last executing test programs: 12.189869484s ago: executing program 1 (id=1273): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001200)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1d", 0x294}, {&(0x7f0000000bc0)="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", 0x1a6}, {&(0x7f0000002e80)="f610e61ac81cc3edc86f05f10dfd1ecda0fd0ed9a444b7fb", 0x18}, {&(0x7f0000000640)="b91e9e4875aae047860e12ad5c2c9d8e658657e0e7181f24efbb55b7af60d7a3daff2f5ba8ad9d21780449ee0af3707db165fd48b0f9f717144d2da17740ddf08799e83deb9cb8c41d0986806967a2e751e05239ac928201194bdb65866d3f8413022c000000000000000000a06705e9aa62edc8ba0be2d69751600feab8702b2d01b14063f0ee3475a400eb06429af6bac69d9891b18f56102f647322a1056bf89e8595561ca777d01a424dad13a5b9ae1c46a8a8b9779c36fd61eb17537724f4c7fe2d8f20b55a61d000749b1106ea2d35aa5d0ad75404e687bf4a51d8a52e08ee3e79059a7d82365acfaf1e38bc5de7bdfb935477d93c53dcb01dc5f834efaa03e144ab09249a3e2c31d9bce3ebad906c315322ab8d290f619e7e22d74290c13b6b1ddd01255023", 0x129}, {&(0x7f00000014c0)="2054ce9fa34fbc4a1d8599d1a76a4eed8f72f60371dddce7359a1148790a0c992a07daee0eb1228fb2f9f181950dc0e31e832382fff7f4ddad1cfcd672cb1a056e38d318caa400d7337babdaeaf27ff333d856ee2db5efc6273fa1d97845266598d153006ed06c406f44161b416c8208fd03985252ffc7c27b03a6e66a31d3cc7b1997622b12c3063c2cdd27a3b6fd00e1c4456e65f0804e61b29c97264b5653e220b61068a81d10655f50c4e0bb8589252a06a232496b908b8d68c5446ea1c6b9a2832aeac13a643984457a8597ece1e2868285626d0c4eb5f22efc1dd7423e7029836c6b2b41e328b9d6b09be4223f40e7ec5bbc84c2bc28237f3d7aa5d8456f40348b1f3fe8139e054d93829c118a5c24752b26bf1d", 0x117}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x0) 11.984419544s ago: executing program 1 (id=1274): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 11.971634945s ago: executing program 4 (id=1275): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000280)=0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0x6, 0x80, 0x246, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) recvmmsg(r4, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0xff78}, {&(0x7f0000000300)=""/92, 0x33}], 0x2}}], 0x1, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000040)='N', 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) 11.791981525s ago: executing program 1 (id=1276): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fsopen(&(0x7f0000000080)='binder\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000080), 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000240)=0x7, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f00000007c0)="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", 0xffffff91, 0x0, 0x0, 0xfffffffffffffefa) 9.894230304s ago: executing program 0 (id=1278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_clone(0x4008200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xc79c, 0x3, 0x101, 0x602, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0xc, @void, @value, @void, @value}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 8.812113436s ago: executing program 0 (id=1284): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001200)="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", 0x294}, {&(0x7f0000000bc0)="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", 0x1a6}, {&(0x7f0000002e80)="f610e61ac81cc3edc86f05f10dfd1ecda0fd0ed9a444b7fb", 0x18}, {&(0x7f0000000640)="b91e9e4875aae047860e12ad5c2c9d8e658657e0e7181f24efbb55b7af60d7a3daff2f5ba8ad9d21780449ee0af3707db165fd48b0f9f717144d2da17740ddf08799e83deb9cb8c41d0986806967a2e751e05239ac928201194bdb65866d3f8413022c000000000000000000a06705e9aa62edc8ba0be2d69751600feab8702b2d01b14063f0ee3475a400eb06429af6bac69d9891b18f56102f647322a1056bf89e8595561ca777d01a424dad13a5b9ae1c46a8a8b9779c36fd61eb17537724f4c7fe2d8f20b55a61d000749b1106ea2d35aa5d0ad75404e687bf4a51d8a52e08ee3e79059a7d82365acfaf1e38bc5de7bdfb935477d93c53dcb01dc5f834efaa03e144ab09249a3e2c31d9bce3ebad906c315322ab8d290f619e7e22d74290c13b6b1ddd01255023", 0x129}, {&(0x7f00000014c0)="2054ce9fa34fbc4a1d8599d1a76a4eed8f72f60371dddce7359a1148790a0c992a07daee0eb1228fb2f9f181950dc0e31e832382fff7f4ddad1cfcd672cb1a056e38d318caa400d7337babdaeaf27ff333d856ee2db5efc6273fa1d97845266598d153006ed06c406f44161b416c8208fd03985252ffc7c27b03a6e66a31d3cc7b1997622b12c3063c2cdd27a3b6fd00e1c4456e65f0804e61b29c97264b5653e220b61068a81d10655f50c4e0bb8589252a06a232496b908b8d68c5446ea1c6b9a2832aeac13a643984457a8597ece1e2868285626d0c4eb5f22efc1dd7423e7029836c6b2b41e328b9d6b09be4223f40e7ec5bbc84c2bc28237f3d7aa5d8456f40348b1f3fe8139e054d93829c118a5c24752b26bf1d", 0x117}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x0) 8.618942939s ago: executing program 0 (id=1285): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) umount2(&(0x7f0000000280)='./file0\x00', 0xe) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04040a0000000000005467920034db81e7abdddc259aee6063e57dfee0dab308ac44bd02bae33aa428c21e8527c5b32e2c96d0a0d523936e2a0c48"], 0xd) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={0x0}, 0x14) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="230902ffffff7ffbe00001000000"], 0x14}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) 8.132021989s ago: executing program 3 (id=1288): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32], 0x18}}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f0000000100)=@abs={0x1}, 0x6e) 7.478263082s ago: executing program 3 (id=1290): syz_usb_connect(0x0, 0x53, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1b, 0xc0, 0x75, 0x40, 0xcf3, 0x9375, 0xaae9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0x75, 0x98, 0x91, 0x1, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "9f77525c09da"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x7, 0x1}, {0x6, 0x24, 0x1a, 0xfffa, 0x3}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x40, 0x7, 0x9, 0xf8}]}]}}]}}]}}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6(0xa, 0x0, 0x3c) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x5, 0x193, 0x0, {0x0, 0xea60}}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, r5, 0x3e8c4ddb697c9f8f, 0x0, 0x0, {0x4}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) getgroups(0x0, 0x0) 5.290009349s ago: executing program 4 (id=1295): r0 = memfd_secret(0x0) mmap$snddsp_status(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x200000d, 0x12, r0, 0x82000000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) socket$rds(0x15, 0x5, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000300)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x0, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008050}, 0x85) preadv(r2, &(0x7f0000000340)=[{&(0x7f00000006c0)=""/185, 0xb9}, {&(0x7f0000000780)=""/164, 0xa4}, {&(0x7f0000000840)=""/111, 0x6f}, {&(0x7f00000008c0)=""/119, 0x77}, {&(0x7f0000000940)=""/200, 0xc8}, {&(0x7f00000002c0)=""/24, 0x18}], 0x6, 0xc, 0x3ffc0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 5.236815719s ago: executing program 1 (id=1296): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001200)="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", 0x294}, {&(0x7f0000000bc0)="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", 0x1a6}, {0x0}, {&(0x7f0000002e80)="f610e61ac81cc3edc86f05f10dfd1ecda0fd0ed9a444b7fb", 0x18}, {&(0x7f0000000640)="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", 0x129}, {&(0x7f00000014c0)="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", 0x117}], 0x6, 0x0, 0x0, 0x900}}], 0x1, 0x0) 5.065210035s ago: executing program 2 (id=1298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5.020513625s ago: executing program 1 (id=1299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c0000000001010400000000000000000200000024000280140001"], 0x5c}}, 0x0) 3.998909735s ago: executing program 0 (id=1300): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32], 0x18}}], 0x1, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f0000000100)=@abs={0x1}, 0x6e) 3.998491179s ago: executing program 2 (id=1301): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000003007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.860091844s ago: executing program 2 (id=1302): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000001500)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x94, 0x2}]}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) 3.836535068s ago: executing program 3 (id=1303): r0 = io_uring_setup(0x7fdb, &(0x7f0000000080)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}}) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.807264849s ago: executing program 2 (id=1304): connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) ioctl$PPPIOCCONNECT(r2, 0x40047435, &(0x7f00000002c0)=0x2) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001f00)) sendmmsg(0xffffffffffffffff, &(0x7f0000009140)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000000)="b3c7612122a38f78ed803d60c0f0a6c7bdd030c4de", 0x15}, {&(0x7f0000000300)="faa1960eb20987610663550cc69cb8838b2b34196fc7847ba4692117277283adfb568d05a8ccf2c596188395a2c0531da21d27a36b92f648762fa84738049b9b8fd4c00b9903b3af69149fefb48c2e7394b67c112fc36ec72199", 0x5a}, {&(0x7f0000000280)="d6dcb41bd4a5b728a4", 0x9}, {&(0x7f0000000380)="a447bb30c8fd79df941bf099ca52243dd226a84db7a1c75b509624bdca29ac83f9bf48dfff6361e143a48e7522653d02ec1345865273fca3ce1c973f8f2a82fec827b471a0357eeeb8caf12a36207c601f", 0x51}, {&(0x7f0000000440)="f9d4488fba252a17e5156282709e35e5c66ad63fcc4b53cef927ccad", 0x1c}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001f40)="b8579505686dcc54e987127483b323d817c0693bc7288e1c098b1e925edea0a3116a048df816e22699042aeb9c1fc8be9276d7df3e3c505bdc74cf40e12c8a4aa1adef75f6bf0be6fc9029ec0ed3b0f38676079309bdf2f445388b107818ca1c515179405310451e617f58402df4a0765cb971aed94eb22ad56de714dfc7325c3cff5c13beee0c2c66bfceceb40793f3d9b86a440513d26150905e2c3ce1fe04b68482e40b09f7c5e62ae33d39e0aaaaea47becb61d683df68bd94f6ee3ea38a2bee3ac33bc9b37691eb07b07ae0f2d34a7ef8176ba7d6458423271efc77404005d9475f6b042cf00deda0accf9c82cf5339d6873084a5488e1437bffe6b24b5e27f7360969140804985c9adac1c26c12b9fa98ed1340b4f358b127cfcd2638e055467e800e7b6738e239c35e6dc704d8ba9a1fa74c01ed254c8bb1aa78cee3cc6b20a2285aedd18ec25d39bb8f778b8b1538bd4da0cb341439b02df98cad49ae86da059b861f15e3262e00fa884e91de9bb7d0b2dbf44e31a47aaf367a09eae1fa02c3abbd8bbe6549728d788fbaa3ea29797386151a15b30ff73f9291d23d8c04fcca39db2b85830679d3aa65b2748f35665d70e6de9c7488e1cc7eee39b5fe0ced56e2a21f771bff11e732a4951797c3998fe4309c656b434635ab438c07c3441c2528fb0ed1d9a819007a392ca587b4c3399a3371fccdf73eabda1262134bf85081c67fa8892d5c260d33f6d30c62268ee37d975921b51008c06883306ea96c7528eb95c7e1bfba7287be37172705d98555a4fe65775fbbcd2b7bcf4be7525b930fe4e2083ac43b887d49390e76e840487ceb79679ce878164041d2f7130104759f441a7609dc8560f8693bba3ec5a52a96781477dfae951f43eed4828fb88ed48762210e6dee7443247132f5e3124f77f6a760b33975a23d7090413454beb920d8df76c389eec59ec82ccda11aa4ec8e2d5618fa6fd91bb7716537177789a6c96b9e8548b4a47a0cf4abb8f5af819517daebddd4bccdfa605fd3b5ca68d78d84d56ed50352d1583031761472b9a359e85c76561123dadf9aecde8a29781dcfd313fa29afd05f6c3b0249e4bd00b7b7d516af3ebd9f14f69b84e11e3f85cb45d2c2a008dec240658b107e77b0651698edfbe358fa2033e23c525f223b1774aa4f7c05f7bd764639c69a2533ec312affb406183f36812c07b77863fb845c9eef8651e60f816c353502e102044f19dcfb9d62b284df69529dbd20b58f649a940c13aa94e38bb0c1e8586da1b5e96b4a529e8bc3640e33ba6a35edad4016c25e32e1a0518532320bd2ebe8f007ccbf79f7766e89aabad7c39ee39844ca174fa17ee219b3652edd86071cb209b3d8f61331778c3792d37a592f19436ea5a3d7a98458b388778c4a063077e8ef8e59a48251010aea88eac662c897c2c358520ebe9014222791eb942a54b3455280fea8bd742d540ad8c614594138a9f0739aab1da51ec7c8cea5d99e26edde297625c75954c5c7033c7e3a1596ab2653fa7f73a922be06e6f22ad3d85cf2a68b7bd7c2dc47e3e9af87e48b7d74d5a0ac874738297b817a85c0c863ed4204eb7f4707e6831dc303e93f31367c4e057b743272f876422479087a768f23c5156b57cca67a741961c8990a6aeb6c8f13d42cfd9d3bc6dd52836ddb9ec26f32e77f26abb70f12a6bfdd29b9221aaa12132dcbf72addb3ff96ca88ffa4976d24974cc40f08ecf4cc056a3e2b44dd72954b0b969c338174e7c8e9ad35f0b1feac438a866498b627217af0243bb101fc33a1183a13e3086da339e081be02d98c0180b4907462f6eb3ccd7a3b2201c4bfe1d6187c7a08885f76efbbe9439d6a8e6635d452e6131c3035700aa5ad8b63c40e86b183f3defd44de2a34ac168f4f9245c8214ac6a422cd918f346cf81605a36339c130a4f3f582af6bee035f5843f7a8871f8569980ef00e9230a9435fdd6a78c6e609aedcc32c65d0631cc80171abf75e83e324a79981644e17c202aaaa615027649d92e42b24b38567b05670a11533293908192ec83b7ae37ab2a46ccaca26bb4b6aab0845ee98f895dcab15675fad0325320b0107d95152495f586907252a554ccc38a99ce91866aa4dc9dc06c5cb02fcb17ff78dd413639c4dbb69ab2c2489f0daad26e6f918c1dc85666dbce4d82ca12006d36d0fe411b38b3c95c6686f99d58eb7b40475dd4680df69ff87cbcc93dfdc45601bb9d703274ebccdf689a7b9a48a06cdcc9098e9087231e781a44bf7664fdd98615e45e914bd86dcf2182a189b799cc562b2e1b3a6d6589c405a56a89c422f5da179a00366b6c973a185304287831014a5a40ed65aff5f1cfe044846f06c2f662627f22ce3af8af21718472da28e629850bc3f6b2509fcd672f763f6a2e07555b073089d24ef94e1fe25fae3d5b05f415833bcf5793b7b084a0cdf123a8262819b63b19ce1c51de191a565287757b4f37759fdca6ac3c5d78cdc3a95bd1972a31da64ad10fb4a8a54895d99f2fea5ebbbe6b3696d177ec7dd8ee03a3a09c81ac398da8e5fb85b78117cef805e8985ad4975c96aeaab33fc3f2faffbc6dd48794b8d08b3784ac2447622d16d82a6c1fd6e4f382b0b06d4f7ecc92dd32300912ccf4ee1b891d342333e3b55554318a32e6061488366ad2b06068f3a8eea90fdc93b0af805bfec8d82d4c22207f25064ab7bd28596becba44340217cb04a56da62c44db24097c087ab2e10c9b09dae44b2cbaf45226c8fa2eda946cd0786879228565e23b73d82d2ff279d631252757d46ae85fdee6a08437e8d996bd0a694f585e3156d5ed9