507a61e206821ac9c0940b12d79ecb7a916b9f6573fa3d9a7ef773f66de8cf8db6536d986a29d7b50a2973d228ec48468c5ebec6253130c578e5ec2848b62e8e1082a3d584e84b86e24211a9546e1abf79e568827af5d9ba98ba7b33b5cd9cb7a81dc873ea11276049d9d6206d2ed0933ada7ef9b6823f24b756ebea834297743ffb146350f320ec9044df55b20df0ff84584c16350f465b5ad7d364f9b166fb534c2a0e65f6bb4d61feeb84463ceb4a4f7853c0c2410955881a60170b0bbc131f6699e2616752851063c7e8b0a82e4357b84e48bad8002610e5770c17ee0cb301f9dfe8d5cbb66c6962b5edcae17b5c5dd42026737ea9e2c79bfb9392d290b44d66ade6eb62e26321ee214a6d15facb7cca610b6209392179a50f3dcba1494d3f302745461f6172d329a12d68405be5ee05ad2a641a7aa3da1d1fd3198671bf1af5b39e2bdeed49df80cf0c6e0edc5c4812350097bda47d3fafb3827d73eeb0b29320c74dae6d4d61d8fc269652835f5a7f98710c644dd50d3af618651b41916bbabb9ea7cc46c8208dd7fb99474be66e1a970c899f17129a9ed17ccce0d93411e71b8f1c7790c787f7a97a50d54acbc6f4eee49a38882c34e3477c97e1c6da0b39a1e9d0d25a3cea9364033bf4f625a02412174d03dafd642526867578f71f2e52920833b8d23713d5ac48165f49545f6c7c75b5b4ef2e0682f8f2e191fdb6c0ba529856f887391f8d5aa3f7dfc5230170b97662611e53a4436bf4e98a5ceaeb16a79bb95f962b2675cb6da9f1cfcdc1ab604ef7749fe87ccb5a3660f463ff5f488b5c544cf847be84dab22d038730a7021cdc7f7ab714c1561c98a39cc92cd6aaf53c82b28665114ac18b2149ee7f1b52f894c28a49eb45d4cf6a0e65df39b3c717039ae41958fe810c1e05ad62ceef2980e0cfd891bfae0db61fb1c8d65b6812ef1bf5d426f955ab4826eae69f531979699685f5312882032a5f47ed8cf2e98e67d9f6c299d2060a04b4aa677500b48a33586b10f71293d57de846d2683621b588630a6ef06a41437bd99366787b787a68c71779132d0ee73aa5f97d5b9ca18a7ae26b7002512df1073e2eccdb4d2f137a15d9604e10547fa465aeb4f2e5899b531adeb5e72fb76c2c1c9d18ceb4a23a5f6174ba86a7119d82e35cb5a5d1c6a093351aaee0094b32b92417dc50c1d3806fffdafd2ec0e3ba176d84bdb7d59755e9083e61ded802e2a089ae9d6746f738b55845bcd4ff0a21888c2c6b972db043973fb323fd1c15e70137aa6a4bce3f60f27c1d1488f3751e5425a5776c7cc3a3c8acbfbd2171407e1a242e8e241e6e9e1287d8995265a8092ec59ad99652e63a41b744f34392017f29c1b1ca4ce7728200743d4497a70cfd2369d0ecf9e0ba6f28da25b2d918a06ad1173091b8d750b8c2120321818a0912bf47b96c9a8962930a843ea8419b24b8618b7b43482291906e151bf39d3634756d9e1ff5a6e787d1fc4be7349c38a3b882e059a5da930a9cb2a01eb8b24b54def2a2949538fc063542921947f1997dbee59842a50a043d431649ea0adde68c43259ab51592107b2618c5f761364d4d3d5d0f4d4ae1b94650cb4b695db5831c6dd789140b87525d9ed46fb8dce8fa75d68f317dfc3858d810928fb3530b7ae8701d622b0e69ab16cbbd46c8165c467850d081292da8147fe07f472776d1e2c75c17bdc0f8bafbc964da953a5efe64af69944f0f8858b2a4dece04428ede8967d0e93827910400af8a859b59579d9628191b291732bae90a3b50f8b2b7728725568a83e006ed21e940d4b7e7291ad6365138aa2d59c0b303cc298f7a70d0c39e4f17a878083631b1f96a65d7b4c5a4403929180694f55b71ba29685bdf472f0e21a1c8b3c2dbfc4892ffbc0f0f23f38ed0b785080c11b0766ffc5a0c2c750080b764df159e42ac8eb82681baec5b0ad7948153679162c223f63bf22545718accf2a30bc4402f6b54996baa00508c6def488975a2e2bf2a8dbcff49293e83f998f8baebe722cdfef96c46ac3d945d56ada194353f7cd03d2b86cb9844f7d63f008fbe553fe0023f6968e8bea9054ed3c567e5c55b283fb2337fbd20510e5e098537f5c1baa6b509f63b1e812840aaf470690894a2725f4460a106a3b0e14b12b47c3fc1a083ae7e8cd2e710b5d428b2063f7bb91105255cc0fcc8ac51398ec3df6416d283c4aba6ed44846e82be02d242c710c973c5f0a9b3b16da8a96f5cd2a164a3fa040075b0cb99944f1b34f7e79ae039d15a6c992cb40aa403de90992c064e1771f2a396734480f43b024dc799b8e242df235dc0d33cfdce41755722907f4533a1480d78e99320412326c27e15434fd3fdb19ed33a07063a8a62b39ce14be2ea1e0adadec65fcf4f19901bd801b87e90fc91f1270b420fb530b71b7aea9ad23c4a4ad28d4b63444bc2fa7b44247d5e9f0ca0209a489035b4521b5e886a419df1f9d0e27b9c5007ee75fd3909d4e0156973bdf2ff8d1a88cad1d534ba93648ecb34a30b1e760f1ee8cfb90c27c36385fd68ee48982e5f0c190e8786b7ef0e1dfd3cb1cc00efc19a92020b509d3e2c74b4265bdc765085bc49c6fc61476aa22cff375a78c59f33394cc6ff460584ebbd8dba2cbfe97feb1c9147068dbc1d3e25631ad8478d826d88c28b2cf967d07d3ff845cbb25699406d106eabd31066e9cf8abbe7598f71cca663a6f63bfb63caa95d3a363e69e9a3bc889d026df28c37e41786bf8c9a1ccc06c3499986a72bb10367f32b1b8a55365c2a5b46061b58b81c5da69ad39db6c468906f1c1225527f1b26a3dbad94b1419f3671086b061117206a634cd08beee1fcdfb4a3a7cc78b3cb1293dc900d0859505018b38033a1cc9a0051968af1f8fa60350865328b6834f9c30bb1734949fcdab62cc6904b285322da3d49f188019648cac314d65a7c57f4e25864f17e346e7ebbe411695a237622356ecc10e66c8ba33e7106a756b8d3abc1a1aababc26413adcfda74a59b9002a7e2e3edb3e7551d32c461c2e40c25cb9de751ffda44d7f353513c5bbbc473594127c09775844dec5dc922caea5532dfa98fe80d80243233a4f0c15520d9dc76da3623aabef3582380ca4d2f9558d6c71b672f259b94f26710aa1d933b3ad79c8755a96c18fcfd62a972ca80ea0d33afbfc80045ba7dab492aa06c73ea3a598b2bc6eb1549627d183c25c3486814960eb1e1b02200a92f51b8642683f88185a9ee91c6dbb576dd8a869e1338b81ec205d979242bd963308af90ec23e01d253a70440edd3ebfac8e489db0a70bb5c887f22e7a5de33918374a9ae5229d419b1948eeb23bdf8dce3c5df3b81d1a3e3b38e095f261cb9e00f5567413a5c13abb469fdf64adc830cc442a099609cf0ebd3ffe936d77d6099d816be2b4cdd31e4fdf5af5904120ec65e81138416462f9e9bbe9ba6d5980c7de01288bd9f4741848802c32f3774678367c70014e531ad7f95b5527d022232ada51148012328f1693b2d08b8eba80dc26d8e9fc369b410331ed720e410ded5bd03ce69942ffb97489a2c5b6e4da93cc73811738a141c3a16d4ff6edf2ad1b3d3ae45a21c5ca2613b92e7871dea89d3cd699b86520c80f6a391cc2911538f8108dc90203b0e74ee43a087e033265e0745a9c991facff49339c40601420bb72ef014bc4b9a51cad1dcde9f1567b4ae9d11b1416ff3d8dee15f4672bdbca4348e7e71f8d75a73851bc0ad539312b7d52c498602a5eda4630296fb40aaa90d8f6122da7fb56d02755f861df193bdc5effd8a0e54c2ef78a284f7543c2b25a81bf545be3a3f549aabe86700bf058877e3fec53813f9992814a2cebf341cedcad346dba70596da899add4d723d98366ab60997cae7e5b9d417252734d9145ab8c5ece5b5b0efdc2f2578838c500ee17b866323a951979c6f1a50da2833bc437bcddd6efaed0244df44e6069daf359289d9c50c073f0fef4be1fb3802be5ea643761ed6347a35a3f537cbde402911c28d7c7c7e6b8612facbe87221f3505ff078d0dbb28ec469fe6eba2efcb4efdcfc5745299c0850e21ee2c9ef77db8070d589c547cc7379b58677d16077093514849869ab5bf8f896fa933ba3edc676dcb73e91386cc48f01782ba635564e0f91988cf98a3a17544abfedcdc1d80540e9499bf98180feb80325194cbc369be3275ed390f8e91b8d75b1364e9fabe50a1e3b9531c3fe1aaf6523e54bb05738bd3a67ca5de01b2e479ef7678a86b13d6b747fb3cb5fe1be8913228705fc232ce422186cb79c3b66c944f6124eb414322806d47978044336221f26d3a09ed8dceb52e3c7e3413535faf1f7868cb47bbbf02c37b4cc877a1d5f4023083d5b36650b673a4e51387c64d44daf58057adaa5610d22a15329804cd51a42f663311c4e5ece9d99b5a813c4025e8e0a98c0f3ec13cf07de0b18d7e1ba7d3eb143f5825f62ae5b5f6d92b167f9dbb2177e84f23322566814296277fc2933956f818f5475b6aa031545e6e2265679d16cbedff96c4f419d5fabe99ee652feac8acf9a90771ab8ade8291b42d25ebbdc03faac02b9599fdb83621f6ae1e2e7f946520f3cff881cd600c17b4a00c08d0996f7d2bb97d35647f72b80ba8ad3b4a16cb71094b2d1193a5fa1456e4671788bc51c0d506f4809ca34620d4a75a62ddfa20ab5c4d347a08eb8784d4c572fcb473b766f5e1ce9d92db70ebee83accd58b8253da36b9542686edce545261f309144a3d64900f796620003b36ee3d44a06cc4d088f73aa45288b90476d2e1e461795d473d59500aa23a6b7724a2f0d6473dc2f0af6ea311a648e193072016e199b920bc8c0830ae18f1c17e33d73badadc0f9d34cd52b54f4d3d480a7ddfe0f140f8de1a382a4c5a722d3e0f875b69054d88b8bab94e9394ba8d28937f1ffd871d1666a377620e7f032633fe58ebc87e533bd6461b537cdde38352ece085378dd7b24fa3fd5a3dc3f5b77492e4fc91238a8bfcc4e20bb396bd3317155981ec593926f2e9f15e5ac1aa533e122441649a681d88142a93386a6ed6b2d5b18d7fb57541e31a69acee17345b08c6667ebbc53a082fbcd980b4751937ba729dd2fd9b43d06091517922dd3ea524db002db7525902a465081843191d2d7ac76adb7724ac2bb88e4cb2f3188dbf0cd47acf5011b4519ec100a44b2ee6a1dacac5aade2cdcdca777c6b5edf596b05691d247f671491f68bf2e113a7e8674309ea98ab794d05c664ade246288796270e10f4a308420a62bf0df1d1636330e88bf4cc78051e5f715c8f97b8a83119b3fb5129ac6d0733256bec96d8cf435fa005e14d88884a0ca24266a4e78e25e2519796ba31971e4d0cb44ea58c5ddf54a15e3b449642e395679fc5ba600cc6bb7f2b004bfb0d621e51f9cf16309e4a02ce4f23f4a2d225aa8c84840bf2d3522a5f7a983cfbbfe4adb62d6ea622ebb784072bc6673878c5eaa865a7657b619f48cf0c51a4b0d47b20f426adc7f8ab68238b97abf68443f0eaac3796bfd99e0bc644e4f6fc43e551eccd615db802dfb031444e09aedcb04846bb894a2cf42dd0a578dc94d727736e502194ae25bf8556373969cb7f27788b6edf5b2bf25a79c7f89289f827ed4be611d65f6bd89698b130aaadd0f2d914819f41a0185dfc73adcea80d2ee592bf32d15010cb32a95ef112bccb2b780b461637ffa1641d34e1b114cdd3dd1ceb365933efef1781f9ec620a73097594c945969c2ea036e36b2380b33599c3e1d4eb2b7f210324aee3bba5a944b71cf0246ceed878897fe00e30d0bd32b3dde08c8805e30efe39cbc9d11b97491d82fbb5d93b1997e5f3128252472ecd256b9f79611175b6f686629ee744d0ba2494607a4476ea5f934c936403509c14bddbc2403ad5d97bfed0da36707b66f39ffdcee7ab39602e740c1ca9761570cdbab5f56b2060db428921457445b15c4c92b9c4b0ebb0746936bc3053836fa884e97c96e44d18a5a52feca033ec4caf950927bf9a281ea1aacb2a8b1a1f74b20de25ad5f3e459ab8b61ba5d00eaedcb6b5467dcd8608cfd48cc8c1a01f2c9f68bc9ef9adf2fd81cb3e28277c52d58f42ea87c8896383c2fa88dd15dba7172990893fe28ad1b50095b2ca20856de64693f3a663be6e34a9ccbb09add5724c5599495d0c95d2b900444651048bf418070b324016678d694b82565931159ffc37d3eefd7b482c41637cdd69b8f7051b6e88cf87a01d26d0689057ca0f66f65a2c3fbca608f7dec52d8e41ea98d21be162eeb38b27e9465d5525e0ffac3bd989adae19bdcf98edc48ff9d9d2a2f0850fa2cac8421ee6e211b1930f9fe9cb7138e8058ae476aa93c0ca49b170eb4ebbbb6fb4020d000eae537b4dd4bdfc63e3fb281848c057b94fc14dc12f8833d5ada50c8f0178137964c3b1524c59eae7ae19066a8003b9f4036b0be91f6f24baf6839f360473907135a8eb777dfe4dcf18d15fb8e16d069c48c5a128f046667f66bb22d36e986c73d2ebaa1a9638a9e8c049d0c766e2008fb19c4aabd96e3443c48377214b01dec0f73538fa5a882553a60664e549030fc9cc21a74a73cf79cfdbbfa3676a474910a295044d804b9f6a30104fc8250da4efcfddc379c3a1b84a2050ee78b18ba84ec5cb4db62540ea7be026b48d2b9294f06aa48e44087dbc494d92fe3e8648792c2b9f5d0d580afac814f8fc74208239b5f8fa6c20fc75c9d73fbe448a4fd1eb1af10165c37e7aa72c83c47dbb92bf3203bc0bea3b3ae261636b9a6b621725aed16de5c33502f152ca3704b1e83a60cfc5807177d9e561b12f43c3ded0951c4ec7af0ab29f55e3745df0f10bedcdcee2d443c0023d7547018c94e2cbb04a5c67a81d33df4dda99f80777b1db00f91bf8abb96ca360353c08b8979d00860ee3af86988171d6739a0f546f64ec34c045afd1be790176228204782836484f6d118d734c8e1b302788aa20e704502da74cd11bc5a22bb717a1d10d5176a4426e88cc132479aa7e8370772b9776ea38d5bd217b08c50f94072acbdf93e732e6ce41f92159b626e59e39925b458465ec3b0191a56d8e1c3a76110200e38380ccfcc1a05f85608bc3ea0bdbbf326bfe003158c8c9e01e90a7ae164cc20de5b23146baa9786111", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)={0x20, 0x0, 0x7, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r1, {0x3707, 0x0, 0x1, 0x10001}}, 0x20) 7.128250244s ago: executing program 8 (id=3583): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r1}, 0x10) 6.872744821s ago: executing program 8 (id=3586): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r1, &(0x7f0000000000)=0x8, 0x12) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, &(0x7f00000002c0)=0x87ffffe, 0x6, 0x0) 6.60974922s ago: executing program 8 (id=3590): socket$nl_generic(0x10, 0x3, 0x10) openat$urandom(0xffffff9c, &(0x7f0000003580), 0x80100, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6.23529911s ago: executing program 5 (id=3596): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[0x0], 0x1, r3, r4, 0x3, 0x100, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf48, 0x1, 0x2, 0x5, 0x4130, 0xe154, 0x200, 0x7f, 0x158, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 6.107320569s ago: executing program 1 (id=3597): syz_io_uring_setup(0x23d, &(0x7f0000000300)={0x0, 0xa57b, 0x40, 0x0, 0x1d4}, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001000000000008000200000000000800030000000000080007"], 0xc0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) 5.981362681s ago: executing program 5 (id=3599): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f00000000c0)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56119ff98596d7469564e6d7c49134d1d57bf4cf20e6ba85156f3c5aa55a181146316537eceea0fff85f05333feea12645495ffa", 0x4e}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd1", 0x17}], 0x3, 0x0, 0x0, 0x40880}], 0x1, 0x4814) recvmmsg(r1, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) 5.957913005s ago: executing program 8 (id=3600): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) 5.875703908s ago: executing program 1 (id=3601): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 5.859303047s ago: executing program 7 (id=3602): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/193, 0xc1) fsopen(0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0x1c, 0x7b, 0xa1, 0x40, 0x14aa, 0x225, 0xe732, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x1, 0x20, 0x10, [{{0x9, 0x4, 0x8, 0x0, 0x0, 0x88, 0xb3, 0x77, 0x6, [@hid_hid={0x9, 0x21, 0x3, 0xb8, 0x1, {0x22, 0xef6}}]}}]}}]}}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x40d}}, {0x0, 0x0}, {0x0, 0x0}]}) 5.771575359s ago: executing program 5 (id=3603): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)="c09bd65a75b56b924573f105bd55ef2b455326e4af9f174c2609f3fb9f52493449d9348dc907fab1cb219c4338d1ef214d72554a7db767b6c4b74fc005f33cac1bad692af0fba16f6c77e25b6540fae461dd1e83d815a1c1cd6d9988b2bfb5c01369e75d3ac54670aaf21a2254894e4a313788cd939932e3390182ee9131fcd371b140d5cb11f0e60fc440b0a2eedfe1d9f6f34d3f0990f07a070147f65d6a0ab4d4f581e421cc38f05febcc49d294b7f2975b7a7db908324d64cfcd9307956f05f2dd7b236ac8f1a58ee891", 0xcc}, {0x0}], 0x2}}, {{&(0x7f0000001740)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001780)="31daf6", 0x3}], 0x1, &(0x7f00000036c0)=ANY=[@ANYBLOB="b4000000000000000000000007000000"], 0xb8}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001a80)="a7fb084440490c908c50390ddfe0bc1690eeb757781f9166f37635ac0601e1bd99e93e31", 0x24}, {0x0}], 0x2, &(0x7f0000001d00)=ANY=[@ANYBLOB="4c000000000000000000000007000000071bb7640101007f000001e0000002ac1414bbffffffffffffffff8317067f00000164010102e0000002ac14142b0a0101000007077d64010100000000000000140000000000000000000000070000000100000000000000140000000000000000000000020000000a00000000000000440000000000000000000000070000008631ffffffff0109ef1f8f7ac3ba9b0011948d2f6a85bfc3f88ad41c27b1529c001165e7abfd9f5f40d9a7f10d8636fa84000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac14143864010101000000001c00000000000000", @ANYRES32, @ANYBLOB="ac2e14bb0a01ef85"], 0x108}}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000001e80)="9c7c84c67eaabd019f922287c8daf18a952060f29f33ee0f51908eab1427a02c73610c3572b9cf0b78d20dcdef8a04636f2a464e0c7524f68236162a6b65738ea6b1c07f4abeed2910aa542ac7ab17b34bd98a5f0878f19603fc9835c258ce872da0", 0x62}, {0x0}], 0x2}}, {{&(0x7f00000032c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000003400)=[{0x0}], 0x1}}], 0x5, 0x1) shutdown(r0, 0x1) 5.611226223s ago: executing program 1 (id=3604): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) write$char_usb(r1, 0x0, 0x0) 5.514842282s ago: executing program 5 (id=3605): ftruncate(0xffffffffffffffff, 0xc17a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b883d36581f"}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be10a42f01fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x10da) 5.011643223s ago: executing program 5 (id=3608): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x20000051) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 4.794702376s ago: executing program 5 (id=3610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2.654253039s ago: executing program 2 (id=3618): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="0dda2d7a03009ffadfa409b48c76fb296526ae98655ee4c429d1f245af4d9bcc0b787eb0619e69f27ab98c3754b47c0b61fc44d54945aa0179444eb7dc9896321b5071754a8b7d0a", 0x48}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) recvmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) 2.557131025s ago: executing program 2 (id=3619): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000c37000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x48d, 0x0, 0x7f00000016}]}) 2.382840748s ago: executing program 7 (id=3620): writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000080)="3b6773add2485f53272c6717c01f934a9e70e0d40de2f5a97a2dfb", 0x1b}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f71800000000000000240000002400000002000000000000000000000400000003000000000000000000000000000000000000000d0200000000000006"], 0xffffffffffffffff, 0x3e, 0x0, 0xa}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 2.224615041s ago: executing program 1 (id=3621): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0x20000000, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x10, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}], @echo_reply}}}}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000050) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 2.212482488s ago: executing program 2 (id=3622): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x7c, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) 2.192941535s ago: executing program 7 (id=3623): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x4, 0xfffff034}, {0x40, 0x40, 0x0, 0xfffffffe}, {0x6, 0x0, 0x40, 0x1}]}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) write(r1, 0x0, 0x0) 2.0737076s ago: executing program 1 (id=3624): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/101) 1.998920665s ago: executing program 7 (id=3625): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.9987305s ago: executing program 2 (id=3626): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1.880906036s ago: executing program 7 (id=3627): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f000001f480), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x5}}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r2}, 0x10) 1.822932464s ago: executing program 2 (id=3628): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x17, 0x48890, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) 1.686560219s ago: executing program 2 (id=3629): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, 'M2N#', {0x3, 0x106, 0x0, 0x0, 0xf, 0x0, 0xe}}) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb01"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 1.623355969s ago: executing program 7 (id=3630): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote, r2}, 0x14) 90.574302ms ago: executing program 1 (id=3631): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 0s ago: executing program 8 (id=3632): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000032c0)=@newtaction={0x3a4, 