last executing test programs: 25m24.412660357s ago: executing program 0 (id=1447): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 25m22.378866047s ago: executing program 0 (id=1450): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x3f}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20018804}, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 25m22.029273311s ago: executing program 0 (id=1451): openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='gfs2\x00', 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x32, 0x3, 0x0, 0x2, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in6=@empty, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2adc0, 0x1c1}, 0x18) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'M', 0x3a, 'N', 0x3a, './file0', 0x3a, [0x4f, 0x4f, 0x43, 0x46, 0x46, 0x43]}, 0x2f) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r5, 0xffffffffffffffff, 0x0) 25m20.952057417s ago: executing program 0 (id=1452): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x4, 0x9, 0x0, 0x1, 0xff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_exit\x00', r1, 0x0, 0x4000000000000004}, 0x18) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140), 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000400)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 25m20.739504078s ago: executing program 0 (id=1454): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 25m19.225450926s ago: executing program 0 (id=1458): socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000bc0)=ANY=[@ANYBLOB="120141018f991220720c0c0009d40102030109021b0001000010000904"], 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) 25m4.058365508s ago: executing program 32 (id=1458): socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000bc0)=ANY=[@ANYBLOB="120141018f991220720c0c0009d40102030109021b0001000010000904"], 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) 10.361411346s ago: executing program 3 (id=5065): socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x101001) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000002080)=""/4115) 10.299433902s ago: executing program 4 (id=5066): socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, 0x0, 0x0) dup3(r3, r4, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 8.764943902s ago: executing program 4 (id=5068): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), r0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$usbfs(0x0, 0x76, 0x101301) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() setrlimit(0x0, &(0x7f00000001c0)={0xfc3, 0x8}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r6, 0x0, &(0x7f0000000380)) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e6a8acbdffdbdf25010000000500040002000000346504b7216291bc538c050002000a00000014000700000000008000141c244bfa2994ad74e770aa2914380adb429629a5e65c9fd72a5c15ae22269891fbb191f9d4c651cf18efd219e604660a97479fc89758141e8a91a09aed5a3cd5ac9a4122531d8f980513"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 8.281210869s ago: executing program 3 (id=5069): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) getdents64(0xffffffffffffffff, 0x0, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 8.147788893s ago: executing program 1 (id=5070): syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1300, 0x6}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7.924422155s ago: executing program 3 (id=5071): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000180)=0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002940)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) pipe(0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 7.911322316s ago: executing program 1 (id=5072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x1d, 0x2, 0x6) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) accept4(0xffffffffffffffff, &(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x80, 0x80000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, 0x0, 0x0) 7.163025569s ago: executing program 4 (id=5073): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, 0x0, 0xc8) 6.304383663s ago: executing program 1 (id=5074): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 5.553277177s ago: executing program 3 (id=5075): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$netlink(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_clone3(&(0x7f0000000880)={0x102002080, 0x0, &(0x7f00000001c0), &(0x7f0000000300), {0x2c}, &(0x7f0000000380)=""/125, 0x7d, 0x0, &(0x7f0000000400)}, 0x58) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmc(0x0, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, 0x0, 0x0, 0x480e0) socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.434352276s ago: executing program 1 (id=5076): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) unshare(0x8000600) 4.310893618s ago: executing program 4 (id=5077): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0x9, @win={{0x9, 0x8, 0xf, 0xcc}, 0x0, 0xc618, 0x0, 0x5, 0x0, 0x9}}) connect$inet(r0, 0x0, 0x0) 3.969357562s ago: executing program 2 (id=5078): r0 = fsopen(&(0x7f0000000480)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x2f4, 0x4000, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r1, &(0x7f0000003680)={0x2020}, 0x2020) 3.06585981s ago: executing program 1 (id=5079): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b48", 0x22}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x0, 0x2000000000001]}}) 3.012433115s ago: executing program 4 (id=5080): syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1300, 0x6}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.923842404s ago: executing program 3 (id=5081): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000f0000000800000002"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) r2 = memfd_create(&(0x7f0000002bc0)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}\xf3\xf8\xab\xbd\xf03L\xb0\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xae\x8dVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x1f\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf49\xd2\xfb\x9e\xef\xabR\x88\x13\x9et\xcb\x82\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10\x00'/355, 0x5) fallocate(r2, 0x0, 0x0, 0x10001) finit_module(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x30314}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x20040014}, 0x40080) 2.873338849s ago: executing program 2 (id=5082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x1d, 0x2, 0x6) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) accept4(0xffffffffffffffff, &(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x80, 0x80000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, 0x0, 0x0) 2.86364806s ago: executing program 4 (id=5083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xb8}, 0x1, 0x0, 0x0, 0x20002010}, 0x0) 2.682115297s ago: executing program 1 (id=5084): socket(0x10, 0x3, 0x9) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x1, 0x80000) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x102, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) socket(0x200000000000011, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @loopback, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x35}}, 0xffffffffffffffff, 0x40099d}}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xfffffffd}, 0x8) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.807354273s ago: executing program 2 (id=5085): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r3, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="b80000"], 0x0, 0x0, 0x0}) 1.321701351s ago: executing program 3 (id=5086): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x0, 0x4, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x400001, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x4, 0x20001e5b, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000e00), 0x12) write(r2, 0x0, 0x0) 1.237394859s ago: executing program 2 (id=5087): syz_emit_vhci(&(0x7f0000019200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_oob_ext_data={{0x11}, {0x0, "4d6b870320fa349d37bb08113bd13619", "c1b820b0f45e16c86c7583726b2153d2", "b3e39f0de79dec99d0262a2ac9a7d3bc", "c4e161077a9ee1d5389f6864093c2731"}}}}, 0x47) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000, 0x1, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000b00)=0x6) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000100)=0x9) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f27, 0x2, 0x40000004, 0x2, 0x40005, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x24, 0x6a, 0x0, 0x7f, 0x10000003, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0x2000e26, 0x3, 0x1, 0x4086, 0x0, 0x4]}) 944.846688ms ago: executing program 2 (id=5088): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0x9, @win={{0x9, 0x8, 0xf, 0xcc}, 0x0, 0xc618, 0x0, 0x5, 0x0, 0x9}}) connect$inet(r0, 0x0, 0x0) 0s ago: executing program 2 (id=5089): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$usbfs(0x0, 0x76, 0x101301) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() setrlimit(0x0, &(0x7f00000001c0)={0xfc3, 0x8}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r5, 0x0, &(0x7f0000000380)) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="0100e6a8acbdffdbdf25010000000500040002000000346504b7216291bc538c050002000a00000014000700000000008000141c244bfa2994ad74e770aa2914380adb429629a5e65c9fd72a5c15ae22269891fbb191f9d4c651cf18efd219e604660a97479fc89758141e8a91a09aed5a3cd5ac9a4122531d8f980513"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) kernel console output (not intermixed with test programs): 1 limit=0 [ 1938.607721][T20395] syz.3.4018: attempt to access beyond end of device [ 1938.607721][T20395] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1938.620749][T20395] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1938.633778][T20395] syz.3.4018: attempt to access beyond end of device [ 1938.633778][T20395] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1938.646908][T20395] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1938.661364][T20395] syz.3.4018: attempt to access beyond end of device [ 1938.661364][T20395] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1938.676054][T20395] syz.3.4018: attempt to access beyond end of device [ 1938.676054][T20395] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1938.689200][T20395] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1938.699960][T20395] syz.3.4018: attempt to access beyond end of device [ 1938.699960][T20395] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1938.713369][T20395] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1938.726685][T20395] syz.3.4018: attempt to access beyond end of device [ 1938.726685][T20395] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1938.740840][T20395] syz.3.4018: attempt to access beyond end of device [ 1938.740840][T20395] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1938.754038][T20395] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1938.764639][T20395] syz.3.4018: attempt to access beyond end of device [ 1938.764639][T20395] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1938.778236][T20395] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1938.790611][T20395] syz.3.4018: attempt to access beyond end of device [ 1938.790611][T20395] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1938.804540][T20395] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1938.815012][T20395] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1938.824675][T20395] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1939.057297][ T5826] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1939.292540][ T5826] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1939.421690][ T5826] usb 2-1: string descriptor 0 read error: -71 [ 1939.629622][ T5826] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1939.642724][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.680465][ T5826] usb 2-1: config 0 descriptor?? [ 1939.774384][ T5826] usb 2-1: can't set config #0, error -71 [ 1939.852279][ T5826] usb 2-1: USB disconnect, device number 60 [ 1942.479438][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 1942.479453][ T28] audit: type=1326 audit(2000000040.690:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20424 comm="syz.2.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8461b8efc9 code=0x7ffc0000 [ 1949.009538][T20464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4038'. [ 1949.047258][T20464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4038'. [ 1954.060421][T20500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4049'. [ 1954.099752][T20500] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4049'. [ 1959.072938][T20549] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1959.072938][T20549] program syz.4.4062 not setting count and/or reply_len properly [ 1963.198870][T20587] omfs: Invalid superblock (0) [ 1965.536468][T20603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4077'. [ 1967.202534][T10439] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1968.866458][T10439] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1968.883374][T10439] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.921658][T10439] usb 5-1: config 0 descriptor?? [ 1968.956325][T10439] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1969.598312][T10439] gspca_cpia1: usb_control_msg 01, error -71 [ 1969.608689][T10439] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 1969.655943][T10439] usb 5-1: USB disconnect, device number 26 [ 1971.509112][T20647] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4092'. [ 1971.518555][T20647] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4092'. [ 1971.579583][T20648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4091'. [ 1972.206520][T20647] bridge0: entered promiscuous mode [ 1972.256101][T20647] ip6gretap0: entered promiscuous mode [ 1973.432729][T20644] Bluetooth: hci2: command 0x0406 tx timeout [ 1976.386153][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.395083][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1978.158276][T20684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4103'. [ 1981.459578][T20712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4113'. [ 1983.208172][T20732] CUSE: unknown device info "" [ 1983.225823][T20732] CUSE: zero length info key specified [ 1984.972007][T20747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4122'. [ 1990.252158][T20791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4136'. [ 1990.732685][T14882] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1990.958117][T14882] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1990.969399][T14882] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1990.997605][T14882] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1991.009559][T14882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.018805][T14882] usb 2-1: Product: syz [ 1991.024989][T14882] usb 2-1: Manufacturer: syz [ 1991.030047][T14882] usb 2-1: SerialNumber: syz [ 1991.056835][T14882] usb 2-1: config 0 descriptor?? [ 1991.280180][T14882] usb 2-1: USB disconnect, device number 61 [ 1992.456268][T20813] omfs: Invalid superblock (0) [ 1993.211285][ T5843] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1994.780018][ T5843] usb 4-1: device descriptor read/all, error -71 [ 1994.891367][T20830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4147'. [ 1994.926534][T20831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4145'. [ 1997.106534][ T5843] IPVS: starting estimator thread 0... [ 1997.496031][T20852] IPVS: using max 17 ests per chain, 40800 per kthread [ 1998.300177][T20862] omfs: Invalid superblock (0) [ 1999.592553][T10439] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2000.236712][T10439] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2000.267314][T10439] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 2000.283828][T10439] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 2000.297840][T10439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.312075][T10439] usb 4-1: Product: syz [ 2000.319085][T10439] usb 4-1: Manufacturer: syz [ 2000.324144][T10439] usb 4-1: SerialNumber: syz [ 2000.330871][T10439] usb 4-1: config 0 descriptor?? [ 2000.532501][ T7432] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2000.608952][T10439] usb 4-1: USB disconnect, device number 56 [ 2000.812948][T14882] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 