last executing test programs: 6m57.830034098s ago: executing program 1 (id=41): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6m57.509627248s ago: executing program 1 (id=46): r0 = io_uring_setup(0x61dd, &(0x7f0000000380)={0x0, 0x17475, 0x10, 0x0, 0x17}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m57.024254147s ago: executing program 1 (id=50): r0 = inotify_init1(0x80000) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/107, 0x6b}], 0x1) r2 = dup(r0) inotify_rm_watch(r2, r1) 6m56.676477771s ago: executing program 1 (id=53): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x120a42, 0x114) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000bb80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002400)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e20000000000000000000000000000000000000000000000000000000045ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b8460000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffff00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x0, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fallocate(r2, 0x10, 0x10000002, 0x3) 6m56.395320966s ago: executing program 1 (id=54): openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) 6m55.707546886s ago: executing program 1 (id=61): openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x4}}, 0x20) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000100), 0x21) 6m40.415989102s ago: executing program 32 (id=61): openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x4}}, 0x20) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000100), 0x21) 4m47.271292787s ago: executing program 4 (id=947): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000380)={0x10000, 0x6, 0xc, 0x1000000, 0x7, 0xe, 0x5, 0x1, 0x800000d654, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0xffff, 0x200cc0, 0x1, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x809, 0x0, 0x5, 0x2, 0x9}) 4m46.916774802s ago: executing program 4 (id=950): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x0, 0x1}, {0x4, 0x4, 0x1800}], 0x2, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000001240)=[{}, {0x0, 0x0, 0x2000}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) 4m46.600403383s ago: executing program 4 (id=954): prlimit64(0x0, 0xe, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x20006, 0x1, "4200000000000000f8ffffffbfff00"}) r2 = syz_open_pts(r1, 0x40000) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 4m45.521415125s ago: executing program 4 (id=959): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 4m45.288841411s ago: executing program 4 (id=961): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 4m44.352657635s ago: executing program 4 (id=968): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x80000) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x120, 0xfa00, {0x0, {0x10002, 0x7, "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", 0x59, 0x3, 0x3, 0xd, 0x1, 0x8, 0x1}}}, 0xffffffd7) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x6, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 4m43.890798575s ago: executing program 33 (id=968): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x80000) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000180)={0x8, 0x120, 0xfa00, {0x0, {0x10002, 0x7, "b72ca862da8e6f48b6377f479c48d5f85891ce8f2d0da145adecdae5cbb27dfac2cf3ca64f1a686066b43fe9dc51939d730a2cec0c75f336715c5726f53a184bb039cefe04f7b54b32a55535ce607e3931746a34089c0e6235425f6790dd0f4386a75a106539881cb7064431295a43ec896246d8d9ed5da00edc89fc207ead90c10f6105f7230f092dcbccae217396a1d93863cac1a5bb490bd37a0767b2934f8fa3dfdf102de57a24532811ab57d9536b9e0e49ddced22511382e526d72864ba74d2fc7dc3414919b4e5665354f949821c850367fae30ac9ba084f28244f047b760faafd498bc024ce608d7ef516795e71b6e2e03f96b92e1d26651d0976d09", 0x59, 0x3, 0x3, 0xd, 0x1, 0x8, 0x1}}}, 0xffffffd7) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x6, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 3m34.228653158s ago: executing program 3 (id=1186): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x101, 0x1) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x4000000000000, 0x0) 3m31.865940582s ago: executing program 3 (id=1189): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8000}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) 3m26.079543832s ago: executing program 3 (id=1201): r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) socket$packet(0x11, 0x3, 0x300) 3m24.981700478s ago: executing program 3 (id=1202): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x26, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000200)=@get={0x1, &(0x7f0000000140)=""/118, 0x9}) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000700)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7", 0xf1) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f00000004c0)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="66000000000004002000000000e3894c7ae3000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7fffffff}, 0x0, 0x0) 3m19.77487099s ago: executing program 3 (id=1208): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x12) ppoll(&(0x7f0000000280)=[{r2}], 0x1, 0x0, 0x0, 0x0) 3m16.381573588s ago: executing program 3 (id=1216): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1900000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000020000008500000086000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000180)=[{0x1, 0x1, {0x0, 0xff, 0x3}, {0x2, 0xff, 0x4}, 0xff}, {0x3, 0x0, {0x0, 0x1, 0x6}, {0x0, 0xf0, 0x1}, 0x0, 0x1}], 0x40) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000300)={0x3, 0x0, 0x10}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0x6, 0x0, 0x9, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_macvtap\x00', &(0x7f0000000680)=@ethtool_per_queue_op={0x4b, 0x2f, [0x7fefffff, 0x9, 0x3, 0x1, 0x3, 0x5, 0x7, 0x0, 0xa4d, 0x0, 0x7, 0x4, 0xe, 0x4, 0x45, 0x2, 0xa0, 0x10001, 0xb, 0xc2, 0x0, 0x6, 0x7, 0xa4, 0xfdff, 0x2a, 0x4, 0x5, 0x5, 0x6, 0x0, 0x0, 0xfffffffd, 0x3, 0x4, 0xcb, 0x401, 0x8000, 0x7fff, 0x9, 0x80000001, 0xd, 0xe82, 0xffffffff, 0x28b5, 0xfffffffa, 0x2, 0xfffffffe, 0x6, 0x7, 0xff, 0x3, 0x8, 0x1, 0x100, 0x8, 0x4, 0xa0, 0x3335a578, 0x800, 0x6, 0x0, 0xff, 0x4, 0x400, 0x3, 0x5, 0x10, 0x90, 0x7, 0x38, 0xffff0000, 0xfffffffe, 0x6, 0x8, 0x2, 0x3, 0xfff, 0x2, 0x4, 0x2, 0x3, 0x9, 0x5, 0x2, 0xc55b, 0xc, 0x62, 0x8, 0xfffffff8, 0x3, 0x4, 0x4, 0x583, 0xef5, 0x0, 0x0, 0x1, 0x8, 0x0, 0xfffffffc, 0x1000, 0x3, 0xfff, 0x7, 0x3, 0x9, 0x9, 0x8, 0x1, 0x2, 0x7, 0xd, 0x7ff, 0x0, 0x0, 0x0, 0xb53, 0xff, 0xfffffffd, 0x5, 0x3, 0x101, 0x2, 0xe17, 0x5]}}) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m0.676297807s ago: executing program 34 (id=1216): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1900000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000020000008500000086000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000180)=[{0x1, 0x1, {0x0, 0xff, 0x3}, {0x2, 0xff, 0x4}, 0xff}, {0x3, 0x0, {0x0, 0x1, 0x6}, {0x0, 0xf0, 0x1}, 0x0, 0x1}], 0x40) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000300)={0x3, 0x0, 0x10}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0x6, 0x0, 0x9, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_macvtap\x00', &(0x7f0000000680)=@ethtool_per_queue_op={0x4b, 0x2f, [0x7fefffff, 0x9, 0x3, 0x1, 0x3, 0x5, 0x7, 0x0, 0xa4d, 0x0, 0x7, 0x4, 0xe, 0x4, 0x45, 0x2, 0xa0, 0x10001, 0xb, 0xc2, 0x0, 0x6, 0x7, 0xa4, 0xfdff, 0x2a, 0x4, 0x5, 0x5, 0x6, 0x0, 0x0, 0xfffffffd, 0x3, 0x4, 0xcb, 0x401, 0x8000, 0x7fff, 0x9, 0x80000001, 0xd, 0xe82, 0xffffffff, 0x28b5, 0xfffffffa, 0x2, 0xfffffffe, 0x6, 0x7, 0xff, 0x3, 0x8, 0x1, 0x100, 0x8, 0x4, 0xa0, 0x3335a578, 0x800, 0x6, 0x0, 0xff, 0x4, 0x400, 0x3, 0x5, 0x10, 0x90, 0x7, 0x38, 0xffff0000, 0xfffffffe, 0x6, 0x8, 0x2, 0x3, 0xfff, 0x2, 0x4, 0x2, 0x3, 0x9, 0x5, 0x2, 0xc55b, 0xc, 0x62, 0x8, 0xfffffff8, 0x3, 0x4, 0x4, 0x583, 0xef5, 0x0, 0x0, 0x1, 0x8, 0x0, 0xfffffffc, 0x1000, 0x3, 0xfff, 0x7, 0x3, 0x9, 0x9, 0x8, 0x1, 0x2, 0x7, 0xd, 0x7ff, 0x0, 0x0, 0x0, 0xb53, 0xff, 0xfffffffd, 0x5, 0x3, 0x101, 0x2, 0xe17, 0x5]}}) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.689548528s ago: executing program 2 (id=1613): socket$alg(0x26, 0x5, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = fanotify_init(0x40, 0x80000) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r4, 0x1, 0x40001019, r5, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) getdents64(r5, &(0x7f0000001500)=""/4080, 0xff0) 8.748403359s ago: executing program 2 (id=1617): syz_emit_ethernet(0xd2, &(0x7f0000000440)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast1, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x0, 0xd, "5e00020000020000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @rr={0x7, 0x1f, 0x63, [@remote, @broadcast, @private=0xa010100, @private=0xa010102, @loopback, @dev={0xac, 0x14, 0x14, 0x1a}, @local]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b3defc500"}, {0x5, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}]}}}}}}}, 0x0) 8.613999514s ago: executing program 2 (id=1619): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 8.42622284s ago: executing program 2 (id=1621): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) syz_create_resource$binfmt(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue1\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) 4.77088892s ago: executing program 2 (id=1634): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r0 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='smaps\x00') unshare(0x64000600) read$FUSE(r1, &(0x7f0000000680)={0x2020}, 0x2020) 3.614099947s ago: executing program 5 (id=1640): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) 3.032938754s ago: executing program 0 (id=1641): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0xc, &(0x7f0000000000)={0x5, 0xffffffff, 0x8}) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0xdcfe]}, 0x8, 0x80800) read$FUSE(r2, &(0x7f0000000900)={0x2020}, 0x2020) 2.971491517s ago: executing program 0 (id=1642): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280)) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2.03746806s ago: executing program 0 (id=1643): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010020"], &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa}, 0x28) 2.037169974s ago: executing program 5 (id=1644): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) 1.822019788s ago: executing program 0 (id=1645): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_FUTEX_WAIT={0x33, 0x0, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0xfffffffffffffff6, 0xffffffffffffffff, 0x24, {0x5, 0xffffffffc12b59bc}, 0x2}, 0x1) 1.624930586s ago: executing program 0 (id=1646): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000afa000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r0, 0xdf61c000) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_open_dev$video(0x0, 0x8, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x20008080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000840)={0x14, r6, 0x719, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0xff05, 0x2000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x8110}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x4}]}, 0x38}}, 0x0) 1.019740105s ago: executing program 5 (id=1647): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, 0xffffffffffffffff, 0x0}]) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x9d, 0x0, &(0x7f00000003c0)=[@request_death], 0x0, 0x0, 0x0}) 662.683707ms ago: executing program 5 (id=1648): syz_emit_ethernet(0xd6, &(0x7f0000000440)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast1, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x0, 0xd, "5e00020000020000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @rr={0x7, 0x1f, 0x63, [@remote, @broadcast, @private=0xa010100, @private=0xa010102, @loopback, @dev={0xac, 0x14, 0x14, 0x1a}, @local]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b3defc500"}, {0x5, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) 540.730834ms ago: executing program 0 (id=1649): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = syz_usb_connect$hid(0x5, 0x67, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc295, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0xc1, 0xaf}}}}}]}}]}}, 0x0) r3 = eventfd(0x119e8000) ioctl$XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000140)={0x0, r3, r1, 0x1, 0x6237, '\x00', {0xe4, 0x9, 0x8, 0x6, 0xdcf4, 0x4, 0x9, 0x101, {0x4, 0x6}, {0x2, 0xffffffff}, {0x6, 0xd78f}, 0x2, 0x9, 0xf57, 0x3, 0x1ff, 0xd, 0xb9e9, 0x1, 0x5, 0x0, '\x00', 0x6, 0x31e0472f, 0x3, 0x6}}) socket$packet(0x11, 0x2, 0x300) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000740)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="002428000000280e655acc332a33"], 0x0, 0x0, 0x0, 0x0}, 0x0) 360.703885ms ago: executing program 5 (id=1650): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)={0x80, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x5b, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xb}, @broadcast, @device_a, @from_mac=@device_b, {0x5, 0x6}}, 0xaef4, @random=0x8, 0x8808, @val={0x0, 0x35}, @val, @val={0x3, 0x1, 0x9d}, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x6, 0x0, {0x4, 0x1a39, 0x0, 0x3f3, 0x0, 0x0, 0x1}, 0x0, 0x101, 0xfe}}, @val={0x72, 0x6}, @void, [{0xdd, 0x6, "1bf3bd0765e0"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 141.561759ms ago: executing program 5 (id=1651): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f00000008c0)='dummy_udc.0', 0xb) 0s ago: executing program 2 (id=1652): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): 10] usb 3-1: Manufacturer: syz [ 132.059095][ T10] usb 3-1: SerialNumber: syz [ 132.068936][ T10] usb 3-1: config 0 descriptor?? [ 132.499173][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 132.499201][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 132.557759][ T1196] team0 (unregistering): Port device team_slave_1 removed [ 132.613956][ T1196] team0 (unregistering): Port device team_slave_0 removed [ 132.780494][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.780619][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.320395][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 133.320625][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 133.763376][ T821] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 133.933333][ T821] usb 4-1: Using ep0 maxpacket: 32 [ 133.954893][ T821] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 133.954918][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.007050][ T821] usb 4-1: config 0 descriptor?? [ 134.022803][ T821] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 134.732701][ T199] usb 3-1: USB disconnect, device number 4 [ 135.445825][ T6455] netlink: 72 bytes leftover after parsing attributes in process `syz.2.227'. [ 135.853943][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 135.928340][ T6151] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.013536][ T6468] netlink: 'syz.4.230': attribute type 4 has an invalid length. [ 136.220176][ T6151] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 136.406924][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 136.440516][ T6151] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.497726][ T6151] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 136.513676][ T6151] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 136.545389][ T6151] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 136.546620][ T6151] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 136.676290][ T821] gspca_vc032x: reg_w err -71 [ 136.676307][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.676316][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.676323][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.676330][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.676337][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.676345][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.676352][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.676360][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.676367][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.676374][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.676382][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.676389][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.676396][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.676403][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.676410][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.676417][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.676424][ T821] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.676432][ T821] gspca_vc032x: Unknown sensor... [ 136.676509][ T821] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 136.702161][ T6151] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 136.862640][ T821] usb 4-1: USB disconnect, device number 5 [ 137.290197][ T6151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.400322][ T6151] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.450013][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.450266][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.454182][ T6508] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0001 with DS=0x42 [ 137.544728][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.544924][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.892583][ T6519] fuse: Bad value for 'fd' [ 138.833996][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.873132][ T6547] syz.2.250 (6547) used greatest stack depth: 19240 bytes left [ 138.964643][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4 [ 139.022814][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 139.038860][ T31] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 139.038888][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.114547][ T31] usb 5-1: config 0 descriptor?? [ 139.195439][ T31] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 139.382762][ T6151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.871683][ T6568] fuse: Bad value for 'fd' [ 140.603333][ T5619] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 140.632570][ T6151] veth0_vlan: entered promiscuous mode [ 140.687610][ T6151] veth1_vlan: entered promiscuous mode [ 140.761485][ T5619] usb 4-1: unable to get BOS descriptor or descriptor too short [ 140.762256][ T5619] usb 4-1: not running at top speed; connect to a high speed hub [ 140.791084][ T5619] usb 4-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 140.791111][ T5619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.791128][ T5619] usb 4-1: Product: syz [ 140.791140][ T5619] usb 4-1: Manufacturer: syz [ 140.791152][ T5619] usb 4-1: SerialNumber: syz [ 140.858444][ T5619] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 140.956014][ T5619] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 140.964586][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.041518][ T5619] snd-usb-hiface 4-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 141.203304][ T6151] veth0_macvtap: entered promiscuous mode [ 141.264970][ T6585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.315873][ T6585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.318266][ T6151] veth1_macvtap: entered promiscuous mode [ 141.321906][ T5619] usb 4-1: can't set first interface for hiFace device. [ 141.321940][ T5619] snd-usb-hiface 4-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 141.368195][ T5619] usb 4-1: can't set first interface for hiFace device. [ 141.368229][ T5619] snd-usb-hiface 4-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 141.396485][ T5619] usb 4-1: USB disconnect, device number 6 [ 141.459980][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.582471][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.612345][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.647921][ T2992] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.648377][ T2992] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.648754][ T2992] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.650616][ T2992] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.793932][ T31] gspca_vc032x: reg_w err -71 [ 141.793948][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.793956][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.793964][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.793970][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.793977][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.793983][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.793990][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.793995][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.794002][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.794009][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.794015][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.794022][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.794029][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.794034][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.794039][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.794044][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.794049][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 141.794055][ T31] gspca_vc032x: Unknown sensor... [ 141.794129][ T31] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 141.851473][ T31] usb 5-1: USB disconnect, device number 4 [ 142.232601][ T6604] fuse: Bad value for 'fd' [ 142.546228][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.546261][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.019293][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.019311][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.227953][ T6741] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.260368][ T6741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.537851][ T6742] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 147.537872][ T6742] syzkaller1: Linktype set failed because interface is up [ 147.564066][ T199] syzkaller1: tun_net_xmit 90 [ 148.433621][ T6771] gretap1: entered allmulticast mode [ 148.555752][ T6771] team0: Port device gretap1 added [ 148.591911][ T6774] bridge0: port 3(team0) entered blocking state [ 148.592046][ T6774] bridge0: port 3(team0) entered disabled state [ 148.592607][ T6774] team0: entered allmulticast mode [ 148.592625][ T6774] team_slave_0: entered allmulticast mode [ 148.592731][ T6774] team_slave_1: entered allmulticast mode [ 148.819676][ T6774] team0: entered promiscuous mode [ 148.819698][ T6774] team_slave_0: entered promiscuous mode [ 148.819890][ T6774] team_slave_1: entered promiscuous mode [ 148.820063][ T6774] gretap1: entered promiscuous mode [ 148.961529][ T6774] bridge0: port 3(team0) entered blocking state [ 148.961679][ T6774] bridge0: port 3(team0) entered forwarding state [ 149.368820][ T6791] fuse: Bad value for 'fd' [ 151.069827][ T6839] fuse: Bad value for 'fd' [ 151.959830][ T36] audit: type=1326 audit(1784945363.977:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6860 comm="syz.0.352" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9ddacde99 code=0x0 [ 152.973848][ T6892] fuse: Bad value for 'fd' [ 153.143310][ T199] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 153.293340][ T199] usb 1-1: Using ep0 maxpacket: 32 [ 153.302481][ T199] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 153.302506][ T199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.314349][ T199] usb 1-1: config 0 descriptor?? [ 153.540462][ T199] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 153.676050][ T199] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 153.677145][ T199] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 153.677193][ T199] usb 1-1: media controller created [ 153.906617][ T199] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.813348][ T199] stb0899_attach: Driver disabled by Kconfig [ 154.813364][ T199] az6027: no front-end attached [ 154.813364][ T199] [ 154.814009][ T199] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 154.848567][ T199] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 154.851821][ T199] dvb-usb: schedule remote query interval to 400 msecs. [ 154.851839][ T199] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 155.034387][ T5615] usb 1-1: USB disconnect, device number 7 [ 155.490210][ T5615] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 155.957217][ T6979] process 'syz.3.386' launched './file2' with NULL argv: empty string added [ 156.434663][ T199] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 156.585439][ T199] usb 5-1: unable to get BOS descriptor or descriptor too short [ 156.586058][ T199] usb 5-1: not running at top speed; connect to a high speed hub [ 156.589977][ T199] usb 5-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 156.590000][ T199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.590016][ T199] usb 5-1: Product: syz [ 156.590028][ T199] usb 5-1: Manufacturer: syz [ 156.590040][ T199] usb 5-1: SerialNumber: syz [ 156.704785][ T199] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 156.774178][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 156.886850][ T199] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 156.892057][ T199] snd-usb-hiface 5-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 156.933277][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 156.936785][ T31] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 156.936809][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.995989][ T31] usb 4-1: config 0 descriptor?? [ 157.023374][ T50] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 157.153599][ T6990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.158318][ T6990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.170827][ T199] usb 5-1: can't set first interface for hiFace device. [ 157.170863][ T199] snd-usb-hiface 5-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 157.193508][ T199] usb 5-1: can't set first interface for hiFace device. [ 157.193543][ T199] snd-usb-hiface 5-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 157.205830][ T199] usb 5-1: USB disconnect, device number 5 [ 157.223962][ T31] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 157.226623][ T50] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.226664][ T50] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 157.226684][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.230989][ T7008] syz.0.396 (7008) used greatest stack depth: 18912 bytes left [ 157.385224][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 157.403862][ T31] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 157.403913][ T31] usb 4-1: media controller created [ 157.427226][ T50] usb 3-1: config 0 descriptor?? [ 157.446892][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.678775][ T50] usbhid 3-1:0.0: can't add hid device: -71 [ 157.678922][ T50] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 157.692870][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.759781][ T50] usb 3-1: USB disconnect, device number 5 [ 158.243327][ T50] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 158.353450][ T199] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 158.395037][ T50] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.395073][ T50] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 158.395085][ T50] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.431422][ T31] stb0899_attach: Driver disabled by Kconfig [ 158.431437][ T31] az6027: no front-end attached [ 158.431437][ T31] [ 158.450241][ T50] usb 3-1: config 0 descriptor?? [ 158.450553][ T31] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 158.476343][ T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 158.497924][ T31] dvb-usb: schedule remote query interval to 400 msecs. [ 158.497944][ T31] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 158.504628][ T199] usb 5-1: Using ep0 maxpacket: 32 [ 158.515843][ T199] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 158.515866][ T199] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.522660][ T199] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 158.522684][ T199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.522701][ T199] usb 5-1: Product: syz [ 158.522712][ T199] usb 5-1: Manufacturer: syz [ 158.522724][ T199] usb 5-1: SerialNumber: syz [ 158.596870][ T199] usb 5-1: config 0 descriptor?? [ 158.614351][ T199] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 158.660241][ T5615] usb 4-1: USB disconnect, device number 7 [ 158.955905][ T5615] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 159.313622][ T50] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 159.368002][ T50] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 159.786558][ T5615] usb 3-1: USB disconnect, device number 6 [ 159.786664][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 161.113354][ T50] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 161.273428][ T50] usb 6-1: Using ep0 maxpacket: 32 [ 161.276865][ T50] usb 6-1: config index 0 descriptor too short (expected 3659, got 75) [ 161.276887][ T50] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.279463][ T50] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 161.279487][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.279504][ T50] usb 6-1: Product: syz [ 161.279515][ T50] usb 6-1: Manufacturer: syz [ 161.279527][ T50] usb 6-1: SerialNumber: syz [ 161.345020][ T50] usb 6-1: config 0 descriptor?? [ 161.364041][ T50] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 161.783379][ T5615] usb 5-1: USB disconnect, device number 6 [ 162.976297][ T50] gspca_sunplus: reg_r err -32 [ 162.976372][ T50] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 163.383356][ T5615] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 163.533425][ T5615] usb 3-1: Using ep0 maxpacket: 32 [ 163.535629][ T5615] usb 3-1: config index 0 descriptor too short (expected 3659, got 75) [ 163.535643][ T5615] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.538027][ T5615] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 163.538049][ T5615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.538065][ T5615] usb 3-1: Product: syz [ 163.538076][ T5615] usb 3-1: Manufacturer: syz [ 163.538087][ T5615] usb 3-1: SerialNumber: syz [ 163.549082][ T5615] usb 3-1: config 0 descriptor?? [ 163.572362][ T5615] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 164.033007][ T10] usb 6-1: USB disconnect, device number 2 [ 165.525165][ T5615] gspca_sunplus: reg_w_1 err -110 [ 165.525254][ T5615] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 165.604331][ T7149] netlink: 72 bytes leftover after parsing attributes in process `syz.5.447'. [ 166.283363][ T5615] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 166.503400][ T5615] usb 5-1: Using ep0 maxpacket: 32 [ 166.506259][ T5615] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 166.506281][ T5615] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.509040][ T5615] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 166.509063][ T5615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.509079][ T5615] usb 5-1: Product: syz [ 166.509091][ T5615] usb 5-1: Manufacturer: syz [ 166.509103][ T5615] usb 5-1: SerialNumber: syz [ 166.526107][ T5615] usb 5-1: config 0 descriptor?? [ 166.570581][ T5615] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 166.863274][ T50] usb 3-1: USB disconnect, device number 7 [ 167.197147][ T31] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 167.321604][ T7179] netlink: 72 bytes leftover after parsing attributes in process `syz.2.459'. [ 167.373533][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 167.375875][ T31] usb 6-1: config index 0 descriptor too short (expected 3659, got 75) [ 167.375897][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.411838][ T31] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 167.411863][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.411879][ T31] usb 6-1: Product: syz [ 167.411890][ T31] usb 6-1: Manufacturer: syz [ 167.411901][ T31] usb 6-1: SerialNumber: syz [ 167.436657][ T31] usb 6-1: config 0 descriptor?? [ 167.482754][ T31] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 168.278399][ T5615] gspca_sunplus: reg_r err -32 [ 168.278470][ T5615] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 169.335426][ T5615] usb 5-1: USB disconnect, device number 7 [ 169.810142][ T5615] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 