0x30, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{0x390, 0x1, [@m_ipt={0x25c, 0x17, 0x0, 0x0, {{0x8}, {0x1a0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf1, 0x6, {0x0, 'raw\x00', 0xe, 0xb3, "01df771ed4aa468d466490bb6d3a762752b0276450737133d354ea68c13a92efe99064741e04d8a20e194e30a60295d386bccda0f3007979597e6d03b954a8f914ba7b899f16c20d6d72edd9b6f52db88f3ba2e308499f6252662a51fa4b12868b58f75e27ec9103b8068b9b811e21bd2aa37e31ee1bb8e60ecb8155c8e19ea1c7fdbb9aa819059c61aa86c434a7c8da18ab573d7585bec9c1d4494956d182e7b35a526fd48659ab60beb8f339651c715661a36a876cce3dd7a98863f318caef99752c65346980"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0xff3b, 'nat\x00', 0x6a, 0xfff, "ec6c358b1b02688c45d6891b8d39befc710e9c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_HOOK={0x8}]}, {0x95, 0x6, "33c428b1016ea0e62b6c917780554ec63a01a7382016d430730d1158d5469fa35f73d351ec348637d292a8c8699738644c304a14a0ca2e2c1422d9493ae361a88a61e76022334cc9eff1d9b15acf815ab9bf490688724773d3775e92953306fa3923bf0b3eb78ed4c4e43760fb360a12727f0000004fe4c5639595b4ce1706ccb85c9b5872240c31834297cfb06b7eaaa1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x130, 0x11, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x9d, 0x6, {0x7, 'mangle\x00', 0x4, 0x7, "852c07967e4bde8acbdebf709c7f67b435415e9fad5eed399218069c30b3db399d5bdbdffc09aa13d6aef79a3360cf4b7d5e8a92b817394560aba652eb4e4ec31470dd9b8becbf6cad6f3328aec2ac14541a30a5f89f2a6e60534a70c1deccc519f73984d6d2ae8b9fe17278f03e9f60e876c3"}}]}, {0x65, 0x6, "195244b493b69a109e343c48236a318aa067ccccb2000506f4e63246fce6276de9355aae82ccf014b3a51009a53cc597e7eec180e252560262d28e1340152b8389fc3dcbd1c60cbef5aa738a80d9582b7bf553a33208654c9b7b642eb56b8a9716"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x3a4}}, 0x4000) recvmsg$kcm(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000025c0)=""/214, 0xd6}, {&(0x7f00000026c0)=""/151, 0x97}], 0x2}, 0x1) kernel console output (not intermixed with test programs): e number 46 using dummy_hcd [ 371.752692][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 371.909161][ T6312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.920224][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 371.947040][ T6312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.966197][ T6312] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 371.985827][ T6312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.011855][ T6312] usb 4-1: config 0 descriptor?? [ 372.114832][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e966400: abort rx timeout. Force session deactivation [ 372.459373][ T6312] pyra 0003:1E7D:2CF6.003E: unknown main item tag 0x0 [ 372.490696][ T6312] pyra 0003:1E7D:2CF6.003E: unknown main item tag 0x0 [ 372.514490][ T6312] pyra 0003:1E7D:2CF6.003E: unknown main item tag 0x0 [ 372.535361][ T6312] pyra 0003:1E7D:2CF6.003E: unknown main item tag 0x0 [ 372.543520][ T9] usb 5-1: USB disconnect, device number 47 [ 372.590296][ T6312] pyra 0003:1E7D:2CF6.003E: unknown main item tag 0x0 [ 372.612051][ T6312] pyra 0003:1E7D:2CF6.003E: unknown main item tag 0x0 [ 372.647815][ T6312] pyra 0003:1E7D:2CF6.003E: unknown main item tag 0x0 [ 372.673415][ T6312] pyra 0003:1E7D:2CF6.003E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 372.777529][T12759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.792728][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 372.952697][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 373.445737][ T6312] pyra 0003:1E7D:2CF6.003E: couldn't init struct pyra_device [ 373.465936][ T6312] pyra 0003:1E7D:2CF6.003E: couldn't install mouse [ 373.505319][ T6312] pyra 0003:1E7D:2CF6.003E: probe with driver pyra failed with error -71 [ 373.552926][ T6312] usb 4-1: USB disconnect, device number 46 [ 373.684255][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2654'. [ 373.693806][T12780] ip_vti0: Master is either lo or non-ether device [ 373.832700][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 373.855642][ T92] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 373.989166][T12795] capability: warning: `syz.5.2660' uses 32-bit capabilities (legacy support in use) [ 373.998929][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 374.039884][ T92] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.051348][ T92] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.090008][ T92] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 374.108482][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 374.117474][ T92] usb 3-1: SerialNumber: syz [ 374.346109][ T92] usb 3-1: 0:2 : does not exist [ 374.377696][ T92] usb 3-1: USB disconnect, device number 50 [ 374.422486][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 374.773129][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 374.822115][T12813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2668'. [ 374.872693][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 374.925773][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 374.942226][ T9] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 374.973417][ T9] usb 5-1: config 0 has no interface number 0 [ 374.988474][ T9] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 375.008955][ T9] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 375.021717][ T9] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 375.033029][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 375.040683][ T9] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.069075][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 375.082239][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.091823][ T9] usb 5-1: Product: syz [ 375.100296][ T9] usb 5-1: Manufacturer: syz [ 375.105585][ T9] usb 5-1: SerialNumber: syz [ 375.136801][ T9] usb 5-1: config 0 descriptor?? [ 375.301413][T12827] netlink: 202368 bytes leftover after parsing attributes in process `syz.2.2675'. [ 375.368694][ T9] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 375.538260][T12837] usb usb8: usbfs: process 12837 (syz.3.2680) did not claim interface 0 before use [ 375.599690][ T92] usb 5-1: USB disconnect, device number 48 [ 375.747815][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 375.912682][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 375.922956][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 375.941359][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 375.959117][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 375.972189][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 8240, setting to 1024 [ 375.987867][ T9] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 375.998727][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.006943][ T9] usb 3-1: Product: syz [ 376.011201][ T9] usb 3-1: Manufacturer: syz [ 376.016992][ T9] usb 3-1: SerialNumber: syz [ 376.025852][ T9] usb 3-1: config 0 descriptor?? [ 376.072787][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 376.153236][ T92] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 376.193092][ T5945] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 376.248099][ T9] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -12 [ 376.278585][ T9] usb 3-1: USB disconnect, device number 51 [ 376.363222][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.374623][ T5945] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 376.374658][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.374682][ T5945] usb 2-1: Product: syz [ 376.374698][ T5945] usb 2-1: Manufacturer: syz [ 376.374715][ T5945] usb 2-1: SerialNumber: syz [ 376.416543][ T5945] usb 2-1: config 0 descriptor?? [ 376.432274][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.442826][ T92] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.491008][ T92] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 376.500341][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.513258][ T92] usb 6-1: config 0 descriptor?? [ 376.935519][ T92] acrux 0003:1A34:0802.003F: unknown main item tag 0x0 [ 376.942482][ T92] acrux 0003:1A34:0802.003F: unknown main item tag 0x0 [ 376.952702][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 376.953342][ T92] acrux 0003:1A34:0802.003F: unknown main item tag 0x0 [ 376.970562][ T92] acrux 0003:1A34:0802.003F: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.5-1/input0 [ 376.989507][ T92] acrux 0003:1A34:0802.003F: no inputs found [ 376.995927][ T92] acrux 0003:1A34:0802.003F: Failed to enable force feedback support, error: -19 [ 377.112761][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 377.149183][ T92] usb 6-1: USB disconnect, device number 6 [ 377.432157][ T5945] usb 2-1: non-Atmel transceiver xxxx0008 [ 377.514855][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 377.514876][ T30] audit: type=1326 audit(1754164154.562:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.4.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f939632ad69 code=0x7ffc0000 [ 377.580830][ T30] audit: type=1326 audit(1754164154.592:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.4.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f939632ad69 code=0x7ffc0000 [ 377.632472][ T30] audit: type=1326 audit(1754164154.592:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.4.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939638eb69 code=0x7ffc0000 [ 377.673045][ T5945] usb 2-1: Firmware version (0.0) predates our first public release. [ 377.693635][ T5945] usb 2-1: Please update to version 0.2 or newer [ 377.709208][ T30] audit: type=1326 audit(1754164154.592:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.4.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939638eb69 code=0x7ffc0000 [ 377.766110][ T5945] usb 2-1: atusb_probe: initialization failed, error = -19 [ 377.783950][ T30] audit: type=1326 audit(1754164154.592:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.4.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f939632ad69 code=0x7ffc0000 [ 377.813288][ T5945] usb 2-1: USB disconnect, device number 43 [ 377.825806][ T30] audit: type=1326 audit(1754164154.592:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.4.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f939632ad69 code=0x7ffc0000 [ 377.849944][ T30] audit: type=1326 audit(1754164154.592:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.4.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f939632ad69 code=0x7ffc0000 [ 377.873067][ T30] audit: type=1326 audit(1754164154.592:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.4.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939638eb69 code=0x7ffc0000 [ 377.897125][ T30] audit: type=1326 audit(1754164154.592:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.4.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939638eb69 code=0x7ffc0000 [ 377.950340][ T30] audit: type=1326 audit(1754164154.592:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.4.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f939632ad69 code=0x7ffc0000 [ 377.992701][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 378.152750][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 379.032702][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 379.192688][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 379.752930][ T6312] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 379.936479][ T6312] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 379.982818][ T6312] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 380.073248][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 380.082748][ T6312] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 380.122224][ T6312] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 380.169023][ T6312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.217456][T12922] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 380.232711][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 380.266829][ T6312] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 380.618969][ T6312] usb 6-1: USB disconnect, device number 7 [ 381.112902][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 381.272833][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 381.653940][T12974] input: syz0 as /devices/virtual/input/input56 [ 381.911625][T12978] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 382.152768][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 382.312683][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 382.757024][T12999] netlink: 'syz.1.2747': attribute type 1 has an invalid length. [ 382.907129][T12999] bond1: entered promiscuous mode [ 382.937715][T12999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.033966][T13001] 8021q: adding VLAN 0 to HW filter on device bond2 [ 383.043832][T13001] bond1: (slave bond2): making interface the new active one [ 383.051997][T13001] bond2: entered promiscuous mode [ 383.060000][T13001] bond1: (slave bond2): Enslaving as an active interface with an up link [ 383.192680][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 383.352772][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 383.593932][ T6057] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 383.755764][ T6057] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 383.766942][ T6057] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 383.783427][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2754'. [ 383.800945][ T6057] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 383.836260][ T6057] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 383.845871][ T6057] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.859766][ T6057] usb 2-1: Product: syz [ 383.865241][ T6057] usb 2-1: Manufacturer: syz [ 383.871144][ T6057] usb 2-1: SerialNumber: syz [ 383.881976][ T6057] usb 2-1: config 0 descriptor?? [ 383.919698][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.926795][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.121184][ T6057] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 384.232679][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 384.337821][ T6057] usb 2-1: USB disconnect, device number 44 [ 384.392730][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 384.500636][ T9] hid_parser_main: 2 callbacks suppressed [ 384.500660][ T9] hid-generic 0000:0003:0001.0040: unknown main item tag 0x0 [ 384.525681][ T9] hid-generic 0000:0003:0001.0040: unknown main item tag 0x0 [ 384.542534][ T9] hid-generic 0000:0003:0001.0040: hidraw0: HID v0.03 Device [syz0] on syz1 [ 384.572823][ T6312] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 384.651317][T13040] fido_id[13040]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 384.739666][ T6312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.752061][ T6312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.761161][ T92] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 384.776685][ T6312] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 384.797181][ T6312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 384.815798][ T6312] usb 3-1: SerialNumber: syz [ 384.932699][ T92] usb 6-1: Using ep0 maxpacket: 16 [ 384.972426][ T92] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 384.988714][ T92] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.000223][ T92] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 385.021701][ T92] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 385.032365][ T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.051909][ T92] usb 6-1: Product: syz [ 385.056273][ T92] usb 6-1: Manufacturer: syz [ 385.061160][ T92] usb 6-1: SerialNumber: syz [ 385.075826][ T6312] usb 3-1: 0:2 : does not exist [ 385.129729][ T6312] usb 3-1: USB disconnect, device number 52 [ 385.272683][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 385.282758][ T6057] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 385.392790][ T5932] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 385.432741][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 385.434918][ T6057] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 385.451296][ T6057] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 385.463369][ T6057] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 385.477392][ T6057] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 385.486637][ T6057] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.498871][T13050] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 385.510074][ T92] usb 6-1: 0:2 : does not exist [ 385.542984][ T5932] usb 5-1: Using ep0 maxpacket: 32 [ 385.550099][ T5932] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 385.564997][ T5932] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 385.574521][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 385.583156][ T5932] usb 5-1: Product: syz [ 385.587374][ T5932] usb 5-1: Manufacturer: syz [ 385.592048][ T5932] usb 5-1: SerialNumber: syz [ 385.607406][ T5932] usb 5-1: config 0 descriptor?? [ 385.616262][T13053] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 385.630478][ T5932] hub 5-1:0.0: bad descriptor, ignoring hub [ 385.636645][ T5932] hub 5-1:0.0: probe with driver hub failed with error -5 [ 386.211296][T13070] ALSA: seq fatal error: cannot create timer (-22) [ 386.312692][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 386.337191][ T92] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 386.407944][ T92] usb 6-1: USB disconnect, device number 8 [ 386.417156][ T6057] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 386.462282][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 386.478461][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 386.553294][T13053] usb 5-1: reset high-speed USB device number 49 using dummy_hcd [ 386.648102][ T6057] usb 4-1: USB disconnect, device number 47 [ 386.752554][T13053] usb 5-1: device firmware changed [ 386.768179][ T5932] usb 5-1: USB disconnect, device number 49 [ 386.785163][T13081] trusted_key: syz.2.2781 sent an empty control message without MSG_MORE. [ 386.946538][ T5932] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 387.138133][ T5932] usb 5-1: Using ep0 maxpacket: 32 [ 387.150099][ T5932] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 387.179541][ T5932] usb 5-1: string descriptor 0 read error: -22 [ 387.197326][ T5932] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 387.233509][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 387.278812][ T5932] usb 5-1: config 0 descriptor?? [ 387.287179][T13060] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 387.308292][ T5932] hub 5-1:0.0: bad descriptor, ignoring hub [ 387.322747][ T5932] hub 5-1:0.0: probe with driver hub failed with error -5 [ 387.352795][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 387.512671][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 387.643001][ T5932] usb 5-1: USB disconnect, device number 50 [ 388.024335][T13109] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2793'. [ 388.220756][T13117] team0: entered promiscuous mode [ 388.240317][T13117] team_slave_0: entered promiscuous mode [ 388.257856][T13117] team_slave_1: entered promiscuous mode [ 388.280499][T13117] batadv_slave_0: entered promiscuous mode [ 388.311014][T13116] batadv_slave_0: left promiscuous mode [ 388.327639][T13116] team0: left promiscuous mode [ 388.341557][T13116] team_slave_0: left promiscuous mode [ 388.357462][T13116] team_slave_1: left promiscuous mode [ 388.393338][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 388.544060][T13129] raw_sendmsg: syz.5.2802 forgot to set AF_INET. Fix it! [ 388.562868][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 389.161780][ T30] kauditd_printk_skb: 109 callbacks suppressed [ 389.161803][ T30] audit: type=1326 audit(1754164166.202:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13149 comm="syz.1.