ebc9b5862c2c3b51bd95f35bdf14424a9a9d68f8d9903e90b9c0f4e74eb98159c6d6e6048dcf3af234ffdadc7c12bb281663559ca8bcf02a7491916e7394ea15975d4a7480f995f1e5ba4d79ad2764ec296ab1ed0c4c22d47f3a952ade8beeffe031c46f92d404c88967e247dc14735854e883b0d3d200399aa639dbaf8672f0e6bd6ea9ae11cde0ced2ff9b60dbfe81e73a1d028bbe1f684386d9fe5ea363bb1a76886c8c89d7e7d50c3e1099de6013b68c85fe918c5f04b7a666671843b70aaa9883acda9c16f9eac3b62ccddc42c7badeffc672cf40159a88cac7b00dd66e45fd720e2be756be2054e954847a5e24a20c9604cd08ecd7756b585d4986335ad79f7e97e19d9349d89540e02402d30ecfdd9896cbb19b4114b4f855db02e27c434abed97d4c6a6677e34500ab446cd2f9933d157acd3a68fa8a5ae10d06e50a22658238fc56fa4c2f68a615aa42ec7ecd47e2ea41711d3e180ed303b4c6f5803d0784cb435ed4984fcf720bcabb319a3b3daa91333b2fd65fb498bcac89246ea3df3d0c0e6dc5ffde85611f8f19f3896fae9afc8ae94cd6a9e8969876ef3ab7dc5f4c9af10b1ca9edf0d04ec8c98d0fef17b6b71c8850b4304f57cb184c57abd5fa03a8d0fe0e05c6b415b69f434ebedfa1844cdaaec0168a1693050e866e160aee1d3b1bc81259b8c9e82c10337483994b030148bad1e7bce990f34d893a4bb124e05927d4fa3c3c20e62ae3e044fffe1bdf9f1391e8ea233b598d92649a93957a0ba85f7b4e4a86c680a79bfe6f721f30f305a784d2f2f99f39a3246282eea4f8bbdb798d20afe64139e0defc70ed4ea0f31ba4ccfd8e42b44cbb82091cd84783ce0e177dc3dad40b69b318f711901ea6005e5b82ee8d5844b6c0c44b15f871224237616d2e64d6399015cf67b13bd1f87ce6c9ff97399070f4d5b47a2f8be6b9231bf61fda3291f66243bfdadc63228d4d58e713df9ce3831aafd9b7c86e40b386488c2150d91c129633e08ba5ac9458abd67ad138a9abff90c43c1133347b4d4b335ea78f8ee98ab2f3e00c07555128f0a8f93b3056df91c747d074ef8efa22b8908b1fa1a7f3fbfa29d2ad9df0d7372372e586d9b2e3a288fe6e9beaef9782c7ba3c2a8ad2aeda67276ad52c557294417e789f90e9d2508e30b5716cb56f913e1fecfe43f346e2f3be1e838625fa3bfd88e36564961b3f9e82661256488ccd37d4b93815d523829570be5517ebb5df199abfb3bfd78fcc6145b5fa7355dadd807daac6e866719d456205311d0f8baf38bd059bd628ef301a9d1cb572d4a05431783cc34cc6a236859f17a0f8fcd3c8a4648c135ef24064fa160ab55b1a6ba75991b6bbab2f6b558ee56b0b5204abeb45ba83bbf7af8eb5ce43bd04fa488bd265ba4440d0162e0d1f1fde309aa3e2164ad61cab7e38777f2229e31ac4e4b59dc2e2b416e51e46b0e090105e83dfa6b0d9d518dbd4d1f64bc71276295972ebdbdff470f48ca067f8582742bc59c9901ccfa268fd4115e941df75aed8ec37438fcf5c478bf849b2ba7d9f6429f50600729387d9bde5ffdcd7d6414758ce384adb95255ddea2a0b7016a8262ab1255636c6d4b65a12239107d1027d558e9ad66c18878160efd459e0f73fc43246c9385cee227027db9e205aa4169c5871fc208478ab14a264bbd692811f9998da2c0749370d54539518e7beef208a833793f7fa2d7bce250ee32fdaa17120d1c4679c06b05b513a5490473221653308103c326ee23a627b120cde91ecb9eab6e40cc4108b82ebadb79618723e3d3990dbb815c053141f5f6dd0f2fd9c3e203c07ee77202f6aaf694b2c8a1615fba48d8ccc4932df966f668b5f1e38d7ea79e1bd5eecb97b25ac5a89d389ff7bd943976f0d417dc4f2d49f78b2a9f9c35bf82b62e3d5f3438c99877e1d8db7a014d1353b8f028b9021ea67b65d9fad700a8eee449a6706e4d7aab379085423f00d81d4d9aa9d72b26a975f074d11478a57afd02ae5b41a7400117a7f8cf962d40286eb0d9dc24c4eece26457000c4f96860ec4bac1afe06d06e16aebc66fc08ab780bf0d52f8dac67290d5b0f7410105fb15ec01f2f1f993c976fa2277efe5fefcd0d8171215740e9af7cfb0bbaa2b9851b844e908f735eab2842feda0ffe04bce7531d43e1207280f5f106a21c980dc2fa74920a8e4a016abe5454e81d7429f0cd975fdae98ecb93ac65a2c31e1e2f46cbc59adc78afd8e77c22ee1843a6b2d03bac996361c03052f69b95bfcc46be179bc5d419d3ea62b26bd8c82f03aac1c519da479ae3db2217ecdf7d962888bb0b12ab96335ea0028f1af97b4d5b24c2e976d2485735814f62be6f38d7f77e9a67429476172bc5a6cd8ea6b6065e12f4ee5353e939f1ea1104878d10f0aa8a14cca45264b6da4eb74bc88c0c454dd79b3ab0b8bb84f7f6932b2e4cb84f7367668a0e241e45389bfaf7cdcb30941ff22038340a476d85f1a71152a66de8c68e725b33f17a14f6ef3968eb2c35dd1165e3224aa3a41198d6fe0ff64e8dbc433810fd5675f5deb7759048c52e43941d0a8b156b2eedd18a3021bd4d0e4386e6c78c3cfee9ddd99a559481a652aea737403483764cc85e0266d27f0f2e42bc016172507baaec65a469795e0cd115f647ef2992b1a9815576d91ca3a862b6d85edd6da3c9d9592f0ce6d1cc0e8091453789e87553eb775bc68b99688682ae6c30e8a3698891a83722cd33aa27670c7177ef3c2fa0b8854b2f0715d4178632e1a5fa48b371098227992622db9cff6ee8cb258c61dff80a54de9450d5f243f1e54024d74429950261f465430ed765dd3e91b3673ea75cbfc71d63c2a46dbe4001a998979b3637b8a2af2c31a929f99e3c7ff3ce9bcae3cb5639bbdd078e319c35a20a", 0xfdc}], 0x7}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001b40)="9ef5f516b5b8", 0x6}, {&(0x7f0000001b80)="6c3e3aa2ed785b67f34aa27c37c864a84c3683b7493feeccab436e6925fe33e9a76d6efe5961c56cf936d7136a3653d28c117c816b48e7d9f8ebe6c734bc317d229d5dc02b2c1b3f631c775ce9007b0e881f962e6aa37e5193986228c59f4f1695409c8490a7a42c571157e4d3b4871e10aff422552b5dec841435ce946a13277161c2e3b57e0bed43b367143dbb447d6baf85d0b5e4a07381057e3ffb3a2e4c9ae4c7f1a05b638e81fdeebfb13706683e3ad4b9182733e24dca9cf8cfdd28ddb096834233a722d10ce231e8099ecb8c3d54a5b890ef201b6d5294baf26d4374f5129101968c64", 0xe7}, {&(0x7f0000001c80)="12dc3e9c22bb373f8208715d9af59209a1c81c7bc144e626e4677eff84255b7041449388da3e220a7147d14e01e7", 0x2e}, {&(0x7f00000043c0)="9709627df286325102c37d7574622e66edc27aa7bb93a1dd34824a93b03f04352cf41c5649fabb80c6eae66324482ebf6cd35ff5d171b383f4264ae45e5f7ab9dcda1188c782ffc5ce7f53c397b87242d359aa489d41a49121972a6dc73318fba7dd6718817671a7af83d47744849c48382ec2c602ccf7d15e2f90f9ad96df33fc8bad071e9a888499676a8e0a4f31b0b5f006160f9d3e3f565d7b6c73a602d052da5850592a4b1b6013ea03b95ed364696203ab6afaa4234a6738323536d8bbb3465d3ad76c31f2f9e4cb1cce8d092788ad150c90821f09eb863c09d8c3ac60b0523186d3ee672dbeb36a64763be865990e726755cbb10fc32751436baebeaba59a9f3c66481f49a3f62739cf98a90e79bc7db41763c367d67297797ae69192d0785cfdad0215f3e8fdc08f7f14d6e7a0e0b4cc2ebac102f95cf08559195fe3781353476210ac56706c82b1d7a801f7f1a43eb9d5fe06b70e0e6e206fda26db68d28c93f00aafa3ea825c9766fe0b2c65dd303aa593f3f212f86bad6f306b647df45f40e99f2ab7fd8a4bd05cca0e3b1cfd07bc903d30b7ef3ce5bb22a2b2597655401cac5039c3d0fd02a7c384fde7a407627661081f6e708b70d788ce93a1f8d3762b1dccbc88d8c9732575e89decf86e8bdaa686f102a7dd843f9dd30b4822c2dc62a7754911aa47eacb8bd5b16b11e7599ac50dc22046e6e64cb240d7e13476375018eb4ff4436b4923504edfa7b544662c7abbedd8d9931642a6212d6401e700f1aa2af5c4fe63d6e681a9f96ed06d9a1735ec851e644698b52189b59e041ba2f9b2559e2981f8e015e0c95ba37700ed916a6d82f327be6e6942f3b299005322313f074f097a8c83e3839d41149de27a472791e8e42534160cd66b33382182347a346113b9ddf85b8ff69df0d738ddea30b29c221edd476eaa2fd783ea162e85ce3f8f03ff3642007d7394e586b2219ddd5d51e15b5bfb6bc9dbdc7fa4c40c20e4edd2b0cff24402b55b2517cbcfbb9978f8149d1ab769c221bc551c9a78a676a9752f0a8a69126c8e8ece84c13929d9ebffe6b59f6e25b35d718da604466938b2c51028223330eaa0aa85a440443822a14abc0f995b7b9d7f59280992ed127f3d98abaee7bca4b0e4cfb048b51117f39073ca33e14a3a6cafaa2e09a9c002f36e069c1a44d1ceab0ef00aee4fad7683f8c564646250d33c4cc49f75003e163d54d989b626e94ef73e02ec022c567d083994026f257b1206fec91430118cfae0284a3d84d0e1e5c39621ac52d319d64e6234f6640c16cd7eb5a9558168eb8b254c415ef2938b5ff9465231ce758f55e75bcd4546110da5636f58996f4e583fb58ee80df4cbdeb792d1c8e608e582f446c577e0c4c2c75df272e5c68a95c02efb821822cc9ba5033a1eebca913997806306e6a5e6f9c74fcd8e314028fb167a45853c39aa859d70cc76e16e744a0ba9df99bbe47f99aea407726e3d279d14bb64406d0744e862cfa01368f715020178ed25c489ad55c541e34db8daf96b78ed799b06bcdbde283505f8845c9a1b91199cb87bc8bd602ab81b5d4fc8eb22c5e4c69be41458a7cd99f68c9ba3472a44a543b70fc76190b900909e5f2f500313566eb3638ac76d8852f987a8c282017e27111615d05be916799ae41fd74b57efbccf00b7d31fe605f6e35f7e04f9f968d91d8fbac3521a52fac93c3a05cbcfc9b18727621c4ec19e9088e60d99ad0d31d387dc20d0f119fff5c4693dfc1f2a67b66e7b278b99a1bb23ede810d59ec272aa5fad1f3b41aae314ad69f56fb4a7671d4fa296e9a41d3cc8cc402317c6db1cb458a2d61e940581083aa853611338572b8dcc6b6bb471deb15a63988509f658ad345c550b21fc5225f15c6884918ea878226354cf14176831d0721c3c9c339451d97881bb5c4a03db9277852b60e184c9cc62c9a4ebf0901458c5e3f308305be8851157f3adb4226a194fb5a536343dc4e2db62beaf1e356ae55f4fa8e5621a07e7e27d976b12a7f501a3b6b16c4303719517b32f142db8c2888bef0e26f8cd72b494641b356fb94143a8fef4053810a52df71870e93b684a38cc283c31224dd1eb1c2ad142cad3a48f51fb3dab3a0712fbd11aa5a0d3ffc28ce61690d03800b518a2718b98b06f3ad8963e923d894d97f7a00b12cecc0adc5a009bc4e544fd4e781ce8dcfbb2c3a03725da92651f1ad24240b0cbe972bd13da038f5b46952d9df104ad302e7ccfd0233f2a221ac92553304c7f21a6c7008c43dc26f9bd280e0b7e08083bc8dc6635bf01b34437b2addad716b12b41fabbd05274e6fa766c8a64638847483d99959887c6030a911cebbf28f3189cdc1083c37d8147caa738ad2ae9a7641014745f19b79d3a48145d5094a2ed9e59759347aded86ff50cdfd5da02a10e0708f3ee5d320d753db31ecdc940d98a9bdc30309afcedf4b451e4add535c3dbf7a01a33cf9e998fc79404478bb854ea6f13fcb1dcd2c37147e3e2961192810a2758eb74d9aa7acbd61e7bff4d0b6cf7690719ea75399579b378ba6636a27b1645d2c21c7d31894056793aef68476db38379e9a434b8744be88a096f2a1ae6210a2e4e968817d18ffae86ad4b9b19199047d2ea9fbcb93415c8e48d7484014f87c0cb8adbadf6394cdba124465dad15f2ad5805a43376e3197a1f5467057dae344630c203f678a5d6f933cd981731cff4fbb91b4beffb1f4c0c01e9ca1f1c7dfe39982e357520e605d8584fb0cf8d3d7679277ca52f8bd4dad67ba9af2a0c24a8fba3796fda2573b2603251c72a02f3b4cb611f533d9803ca5c0b8cd462a5658c5671e56d22ff8384827a5b0ec02ebefb6e99360d21593840e2dc5b4c609d03e61103e6c01f70e2e980c2429bf631db3fb6a34679d52596bae35ab532a8641bebab002be0eafb984ca0709b4b916240224e99956bffa041d13789e080e2a0a0ac7a01723ed29d828269c2a7a9ee73c807b175e4acf46793a9cfe78662643e8aa529f742247853f7c6535232256c250d61568dd56735ae92fe32209f73be7996f2ee601ba5dc5850757e993a26a9452d791eb9eed6def908011c8e606b8a1cde00227788ec6f2f264267d6263dfb6c9b9fa50198ba795247dfc301675b2fd896783f558eb165313e19128929838740be4feaf55e49c24f0b6e28ccbcb62ab2493cf265f7b7da049c0e5c79f74cfc55bd016867f5a9eba3464e2bba2786f76793cf0fe2f84fc5bf938055402cefef4d3c5c5ca54b94aea66f33b67d1fe2c607114bcef5881999ac7971ebcf364a40410dd8aeae09daaeca47de6aeb4defa8ce21ba23f2d68e54979dbb117c029c05314692ec451f3f6b09b101c09324c0d1fe163e9668c37e54a025f5908fdb561833b41b17c79e96bdd0ee2f51fab69d4c1e8a6b8e7754a97fcab4f992e01723e999b1cd9088a3672c2017d915158cdcd50c56d05e07216f53f6f8b687cadafc84a3ad26d20c1745a5a345ef26f54bab3f4af45c6a2fdc46b0b39e2381e747c40944cb44d144fac127484ab83967f02f0035750580acf855c2672504a1f565d3e8faa645f50db1e6b3fa51a910454416687a54f79a969d6ac9d1a91fa67b6bf71435dd0df68b8828da999a6afcfeef57fc13f63800d51525b92258cf65084549e5b9bcddadee48c6b29d77d57d77a499efa6cd6449931c2cd9314eca58c5fa0d1d66ca8f535afff8e78cd87f976cc8623a08175896d3063eaf4ef231c3022f1bf2ad3ecce1dde298a4ea5a094f46c284bb331e601b42a78992551c8f9fed4547ff8c40d80523e3544ac19beb837360f9c48a462ccf03c77504afa3819cbdbe7a509e14074642b416d7e69fc89e0e2d3e3b0f49d61d15318f989d699941591ab8d14cac4ae9409712f442b1d043205b063d9f36b9a4edead61a78bec952738d9a752eaf93be6e82d64eca6942930261eff0c6fac8bc7efa2016da3cb88036823f820419faf8325116bc11b16c210dd69acfabae1c62843ded5a19b3adf325827798ba63e02d5f1ed774c591819c21be70fc2ff5ae43a4a623cb4facd34f74c4a1efada735cc3e3d08cf207f7a84804cf175b136da724ca9c5b77b0d2dbfc45cb7b0776573fee167b5e41f81a8afe2e5f52303f80cc16af67c451e5c45d9859003c6c90ccc0f251d5653d934867aeddced15204764cadbb237ebe77dac67860f662a0b1d3272ee42337eb5b06315c07e907966dcaa7009c108b6fddb30587a654672f02a609ebbabee6086cdbb93f7f667d65bb73ac23eea17dca83c44b15a44459fef6cc742475416f73251d4dfdf4f63a7cbfe0e9be0ded5cd4781f00c6efee5939dedcdd5d4c39fc45cc963aecbe2c28a7760842ad57902c95b34335468d2dfdf9bef80615c466536a5d2ec14e45582ad0dbfe48d26b4e13e9ac9327702f5a66aa275ebbcf48a5a1d1cf8bc19938b2d1b44a441cc69a906da793f26f5f078602752be2c66fa75845f52e60a2caf1c58cba7af6548130621d83defe7b0f42ccbafdfe1a6fa0a31a919bcf3dabd7d1f80a9932e55602b51f688a1a38c4c74fafa54e0b09bbecad39ac4c46714192fe94a6f4163b305792cf28171e7736644dc703db732be8752a266f311062a761afe207a905046a246443d447c166da9d93ef5f41733bd5ea59234d87794bfb7125308d0e51c3bcb0abd58c59ab3ee919d5aa001bbd244514ff6b6bc6c101fff39ad39f5dc730ae306645c3d2ef50bbdc883b30e37c24ac5c1e76e447b2b7754af6f107e1655946d4b3360ddf46f255fa27ecab15ca17e530ffc02aba8dc5d34d8f1e56d656b326ab614a1345ad578f39cd20e31353e9d741d7f65178ce56034cc8a480bd66f21b0a3e8d09d12ffda2fae27b4132f88ddc467ea7be669be8b096f6428faa48e244aa12dfcf9c590424e821e0e2d50c9fa949d332116071b280d99666fac8aba22e8678f8b15d1f227d975e799c2d4b561946d2f1112031a97564b39ff7335c4f4297ecee7844f57dfb0071dc5ea865d5f6bbf9c98177803915a86c754163b7bfd9810dd7e1c5624fb46c7787e13ed178f290d3d3b0e76fdc9af0f2dd306de66424e1257adb3989d6899647f1f291f3d12c68ef5c4e30aea8803b330590fc6718488afd8c31681bfddd298f40effebdd97dcc1622a932fc84e04af052695af6a3c5e31e5ca492c99e9cb33be85835a3241062d56d9fdfdbe8344d55e5c8592ba6972ed2049c04cbf39c907ac6ae3fb56d17ef7081e7570fe13be8431d4c2d313150378482916b09c358dff16cfcb6f904a18d5fb4b19f182a9d6d9af3a52d19296633da40d9a", 0xeba}], 0x4}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) 3.63959055s ago: executing program 1 (id=1305): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$audio(0xffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000280)=0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0x6, 0x80, 0x246, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) recvmmsg(r4, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0xff78}, {&(0x7f0000000300)=""/92, 0x33}], 0x2}}], 0x1, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000040)='N', 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) 3.276766416s ago: executing program 4 (id=1306): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) io_setup(0x6, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(0x0, 0x0, &(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x2, 0x6, 0x301, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}]}, 0x40}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 3.218202241s ago: executing program 2 (id=1307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_clone(0x4008200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xc79c, 