169.953289][ T5615] usb 5-1: Using ep0 maxpacket: 32 [ 169.955036][ T5615] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 169.955058][ T5615] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.957152][ T5615] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 169.957176][ T5615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.957192][ T5615] usb 5-1: Product: syz [ 169.957204][ T5615] usb 5-1: Manufacturer: syz [ 169.957222][ T5615] usb 5-1: SerialNumber: syz [ 170.022602][ T5615] usb 5-1: config 0 descriptor?? [ 170.031880][ T5615] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 170.569064][ T821] usb 6-1: USB disconnect, device number 3 [ 171.873308][ T821] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 172.033346][ T821] usb 6-1: Using ep0 maxpacket: 32 [ 172.036266][ T821] usb 6-1: config index 0 descriptor too short (expected 3659, got 75) [ 172.036289][ T821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.038606][ T821] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 172.038638][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.038655][ T821] usb 6-1: Product: syz [ 172.038667][ T821] usb 6-1: Manufacturer: syz [ 172.038679][ T821] usb 6-1: SerialNumber: syz [ 172.046947][ T821] usb 6-1: config 0 descriptor?? [ 172.075175][ T821] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 173.069386][ T5615] usb 5-1: USB disconnect, device number 8 [ 173.705752][ T821] gspca_sunplus: reg_r err -32 [ 173.705841][ T821] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 174.730918][ T5613] usb 6-1: USB disconnect, device number 4 [ 176.343355][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 176.493722][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 176.495488][ T10] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 176.495511][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.497594][ T10] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 176.497617][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.497634][ T10] usb 5-1: Product: syz [ 176.497645][ T10] usb 5-1: Manufacturer: syz [ 176.497656][ T10] usb 5-1: SerialNumber: syz [ 176.501218][ T10] usb 5-1: config 0 descriptor?? [ 176.514107][ T10] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 176.853365][ T5613] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 177.017677][ T5613] usb 6-1: unable to get BOS descriptor or descriptor too short [ 177.018603][ T5613] usb 6-1: not running at top speed; connect to a high speed hub [ 177.022106][ T5613] usb 6-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 177.022120][ T5613] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.022129][ T5613] usb 6-1: Product: syz [ 177.022136][ T5613] usb 6-1: Manufacturer: syz [ 177.022142][ T5613] usb 6-1: SerialNumber: syz [ 177.031161][ T7198] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 177.188845][ T5613] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 177.672809][ T7301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.693817][ T7301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.697384][ T5613] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 177.829713][ T5613] snd-usb-hiface 6-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 177.936271][ T5613] usb 6-1: can't set first interface for hiFace device. [ 177.936365][ T5613] snd-usb-hiface 6-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 177.971529][ T5613] usb 6-1: can't set first interface for hiFace device. [ 177.971566][ T5613] snd-usb-hiface 6-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 178.079533][ T5613] usb 6-1: USB disconnect, device number 5 [ 178.320669][ T10] gspca_sunplus: reg_r err -32 [ 178.320761][ T10] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 178.432963][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.267569][ T7349] syzkaller0: entered promiscuous mode [ 179.267585][ T7349] syzkaller0: entered allmulticast mode [ 179.412614][ T5613] usb 5-1: USB disconnect, device number 9 [ 180.233486][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 180.383304][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 180.385305][ T10] usb 6-1: config index 0 descriptor too short (expected 3659, got 75) [ 180.385328][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.387552][ T10] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 180.387576][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.387593][ T10] usb 6-1: Product: syz [ 180.387605][ T10] usb 6-1: Manufacturer: syz [ 180.387616][ T10] usb 6-1: SerialNumber: syz [ 180.391395][ T10] usb 6-1: config 0 descriptor?? [ 180.405379][ T10] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 181.275762][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 181.473258][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 181.495434][ T31] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 181.495460][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.534974][ T31] usb 1-1: config 0 descriptor?? [ 181.559673][ T31] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 182.233922][ T10] gspca_sunplus: reg_r err -32 [ 182.234010][ T10] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 183.301179][ T50] usb 6-1: USB disconnect, device number 6 [ 183.865497][ T10] kernel read not supported for file /292/personality (pid: 10 comm: kworker/0:1) [ 184.454671][ T821] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 184.669085][ T821] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 184.669170][ T821] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 184.696838][ T821] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 184.696863][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.696878][ T821] usb 4-1: Product: syz [ 184.696889][ T821] usb 4-1: Manufacturer: syz [ 184.696901][ T821] usb 4-1: SerialNumber: syz [ 184.764234][ T821] usb 4-1: config 0 descriptor?? [ 184.792197][ T821] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 184.982042][ T7479] capability: warning: `syz.4.580' uses deprecated v2 capabilities in a way that may be insecure [ 185.007436][ T31] gspca_vc032x: reg_r err -71 [ 185.007450][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.007458][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.007465][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.007471][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.007627][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.007687][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.007696][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.007703][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.007710][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.007717][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.007724][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.007730][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.007737][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.007743][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.007751][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.007758][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.007765][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.007772][ T31] gspca_vc032x: Unknown sensor... [ 185.008064][ T31] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 185.008571][ T36] audit: type=1326 audit(1784945397.017:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7478 comm="syz.4.580" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95826de99 code=0x7ffc0000 [ 185.008822][ T36] audit: type=1326 audit(1784945397.027:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7478 comm="syz.4.580" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95826de99 code=0x7ffc0000 [ 185.008860][ T36] audit: type=1326 audit(1784945397.027:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7478 comm="syz.4.580" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa95826de99 code=0x7ffc0000 [ 185.008893][ T36] audit: type=1326 audit(1784945397.027:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7478 comm="-" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95826de99 code=0x7ffc0000 [ 185.009374][ T36] audit: type=1326 audit(1784945397.027:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7478 comm="-" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95826de99 code=0x7ffc0000 [ 185.009853][ T36] audit: type=1326 audit(1784945397.027:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7478 comm="-" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fa95826de99 code=0x7ffc0000 [ 185.041263][ T36] audit: type=1326 audit(1784945397.057:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7478 comm="-" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95826de99 code=0x7ffc0000 [ 185.042456][ T36] audit: type=1326 audit(1784945397.057:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7478 comm="-" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95826de99 code=0x7ffc0000 [ 185.042498][ T36] audit: type=1326 audit(1784945397.057:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7478 comm="-" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa95826de99 code=0x7ffc0000 [ 185.042533][ T36] audit: type=1326 audit(1784945397.057:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7478 comm="-" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95826de99 code=0x7ffc0000 [ 185.327006][ T31] usb 1-1: USB disconnect, device number 8 [ 185.582370][ T7489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.584'. [ 185.635487][ T7490] program syz.4.585 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.186360][ T821] gspca_sunplus: reg_r err -32 [ 186.186449][ T821] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 186.333360][ T5615] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 186.399666][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.598'. [ 186.508396][ T7518] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7519] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7518] [ 186.620076][ T5615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.620120][ T5615] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 186.620139][ T5615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.641021][ T5615] usb 3-1: config 0 descriptor?? [ 186.803283][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 186.882516][ T5615] usbhid 3-1:0.0: can't add hid device: -71 [ 186.882628][ T5615] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 186.905399][ T5615] usb 3-1: USB disconnect, device number 8 [ 186.985352][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 186.999240][ T10] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 186.999265][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.037109][ T10] usb 6-1: config 0 descriptor?? [ 187.052189][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 187.393684][ T5615] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 187.617690][ T5615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.617788][ T5615] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 187.617809][ T5615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.720885][ T5615] usb 3-1: config 0 descriptor?? [ 188.219747][ T821] usb 4-1: USB disconnect, device number 8 [ 188.341866][ T7532] 9p: Bad value for 'rfdno' [ 188.606711][ T7542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.609'. [ 188.834494][ T5615] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 188.880093][ T5615] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 189.113365][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 189.285623][ T31] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 189.285648][ T31] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 189.315600][ T31] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 189.315624][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.315641][ T31] usb 1-1: Product: syz [ 189.315653][ T31] usb 1-1: Manufacturer: syz [ 189.315664][ T31] usb 1-1: SerialNumber: syz [ 189.330348][ T5615] usb 3-1: USB disconnect, device number 9 [ 189.330422][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 189.415239][ T31] usb 1-1: config 0 descriptor?? [ 189.434484][ T31] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 189.612070][ T7554] smpboot: CPU 1 is now offline [ 189.681072][ T7560] 9p: Bad value for 'rfdno' [ 190.534769][ T10] gspca_vc032x: reg_r err -71 [ 190.534782][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.534787][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.534791][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.534795][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.534799][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.534803][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.534807][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.534811][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.534815][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.534818][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.534822][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.534825][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.534829][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.535013][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.535018][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.535022][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.535026][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.535030][ T10] gspca_vc032x: Unknown sensor... [ 190.535079][ T10] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 190.656771][ T10] usb 6-1: USB disconnect, device number 7 [ 190.860526][ T31] gspca_sunplus: reg_r err -32 [ 190.860582][ T31] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 191.064962][ T7579] program syz.4.625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.184801][ T7580] vlan0: entered promiscuous mode [ 191.965401][ T10] usb 1-1: USB disconnect, device number 9 [ 192.394511][ C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 192.847319][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.847360][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.293368][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 193.454722][ T10] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 193.454738][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 193.456489][ T10] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 193.456503][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.456512][ T10] usb 5-1: Product: syz [ 193.456519][ T10] usb 5-1: Manufacturer: syz [ 193.456525][ T10] usb 5-1: SerialNumber: syz [ 193.516988][ T10] usb 5-1: config 0 descriptor?? [ 193.542522][ T10] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 194.866191][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 194.866233][ T36] audit: type=1326 audit(1784945406.877:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7675 comm="syz.0.662" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ddacde99 code=0x7ffc0000 [ 194.866258][ T36] audit: type=1326 audit(1784945406.877:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7675 comm="syz.0.662" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ddacde99 code=0x7ffc0000 [ 194.866278][ T36] audit: type=1326 audit(1784945406.877:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7675 comm="syz.0.662" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fb9ddacde99 code=0x7ffc0000 [ 194.872088][ T36] audit: type=1326 audit(1784945406.887:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7675 comm="syz.0.662" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ddacde99 code=0x7ffc0000 [ 194.872377][ T36] audit: type=1326 audit(1784945406.887:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7675 comm="syz.0.662" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ddacde99 code=0x7ffc0000 [ 194.960051][ T10] gspca_sunplus: reg_r err -32 [ 194.960105][ T10] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 195.220231][ T7681] program syz.0.664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.104114][ T7522] usb 5-1: USB disconnect, device number 10 [ 196.269632][ T7713] program syz.3.677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.967809][ T7736] veth1_to_bond: entered allmulticast mode [ 196.970418][ T7735] veth1_to_bond: left allmulticast mode [ 197.096418][ T199] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 197.243308][ T199] usb 6-1: Using ep0 maxpacket: 32 [ 197.249295][ T199] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 197.249310][ T199] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.282726][ T199] usb 6-1: config 0 descriptor?? [ 197.433880][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 197.549778][ T199] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 197.590645][ T10] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 197.590661][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 197.618996][ T10] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 197.619012][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.619021][ T10] usb 1-1: Product: syz [ 197.619027][ T10] usb 1-1: Manufacturer: syz [ 197.619034][ T10] usb 1-1: SerialNumber: syz [ 197.675713][ T199] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 197.676988][ T10] usb 1-1: config 0 descriptor?? [ 197.700732][ T199] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 197.700765][ T199] usb 6-1: media controller created [ 197.738057][ T10] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 197.841691][ T199] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.783554][ T199] stb0899_attach: Driver disabled by Kconfig [ 198.783565][ T199] az6027: no front-end attached [ 198.783565][ T199] [ 198.785152][ T199] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 198.886580][ T199] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11 [ 198.946994][ T199] dvb-usb: schedule remote query interval to 400 msecs. [ 198.947010][ T199] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 199.148650][ T199] usb 6-1: USB disconnect, device number 8 [ 199.175523][ T10] gspca_sunplus: reg_r err -32 [ 199.175577][ T10] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 199.476000][ T199] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 200.269002][ T5613] usb 1-1: USB disconnect, device number 10 [ 201.483359][ T5613] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 201.635550][ T5613] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 201.635568][ T5613] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 201.637752][ T5613] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 201.637767][ T5613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.637776][ T5613] usb 5-1: Product: syz [ 201.637783][ T5613] usb 5-1: Manufacturer: syz [ 201.637790][ T5613] usb 5-1: SerialNumber: syz [ 201.702118][ T5613] usb 5-1: config 0 descriptor?? [ 201.720398][ T7825] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 201.755736][ T5613] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 201.963776][ T36] audit: type=1326 audit(1784945413.977:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7827 comm="syz.3.719" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332612de99 code=0x7ffc0000 [ 201.964963][ T36] audit: type=1326 audit(1784945413.987:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7827 comm="syz.3.719" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332612de99 code=0x7ffc0000 [ 201.965697][ T36] audit: type=1326 audit(1784945413.987:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7827 comm="syz.3.719" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f332612de99 code=0x7ffc0000 [ 201.982469][ T36] audit: type=1326 audit(1784945413.997:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7827 comm="syz.3.719" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332612de99 code=0x7ffc0000 [ 202.052568][ T36] audit: type=1326 audit(1784945414.027:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7827 comm="syz.3.719" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332612de99 code=0x7ffc0000 [ 202.687236][ T5612] Bluetooth: hci1: command 0x0406 tx timeout [ 203.359484][ T5613] gspca_sunplus: reg_r err -32 [ 203.359539][ T5613] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 203.405737][ T5613] usb 5-1: USB disconnect, device number 11 [ 203.641970][ T36] audit: type=1326 audit(1784945415.657:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7855 comm="syz.3.731" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332612de99 code=0x7ffc0000 [ 203.672877][ T36] audit: type=1326 audit(1784945415.687:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7855 comm="syz.3.731" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f332612de99 code=0x7ffc0000 [ 203.706920][ T36] audit: type=1326 audit(1784945415.687:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7855 comm="syz.3.731" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332612de99 code=0x7ffc0000 [ 204.095844][ T7868] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 204.999639][ T36] audit: type=1326 audit(1784945417.017:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7887 comm="syz.0.743" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ddacde99 code=0x7ffc0000 [ 205.005338][ T36] audit: type=1326 audit(1784945417.027:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7887 comm="syz.0.743" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ddacde99 code=0x7ffc0000 [ 205.473296][ T7522] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 205.624021][ T7522] usb 5-1: Using ep0 maxpacket: 32 [ 205.625549][ T7522] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 205.625563][ T7522] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.689445][ T7522] usb 5-1: config 0 descriptor?? [ 205.911707][ T7522] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 205.936200][ T7522] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 205.942343][ T7522] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 205.942374][ T7522] usb 5-1: media controller created [ 206.072013][ T7522] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.528828][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 206.528938][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 206.529008][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 207.083317][ T7522] stb0899_attach: Driver disabled by Kconfig [ 207.083328][ T7522] az6027: no front-end attached [ 207.083328][ T7522] [ 207.116356][ T7522] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 207.159794][ T7522] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 207.197711][ T7522] dvb-usb: schedule remote query interval to 400 msecs. [ 207.197725][ T7522] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 207.301504][ T7522] usb 5-1: USB disconnect, device number 12 [ 207.779639][ T7522] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 208.231663][ T7941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.333886][ T7941] team0: Port device bond1 added [ 209.474814][ T199] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 209.624673][ T199] usb 4-1: Using ep0 maxpacket: 32 [ 209.629921][ T199] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 209.629937][ T199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.664283][ T199] usb 4-1: config 0 descriptor?? [ 209.889734][ T199] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 209.977725][ T199] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 209.981475][ T199] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 209.981508][ T199] usb 4-1: media controller created [ 210.065258][ T199] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.013265][ T199] stb0899_attach: Driver disabled by Kconfig [ 211.013276][ T199] az6027: no front-end attached [ 211.013276][ T199] [ 211.013783][ T199] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 211.098975][ T199] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 211.121726][ T199] dvb-usb: schedule remote query interval to 400 msecs. [ 211.121740][ T199] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 211.257995][ T5615] usb 4-1: USB disconnect, device number 9 [ 211.554012][ T5615] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 212.443386][ T5615] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 212.593611][ T5615] usb 6-1: Using ep0 maxpacket: 32 [ 212.595498][ T5615] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 212.595512][ T5615] usb 6-1: config 0 has no interface number 0 [ 212.598219][ T5615] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 212.598234][ T5615] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.598244][ T5615] usb 6-1: Product: syz [ 212.598251][ T5615] usb 6-1: Manufacturer: syz [ 212.598258][ T5615] usb 6-1: SerialNumber: syz [ 212.669500][ T5615] usb 6-1: config 0 descriptor?? [ 213.106886][ T5615] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 213.106904][ T5615] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 213.663304][ T199] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 213.900457][ T199] usb 3-1: unable to get BOS descriptor or descriptor too short [ 213.913783][ T199] usb 3-1: not running at top speed; connect to a high speed hub [ 213.950413][ T199] usb 3-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 213.950430][ T199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.950440][ T199] usb 3-1: Product: syz [ 213.950447][ T199] usb 3-1: Manufacturer: syz [ 213.950486][ T199] usb 3-1: SerialNumber: syz [ 214.109412][ T199] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 214.682109][ T8058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.711420][ T8058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.715427][ T5615] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 214.715596][ T5615] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 215.042957][ T199] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 215.061819][ T199] snd-usb-hiface 3-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 215.261045][ T199] usb 3-1: can't set first interface for hiFace device. [ 215.261072][ T199] snd-usb-hiface 3-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 215.293912][ T199] usb 3-1: can't set first interface for hiFace device. [ 215.293938][ T199] snd-usb-hiface 3-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 215.327825][ T199] usb 3-1: USB disconnect, device number 10 [ 215.508377][ T7322] udevd[7322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.639148][ T5613] kernel read not supported for file /442/personality (pid: 5613 comm: kworker/0:3) [ 215.812206][ T5613] usb 6-1: USB disconnect, device number 9 [ 216.837807][ T5613] kernel read not supported for file /442/personality (pid: 5613 comm: kworker/0:3) [ 217.195786][ T199] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 217.343269][ T199] usb 5-1: Using ep0 maxpacket: 32 [ 217.344830][ T199] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 217.344844][ T199] usb 5-1: config 0 has no interface number 0 [ 217.346776][ T199] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 217.346791][ T199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.346800][ T199] usb 5-1: Product: syz [ 217.346807][ T199] usb 5-1: Manufacturer: syz [ 217.346813][ T199] usb 5-1: SerialNumber: syz [ 217.373858][ T199] usb 5-1: config 0 descriptor?? [ 217.908449][ T199] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 217.908467][ T199] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 219.533754][ T199] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 219.533922][ T199] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 220.621992][ T5619] usb 5-1: USB disconnect, device number 13 [ 222.789032][ T8254] overlayfs: maximum fs stacking depth exceeded [ 227.815828][ T8359] fuse: Unknown parameter 'user_id00000000000000000000' [ 229.459495][ T8397] fuse: Unknown parameter 'user_id00000000000000000000' [ 231.215055][ T8429] fuse: Unknown parameter 'user_id00000000000000000000' [ 232.601075][ T5619] kernel read not supported for file /521/personality (pid: 5619 comm: kworker/0:5) [ 232.624135][ T3662] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.881425][ T8453] fuse: Bad value for 'fd' [ 233.343123][ T4915] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.373465][ T4915] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.394539][ T4915] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.434167][ T4915] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.434579][ T4915] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.805191][ T3662] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.211231][ T8480] fuse: Bad value for 'fd' [ 234.452281][ T4915] Bluetooth: hci0: Invalid connection link type handle 0x00c9 [ 234.536761][ T3662] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.266344][ T3662] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.564471][ T4915] Bluetooth: hci3: command tx timeout [ 237.643247][ T4915] Bluetooth: hci3: command tx timeout [ 239.723257][ T4915] Bluetooth: hci3: command tx timeout [ 239.798914][ T8523] veth1_to_bond: entered allmulticast mode [ 239.816214][ T8520] veth1_to_bond: left allmulticast mode [ 241.751588][ T8553] veth1_to_bond: entered allmulticast mode [ 241.803384][ T5612] Bluetooth: hci3: command tx timeout [ 241.848134][ T8556] netlink: 'syz.0.1012': attribute type 1 has an invalid length. [ 241.922713][ T8551] veth1_to_bond: left allmulticast mode [ 242.102569][ T8556] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.309977][ T8558] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 242.354463][ T3766] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 242.363391][ T5612] Bluetooth: hci5: command 0x0406 tx timeout [ 242.520413][ T8559] bond1 (unregistering): (slave gretap1): Removing an active aggregator [ 242.521070][ T8559] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 242.619292][ T8559] bond1 (unregistering): Released all slaves [ 243.082477][ T3662] bridge_slave_1: left allmulticast mode [ 243.082499][ T3662] bridge_slave_1: left promiscuous mode [ 243.082653][ T3662] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.251836][ T3662] bridge_slave_0: left allmulticast mode [ 243.251857][ T3662] bridge_slave_0: left promiscuous mode [ 243.252002][ T3662] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.515712][ T3662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.520009][ T3662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.521715][ T3662] bond0 (unregistering): Released all slaves [ 249.598985][ T8601] veth1_to_bond: entered allmulticast mode [ 249.600794][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 249.602378][ T8621] warning: `syz.5.1029' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 249.782626][ T8601] veth1_to_bond: left allmulticast mode [ 257.030762][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.030803][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.584557][ T8661] veth1_to_bond: entered allmulticast mode [ 257.584982][ T8656] veth1_to_bond: left allmulticast mode [ 261.455701][ T199] libceph: connect (1)[c::]:6789 error -101 [ 261.517802][ T199] libceph: mon0 (1)[c::]:6789 connect error [ 261.546277][ T8660] ceph: No mds server is up or the cluster is laggy [ 261.641082][ T199] libceph: connect (1)[c::]:6789 error -101 [ 261.641207][ T199] libceph: mon0 (1)[c::]:6789 connect error [ 261.855889][ T3662] hsr_slave_0: left promiscuous mode [ 261.894508][ T199] libceph: connect (1)[c::]:6789 error -101 [ 261.894625][ T199] libceph: mon0 (1)[c::]:6789 connect error [ 261.894713][ T3662] hsr_slave_1: left promiscuous mode [ 261.895327][ T3662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.895341][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.108097][ T3662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.108114][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.912432][ T5619] libceph: connect (1)[c::]:6789 error -101 [ 264.912557][ T5619] libceph: mon0 (1)[c::]:6789 connect error [ 264.936366][ T3662] veth1_macvtap: left promiscuous mode [ 264.936428][ T3662] veth0_macvtap: left promiscuous mode [ 264.936712][ T3662] veth1_vlan: left promiscuous mode [ 265.142450][ T199] libceph: connect (1)[c::]:6789 error -101 [ 265.142571][ T199] libceph: mon0 (1)[c::]:6789 connect error [ 265.395703][ T5619] libceph: connect (1)[c::]:6789 error -101 [ 265.395817][ T5619] libceph: mon0 (1)[c::]:6789 connect error [ 265.734460][ T3662] team0 (unregistering): Port device team_slave_1 removed [ 