2000.883022][ T7432] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2000.921536][ T7432] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.958660][ T7432] usb 5-1: Product: syz [ 2000.997601][ T7432] usb 5-1: Manufacturer: syz [ 2001.024001][ T7432] usb 5-1: SerialNumber: syz [ 2001.082493][T14882] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2001.100760][T14882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2001.116747][T14882] usb 2-1: Product: syz [ 2001.121356][T14882] usb 2-1: Manufacturer: syz [ 2001.152701][T14882] usb 2-1: SerialNumber: syz [ 2001.181201][T14882] usb 2-1: config 0 descriptor?? [ 2001.193128][ T7432] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2001.247420][ T9817] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2001.341425][T20881] CUSE: unknown device info "" [ 2001.358147][T20881] CUSE: zero length info key specified [ 2001.428174][T14882] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2001.606465][T12532] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 2001.992943][ T7432] usb 5-1: USB disconnect, device number 27 [ 2002.316290][ T9817] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2002.439176][ T9817] ath9k_htc: Failed to initialize the device [ 2002.519480][ T7432] usb 5-1: ath9k_htc: USB layer deinitialized [ 2002.622442][T14882] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 2002.645830][T14882] usb 2-1: USB disconnect, device number 62 [ 2003.383540][T20905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4167'. [ 2004.280032][T20915] CUSE: unknown device info "" [ 2004.297689][T20915] CUSE: zero length info key specified [ 2004.693851][T20924] omfs: Invalid superblock (0) [ 2005.474894][ T9817] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2005.921324][ T9817] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2005.999528][ T9817] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 2006.388638][T20937] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4175'. [ 2006.663142][ T9817] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 2006.672295][ T9817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2006.703558][ T9817] usb 5-1: Product: syz [ 2006.707799][ T9817] usb 5-1: Manufacturer: syz [ 2006.712908][ T9817] usb 5-1: SerialNumber: syz [ 2006.733568][ T9817] usb 5-1: config 0 descriptor?? [ 2007.347943][ T9817] usb 5-1: USB disconnect, device number 28 [ 2007.579743][T20954] CUSE: unknown device info "" [ 2007.600103][T20954] CUSE: zero length info key specified [ 2009.232489][T20975] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4189'. [ 2010.658889][T20983] bio_check_eod: 2 callbacks suppressed [ 2010.658927][T20983] syz.1.4191: attempt to access beyond end of device [ 2010.658927][T20983] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 2010.679013][T20983] syz.1.4191: attempt to access beyond end of device [ 2010.679013][T20983] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 2010.692499][T20983] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 2010.704000][T20983] syz.1.4191: attempt to access beyond end of device [ 2010.704000][T20983] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 2010.717136][T20983] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 2010.731815][T20983] syz.1.4191: attempt to access beyond end of device [ 2010.731815][T20983] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 2010.746127][T20983] syz.1.4191: attempt to access beyond end of device [ 2010.746127][T20983] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 2010.759971][T20983] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 2010.771011][T20983] syz.1.4191: attempt to access beyond end of device [ 2010.771011][T20983] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 2010.784421][T20983] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 2010.797382][T20983] syz.1.4191: attempt to access beyond end of device [ 2010.797382][T20983] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 2010.811206][T20983] syz.1.4191: attempt to access beyond end of device [ 2010.811206][T20983] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 2010.824496][T20983] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 2010.834990][T20983] syz.1.4191: attempt to access beyond end of device [ 2010.834990][T20983] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 2010.848188][T20983] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 2010.861297][T20983] syz.1.4191: attempt to access beyond end of device [ 2010.861297][T20983] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2010.875104][T20983] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 2010.885516][T20983] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 2010.895404][T20983] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 2011.298938][T20986] CUSE: unknown device info "" [ 2011.351837][T20986] CUSE: zero length info key specified [ 2012.623034][ T7432] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2012.938685][T21014] CUSE: unknown device info "" [ 2012.943860][T21014] CUSE: zero length info key specified [ 2013.065672][ T7432] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2013.076906][ T7432] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 2013.088732][ T7432] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 2013.114400][ T7432] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.136455][ T7432] usb 3-1: Product: syz [ 2013.141902][ T7432] usb 3-1: Manufacturer: syz [ 2013.160395][ T7432] usb 3-1: SerialNumber: syz [ 2013.226432][ T7432] usb 3-1: config 0 descriptor?? [ 2013.544184][ T9817] usb 3-1: USB disconnect, device number 46 [ 2015.297068][T21037] input: syz1 as /devices/virtual/input/input20 [ 2017.016614][T21052] CUSE: unknown device info "" [ 2017.052301][T21052] CUSE: zero length info key specified [ 2019.386698][T21076] omfs: Invalid superblock (0) [ 2019.941772][T21083] CUSE: unknown device info "" [ 2019.946819][T21083] CUSE: zero length info key specified [ 2020.132481][T10438] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2021.337084][T10438] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2021.372638][T10438] usb 3-1: can't read configurations, error -71 [ 2022.187784][T21107] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4229'. [ 2023.152813][ T7432] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2023.424294][ T7432] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 2023.571676][ T7432] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2023.725343][ T7432] usb 3-1: config 0 descriptor?? [ 2023.773051][T14882] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2023.836177][ T7432] gspca_main: spca508-2.14.0 probing 8086:0110 [ 2023.977643][T14882] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2024.009340][T14882] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 2024.016457][ T7432] gspca_spca508: reg_read err -32 [ 2024.037676][ T7432] gspca_spca508: reg_read err -32 [ 2024.048145][T14882] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 2024.065166][T14882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2024.077472][T14882] usb 4-1: Product: syz [ 2024.081958][T14882] usb 4-1: Manufacturer: syz [ 2024.086909][T14882] usb 4-1: SerialNumber: syz [ 2024.095520][T14882] usb 4-1: config 0 descriptor?? [ 2024.318546][T14882] usb 4-1: USB disconnect, device number 57 [ 2025.095802][ T7432] gspca_spca508: reg_read err -71 [ 2025.109769][ T7432] gspca_spca508: reg_read err -71 [ 2025.115458][ T7432] gspca_spca508: reg write: error -71 [ 2025.121309][ T7432] spca508: probe of 3-1:0.0 failed with error -71 [ 2025.160405][ T7432] usb 3-1: USB disconnect, device number 49 [ 2025.201261][T21141] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4241'. [ 2028.326871][T21179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4253'. [ 2028.897554][ T7457] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 2029.390933][T21194] omfs: Invalid superblock (0) [ 2030.143196][ T7457] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2030.166212][ T7457] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 2030.178646][ T7457] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2030.187896][ T7457] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2030.685147][ T7457] usb 2-1: config 0 descriptor?? [ 2030.779336][ T7457] usb 2-1: can't set config #0, error -71 [ 2030.798043][ T7457] usb 2-1: USB disconnect, device number 63 [ 2031.411586][T21213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4264'. [ 2033.056472][T21231] omfs: Invalid superblock (0) [ 2033.497678][T21229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4269'. [ 2033.784279][T21240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4273'. [ 2035.545219][T21261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4276'. [ 2036.446860][T21267] omfs: Invalid superblock (0) [ 2038.017647][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.025879][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.701722][T21277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4283'. [ 2039.178780][T21296] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4289'. [ 2039.802148][T21297] omfs: Invalid superblock (0) [ 2039.850200][T21299] CUSE: unknown device info "" [ 2039.867437][T21299] CUSE: zero length info key specified [ 2040.415086][T21312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4297'. [ 2040.440850][T21307] bond1: entered promiscuous mode [ 2040.450527][T21307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2040.470949][T21307] bond0: (slave bond1): Enslaving as an active interface with an up link [ 2040.777413][T21321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4296'. [ 2041.812998][T21332] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4302'. [ 2042.411052][T12532] Bluetooth: hci2: unexpected event for opcode 0x0c7d [ 2044.711432][T21353] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4310'. [ 2044.792514][T20823] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2044.987909][T20823] usb 2-1: device descriptor read/64, error -71 [ 2045.343120][T20823] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2045.512659][T20823] usb 2-1: device descriptor read/64, error -71 [ 2045.632685][T20823] usb usb2-port1: attempt power cycle [ 2046.322439][T20823] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2046.567484][T20823] usb 2-1: device descriptor read/8, error -71 [ 2046.640962][T12532] Bluetooth: hci4: unexpected event for opcode 0x0c7d [ 2048.184216][T21387] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4321'. [ 2048.193984][T21387] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4321'. [ 2048.953430][ T5995] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2049.184752][ T5995] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2049.319233][ T5995] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2049.471917][T21398] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4325'. [ 2049.510520][ T5995] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2049.743392][T20823] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2050.012440][T20823] usb 4-1: device descriptor read/64, error -71 [ 2051.010523][T20823] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2051.141809][ T5995] ip6gretap0 (unregistering): left promiscuous mode [ 2051.162772][T20823] usb 4-1: device descriptor read/64, error -71 [ 2051.884004][T20823] usb usb4-port1: attempt power cycle [ 2051.945911][T21414] fuse: Bad value for 'fd' [ 2052.236242][T20644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2052.249860][T20644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2052.261786][T20644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2052.288177][T20644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2052.316384][T20644] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2052.340127][T20644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2052.355142][T20823] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2052.443913][T21416] comedi comedi3: Buffer allocation failed [ 2052.607686][T20823] usb 4-1: device descriptor read/8, error -71 [ 2053.426452][T21428] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4335'. [ 2053.915894][T21428] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4335'. [ 2054.464332][T20644] Bluetooth: hci2: command tx timeout [ 2056.114980][T21418] chnl_net:caif_netlink_parms(): no params data found [ 2056.282826][T20644] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 2056.542701][T20644] Bluetooth: hci2: command tx timeout [ 2056.578347][T21418] bridge0: port 1(bridge_slave_0) entered blocking state [ 2056.585773][T21418] bridge0: port 1(bridge_slave_0) entered disabled state [ 2056.593106][T21418] bridge_slave_0: entered allmulticast mode [ 2056.600677][T21418] bridge_slave_0: entered promiscuous mode [ 2056.611226][ T5995] bridge0: left promiscuous mode [ 2056.632066][ T5995] hsr_slave_0: left promiscuous mode [ 2056.652229][ T5995] hsr_slave_1: left promiscuous mode [ 2056.659279][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2056.672482][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2056.690654][ T5995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2056.698522][ T5995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2056.707119][ T5995] bridge_slave_1: left allmulticast mode [ 2056.712895][ T5995] bridge_slave_1: left promiscuous mode [ 2056.718729][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 2056.729412][ T27] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2056.741646][ T5995] bridge_slave_0: left allmulticast mode [ 2056.752401][ T5995] bridge_slave_0: left promiscuous mode [ 2056.762519][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 2056.816515][ T5995] veth1_macvtap: left promiscuous mode [ 2056.822254][ T5995] veth0_macvtap: left promiscuous mode [ 2056.829797][ T5995] veth1_vlan: left promiscuous mode [ 2056.836074][ T5995] veth0_vlan: left promiscuous mode [ 2056.892953][ T27] usb 4-1: device descriptor read/64, error -71 [ 2057.222654][ T27] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2057.396535][ T27] usb 4-1: device descriptor read/64, error -71 [ 2057.547763][ T27] usb usb4-port1: attempt power cycle [ 2057.982643][ T27] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2058.019692][ T27] usb 4-1: device descriptor read/8, error -71 [ 2058.131057][ T5995] team0 (unregistering): Port device team_slave_1 removed [ 2058.228749][ T5995] team0 (unregistering): Port device team_slave_0 removed [ 2058.300529][ T5995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2058.322707][ T27] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2058.385147][ T27] usb 4-1: device descriptor read/8, error -71 [ 2058.407562][ T5995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2058.503525][ T27] usb usb4-port1: unable to enumerate USB device [ 2058.632054][T20644] Bluetooth: hci2: command tx timeout [ 2059.273868][ T5995] bond0 (unregistering): Released all slaves [ 2059.408864][T21418] bridge0: port 2(bridge_slave_1) entered blocking state [ 2059.421231][T21418] bridge0: port 2(bridge_slave_1) entered disabled state [ 2059.428865][T21418] bridge_slave_1: entered allmulticast mode [ 2059.440493][T21418] bridge_slave_1: entered promiscuous mode [ 2059.580321][T21418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2059.641710][T21418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2059.765254][T21418] team0: Port device team_slave_0 added [ 2059.791359][T21418] team0: Port device team_slave_1 added [ 2060.044862][T21418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2060.353905][T21418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2060.629141][T21418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2060.712522][T20644] Bluetooth: hci2: command tx timeout [ 2060.718569][T21418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2060.766418][T21418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2060.865276][T21418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2060.933150][ T5995] IPVS: stop unused estimator thread 0... [ 2061.038556][T21418] hsr_slave_0: entered promiscuous mode [ 2061.053219][T21418] hsr_slave_1: entered promiscuous mode [ 2061.059818][T21418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2061.068806][T21418] Cannot create hsr debugfs directory [ 2063.073931][T21514] omfs: Invalid superblock (0) [ 2063.343879][T20644] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 