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2e2492ad69 code=0x7ffc0000 [ 389.219338][ T30] audit: type=1326 audit(1754164166.202:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13149 comm="syz.1.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2498eb69 code=0x7ffc0000 [ 389.245756][ T30] audit: type=1326 audit(1754164166.202:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13149 comm="syz.1.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2e2492ad69 code=0x7ffc0000 [ 389.271518][ T30] audit: type=1326 audit(1754164166.202:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13149 comm="syz.1.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2498eb69 code=0x7ffc0000 [ 389.299263][ T6312] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 389.346916][ T30] audit: type=1326 audit(1754164166.202:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13149 comm="syz.1.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2e2492ad69 code=0x7ffc0000 [ 389.389819][ T30] audit: type=1326 audit(1754164166.202:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13149 comm="syz.1.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2498eb69 code=0x7ffc0000 [ 389.432691][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 389.486983][ T30] audit: type=1326 audit(1754164166.202:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13149 comm="syz.1.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2498eb69 code=0x7ffc0000 [ 389.525186][ T30] audit: type=1326 audit(1754164166.202:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13149 comm="syz.1.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2498eb69 code=0x7ffc0000 [ 389.549644][ T6312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.591394][ T6312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.601422][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 389.609657][ T30] audit: type=1326 audit(1754164166.202:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13149 comm="syz.1.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2e2492ad69 code=0x7ffc0000 [ 389.637518][ T6312] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 389.647195][ T30] audit: type=1326 audit(1754164166.202:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13149 comm="syz.1.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2498eb69 code=0x7ffc0000 [ 389.652043][T13155] macvlan2: entered allmulticast mode [ 389.670338][ T6312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.687770][ T6312] usb 5-1: config 0 descriptor?? [ 389.700772][T13155] bond0: entered allmulticast mode [ 389.711037][T13155] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 389.719782][T13155] bridge0: port 1(macvlan2) entered blocking state [ 389.727147][T13155] bridge0: port 1(macvlan2) entered disabled state [ 389.740595][T13155] macvlan2: entered promiscuous mode [ 389.748661][T13155] bond0: entered promiscuous mode [ 390.092796][ T92] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 390.114343][ T6312] cm6533_jd 0003:0D8C:0022.0041: unknown main item tag 0x0 [ 390.136946][ T6312] cm6533_jd 0003:0D8C:0022.0041: unknown main item tag 0x0 [ 390.157609][ T6312] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0041/input/input57 [ 390.212442][ T6312] cm6533_jd 0003:0D8C:0022.0041: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 390.295841][ T92] usb 3-1: Using ep0 maxpacket: 16 [ 390.304263][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.342186][ T6312] usb 5-1: USB disconnect, device number 51 [ 390.359339][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.383580][ T92] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 390.392578][T13173] fido_id[13173]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 390.428454][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.468060][ T92] usb 3-1: config 0 descriptor?? [ 390.472701][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 390.632680][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 390.702405][T13160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.715963][T13160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.932297][ T92] hid (null): invalid report_size 19609 [ 391.130655][ T92] usb 3-1: string descriptor 0 read error: -71 [ 391.170351][ T92] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 391.188644][ T92] letsketch 0003:6161:4D15.0042: probe with driver letsketch failed with error -32 [ 391.223540][ T92] usb 3-1: USB disconnect, device number 53 [ 391.262849][ T5932] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 391.443344][ T5932] usb 5-1: Using ep0 maxpacket: 16 [ 391.461019][ T5932] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.476784][ T5932] usb 5-1: config 0 interface 0 has no altsetting 0 [ 391.483799][ T5932] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 391.493194][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.506832][ T5932] usb 5-1: config 0 descriptor?? [ 391.512731][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 391.672734][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 391.968835][ T5932] corsair 0003:1B1C:1B34.0043: hidraw0: USB HID v0.05 Device [HID 1b1c:1b34] on usb-dummy_hcd.4-1/input0 [ 391.986221][ T92] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 392.142252][ T5932] usb 5-1: USB disconnect, device number 52 [ 392.173073][ T92] usb 3-1: Using ep0 maxpacket: 8 [ 392.181348][ T92] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 392.203527][ T92] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 392.240443][ T92] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 392.272458][ T92] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 392.319525][ T92] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.339714][ T92] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 392.363474][T13235] input: syz0 as /devices/virtual/input/input58 [ 392.371362][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.384313][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2846'. [ 392.552682][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 392.602910][ T5932] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 392.617094][ T92] usb 3-1: usb_control_msg returned -32 [ 392.623785][ T92] usbtmc 3-1:16.0: can't read capabilities [ 392.712683][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 392.773085][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 392.795789][ T5932] usb 4-1: config index 0 descriptor too short (expected 30768, got 18) [ 392.816656][ T5932] usb 4-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 392.839046][ T5932] usb 4-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 392.867793][ T5932] usb 4-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 392.906460][ T5932] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 392.918439][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.076233][T13251] netlink: 'syz.4.2853': attribute type 10 has an invalid length. [ 393.085280][T13251] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.092768][T13251] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.147765][ T5932] usb 4-1: string descriptor 0 read error: -22 [ 393.193216][ T6312] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 393.335967][T13257] usbtmc 3-1:16.0: CHECK_CLEAR_STATUS returned 6 [ 393.353260][ T6312] usb 6-1: Using ep0 maxpacket: 16 [ 393.358898][ T5932] usb 4-1: USB disconnect, device number 48 [ 393.365325][ T6312] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 393.391068][ T6312] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 393.405495][ T6312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.419376][ T6312] usb 6-1: config 0 descriptor?? [ 393.439952][ T6312] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input59 [ 393.538146][ T92] usb 3-1: USB disconnect, device number 54 [ 393.592763][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 393.743916][ T5217] bcm5974 6-1:0.0: could not read from device [ 393.753122][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 393.764936][ T6312] bcm5974 6-1:0.0: could not read from device [ 393.773844][ T5217] bcm5974 6-1:0.0: could not read from device [ 393.785106][ T6312] input: failed to attach handler mousedev to device input59, error: -5 [ 393.797868][ T5217] bcm5974 6-1:0.0: could not read from device [ 393.803115][ T6312] usb 6-1: USB disconnect, device number 9 [ 393.812443][ T5217] bcm5974 6-1:0.0: could not read from device [ 393.830052][ T5977] bcm5974 6-1:0.0: could not read from device [ 393.942511][ T6036] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.029045][ T6036] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.170064][ T6036] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.299922][ T6036] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.632671][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 394.643516][T13275] TCP: TCP_TX_DELAY enabled [ 394.712097][ T6036] bridge_slave_1: left allmulticast mode [ 394.734999][ T6036] bridge_slave_1: left promiscuous mode [ 394.743445][ T6312] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 394.752475][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.793061][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 394.822283][ T6036] bridge_slave_0: left allmulticast mode [ 394.852698][ T6036] bridge_slave_0: left promiscuous mode [ 394.864287][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.912855][ T6312] usb 6-1: Using ep0 maxpacket: 16 [ 394.931948][ T6312] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.968437][ T6312] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 395.012158][ T6312] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 395.042122][ T6312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.095845][ T6312] usb 6-1: config 0 descriptor?? [ 395.290737][ T5866] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 395.303211][ T5866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 395.313716][ T5866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 395.328239][ T5866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 395.330388][T13289] openvswitch: netlink: IPv4 tun info is not correct [ 395.344374][ T5866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 395.541985][ T6312] HID 045e:07da: Invalid code 65791 type 1 [ 395.583280][T13294] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 395.608775][ T6312] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0044/input/input60 [ 395.670928][T13300] kvm: Disabled LAPIC found during irq injection [ 395.672713][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 395.703461][ T6312] microsoft 0003:045E:07DA.0044: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 395.832762][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 396.353093][ T92] usb 6-1: USB disconnect, device number 10 [ 396.619579][ T6036] bond1 (unregistering): Released all slaves [ 396.652169][ T6036] bond0 (unregistering): Released all slaves [ 396.707466][T13322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 396.715159][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 396.851635][ T6036] tipc: Left network mode [ 396.872685][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 397.242875][ T6312] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 397.284919][T13338] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2878'. [ 397.432712][ T6312] usb 2-1: Using ep0 maxpacket: 8 [ 397.432752][ T5875] Bluetooth: hci4: command tx timeout [ 397.450160][ T6312] usb 2-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 397.507236][ T6312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.524378][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2881'. [ 397.562087][ T6312] usb 2-1: config 0 descriptor?? [ 397.577057][T13293] chnl_net:caif_netlink_parms(): no params data found [ 397.606244][ T6312] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 397.752795][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 397.801253][ T6312] usb 2-1: qt2_attach - failed to power on unit: -71 [ 397.836691][ T6312] quatech2 2-1:0.0: probe with driver quatech2 failed with error -71 [ 397.870633][ T6312] usb 2-1: USB disconnect, device number 45 [ 398.201043][ T6036] hsr_slave_0: left promiscuous mode [ 398.231867][ T6036] hsr_slave_1: left promiscuous mode [ 398.241392][ T6036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.250437][ T6036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.261048][ T6036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.279746][ T6036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.321906][ T6036] veth1_macvtap: left promiscuous mode [ 398.354892][ T6036] veth0_macvtap: left promiscuous mode [ 398.360653][ T6036] veth1_vlan: left promiscuous mode [ 398.383234][ T6036] veth0_vlan: left promiscuous mode [ 398.442919][ T6312] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 398.625268][ T6312] usb 3-1: Using ep0 maxpacket: 8 [ 398.665504][ T6312] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 398.680331][ T6312] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 398.703692][ T6312] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 398.739042][ T6312] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 398.762673][ T6312] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.799231][ C1] net_ratelimit: 1 callbacks suppressed [ 398.799259][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 398.812173][ T6312] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 398.831729][ T6312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.952860][ T5932] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 398.968584][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 399.098470][ T6312] usb 3-1: GET_CAPABILITIES returned 0 [ 399.114400][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 399.116220][ T6312] usbtmc 3-1:16.0: can't read capabilities [ 399.134652][ T5932] usb 2-1: config 0 has no interfaces? [ 399.153174][ T5932] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 399.163631][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.182371][ T5932] usb 2-1: config 0 descriptor?? [ 399.406675][ T43] usb 2-1: USB disconnect, device number 46 [ 399.472257][T13369] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 399.486511][ T9] usb 3-1: USB disconnect, device number 55 [ 399.512860][ T5875] Bluetooth: hci4: command tx timeout [ 399.771302][ T6036] team0 (unregistering): Port device team_slave_1 removed [ 399.832704][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 399.867228][ T6036] team0 (unregistering): Port device team_slave_0 removed [ 399.994056][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 400.872699][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 400.921232][T13386] pim6reg1: entered promiscuous mode [ 400.934080][T13386] pim6reg1: entered allmulticast mode [ 400.954054][T13293] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.971492][T13293] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.989126][T13293] bridge_slave_0: entered allmulticast mode [ 401.001046][T13293] bridge_slave_0: entered promiscuous mode [ 401.050541][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 401.064310][T13293] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.079830][T13293] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.087884][T13293] bridge_slave_1: entered allmulticast mode [ 401.103260][T13293] bridge_slave_1: entered promiscuous mode [ 401.251274][T13293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.291371][T13293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.479051][ T6036] IPVS: stop unused estimator thread 0... [ 401.488022][T13293] team0: Port device team_slave_0 added [ 401.521876][T13293] team0: Port device team_slave_1 added [ 401.592775][ T5875] Bluetooth: hci4: command tx timeout [ 401.692009][T13293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.712409][T13293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.765081][T13293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.778974][T13293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.788684][T13293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.836563][T13293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.912689][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 402.022779][T13293] hsr_slave_0: entered promiscuous mode [ 402.029872][T13293] hsr_slave_1: entered promiscuous mode [ 402.037909][T13293] debugfs: 'hsr0' already exists in 'hsr' [ 402.043962][T13293] Cannot create hsr debugfs directory [ 