265.767151][ T3662] team0 (unregistering): Port device team_slave_0 removed [ 266.698347][ T8456] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.698419][ T8456] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.698568][ T8456] bridge_slave_0: entered allmulticast mode [ 266.733758][ T8456] bridge_slave_0: entered promiscuous mode [ 266.825010][ T8456] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.825075][ T8456] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.825223][ T8456] bridge_slave_1: entered allmulticast mode [ 266.829406][ T8456] bridge_slave_1: entered promiscuous mode [ 267.001316][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 267.179612][ T8456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.211708][ T8456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.636934][ T8456] team0: Port device team_slave_0 added [ 267.668748][ T8456] team0: Port device team_slave_1 added [ 267.723389][ T5615] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 267.947713][ T5615] usb 3-1: Using ep0 maxpacket: 8 [ 267.951787][ T5615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 267.951812][ T5615] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 267.951823][ T5615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.033678][ T5615] usb 3-1: config 0 descriptor?? [ 268.068361][ T8456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.068404][ T8456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.068417][ T8456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.243383][ T8456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.243394][ T8456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.243406][ T8456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.373222][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 268.533202][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 268.536212][ T10] usb 6-1: config index 0 descriptor too short (expected 3659, got 75) [ 268.536226][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.538660][ T10] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 268.538674][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.538691][ T10] usb 6-1: Product: syz [ 268.538698][ T10] usb 6-1: Manufacturer: syz [ 268.538705][ T10] usb 6-1: SerialNumber: syz [ 268.704989][ T10] usb 6-1: config 0 descriptor?? [ 268.816508][ T10] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 269.056177][ T5615] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 269.110261][ T5615] usb 3-1: USB disconnect, device number 11 [ 269.519732][ T8785] program syz.2.1082 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.717753][ T8456] hsr_slave_0: entered promiscuous mode [ 269.774340][ T8456] hsr_slave_1: entered promiscuous mode [ 269.780171][ T8456] debugfs: 'hsr0' already exists in 'hsr' [ 269.780188][ T8456] Cannot create hsr debugfs directory [ 270.954837][ T5261] 8021q: adding VLAN 0 to HW filter on device eth7 [ 271.802580][ T9] usb 6-1: USB disconnect, device number 10 [ 278.293306][ T5619] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 278.388354][ T4915] Bluetooth: hci5: unexpected event for opcode 0x1004 [ 278.443229][ T5619] usb 3-1: Using ep0 maxpacket: 32 [ 278.444850][ T5619] usb 3-1: config index 0 descriptor too short (expected 3659, got 75) [ 278.444864][ T5619] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.447027][ T5619] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 278.447041][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.447050][ T5619] usb 3-1: Product: syz [ 278.447057][ T5619] usb 3-1: Manufacturer: syz [ 278.447064][ T5619] usb 3-1: SerialNumber: syz [ 278.528062][ T5619] usb 3-1: config 0 descriptor?? [ 278.548425][ T5619] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 278.573007][ T5261] 8021q: adding VLAN 0 to HW filter on device eth8 [ 278.830551][ T8456] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 278.960136][ T8456] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 279.048190][ T8456] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 279.135079][ T8456] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.619916][ T8900] program syz.5.1118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.299585][ T8456] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 280.316170][ T8456] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 280.507782][ T8456] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 280.527115][ T8456] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 281.052992][ T4915] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 281.191906][ T8456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.363852][ T8456] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.372441][ T3662] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.372511][ T3662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.395105][ T3658] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.395189][ T3658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.730388][ T4915] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 282.730613][ T4915] Bluetooth: hci5: Injecting HCI hardware error event [ 282.734362][ T5612] Bluetooth: hci5: hardware error 0x00 [ 283.013297][ T8933] usb 3-1: USB disconnect, device number 12 [ 286.207140][ T8945] futex_wake_op: syz.2.1129 tries to shift op by 144; fix this program [ 286.259501][ T5612] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 286.259585][ T4915] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 286.259746][ T4915] Bluetooth: hci0: Injecting HCI hardware error event [ 286.261621][ T5612] Bluetooth: hci0: hardware error 0x00 [ 286.510029][ T8941] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 286.815179][ T4915] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 287.250853][ T8974] futex_wake_op: syz.0.1140 tries to shift op by 144; fix this program [ 287.330678][ T199] IPVS: starting estimator thread 0... [ 287.413275][ T8976] IPVS: using max 15 ests per chain, 36000 per kthread [ 287.968718][ T4915] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 288.278167][ T8456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.357998][ T9008] futex_wake_op: syz.2.1150 tries to shift op by 144; fix this program [ 288.683346][ T5612] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 290.843578][ T5612] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 290.843802][ T5612] Bluetooth: hci2: Injecting HCI hardware error event [ 290.865618][ T4915] Bluetooth: hci2: hardware error 0x00 [ 295.049600][ T9059] comedi comedi1: dt2817: I/O base address not correctly aligned [ 295.199574][ T9065] 9p: Bad value for 'rfdno' [ 295.550135][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 295.561238][ T5619] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 295.612754][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 295.620878][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 295.647543][ T5610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 295.670511][ T5610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 295.915047][ T5619] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 295.915070][ T5619] usb 1-1: can't read configurations, error -71 [ 296.310590][ T8933] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 296.463172][ T8933] usb 3-1: Using ep0 maxpacket: 32 [ 296.464784][ T8933] usb 3-1: config 0 interface 0 has no altsetting 0 [ 296.464806][ T8933] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 296.464817][ T8933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.467695][ T8933] usb 3-1: config 0 descriptor?? [ 296.643219][ T5613] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 296.684803][ T4915] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 296.795285][ T5613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.795312][ T5613] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 296.795323][ T5613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.859002][ T5613] usb 4-1: config 0 descriptor?? [ 296.924934][ T8933] usbhid 3-1:0.0: can't add hid device: -71 [ 296.925000][ T8933] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 296.968673][ T8933] usb 3-1: USB disconnect, device number 13 [ 297.101885][ T5613] usbhid 4-1:0.0: can't add hid device: -71 [ 297.101954][ T5613] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 297.151147][ T5613] usb 4-1: USB disconnect, device number 10 [ 297.418877][ T9103] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(9) [ 297.418893][ T9103] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 297.596134][ T9102] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 297.621433][ T9103] vhci_hcd vhci_hcd.0: Device attached [ 297.646472][ T9102] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 297.647869][ T9102] vhci_hcd vhci_hcd.0: Device attached [ 297.684565][ T9100] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 297.684580][ T9100] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 297.684605][ T9100] vhci_hcd vhci_hcd.0: Device attached [ 297.765627][ T9107] vhci_hcd: connection closed [ 297.771208][ T9109] vhci_hcd: connection closed [ 297.787458][ T9110] vhci_hcd: connection closed [ 297.805570][ T4915] Bluetooth: hci4: command tx timeout [ 297.813909][ T5613] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 297.844555][ T42] vhci_hcd vhci_hcd.0: stop threads [ 297.845358][ T42] vhci_hcd vhci_hcd.0: release socket [ 297.879734][ T8933] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 297.948984][ T42] vhci_hcd vhci_hcd.0: disconnect device [ 297.959103][ T42] vhci_hcd vhci_hcd.0: stop threads [ 297.959117][ T42] vhci_hcd vhci_hcd.0: release socket [ 297.991804][ T42] vhci_hcd vhci_hcd.0: disconnect device [ 298.005423][ T5613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.005451][ T5613] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 298.005462][ T5613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.010529][ T42] vhci_hcd vhci_hcd.0: stop threads [ 298.010543][ T42] vhci_hcd vhci_hcd.0: release socket [ 298.011531][ T42] vhci_hcd vhci_hcd.0: disconnect device [ 298.068023][ T5613] usb 4-1: config 0 descriptor?? [ 300.897347][ T9119] futex_wake_op: syz.2.1178 tries to shift op by 144; fix this program [ 300.923636][ T5612] Bluetooth: hci4: command tx timeout [ 301.322094][ T9129] 9p: Bad value for 'rfdno' [ 301.533580][ T5613] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 301.553041][ T5613] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 302.055255][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 302.084417][ T5613] usb 4-1: USB disconnect, device number 11 [ 305.270955][ T9156] futex_wake_op: syz.2.1188 tries to shift op by 144; fix this program [ 305.283631][ T5612] Bluetooth: hci4: command tx timeout [ 305.770498][ T5613] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 305.923218][ T5613] usb 3-1: Using ep0 maxpacket: 32 [ 305.924760][ T5613] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 305.924774][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.962267][ T5613] usb 3-1: config 0 descriptor?? [ 306.038890][ T5613] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 309.789173][ T5612] Bluetooth: hci4: command tx timeout [ 309.997834][ T5613] gspca_vc032x: reg_w err -71 [ 309.997847][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.997853][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.997857][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.997861][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.997865][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.997868][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.997872][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.997876][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.997880][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.997883][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.997887][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.997891][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.997894][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.997898][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.997902][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.997906][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.997909][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.997913][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 309.997917][ T5613] gspca_vc032x: Unknown sensor... [ 309.997963][ T5613] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 310.132281][ T5613] usb 3-1: USB disconnect, device number 14 [ 314.545029][ T5613] IPVS: starting estimator thread 0... [ 315.843473][ T9200] futex_wake_op: syz.2.1200 tries to shift op by 144; fix this program [ 315.973243][ T9210] IPVS: using max 15 ests per chain, 36000 per kthread [ 316.279390][ T9222] netlink: 'syz.0.1204': attribute type 2 has an invalid length. [ 316.279420][ T9222] netlink: 'syz.0.1204': attribute type 2 has an invalid length. [ 316.665220][ T9226] input: syz0 as /devices/virtual/input/input16 [ 317.086527][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.086568][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.463313][ T5613] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 317.636464][ T5613] usb 3-1: Using ep0 maxpacket: 32 [ 317.638156][ T5613] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 317.638171][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.680908][ T5613] usb 3-1: config 0 descriptor?? [ 317.697170][ T5613] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 317.903337][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 318.083959][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 318.085790][ T9] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 318.085810][ T9] usb 6-1: config 0 has no interface number 0 [ 318.085870][ T9] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 318.085882][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.157208][ T9] usb 6-1: config 0 descriptor?? [ 318.407637][ T9] viperboard 6-1:0.143: version 0.00 found at bus 006 address 011 [ 319.141662][ T3658] bridge_slave_1: left allmulticast mode [ 319.141685][ T3658] bridge_slave_1: left promiscuous mode [ 319.184987][ T3658] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.512089][ T3658] bridge_slave_0: left allmulticast mode [ 319.512110][ T3658] bridge_slave_0: left promiscuous mode [ 319.527871][ T3658] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.796269][ T9279] futex_wake_op: syz.0.1214 tries to shift op by 144; fix this program [ 322.806973][ T5613] gspca_vc032x: reg_r err -110 [ 322.806984][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.806989][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.806993][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.806997][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.807001][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.807004][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.807008][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.807012][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.807016][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.807019][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.807023][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.807027][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.807030][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.807034][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.807038][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.807042][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.807045][ T5613] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.807049][ T5613] gspca_vc032x: Unknown sensor... [ 322.807096][ T5613] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 323.184618][ T5613] usb 3-1: USB disconnect, device number 15 [ 323.322877][ T9] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 323.322912][ T9] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 323.484777][ T9293] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1219'. [ 323.489323][ T9] usb 6-1: USB disconnect, device number 11 [ 334.572605][ T3658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.582811][ T3658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.584649][ T3658] bond0 (unregistering): Released all slaves [ 334.591980][ T9066] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.592043][ T9066] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.592163][ T9066] bridge_slave_0: entered allmulticast mode [ 335.418697][ T9319] futex_wake_op: syz.5.1227 tries to shift op by 144; fix this program [ 335.505682][ T9066] bridge_slave_0: entered promiscuous mode [ 335.765396][ T9294] syzkaller1: entered promiscuous mode [ 335.765413][ T9294] syzkaller1: entered allmulticast mode [ 335.793186][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 335.799235][ T9066] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.799305][ T9066] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.799454][ T9066] bridge_slave_1: entered allmulticast mode [ 335.844726][ T9066] bridge_slave_1: entered promiscuous mode [ 335.946535][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 335.970655][ T10] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 335.970673][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.996099][ T10] usb 1-1: config 0 descriptor?? [ 336.031356][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 336.563952][ T9327] ubi16: attaching mtd0 [ 336.567035][ T9327] ubi16: scanning is finished [ 336.567046][ T9327] ubi16: empty MTD device detected [ 336.615581][ T9328] trusted_key: encrypted_key: keylen parameter is missing [ 337.007090][ T3658] hsr_slave_0: left promiscuous mode [ 337.008130][ T3658] hsr_slave_1: left promiscuous mode [ 337.010813][ T3658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.031316][ T3658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.077791][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.058458][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.072777][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.073902][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.074323][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.887537][ T10] gspca_vc032x: reg_w err -110 [ 339.887547][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.887552][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.887556][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.887560][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.887564][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.887567][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.887571][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.887575][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.887579][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.887582][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.887586][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.887590][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.887594][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.887597][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.887601][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.887605][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.887608][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.887612][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.887616][ T10] gspca_vc032x: Unknown sensor... [ 339.887663][ T10] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 340.229011][ T10] usb 1-1: USB disconnect, device number 13 [ 340.288138][ T9327] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 343.466989][ T4915] Bluetooth: hci3: command tx timeout [ 345.483921][ T4915] Bluetooth: hci3: command tx timeout [ 347.563928][ T4915] Bluetooth: hci3: command tx timeout [ 350.938800][ T9367] futex_wake_op: syz.2.1242 tries to shift op by 144; fix this program [ 350.942708][ T4915] Bluetooth: hci3: command tx timeout [ 351.174381][ T5619] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 354.343249][ T5619] usb 1-1: device not accepting address 14, error -71 [ 362.039716][ T3658] team0 (unregistering): Port device team_slave_1 removed [ 364.865600][ T9402] futex_wake_op: syz.0.1254 tries to shift op by 144; fix this program [ 364.914663][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.949573][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.007871][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.008645][ T3658] team0 (unregistering): Port device team_slave_0 removed [ 365.032347][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.032788][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 365.818450][ T9424] binder: 9422:9424 unknown command 0 [ 365.818464][ T9424] binder: 9422:9424 ioctl c0306201 2000000004c0 returned -22 [ 369.498152][ T5612] Bluetooth: hci0: command tx timeout [ 372.731489][ T9449] futex_wake_op: syz.0.1265 tries to shift op by 144; fix this program [ 372.756248][ T5612] Bluetooth: hci0: command tx timeout [ 375.724187][ T5612] Bluetooth: hci0: command tx timeout [ 375.783473][ T9470] binder: 9465:9470 unknown command 0 [ 375.783487][ T9470] binder: 9465:9470 ioctl c0306201 2000000004c0 returned -22 [ 379.313334][ T4915] Bluetooth: hci0: command tx timeout [ 379.316927][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.316966][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.035557][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'. [ 380.036727][ T9500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1276'. [ 380.605865][ T9507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1278'. [ 380.730353][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 381.056675][ T9512] binder: 9511:9512 unknown command 0 [ 381.056689][ T9512] binder: 9511:9512 ioctl c0306201 2000000004c0 returned -22 [ 381.059109][ T9515] binder: 9514:9515 unknown command 0 [ 381.059120][ T9515] binder: 9514:9515 ioctl c0306201 2000000004c0 returned -22 [ 385.595452][ T3658] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.300973][ T9560] binder: 9557:9560 unknown command 0 [ 387.300988][ T9560] binder: 9557:9560 ioctl c0306201 2000000004c0 returned -22 [ 387.437497][ T9567] binder: 9566:9567 unknown command 0 [ 387.437510][ T9567] binder: 9566:9567 ioctl c0306201 2000000004c0 returned -22 [ 387.821923][ T3658] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.837068][ T9582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1295'. [ 388.266824][ T5261] 8021q: adding VLAN 0 to HW filter on device eth10 [ 388.854353][ T3658] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.718493][ T3658] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.059599][ T9618] binder: 9617:9618 unknown command 0 [ 393.059614][ T9618] binder: 9617:9618 ioctl c0306201 2000000004c0 returned -22 [ 393.092823][ T9621] binder: 9619:9621 unknown command 0 [ 393.092834][ T9621] binder: 9619:9621 ioctl c0306201 2000000004c0 returned -22 [ 393.217087][ T9329] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.217152][ T9329] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.217307][ T9329] bridge_slave_0: entered allmulticast mode [ 393.252631][ T9329] bridge_slave_0: entered promiscuous mode [ 393.305737][ T9329] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.305808][ T9329] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.305954][ T9329] bridge_slave_1: entered allmulticast mode [ 393.339393][ T9329] bridge_slave_1: entered promiscuous mode [ 393.991258][ T9329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.094788][ T9329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.101167][ T9631] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1305'. [ 394.101184][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1305'. [ 394.642084][ T9329] team0: Port device team_slave_0 added [ 395.966730][ T9329] team0: Port device team_slave_1 added [ 396.874783][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 396.920122][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 396.951449][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 396.953017][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 396.965208][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 397.138471][ T9406] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.138537][ T9406] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.138650][ T9406] bridge_slave_0: entered allmulticast mode [ 397.171630][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1314'. [ 397.171643][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1314'. [ 397.191578][ T9406] bridge_slave_0: entered promiscuous mode [ 397.207776][ T5261] 8021q: adding VLAN 0 to HW filter on device eth11 [ 397.822162][ T9675] netlink: 'syz.0.1313': attribute type 21 has an invalid length. [ 397.822175][ T9675] netlink: 'syz.0.1313': attribute type 7 has an invalid length. [ 397.948396][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1314'. [ 397.948413][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1314'. [ 397.948764][ T9406] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.948827][ T9406] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.948943][ T9406] bridge_slave_1: entered allmulticast mode [ 397.950646][ T9406] bridge_slave_1: entered promiscuous mode [ 398.064774][ T213] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.678341][ T213] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.928022][ T213] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.176397][ T5612] Bluetooth: hci4: command tx timeout [ 399.232799][ T213] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.259009][ T9406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.311246][ T9406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.944023][ T3658] bridge_slave_1: left allmulticast mode [ 399.944045][ T3658] bridge_slave_1: left promiscuous mode [ 399.944201][ T3658] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.951592][ T3658] bridge_slave_0: left allmulticast mode [ 399.951611][ T3658] bridge_slave_0: left promiscuous mode [ 399.951780][ T3658] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.159751][ T3658] team0: left allmulticast mode [ 400.159766][ T3658] team_slave_0: left allmulticast mode [ 400.159787][ T3658] team_slave_1: left allmulticast mode [ 400.212367][ T3658] team0: left promiscuous mode [ 400.212381][ T3658] team_slave_0: left promiscuous mode [ 400.212516][ T3658] team_slave_1: left promiscuous mode [ 400.212618][ T3658] gretap1: left promiscuous mode [ 400.230613][ T3658] bridge0: port 3(team0) entered disabled state [ 400.398238][ T3658] bridge_slave_1: left allmulticast mode [ 400.398260][ T3658] bridge_slave_1: left promiscuous mode [ 400.398397][ T3658] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.436031][ T3658] bridge_slave_0: left allmulticast mode [ 400.436054][ T3658] bridge_slave_0: left promiscuous mode [ 400.436198][ T3658] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.603272][ T9711] netlink: 'syz.0.1323': attribute type 2 has an invalid length. [ 401.243152][ T5612] Bluetooth: hci4: command tx timeout [ 401.375144][ T3658] bond0 (unregistering): Released all slaves [ 403.047930][ T3658] team0: Port device gretap1 removed [ 403.469539][ T5612] Bluetooth: hci4: command tx timeout [ 403.873325][ T3658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.902750][ T3658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.917317][ T3658] bond0 (unregistering): Released all slaves [ 404.076780][ T9746] tipc: Started in network mode [ 404.076802][ T9746] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 404.077874][ T9746] tipc: Enabled bearer , priority 10 [ 404.328554][ T9406] team0: Port device team_slave_0 added [ 404.364680][ T9406] team0: Port device team_slave_1 added [ 405.283101][ T9406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.283114][ T9406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.283128][ T9406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.483124][ T5612] Bluetooth: hci4: command tx timeout [ 405.837208][ T9770] binder: 9766:9770 unknown command 0 [ 405.837221][ T9770] binder: 9766:9770 ioctl c0306201 2000000004c0 returned -22 [ 406.184462][ T5619] tipc: Node number set to 10005162 [ 406.328186][ T9406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.328196][ T9406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.328210][ T9406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.358797][ T9406] hsr_slave_0: entered promiscuous mode [ 410.359546][ T9406] hsr_slave_1: entered promiscuous mode [ 410.541448][ T9406] debugfs: 'hsr0' already exists in 'hsr' [ 410.541467][ T9406] Cannot create hsr debugfs directory [ 411.036644][ T9790] fuse: Bad value for 'fd' [ 412.990992][ T3658] hsr_slave_0: left promiscuous mode [ 413.001517][ T3658] hsr_slave_1: left promiscuous mode [ 413.002107][ T3658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.002122][ T3658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.034647][ T3658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.034664][ T3658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.248572][ T3658] veth1_macvtap: left promiscuous mode [ 413.248633][ T3658] veth0_macvtap: left promiscuous mode [ 413.315768][ T3658] veth1_vlan: left promiscuous mode [ 413.364828][ T3658] veth0_vlan: left promiscuous mode [ 413.655113][ T9814] binder: 9813:9814 unknown command 0 [ 413.655126][ T9814] binder: 9813:9814 ioctl c0306201 2000000004c0 returned -22 [ 415.364350][ T9837] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1357'. [ 415.740949][ T3658] team0 (unregistering): Port device team_slave_1 removed [ 415.765571][ T3658] team0 (unregistering): Port device team_slave_0 removed [ 416.334978][ T5261] 8021q: adding VLAN 0 to HW filter on device eth12 [ 416.622313][ T9851] binder: 9850:9851 unknown command 0 [ 416.622325][ T9851] binder: 9850:9851 ioctl c0306201 2000000004c0 returned -22 [ 419.397686][ T9879] trusted_key: encrypted_key: keylen parameter is missing [ 420.761127][ T4915] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 420.818439][ T4915] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 420.827878][ T4915] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 420.851998][ T4915] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 420.865935][ T4915] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 422.431229][ T9924] trusted_key: encrypted_key: keylen parameter is missing [ 422.705481][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 422.890213][ T3658] IPVS: stop unused estimator thread 0... [ 423.084102][ T5612] Bluetooth: hci3: command tx timeout [ 424.163708][ T9674] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.163772][ T9674] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.163924][ T9674] bridge_slave_0: entered allmulticast mode [ 424.170435][ T9674] bridge_slave_0: entered promiscuous mode [ 424.428676][ T3658] bridge_slave_1: left allmulticast mode [ 424.428699][ T3658] bridge_slave_1: left promiscuous mode [ 424.428851][ T3658] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.431314][ T3658] bridge_slave_0: left allmulticast mode [ 424.431332][ T3658] bridge_slave_0: left promiscuous mode [ 424.431458][ T3658] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.680226][ T3658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.693403][ T3658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.697694][ T3658] bond0 (unregistering): Released all slaves [ 424.721200][ T9674] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.721270][ T9674] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.721404][ T9674] bridge_slave_1: entered allmulticast mode [ 424.748159][ T9674] bridge_slave_1: entered promiscuous mode [ 425.166564][ T5612] Bluetooth: hci3: command tx timeout [ 425.497353][ T3658] team0 (unregistering): Port device team_slave_1 removed [ 425.801139][ T3658] team0 (unregistering): Port device team_slave_0 removed [ 429.865397][ T5612] Bluetooth: hci3: command tx timeout [ 430.162528][ T9674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.276513][ T9674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.629953][ T9674] team0: Port device team_slave_0 added [ 430.668707][ T9674] team0: Port device team_slave_1 added [ 431.042823][ T9674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.042833][ T9674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.042847][ T9674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.236699][ T9674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.236710][ T9674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.236723][ T9674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.834061][ T9674] hsr_slave_0: entered promiscuous mode [ 431.834904][ T9674] hsr_slave_1: entered promiscuous mode [ 431.835404][ T9674] debugfs: 'hsr0' already exists in 'hsr' [ 431.835417][ T9674] Cannot create hsr debugfs directory [ 431.883727][ T5612] Bluetooth: hci3: command tx timeout [ 433.037205][ T3658] bridge_slave_1: left allmulticast mode [ 433.037228][ T3658] bridge_slave_1: left promiscuous mode [ 433.037400][ T3658] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.209719][ T3658] bridge_slave_0: left allmulticast mode [ 433.209739][ T3658] bridge_slave_0: left promiscuous mode [ 433.553168][ T3658] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.769998][T10032] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1412'. [ 438.847970][ T3658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.879465][ T3658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.900606][ T3658] bond0 (unregistering): Released all slaves [ 439.311879][ T3658] hsr_slave_0: left promiscuous mode [ 439.312960][ T3658] hsr_slave_1: left promiscuous mode [ 439.326460][ T3658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.368228][ T3658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.137138][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.137178][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.517989][ T3658] team0 (unregistering): Port device team_slave_1 removed [ 440.746531][ T3658] team0 (unregistering): Port device team_slave_0 removed [ 441.141734][T10059] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1421'. [ 441.463464][ T5261] 8021q: adding VLAN 0 to HW filter on device eth14 [ 441.686143][T10066] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1423'. [ 443.749366][T10099] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1431'. [ 444.057140][ T9898] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.057207][ T9898] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.057335][ T9898] bridge_slave_0: entered allmulticast mode [ 444.062683][ T9898] bridge_slave_0: entered promiscuous mode [ 444.104867][ T9898] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.104933][ T9898] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.105051][ T9898] bridge_slave_1: entered allmulticast mode [ 444.140045][ T9898] bridge_slave_1: entered promiscuous mode [ 444.314715][T10110] syz.5.1433 uses obsolete (PF_INET,SOCK_PACKET) [ 444.390119][T10114] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1434'. [ 444.523003][ T9898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.570663][ T9898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.741608][ T5261] 8021q: adding VLAN 0 to HW filter on device eth15 [ 445.116659][ T9898] team0: Port device team_slave_0 added [ 445.144163][ T9898] team0: Port device team_slave_1 added [ 445.310693][ T9674] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 445.377720][ T9674] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 445.391861][ T9898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.391871][ T9898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.391884][ T9898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.431248][ T9674] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 445.666748][ T9674] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 445.681212][ T9898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.681222][ T9898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.681236][ T9898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.008689][ T9674] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 446.080762][ T9674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 446.082712][ T9674] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 446.140002][ T9674] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 446.441913][ T9898] hsr_slave_0: entered promiscuous mode [ 446.457010][ T9898] hsr_slave_1: entered promiscuous mode [ 446.457524][ T9898] debugfs: 'hsr0' already exists in 'hsr' [ 446.457538][ T9898] Cannot create hsr debugfs directory [ 447.059187][T10150] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1442'. [ 447.589757][T10162] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1445'. [ 447.797626][ T9674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.261974][ T9674] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.390006][ T1196] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.390080][ T1196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.489444][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.514771][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.917830][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'. [ 448.917851][T10181] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1451'. [ 448.992786][ T5261] 8021q: adding VLAN 0 to HW filter on device eth16 [ 449.158422][ T5619] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 449.304087][ T5619] usb 6-1: Using ep0 maxpacket: 32 [ 449.305619][ T5619] usb 6-1: config 0 interface 0 has no altsetting 0 [ 449.305645][ T5619] usb 6-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 449.305656][ T5619] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.376844][ T5619] usb 6-1: config 0 descriptor?? [ 449.815510][T10201] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1458'. [ 449.955896][ T5619] logitech 0003:046D:C295.0001: unknown main item tag 0x3 [ 449.955923][ T5619] logitech 0003:046D:C295.0001: unknown main item tag 0x1 [ 449.955976][ T5619] logitech 0003:046D:C295.0001: unknown main item tag 0x0 [ 449.955991][ T5619] logitech 0003:046D:C295.0001: unknown main item tag 0x0 [ 449.956005][ T5619] logitech 0003:046D:C295.0001: unknown main item tag 0x0 [ 449.956019][ T5619] logitech 0003:046D:C295.0001: unknown main item tag 0x0 [ 449.956033][ T5619] logitech 0003:046D:C295.0001: unknown main item tag 0x0 [ 449.956046][ T5619] logitech 0003:046D:C295.0001: unknown main item tag 0x0 [ 449.956060][ T5619] logitech 0003:046D:C295.0001: unknown main item tag 0x0 [ 449.956074][ T5619] logitech 0003:046D:C295.0001: unknown main item tag 0x0 [ 451.295269][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1463'. [ 451.295290][T10222] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1463'. [ 451.642193][ T5619] logitech 0003:046D:C295.0001: hidraw0: USB HID v0.81 Device [HID 046d:c295] on usb-dummy_hcd.5-1/input0 [ 451.642218][ T5619] logitech 0003:046D:C295.0001: no inputs found [ 451.952973][ T5619] usb 6-1: USB disconnect, device number 12 [ 452.039262][ T8933] kernel write not supported for file /input/mice (pid: 8933 comm: kworker/0:7) [ 452.249474][ T9898] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 452.304134][ T9898] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 452.334010][ T9898] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 452.430714][ T9898] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 452.461409][ T9898] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 452.564236][ T9898] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 452.585956][ T9898] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 452.632143][ T9898] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 453.304986][T10261] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1468'. [ 453.446669][ T9898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.670121][ T9898] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.718496][ T9674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.799830][ T1192] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.801839][ T1192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.884564][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.884644][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.123919][ T5615] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 454.473418][ T5615] usb 1-1: unable to get BOS descriptor or descriptor too short [ 454.473920][ T5615] usb 1-1: not running at top speed; connect to a high speed hub [ 454.536705][ T5615] usb 1-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 454.536723][ T5615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.536733][ T5615] usb 1-1: Product: syz [ 454.536739][ T5615] usb 1-1: Manufacturer: syz [ 454.536759][ T5615] usb 1-1: SerialNumber: syz [ 454.615267][ T5615] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 455.080895][T10297] 9p: Bad value for 'wfdno' [ 455.148994][T10298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.149321][T10298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.455433][ T5615] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 455.569721][ T5615] snd-usb-hiface 1-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 455.669797][ T5615] usb 1-1: can't set first interface for hiFace device. [ 455.669822][ T5615] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 455.727033][ T5615] usb 1-1: can't set first interface for hiFace device. [ 455.727059][ T5615] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 455.775070][ T5615] usb 1-1: USB disconnect, device number 16 [ 455.784905][ T9674] veth0_vlan: entered promiscuous mode [ 455.870639][ T9674] veth1_vlan: entered promiscuous mode [ 455.902986][ T9448] udevd[9448]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.635990][T10331] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1481'. [ 460.615768][T10353] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1487'. [ 460.718797][ T4915] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 460.760587][ T4915] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 460.761744][ T4915] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 460.782727][ T4915] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 460.792643][ T4915] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 464.308770][T10373] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1493'. [ 464.313839][ T5612] Bluetooth: hci0: command tx timeout [ 464.945820][ T9898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.456915][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'. [ 465.456938][T10407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1500'. [ 466.363862][ T5612] Bluetooth: hci0: command tx timeout [ 466.675962][T10426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1507'. [ 466.808609][T10431] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 467.255845][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 467.493116][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 467.494733][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 467.494755][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 467.494767][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.534990][ T10] usb 1-1: config 0 descriptor?? [ 467.953755][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 467.953831][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 468.012930][ T10] usb 1-1: USB disconnect, device number 17 [ 468.313483][ T5619] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 468.458143][ T5612] Bluetooth: hci0: command tx timeout [ 468.474435][ T5619] usb 3-1: Using ep0 maxpacket: 32 [ 468.476786][ T5619] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 468.476800][ T5619] usb 3-1: config 0 has no interface number 0 [ 468.478742][ T5619] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 468.478756][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.478765][ T5619] usb 3-1: Product: syz [ 468.478772][ T5619] usb 3-1: Manufacturer: syz [ 468.478779][ T5619] usb 3-1: SerialNumber: syz [ 468.536571][ T5619] usb 3-1: config 0 descriptor?? [ 468.950613][ T5619] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 468.950634][ T5619] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 469.333855][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1517'. [ 469.334360][T10460] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1517'. [ 469.903248][T10468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1519'. [ 469.909259][ T9898] veth0_vlan: entered promiscuous mode [ 470.140929][T10470] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 470.524561][ T5612] Bluetooth: hci0: command tx timeout [ 471.287505][ T5619] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 471.287777][ T5619] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 472.821200][ T5619] usb 3-1: USB disconnect, device number 16 [ 474.887003][ T9898] veth1_vlan: entered promiscuous mode [ 474.955587][T10478] netlink: 'syz.0.1521': attribute type 2 has an invalid length. [ 475.257335][T10487] binder: 10485:10487 unknown command 0 [ 475.257349][T10487] binder: 10485:10487 ioctl c0306201 2000000004c0 returned -22 [ 475.313274][ T5619] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 475.465579][ T5619] usb 3-1: unable to get BOS descriptor or descriptor too short [ 475.466016][ T5619] usb 3-1: not running at top speed; connect to a high speed hub [ 475.511046][ T5619] usb 3-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 475.511063][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.511073][ T5619] usb 3-1: Product: syz [ 475.511080][ T5619] usb 3-1: Manufacturer: syz [ 475.511087][ T5619] usb 3-1: SerialNumber: syz [ 475.604329][ T5619] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 475.606435][ T162] bridge_slave_1: left allmulticast mode [ 475.606455][ T162] bridge_slave_1: left promiscuous mode [ 475.606604][ T162] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.614916][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'. [ 475.614936][T10494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1527'. [ 475.677646][ T162] bridge_slave_0: left allmulticast mode [ 475.677667][ T162] bridge_slave_0: left promiscuous mode [ 475.677822][ T162] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.851429][ T5619] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 475.937268][ T5619] snd-usb-hiface 3-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 476.060646][ T5619] usb 3-1: can't set first interface for hiFace device. [ 476.060671][ T5619] snd-usb-hiface 3-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 476.096449][ T5619] usb 3-1: can't set first interface for hiFace device. [ 476.096471][ T5619] snd-usb-hiface 3-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 476.157120][ T5619] usb 3-1: USB disconnect, device number 17 [ 476.226052][ T9448] udevd[9448]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 476.520996][ T162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.534094][ T162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.536089][ T162] bond0 (unregistering): Released all slaves [ 480.067821][ T162] hsr_slave_0: left promiscuous mode [ 480.084785][ T162] hsr_slave_1: left promiscuous mode [ 480.085337][ T162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.105847][ T162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.196563][ T162] veth1_vlan: left promiscuous mode [ 480.196679][ T162] veth0_vlan: left promiscuous mode [ 480.657260][T10517] binder: 10516:10517 unknown command 0 [ 480.657272][T10517] binder: 10516:10517 ioctl c0306201 2000000004c0 returned -22 [ 480.920049][ T4915] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 480.956064][ T4915] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 480.990167][ T4915] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 481.004233][ T4915] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 481.005046][ T4915] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 481.209114][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1537'. [ 481.209135][T10525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1537'. [ 481.586473][ T162] team0 (unregistering): Port device team_slave_1 removed [ 481.618095][ T162] team0 (unregistering): Port device team_slave_0 removed [ 482.680820][T10352] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.680886][T10352] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.681009][T10352] bridge_slave_0: entered allmulticast mode [ 482.718566][T10352] bridge_slave_0: entered promiscuous mode [ 