2064.700056][T21418] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2064.767669][T21418] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2064.826246][T21418] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2065.359035][T21418] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2065.546207][T21418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2065.596802][T21418] 8021q: adding VLAN 0 to HW filter on device team0 [ 2065.652307][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 2065.659605][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2065.708685][T11474] bridge0: port 2(bridge_slave_1) entered blocking state [ 2065.715935][T11474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2066.459234][T21547] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4367'. [ 2066.713192][ T5826] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2066.963175][ T5826] usb 3-1: Using ep0 maxpacket: 8 [ 2067.014712][ T5826] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2067.023404][ T5826] usb 3-1: config 179 has no interface number 0 [ 2067.030252][ T5826] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2067.041685][ T5826] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2067.066700][ T5826] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2067.085898][ T5826] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2067.103653][ T5826] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2067.117311][ T5826] usb 3-1: config 179 interface 65 has no altsetting 0 [ 2067.124871][ T5826] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2067.134652][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2067.289139][ T5826] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input22 [ 2067.393175][T21418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2067.575920][T10438] usb 3-1: USB disconnect, device number 50 [ 2067.576068][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2067.595581][T10438] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2067.883784][T21567] omfs: Invalid superblock (0) [ 2068.269202][T21418] veth0_vlan: entered promiscuous mode [ 2068.289186][T21418] veth1_vlan: entered promiscuous mode [ 2068.331419][T21418] veth0_macvtap: entered promiscuous mode [ 2068.342140][T21418] veth1_macvtap: entered promiscuous mode [ 2068.365158][T21418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2068.376231][T21418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2068.386951][T21418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2068.397611][T21418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2068.413013][T21418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2068.437347][T21418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2068.542592][T21418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2068.557260][T21418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2068.572560][T21418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2068.588654][T21418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2068.602281][T21418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2068.621169][T21418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2068.648668][T21418] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2068.779285][T21418] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2068.791671][T21418] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2068.801676][T21418] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2068.874985][T21578] bio_check_eod: 2 callbacks suppressed [ 2068.875023][T21578] syz.3.4373: attempt to access beyond end of device [ 2068.875023][T21578] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 2068.895254][T21578] syz.3.4373: attempt to access beyond end of device [ 2068.895254][T21578] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 2068.908311][T21578] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 2068.921374][T21578] syz.3.4373: attempt to access beyond end of device [ 2068.921374][T21578] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 2068.934519][T21578] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 2068.949320][T21578] syz.3.4373: attempt to access beyond end of device [ 2068.949320][T21578] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 2068.963679][T21578] syz.3.4373: attempt to access beyond end of device [ 2068.963679][T21578] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 2068.976857][T21578] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 2068.987683][T21578] syz.3.4373: attempt to access beyond end of device [ 2068.987683][T21578] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 2069.000919][T21578] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 2069.014213][T21578] syz.3.4373: attempt to access beyond end of device [ 2069.014213][T21578] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 2069.028818][T21578] syz.3.4373: attempt to access beyond end of device [ 2069.028818][T21578] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 2069.042163][T21578] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 2069.052763][T21578] syz.3.4373: attempt to access beyond end of device [ 2069.052763][T21578] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 2069.065932][T21578] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 2069.078141][T21578] syz.3.4373: attempt to access beyond end of device [ 2069.078141][T21578] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2069.091968][T21578] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 2069.102810][T21578] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 2069.112466][T21578] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 2069.376954][T21576] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4372'. [ 2069.558665][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2069.627477][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2069.655099][ T1327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2069.704256][ T1327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2072.190861][T21601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4380'. [ 2073.004364][T21613] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4384'. [ 2075.507939][T21631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4389'. [ 2076.489744][T21647] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4394'. [ 2076.803703][T21650] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4395'. [ 2077.599575][T21657] bio_check_eod: 2 callbacks suppressed [ 2077.599613][T21657] syz.3.4397: attempt to access beyond end of device [ 2077.599613][T21657] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 2077.619826][T21657] syz.3.4397: attempt to access beyond end of device [ 2077.619826][T21657] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 2077.633695][T21657] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 2077.881279][T21657] syz.3.4397: attempt to access beyond end of device [ 2077.881279][T21657] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 2077.894696][T21657] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 2077.930886][T21657] syz.3.4397: attempt to access beyond end of device [ 2077.930886][T21657] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 2077.951969][T21657] syz.3.4397: attempt to access beyond end of device [ 2077.951969][T21657] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 2077.965343][T21657] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 2077.985189][T21657] syz.3.4397: attempt to access beyond end of device [ 2077.985189][T21657] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 2077.999639][T21657] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 2078.033055][T21657] syz.3.4397: attempt to access beyond end of device [ 2078.033055][T21657] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 2078.057761][T21657] syz.3.4397: attempt to access beyond end of device [ 2078.057761][T21657] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 2078.070924][T21657] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 2078.080622][T21657] syz.3.4397: attempt to access beyond end of device [ 2078.080622][T21657] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 2078.093704][T21657] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 2078.103847][T21657] syz.3.4397: attempt to access beyond end of device [ 2078.103847][T21657] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2078.116883][T21657] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 2078.126646][T21657] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 2078.136596][T21657] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 2079.298153][T21670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4401'. [ 2080.383874][T20823] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2081.330996][T20823] usb 5-1: no configurations [ 2081.388092][T20823] usb 5-1: can't read configurations, error -22 [ 2081.572886][T20823] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2081.913462][T20823] usb 5-1: no configurations [ 2081.918228][T20823] usb 5-1: can't read configurations, error -22 [ 2082.088694][T20823] usb usb5-port1: attempt power cycle [ 2082.675630][T20823] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2082.844147][T20823] usb 5-1: no configurations [ 2082.850548][T20823] usb 5-1: can't read configurations, error -22 [ 2082.942653][T21706] omfs: Invalid superblock (0) [ 2083.726734][T20823] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2083.858604][T21713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4413'. [ 2083.975956][T20823] usb 5-1: device not accepting address 32, error -71 [ 2084.013270][T20823] usb usb5-port1: unable to enumerate USB device [ 2085.994178][T20644] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 2086.521043][T21742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4422'. [ 2086.864538][ T9817] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2087.288150][T21755] comedi comedi0: Minor 3 specified more than once! [ 2088.044139][ T9817] usb 3-1: Using ep0 maxpacket: 16 [ 2088.071534][ T9817] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2088.097822][ T9817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2088.126096][ T9817] usb 3-1: config 0 has no interface number 0 [ 2088.151614][ T9817] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 2088.168222][ T9817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2088.178775][ T9817] usb 3-1: Product: syz [ 2088.188224][ T9817] usb 3-1: Manufacturer: syz [ 2088.193611][ T9817] usb 3-1: SerialNumber: syz [ 2088.200977][ T9817] usb 3-1: config 0 descriptor?? [ 2088.216486][ T9817] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 2088.873388][ T9817] snd-usb-audio: probe of 3-1:0.1 failed with error -2 [ 2088.892075][ T9817] usb 3-1: USB disconnect, device number 51 [ 2091.257784][T21794] omfs: Invalid superblock (0) [ 2095.983447][T21829] CUSE: unknown device info "" [ 2095.989936][T21829] CUSE: zero length info key specified [ 2096.409387][T20644] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 2099.266820][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.733323][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2103.897074][T20644] Bluetooth: hci4: unexpected event for opcode 0x0c7d [ 2107.206142][T21937] omfs: Invalid superblock (0) [ 2108.335853][T21946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4483'. [ 2108.930390][T21956] CUSE: unknown device info "" [ 2108.937758][T21956] CUSE: zero length info key specified [ 2112.055888][T21984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4496'. [ 2112.084402][T21986] loop4: detected capacity change from 0 to 7 [ 2112.118711][T21986] Dev loop4: unable to read RDB block 7 [ 2112.134539][T21986] loop4: unable to read partition table [ 2112.151872][T21986] loop4: partition table beyond EOD, truncated [ 2112.169522][T21986] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2112.442455][T21991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4498'. [ 2114.866269][T22018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4507'. [ 2115.292743][T22022] omfs: Invalid superblock (0) [ 2118.016548][T22048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4516'. [ 2124.722889][T10438] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2125.205690][T10438] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2126.032422][T10438] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2126.040493][T10438] usb 2-1: Product: syz [ 2126.053199][T10438] usb 2-1: Manufacturer: syz [ 2126.058378][T10438] usb 2-1: SerialNumber: syz [ 2126.076693][T10438] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2126.125087][ T7457] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2126.874266][ T9817] usb 2-1: USB disconnect, device number 68 [ 2127.184749][ T7457] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2127.591208][ T7457] ath9k_htc: Failed to initialize the device [ 2127.945449][ T9817] usb 2-1: ath9k_htc: USB layer deinitialized [ 2130.455227][T22162] omfs: Invalid superblock (0) [ 2131.187174][T14403] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2131.253003][T20823] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2131.465992][T20823] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2131.477669][T20823] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2131.492846][T20823] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2131.508396][T20823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2131.547888][T20823] usb 4-1: config 0 descriptor?? [ 2131.760989][T14403] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2131.856470][T14403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2131.888532][T14403] usb 5-1: Product: syz [ 2131.894360][T14403] usb 5-1: Manufacturer: syz [ 2131.904231][T14403] usb 5-1: SerialNumber: syz [ 2131.925209][T14403] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2131.951199][ T9817] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2132.727807][T14882] usb 5-1: USB disconnect, device number 33 [ 2132.802825][T22173] CUSE: unknown device info "" [ 2132.812364][T22173] CUSE: zero length info key specified [ 2133.103031][ T9817] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2133.129419][ T9817] ath9k_htc: Failed to initialize the device [ 2133.140557][T14882] usb 5-1: ath9k_htc: USB layer deinitialized [ 2133.149748][T14403] usb 4-1: USB disconnect, device number 66 [ 2135.442712][T14403] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2136.158974][T10438] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2136.352565][T10438] usb 2-1: Using ep0 maxpacket: 16 [ 2136.360385][T10438] usb 2-1: config 0 has too many interfaces: 243, using maximum allowed: 32 [ 2136.373631][T10438] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 243 [ 2136.384967][T14403] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2136.395321][T10438] usb 2-1: config 0 has no interface number 0 [ 2136.401898][T14403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2136.414173][T14403] usb 4-1: Product: syz [ 2136.418670][T14403] usb 4-1: Manufacturer: syz [ 2136.425087][T10438] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 2136.437855][T14403] usb 4-1: SerialNumber: syz [ 2136.443278][T10438] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2136.453773][T10438] usb 2-1: Product: syz [ 2136.459846][T10438] usb 2-1: Manufacturer: syz [ 2136.465908][T14403] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2136.478157][T10438] usb 2-1: SerialNumber: syz [ 2136.487539][ T7457] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2136.525547][T10438] usb 2-1: config 0 descriptor?? [ 2136.535748][T10438] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 2136.542572][ T9817] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2136.751595][ T9817] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2136.781611][T10438] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0x00, error -71) [ 2136.800063][ T9817] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2136.824850][T10438] gspca_xirlink_cit: Failed to write a register (index 0x0112, value 0x01, error -71) [ 2136.834865][ T9817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2136.853589][T10438] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x00, error -71) [ 2136.960789][ T9817] usb 3-1: config 0 descriptor?? [ 2137.128015][T10438] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -71) [ 