0x3, 0x101, 0x602, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0xc, @void, @value, @void, @value}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}}, 0x0) 3.072062655s ago: executing program 0 (id=1308): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1d, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x4, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@broadcast}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x8}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@rand_addr=0x64010101, @multicast1]}]}}}}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = dup(0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)=""/247, 0x1a, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x28) 2.943709003s ago: executing program 3 (id=1309): connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x3ff, @loopback}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="2b2b5d810b852a0be83a2bdd2a63f6dd", 0x10) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x2) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x13, r3, 0x81000000) r4 = dup(r2) write$UHID_DESTROY(r4, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_setup(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x1970024, &(0x7f0000000840)=ANY=[]) 1.589298545s ago: executing program 3 (id=1310): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x2) recvmmsg(r1, &(0x7f0000002640)=[{{&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000019c0)}, 0x6}, {{0x0, 0x0, &(0x7f0000001fc0)=[{0x0}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)=""/51, 0x33}, {&(0x7f0000001b80)=""/30, 0x1e}, {&(0x7f0000001bc0)=""/182, 0xb6}, {&(0x7f0000001c80)=""/215, 0xd7}, {&(0x7f00000026c0)=""/192, 0xc0}, {&(0x7f0000001f40)=""/61, 0x3d}, {&(0x7f0000001f80)}], 0x9, &(0x7f0000002040)=""/135, 0x87}, 0x9}, {{&(0x7f0000002100)=@nfc, 0x80, &(0x7f0000002580), 0x0, &(0x7f00000025c0)=""/65, 0x41}, 0x5}], 0x3, 0x102, 0x0) socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xb) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0xa) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000005fc0), &(0x7f0000006000)=0xc) r4 = socket(0x1d, 0x2, 0x6) accept4$unix(r4, 0x0, 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) 1.352061148s ago: executing program 0 (id=1311): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0xe) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04040a0000000000005467920034db81e7abdddc259aee6063e57dfee0dab308ac44bd02bae33aa428c21e8527c5b32e2c96d0a0d523936e2a0c48"], 0xd) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={0x0}, 0x14) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="230902ffffff7ffbe00001000000"], 0x14}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040), 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) 1.22229583s ago: executing program 4 (id=1312): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x9, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 997.888588ms ago: executing program 2 (id=1313): syz_usb_connect(0x0, 0x53, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1b, 0xc0, 0x75, 0x40, 0xcf3, 0x9375, 0xaae9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0x75, 0x98, 0x91, 0x1, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "9f77525c09da"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x7, 0x1}, {0x6, 0x24, 0x1a, 0xfffa, 0x3}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x40, 0x7, 0x9, 0xf8}]}]}}]}}]}}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6(0xa, 0x0, 0x3c) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x5, 0x193, 0x0, {0x0, 0xea60}}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, r5, 0x3e8c4ddb697c9f8f, 0x0, 0x0, {0x4}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) getgroups(0x0, 0x0) 993.828211ms ago: executing program 4 (id=1314): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x4ac100) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x1132ccf3, 0x4) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000140)={0x1, "27d85592b6bfee2be57c8a209e5cfce2939c0b6b081aa505abcc55a7042fafc2", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200", r9, 0xffffffffffffffff}) r11 = dup(r10) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r11, @ANYBLOB, @ANYBLOB]) close_range(r6, 0xffffffffffffffff, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2010}, 0xc, 0x0}, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) 107.378181ms ago: executing program 3 (id=1315): syz_usb_connect$uac1(0x2, 0xb2, &(0x7f00000010c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x3, 0x1, 0x80, 0x140, 0x22, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xe1}, [@feature_unit={0x13, 0x24, 0x6, 0x1, 0x6, 0x6, [0x7, 0xa, 0xa, 0x1, 0xa, 0x9], 0x9}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x3, 0x2, [0x3, 0x7]}, @extension_unit={0x7, 0x24, 0x8, 0x5, 0x4, 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x205, 0x6, 0x6, 0xfff9, 0x1, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9d8, 0x4, 0x80}]}, {{0x9, 0x5, 0x1, 0x9, 0x218, 0x39, 0x40, 0xf, {0x7, 0x25, 0x1, 0x81, 0x68, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x81, 0x0, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x1, 0x4, {0x7, 0x25, 0x1, 0x0, 0x31, 0x4}}}}}}}]}}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=1316): r0 = memfd_secret(0x0) mmap$snddsp_status(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x200000d, 0x12, r0, 0x82000000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) socket$rds(0x15, 0x5, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000300)) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x0, r4}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008050}, 0x85) preadv(r2, &(0x7f0000000340)=[{&(0x7f00000006c0)=""/185, 0xb9}, {&(0x7f0000000780)=""/164, 0xa4}, {&(0x7f0000000840)=""/111, 0x6f}, {&(0x7f00000008c0)=""/119, 0x77}, {&(0x7f0000000940)=""/200, 0xc8}, {&(0x7f00000002c0)=""/24, 0x18}], 0x6, 0xc, 0x3ffc0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) kernel console output (not intermixed with test programs): sim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.765060][ T8614] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.771249][ T7206] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 456.794969][ T8614] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.803163][ T7206] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12 [ 456.824401][ T8614] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.847878][ T5307] usb 1-1: Using ep0 maxpacket: 8 [ 456.858715][ T5307] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 456.866171][ T5307] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 456.903042][ T8780] lo speed is unknown, defaulting to 1000 [ 456.929004][ T5307] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 456.967381][ T5307] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 456.977619][ T5307] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 456.997386][ T5307] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 457.000336][ C1] powermate: config urb returned -71 [ 457.010854][ T5307] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 457.013382][ C1] powermate: config urb returned -71 [ 457.025946][ C1] powermate: config urb returned -71 [ 457.031541][ C1] powermate: config urb returned -71 [ 457.034273][ T5307] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 457.044750][ T7206] usb 3-1: USB disconnect, device number 19 [ 457.048099][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 457.110893][ T5307] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 457.136546][ T5307] usb 1-1: string descriptor 0 read error: -22 [ 457.143398][ T5221] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 457.162816][ T5307] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 457.201967][ T5307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.249778][ T5307] adutux 1-1:168.0: interrupt endpoints not found [ 457.304402][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.313929][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.337884][ T5221] usb 2-1: config 0 has no interfaces? [ 457.344359][ T5221] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 457.378500][ T5221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.390069][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.400728][ T5221] usb 2-1: config 0 descriptor?? [ 457.423641][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.452636][ T7206] usb 1-1: USB disconnect, device number 19 [ 457.601647][ T8786] xt_hashlimit: size too large, truncated to 1048576 [ 457.700783][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 457.890424][ T5307] usb 2-1: USB disconnect, device number 17 [ 457.907916][ T7206] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 458.132071][ T7206] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 458.153429][ T7206] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 458.211554][ T7206] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 458.302663][ T7206] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 458.336578][ T7206] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 458.375313][ T7206] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 458.390284][ T5307] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 458.471459][ T7206] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 458.496416][ T7206] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 458.557822][ T7206] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 458.597959][ T5307] usb 3-1: Using ep0 maxpacket: 8 [ 458.647053][ T5307] usb 3-1: New USB device found, idVendor=05d1, idProduct=9003, bcdDevice= 2.00 [ 458.676675][ T5307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.687669][ T5307] usb 3-1: Product: syz [ 458.691899][ T5307] usb 3-1: Manufacturer: syz [ 458.714636][ T5307] usb 3-1: SerialNumber: syz [ 458.911955][ T5307] usb 3-1: config 0 descriptor?? [ 459.721306][ T5307] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 459.729438][ T5307] usb 3-1: Detected FT232A [ 459.758131][ T5307] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 459.797840][ T5307] usb 3-1: USB disconnect, device number 20 [ 459.825022][ T5307] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 459.844101][ T5307] ftdi_sio 3-1:0.0: device disconnected [ 461.020569][ T7206] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 461.036325][ T7206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.202207][ T7206] usb 1-1: can't set config #168, error -71 [ 462.129883][ T7206] usb 1-1: USB disconnect, device number 20 [ 462.507650][ T7206] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 462.757220][ T7206] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 462.762159][ T5223] Bluetooth: hci7: command 0x0406 tx timeout [ 462.779697][ T54] Bluetooth: hci6: command 0x0406 tx timeout [ 462.797566][ T7206] usb 1-1: config 0 has no interface number 0 [ 462.803697][ T7206] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=aa.e9 [ 462.812921][ T7206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.884117][ T7206] usb 1-1: config 0 descriptor?? [ 464.091103][ T29] audit: type=1326 audit(1728545187.352:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8812 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1003f7dff9 code=0x7ffc0000 [ 464.152886][ T29] audit: type=1326 audit(1728545187.352:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8812 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1003f7dff9 code=0x7ffc0000 [ 464.197765][ T29] audit: type=1326 audit(1728545187.352:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8812 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1003f7dff9 code=0x7ffc0000 [ 464.248313][ T29] audit: type=1326 audit(1728545187.352:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8812 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1003f7dff9 code=0x7ffc0000 [ 464.292604][ T29] audit: type=1326 audit(1728545187.352:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8812 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1003f7dff9 code=0x7ffc0000 [ 464.331747][ T29] audit: type=1326 audit(1728545187.352:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8812 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f1003f7dff9 code=0x7ffc0000 [ 464.353464][ T29] audit: type=1326 audit(1728545187.352:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8812 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1003f7dff9 code=0x7ffc0000 [ 464.375075][ T29] audit: type=1326 audit(1728545187.362:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8812 comm="syz.0.