402.082699][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 402.490118][T13451] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 402.700935][T13293] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 402.787951][T13293] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 402.861322][T13293] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 402.952687][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 403.002160][T13293] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 403.075713][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2918'. [ 403.112834][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 403.172223][T13468] vxlan0: entered promiscuous mode [ 403.237930][ T6031] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.262022][ T6031] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.313284][ T6031] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.359414][ T6036] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.577429][T13293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.646844][T13293] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.673230][ T5875] Bluetooth: hci4: command tx timeout [ 403.697211][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.704472][ T6031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.764286][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.771548][ T6031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.992847][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 404.040977][T13293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.162760][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 404.181889][T13293] veth0_vlan: entered promiscuous mode [ 404.218377][T13293] veth1_vlan: entered promiscuous mode [ 404.353415][T13293] veth0_macvtap: entered promiscuous mode [ 404.391055][T13293] veth1_macvtap: entered promiscuous mode [ 404.501789][T13293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.546182][T13293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.618402][ T6031] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.651033][ T6031] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.690228][ T6031] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.714141][ T6031] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.733170][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 404.904023][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 404.940651][ T9] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 404.973261][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.010315][ T9] usb 3-1: config 0 descriptor?? [ 405.028782][T13525] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2935'. [ 405.032823][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 405.054779][ T9] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22 [ 405.089350][ T6036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.122807][ T6036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.192738][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 405.269526][ T9] usb 3-1: USB disconnect, device number 56 [ 405.304989][ T6043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.342812][ T6043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.072742][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 406.203292][ T5932] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 406.232797][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 406.383225][ T5932] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.426499][ T5932] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 406.456235][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.508944][ T5932] usb 7-1: config 0 descriptor?? [ 406.774527][ T5932] usbhid 7-1:0.0: can't add hid device: -71 [ 406.797265][ T5932] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 406.840507][ T5932] usb 7-1: USB disconnect, device number 2 [ 407.113965][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 407.272671][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 407.316737][ T5932] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 407.496653][ T5932] usb 7-1: Using ep0 maxpacket: 32 [ 407.522065][ T5932] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.564474][T13585] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2955'. [ 407.572707][ T5932] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 407.615894][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.706577][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2956'. [ 407.716810][ T5932] usb 7-1: config 0 descriptor?? [ 407.748407][ T5932] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 407.779207][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2956'. [ 407.821145][ T5932] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 408.045506][ C1] ldusb 7-1:0.0: Ring buffer overflow, 8 bytes dropped [ 408.152676][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 408.322675][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 408.380314][ C1] ldusb 7-1:0.0: Ring buffer overflow, 8 bytes dropped [ 409.192728][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 409.352665][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 409.501059][ T6057] usb 7-1: USB disconnect, device number 3 [ 409.550093][ T6057] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 410.040960][T13626] input: syz1 as /devices/virtual/input/input61 [ 410.232677][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 410.392736][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 411.272720][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 411.432682][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 411.622919][ T982] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 411.704231][ T6036] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.787041][ T43] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 411.803257][ T982] usb 6-1: Using ep0 maxpacket: 16 [ 411.815210][ T982] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 411.841478][ T982] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.872135][ T982] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.890675][ T982] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.931584][ T982] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.957395][ T6036] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.975537][ T982] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.989571][ T982] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.990864][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.025915][ T982] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.028568][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.070256][ T982] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.078460][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 412.108151][ T982] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 412.113166][ T43] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 412.119728][ T6036] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.138283][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 412.146999][ T982] usb 6-1: SerialNumber: syz [ 412.158905][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.186286][ T982] usb 6-1: config 0 descriptor?? [ 412.209970][ T43] usb 3-1: config 0 descriptor?? [ 412.219602][ T982] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input62 [ 412.312699][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 412.339224][ T6036] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.432357][ T5217] bcm5974 6-1:0.0: could not read from device [ 412.474029][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 412.565182][ T5217] bcm5974 6-1:0.0: could not read from device [ 412.577793][ T982] usb 6-1: USB disconnect, device number 11 [ 412.735954][ T43] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 413.022436][ T6036] vlan2: left promiscuous mode [ 413.037984][ T6036] bridge0: port 3(vlan2) entered disabled state [ 413.125995][ T6036] bridge_slave_1: left allmulticast mode [ 413.131715][ T6036] bridge_slave_1: left promiscuous mode [ 413.187975][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.210616][ T6036] bridge_slave_0: left promiscuous mode [ 413.227763][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.298949][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 413.308898][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 413.318524][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 413.330885][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 413.340379][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 413.352767][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 413.501405][ T92] usb 3-1: USB disconnect, device number 57 [ 413.522659][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 413.614920][ T6036] gretap0 (unregistering): left promiscuous mode [ 413.712871][ T5946] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 413.812745][ T6057] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 413.871592][ T6036] bond1 (unregistering): Released all slaves [ 413.882877][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 413.911891][ T5946] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 413.926440][ T5946] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 413.940131][ T5946] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 413.982814][ T6057] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 413.989884][ T5946] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 414.028513][ T5946] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.029372][ T6036] tipc: Disabling bearer [ 414.049260][ T6057] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.058387][ T6057] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 414.081543][ T6036] tipc: Left network mode [ 414.086354][ T5946] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 414.106988][ T6057] usb 7-1: config 0 interface 0 has no altsetting 0 [ 414.113281][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.145141][ T6057] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.155173][ T6057] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 414.220082][ T6057] usb 7-1: config 0 interface 0 has no altsetting 0 [ 414.250510][ T6057] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.261608][ T6057] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 414.284260][ T6057] usb 7-1: config 0 interface 0 has no altsetting 0 [ 414.296548][ T6057] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.333779][ T6057] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 414.392696][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 414.402673][ T5946] usb 2-1: usb_control_msg returned -32 [ 414.408315][ T5946] usbtmc 2-1:16.0: can't read capabilities [ 414.422251][ T6057] usb 7-1: config 0 interface 0 has no altsetting 0 [ 414.433353][ T6057] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.443022][ T6057] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 414.463004][ T6057] usb 7-1: config 0 interface 0 has no altsetting 0 [ 414.486351][ T6057] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.505470][ T6057] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 414.552959][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 414.554438][ T6057] usb 7-1: config 0 interface 0 has no altsetting 0 [ 414.604916][ T6057] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.633506][ T6057] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 414.662280][ T6057] usb 7-1: config 0 interface 0 has no altsetting 0 [ 414.681017][ T6057] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.690737][ T6057] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 414.705414][ T6057] usb 7-1: config 0 interface 0 has no altsetting 0 [ 414.715966][ T6057] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 414.732377][ T6057] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 414.752070][ T6057] usb 7-1: Product: syz [ 414.762120][ T6057] usb 7-1: Manufacturer: syz [ 414.772279][ T6057] usb 7-1: SerialNumber: syz [ 414.782335][T13747] usbtmc 2-1:16.0: INITIATE_CLEAR returned 0 [ 414.807711][ T6057] usb 7-1: config 0 descriptor?? [ 414.863258][ T6057] yurex 7-1:0.0: USB YUREX device now attached to Yurex #1 [ 414.985347][ T6057] usb 2-1: USB disconnect, device number 47 [ 415.018429][ T6036] hsr_slave_0: left promiscuous mode [ 415.051736][ T6036] hsr_slave_1: left promiscuous mode [ 415.079740][ T6036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.109579][ T6036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.112806][ T9] usb 7-1: USB disconnect, device number 4 [ 415.130057][ T6036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.137275][ T9] yurex 7-1:0.0: USB YUREX #1 now disconnected [ 415.182253][ T6036] veth1_macvtap: left promiscuous mode [ 415.197501][ T6036] veth0_macvtap: left promiscuous mode [ 415.203647][ T6036] veth1_vlan: left promiscuous mode [ 415.209485][ T6036] veth0_vlan: left promiscuous mode [ 415.432666][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 415.441586][ T5875] Bluetooth: hci1: command tx timeout [ 415.592720][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 416.472672][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 416.524410][ T6036] team0 (unregistering): Port device team_slave_1 removed [ 416.595679][ T6036] team0 (unregistering): Port device team_slave_0 removed [ 416.632853][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 417.339793][T13725] chnl_net:caif_netlink_parms(): no params data found [ 417.512666][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 417.520067][ T5875] Bluetooth: hci1: command tx timeout [ 417.629164][T13725] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.639057][T13725] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.650179][T13725] bridge_slave_0: entered allmulticast mode [ 417.660378][T13725] bridge_slave_0: entered promiscuous mode [ 417.679888][T13725] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.687062][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 417.721869][T13725] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.742449][T13725] bridge_slave_1: entered allmulticast mode [ 417.766233][T13725] bridge_slave_1: entered promiscuous mode [ 418.010183][T13725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.052044][T13725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.196518][T13725] team0: Port device team_slave_0 added [ 418.235796][T13725] team0: Port device team_slave_1 added [ 418.450021][T13725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.492702][T13725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.552668][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 418.602893][T13725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.644925][T13725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.652006][T13725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.712684][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 418.736774][T13725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.909474][T13819] loop6: detected capacity change from 0 to 63 [ 418.940530][ T5866] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 418.948289][ T5977] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.949195][ T5977] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.966500][ T5866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 418.966820][T13819] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.988564][ T5866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 419.006904][ T5866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 419.016159][ T5866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 419.034588][T13819] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.050247][T13823] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.082052][ T5977] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.123464][ T5977] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.132081][ T5977] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.174792][T13819] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.218321][T13819] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.291956][ T6036] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.350747][T13822] binder: 13820:13822 ioctl c0306201 200000001a80 returned -14 [ 419.429135][T13725] hsr_slave_0: entered promiscuous mode [ 419.475006][T13725] hsr_slave_1: entered promiscuous mode [ 419.592666][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 419.603351][ T5866] Bluetooth: hci1: command tx timeout [ 419.694157][ T6036] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.752780][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 419.944892][ T6036] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.126800][ T6036] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.254957][T13848] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3031'. [ 420.480038][T13855] netlink: 'syz.1.3033': attribute type 11 has an invalid length. [ 420.632665][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 420.792673][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 421.112981][ T5866] Bluetooth: hci4: command tx timeout [ 421.125624][T13826] chnl_net:caif_netlink_parms(): no params data found [ 421.211024][T13877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3038'. [ 421.220475][T13877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3038'. [ 421.272236][ T6036] bridge_slave_1: left allmulticast mode [ 421.293099][ T6036] bridge_slave_1: left promiscuous mode [ 421.304261][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.327599][ T6036] bridge_slave_0: left allmulticast mode [ 421.341376][ T6036] bridge_slave_0: left promiscuous mode [ 421.365090][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.673980][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 421.681219][ T5866] Bluetooth: hci1: command tx timeout [ 421.832702][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 421.988107][ T6036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.993607][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059f24c00: rx timeout, send abort [ 422.008199][ T6036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.018572][ T6036] bond0 (unregistering): Released all slaves [ 422.045231][ T92] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 422.225396][T13725] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 422.232901][ T92] usb 6-1: Using ep0 maxpacket: 16 [ 422.240576][ T92] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 422.246677][T13725] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 422.256664][ T92] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.269221][ T92] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.289884][ T92] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 422.299328][ T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.307949][ T92] usb 6-1: Product: syz [ 422.310239][T13725] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 422.312413][ T92] usb 6-1: Manufacturer: syz [ 422.338168][ T92] usb 6-1: SerialNumber: syz [ 422.348614][T13725] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 422.494955][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801feac800: rx timeout, send abort [ 422.505073][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059f24c00: abort rx timeout. Force session deactivation [ 422.565465][T13826] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.591759][T13826] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.623787][T13826] bridge_slave_0: entered allmulticast mode [ 422.631824][T13826] bridge_slave_0: entered promiscuous mode [ 422.680825][T13826] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.712743][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 422.724063][T13826] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.731417][T13826] bridge_slave_1: entered allmulticast mode [ 422.741676][T13826] bridge_slave_1: entered promiscuous mode [ 422.766364][ T6036] hsr_slave_0: left promiscuous mode [ 422.777420][ T6036] hsr_slave_1: left promiscuous mode [ 422.783537][ T92] usb 6-1: 0:2 : does not exist [ 422.794701][ T6036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.814247][ T6036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.833794][ T6036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.841331][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 422.841355][ T30] audit: type=1326 audit(1754164199.882:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13914 comm="syz.2.3049" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8794f8eb69 code=0x0 [ 422.870762][ T6036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.878032][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 422.911853][ T6036] veth1_macvtap: left promiscuous mode [ 422.917958][ T6036] veth0_macvtap: left promiscuous mode [ 422.926971][ T6036] veth1_vlan: left promiscuous mode [ 422.932541][ T6036] veth0_vlan: left promiscuous mode [ 422.953245][ T5946] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 423.003413][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801feac800: abort rx timeout. Force session deactivation [ 423.115016][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.138248][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.149962][ T5946] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 423.174687][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.198091][ T5866] Bluetooth: hci4: command tx timeout [ 423.217954][ T5946] usb 2-1: config 0 descriptor?? [ 423.644763][ T5946] cm6533_jd 0003:0D8C:0022.0046: unknown main item tag 0x0 [ 423.654473][ T5946] cm6533_jd 0003:0D8C:0022.0046: unknown main item tag 0x0 [ 423.663471][ T92] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 423.688608][ T5946] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0046/input/input63 [ 423.752757][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 423.773335][ T5946] cm6533_jd 0003:0D8C:0022.0046: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 423.795936][ T92] usb 6-1: USB disconnect, device number 12 [ 423.802933][ T982] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 423.848076][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.909278][ T9] usb 2-1: USB disconnect, device number 48 [ 423.915360][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 423.973248][ T982] usb 3-1: Using ep0 maxpacket: 32 [ 423.981353][ T982] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 423.985599][T13933] fido_id[13933]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 424.014822][ T982] usb 3-1: config 0 has no interface number 0 [ 424.020998][ T982] usb 3-1: config 0 interface 89 has no altsetting 0 [ 424.049547][ T982] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 424.061098][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.072026][ T982] usb 3-1: Product: syz [ 424.077337][ T982] usb 3-1: Manufacturer: syz [ 424.084256][ T982] usb 3-1: SerialNumber: syz [ 424.091894][ T982] usb 3-1: config 0 descriptor?? [ 424.115021][ T982] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 424.141641][ T982] em28xx 3-1:0.89: Video interface 89 found: bulk [ 424.161033][ T6036] team0 (unregistering): Port device team_slave_1 removed [ 424.249233][ T6036] team0 (unregistering): Port device team_slave_0 removed [ 424.368121][ T982] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 424.407886][ T30] audit: type=1326 audit(1754164201.452:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13938 comm="syz.5.3053" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5eb2d8eb69 code=0x0 [ 424.461171][ T982] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 424.479447][ T982] em28xx 3-1:0.89: board has no eeprom [ 424.561770][ T982] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 424.569140][ T982] em28xx 3-1:0.89: analog set to bulk mode. [ 424.576776][ T5946] em28xx 3-1:0.89: Registering V4L2 extension [ 424.638669][ T982] usb 3-1: USB disconnect, device number 58 [ 424.676365][ T982] em28xx 3-1:0.89: Disconnecting em28xx [ 424.692516][ T5946] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 424.700141][ T5946] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 424.740081][ T5946] em28xx 3-1:0.89: No AC97 audio processor [ 424.766896][ T5946] usb 3-1: Decoder not found [ 424.771761][ T5946] em28xx 3-1:0.89: failed to create media graph [ 424.781352][ T5946] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 424.797236][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 424.825988][ T5946] em28xx 3-1:0.89: Registering snapshot button... [ 424.880183][ T5946] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input64 [ 424.881373][T13947] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3056'. [ 424.900980][ T5946] em28xx 3-1:0.89: Remote control support is not available for this card. [ 424.915691][ T982] em28xx 3-1:0.89: Closing input extension [ 424.923885][ T982] em28xx 3-1:0.89: Deregistering snapshot button [ 424.952668][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 425.106885][ T982] em28xx 3-1:0.89: Freeing device [ 425.273429][ T5866] Bluetooth: hci4: command tx timeout [ 425.419653][T13958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3060'. [ 425.692167][T13826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.768599][T13826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.832751][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 425.984549][T13826] team0: Port device team_slave_0 added [ 425.992676][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 426.025668][T13826] team0: Port device team_slave_1 added [ 426.125585][T13826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.148584][T13826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.176077][T13826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.239956][T13826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.263293][T13826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.308459][T13826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.471305][T13826] hsr_slave_0: entered promiscuous mode [ 426.482014][T13826] hsr_slave_1: entered promiscuous mode [ 426.489567][T13826] debugfs: 'hsr0' already exists in 'hsr' [ 426.503052][T13826] Cannot create hsr debugfs directory [ 426.756933][T13725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.872767][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 426.945960][T13725] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.979408][ T6029] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.986717][ T6029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.032875][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 427.065092][ T6029] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.072452][ T6029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.214933][T13826] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 427.246205][T13826] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 427.305590][T13826] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 427.353230][ T5866] Bluetooth: hci4: command tx timeout [ 427.365179][T13826] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 427.506288][T13725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.534934][T14011] block device autoloading is deprecated and will be removed. [ 427.560424][T14011] syz.1.3076: attempt to access beyond end of device [ 427.560424][T14011] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 427.718490][T13725] veth0_vlan: entered promiscuous mode [ 427.751873][T13725] veth1_vlan: entered promiscuous mode [ 427.846651][T13826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.911481][T13826] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.918446][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 427.933061][T13725] veth0_macvtap: entered promiscuous mode [ 427.944491][T13725] veth1_macvtap: entered promiscuous mode [ 427.971801][T13725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.010027][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.017324][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.041131][T13725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.072909][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 428.087898][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.095183][ T6031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.128501][ T5990] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.161137][ T5990] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.177402][ T5990] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.191456][ T5990] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.569372][ T6029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.603887][ T6029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.711619][ T5990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.719834][T13826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.770561][ T5990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.925147][T13826] veth0_vlan: entered promiscuous mode [ 428.952737][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 428.970672][T13826] veth1_vlan: entered promiscuous mode [ 429.112767][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 429.144058][T14054] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 429.208405][T13826] veth0_macvtap: entered promiscuous mode [ 429.257292][T13826] veth1_macvtap: entered promiscuous mode [ 429.338371][T13826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.388912][T13826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.459517][ T6029] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.511611][ T6029] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.576937][ T6029] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.630916][ T6029] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.834098][ T6312] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 429.933133][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 429.964497][ T5990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.992798][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 429.994110][ T6312] usb 2-1: Using ep0 maxpacket: 32 [ 430.002066][ T5990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.038180][ T6312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.059978][ T6312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.102448][ T6312] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 430.112243][ T6312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.123646][ T6312] usb 2-1: config 0 descriptor?? [ 430.143057][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 430.152881][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 430.193872][ T24] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 430.218103][ T6043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.226424][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.237007][ T6043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.262786][ T24] usb 6-1: Product: syz [ 430.267026][ T24] usb 6-1: Manufacturer: syz [ 430.289673][ T24] usb 6-1: SerialNumber: syz [ 430.297961][ T24] usb 6-1: config 0 descriptor?? [ 430.310489][ T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 430.613881][ T6312] ft260 0003:0403:6030.0047: unknown main item tag 0x7 [ 430.774127][ T6312] ft260 0003:0403:6030.0047: chip code: 6424 8183 [ 430.978300][ T6312] ft260 0003:0403:6030.0047: failed to retrieve system status [ 431.003124][ T6312] ft260 0003:0403:6030.0047: probe with driver ft260 failed with error -71 [ 431.032857][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 431.055331][ T6312] usb 2-1: USB disconnect, device number 49 [ 431.077733][T14113] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3104'. [ 431.192771][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 431.536755][ T24] gspca_ov534_9: reg_w failed -71 [ 431.782708][ T6312] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 431.842874][ T24] gspca_ov534_9: Unknown sensor 0000 [ 431.842978][ T24] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 431.882715][ T982] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 431.888778][ T24] usb 6-1: USB disconnect, device number 13 [ 431.954028][ T6312] usb 8-1: Using ep0 maxpacket: 8 [ 431.962014][ T6312] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 431.981100][ T6312] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.992554][ T6312] usb 8-1: config 0 has no interface number 0 [ 432.000264][ T6312] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 432.011659][ T6312] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.042674][ T6312] usb 8-1: config 0 interface 52 has no altsetting 0 [ 432.055292][ T982] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 432.065129][ T6312] usb 8-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 432.073052][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 432.083931][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.092101][ T6312] usb 8-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 432.118776][ T6312] usb 8-1: Manufacturer: syz [ 432.129991][ T982] usb 2-1: config 0 descriptor?? [ 432.147431][ T6312] usb 8-1: config 0 descriptor?? [ 432.166873][ T982] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 432.232668][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 432.319535][ T30] audit: type=1800 audit(1754164209.362:911): pid=14150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3113" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 432.428514][ T6312] input: syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.52/input/input65 [ 432.584386][ T982] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 432.688186][ T6057] usb 8-1: USB disconnect, device number 2 [ 432.688363][ C0] synaptics_usb 8-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 433.112747][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 433.272779][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 433.388548][ T982] gspca_cpia1: usb_control_msg 03, error -71 [ 433.394700][ T982] cpia1 2-1:0.0: unexpected systemstate: 00 [ 433.423056][ T982] usb 2-1: USB disconnect, device number 50 [ 433.444947][T14174] loop6: detected capacity change from 0 to 63 [ 433.503106][ T5977] buffer_io_error: 2312 callbacks suppressed [ 433.503127][ T5977] Buffer I/O error on dev loop6, logical block 0, async page read [ 433.550352][ T5977] Buffer I/O error on dev loop6, logical block 0, async page read [ 433.583393][ T5977] Buffer I/O error on dev loop6, logical block 0, async page read [ 433.617342][T14179] Buffer I/O error on dev loop6, logical block 0, async page read [ 433.636931][T14174] Buffer I/O error on dev loop6, logical block 0, async page read [ 433.656275][ T5977] Buffer I/O error on dev loop6, logical block 0, async page read [ 433.671141][T14174] Buffer I/O error on dev loop6, logical block 0, async page read [ 433.693083][T14174] Buffer I/O error on dev loop6, logical block 0, async page read [ 433.723056][ T5977] Buffer I/O error on dev loop6, logical block 0, async page read [ 433.746025][T14174] Buffer I/O error on dev loop6, logical block 0, async page read [ 434.152729][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 434.291612][T14195] netlink: 'syz.8.3124': attribute type 29 has an invalid length. [ 434.305938][T14195] netlink: 'syz.8.3124': attribute type 29 has an invalid length. [ 434.314032][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 434.335962][T14195] netlink: 500 bytes leftover after parsing attributes in process `syz.8.3124'. [ 434.368368][T14195] unsupported nla_type 58 [ 435.012547][T14221] veth1_to_bridge: entered allmulticast mode [ 435.044380][T14221] veth1_to_bridge: left allmulticast mode [ 435.192759][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 435.352683][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 435.410716][T14236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3138'. [ 436.212733][ T6057] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 436.232750][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 436.366430][ T6057] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 436.386417][ T6057] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 436.402683][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 