2137.137508][T14882] usb 4-1: USB disconnect, device number 67 [ 2137.258415][T10438] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x00, error -71) [ 2137.417468][T10438] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -71) [ 2137.460904][T10438] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -71) [ 2137.484349][T10438] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 2137.506193][T10438] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 2137.539892][T10438] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 2137.551549][T10438] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 2137.571928][T10438] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 2137.581983][T22220] CUSE: unknown device info "" [ 2137.583388][T10438] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 2137.590581][T22220] CUSE: zero length info key specified [ 2137.596876][ T7457] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2137.610897][T10438] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 2137.622412][ T7457] ath9k_htc: Failed to initialize the device [ 2137.630511][T10438] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 2137.632702][T14882] usb 4-1: ath9k_htc: USB layer deinitialized [ 2137.647093][T10438] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 2137.661640][T10438] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 2137.673267][T10438] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 2137.684029][T10438] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 2137.697579][T10438] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24 [ 2137.721600][T10438] usb 2-1: USB disconnect, device number 69 [ 2139.756317][T22238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4570'. [ 2139.859947][T14882] usb 3-1: USB disconnect, device number 52 [ 2142.431024][T22258] CUSE: unknown device info "" [ 2142.447102][T22258] CUSE: zero length info key specified [ 2142.943124][ T5843] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2143.137072][ T5843] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2143.146559][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2143.155522][ T5843] usb 4-1: Product: syz [ 2143.160489][ T5843] usb 4-1: Manufacturer: syz [ 2143.167950][ T5843] usb 4-1: SerialNumber: syz [ 2143.180283][ T5843] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2143.204189][T14882] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2143.624289][T22216] usb 4-1: USB disconnect, device number 68 [ 2144.333955][T14882] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2144.414723][T14882] ath9k_htc: Failed to initialize the device [ 2144.477493][T22216] usb 4-1: ath9k_htc: USB layer deinitialized [ 2146.161985][T22295] omfs: Invalid superblock (0) [ 2147.151041][T22297] CUSE: unknown device info "" [ 2147.166944][T22297] CUSE: zero length info key specified [ 2149.663678][T22216] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2150.699533][T22330] omfs: Invalid superblock (0) [ 2151.127051][T22216] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2151.205757][T22216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2151.304806][T22216] usb 5-1: Product: syz [ 2151.791001][T22216] usb 5-1: Manufacturer: syz [ 2151.816656][T22216] usb 5-1: SerialNumber: syz [ 2151.888322][T22216] usb 5-1: can't set config #1, error -71 [ 2151.917106][T22216] usb 5-1: USB disconnect, device number 34 [ 2155.227636][T22365] omfs: Invalid superblock (0) [ 2157.216161][T22377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4610'. [ 2158.192589][ T9817] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2158.736857][ T9817] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2158.746055][ T9817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.446179][ T9817] usb 3-1: config 0 descriptor?? [ 2159.455536][ T9817] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2159.911865][ T9817] gspca_cpia1: usb_control_msg 03, error -32 [ 2159.926201][ T9817] gspca_cpia1: usb_control_msg 03, error -71 [ 2159.937023][ T9817] gspca_cpia1: usb_control_msg 01, error -71 [ 2159.951907][ T9817] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 2159.963458][ T9817] usb 3-1: USB disconnect, device number 53 [ 2160.095085][T22414] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4624'. [ 2160.796018][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.803126][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.809511][ T9817] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2161.012417][ T9817] usb 2-1: Using ep0 maxpacket: 8 [ 2161.030136][ T9817] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 2161.039921][ T9817] usb 2-1: config 179 has no interface number 0 [ 2161.049632][ T9817] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2161.061453][ T9817] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2161.075541][ T9817] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2161.090685][ T9817] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2161.101731][ T9817] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2161.117003][ T9817] usb 2-1: config 179 interface 65 has no altsetting 0 [ 2161.124845][ T9817] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2161.135112][ T9817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2161.177240][ T9817] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input25 [ 2161.378682][ T9817] usb 2-1: USB disconnect, device number 70 [ 2161.384778][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2161.402842][ T9817] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2162.053348][T22440] bio_check_eod: 2 callbacks suppressed [ 2162.053365][T22440] syz.2.4628: attempt to access beyond end of device [ 2162.053365][T22440] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 2162.072621][T22440] syz.2.4628: attempt to access beyond end of device [ 2162.072621][T22440] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 2162.085953][T22440] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2162.095855][T22440] syz.2.4628: attempt to access beyond end of device [ 2162.095855][T22440] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 2162.109706][T22440] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2162.120415][T22440] syz.2.4628: attempt to access beyond end of device [ 2162.120415][T22440] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 2162.133713][T22440] syz.2.4628: attempt to access beyond end of device [ 2162.133713][T22440] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 2162.146797][T22440] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2162.156661][T22440] syz.2.4628: attempt to access beyond end of device [ 2162.156661][T22440] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 2162.170298][T22440] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2162.180935][T22440] syz.2.4628: attempt to access beyond end of device [ 2162.180935][T22440] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 2162.194157][T22440] syz.2.4628: attempt to access beyond end of device [ 2162.194157][T22440] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 2162.207953][T22440] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2162.217842][T22440] syz.2.4628: attempt to access beyond end of device [ 2162.217842][T22440] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 2162.231141][T22440] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2162.241236][T22440] syz.2.4628: attempt to access beyond end of device [ 2162.241236][T22440] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2162.254369][T22440] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2162.264253][T22440] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2162.274130][T22440] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 2162.564140][T22446] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4634'. [ 2163.653010][ T7457] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2163.945283][ T7457] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2163.961897][ T7457] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2163.993060][ T7457] usb 5-1: config 0 descriptor?? [ 2164.008918][ T7457] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2164.416353][ T7457] gspca_cpia1: usb_control_msg 03, error -32 [ 2164.507911][ T7457] gspca_cpia1: usb_control_msg 03, error -71 [ 2164.518513][ T7457] gspca_cpia1: usb_control_msg 01, error -71 [ 2164.535598][ T7457] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 2164.577591][ T7457] usb 5-1: USB disconnect, device number 35 [ 2164.962505][T14882] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2165.182435][T14882] usb 4-1: Using ep0 maxpacket: 8 [ 2165.232639][T14882] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 2165.247908][T14882] usb 4-1: config 179 has no interface number 0 [ 2165.255808][T14882] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2165.273222][T14882] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2165.295563][T14882] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2165.317253][T14882] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2165.362485][T14882] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2165.403399][T14882] usb 4-1: config 179 interface 65 has no altsetting 0 [ 2165.415643][T14882] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2165.424881][T14882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2165.533784][T14882] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input26 [ 2165.701070][ T7432] usb 4-1: USB disconnect, device number 69 [ 2165.701115][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2165.715399][ T7432] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2167.040611][T22494] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2167.050574][T22494] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2167.060970][T22494] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2167.070664][T22494] bio_check_eod: 7 callbacks suppressed [ 2167.070675][T22494] syz.2.4647: attempt to access beyond end of device [ 2167.070675][T22494] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 2167.089228][T22494] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2167.099271][T22494] syz.2.4647: attempt to access beyond end of device [ 2167.099271][T22494] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 2167.112234][T22494] syz.2.4647: attempt to access beyond end of device [ 2167.112234][T22494] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 2167.125728][T22494] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2167.135391][T22494] syz.2.4647: attempt to access beyond end of device [ 2167.135391][T22494] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 2167.148454][T22494] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2167.158313][T22494] syz.2.4647: attempt to access beyond end of device [ 2167.158313][T22494] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2167.171271][T22494] syz.2.4647: attempt to access beyond end of device [ 2167.171271][T22494] nbd2: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 2167.184262][T22494] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2167.194012][T22494] syz.2.4647: attempt to access beyond end of device [ 2167.194012][T22494] nbd2: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 2167.207017][T22494] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2167.216502][T22494] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 2168.217264][T22497] omfs: Invalid superblock (0) [ 2170.714435][ T9817] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2170.932451][ T9817] usb 3-1: Using ep0 maxpacket: 8 [ 2170.943713][ T9817] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2170.952439][ T9817] usb 3-1: config 179 has no interface number 0 [ 2170.959039][ T9817] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2170.971617][ T9817] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2171.802401][ T9817] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2171.813931][ T9817] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2171.824317][ T9817] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2171.838893][ T9817] usb 3-1: config 179 interface 65 has no altsetting 0 [ 2171.845937][ T9817] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2171.855257][ T9817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2171.904543][ T9817] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input27 [ 2171.983988][T22525] loop4: detected capacity change from 0 to 7 [ 2171.999658][T22525] Dev loop4: unable to read RDB block 7 [ 2172.006384][T22525] loop4: AHDI p1 p2 [ 2172.011583][T22525] loop4: partition table partially beyond EOD, truncated [ 2172.020463][T22525] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 2172.125734][ T9817] usb 3-1: USB disconnect, device number 54 [ 2172.131745][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2172.167594][ T9817] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2174.940279][T22541] omfs: Invalid superblock (0) [ 2178.382525][T20644] Bluetooth: hci2: command 0x0406 tx timeout [ 2180.872861][T22594] omfs: Invalid superblock (0) [ 2183.084424][T22619] loop4: detected capacity change from 0 to 7 [ 2183.114718][T22619] Dev loop4: unable to read RDB block 7 [ 2183.121685][T22619] loop4: AHDI p1 p2 [ 2183.132465][T22619] loop4: partition table partially beyond EOD, truncated [ 2183.149394][T22619] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 2185.801018][T22648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4692'. [ 2185.885080][T22649] bond_slave_0: entered promiscuous mode [ 2185.891395][T22649] bond_slave_1: entered promiscuous mode [ 2185.915349][T22649] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2185.930765][T22649] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 2187.673220][T22676] omfs: Invalid superblock (0) [ 2191.139904][T22697] bridge1: entered promiscuous mode [ 2191.145645][T22697] bridge1: entered allmulticast mode [ 2191.197889][T22695] Invalid ELF header magic: != ELF [ 2191.570513][T22705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4707'. [ 2192.648343][T22711] loop4: detected capacity change from 0 to 7 [ 2192.697298][T22711] Dev loop4: unable to read RDB block 7 [ 2192.725797][T22711] loop4: AHDI p1 p2 [ 2192.736954][T22711] loop4: partition table partially beyond EOD, truncated [ 2192.749235][T22711] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 2193.951083][T22720] syz.1.4712: attempt to access beyond end of device [ 2193.951083][T22720] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 2193.964476][T22720] syz.1.4712: attempt to access beyond end of device [ 2193.964476][T22720] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 2193.977483][T22720] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 2193.987411][T22720] syz.1.4712: attempt to access beyond end of device [ 2193.987411][T22720] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 2194.000492][T22720] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 2194.011176][T22720] syz.1.4712: attempt to access beyond end of device [ 2194.011176][T22720] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 2194.024798][T22720] syz.1.4712: attempt to access beyond end of device [ 2194.024798][T22720] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 2194.038231][T22720] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 2194.048037][T22720] syz.1.4712: attempt to access beyond end of device [ 2194.048037][T22720] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 2194.061622][T22720] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 2194.071809][T22720] syz.1.4712: attempt to access beyond end of device [ 2194.071809][T22720] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 2194.084846][T22720] syz.1.4712: attempt to access beyond end of device [ 2194.084846][T22720] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 2194.097904][T22720] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 2194.107637][T22720] syz.1.4712: attempt to access beyond end of device [ 2194.107637][T22720] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 2194.120983][T22720] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 2194.131052][T22720] syz.1.4712: attempt to access beyond end of device [ 2194.131052][T22720] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2194.144285][T22720] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 2194.154593][T22720] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 