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1003f7dff9 code=0x7ffc0000 [ 465.593429][ T7206] usb 1-1: string descriptor 0 read error: -71 [ 465.707694][ T7206] ath6kl: Failed to submit usb control message: -71 [ 465.714713][ T7206] ath6kl: unable to send the bmi data to the device: -71 [ 465.722152][ T7206] ath6kl: Unable to send get target info: -71 [ 465.745676][ T7206] ath6kl: Failed to init ath6kl core: -71 [ 465.751911][ T7206] ath6kl_usb 1-1:0.143: probe with driver ath6kl_usb failed with error -71 [ 465.901196][ T7206] usb 1-1: USB disconnect, device number 21 [ 466.647763][ T7206] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 467.057567][ T7206] usb 1-1: Using ep0 maxpacket: 8 [ 467.066317][ T7206] usb 1-1: New USB device found, idVendor=05d1, idProduct=9003, bcdDevice= 2.00 [ 467.078123][ T7206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.086142][ T7206] usb 1-1: Product: syz [ 467.111891][ T7206] usb 1-1: Manufacturer: syz [ 467.116676][ T7206] usb 1-1: SerialNumber: syz [ 467.117240][ T8866] tipc: Started in network mode [ 467.144616][ T7206] usb 1-1: config 0 descriptor?? [ 467.152930][ T8866] tipc: Node identity b84, cluster identity 4711 [ 467.178048][ T7206] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 467.193385][ T8866] tipc: Node number set to 2948 [ 467.216677][ T7206] usb 1-1: Detected FT232A [ 467.254501][ T7206] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 467.386359][ T7206] usb 1-1: USB disconnect, device number 22 [ 467.417386][ T7206] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 467.493641][ T7206] ftdi_sio 1-1:0.0: device disconnected [ 467.904475][ T5236] Bluetooth: hci1: command 0x0406 tx timeout [ 468.439910][ T5307] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 468.605796][ T5307] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 468.619208][ T5307] usb 3-1: config 0 has no interface number 0 [ 468.647210][ T5307] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=aa.e9 [ 468.683338][ T5307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.713999][ T5307] usb 3-1: config 0 descriptor?? [ 469.958707][ T29] audit: type=1326 audit(1728545193.342:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8876 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45df37dff9 code=0x7ffc0000 [ 470.232889][ T8901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.320961][ T29] audit: type=1326 audit(1728545193.342:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8876 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45df37dff9 code=0x7ffc0000 [ 470.342958][ T29] audit: type=1326 audit(1728545193.342:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8876 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45df37dff9 code=0x7ffc0000 [ 470.365160][ T29] audit: type=1326 audit(1728545193.342:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8876 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45df37dff9 code=0x7ffc0000 [ 470.387109][ T29] audit: type=1326 audit(1728545193.342:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8876 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45df37dff9 code=0x7ffc0000 [ 470.396405][ T8901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.408768][ T29] audit: type=1326 audit(1728545193.342:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8876 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f45df37dff9 code=0x7ffc0000 [ 470.408836][ T29] audit: type=1326 audit(1728545193.342:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8876 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45df37dff9 code=0x7ffc0000 [ 470.408867][ T29] audit: type=1326 audit(1728545193.342:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8876 comm="syz.2.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45df37dff9 code=0x7ffc0000 [ 472.378004][ T5307] usb 3-1: string descriptor 0 read error: -71 [ 472.458249][ T5307] ath6kl: Failed to submit usb control message: -71 [ 472.464905][ T5307] ath6kl: unable to send the bmi data to the device: -71 [ 472.491600][ T5307] ath6kl: Unable to send get target info: -71 [ 472.565758][ T5307] ath6kl: Failed to init ath6kl core: -71 [ 472.722258][ T5307] ath6kl_usb 3-1:0.143: probe with driver ath6kl_usb failed with error -71 [ 472.767631][ T5221] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 472.819794][ T5307] usb 3-1: USB disconnect, device number 21 [ 472.974650][ T5221] usb 5-1: device descriptor read/64, error -71 [ 473.867569][ T5221] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 474.198407][ T5221] usb 5-1: device descriptor read/64, error -71 [ 474.488283][ T5221] usb usb5-port1: attempt power cycle [ 474.867586][ T5221] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 474.909274][ T5221] usb 5-1: device descriptor read/8, error -71 [ 475.039500][ T8960] random: crng reseeded on system resumption [ 475.159374][ T5221] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 475.187998][ T5221] usb 5-1: device descriptor read/8, error -71 [ 475.218532][ T5307] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 475.311310][ T5221] usb usb5-port1: unable to enumerate USB device [ 475.379147][ T5307] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 475.387571][ T5307] usb 2-1: config 0 has no interface number 0 [ 475.393835][ T5307] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=aa.e9 [ 475.403316][ T5307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.524267][ T5307] usb 2-1: config 0 descriptor?? [ 476.176893][ T29] audit: type=1326 audit(1728545200.132:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8956 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ef77dff9 code=0x7ffc0000 [ 477.218932][ T29] audit: type=1326 audit(1728545200.132:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8956 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ef77dff9 code=0x7ffc0000 [ 477.427412][ T29] audit: type=1326 audit(1728545200.132:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8956 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70ef77dff9 code=0x7ffc0000 [ 477.957881][ T29] audit: type=1326 audit(1728545200.132:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8956 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ef77dff9 code=0x7ffc0000 [ 477.979615][ T29] audit: type=1326 audit(1728545200.132:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8956 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ef77dff9 code=0x7ffc0000 [ 478.001618][ T29] audit: type=1326 audit(1728545200.132:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8956 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f70ef77dff9 code=0x7ffc0000 [ 478.023249][ T29] audit: type=1326 audit(1728545200.132:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8956 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ef77dff9 code=0x7ffc0000 [ 478.045672][ T29] audit: type=1326 audit(1728545200.132:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8956 comm="syz.1.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ef77dff9 code=0x7ffc0000 [ 478.158513][ T5236] Bluetooth: hci2: command 0x0406 tx timeout [ 479.287928][ T5307] usb 2-1: string descriptor 0 read error: -71 [ 479.350442][ T5307] ath6kl: Failed to submit usb control message: -71 [ 479.358324][ T5307] ath6kl: unable to send the bmi data to the device: -71 [ 479.365394][ T5307] ath6kl: Unable to send get target info: -71 [ 479.382005][ T5307] ath6kl: Failed to init ath6kl core: -71 [ 479.587539][ T7206] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 479.625939][ T5307] ath6kl_usb 2-1:0.143: probe with driver ath6kl_usb failed with error -71 [ 479.637374][ T5307] usb 2-1: USB disconnect, device number 18 [ 480.629868][ T7206] usb 1-1: unable to get BOS descriptor or descriptor too short [ 480.708191][ T7206] usb 1-1: not running at top speed; connect to a high speed hub [ 480.801398][ T7206] usb 1-1: config 91 has an invalid interface number: 58 but max is 0 [ 480.867583][ T7206] usb 1-1: config 91 has no interface number 0 [ 480.913692][ T7206] usb 1-1: config 91 interface 58 has no altsetting 0 [ 480.947580][ T5328] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 480.993297][ T7206] usb 1-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.5e [ 481.078357][ T7206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.155672][ T5328] usb 2-1: device descriptor read/64, error -71 [ 481.249730][ T7206] usb 1-1: Product: syz [ 481.253917][ T7206] usb 1-1: Manufacturer: syz [ 481.303059][ T7206] usb 1-1: SerialNumber: syz [ 481.421872][ T9015] netlink: 'syz.3.950': attribute type 9 has an invalid length. [ 481.446098][ T9015] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.950'. [ 481.487701][ T7206] usb 1-1: can't set config #91, error -71 [ 481.569343][ T9017] siw: device registration error -23 [ 481.653934][ T7206] usb 1-1: USB disconnect, device number 23 [ 481.717593][ T5328] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 482.033928][ T5328] usb 2-1: device descriptor read/64, error -71 [ 482.161596][ T9023] bio_check_eod: 2 callbacks suppressed [ 482.161636][ T9023] syz.0.949: attempt to access beyond end of device [ 482.161636][ T9023] loop0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 482.181267][ T9023] syz.0.949: attempt to access beyond end of device [ 482.181267][ T9023] loop0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 482.194438][ T9023] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 482.205481][ T9023] syz.0.949: attempt to access beyond end of device [ 482.205481][ T9023] loop0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 482.218994][ T9023] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 482.229126][ T9023] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 482.236834][ T9023] UDF-fs: Scanning with blocksize 512 failed [ 482.246152][ T9023] syz.0.949: attempt to access beyond end of device [ 482.246152][ T9023] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 482.260058][ T9023] syz.0.949: attempt to access beyond end of device [ 482.260058][ T9023] loop0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 482.273188][ T9023] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 482.283643][ T9023] syz.0.949: attempt to access beyond end of device [ 482.283643][ T9023] loop0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 482.317810][ T9023] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 482.327900][ T9023] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 482.335637][ T9023] UDF-fs: Scanning with blocksize 1024 failed [ 482.344324][ T9023] syz.0.949: attempt to access beyond end of device [ 482.344324][ T9023] loop0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 482.357842][ T9023] syz.0.949: attempt to access beyond end of device [ 482.357842][ T9023] loop0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 482.371207][ T9023] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 482.381542][ T9023] syz.0.949: attempt to access beyond end of device [ 482.381542][ T9023] loop0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 482.394793][ T9023] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 482.404502][ T9023] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 482.412510][ T9023] UDF-fs: Scanning with blocksize 2048 failed [ 482.423265][ T9023] syz.0.949: attempt to access beyond end of device [ 482.423265][ T9023] loop0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 482.437273][ T9023] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 482.448272][ T9023] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 482.458026][ T9023] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 482.465719][ T9023] UDF-fs: Scanning with blocksize 4096 failed [ 482.471873][ T9023] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 482.487633][ T5328] usb usb2-port1: attempt power cycle [ 482.827854][ T5328] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 482.882419][ T5328] usb 2-1: device descriptor read/8, error -71 [ 483.027974][ T5323] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 483.138010][ T5328] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 483.191759][ T8831] Bluetooth: hci2: Unknown advertising packet type: 0x14 [ 483.191842][ T8831] Bluetooth: hci2: Unknown advertising packet type: 0x20 [ 483.200462][ T5328] usb 2-1: device descriptor read/8, error -71 [ 483.259612][ T5323] usb 3-1: unable to get BOS descriptor or descriptor too short [ 483.310988][ T5323] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 483.325809][ T5323] usb 3-1: can't read configurations, error -71 [ 483.347930][ T5328] usb usb2-port1: unable to enumerate USB device [ 483.681767][ T9042] random: crng reseeded on system resumption [ 483.945122][ T9049] netlink: 'syz.3.961': attribute type 9 has an invalid length. [ 483.953583][ T9049] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.961'. [ 483.995807][ T9049] siw: device registration error -23 [ 484.952399][ T9067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.962'. [ 485.053515][ T9071] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 485.065566][ T9071] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 485.075465][ T9071] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 485.083495][ T9071] UDF-fs: Scanning with blocksize 512 failed [ 485.092425][ T9071] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 485.103331][ T9071] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 485.113194][ T9071] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 485.120944][ T9071] UDF-fs: Scanning with blocksize 1024 failed [ 485.129887][ T9071] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 485.141453][ T9071] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 485.151153][ T9071] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 485.179870][ T9071] UDF-fs: Scanning with blocksize 2048 failed [ 485.189873][ T9071] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 485.200632][ T9071] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 485.210663][ T9071] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 485.218406][ T9071] UDF-fs: Scanning with blocksize 4096 failed [ 485.224532][ T9071] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 