436.421656][ T6057] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 436.436359][ T6057] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 436.449925][ T6057] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 436.535391][ T6057] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 436.569607][ T6057] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.630268][ T6057] usb 2-1: config 0 descriptor?? [ 436.655815][T14257] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 437.088855][ T6057] plantronics 0003:047F:FFFF.0048: reserved main item tag 0xd [ 437.142486][ T6057] plantronics 0003:047F:FFFF.0048: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 437.195485][ T5875] Bluetooth: hci2: command 0x0406 tx timeout [ 437.272749][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 437.396147][ T982] usb 2-1: USB disconnect, device number 51 [ 437.432672][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 437.470003][T14287] fido_id[14287]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:047F:FFFF.0048/report_descriptor': No such device [ 437.593055][T14293] vlan2: entered allmulticast mode [ 437.605500][T14293] erspan0: entered allmulticast mode [ 437.934823][ T6312] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 438.122835][ T6312] usb 6-1: Using ep0 maxpacket: 32 [ 438.134598][ T6312] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 438.152794][ T6312] usb 6-1: config 0 has no interface number 0 [ 438.174430][ T6312] usb 6-1: config 0 interface 184 has no altsetting 0 [ 438.221576][ T6312] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 438.263204][ T6312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.271353][ T6312] usb 6-1: Product: syz [ 438.308878][ T6312] usb 6-1: Manufacturer: syz [ 438.313334][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 438.331183][ T6312] usb 6-1: SerialNumber: syz [ 438.350429][ T6312] usb 6-1: config 0 descriptor?? [ 438.383074][ T6312] smsc75xx v1.0.0 [ 438.482682][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 438.526002][ T30] audit: type=1800 audit(1754164215.572:912): pid=14321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3163" name="file1" dev="tmpfs" ino=114 res=0 errno=0 [ 438.939290][T14337] input: syz0 as /devices/virtual/input/input67 [ 439.352784][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 439.402855][ T6312] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 439.512670][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 439.520599][T14350] loop6: detected capacity change from 0 to 7 [ 439.573042][T14350] Dev loop6: unable to read RDB block 7 [ 439.603924][T14350] loop6: AHDI p3 [ 439.612682][T14350] loop6: partition table partially beyond EOD, truncated [ 439.630400][ T6312] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 439.690660][ T6312] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 439.731139][ T6312] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 439.802538][ T6312] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 439.849345][ T6312] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 439.952450][ T6312] usb 6-1: USB disconnect, device number 14 [ 440.392771][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 440.392829][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 440.552786][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 440.582735][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 440.595452][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.620188][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.640387][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 440.689523][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 440.719131][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.757064][ T9] usb 2-1: config 0 descriptor?? [ 441.294052][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0049/input/input68 [ 441.432741][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 441.461082][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0049/input/input69 [ 441.601129][ T9] kye 0003:0458:5011.0049: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 441.613390][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 441.688455][ T9] usb 2-1: USB disconnect, device number 52 [ 442.019542][T14409] fido_id[14409]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 442.238689][T14416] usb usb8: usbfs: process 14416 (syz.1.3193) did not claim interface 0 before use [ 442.472727][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 442.632656][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 443.512712][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 443.672745][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 443.722137][T14454] netlink: 'syz.2.3205': attribute type 10 has an invalid length. [ 443.752467][T14454] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.809545][T14454] bridge_slave_1: left allmulticast mode [ 443.841136][T14454] bridge_slave_1: left promiscuous mode [ 443.859064][T14454] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.906956][T14454] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 443.940178][T14456] netlink: 'syz.7.3206': attribute type 14 has an invalid length. [ 443.952194][T14456] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3206'. [ 443.977436][T14456] netlink: 'syz.7.3206': attribute type 14 has an invalid length. [ 443.983007][ T6036] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.998892][T14456] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3206'. [ 444.036545][ T6036] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.058916][ T6036] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.084958][ T6043] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.127117][T14464] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 444.552852][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 444.712803][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 445.092982][ T43] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 445.115475][T14508] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3226'. [ 445.253864][ T43] usb 9-1: Using ep0 maxpacket: 32 [ 445.275057][ T43] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.298680][ T92] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 445.319512][ T43] usb 9-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 445.357126][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.363132][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.372396][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.388509][ T43] usb 9-1: Product: syz [ 445.393114][ T43] usb 9-1: Manufacturer: syz [ 445.397759][ T43] usb 9-1: SerialNumber: syz [ 445.468721][ T43] usb 9-1: config 0 descriptor?? [ 445.482885][ T92] usb 3-1: Using ep0 maxpacket: 8 [ 445.496267][ T43] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 445.523633][ T92] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 445.582688][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.592734][ C1] net_ratelimit: 1 callbacks suppressed [ 445.592757][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 445.649740][ T92] usb 3-1: config 0 descriptor?? [ 445.722082][ T43] gspca_sunplus: reg_r err -32 [ 445.752802][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 445.991918][T14529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3232'. [ 446.261134][T14540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.519500][T14548] syzkaller1: entered promiscuous mode [ 446.526962][T14548] syzkaller1: entered allmulticast mode [ 446.632736][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 446.735108][ T43] sunplus 9-1:0.0: probe with driver sunplus failed with error -32 [ 446.802646][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 446.943291][ T92] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 446.985610][ T92] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 446.998088][T14559] netlink: 'syz.7.3241': attribute type 4 has an invalid length. [ 447.026511][ T92] asix 3-1:0.0: probe with driver asix failed with error -71 [ 447.048471][T14559] netlink: 'syz.7.3241': attribute type 4 has an invalid length. [ 447.072734][ T92] usb 3-1: USB disconnect, device number 59 [ 447.165556][T14564] loop4: detected capacity change from 0 to 7 [ 447.189877][T14564] Dev loop4: unable to read RDB block 7 [ 447.201394][T14564] loop4: AHDI p1 p2 [ 447.211231][T14564] loop4: partition table partially beyond EOD, truncated [ 447.225358][T14564] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 447.376067][ T5977] udevd[5977]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 447.662702][ T6312] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 447.672689][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 447.832646][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 447.852962][ T6312] usb 2-1: Using ep0 maxpacket: 16 [ 447.873382][ T6312] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 447.892137][ T6312] usb 2-1: config 0 has no interface number 0 [ 447.909867][ T6312] usb 2-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30 [ 447.951198][ T6312] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 447.997737][ T6312] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 448.041777][ T6312] usb 2-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 448.129099][ T6312] usb 2-1: config 0 interface 41 has no altsetting 0 [ 448.170986][ T6312] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 448.208859][ T92] usb 9-1: USB disconnect, device number 2 [ 448.224438][ T6312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.294504][ T6312] usb 2-1: Product: syz [ 448.298745][ T6312] usb 2-1: Manufacturer: syz [ 448.342644][ T6312] usb 2-1: SerialNumber: syz [ 448.379251][ T6312] usb 2-1: config 0 descriptor?? [ 448.411498][T14572] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 448.446622][T14572] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 448.704284][T14572] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 448.711654][T14572] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 448.718955][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 448.882664][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 449.350116][ T6312] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 449.597319][ T6312] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 449.637599][ T6312] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 449.703124][ T6312] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 449.744112][ T6312] usb 2-1: USB disconnect, device number 53 [ 449.752670][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 449.912663][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 450.053174][T14649] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3271'. [ 450.164691][T14652] loop2: detected capacity change from 0 to 7 [ 450.188112][ T5977] Dev loop2: unable to read RDB block 7 [ 450.194037][ T5977] loop2: unable to read partition table [ 450.199986][ T5977] loop2: partition table beyond EOD, truncated [ 450.247211][T14652] Dev loop2: unable to read RDB block 7 [ 450.264500][T14652] loop2: unable to read partition table [ 450.285372][T14652] loop2: partition table beyond EOD, truncated [ 450.296064][T14652] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 450.792674][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 450.930280][ T30] audit: type=1326 audit(1754164227.972:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14674 comm="syz.2.3280" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8794f8eb69 code=0x0 [ 450.952150][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.962729][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 451.802765][ T92] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 451.832689][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 451.985553][ T92] usb 8-1: Using ep0 maxpacket: 8 [ 452.002747][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 452.052517][ T92] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 452.061842][ T92] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.136869][ T92] usb 8-1: config 0 descriptor?? [ 452.361133][ T92] asix 8-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 452.872710][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 453.032897][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 453.197981][T14737] netlink: 140 bytes leftover after parsing attributes in process `syz.8.3297'. [ 453.363093][ T92] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 453.392090][ T92] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 453.458532][ T92] asix 8-1:0.0: probe with driver asix failed with error -71 [ 453.646070][ T92] usb 8-1: USB disconnect, device number 3 [ 453.912955][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 454.082753][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 454.223232][T14748] input: syz0 as /devices/virtual/input/input70 [ 454.953018][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 455.112660][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 455.366209][T14790] netlink: 'syz.1.3315': attribute type 1 has an invalid length. [ 455.591778][T14796] 8021q: adding VLAN 0 to HW filter on device bond4 [ 455.625107][T14796] bond3: (slave bond4): making interface the new active one [ 455.643788][T14796] bond3: (slave bond4): Enslaving as an active interface with an up link [ 455.992658][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 456.114245][T14820] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3323'. [ 456.152647][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 457.032659][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 457.090332][T14854] binder: 14852:14854 ioctl c0306201 200000000280 returned -14 [ 457.192646][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 457.573860][ T6312] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 457.767963][ T6312] usb 2-1: config 0 interface 0 has no altsetting 0 [ 457.782959][ T6312] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 457.809216][ T6312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.849212][ T6312] usb 2-1: config 0 descriptor?? [ 458.072657][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 458.242669][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 458.559752][T14898] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3348'. [ 458.665838][T14898] vxlan0: entered promiscuous mode [ 458.708869][ T6043] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.737760][ T6043] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.775316][T14900] syzkaller1: entered promiscuous mode [ 458.803206][T14900] syzkaller1: entered allmulticast mode [ 458.841499][ T6043] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.864206][ T6043] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.897806][ T6312] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 459.106725][ T6057] usb 2-1: USB disconnect, device number 54 [ 459.112874][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 459.272651][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 459.475387][ T30] audit: type=1326 audit(1754164236.522:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.7.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7487d2ad69 code=0x7ffc0000 [ 459.559488][ T30] audit: type=1326 audit(1754164236.542:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.7.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7487d8eb69 code=0x7ffc0000 [ 459.658287][ T30] audit: type=1326 audit(1754164236.542:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.7.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7487d2ad69 code=0x7ffc0000 [ 459.765429][ T30] audit: type=1326 audit(1754164236.542:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.7.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7487d8eb69 code=0x7ffc0000 [ 459.898967][T14930] netlink: 'syz.1.3356': attribute type 1 has an invalid length. [ 459.921630][ T30] audit: type=1326 audit(1754164236.542:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.7.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7487d8eb69 code=0x7ffc0000 [ 460.056468][ T30] audit: type=1326 audit(1754164236.552:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.7.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7487d8eb69 code=0x7ffc0000 [ 460.150825][ T30] audit: type=1326 audit(1754164236.552:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.7.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7487d2ad69 code=0x7ffc0000 [ 460.173341][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 460.218003][T14930] 8021q: adding VLAN 0 to HW filter on device bond5 [ 460.245776][ T30] audit: type=1326 audit(1754164236.552:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.7.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7487d2ad69 code=0x7ffc0000 [ 460.312663][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 460.344931][ T30] audit: type=1326 audit(1754164236.552:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.7.