2194.164228][T22720] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 2194.391687][T22725] input: syz1 as /devices/virtual/input/input28 [ 2194.762724][ T9817] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2195.892441][ T9817] usb 3-1: Using ep0 maxpacket: 16 [ 2195.917777][ T9817] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2195.933262][ T9817] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2195.959731][ T9817] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2195.975177][ T9817] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2195.991283][ T9817] usb 3-1: string descriptor 0 read error: -22 [ 2195.998613][ T9817] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2196.007740][ T9817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2196.028845][ T9817] usb 3-1: 0:2 : does not exist [ 2196.035776][T22738] CUSE: unknown device info "" [ 2196.040773][T22738] CUSE: zero length info key specified [ 2199.467248][ T7432] usb 3-1: USB disconnect, device number 55 [ 2199.522390][ T9817] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2199.617138][T22762] input: syz1 as /devices/virtual/input/input29 [ 2199.692028][T22764] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4726'. [ 2199.712365][ T9817] usb 2-1: Using ep0 maxpacket: 8 [ 2199.724141][ T9817] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 2199.742117][ T9817] usb 2-1: config 179 has no interface number 0 [ 2199.765343][ T9817] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2199.797128][ T9817] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2199.828173][ T9817] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2199.861211][ T9817] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2199.875026][T22766] [U] ¬ [ 2199.891987][ T9817] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2199.911267][ T9817] usb 2-1: config 179 interface 65 has no altsetting 0 [ 2199.919235][ T9817] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2199.933798][ T9817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2199.959478][T22768] bio_check_eod: 2 callbacks suppressed [ 2199.959493][T22768] syz.2.4724: attempt to access beyond end of device [ 2199.959493][T22768] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 2199.978488][T22768] syz.2.4724: attempt to access beyond end of device [ 2199.978488][T22768] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 2199.991847][T22768] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2200.001833][T22768] syz.2.4724: attempt to access beyond end of device [ 2200.001833][T22768] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 2200.014882][T22768] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2200.025576][T22768] syz.2.4724: attempt to access beyond end of device [ 2200.025576][T22768] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 2200.038863][T22768] syz.2.4724: attempt to access beyond end of device [ 2200.038863][T22768] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 2200.051885][T22768] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2200.061690][T22768] syz.2.4724: attempt to access beyond end of device [ 2200.061690][T22768] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 2200.074828][T22768] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2200.085088][T22768] syz.2.4724: attempt to access beyond end of device [ 2200.085088][T22768] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 2200.098660][T22768] syz.2.4724: attempt to access beyond end of device [ 2200.098660][T22768] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 2200.112186][T22768] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2200.121945][T22768] syz.2.4724: attempt to access beyond end of device [ 2200.121945][T22768] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 2200.135104][T22768] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2200.145258][T22768] syz.2.4724: attempt to access beyond end of device [ 2200.145258][T22768] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2200.158400][T22768] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2200.168184][T22768] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2200.177804][T22768] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 2200.254184][ T9817] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input30 [ 2200.375424][ T9817] usb 2-1: USB disconnect, device number 71 [ 2200.381474][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2200.393327][ T9817] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2201.175477][T22780] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4728'. [ 2204.187080][ T5826] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2204.392353][ T5826] usb 4-1: Using ep0 maxpacket: 8 [ 2204.410413][ T5826] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 2204.426755][ T5826] usb 4-1: config 179 has no interface number 0 [ 2204.444622][ T5826] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2204.466262][ T5826] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2204.486272][ T5826] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2204.500650][ T5826] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2204.511975][ T5826] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2204.530316][ T5826] usb 4-1: config 179 interface 65 has no altsetting 0 [ 2204.539321][ T5826] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2204.549402][T20823] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2204.573019][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2204.610639][T22821] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4741'. [ 2204.705344][ T5826] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input31 [ 2204.758439][T20823] usb 2-1: Using ep0 maxpacket: 32 [ 2204.777545][T20823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2204.829495][T20823] usb 2-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 2204.859961][T20823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2204.911557][ T5826] usb 4-1: USB disconnect, device number 70 [ 2204.917792][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2204.943479][T20823] usb 2-1: config 0 descriptor?? [ 2204.964246][ T5826] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2205.601989][T20823] usbhid 2-1:0.0: can't add hid device: -71 [ 2205.609338][T20823] usbhid: probe of 2-1:0.0 failed with error -71 [ 2205.672597][T20823] usb 2-1: USB disconnect, device number 72 [ 2208.979999][T22855] CUSE: unknown device info "" [ 2208.985286][T22855] CUSE: zero length info key specified [ 2209.373343][ T7432] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2209.782401][T22867] input: syz1 as /devices/virtual/input/input32 [ 2209.803282][ T7432] usb 3-1: Using ep0 maxpacket: 8 [ 2209.829599][ T7432] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2209.851120][ T7432] usb 3-1: config 179 has no interface number 0 [ 2209.879616][ T7432] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2209.941941][ T7432] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2209.962410][ T7432] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2210.000626][ T7432] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2210.021256][ T7432] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2210.064527][ T7432] usb 3-1: config 179 interface 65 has no altsetting 0 [ 2210.096748][ T7432] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2210.121251][ T7432] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2210.230854][ T7432] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input33 [ 2210.451834][ T7432] usb 3-1: USB disconnect, device number 56 [ 2210.457892][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2210.507896][ T7432] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2211.107008][T12532] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2211.118458][T12532] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2211.127105][T12532] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2211.138091][T12532] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2211.146140][T12532] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2211.154154][T12532] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2212.483703][ T954] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2212.926504][T22887] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4764'. [ 2212.935805][T22887] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4764'. [ 2213.049340][ T954] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2213.273693][T12532] Bluetooth: hci3: command tx timeout [ 2213.282772][T22897] bio_check_eod: 2 callbacks suppressed [ 2213.282785][T22897] syz.1.4766: attempt to access beyond end of device [ 2213.282785][T22897] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 2213.302016][T22897] syz.1.4766: attempt to access beyond end of device [ 2213.302016][T22897] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 2213.315456][T22897] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 2213.325546][T22897] syz.1.4766: attempt to access beyond end of device [ 2213.325546][T22897] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 2213.336393][T22899] CUSE: unknown device info "" [ 2213.338520][T22897] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 2213.347443][T22899] CUSE: zero length info key specified [ 2213.359548][T22897] syz.1.4766: attempt to access beyond end of device [ 2213.359548][T22897] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 2213.372918][T22897] syz.1.4766: attempt to access beyond end of device [ 2213.372918][T22897] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 2213.385969][T22897] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 2213.397617][T22897] syz.1.4766: attempt to access beyond end of device [ 2213.397617][T22897] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 2213.411129][T22897] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 2213.420956][ T954] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2213.421643][T22897] syz.1.4766: attempt to access beyond end of device [ 2213.421643][T22897] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 2213.444541][T22897] syz.1.4766: attempt to access beyond end of device [ 2213.444541][T22897] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 2213.457614][T22897] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 2213.467799][T22897] syz.1.4766: attempt to access beyond end of device [ 2213.467799][T22897] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 2213.480876][T22897] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 2213.491591][T22897] syz.1.4766: attempt to access beyond end of device [ 2213.491591][T22897] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2213.504808][T22897] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 2213.515751][T22897] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 2213.525507][T22897] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 2213.710065][ T954] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2213.886775][T22877] chnl_net:caif_netlink_parms(): no params data found [ 2214.042424][T22216] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2214.341713][T22216] usb 3-1: Using ep0 maxpacket: 16 [ 2214.388940][T22216] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2214.440000][T22216] usb 3-1: config 1 has an invalid interface number: 5 but max is 2 [ 2214.553155][T22216] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2214.619928][T22216] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2214.654105][T22216] usb 3-1: config 1 has no interface number 1 [ 2214.660281][T22216] usb 3-1: config 1 interface 5 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2214.701049][T12532] Bluetooth: hci2: unexpected event for opcode 0x0c7d [ 2214.718261][T22216] usb 3-1: config 1 interface 5 has no altsetting 0 [ 2215.343166][T12532] Bluetooth: hci3: command tx timeout [ 2215.557182][T22216] usb 3-1: string descriptor 0 read error: -22 [ 2215.600300][T22216] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2215.610346][T22216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2215.620345][T22917] comedi comedi3: Buffer allocation failed [ 2215.644645][T22216] usb 3-1: 0:2 : does not exist [ 2215.667655][T22877] bridge0: port 1(bridge_slave_0) entered blocking state [ 2215.711323][T22877] bridge0: port 1(bridge_slave_0) entered disabled state [ 2215.725126][T22877] bridge_slave_0: entered allmulticast mode [ 2215.734509][T22877] bridge_slave_0: entered promiscuous mode [ 2218.466800][T12532] Bluetooth: hci3: command tx timeout [ 2218.833969][ T7457] usb 3-1: USB disconnect, device number 57 [ 2219.032522][T22877] bridge0: port 2(bridge_slave_1) entered blocking state [ 2219.040212][T22877] bridge0: port 2(bridge_slave_1) entered disabled state [ 2219.072639][T22877] bridge_slave_1: entered allmulticast mode [ 2219.094836][T22877] bridge_slave_1: entered promiscuous mode [ 2219.208176][T22935] CUSE: unknown device info "" [ 2219.225895][T22935] CUSE: zero length info key specified [ 2219.268369][T22877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2219.315480][T22877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2219.463834][T22877] team0: Port device team_slave_0 added [ 2219.477407][T22877] team0: Port device team_slave_1 added [ 2219.522488][ T9817] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 2219.627776][T22877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2219.635056][T22877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2219.661100][ C0] vkms_vblank_simulate: vblank timer overrun [ 2219.673625][T22877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2219.698063][T22877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2219.706175][T22877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2219.732208][ C0] vkms_vblank_simulate: vblank timer overrun [ 2219.740277][T22877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2219.743443][ T9817] usb 3-1: config 0 has an invalid interface number: 207 but max is 0 [ 2219.774291][ T9817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2219.785420][ T9817] usb 3-1: config 0 has no interface number 0 [ 2219.802550][ T9817] usb 3-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 2219.832802][ T9817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2219.840972][ T9817] usb 3-1: Product: syz [ 2219.847615][ T9817] usb 3-1: Manufacturer: syz [ 2219.853144][ T9817] usb 3-1: SerialNumber: syz [ 2219.862109][ T9817] usb 3-1: config 0 descriptor?? [ 2219.895341][ T9817] qmi_wwan: probe of 3-1:0.207 failed with error -22 [ 2220.073950][T22877] hsr_slave_0: entered promiscuous mode [ 2220.142829][T22877] hsr_slave_1: entered promiscuous mode [ 2220.150197][T22877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2220.172411][T22877] Cannot create hsr debugfs directory [ 2220.188836][ T9817] usb 3-1: USB disconnect, device number 58 [ 2220.542485][T12532] Bluetooth: hci3: command tx timeout [ 2221.401165][ T954] hsr_slave_0: left promiscuous mode [ 2221.416001][ T954] hsr_slave_1: left promiscuous mode [ 2221.434975][ T954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2221.459377][ T954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2221.468867][ T954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2221.476985][ T954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2221.485300][ T954] bridge0: port 3(team0) entered disabled state [ 2221.496315][ T954] bridge_slave_1: left allmulticast mode [ 2221.502020][ T954] bridge_slave_1: left promiscuous mode [ 2221.518383][ T954] bridge0: port 2(bridge_slave_1) entered disabled state [ 2221.539373][ T954] bridge_slave_0: left allmulticast mode [ 2221.546352][ T954] bridge_slave_0: left promiscuous mode [ 2221.555535][ T954] bridge0: port 1(bridge_slave_0) entered disabled state [ 2221.673286][ T954] veth1_macvtap: left promiscuous mode [ 2221.720702][ T954] veth0_macvtap: left promiscuous mode [ 2221.730803][ T954] veth1_vlan: left promiscuous mode [ 2221.739967][ T954] veth0_vlan: left promiscuous mode [ 2221.813536][T22953] trusted_key: encrypted_key: insufficient parameters specified [ 2222.147206][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.154122][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.504307][T22964] CUSE: unknown device info "" [ 2223.509438][T22964] CUSE: zero length info key specified [ 2224.021260][ T954] team_slave_1 (unregistering): left promiscuous mode [ 