482.749888][T10352] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.749953][T10352] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.750093][T10352] bridge_slave_1: entered allmulticast mode [ 482.791873][T10352] bridge_slave_1: entered promiscuous mode [ 482.809307][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 482.809319][ T36] audit: type=1326 audit(1784945695.820:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10536 comm="syz.5.1542" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73092ade99 code=0x0 [ 482.899639][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1541'. [ 483.167728][ T5612] Bluetooth: hci3: command tx timeout [ 483.244913][T10352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.267360][T10352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.490695][T10548] binder: 10547:10548 unknown command 0 [ 483.490709][T10548] binder: 10547:10548 ioctl c0306201 2000000004c0 returned -22 [ 483.631457][T10352] team0: Port device team_slave_0 added [ 483.650218][T10352] team0: Port device team_slave_1 added [ 483.888149][T10352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.888160][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.888173][T10352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.951000][T10352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.951010][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.951023][T10352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.068727][T10564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1549'. [ 484.068750][T10564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1549'. [ 484.879242][T10352] hsr_slave_0: entered promiscuous mode [ 484.896929][T10352] hsr_slave_1: entered promiscuous mode [ 484.897490][T10352] debugfs: 'hsr0' already exists in 'hsr' [ 484.897504][T10352] Cannot create hsr debugfs directory [ 485.416699][ T5612] Bluetooth: hci3: command tx timeout [ 486.186102][ T5612] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 487.017572][T10597] binder: 10596:10597 unknown command 0 [ 487.017587][T10597] binder: 10596:10597 ioctl c0306201 2000000004c0 returned -22 [ 487.267187][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 487.267209][T10604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1559'. [ 487.494646][ T5612] Bluetooth: hci3: command tx timeout [ 487.692061][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 489.265098][ T9] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 489.425374][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 489.425802][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 489.451849][ T9] usb 6-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 489.451866][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.451875][ T9] usb 6-1: Product: syz [ 489.451882][ T9] usb 6-1: Manufacturer: syz [ 489.451888][ T9] usb 6-1: SerialNumber: syz [ 489.563903][ T5612] Bluetooth: hci3: command tx timeout [ 489.607616][ T9] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 489.626186][T10634] binder: 10633:10634 unknown command 0 [ 489.626198][T10634] binder: 10633:10634 ioctl c0306201 2000000004c0 returned -22 [ 489.900563][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 489.914009][ T9] snd-usb-hiface 6-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 490.107416][T10641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.150965][T10641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.171647][ T9] usb 6-1: can't set first interface for hiFace device. [ 490.171672][ T9] snd-usb-hiface 6-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 490.192921][ T9] usb 6-1: can't set first interface for hiFace device. [ 490.192944][ T9] snd-usb-hiface 6-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 490.243184][ T9] usb 6-1: USB disconnect, device number 13 [ 490.387486][ T9448] udevd[9448]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.422754][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1571'. [ 490.422776][T10644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1571'. [ 491.629691][T10653] netlink: 'syz.0.1575': attribute type 2 has an invalid length. [ 491.742366][T10660] binder: 10659:10660 unknown command 0 [ 491.742380][T10660] binder: 10659:10660 ioctl c0306201 2000000004c0 returned -22 [ 492.190347][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1581'. [ 492.190369][T10676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1581'. [ 492.223384][T10668] binder: 10667:10668 unknown command 0 [ 492.223397][T10668] binder: 10667:10668 ioctl c0306201 2000000004c0 returned -22 [ 493.748516][T10697] binder: 10696:10697 unknown command 0 [ 493.748529][T10697] binder: 10696:10697 ioctl c0306201 2000000004c0 returned -22 [ 494.738346][T10718] binder: 10716:10718 unknown command 0 [ 494.738360][T10718] binder: 10716:10718 ioctl c0306201 2000000004c0 returned -22 [ 499.788681][ T5261] 8021q: adding VLAN 0 to HW filter on device eth10 [ 500.223163][ T7522] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 500.250707][T10746] binder: 10744:10746 unknown command 0 [ 500.250719][T10746] binder: 10744:10746 ioctl c0306201 2000000004c0 returned -22 [ 500.379450][ T7522] usb 1-1: Using ep0 maxpacket: 32 [ 500.381232][ T7522] usb 1-1: config 0 interface 0 has no altsetting 0 [ 500.381254][ T7522] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 500.381264][ T7522] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.423681][ T7522] usb 1-1: config 0 descriptor?? [ 501.476568][T10751] syz.5.1600 (10751): drop_caches: 2 [ 501.549520][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.549560][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.660569][T10750] binder: 10749:10750 unknown command 0 [ 501.660583][T10750] binder: 10749:10750 ioctl c0306201 2000000004c0 returned -22 [ 501.992454][ T7522] usbhid 1-1:0.0: can't add hid device: -71 [ 501.992528][ T7522] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 502.016697][ T7522] usb 1-1: USB disconnect, device number 18 [ 502.908579][T10521] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.908645][T10521] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.908761][T10521] bridge_slave_0: entered allmulticast mode [ 502.943949][T10521] bridge_slave_0: entered promiscuous mode [ 502.976433][T10521] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.976500][T10521] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.976652][T10521] bridge_slave_1: entered allmulticast mode [ 503.009279][T10521] bridge_slave_1: entered promiscuous mode [ 504.124416][ T162] bridge_slave_1: left allmulticast mode [ 504.124439][ T162] bridge_slave_1: left promiscuous mode [ 504.124591][ T162] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.187244][ T162] bridge_slave_0: left allmulticast mode [ 504.187272][ T162] bridge_slave_0: left promiscuous mode [ 504.188841][ T162] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.475952][T10779] binder: 10778:10779 unknown command 0 [ 504.475965][T10779] binder: 10778:10779 ioctl c0306201 2000000004c0 returned -22 [ 506.013569][ T162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.071388][ T162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.084983][ T162] bond0 (unregistering): Released all slaves [ 506.469798][T10521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.494273][ T162] hsr_slave_0: left promiscuous mode [ 506.494787][ T162] hsr_slave_1: left promiscuous mode [ 506.495283][ T162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.495716][ T162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.706380][ T162] veth1_vlan: left promiscuous mode [ 506.706491][ T162] veth0_vlan: left promiscuous mode [ 507.270724][T10794] binder: 10793:10794 unknown command 0 [ 507.270739][T10794] binder: 10793:10794 ioctl c0306201 2000000004c0 returned -22 [ 507.767888][T10802] binder: 10801:10802 unknown command 0 [ 507.767901][T10802] binder: 10801:10802 ioctl c0306201 2000000004c0 returned -22 [ 508.483370][ T162] team0 (unregistering): Port device team_slave_1 removed [ 508.508397][ T162] team0 (unregistering): Port device team_slave_0 removed [ 509.115961][T10815] binder: 10814:10815 unknown command 0 [ 509.115974][T10815] binder: 10814:10815 ioctl c0306201 2000000004c0 returned -22 [ 509.151636][T10521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.385125][T10521] team0: Port device team_slave_0 added [ 509.390323][T10521] team0: Port device team_slave_1 added [ 509.604918][T10521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.604930][T10521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.604944][T10521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.702165][T10521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.702175][T10521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.702189][T10521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.257899][T10521] hsr_slave_0: entered promiscuous mode [ 510.258683][T10521] hsr_slave_1: entered promiscuous mode [ 510.259168][T10521] debugfs: 'hsr0' already exists in 'hsr' [ 510.332948][T10521] Cannot create hsr debugfs directory [ 510.647717][T10830] binder: 10829:10830 unknown command 0 [ 510.647730][T10830] binder: 10829:10830 ioctl c0306201 2000000004c0 returned -22 [ 511.254773][T10843] fuse: Bad value for 'group_id' [ 511.254787][T10843] fuse: Bad value for 'group_id' [ 511.469194][T10848] binder: 10846:10848 unknown command 0 [ 511.469208][T10848] binder: 10846:10848 ioctl c0306201 2000000004c0 returned -22 [ 512.349334][T10865] binder: 10863:10865 unknown command 0 [ 512.349347][T10865] binder: 10863:10865 ioctl c0306201 2000000004c0 returned -22 [ 512.554936][ T5261] 8021q: adding VLAN 0 to HW filter on device eth11 [ 513.271584][T10352] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 513.311377][T10352] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 513.372652][T10352] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 513.388621][T10352] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 514.209374][T10879] syz.0.1642 (10879): drop_caches: 2 [ 514.568701][T10352] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 514.703383][T10352] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 514.748148][T10352] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 514.909528][T10352] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 515.589320][T10896] binder: 10895:10896 unknown command 0 [ 515.589333][T10896] binder: 10895:10896 ioctl c0306201 2000000004c0 returned -22 [ 516.173120][ T8933] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 516.272260][T10352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.323160][ T8933] usb 1-1: Using ep0 maxpacket: 32 [ 516.329046][ T8933] usb 1-1: config 0 interface 0 has no altsetting 0 [ 516.329069][ T8933] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 516.329081][ T8933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.416780][ T8933] usb 1-1: config 0 descriptor?? [ 516.892086][ T8933] hid_parser_main: 10 callbacks suppressed [ 516.892129][ T8933] logitech 0003:046D:C295.0002: unknown main item tag 0x3 [ 516.892148][ T8933] logitech 0003:046D:C295.0002: unknown main item tag 0x0 [ 516.892162][ T8933] logitech 0003:046D:C295.0002: unknown main item tag 0x0 [ 516.892176][ T8933] logitech 0003:046D:C295.0002: unknown main item tag 0x0 [ 516.892190][ T8933] logitech 0003:046D:C295.0002: unknown main item tag 0x0 [ 516.892203][ T8933] logitech 0003:046D:C295.0002: unknown main item tag 0x0 [ 516.892217][ T8933] logitech 0003:046D:C295.0002: unknown main item tag 0x0 [ 516.892231][ T8933] logitech 0003:046D:C295.0002: unknown main item tag 0x0 [ 516.892244][ T8933] logitech 0003:046D:C295.0002: unknown main item tag 0x0 [ 516.892258][ T8933] logitech 0003:046D:C295.0002: unknown main item tag 0x0 [ 517.056403][ T8933] logitech 0003:046D:C295.0002: hidraw0: USB HID v0.81 Device [HID 046d:c295] on usb-dummy_hcd.0-1/input0 [ 517.056453][ T8933] logitech 0003:046D:C295.0002: no inputs found [ 517.390380][ T8933] usb 1-1: USB disconnect, device number 19 [ 517.536542][T10923] fido_id[10923]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 517.564564][T10915] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000016: 0000 [#1] SMP KASAN PTI SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 517.564668][T10915] KASAN: null-ptr-deref in range [0x00000000000000b0-0x00000000000000b7] [ 517.564744][T10915] CPU: 0 UID: 0 PID: 10915 Comm: syz.5.1651 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 517.564768][T10915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 517.564782][T10915] RIP: 0010:configfs_symlink+0x5fc/0x1030 [ 517.564895][T10915] Code: 03 42 80 3c 20 00 74 08 48 89 df e8 ae ef c2 ff 41 bc b0 00 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 86 ef c2 ff 4d 8b 2c 24 4c 89 ef e8 [ 517.564904][T10915] RSP: 0018:ffffc90004677c80 EFLAGS: 00010202 [ 517.564944][T10915] RAX: 0000000000000016 RBX: ffff88805d664a48 RCX: dffffc0000000000 [ 517.564944][T10915] RAX: 0000000000000016 RBX: ffff88805d664a48 RCX: dffffc0000000000 [ 517.564951][T10915] RDX: 0000000000000006 RSI: ffffffff8d884760 RDI: 00000000ffffffff [ 517.564959][T10915] RBP: ffffc90004677d88 R08: ffffffff8faf9237 R09: 1ffffffff1f5f246 [ 517.564966][T10915] R10: dffffc0000000000 R11: fffffbfff1f5f247 R12: 00000000000000b0 [ 517.564973][T10915] R13: 0000000000000000 R14: ffffffff8c2242a8 R15: 1ffff920008cefa0 [ 517.564980][T10915] FS: 00007f73074c46c0(0000) GS:ffff888125c42000(0000) knlGS:0000000000000000 [ 517.564988][T10915] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 517.564994][T10915] CR2: 00007fecf214de9c CR3: 0000000058f92000 CR4: 00000000003526f0 [ 517.565005][T10915] Call Trace: [ 517.565033][T10915] [ 517.565088][T10915] ? __pfx_configfs_symlink+0x10/0x10 [ 517.565125][T10915] ? bpf_lsm_inode_symlink+0x9/0x20 [ 517.565220][T10915] vfs_symlink+0x18b/0x330 [ 517.565290][T10915] ? security_path_symlink+0xfd/0x360 [ 517.565366][T10915] filename_symlinkat+0x1cd/0x420 [ 517.565380][T10915] ? __pfx_filename_symlinkat+0x10/0x10 [ 517.565394][T10915] ? do_getname+0x151/0x250 [ 517.565431][T10915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.565454][T10915] __se_sys_symlinkat+0x4e/0x2b0 [ 517.565468][T10915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.565477][T10915] do_syscall_64+0x174/0x580 [ 517.565540][T10915] ? trace_irq_disable+0x3b/0x140 [ 517.565581][T10915] ? clear_bhb_loop+0x40/0x90 [ 517.565592][T10915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.565601][T10915] RIP: 0033:0x7f73092ade99 [ 517.565614][T10915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.565622][T10915] RSP: 002b:00007f73074c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 517.565632][T10915] RAX: ffffffffffffffda RBX: 00007f7309536180 RCX: 00007f73092ade99 [ 517.565639][T10915] RDX: 0000200000000500 RSI: ffffffffffffff9c RDI: 0000200000000480 [ 517.565646][T10915] RBP: 00007f7309343eaf R08: 0000000000000000 R09: 0000000000000000 [ 517.565652][T10915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.565657][T10915] R13: 00007f7309536218 R14: 00007f7309536180 R15: 00007ffd2769c9c8 [ 517.565668][T10915] [ 517.565674][T10915] Modules linked in: [ 517.565705][T10915] ---[ end trace 0000000000000000 ]--- [ 517.663292][T10915] RIP: 0010:configfs_symlink+0x5fc/0x1030 [ 517.663320][T10915] Code: 03 42 80 3c 20 00 74 08 48 89 df e8 ae ef c2 ff 41 bc b0 00 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 86 ef c2 ff 4d 8b 2c 24 4c 89 ef e8 [ 517.663329][T10915] RSP: 0018:ffffc90004677c80 EFLAGS: 00010202 [ 517.663339][T10915] RAX: 0000000000000016 RBX: ffff88805d664a48 RCX: dffffc0000000000 [ 517.663346][T10915] RDX: 0000000000000006 RSI: ffffffff8d884760 RDI: 00000000ffffffff [ 517.663353][T10915] RBP: ffffc90004677d88 R08: ffffffff8faf9237 R09: 1ffffffff1f5f246 [ 517.663360][T10915] R10: dffffc0000000000 R11: fffffbfff1f5f247 R12: 00000000000000b0 [ 517.663367][T10915] R13: 0000000000000000 R14: ffffffff8c2242a8 R15: 1ffff920008cefa0 [ 517.663374][T10915] FS: 00007f73074c46c0(0000) GS:ffff888125c42000(0000) knlGS:0000000000000000 [ 517.663382][T10915] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 517.663389][T10915] CR2: 00007ffd37acfc59 CR3: 0000000058f92000 CR4: 00000000003526f0 [ 517.663400][T10915] Kernel panic - not syncing: Fatal exception [ 517.663461][T10915] Kernel Offset: disabled