485.985222][ T9084] netlink: 'syz.2.972': attribute type 9 has an invalid length. [ 485.993398][ T9084] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.972'. [ 486.009277][ T8831] Bluetooth: hci1: Unknown advertising packet type: 0x14 [ 486.009360][ T8831] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 486.087755][ T5323] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 486.146955][ T9092] siw: device registration error -23 [ 486.322045][ T5323] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 486.335712][ T5323] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.352367][ T5323] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 486.361782][ T5323] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.373367][ T5323] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.556452][ T5323] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 486.567722][ T5323] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 486.577540][ T5323] usb 1-1: Product: syz [ 486.581996][ T5323] usb 1-1: Manufacturer: syz [ 486.658214][ T5323] cdc_wdm 1-1:1.0: skipping garbage [ 486.663555][ T5323] cdc_wdm 1-1:1.0: skipping garbage [ 486.736786][ T5323] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 486.743456][ T5323] cdc_wdm 1-1:1.0: Unknown control protocol [ 487.021762][ T5307] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 487.045964][ T7206] usb 1-1: USB disconnect, device number 24 [ 487.177550][ T5307] usb 2-1: Using ep0 maxpacket: 8 [ 487.194179][ T5307] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 487.222580][ T5307] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 487.264403][ T5307] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 487.287974][ T5221] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 487.310522][ T5307] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 487.335241][ T5307] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 487.388313][ T5307] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 487.406805][ T5307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.457598][ T5221] usb 5-1: Using ep0 maxpacket: 16 [ 487.491888][ T5221] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 487.516908][ T5221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.540996][ T5221] usb 5-1: Product: syz [ 487.562269][ T5221] usb 5-1: Manufacturer: syz [ 487.590648][ T5221] usb 5-1: SerialNumber: syz [ 487.625358][ T5221] usb 5-1: config 0 descriptor?? [ 487.655715][ T5307] usb 2-1: usb_control_msg returned -32 [ 487.682525][ T5221] as10x_usb: device has been detected [ 487.688531][ T5307] usbtmc 2-1:16.0: can't read capabilities [ 487.714319][ T5221] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 487.735705][ T5307] usb 2-1: USB disconnect, device number 23 [ 487.808816][ T5221] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 487.846018][ T5221] as10x_usb: error during firmware upload part1 [ 487.880482][ T9104] random: crng reseeded on system resumption [ 487.886976][ T5221] Registered device Sky IT Digital Key (green led) [ 488.339136][ T9115] bio_check_eod: 14 callbacks suppressed [ 488.339177][ T9115] syz.3.981: attempt to access beyond end of device [ 488.339177][ T9115] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 488.359602][ T9115] syz.3.981: attempt to access beyond end of device [ 488.359602][ T9115] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 488.373178][ T9115] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 488.384152][ T9115] syz.3.981: attempt to access beyond end of device [ 488.384152][ T9115] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 488.397348][ T9115] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 488.407045][ T9115] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 488.414794][ T9115] UDF-fs: Scanning with blocksize 512 failed [ 488.423796][ T9115] syz.3.981: attempt to access beyond end of device [ 488.423796][ T9115] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 488.437735][ T9115] syz.3.981: attempt to access beyond end of device [ 488.437735][ T9115] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 488.471727][ T9115] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 488.482256][ T9115] syz.3.981: attempt to access beyond end of device [ 488.482256][ T9115] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 488.495448][ T9115] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 488.505130][ T9115] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 488.512855][ T9115] UDF-fs: Scanning with blocksize 1024 failed [ 488.521115][ T9115] syz.3.981: attempt to access beyond end of device [ 488.521115][ T9115] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 488.534817][ T9115] syz.3.981: attempt to access beyond end of device [ 488.534817][ T9115] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 488.548054][ T9115] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 488.558347][ T9115] syz.3.981: attempt to access beyond end of device [ 488.558347][ T9115] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 488.571688][ T9115] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 488.583158][ T9115] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 488.591326][ T9115] UDF-fs: Scanning with blocksize 2048 failed [ 488.599194][ T9115] syz.3.981: attempt to access beyond end of device [ 488.599194][ T9115] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 488.612807][ T9115] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 488.623174][ T9115] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 488.632840][ T9115] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 488.640582][ T9115] UDF-fs: Scanning with blocksize 4096 failed [ 488.646704][ T9115] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 489.334935][ T5323] usb 5-1: USB disconnect, device number 29 [ 489.399041][ T5323] Unregistered device Sky IT Digital Key (green led) [ 489.418812][ T5323] as10x_usb: device has been disconnected [ 489.637731][ T7206] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 489.925007][ T8831] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 489.934073][ T7206] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 489.942791][ T7206] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.953079][ T7206] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 489.955237][ T9143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.962859][ T7206] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.962890][ T7206] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.025845][ T7206] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 490.034950][ T7206] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 490.089215][ T7206] usb 1-1: Product: syz [ 490.093433][ T7206] usb 1-1: Manufacturer: syz [ 490.183429][ T7206] cdc_wdm 1-1:1.0: skipping garbage [ 490.235888][ T7206] cdc_wdm 1-1:1.0: skipping garbage [ 490.301453][ T7206] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 490.334074][ T7206] cdc_wdm 1-1:1.0: Unknown control protocol [ 491.552635][ T5307] usb 1-1: USB disconnect, device number 25 [ 491.707921][ T7206] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 491.837668][ T8831] Bluetooth: hci2: Unknown advertising packet type: 0x14 [ 491.837707][ T8831] Bluetooth: hci2: Unknown advertising packet type: 0x20 [ 492.004779][ T9173] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 492.022697][ T9173] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 492.032570][ T9173] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 492.040580][ T9173] UDF-fs: Scanning with blocksize 512 failed [ 492.050041][ T9173] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 492.060930][ T9173] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 492.070872][ T9173] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 492.078724][ T9173] UDF-fs: Scanning with blocksize 1024 failed [ 492.087554][ T9173] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 492.097792][ T9173] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 492.107412][ T9173] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 492.115309][ T9173] UDF-fs: Scanning with blocksize 2048 failed [ 492.123738][ T9173] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 492.134112][ T9173] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 492.165571][ T9173] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 492.173402][ T9173] UDF-fs: Scanning with blocksize 4096 failed [ 492.179574][ T9173] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 492.496125][ T7206] usb 5-1: Using ep0 maxpacket: 8 [ 492.504432][ T7206] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 492.521301][ T7206] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 492.535700][ T7206] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 492.554045][ T7206] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 492.669832][ T7206] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 492.683599][ T7206] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 492.692733][ T7206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.932118][ T7206] usb 5-1: usb_control_msg returned -32 [ 492.952046][ T7206] usbtmc 5-1:16.0: can't read capabilities [ 493.007729][ T7206] usb 5-1: USB disconnect, device number 30 [ 493.048305][ T5307] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 493.239210][ T5307] usb 4-1: Using ep0 maxpacket: 16 [ 493.308720][ T29] audit: type=1326 audit(1728549312.255:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9185 comm="syz.0.1005" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1003f7dff9 code=0x0 [ 493.867081][ T5307] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 493.877508][ T5307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.885642][ T5307] usb 4-1: Product: syz [ 493.889941][ T5307] usb 4-1: Manufacturer: syz [ 493.894646][ T5307] usb 4-1: SerialNumber: syz [ 493.902309][ T5307] usb 4-1: config 0 descriptor?? [ 493.962461][ T5307] as10x_usb: device has been detected [ 493.969360][ T5307] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 493.985051][ T8831] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 494.003831][ T9196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.844630][ T9196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.855966][ T9181] random: crng reseeded on system resumption [ 494.862951][ T5307] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 494.978992][ T5307] as10x_usb: error during firmware upload part1 [ 495.097570][ T5307] Registered device Sky IT Digital Key (green led) [ 496.225874][ T5323] usb 4-1: USB disconnect, device number 22 [ 496.268533][ T5323] Unregistered device Sky IT Digital Key (green led) [ 496.288602][ T5323] as10x_usb: device has been disconnected [ 496.437567][ T7206] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 496.450515][ T5307] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 496.619768][ T5307] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 496.630338][ T5307] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.642647][ T8831] Bluetooth: hci7: Unknown advertising packet type: 0x14 [ 496.642788][ T8831] Bluetooth: hci7: Unknown advertising packet type: 0x20 [ 496.653179][ T7206] usb 5-1: unable to get BOS descriptor or descriptor too short [ 496.657570][ T5307] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 496.686827][ T7206] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 496.709647][ T7206] usb 5-1: can't read configurations, error -71 [ 496.711487][ T5307] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.761634][ T5307] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.793537][ T5307] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 496.816502][ T5307] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 496.844564][ T5307] usb 3-1: Product: syz [ 496.849317][ T5307] usb 3-1: Manufacturer: syz [ 496.866399][ T5307] cdc_wdm 3-1:1.0: skipping garbage [ 496.889889][ T5307] cdc_wdm 3-1:1.0: skipping garbage [ 496.913683][ T5307] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 496.934524][ T5307] cdc_wdm 3-1:1.0: Unknown control protocol [ 497.083466][ T9215] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 497.235538][ T5221] usb 3-1: USB disconnect, device number 24 [ 498.087704][ T5221] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 498.260156][ T5221] usb 4-1: Using ep0 maxpacket: 8 [ 498.708921][ T5221] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 498.727420][ T5221] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 498.737616][ T5221] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 498.747423][ T5221] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 498.758089][ T5221] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.771578][ T5221] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 498.780892][ T5221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.822812][ T9254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.837096][ T9254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.160627][ T5326] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 499.212135][ T5221] usb 4-1: usb_control_msg returned -32 [ 499.217827][ T5221] usbtmc 4-1:16.0: can't read capabilities [ 500.005902][ T5275] usb 4-1: USB disconnect, device number 23 [ 500.017861][ T5326] usb 3-1: Using ep0 maxpacket: 16 [ 500.046521][ T5326] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 500.056071][ T5326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.085724][ T5326] usb 3-1: Product: syz [ 500.090671][ T5326] usb 3-1: Manufacturer: syz [ 500.110318][ T5326] usb 3-1: SerialNumber: syz [ 500.126565][ T5326] usb 3-1: config 0 descriptor?? [ 500.143595][ T5326] as10x_usb: device has been detected [ 500.150499][ T5326] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 500.166981][ T5326] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 500.178013][ T5326] as10x_usb: error during firmware upload part1 [ 500.184299][ T5326] Registered device Sky IT Digital Key (green led) [ 500.344720][ T9257] random: crng reseeded on system resumption [ 500.387590][ T5221] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 500.541630][ T8831] Bluetooth: hci1: Unknown advertising packet type: 0x14 [ 500.541666][ T8831] Bluetooth: hci1: Unknown advertising packet type: 0x20 [ 500.554350][ T5221] usb 2-1: unable to get BOS descriptor or descriptor too short [ 500.649841][ T5274] usb 3-1: USB disconnect, device number 25 [ 500.683291][ T5221] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 500.715765][ T5274] Unregistered device Sky IT Digital Key (green led) [ 500.718493][ T5274] as10x_usb: device has been disconnected [ 500.734854][ T5221] usb 2-1: can't read configurations, error -71 [ 501.097636][ T5275] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 501.249805][ T5275] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 501.298860][ T5275] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 501.336355][ T5275] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 501.360779][ T5275] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 501.360919][ T9289] tipc: Started in network mode [ 501.387409][ T9289] tipc: Node identity b84, cluster identity 4711 [ 501.414217][ T5275] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 501.444113][ T9289] tipc: Node number set to 2948 [ 501.455263][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 501.479007][ T5275] usb 1-1: Product: syz [ 501.491461][ T5275] usb 1-1: Manufacturer: syz [ 501.512964][ T5275] cdc_wdm 1-1:1.0: skipping garbage [ 501.518395][ T5275] cdc_wdm 1-1:1.0: skipping garbage [ 501.534676][ T5275] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 501.638675][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.645016][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.854036][ T8831] Bluetooth: hci7: ACL packet for unknown connection handle 0 [ 502.012606][ T9300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.871178][ T8] usb 1-1: USB disconnect, device number 26 [ 502.878774][ T9300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.840515][ T29] audit: type=1326 audit(1728549323.805:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9327 comm="syz.3.1048" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5db37dff9 code=0x0 [ 505.616973][ T9338] tipc: Started in network mode [ 505.640956][ T9338] tipc: Node identity b84, cluster identity 4711 [ 505.683097][ T9338] tipc: Node number set to 2948 [ 508.352408][ T8831] Bluetooth: hci7: ACL packet for unknown connection handle 0 [ 508.361177][ T9363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.661585][ T9363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.008027][ T5328] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 510.480234][ T5328] usb 4-1: unable to get BOS descriptor or descriptor too short [ 511.478660][ T5328] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 511.486484][ T5328] usb 4-1: can't read configurations, error -71 [ 511.501108][ T9391] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1063'. [ 513.044557][ T9419] bio_check_eod: 14 callbacks suppressed [ 513.044576][ T9419] syz.3.1069: attempt to access beyond end of device [ 513.044576][ T9419] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 513.799753][ T9419] syz.3.1069: attempt to access beyond end of device [ 513.799753][ T9419] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 513.812999][ T9419] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 513.826241][ T9419] syz.3.1069: attempt to access beyond end of device [ 513.826241][ T9419] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 513.859151][ T29] audit: type=1326 audit(1728549332.025:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9410 comm="syz.0.1071" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1003f7dff9 code=0x0 [ 513.880200][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.896918][ T9419] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 513.906569][ T9419] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 513.914362][ T9419] UDF-fs: Scanning with blocksize 512 failed [ 513.921388][ T9419] syz.3.1069: attempt to access beyond end of device [ 513.921388][ T9419] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 513.934727][ T9419] syz.3.1069: attempt to access beyond end of device [ 513.934727][ T9419] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 513.954330][ T9419] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 513.964284][ T9419] syz.3.1069: attempt to access beyond end of device [ 513.964284][ T9419] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 513.978546][ T9419] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 513.988288][ T9419] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 513.995967][ T9419] UDF-fs: Scanning with blocksize 1024 failed [ 514.002848][ T9419] syz.3.1069: attempt to access beyond end of device [ 514.002848][ T9419] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 514.016173][ T9419] syz.3.1069: attempt to access beyond end of device [ 514.016173][ T9419] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 514.029402][ T9419] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 514.039337][ T9419] syz.3.1069: attempt to access beyond end of device [ 514.039337][ T9419] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 514.052967][ T9419] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 514.063212][ T9419] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 514.071855][ T9419] UDF-fs: Scanning with blocksize 2048 failed [ 514.078659][ T9419] syz.3.1069: attempt to access beyond end of device [ 514.078659][ T9419] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 514.091978][ T9419] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 514.101941][ T9419] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 514.111704][ T9419] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 514.119505][ T9419] UDF-fs: Scanning with blocksize 4096 failed [ 514.125616][ T9419] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 514.341505][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 514.356630][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 514.367350][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 514.379458][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 514.388216][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 514.395539][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 514.657921][ T9424] lo speed is unknown, defaulting to 1000 [ 514.955152][ T7907] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.924970][ T7907] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.987854][ T9447] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1076'. [ 516.113618][ T7907] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.131578][ T9424] chnl_net:caif_netlink_parms(): no params data found [ 516.206314][ T7907] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.280954][ T9424] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.292587][ T9424] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.308635][ T9424] bridge_slave_0: entered allmulticast mode [ 516.320371][ T9424] bridge_slave_0: entered promiscuous mode [ 516.335400][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.342740][ T9424] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.350666][ T9424] bridge_slave_1: entered allmulticast mode [ 516.381279][ T9424] bridge_slave_1: entered promiscuous mode [ 517.051594][ T9424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.075727][ T9424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.157647][ T5236] Bluetooth: hci1: command tx timeout [ 517.461206][ T9424] team0: Port device team_slave_0 added [ 517.470056][ T9424] team0: Port device team_slave_1 added [ 518.184464][ T7907] bridge_slave_1: left allmulticast mode [ 518.321159][ T7907] bridge_slave_1: left promiscuous mode [ 518.396620][ T7907] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.488507][ T7907] bridge_slave_0: left allmulticast mode [ 518.651084][ T7907] bridge_slave_0: left promiscuous mode [ 518.678834][ T7907] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.247762][ T5236] Bluetooth: hci1: command tx timeout [ 519.622040][ T7907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.659356][ T7907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.675083][ T7907] bond0 (unregistering): Released all slaves [ 519.715355][ T9424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.746035][ T9424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.819639][ T9424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.854539][ T7907] tipc: Left network mode [ 519.895528][ T9424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.937956][ T9424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.963872][ C0] vkms_vblank_simulate: vblank timer overrun [ 520.043288][ T9424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.799159][ T9513] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1087'. [ 521.003656][ T9424] hsr_slave_0: entered promiscuous mode [ 521.049704][ T9424] hsr_slave_1: entered promiscuous mode [ 521.075933][ T9424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 521.099807][ T9424] Cannot create hsr debugfs directory [ 521.374985][ T5236] Bluetooth: hci1: command tx timeout [ 521.565152][ T7907] hsr_slave_0: left promiscuous mode [ 521.590010][ T7907] hsr_slave_1: left promiscuous mode [ 521.606302][ T7907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.769032][ T9542] 9pnet_fd: Insufficient options for proto=fd [ 522.451668][ T7907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.748912][ T7907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.756595][ T7907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.960367][ T7907] veth1_macvtap: left promiscuous mode [ 522.965940][ T7907] veth0_macvtap: left promiscuous mode [ 523.265760][ T7907] veth1_vlan: left promiscuous mode [ 523.899513][ T5236] Bluetooth: hci1: command tx timeout [ 523.919164][ T7907] veth0_vlan: left promiscuous mode [ 525.346532][ T8831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 526.096446][ T8831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 526.182267][ T7907] team0 (unregistering): Port device team_slave_1 removed [ 526.213858][ T8831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 526.257965][ T8831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 526.289380][ T8831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 526.303328][ T8831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 526.369631][ T7907] team0 (unregistering): Port device team_slave_0 removed [ 526.919495][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 526.930711][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 526.971654][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 526.995047][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 527.003140][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 527.011396][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 527.558562][ T9591] lo speed is unknown, defaulting to 1000 [ 527.642956][ T9579] lo speed is unknown, defaulting to 1000 [ 528.647748][ T8831] Bluetooth: hci4: command tx timeout [ 528.809688][ T9424] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 529.002560][ T9424] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 529.108330][ T8831] Bluetooth: hci2: command tx timeout [ 529.157779][ T7206] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 529.367634][ T7206] usb 5-1: Using ep0 maxpacket: 32 [ 529.377633][ T9424] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 529.447498][ T7206] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.569548][ T7206] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 529.597288][ T9424] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 529.714722][ T7206] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 529.785163][ T7206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.871166][ T9579] chnl_net:caif_netlink_parms(): no params data found [ 529.883435][ T7206] usb 5-1: Product: syz [ 529.888773][ T7206] usb 5-1: Manufacturer: syz [ 529.893441][ T7206] usb 5-1: SerialNumber: syz [ 529.970483][ T9591] chnl_net:caif_netlink_parms(): no params data found [ 530.238032][ T9624] netlink: 'syz.4.1106': attribute type 72 has an invalid length. [ 530.572763][ T7206] usb 5-1: USB disconnect, device number 33 [ 530.679692][ T8831] Bluetooth: hci4: command tx timeout [ 530.912671][ T7907] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.158576][ T8831] Bluetooth: hci2: command tx timeout [ 531.530343][ T7907] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.607343][ T9424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.690402][ T9579] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.726890][ T9579] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.734488][ T9579] bridge_slave_0: entered allmulticast mode [ 531.741637][ T9579] bridge_slave_0: entered promiscuous mode [ 531.784059][ T7907] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.839865][ T9579] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.847137][ T9579] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.855651][ T9579] bridge_slave_1: entered allmulticast mode [ 531.876378][ T9579] bridge_slave_1: entered promiscuous mode [ 531.895243][ T9591] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.905939][ T9591] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.924161][ T9591] bridge_slave_0: entered allmulticast mode [ 531.934879][ T9591] bridge_slave_0: entered promiscuous mode [ 532.004196][ T7907] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.142252][ T29] audit: type=1326 audit(1728549351.105:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9687 comm="syz.4.1112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f104717dff9 code=0x0 [ 532.172336][ T9591] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.190382][ T9591] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.210821][ T9591] bridge_slave_1: entered allmulticast mode [ 532.224648][ T9591] bridge_slave_1: entered promiscuous mode [ 532.235551][ T9579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.254345][ T9579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.304840][ T9424] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.369966][ T9591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.388774][ T7909] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.395928][ T7909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.429309][ T9579] team0: Port device team_slave_0 added [ 532.439171][ T9591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.522213][ T7909] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.529400][ T7909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.587925][ T9579] team0: Port device team_slave_1 added [ 532.614382][ T9591] team0: Port device team_slave_0 added [ 532.678881][ T9591] team0: Port device team_slave_1 added [ 532.758076][ T8831] Bluetooth: hci4: command tx timeout [ 532.784141][ T7907] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.826510][ T9579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.838760][ T9579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.865508][ T9579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.982401][ T7907] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.043718][ T9579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.065517][ T9579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.103863][ T9579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.157305][ T9591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.177781][ T9591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.237612][ T8831] Bluetooth: hci2: command tx timeout [ 533.257596][ T9591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.288008][ T7907] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.934170][ T9591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.951909][ T9591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.073769][ T9591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.417035][ T7907] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.858688][ T8831] Bluetooth: hci4: command tx timeout [ 534.921444][ T9579] hsr_slave_0: entered promiscuous mode [ 535.037850][ T9579] hsr_slave_1: entered promiscuous mode [ 535.066303][ T9579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 535.085867][ T9579] Cannot create hsr debugfs directory [ 535.174468][ T9591] hsr_slave_0: entered promiscuous mode [ 535.262616][ T9730] bio_check_eod: 2 callbacks suppressed [ 535.262656][ T9730] syz.4.1118: attempt to access beyond end of device [ 535.262656][ T9730] loop4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 535.282869][ T9730] syz.4.1118: attempt to access beyond end of device [ 535.282869][ T9730] loop4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 535.296109][ T9730] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 535.306673][ T9730] syz.4.1118: attempt to access beyond end of device [ 535.306673][ T9730] loop4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 535.319947][ T9730] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 535.329611][ T9730] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 535.337307][ T9730] UDF-fs: Scanning with blocksize 512 failed [ 535.346485][ T9730] syz.4.1118: attempt to access beyond end of device [ 535.346485][ T9730] loop4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 535.360372][ T9730] syz.4.1118: attempt to access beyond end of device [ 535.360372][ T9730] loop4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 535.395187][ T9730] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 535.405640][ T9730] syz.4.1118: attempt to access beyond end of device [ 535.405640][ T9730] loop4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 535.418991][ T9730] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 535.428672][ T9730] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 535.436368][ T9730] UDF-fs: Scanning with blocksize 1024 failed [ 535.444723][ T9730] syz.4.1118: attempt to access beyond end of device [ 535.444723][ T9730] loop4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 535.458657][ T9730] syz.4.1118: attempt to access beyond end of device [ 535.458657][ T9730] loop4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 535.471986][ T9730] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 535.482517][ T9730] syz.4.1118: attempt to access beyond end of device [ 535.482517][ T9730] loop4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 535.496100][ T9730] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 535.505783][ T9730] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 535.514924][ T9730] UDF-fs: Scanning with blocksize 2048 failed [ 535.522692][ T9730] syz.4.1118: attempt to access beyond end of device [ 535.522692][ T9730] loop4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 535.536384][ T9730] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 535.546909][ T9730] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 535.557645][ T9730] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 535.565316][ T9730] UDF-fs: Scanning with blocksize 4096 failed [ 535.571863][ T9730] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 535.575481][ T8831] Bluetooth: hci2: command tx timeout [ 535.581988][ T9591] hsr_slave_1: entered promiscuous mode [ 535.605772][ T9591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 535.622070][ T9591] Cannot create hsr debugfs directory [ 535.643925][ T9424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 536.408618][ T8831] Bluetooth: hci7: Unknown advertising packet type: 0x14 [ 536.408654][ T8831] Bluetooth: hci7: Unknown advertising packet type: 0x20 [ 536.500770][ T7907] bridge_slave_1: left allmulticast mode [ 536.518059][ T7907] bridge_slave_1: left promiscuous mode [ 536.524020][ T7907] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.545023][ T7907] bridge_slave_0: left allmulticast mode [ 536.550955][ T7907] bridge_slave_0: left promiscuous mode [ 536.560265][ T7907] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.581215][ T7907] bridge_slave_1: left allmulticast mode [ 536.587277][ T7907] bridge_slave_1: left promiscuous mode [ 536.593880][ T7907] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.612875][ T7907] bridge_slave_0: left allmulticast mode [ 536.619430][ T7907] bridge_slave_0: left promiscuous mode [ 536.625126][ T7907] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.992263][ T7907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.019099][ T7907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.033783][ T7907] bond0 (unregistering): Released all slaves [ 539.167289][ T7907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.186347][ T8831] Bluetooth: hci7: Unknown advertising packet type: 0x14 [ 539.186381][ T8831] Bluetooth: hci7: Unknown advertising packet type: 0x20 [ 539.196431][ T7907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.237233][ T7907] bond0 (unregistering): Released all slaves [ 539.480377][ T7907] tipc: Left network mode [ 539.501490][ T9424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.508731][ T7907] tipc: Left network mode [ 539.911961][ T9424] veth0_vlan: entered promiscuous mode [ 540.004734][ T9424] veth1_vlan: entered promiscuous mode [ 540.337649][ T5272] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 540.549116][ T5272] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 540.557338][ T5272] usb 5-1: config 0 has no interface number 0 [ 540.583244][ T5272] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=aa.e9 [ 540.593877][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.613536][ T9424] veth0_macvtap: entered promiscuous mode [ 540.631956][ T5272] usb 5-1: config 0 descriptor?? [ 540.650823][ T7907] hsr_slave_0: left promiscuous mode [ 540.660835][ T7907] hsr_slave_1: left promiscuous mode [ 540.679455][ T7907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.686895][ T7907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.708348][ T7907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.715781][ T7907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.732578][ T7907] hsr_slave_0: left promiscuous mode [ 540.742837][ T7907] hsr_slave_1: left promiscuous mode [ 540.756188][ T7907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.770781][ T7907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.785296][ T7907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.792976][ T7907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.850866][ T7907] veth1_macvtap: left promiscuous mode [ 540.856428][ T7907] veth0_macvtap: left promiscuous mode [ 540.862965][ T7907] veth1_vlan: left promiscuous mode [ 540.868321][ T7907] veth0_vlan: left promiscuous mode [ 540.888368][ T7907] veth1_macvtap: left promiscuous mode [ 540.894056][ T7907] veth0_macvtap: left promiscuous mode [ 540.900464][ T7907] veth1_vlan: left promiscuous mode [ 540.905905][ T7907] veth0_vlan: left promiscuous mode [ 541.208597][ T29] audit: type=1326 audit(1728553455.161:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9802 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104717dff9 code=0x7ffc0000 [ 541.230938][ T29] audit: type=1326 audit(1728553455.161:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9802 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104717dff9 code=0x7ffc0000 [ 541.253982][ T29] audit: type=1326 audit(1728553455.191:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9802 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f104717dff9 code=0x7ffc0000 [ 541.303412][ T29] audit: type=1326 audit(1728553455.191:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9802 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104717dff9 code=0x7ffc0000 [ 541.357101][ T29] audit: type=1326 audit(1728553455.191:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9802 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104717dff9 code=0x7ffc0000 [ 541.397505][ T29] audit: type=1326 audit(1728553455.221:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9802 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f104717dff9 code=0x7ffc0000 [ 541.421869][ T29] audit: type=1326 audit(1728553455.221:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9802 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104717dff9 code=0x7ffc0000 [ 541.592234][ T29] audit: type=1326 audit(1728553455.221:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9802 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f104717dff9 code=0x7ffc0000 [ 542.554285][ T7907] team0 (unregistering): Port device team_slave_1 removed [ 542.658227][ T7907] team0 (unregistering): Port device team_slave_0 removed [ 542.750954][ T9847] bio_check_eod: 2 callbacks suppressed [ 542.750994][ T9847] syz.0.1138: attempt to access beyond end of device [ 542.750994][ T9847] loop0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 542.771123][ T9847] syz.0.1138: attempt to access beyond end of device [ 542.771123][ T9847] loop0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 542.784554][ T9847] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 542.795440][ T9847] syz.0.1138: attempt to access beyond end of device [ 542.795440][ T9847] loop0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 542.808794][ T9847] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 542.818556][ T9847] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 542.826304][ T9847] UDF-fs: Scanning with blocksize 512 failed [ 542.835787][ T9847] syz.0.1138: attempt to access beyond end of device [ 542.835787][ T9847] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 542.850439][ T9847] syz.0.1138: attempt to access beyond end of device [ 542.850439][ T9847] loop0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 542.863704][ T9847] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 542.898429][ T9847] syz.0.1138: attempt to access beyond end of device [ 542.898429][ T9847] loop0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 542.911871][ T9847] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 542.921660][ T9847] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 542.929479][ T9847] UDF-fs: Scanning with blocksize 1024 