2224.031311][ T954] team_slave_1 (unregistering): left allmulticast mode [ 2224.060003][ T954] team0 (unregistering): Port device team_slave_1 removed [ 2224.131667][ T954] team_slave_0 (unregistering): left promiscuous mode [ 2224.138921][ T954] team_slave_0 (unregistering): left allmulticast mode [ 2224.151151][ T954] team0 (unregistering): Port device team_slave_0 removed [ 2224.216870][ T954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2224.283975][ T954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2224.475095][T22967] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4788'. [ 2225.105771][ T954] bond0 (unregistering): Released all slaves [ 2226.536176][T22983] omfs: Invalid superblock (0) [ 2226.737800][T22877] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2226.766640][T22877] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2226.915984][T22877] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2226.938509][T22877] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2226.975654][T22986] bio_check_eod: 2 callbacks suppressed [ 2226.975665][T22986] syz.2.4793: attempt to access beyond end of device [ 2226.975665][T22986] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 2226.995195][T22986] syz.2.4793: attempt to access beyond end of device [ 2226.995195][T22986] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 2227.008138][T22986] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2227.018036][T22986] syz.2.4793: attempt to access beyond end of device [ 2227.018036][T22986] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 2227.031439][T22986] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2227.041644][T22986] syz.2.4793: attempt to access beyond end of device [ 2227.041644][T22986] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 2227.054717][T22986] syz.2.4793: attempt to access beyond end of device [ 2227.054717][T22986] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 2227.067644][T22986] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2227.077337][T22986] syz.2.4793: attempt to access beyond end of device [ 2227.077337][T22986] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 2227.090710][T22986] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2227.100747][T22986] syz.2.4793: attempt to access beyond end of device [ 2227.100747][T22986] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 2227.113813][T22986] syz.2.4793: attempt to access beyond end of device [ 2227.113813][T22986] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 2227.127216][T22986] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2227.136906][T22986] syz.2.4793: attempt to access beyond end of device [ 2227.136906][T22986] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 2227.149970][T22986] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2227.159872][T22986] syz.2.4793: attempt to access beyond end of device [ 2227.159872][T22986] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2227.172903][T22986] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 2227.182579][T22986] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 2227.192066][T22986] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 2227.470160][T22994] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4794'. [ 2227.510608][T22877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2227.560161][T22996] CUSE: unknown device info "" [ 2227.565442][T22996] CUSE: zero length info key specified [ 2227.724244][T22877] 8021q: adding VLAN 0 to HW filter on device team0 [ 2227.748467][ T954] bridge0: port 1(bridge_slave_0) entered blocking state [ 2227.755670][ T954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2227.811814][ T954] bridge0: port 2(bridge_slave_1) entered blocking state [ 2227.819110][ T954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2229.651513][T23013] input: syz1 as /devices/virtual/input/input34 [ 2229.703360][T22877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2229.819440][T22877] veth0_vlan: entered promiscuous mode [ 2229.850638][T22877] veth1_vlan: entered promiscuous mode [ 2229.889572][T22877] veth0_macvtap: entered promiscuous mode [ 2229.907043][T22877] veth1_macvtap: entered promiscuous mode [ 2229.951255][T22877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2229.968953][T23019] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4802'. [ 2229.989896][T22877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.022182][T22877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2230.073006][T22877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.105302][T22877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2230.762042][T22877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2230.773883][T22877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2230.786433][T22877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2230.797704][T22877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2232.381693][T22877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2232.433040][T22877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2232.465605][T22877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2232.495389][T23031] CUSE: unknown device info "" [ 2232.523036][T23031] CUSE: zero length info key specified [ 2232.537585][T22877] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2232.571939][T22877] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2232.581235][T22877] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2232.590273][T22877] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2232.734791][T16451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2232.734842][T16451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2232.768680][T16451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2232.768703][T16451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2233.263609][T23039] autofs4:pid:23039:autofs_fill_super: called with bogus options [ 2233.738228][T23047] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4808'. [ 2233.778149][T23049] input: syz1 as /devices/virtual/input/input35 [ 2235.457200][T20644] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2235.467490][T20644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2235.480814][T20644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2235.490506][T20644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2235.500216][T20644] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2235.508815][T20644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2235.686401][ T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2235.859707][T23069] CUSE: unknown device info "" [ 2235.872346][T23069] CUSE: zero length info key specified [ 2235.948228][ T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2236.105737][ T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2236.264693][ T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2236.551824][T23065] chnl_net:caif_netlink_parms(): no params data found [ 2236.968479][T23083] loop4: detected capacity change from 0 to 7 [ 2236.998141][T23083] Dev loop4: unable to read RDB block 7 [ 2237.026773][T23083] loop4: AHDI p1 p2 [ 2237.067418][T23083] loop4: partition table partially beyond EOD, truncated [ 2237.075488][T23083] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 2237.584514][T12532] Bluetooth: hci1: command tx timeout [ 2238.853958][T23102] syz.3.4824 (23102): /proc/23100/oom_adj is deprecated, please use /proc/23100/oom_score_adj instead. [ 2239.281878][T23065] bridge0: port 1(bridge_slave_0) entered blocking state [ 2239.298121][T23065] bridge0: port 1(bridge_slave_0) entered disabled state [ 2239.313881][T23065] bridge_slave_0: entered allmulticast mode [ 2239.442104][T23065] bridge_slave_0: entered promiscuous mode [ 2239.673980][T12532] Bluetooth: hci1: command tx timeout [ 2240.078095][T23065] bridge0: port 2(bridge_slave_1) entered blocking state [ 2240.099131][T23065] bridge0: port 2(bridge_slave_1) entered disabled state [ 2240.142766][T23065] bridge_slave_1: entered allmulticast mode [ 2240.163918][T23065] bridge_slave_1: entered promiscuous mode [ 2240.315535][T23120] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4829'. [ 2240.404782][T23121] bio_check_eod: 2 callbacks suppressed [ 2240.404800][T23121] syz.4.4828: attempt to access beyond end of device [ 2240.404800][T23121] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 2240.405062][T23121] syz.4.4828: attempt to access beyond end of device [ 2240.405062][T23121] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 2240.405087][T23121] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 2240.405381][T23121] syz.4.4828: attempt to access beyond end of device [ 2240.405381][T23121] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 2240.405406][T23121] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 2240.406356][T23121] syz.4.4828: attempt to access beyond end of device [ 2240.406356][T23121] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 2240.406567][T23121] syz.4.4828: attempt to access beyond end of device [ 2240.406567][T23121] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 2240.406591][T23121] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 2240.406785][T23121] syz.4.4828: attempt to access beyond end of device [ 2240.406785][T23121] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 2240.406808][T23121] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 2240.407400][T23121] syz.4.4828: attempt to access beyond end of device [ 2240.407400][T23121] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 2240.407568][T23121] syz.4.4828: attempt to access beyond end of device [ 2240.407568][T23121] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 2240.407590][T23121] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 2240.407738][T23121] syz.4.4828: attempt to access beyond end of device [ 2240.407738][T23121] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 2240.407761][T23121] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 2240.408215][T23121] syz.4.4828: attempt to access beyond end of device [ 2240.408215][T23121] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2240.408364][T23121] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 2240.408488][T23121] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 2240.408507][T23121] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 2241.761396][T12532] Bluetooth: hci1: command tx timeout [ 2241.768332][T23065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2241.986900][T23065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2242.266886][T23065] team0: Port device team_slave_0 added [ 2242.295362][T23065] team0: Port device team_slave_1 added [ 2242.404487][T23144] bond2: option mode: unable to set because the bond device has slaves [ 2242.510106][T23065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2242.522631][T23065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2242.558141][T23065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2243.721368][T23065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2243.754448][T23065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2243.780669][T23065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2243.826101][T12532] Bluetooth: hci1: command tx timeout [ 2244.143221][T23065] hsr_slave_0: entered promiscuous mode [ 2244.150575][T23065] hsr_slave_1: entered promiscuous mode [ 2244.168099][T23065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2244.179783][T23065] Cannot create hsr debugfs directory [ 2244.320817][ T34] hsr_slave_0: left promiscuous mode [ 2244.335734][ T34] hsr_slave_1: left promiscuous mode [ 2244.352578][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2244.360187][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2244.385929][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2244.402838][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2244.424196][ T34] bridge0: port 3(team0) entered disabled state [ 2244.439294][ T34] bridge_slave_1: left allmulticast mode [ 2244.457832][ T34] bridge_slave_1: left promiscuous mode [ 2244.474083][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 2244.495354][ T34] bridge_slave_0: left allmulticast mode [ 2244.501646][ T34] bridge_slave_0: left promiscuous mode [ 2244.533633][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 2244.590632][ T34] veth1_macvtap: left promiscuous mode [ 2244.604491][ T34] veth0_macvtap: left promiscuous mode [ 2244.616269][ T34] veth1_vlan: left promiscuous mode [ 2244.628453][ T34] veth0_vlan: left promiscuous mode [ 2245.581141][ T34] bond1 (unregistering): Released all slaves [ 2247.733874][T23194] CUSE: unknown device info "" [ 2247.738899][T23194] CUSE: zero length info key specified [ 2247.922808][T22216] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 2248.118836][T22216] usb 2-1: device descriptor read/64, error -71 [ 2248.462961][T22216] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 2248.672453][T22216] usb 2-1: device descriptor read/64, error -71 [ 2248.833411][T22216] usb usb2-port1: attempt power cycle [ 2249.351559][ T34] team_slave_1 (unregistering): left promiscuous mode [ 2249.361513][ T34] team_slave_1 (unregistering): left allmulticast mode [ 2249.384271][ T34] team0 (unregistering): Port device team_slave_1 removed [ 2249.479898][ T34] team_slave_0 (unregistering): left promiscuous mode [ 2249.487581][ T34] team_slave_0 (unregistering): left allmulticast mode [ 2249.497140][ T34] team0 (unregistering): Port device team_slave_0 removed [ 2249.557535][T22216] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 2249.597127][T22216] usb 2-1: device descriptor read/8, error -71 [ 2250.311204][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2250.352333][T22216] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 2250.446335][T22216] usb 2-1: device descriptor read/8, error -71 [ 2250.601222][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2250.703900][T22216] usb usb2-port1: unable to enumerate USB device [ 2251.823054][T23231] CUSE: unknown device info "" [ 2251.827980][T23231] CUSE: zero length info key specified [ 2253.066302][T23243] loop4: detected capacity change from 0 to 7 [ 2253.094645][T23243] Dev loop4: unable to read RDB block 7 [ 2253.111086][T23243] loop4: AHDI p1 p2 [ 2253.116746][T23243] loop4: partition table partially beyond EOD, truncated [ 2253.134620][T23243] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 2254.341066][ T34] bond0 (unregistering): Released all slaves [ 2254.707671][T23262] loop4: detected capacity change from 0 to 7 [ 2254.762094][T23262] Dev loop4: unable to read RDB block 7 [ 2254.924881][T23262] loop4: AHDI p1 p2 [ 2254.947138][T23262] loop4: partition table partially beyond EOD, truncated [ 2254.968703][T23262] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 2256.885082][T23065] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2256.921855][T23065] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2256.963436][T23065] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2256.985263][T23065] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2257.410583][T23065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2257.482490][T23065] 8021q: adding VLAN 0 to HW filter on device team0 [ 2257.519764][T11474] bridge0: port 1(bridge_slave_0) entered blocking state [ 2257.526954][T11474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2257.560856][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 2257.568072][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2258.086371][ T5843] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2258.432379][ T5843] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2258.468581][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2258.507037][ T5843] usb 4-1: Product: syz [ 2258.511282][ T5843] usb 4-1: Manufacturer: syz [ 2258.546840][ T5843] usb 4-1: SerialNumber: syz [ 2258.589933][ T5843] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2258.633417][ T5826] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2258.881381][T23065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2258.970324][T23065] veth0_vlan: entered promiscuous mode [ 2258.994087][T23065] veth1_vlan: entered promiscuous mode [ 2259.056376][T23065] veth0_macvtap: entered promiscuous mode [ 2259.072116][T23065] veth1_macvtap: entered promiscuous mode [ 2259.105164][ T5843] usb 4-1: USB disconnect, device number 