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7487d8eb69 code=0x7ffc0000 [ 460.428795][ T30] audit: type=1326 audit(1754164236.562:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.7.3353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7487d2ad69 code=0x7ffc0000 [ 460.430145][T14937] bond5: (slave geneve2): making interface the new active one [ 460.561538][T14937] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 460.635759][ T5990] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.653489][ T5990] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.686450][ T5990] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.763639][ T5990] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.773716][ T43] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 460.837946][T14951] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3363'. [ 460.947058][ T43] usb 9-1: Using ep0 maxpacket: 32 [ 460.987598][ T43] usb 9-1: config 7 has no interfaces? [ 461.003721][ T43] usb 9-1: New USB device found, idVendor=06e1, idProduct=a333, bcdDevice=3e.de [ 461.024780][ T43] usb 9-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3 [ 461.051457][ T43] usb 9-1: Product: syz [ 461.066116][ T43] usb 9-1: Manufacturer: syz [ 461.087232][ T43] usb 9-1: SerialNumber: syz [ 461.192657][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 461.352658][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 462.232681][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 462.392655][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 462.685848][T15003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.700311][T15003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.969053][T15021] ALSA: seq fatal error: cannot create timer (-22) [ 463.273488][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 463.432645][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 463.695592][T15056] loop4: detected capacity change from 0 to 7 [ 463.722263][ T5977] Dev loop4: unable to read RDB block 7 [ 463.752144][ T5977] loop4: AHDI p3 p4 [ 463.766528][ T5977] loop4: partition table partially beyond EOD, truncated [ 463.785140][ T5977] loop4: p3 size 4227858431 extends beyond EOD, truncated [ 463.840400][T15056] Dev loop4: unable to read RDB block 7 [ 463.859448][T15056] loop4: AHDI p3 p4 [ 463.872316][T15056] loop4: partition table partially beyond EOD, truncated [ 463.892256][T15056] loop4: p3 size 4227858431 extends beyond EOD, truncated [ 464.055708][ T5977] udevd[5977]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 464.126439][ T5977] udevd[5977]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 464.285413][T15071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.317757][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 464.319170][T15071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.481560][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 465.352665][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 465.513634][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 466.392673][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 466.562720][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 467.265485][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 467.265505][ T30] audit: type=1326 audit(1754164244.302:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15139 comm="syz.7.3426" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7487d8eb69 code=0x0 [ 467.432676][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 467.596933][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 468.245390][T15150] binder: 15143:15150 ioctl c0306201 200000000480 returned -14 [ 468.472760][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 468.533273][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3430'. [ 468.632756][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 469.019036][T15182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.307112][T15191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3439'. [ 469.372134][T15191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3439'. [ 469.512711][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 469.672644][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 470.498574][T15236] input: syz1 as /devices/virtual/input/input71 [ 470.552673][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 470.712649][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 471.120173][ T6057] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 471.262734][ T5945] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 471.311154][ T6057] usb 8-1: Using ep0 maxpacket: 8 [ 471.318625][ T6057] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 471.344367][ T6057] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 471.378704][ T6057] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 471.398891][ T6057] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 471.419312][ T6057] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.452671][ T5945] usb 2-1: Using ep0 maxpacket: 16 [ 471.461718][ T6057] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 471.491683][ T6057] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.500314][ T5945] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.522147][ T5945] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.541827][ T5945] usb 2-1: config 0 interface 0 has no altsetting 0 [ 471.583087][ T5945] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 471.594125][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 471.627493][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.668976][ T5945] usb 2-1: config 0 descriptor?? [ 471.752666][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 471.760968][ T6057] usb 8-1: usb_control_msg returned -32 [ 471.777541][ T6057] usbtmc 8-1:16.0: can't read capabilities [ 472.135573][ T5945] apple 0003:05AC:0247.004A: unexpected long global item [ 472.159834][ T5945] apple 0003:05AC:0247.004A: parse failed [ 472.168411][T15284] usb usb1: usbfs: process 15284 (syz.2.3468) did not claim interface 1 before use [ 472.178566][ T5945] apple 0003:05AC:0247.004A: probe with driver apple failed with error -22 [ 472.355564][ T5945] usb 2-1: USB disconnect, device number 55 [ 472.489065][T15295] usbtmc 8-1:16.0: usb_clear_halt returned -32 [ 472.632648][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 472.683257][T15300] netlink: 'syz.5.3473': attribute type 2 has an invalid length. [ 472.697228][ T5945] usb 8-1: USB disconnect, device number 4 [ 472.715104][T15300] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3473'. [ 472.792701][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 473.305460][ T6312] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 473.486003][ T6312] usb 6-1: config 0 has no interfaces? [ 473.512789][ T6312] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 473.540254][ T6312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.580053][ T6312] usb 6-1: config 0 descriptor?? [ 473.672642][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 473.832692][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 473.858470][ T6312] usb 6-1: USB disconnect, device number 15 [ 474.712650][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 474.872646][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 475.752643][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 475.912636][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 476.271198][T15414] input: syz0 as /devices/virtual/input/input72 [ 476.292700][T15412] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3509'. [ 476.338227][T15412] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3509'. [ 476.792757][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 476.952754][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 477.278988][T15440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3518'. [ 477.523829][T15440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3518'. [ 477.832666][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 477.992758][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 478.567086][T15466] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3527'. [ 478.658265][ T30] audit: type=1326 audit(1754164255.702:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15469 comm="syz.2.3526" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8794f8eb69 code=0x0 [ 478.872647][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 479.032635][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 479.513273][ T5946] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 479.682859][ T5946] usb 6-1: Using ep0 maxpacket: 32 [ 479.817743][ T5946] usb 6-1: unable to get BOS descriptor or descriptor too short [ 479.852919][ T5946] usb 6-1: no configurations [ 479.857674][ T5946] usb 6-1: can't read configurations, error -22 [ 479.912654][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 480.072715][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 480.532751][ T92] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 480.715251][ T92] usb 8-1: config 0 has an invalid interface number: 93 but max is 0 [ 480.742895][ T92] usb 8-1: config 0 has no interface number 0 [ 480.771447][ T92] usb 8-1: config 0 interface 93 has no altsetting 0 [ 480.802520][ T92] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 480.828262][ T92] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.867933][T15544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.884595][ T92] usb 8-1: config 0 descriptor?? [ 480.908205][T15544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.918313][ T92] cp210x 8-1:0.93: cp210x converter detected [ 480.952649][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 481.112660][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 481.155507][T15552] input: syz0 as /devices/virtual/input/input73 [ 481.225637][ T6057] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 481.333566][ T92] cp210x 8-1:0.93: failed to get vendor val 0x000e size 3: -32 [ 481.398435][ T6057] usb 6-1: Using ep0 maxpacket: 8 [ 481.428963][ T6057] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 481.453725][ T6057] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.502869][ T6057] usb 6-1: Product: syz [ 481.507121][ T6057] usb 6-1: Manufacturer: syz [ 481.511766][ T6057] usb 6-1: SerialNumber: syz [ 481.567653][ T6057] usb 6-1: config 0 descriptor?? [ 481.567904][ T92] cp210x 8-1:0.93: GPIO initialisation failed: -19 [ 481.598405][ T6057] gspca_main: sq930x-2.14.0 probing 2770:930c [ 481.629742][ T92] usb 8-1: cp210x converter now attached to ttyUSB0 [ 481.771570][T13962] usb 8-1: USB disconnect, device number 5 [ 481.802130][T13962] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 481.853010][T13962] cp210x 8-1:0.93: device disconnected [ 481.992796][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 482.152649][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 482.843482][ T6057] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 483.012883][ T6312] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 483.032651][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 483.093301][ T6057] gspca_sq930x: Sensor ov9630 not yet treated [ 483.101503][ T6057] sq930x 6-1:0.0: probe with driver sq930x failed with error -22 [ 483.132027][ T6057] usb 6-1: USB disconnect, device number 18 [ 483.174767][ T6312] usb 8-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 483.202636][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 483.222464][ T6312] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.253562][ T6312] usb 8-1: config 0 descriptor?? [ 483.277832][ T6312] gspca_main: spca508-2.14.0 probing 8086:0110 [ 483.477471][ T6312] gspca_spca508: reg_read err -32 [ 483.503360][ T6312] gspca_spca508: reg_read err -32 [ 483.526411][ T6312] gspca_spca508: reg_read err -32 [ 483.544841][ T6312] gspca_spca508: reg_read err -32 [ 483.758726][ T6312] gspca_spca508: reg write: error -71 [ 483.770583][ T6312] spca508 8-1:0.0: probe with driver spca508 failed with error -71 [ 483.815430][ T6312] usb 8-1: USB disconnect, device number 6 [ 484.072661][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 484.232698][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 485.112748][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 485.185666][ T5932] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 485.272787][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 485.393001][ T5932] usb 8-1: Using ep0 maxpacket: 32 [ 485.410692][ T5932] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 485.414017][T13962] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 485.438339][ T5932] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 485.482265][ T5932] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 485.492076][ T5932] usb 8-1: Product: syz [ 485.517096][ T5932] usb 8-1: Manufacturer: syz [ 485.536916][ T5932] usb 8-1: SerialNumber: syz [ 485.548842][ T5932] usb 8-1: config 0 descriptor?? [ 485.576176][T15691] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 485.594975][ T5932] hub 8-1:0.0: bad descriptor, ignoring hub [ 485.621441][ T5932] hub 8-1:0.0: probe with driver hub failed with error -5 [ 485.687312][T13962] usb 2-1: Using ep0 maxpacket: 8 [ 485.706373][T13962] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.753187][T13962] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 485.775530][T13962] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 485.830910][T13962] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 485.869915][T13962] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 485.900131][T13962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.941047][T13962] hub 2-1:1.0: bad descriptor, ignoring hub [ 485.969594][T13962] hub 2-1:1.0: probe with driver hub failed with error -5 [ 485.993809][T13962] cdc_wdm 2-1:1.0: skipping garbage [ 486.019526][T13962] cdc_wdm 2-1:1.0: skipping garbage [ 486.060504][T13962] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 486.090674][T13962] cdc_wdm 2-1:1.0: Unknown control protocol [ 486.152648][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 486.312992][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 486.322488][ T9] usb 2-1: USB disconnect, device number 56 [ 486.592686][T15691] usb 8-1: reset high-speed USB device number 7 using dummy_hcd [ 486.760625][T15691] usb 8-1: device firmware changed [ 486.767225][ T5945] usb 8-1: USB disconnect, device number 7 [ 486.956789][ T5945] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 487.102703][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 487.143400][ T5945] usb 8-1: Using ep0 maxpacket: 32 [ 487.184893][ T5945] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 487.195247][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 487.233223][T15743] loop4: detected capacity change from 0 to 7 [ 487.276912][ T5945] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 487.289121][ T5945] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 487.302705][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 487.318587][T15743] Dev loop4: unable to read RDB block 7 [ 487.333770][ T5945] usb 8-1: Product: syz [ 487.342726][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.353018][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 487.362867][T15743] loop4: unable to read partition table [ 487.373753][ T5945] usb 8-1: config 0 descriptor?? [ 487.398966][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 487.404162][T15716] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 487.408787][T15743] loop4: partition table beyond EOD, [ 487.432896][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 487.450387][T15743] truncated [ 487.459589][ T5945] hub 8-1:0.0: bad descriptor, ignoring hub [ 487.476699][ T5945] hub 8-1:0.0: probe with driver hub failed with error -5 [ 487.485063][T15743] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 487.538806][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 487.582643][ T9] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 487.636393][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.677407][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 487.702645][ T9] hub 2-1:1.0: probe with driver hub failed with error -5 [ 487.743439][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 487.748749][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 487.784288][ T9] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 487.812321][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 487.863258][ T5932] usb 8-1: USB disconnect, device number 8 [ 487.985292][ T9] usb 2-1: USB disconnect, device number 57 [ 488.232941][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 488.387054][T15756] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.3620'. [ 488.402628][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 488.516117][T15758] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3621'. [ 488.750873][T15767] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.953097][T13962] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 489.132830][T13962] usb 2-1: Using ep0 maxpacket: 16 [ 489.154417][T13962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.171243][T13962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.183903][T13962] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 489.198059][T15777] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3630'. [ 489.202348][T13962] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 489.221964][T13962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.238647][T13962] usb 2-1: config 0 descriptor?? [ 489.273096][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 489.346432][ T6312] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 489.438388][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 489.526121][ T6312] usb 3-1: Using ep0 maxpacket: 8 [ 489.553273][ T6312] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 489.564808][ T6312] usb 3-1: config 179 has no interface number 0 [ 489.571188][ T6312] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 489.583055][ T6312] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 489.616716][ T6312] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 489.628370][ T6312] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 489.653321][ T6312] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 489.684045][T13962] HID 045e:07da: Invalid code 65791 type 1 [ 489.700164][ T6312] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 489.732872][T13962] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.004B/input/input74 [ 489.745410][ T6312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.771522][T15775] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 489.836374][T13962] microsoft 0003:045E:07DA.004B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 489.943928][T13962] usb 2-1: USB disconnect, device number 58 [ 490.104407][ T6312] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input75 [ 490.181534][T15779] fido_id[15779]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 490.312762][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 