71 [ 2259.107473][T23065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2259.136863][T23065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.150005][T23065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2259.161400][T23065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.174797][T23065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2259.189673][T23065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2259.201978][T23065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.211890][T23065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2259.222641][T23065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.232576][T23065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2259.243687][T23065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2259.256955][T23065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2259.272096][T23065] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2259.281110][T23065] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2259.294511][T23065] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2259.304482][T23065] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2259.593558][T22814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2259.646826][T22814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2259.740551][T22814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2259.757395][ T5826] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2259.778422][ T5826] ath9k_htc: Failed to initialize the device [ 2259.792458][ T5843] usb 4-1: ath9k_htc: USB layer deinitialized [ 2259.794054][T22814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2260.732438][ T7457] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 2260.883217][ T7457] usb 5-1: device descriptor read/64, error -71 [ 2261.038645][T23328] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 2261.162723][ T7457] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 2261.353580][ T7457] usb 5-1: device descriptor read/64, error -71 [ 2261.389658][T23335] omfs: Invalid superblock (0) [ 2261.482851][ T7457] usb usb5-port1: attempt power cycle [ 2261.912438][ T7457] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 2261.963170][ T7457] usb 5-1: device descriptor read/8, error -71 [ 2262.235333][ T7457] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 2262.283258][ T7457] usb 5-1: device descriptor read/8, error -71 [ 2262.406207][ T7457] usb usb5-port1: unable to enumerate USB device [ 2266.012508][T23363] Invalid ELF header magic: != ELF [ 2266.328392][T23360] bridge1: entered promiscuous mode [ 2266.334658][T23360] bridge1: entered allmulticast mode [ 2267.092341][T10438] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 2267.244977][T10438] usb 3-1: device descriptor read/64, error -71 [ 2267.752359][T10438] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 2268.072384][T10438] usb 3-1: device descriptor read/64, error -71 [ 2268.333679][T10438] usb usb3-port1: attempt power cycle [ 2268.962335][T10438] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 2269.033220][T10438] usb 3-1: device descriptor read/8, error -71 [ 2269.332807][T10438] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 2269.442736][T23398] bridge1: entered promiscuous mode [ 2269.448501][T23398] bridge1: entered allmulticast mode [ 2269.734136][T10438] usb 3-1: device descriptor read/8, error -71 [ 2269.862701][T10438] usb usb3-port1: unable to enumerate USB device [ 2271.218798][T23425] loop4: detected capacity change from 0 to 7 [ 2271.228805][T23425] Dev loop4: unable to read RDB block 7 [ 2271.239372][T23425] loop4: unable to read partition table [ 2271.245448][T23425] loop4: partition table beyond EOD, truncated [ 2271.252687][T23425] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2272.504230][T23441] Invalid ELF header magic: != ELF [ 2273.963066][T23459] CUSE: unknown device info "" [ 2273.967987][T23459] CUSE: zero length info key specified [ 2276.070551][T23484] bond_slave_0: entered promiscuous mode [ 2276.076382][T23484] bond_slave_1: entered promiscuous mode [ 2276.089516][T23484] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 2276.101783][T23484] bond1: (slave macvlan4): Enslaving as a backup interface with an up link [ 2276.988249][T23503] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4941'. [ 2279.373247][T20644] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2279.386023][T20644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2279.394982][T20644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2279.407856][T20644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2279.416275][T20644] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2279.427576][T11474] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2279.441718][T20644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2279.527873][T11474] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2279.997026][T11474] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2280.359684][T11474] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2280.761567][T23526] chnl_net:caif_netlink_parms(): no params data found [ 2280.873922][T23549] sg_write: data in/out 124/4 bytes for SCSI command 0xdf-- guessing data in; [ 2280.873922][T23549] program syz.4.4954 not setting count and/or reply_len properly [ 2281.241000][T23526] bridge0: port 1(bridge_slave_0) entered blocking state [ 2281.248874][T23526] bridge0: port 1(bridge_slave_0) entered disabled state [ 2281.259164][T23526] bridge_slave_0: entered allmulticast mode [ 2281.269449][T23526] bridge_slave_0: entered promiscuous mode [ 2281.282684][T23526] bridge0: port 2(bridge_slave_1) entered blocking state [ 2281.290505][T23526] bridge0: port 2(bridge_slave_1) entered disabled state [ 2281.297941][T23526] bridge_slave_1: entered allmulticast mode [ 2281.305849][T23526] bridge_slave_1: entered promiscuous mode [ 2281.411364][T23526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2281.429934][T23526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2281.507251][T12532] Bluetooth: hci0: command tx timeout [ 2281.637036][T23526] team0: Port device team_slave_0 added [ 2281.685523][T23526] team0: Port device team_slave_1 added [ 2281.846677][T23526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2281.856665][T23526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2281.885332][T23526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2282.232069][T23526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2282.239391][T23526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2282.271625][T23526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2282.890422][T23526] hsr_slave_0: entered promiscuous mode [ 2282.939808][T23526] hsr_slave_1: entered promiscuous mode [ 2283.583439][T12532] Bluetooth: hci0: command tx timeout [ 2283.589448][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.596783][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.072160][T12532] Bluetooth: hci2: unexpected event for opcode 0x0c7d [ 2285.124665][T11474] hsr_slave_0: left promiscuous mode [ 2285.177497][T11474] hsr_slave_1: left promiscuous mode [ 2285.211231][T11474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2285.272642][T11474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2285.303526][T11474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2285.314654][T11474] bridge_slave_1: left allmulticast mode [ 2285.320445][T11474] bridge_slave_1: left promiscuous mode [ 2285.327029][T11474] bridge0: port 2(bridge_slave_1) entered disabled state [ 2285.369065][T11474] bridge_slave_0: left allmulticast mode [ 2285.375143][T11474] bridge_slave_0: left promiscuous mode [ 2285.384777][T11474] bridge0: port 1(bridge_slave_0) entered disabled state [ 2285.513618][T11474] bond_slave_0: left promiscuous mode [ 2285.519521][T11474] bond_slave_1: left promiscuous mode [ 2285.585485][T11474] veth1_macvtap: left promiscuous mode [ 2285.616330][T11474] veth0_macvtap: left promiscuous mode [ 2285.724004][T11474] veth1_vlan: left promiscuous mode [ 2285.729939][T11474] veth0_vlan: left promiscuous mode [ 2285.731749][T12532] Bluetooth: hci0: command tx timeout [ 2287.285423][T11474] bond2 (unregistering): (slave macvlan2): Releasing backup interface [ 2287.305730][T11474] bond2 (unregistering): Released all slaves [ 2287.525903][T11474] bond0 (unregistering): (slave bond1): Releasing backup interface [ 2287.537100][T11474] bond1 (unregistering): Released all slaves [ 2287.822454][T12532] Bluetooth: hci0: command tx timeout [ 2288.004483][ T28] audit: type=1326 audit(2000000386.230:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23633 comm="syz.3.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952198efc9 code=0x7ffc0000 [ 2288.041473][ T28] audit: type=1326 audit(2000000386.230:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23633 comm="syz.3.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952198efc9 code=0x7ffc0000 [ 2288.063943][ C0] vkms_vblank_simulate: vblank timer overrun [ 2288.077828][ T28] audit: type=1326 audit(2000000386.230:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23633 comm="syz.3.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952198efc9 code=0x7ffc0000 [ 2288.267866][ T28] audit: type=1326 audit(2000000386.230:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23633 comm="syz.3.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f952198efc9 code=0x7ffc0000 [ 2288.442824][ T28] audit: type=1326 audit(2000000386.250:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23633 comm="syz.3.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952198efc9 code=0x7ffc0000 [ 2288.465200][ C0] vkms_vblank_simulate: vblank timer overrun [ 2288.510458][ T28] audit: type=1326 audit(2000000386.250:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23633 comm="syz.3.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952198efc9 code=0x7ffc0000 [ 2288.560489][ T28] audit: type=1326 audit(2000000386.250:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23633 comm="syz.3.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952198efc9 code=0x7ffc0000 [ 2288.584503][ T28] audit: type=1326 audit(2000000386.250:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23633 comm="syz.3.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952198efc9 code=0x7ffc0000 [ 2288.607173][ T28] audit: type=1326 audit(2000000386.250:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23633 comm="syz.3.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f952198efc9 code=0x7ffc0000 [ 2288.630662][ T28] audit: type=1326 audit(2000000386.250:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23633 comm="syz.3.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952198efc9 code=0x7ffc0000 [ 2289.326362][T11474] team0 (unregistering): Port device team_slave_1 removed [ 2289.570757][T11474] team0 (unregistering): Port device team_slave_0 removed [ 2289.668738][T11474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2289.837475][T11474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2291.102372][T10438] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2291.240588][T11474] bond0 (unregistering): Released all slaves [ 2291.290500][T10438] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2291.300236][T10438] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2291.310601][T10438] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 20, changing to 7 [ 2291.321535][T10438] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 2291.334050][T10438] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2291.343287][T10438] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2291.351316][T10438] usb 5-1: Product: syz [ 2291.355547][T10438] usb 5-1: Manufacturer: syz [ 2291.360175][T10438] usb 5-1: SerialNumber: syz [ 2291.394302][T23621] bridge2: entered promiscuous mode [ 2291.400499][T23621] bridge2: entered allmulticast mode [ 2291.528337][T23672] binder_alloc: 23671: binder_alloc_buf, no vma [ 2291.588600][T10438] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2291.838442][T10438] usb 5-1: USB disconnect, device number 40 [ 2292.557191][T23526] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2292.592115][T23526] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2292.607988][T23526] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2292.647362][T23526] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2292.854757][T23526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2292.889236][T23526] 8021q: adding VLAN 0 to HW filter on device team0 [ 2292.947645][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state [ 2292.954835][ T6693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2293.219207][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 2293.226671][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2293.479678][T23698] bridge3: entered promiscuous mode [ 2293.489191][T23698] bridge3: entered allmulticast mode [ 2294.008785][T23526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2294.352689][T23526] veth0_vlan: entered promiscuous mode [ 2294.760045][T23526] veth1_vlan: entered promiscuous mode [ 2294.867652][T23526] veth0_macvtap: entered promiscuous mode [ 2294.878212][T23526] veth1_macvtap: entered promiscuous mode [ 2294.899990][T23526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2294.910738][T23526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2294.920776][T23526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2294.932397][T23526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2294.960211][T23526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2294.981136][T23526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2295.008338][T23526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2295.195864][T23526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2295.207290][T23526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2295.217594][T23526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2295.228383][T23526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2295.247913][T23526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2295.268202][T23526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2295.338924][T23526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2295.668393][T23526] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2295.678932][T23725] Invalid ELF header magic: != ELF [ 2295.732572][T23526] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2295.741403][T23526] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2295.801609][T23526] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2296.388917][T23734] bridge2: entered promiscuous mode [ 2296.408171][T23734] bridge2: entered allmulticast mode [ 2296.670734][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2296.698529][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2296.765456][ T954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2296.807176][ T954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2297.035199][T23745] omfs: Invalid superblock (0) [ 2297.451138][T23750] loop4: detected capacity change from 0 to 7 [ 2297.655638][T23750] Dev loop4: unable to read RDB block 7 [ 2297.782405][T23750] loop4: unable to read partition table [ 2297.810081][T23750] loop4: partition table beyond EOD, truncated [ 2297.854047][T23750] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2298.312745][ T27] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2298.517596][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2298.540982][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2298.554501][ T27] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 2298.576051][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2298.611747][ T27] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 2298.624911][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2298.639683][ T27] usb 3-1: Product: syz [ 2298.644736][ T27] usb 3-1: Manufacturer: syz [ 2298.649370][ T27] usb 3-1: SerialNumber: syz [ 2298.657432][ T27] usb 3-1: config 0 descriptor?? [ 2298.664012][T23755] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2298.697795][ T27] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 2298.970929][ T27] usb 3-1: USB disconnect, device number 63 [ 2300.315278][T23771] bridge4: entered promiscuous mode [ 2300.333441][T23771] bridge4: entered allmulticast mode [ 2301.931914][T23800] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5028'. [ 2303.561156][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 2303.561174][ T28] audit: type=1326 audit(2000000401.780:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23806 comm="syz.4.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408558efc9 code=0x7ffc0000 [ 2303.776897][ T28] audit: type=1326 audit(2000000401.780:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23806 comm="syz.4.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408558efc9 code=0x7ffc0000 [ 2303.830893][ T28] audit: type=1326 audit(2000000401.800:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23806 comm="syz.4.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408558efc9 code=0x7ffc0000 [ 2303.894888][ T28] audit: type=1326 audit(2000000401.800:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23806 comm="syz.4.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408558efc9 code=0x7ffc0000 [ 2303.978276][T23819] omfs: Invalid superblock (0) [ 2304.068669][ T28] audit: type=1326 audit(2000000401.820:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23806 comm="syz.4.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f408558efc9 code=0x7ffc0000 [ 2304.202097][ T28] audit: type=1326 audit(2000000401.840:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23806 comm="syz.4.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408558efc9 code=0x7ffc0000 [ 2304.327000][ T28] audit: type=1326 audit(2000000401.840:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23806 comm="syz.4.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408558efc9 code=0x7ffc0000 [ 2304.458358][ T28] audit: type=1326 audit(2000000401.840:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23806 comm="syz.4.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408558efc9 code=0x7ffc0000 [ 2304.532467][ T28] audit: type=1326 audit(2000000401.840:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23806 comm="syz.4.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408558efc9 code=0x7ffc0000 [ 2305.135598][ T28] audit: type=1326 audit(2000000401.840:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23806 comm="syz.4.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f408558efc9 code=0x7ffc0000 [ 2309.196281][T23862] bridge1: entered promiscuous mode [ 2309.202105][T23862] bridge1: entered allmulticast mode [ 2309.719764][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 2309.719816][ T28] audit: type=1326 audit(2000000407.940:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23859 comm="syz.2.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1f38efc9 code=0x7ffc0000 [ 2310.971415][T23866] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2311.117602][ T28] audit: type=1326 audit(2000000407.940:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23859 comm="syz.2.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1f38efc9 code=0x7ffc0000 [ 2311.200778][ T28] audit: type=1326 audit(2000000407.940:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23859 comm="syz.2.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec1f38efc9 code=0x7ffc0000 [ 2312.056719][ T28] audit: type=1326 audit(2000000407.940:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23859 comm="syz.2.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1f38efc9 code=0x7ffc0000 [ 2312.083979][ T28] audit: type=1326 audit(2000000407.940:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23859 comm="syz.2.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1f38efc9 code=0x7ffc0000 [ 2312.477792][ T28] audit: type=1326 audit(2000000407.940:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23859 comm="syz.2.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fec1f38efc9 code=0x7ffc0000 [ 2312.517728][ T28] audit: type=1326 audit(2000000407.940:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23859 comm="syz.2.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1f38efc9 code=0x7ffc0000 [ 2312.792826][ T28] audit: type=1326 audit(2000000407.940:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23859 comm="syz.2.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1f38efc9 code=0x7ffc0000 [ 2313.308508][ C1] Unknown status report in ack skb [ 2314.586145][T23904] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5057'. [ 2316.170012][T23912] bridge2: entered promiscuous mode [ 2316.176512][T23912] bridge2: entered allmulticast mode [ 2320.870487][T23949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5068'. [ 2325.808831][T23986] loop4: detected capacity change from 0 to 7 [ 2325.836745][T23986] Dev loop4: unable to read RDB block 7 [ 2325.853492][T23986] loop4: unable to read partition table [ 2325.864021][T23986] loop4: partition table beyond EOD, truncated [ 2325.870434][T23986] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2326.134270][T23997] Invalid ELF header magic: != ELF [ 2326.167608][T23997] bridge3: entered promiscuous mode [ 2326.886359][T23997] bridge3: entered allmulticast mode [ 2327.730549][T24010] omfs: Invalid superblock (0) [ 2327.735605][ T5843] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2328.402499][ T5843] usb 2-1: Using ep0 maxpacket: 8 [ 2328.495499][ T5843] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 2328.523036][ T5843] usb 2-1: config 0 has no interface number 0 [ 2328.529701][ T5843] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 2328.540619][ T5843] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 2328.551636][ T5843] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2328.565061][ T5843] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2328.578959][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2328.591116][ T5843] usb 2-1: config 0 descriptor?? [ 2328.599933][ T5843] ldusb 2-1:0.55: Interrupt in endpoint not found [ 2328.713961][T11474] ------------[ cut here ]------------ [ 2328.719915][T11474] WARNING: CPU: 0 PID: 11474 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 2328.731134][T11474] Modules linked in: [ 2328.735067][T11474] CPU: 0 PID: 11474 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 2328.742737][T11474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2328.752834][T11474] Workqueue: phy36 ieee80211_csa_finalize_work [ 2328.759061][T11474] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 2328.766422][T11474] Code: 48 89 df e8 ba 83 e9 f7 e9 dc fc ff ff e8 50 2a 92 f7 eb 24 e8 49 2a 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 38 2a 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 2a 2a 92 f7 48 8b 7c 24 08 4c 8b 7c [ 2328.774955][ C1] ------------[ cut here ]------------ [ 2328.786786][T11474] RSP: 0000:ffffc900192e79c0 EFLAGS: 00010293 [ 2328.791526][ C1] WARNING: CPU: 1 PID: 0 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 2328.797833][T11474] [ 2328.807395][ C1] Modules linked in: [ 2328.809718][T11474] RAX: ffffffff89f3612e RBX: 0000000000000001 RCX: ffff88801d2cda00 [ 2328.809738][T11474] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2328.813648][ C1] [ 2328.813658][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 2328.813680][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2328.813693][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 2328.813723][ C1] Code: 24 4c 89 e7 e8 8e f6 d3 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 79 cf 96 f7 0f 0b e9 f6 f7 ff ff e8 6d cf 96 f7 <0f> 0b e9 48 fb ff ff e8 61 cf 96 f7 48 c7 c7 e0 03 24 8e 4c 89 e6 [ 2328.821696][T11474] RBP: dffffc0000000000 R08: ffff888076a555af R09: 1ffff1100ed4aab5 [ 2328.829681][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 2328.829703][ C1] RAX: ffffffff89eebff3 RBX: ffffffff89eeadf6 RCX: ffff88801be53c00 [ 2328.832025][T11474] R10: dffffc0000000000 R11: ffffed100ed4aab6 R12: 0000000000000001 [ 2328.839074][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 2328.839097][ C1] RBP: 0000000000000000 R08: ffff88801be53c00 R09: 0000000000000003 [ 2328.849187][T11474] R13: ffff888076a565d9 R14: ffff888066c3ac70 R15: ffff888066c3ace8 [ 2328.855529][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888076a563c0 [ 2328.875362][T11474] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2328.883171][ C1] R13: dffffc0000000000 R14: ffff888076a568b0 R15: ffff88801e369c24 [ 2328.883193][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2328.883212][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2328.883229][ C1] CR2: 000000110c36ade6 CR3: 0000000029aaa000 CR4: 00000000003506e0 [ 2328.883250][ C1] DR0: 0000000000000008 DR1: 0000000000000003 DR2: 0000000000000081 [ 2328.883264][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2328.883280][ C1] Call Trace: [ 2328.883290][ C1] [ 2328.883305][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 2328.883345][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 2328.883375][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 2328.883411][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 2328.883452][ C1] __iterate_interfaces+0x243/0x500 [ 2328.883481][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 2328.883511][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 2328.883543][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 2328.883573][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 2328.883606][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 2328.883636][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 2328.883670][ C1] ? hw_scan_work+0xf40/0xf40 [ 2328.883706][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 2328.883730][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 2328.883777][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 2328.883807][ C1] handle_softirqs+0x280/0x820 [ 2328.889868][T11474] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2328.897895][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 2328.897944][ C1] ? do_softirq+0x180/0x180 [ 2328.897970][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 2328.898008][ C1] __irq_exit_rcu+0xc7/0x190 [ 2328.906042][T11474] CR2: 00007ffdaa487dc8 CR3: 000000007b692000 CR4: 00000000003506f0 [ 2328.914030][ C1] ? irq_exit_rcu+0x20/0x20 [ 2328.914065][ C1] irq_exit_rcu+0x9/0x20 [ 2328.914082][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2328.922071][T11474] DR0: 0000000000000008 DR1: 0000000000000003 DR2: 0000000000000081 [ 2328.930070][ C1] [ 2328.930082][ C1] [ 2328.938077][T11474] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2328.947033][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2328.947062][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2328.947091][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d c3 89 39 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 2328.947110][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2 [ 2328.947130][ C1] RAX: 21793c2b5e176d00 RBX: ffffffff8161877b RCX: 21793c2b5e176d00 [ 2328.947145][ C1] RDX: 0000000000000001 RSI: ffffffff8aaabd60 RDI: ffffffff8afc67c0 [ 2328.947161][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 2328.947176][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: ffffffff8e4a8a68 [ 2328.947193][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110037ca780 [ 2328.947209][ C1] ? do_idle+0x1eb/0x510 [ 2328.955214][T11474] Call Trace: [ 2328.964201][ C1] default_idle+0x13/0x20 [ 2328.964223][ C1] default_idle_call+0x6c/0xa0 [ 2328.964246][ C1] do_idle+0x1eb/0x510 [ 2328.970834][T11474] [ 2328.978845][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 2328.978886][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2328.978926][ C1] cpu_startup_entry+0x43/0x60 [ 2328.978952][ C1] start_secondary+0xee/0xf0 [ 2328.978976][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 2328.979065][ C1] [ 2328.979077][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2328.979088][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 2328.979108][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2328.979120][ C1] Call Trace: [ 2328.979127][ C1] [ 2328.979147][ C1] dump_stack_lvl+0x16c/0x230 [ 2328.979176][ C1] ? show_regs_print_info+0x20/0x20 [ 2328.979201][ C1] ? load_image+0x3b0/0x3b0 [ 2328.979236][ C1] panic+0x2c0/0x710 [ 2328.979259][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 2328.979286][ C1] ? secondary_startup_64_no_verify+0x179/0x17b [ 2328.979318][ C1] __warn+0x2e0/0x470 [ 2328.979335][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 2328.979377][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 2328.979398][ C1] report_bug+0x2be/0x4f0 [ 2328.979516][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 2328.979555][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 2328.979575][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 2328.979598][ C1] handle_bug+0xcf/0x120 [ 2328.979628][ C1] exc_invalid_op+0x1a/0x50 [ 2328.979674][ C1] asm_exc_invalid_op+0x1a/0x20 [ 2328.979695][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 2328.979731][ C1] Code: 24 4c 89 e7 e8 8e f6 d3 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 79 cf 96 f7 0f 0b e9 f6 f7 ff ff e8 6d cf 96 f7 <0f> 0b e9 48 fb ff ff e8 61 cf 96 f7 48 c7 c7 e0 03 24 8e 4c 89 e6 [ 2328.979750][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 2328.979770][ C1] RAX: ffffffff89eebff3 RBX: ffffffff89eeadf6 RCX: ffff88801be53c00 [ 2328.979787][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 2328.979801][ C1] RBP: 0000000000000000 R08: ffff88801be53c00 R09: 0000000000000003 [ 2328.979815][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888076a563c0 [ 2328.979829][ C1] R13: dffffc0000000000 R14: ffff888076a568b0 R15: ffff88801e369c24 [ 2328.979850][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 2328.979874][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 2328.979902][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 2328.979926][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 2328.979957][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 2328.979984][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 2328.980025][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 2328.980061][ C1] __iterate_interfaces+0x243/0x500 [ 2328.980087][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 2328.980115][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 2328.980145][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 2328.980173][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 2328.980206][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 2328.980233][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 2328.980285][ C1] ? hw_scan_work+0xf40/0xf40 [ 2328.980320][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 2328.980344][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 2328.980382][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 2328.980413][ C1] handle_softirqs+0x280/0x820 [ 2328.980441][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 2328.980469][ C1] ? do_softirq+0x180/0x180 [ 2328.980496][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 2328.980529][ C1] __irq_exit_rcu+0xc7/0x190 [ 2328.980551][ C1] ? irq_exit_rcu+0x20/0x20 [ 2328.980583][ C1] irq_exit_rcu+0x9/0x20 [ 2328.980602][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2328.980637][ C1] [ 2328.980645][ C1] [ 2328.980654][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2328.980679][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2328.980713][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d c3 89 39 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 2328.980732][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2 [ 2328.980751][ C1] RAX: 21793c2b5e176d00 RBX: ffffffff8161877b RCX: 21793c2b5e176d00 [ 2328.980767][ C1] RDX: 0000000000000001 RSI: ffffffff8aaabd60 RDI: ffffffff8afc67c0 [ 2328.980783][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 2328.980801][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: ffffffff8e4a8a68 [ 2328.980818][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110037ca780 [ 2328.980837][ C1] ? do_idle+0x1eb/0x510 [ 2328.980873][ C1] default_idle+0x13/0x20 [ 2328.980895][ C1] default_idle_call+0x6c/0xa0 [ 2328.980918][ C1] do_idle+0x1eb/0x510 [ 2328.980953][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 2328.980981][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2328.981029][ C1] cpu_startup_entry+0x43/0x60 [ 2328.981055][ C1] start_secondary+0xee/0xf0 [ 2328.981079][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 2328.981127][ C1] [ 2328.987716][ C1] Kernel Offset: disabled