490.427894][T15775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.443278][T15775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.475812][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 490.668179][ T5932] usb 3-1: USB disconnect, device number 60 [ 490.668199][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 490.682573][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 490.691784][ C0] ================================================================== [ 490.699890][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23d/0x290 [ 490.707746][ C0] Read of size 4 at addr ffff888061b7885c by task syz-executor/15780 [ 490.715844][ C0] [ 490.718223][ C0] CPU: 0 UID: 0 PID: 15780 Comm: syz-executor Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(full) [ 490.718272][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 490.718302][ C0] Call Trace: [ 490.718312][ C0] [ 490.718322][ C0] dump_stack_lvl+0x189/0x250 [ 490.718354][ C0] ? __kasan_check_byte+0x12/0x40 [ 490.718388][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.718414][ C0] ? lock_release+0x4b/0x3e0 [ 490.718451][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 490.718481][ C0] print_report+0xca/0x240 [ 490.718502][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 490.718528][ C0] kasan_report+0x118/0x150 [ 490.718559][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 490.718595][ C0] do_raw_spin_lock+0x23d/0x290 [ 490.718622][ C0] ? __wake_up_common_lock+0x2f/0x1f0 [ 490.718651][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 490.718684][ C0] _raw_spin_lock_irqsave+0xb3/0xf0 [ 490.718720][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 490.718755][ C0] ? kcov_remote_stop+0x78/0x6d0 [ 490.718788][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 490.718820][ C0] __usb_hcd_giveback_urb+0x4d7/0x690 [ 490.718845][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 490.718869][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 490.718897][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 490.718920][ C0] dummy_timer+0x862/0x4550 [ 490.718941][ C0] ? trace_pelt_se_tp+0x39/0x130 [ 490.718968][ C0] ? __pfx___calc_delta+0x10/0x10 [ 490.719009][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 490.719047][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 490.719068][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 490.719086][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 490.719104][ C0] __hrtimer_run_queues+0x529/0xc60 [ 490.719134][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 490.719152][ C0] ? read_tsc+0x9/0x20 [ 490.719182][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 490.719206][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 490.719229][ C0] handle_softirqs+0x286/0x870 [ 490.719252][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 490.719276][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 490.719297][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 490.719327][ C0] __irq_exit_rcu+0xca/0x1f0 [ 490.719348][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 490.719374][ C0] irq_exit_rcu+0x9/0x30 [ 490.719393][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 490.719421][ C0] [ 490.719428][ C0] [ 490.719435][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 490.719463][ C0] RIP: 0010:sb_start_write+0xed/0x1c0 [ 490.719483][ C0] Code: 00 00 e8 e6 0e 83 ff 48 81 c3 c0 03 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 e9 61 e6 ff 48 8b 03 65 ff 00 01 00 00 00 e8 29 6a 53 ff 65 8b 1d f2 cf 62 10 31 ff 89 de e8 [ 490.719499][ C0] RSP: 0018:ffffc9001b5bfcc8 EFLAGS: 00000286 [ 490.719517][ C0] RAX: 0000607eda03a1d4 RBX: ffff8880578a43c0 RCX: ffff888066f20000 [ 490.719530][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 490.719541][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff823c8ee1 [ 490.719552][ C0] R10: 000000067ec2a1a4 R11: ffff888077cfe622 R12: 1ffff1100447ad8d [ 490.719566][ C0] R13: 0000000000000000 R14: ffff8880578a4358 R15: dffffc0000000000 [ 490.719580][ C0] ? mnt_want_write+0x41/0x90 [ 490.719618][ C0] ? sb_start_write+0xca/0x1c0 [ 490.719635][ C0] mnt_want_write+0x41/0x90 [ 490.719653][ C0] filename_create+0x148/0x3c0 [ 490.719677][ C0] ? __pfx_filename_create+0x10/0x10 [ 490.719701][ C0] do_symlinkat+0xbc/0x3f0 [ 490.719726][ C0] ? __pfx_do_symlinkat+0x10/0x10 [ 490.719751][ C0] ? getname_flags+0x1e5/0x540 [ 490.719779][ C0] __x64_sys_symlinkat+0x95/0xb0 [ 490.719803][ C0] do_syscall_64+0xfa/0x3b0 [ 490.719820][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.719836][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.719854][ C0] ? clear_bhb_loop+0x60/0xb0 [ 490.719873][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.719890][ C0] RIP: 0033:0x7f2e2498e0e7 [ 490.719909][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.719924][ C0] RSP: 002b:00007f2e24cdfda8 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 490.719941][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2e2498e0e7 [ 490.719953][ C0] RDX: 00007f2e24a13688 RSI: 00000000ffffff9c RDI: 00007f2e24cdfe40 [ 490.719966][ C0] RBP: 00007f2e24cdfdec R08: 0000000000000017 R09: 00007f2e24cdfaf7 [ 490.719978][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000002e3 [ 490.719988][ C0] R13: 00000000000927c0 R14: 0000000000077b17 R15: 00007f2e24cdfe40 [ 490.720007][ C0] [ 490.720013][ C0] [ 491.184299][ C0] Allocated by task 6312: [ 491.188633][ C0] kasan_save_track+0x3e/0x80 [ 491.193615][ C0] __kasan_kmalloc+0x93/0xb0 [ 491.198240][ C0] __kmalloc_cache_noprof+0x230/0x3d0 [ 491.203626][ C0] xpad_probe+0x428/0x1fc0 [ 491.208054][ C0] usb_probe_interface+0x668/0xc30 [ 491.213179][ C0] really_probe+0x26d/0x9e0 [ 491.217711][ C0] __driver_probe_device+0x18c/0x2f0 [ 491.223011][ C0] driver_probe_device+0x4f/0x430 [ 491.228062][ C0] __device_attach_driver+0x2ce/0x530 [ 491.233462][ C0] bus_for_each_drv+0x24e/0x2e0 [ 491.238336][ C0] __device_attach+0x2b8/0x400 [ 491.243130][ C0] bus_probe_device+0x185/0x260 [ 491.247987][ C0] device_add+0x7b6/0xb50 [ 491.252411][ C0] usb_set_configuration+0x1a87/0x20e0 [ 491.257887][ C0] usb_generic_driver_probe+0x8d/0x150 [ 491.263365][ C0] usb_probe_device+0x1c1/0x390 [ 491.268221][ C0] really_probe+0x26d/0x9e0 [ 491.272736][ C0] __driver_probe_device+0x18c/0x2f0 [ 491.278038][ C0] driver_probe_device+0x4f/0x430 [ 491.283083][ C0] __device_attach_driver+0x2ce/0x530 [ 491.288493][ C0] bus_for_each_drv+0x24e/0x2e0 [ 491.293358][ C0] __device_attach+0x2b8/0x400 [ 491.298139][ C0] bus_probe_device+0x185/0x260 [ 491.302997][ C0] device_add+0x7b6/0xb50 [ 491.307331][ C0] usb_new_device+0xa39/0x16f0 [ 491.312102][ C0] hub_event+0x2958/0x4a20 [ 491.316533][ C0] process_scheduled_works+0xade/0x17b0 [ 491.322094][ C0] worker_thread+0x8a0/0xda0 [ 491.326695][ C0] kthread+0x711/0x8a0 [ 491.330773][ C0] ret_from_fork+0x3f9/0x770 [ 491.335372][ C0] ret_from_fork_asm+0x1a/0x30 [ 491.340155][ C0] [ 491.342485][ C0] Freed by task 5932: [ 491.346558][ C0] kasan_save_track+0x3e/0x80 [ 491.351255][ C0] kasan_save_free_info+0x46/0x50 [ 491.352675][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 491.356283][ C0] __kasan_slab_free+0x62/0x70 [ 491.368078][ C0] kfree+0x18e/0x440 [ 491.371994][ C0] xpad_disconnect+0x350/0x480 [ 491.376771][ C0] usb_unbind_interface+0x26b/0x910 [ 491.381990][ C0] device_release_driver_internal+0x4d9/0x800 [ 491.388072][ C0] bus_remove_device+0x34d/0x410 [ 491.393029][ C0] device_del+0x511/0x8e0 [ 491.397412][ C0] usb_disable_device+0x3e9/0x8a0 [ 491.402482][ C0] usb_disconnect+0x330/0x950 [ 491.407169][ C0] hub_event+0x1cf5/0x4a20 [ 491.411627][ C0] process_scheduled_works+0xade/0x17b0 [ 491.417193][ C0] worker_thread+0x8a0/0xda0 [ 491.421803][ C0] kthread+0x711/0x8a0 [ 491.425885][ C0] ret_from_fork+0x3f9/0x770 [ 491.430492][ C0] ret_from_fork_asm+0x1a/0x30 [ 491.435270][ C0] [ 491.437629][ C0] Last potentially related work creation: [ 491.443344][ C0] kasan_save_stack+0x3e/0x60 [ 491.448038][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 491.453329][ C0] insert_work+0x3d/0x330 [ 491.457679][ C0] __queue_work+0xcd2/0xfb0 [ 491.462185][ C0] queue_work_on+0x181/0x270 [ 491.466791][ C0] xpad_irq_in+0xb57/0x2590 [ 491.471320][ C0] __usb_hcd_giveback_urb+0x417/0x690 [ 491.476701][ C0] dummy_timer+0x862/0x4550 [ 491.481208][ C0] __hrtimer_run_queues+0x529/0xc60 [ 491.486500][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 491.491618][ C0] handle_softirqs+0x286/0x870 [ 491.496404][ C0] __irq_exit_rcu+0xca/0x1f0 [ 491.501007][ C0] irq_exit_rcu+0x9/0x30 [ 491.505250][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 491.510926][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 491.516934][ C0] [ 491.519266][ C0] Second to last potentially related work creation: [ 491.525847][ C0] kasan_save_stack+0x3e/0x60 [ 491.530540][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 491.535755][ C0] insert_work+0x3d/0x330 [ 491.540113][ C0] __queue_work+0xcd2/0xfb0 [ 491.544710][ C0] queue_work_on+0x181/0x270 [ 491.549354][ C0] xpad_irq_in+0xb57/0x2590 [ 491.553962][ C0] __usb_hcd_giveback_urb+0x417/0x690 [ 491.559436][ C0] dummy_timer+0x862/0x4550 [ 491.563956][ C0] __hrtimer_run_queues+0x529/0xc60 [ 491.569161][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 491.574285][ C0] handle_softirqs+0x286/0x870 [ 491.579067][ C0] __irq_exit_rcu+0xca/0x1f0 [ 491.583689][ C0] irq_exit_rcu+0x9/0x30 [ 491.587940][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 491.593648][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 491.599635][ C0] [ 491.601962][ C0] The buggy address belongs to the object at ffff888061b78800 [ 491.601962][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 491.616211][ C0] The buggy address is located 92 bytes inside of [ 491.616211][ C0] freed 1024-byte region [ffff888061b78800, ffff888061b78c00) [ 491.630475][ C0] [ 491.632815][ C0] The buggy address belongs to the physical page: [ 491.639245][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61b78 [ 491.648021][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 491.656526][ C0] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 491.664541][ C0] page_type: f5(slab) [ 491.668551][ C0] raw: 00fff00000000040 ffff88801a441dc0 0000000000000000 dead000000000001 [ 491.677161][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 491.685858][ C0] head: 00fff00000000040 ffff88801a441dc0 0000000000000000 dead000000000001 [ 491.694550][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 491.703322][ C0] head: 00fff00000000003 ffffea000186de01 00000000ffffffff 00000000ffffffff [ 491.712017][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 491.720704][ C0] page dumped because: kasan: bad access detected [ 491.727153][ C0] page_owner tracks the page as allocated [ 491.732898][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5990, tgid 5990 (kworker/u8:8), ts 462208330272, free_ts 459689658897 [ 491.753748][ C0] post_alloc_hook+0x240/0x2a0 [ 491.758537][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 491.764099][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 491.770020][ C0] alloc_pages_mpol+0x232/0x4a0 [ 491.774899][ C0] allocate_slab+0x8a/0x370 [ 491.779429][ C0] ___slab_alloc+0xbeb/0x1410 [ 491.784130][ C0] __kmalloc_noprof+0x305/0x4f0 [ 491.789007][ C0] ieee802_11_parse_elems_full+0x152/0x2ab0 [ 491.794917][ C0] ieee80211_inform_bss+0x10c/0x10a0 [ 491.800231][ C0] cfg80211_inform_single_bss_data+0xd02/0x1ac0 [ 491.806493][ C0] cfg80211_inform_bss_data+0x1fb/0x3b30 [ 491.812146][ C0] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 491.818231][ C0] ieee80211_bss_info_update+0x746/0x9e0 [ 491.823877][ C0] ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 491.829968][ C0] ieee80211_iface_work+0x85f/0x12d0 [ 491.835357][ C0] cfg80211_wiphy_work+0x2bb/0x470 [ 491.840569][ C0] page last free pid 14920 tgid 14920 stack trace: [ 491.847072][ C0] __free_frozen_pages+0xbc4/0xd30 [ 491.852198][ C0] tlb_finish_mmu+0x112/0x1d0 [ 491.856902][ C0] exit_mmap+0x44c/0xb50 [ 491.861155][ C0] __mmput+0x118/0x430 [ 491.865229][ C0] exit_mm+0x1da/0x2c0 [ 491.869302][ C0] do_exit+0x648/0x2300 [ 491.873464][ C0] do_group_exit+0x21c/0x2d0 [ 491.878072][ C0] __x64_sys_exit_group+0x3f/0x40 [ 491.883108][ C0] x64_sys_call+0x21f7/0x2200 [ 491.887811][ C0] do_syscall_64+0xfa/0x3b0 [ 491.892334][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.898249][ C0] [ 491.900592][ C0] Memory state around the buggy address: [ 491.906329][ C0] ffff888061b78700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 491.914415][ C0] ffff888061b78780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 491.922575][ C0] >ffff888061b78800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 491.930649][ C0] ^ [ 491.937766][ C0] ffff888061b78880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 491.946027][ C0] ffff888061b78900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 491.954179][ C0] ================================================================== [ 491.962260][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 491.969581][ C0] CPU: 0 UID: 0 PID: 15780 Comm: syz-executor Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(full) [ 491.981498][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.991670][ C0] Call Trace: [ 491.994986][ C0] [ 491.997858][ C0] dump_stack_lvl+0x99/0x250 [ 492.002468][ C0] ? __asan_memcpy+0x40/0x70 [ 492.007080][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.012293][ C0] ? __pfx__printk+0x10/0x10 [ 492.016920][ C0] vpanic+0x27a/0x730 [ 492.021087][ C0] ? __pfx_print_hex_dump+0x10/0x10 [ 492.026311][ C0] ? __pfx_vpanic+0x10/0x10 [ 492.030861][ C0] panic+0xb9/0xc0 [ 492.034614][ C0] ? __pfx_panic+0x10/0x10 [ 492.039047][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 492.044967][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 492.050001][ C0] check_panic_on_warn+0x89/0xb0 [ 492.054959][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 492.060003][ C0] end_report+0x78/0x160 [ 492.064262][ C0] kasan_report+0x129/0x150 [ 492.068783][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 492.073836][ C0] do_raw_spin_lock+0x23d/0x290 [ 492.078704][ C0] ? __wake_up_common_lock+0x2f/0x1f0 [ 492.084091][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 492.089480][ C0] _raw_spin_lock_irqsave+0xb3/0xf0 [ 492.094701][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 492.100619][ C0] ? kcov_remote_stop+0x78/0x6d0 [ 492.105569][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 492.110787][ C0] __usb_hcd_giveback_urb+0x4d7/0x690 [ 492.116169][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 492.121984][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 492.127889][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 492.133274][ C0] dummy_timer+0x862/0x4550 [ 492.137812][ C0] ? trace_pelt_se_tp+0x39/0x130 [ 492.142761][ C0] ? __pfx___calc_delta+0x10/0x10 [ 492.147809][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 492.153255][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 492.158201][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 492.163146][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 492.168087][ C0] __hrtimer_run_queues+0x529/0xc60 [ 492.173303][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 492.179030][ C0] ? read_tsc+0x9/0x20 [ 492.183113][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 492.188935][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 492.194057][ C0] handle_softirqs+0x286/0x870 [ 492.198828][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 492.203601][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 492.208897][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 492.214138][ C0] __irq_exit_rcu+0xca/0x1f0 [ 492.218740][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 492.223953][ C0] irq_exit_rcu+0x9/0x30 [ 492.228203][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 492.233867][ C0] [ 492.236819][ C0] [ 492.239757][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 492.245748][ C0] RIP: 0010:sb_start_write+0xed/0x1c0 [ 492.251135][ C0] Code: 00 00 e8 e6 0e 83 ff 48 81 c3 c0 03 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 e9 61 e6 ff 48 8b 03 65 ff 00 01 00 00 00 e8 29 6a 53 ff 65 8b 1d f2 cf 62 10 31 ff 89 de e8 [ 492.270846][ C0] RSP: 0018:ffffc9001b5bfcc8 EFLAGS: 00000286 [ 492.276930][ C0] RAX: 0000607eda03a1d4 RBX: ffff8880578a43c0 RCX: ffff888066f20000 [ 492.284909][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 492.292973][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff823c8ee1 [ 492.300951][ C0] R10: 000000067ec2a1a4 R11: ffff888077cfe622 R12: 1ffff1100447ad8d [ 492.308933][ C0] R13: 0000000000000000 R14: ffff8880578a4358 R15: dffffc0000000000 [ 492.316919][ C0] ? mnt_want_write+0x41/0x90 [ 492.321621][ C0] ? sb_start_write+0xca/0x1c0 [ 492.326399][ C0] mnt_want_write+0x41/0x90 [ 492.330917][ C0] filename_create+0x148/0x3c0 [ 492.335694][ C0] ? __pfx_filename_create+0x10/0x10 [ 492.340994][ C0] do_symlinkat+0xbc/0x3f0 [ 492.345454][ C0] ? __pfx_do_symlinkat+0x10/0x10 [ 492.350538][ C0] ? getname_flags+0x1e5/0x540 [ 492.355323][ C0] __x64_sys_symlinkat+0x95/0xb0 [ 492.360279][ C0] do_syscall_64+0xfa/0x3b0 [ 492.364791][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.369995][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.376159][ C0] ? clear_bhb_loop+0x60/0xb0 [ 492.380854][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.386772][ C0] RIP: 0033:0x7f2e2498e0e7 [ 492.391195][ C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.410809][ C0] RSP: 002b:00007f2e24cdfda8 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 492.419239][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2e2498e0e7 [ 492.427223][ C0] RDX: 00007f2e24a13688 RSI: 00000000ffffff9c RDI: 00007f2e24cdfe40 [ 492.435213][ C0] RBP: 00007f2e24cdfdec R08: 0000000000000017 R09: 00007f2e24cdfaf7 [ 492.443234][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000002e3 [ 492.451209][ C0] R13: 00000000000927c0 R14: 0000000000077b17 R15: 00007f2e24cdfe40 [ 492.459216][ C0] [ 492.462611][ C0] Kernel Offset: disabled [ 492.466939][ C0] Rebooting in 86400 seconds..