failed [ 542.937879][ T9847] syz.0.1138: attempt to access beyond end of device [ 542.937879][ T9847] loop0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 542.952417][ T9847] syz.0.1138: attempt to access beyond end of device [ 542.952417][ T9847] loop0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 542.965855][ T9847] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 542.976189][ T9847] syz.0.1138: attempt to access beyond end of device [ 542.976189][ T9847] loop0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 542.989584][ T9847] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 542.999555][ T9847] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 543.009239][ T9847] UDF-fs: Scanning with blocksize 2048 failed [ 543.017392][ T9847] syz.0.1138: attempt to access beyond end of device [ 543.017392][ T9847] loop0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 543.031311][ T9847] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 543.041658][ T9847] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 543.051732][ T9847] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 543.059866][ T9847] UDF-fs: Scanning with blocksize 4096 failed [ 543.066035][ T9847] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 545.295899][ T7907] team0 (unregistering): Port device team_slave_1 removed [ 545.394165][ T7907] team0 (unregistering): Port device team_slave_0 removed [ 545.719768][ T5272] usb 5-1: string descriptor 0 read error: -32 [ 545.742889][ T5272] ath6kl: Failed to submit usb control message: -32 [ 545.749900][ T5272] ath6kl: unable to send the bmi data to the device: -32 [ 545.756952][ T5272] ath6kl: Unable to send get target info: -32 [ 545.770671][ T5272] ath6kl: Failed to init ath6kl core: -32 [ 545.776771][ T5272] ath6kl_usb 5-1:0.143: probe with driver ath6kl_usb failed with error -32 [ 545.910010][ T9851] lo speed is unknown, defaulting to 1000 [ 545.938494][ T9424] veth1_macvtap: entered promiscuous mode [ 545.981951][ T5328] usb 5-1: USB disconnect, device number 34 [ 546.055182][ T8831] Bluetooth: hci7: Unknown advertising packet type: 0x14 [ 546.055216][ T8831] Bluetooth: hci7: Unknown advertising packet type: 0x20 [ 546.140069][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.157954][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.169290][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.179821][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.189758][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.200250][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.225450][ T9424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.272714][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.283550][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.293614][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.304747][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.315036][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.326574][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.337996][ T9424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.393628][ T9424] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.403002][ T9424] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.411822][ T9424] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.420604][ T9424] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.509157][ T9591] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 546.552606][ T9591] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 546.644557][ T9591] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 546.706411][ T9591] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 546.814710][ T9579] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 546.830289][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.835390][ T9860] tipc: Started in network mode [ 546.845771][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.858896][ T9860] tipc: Node identity b84, cluster identity 4711 [ 546.887568][ T9860] tipc: Node number set to 2948 [ 546.915413][ T9579] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 546.941360][ T9579] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 546.978338][ T9579] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 547.025927][ T7911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.034238][ T7911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.139442][ T9591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.155676][ T9591] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.187286][ T9591] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 547.197791][ T9591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 547.220332][ T7909] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.227511][ T7909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.333597][ T7909] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.340801][ T7909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.686536][ T9591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.728073][ T9579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.494697][ T9579] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.545319][ T7907] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.552488][ T7907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.623424][ T7907] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.630617][ T7907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.783430][ T9579] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 548.794705][ T9579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 548.841129][ T9591] veth0_vlan: entered promiscuous mode [ 548.862866][ T9591] veth1_vlan: entered promiscuous mode [ 549.058936][ T9591] veth0_macvtap: entered promiscuous mode [ 549.067683][ T9591] veth1_macvtap: entered promiscuous mode [ 549.081695][ T9591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.093396][ T9591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.103775][ T9591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.114394][ T9591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.125356][ T9591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.136214][ T9591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.146355][ T9591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.157141][ T9591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.178214][ T9591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.618291][ T9908] lo speed is unknown, defaulting to 1000 [ 549.627933][ T9591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.670384][ T9591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.697688][ T9591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.722649][ T9591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.736721][ T9591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.755312][ T9591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.770499][ T9591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.797929][ T9591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.811450][ T9591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.877095][ T9591] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.890263][ T5272] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 549.905700][ T9591] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.916619][ T9591] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.927741][ T9591] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.004555][ T9579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.027627][ T5272] usb 1-1: device descriptor read/64, error -71 [ 550.170092][ T7915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.193689][ T7915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.216960][ T9579] veth0_vlan: entered promiscuous mode [ 550.259665][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.262839][ T9579] veth1_vlan: entered promiscuous mode [ 550.269948][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.281093][ T5272] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 550.336775][ T9579] veth0_macvtap: entered promiscuous mode [ 550.382173][ T9579] veth1_macvtap: entered promiscuous mode [ 550.427706][ T5272] usb 1-1: device descriptor read/64, error -71 [ 550.442749][ T9579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.497853][ T9579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.519138][ T9579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.538168][ T5272] usb usb1-port1: attempt power cycle [ 550.540581][ T9579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.567576][ T9579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.588586][ T9579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.617508][ T9579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.637504][ T9579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.647377][ T9579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.677581][ T9579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.689322][ T9579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.732109][ T9579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.751982][ T9579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.772768][ T9579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.791807][ T9579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.804160][ T9579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.832132][ T9579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.887659][ T9579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.915248][ T9579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.945452][ T9579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.956780][ T9579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.971643][ T9579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.987581][ T5272] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 550.996879][ T9579] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.007058][ T9579] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.016788][ T9579] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.028134][ T5272] usb 1-1: device descriptor read/8, error -71 [ 551.035730][ T9579] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.775919][ T5272] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 551.867811][ T5272] usb 1-1: device descriptor read/8, error -71 [ 551.966715][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.978869][ T5272] usb usb1-port1: unable to enumerate USB device [ 551.984104][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.011647][ T7909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.036887][ T7909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.448189][ T5221] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 553.120000][ T5221] usb 4-1: Using ep0 maxpacket: 8 [ 553.163422][ T5221] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 553.182426][ T5221] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 553.207618][ T5221] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 553.220076][ T5221] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 553.233575][ T5221] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 553.242706][ T5221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.484002][ T5221] usb 4-1: GET_CAPABILITIES returned 0 [ 553.497930][ T5221] usbtmc 4-1:16.0: can't read capabilities [ 553.582244][ T9968] cgroup: Unknown subsys name 'cpuset' [ 554.228964][ T8831] Bluetooth: hci2: command tx timeout [ 554.239456][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 554.250773][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 554.259876][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 554.268963][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 554.278795][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 554.290582][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 554.299694][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 554.308783][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 554.377807][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 554.386924][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 554.395981][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 554.405065][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 554.414158][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 554.472149][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 554.481271][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 554.558281][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 555.201517][ T9972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.377666][ T5326] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 555.527554][ T5326] usb 1-1: Using ep0 maxpacket: 8 [ 555.534242][ T5326] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 555.542808][ T5326] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 555.553057][ T5326] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 555.563118][ T5326] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 555.573583][ T5326] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 555.587085][ T5326] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 555.596258][ T5326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.826905][ T5326] usb 1-1: usb_control_msg returned -32 [ 555.847525][ T5326] usbtmc 1-1:16.0: can't read capabilities [ 555.859145][ T9983] xt_hashlimit: size too large, truncated to 1048576 [ 555.865848][ T9983] xt_hashlimit: overflow, try lower: 0/0 [ 556.495049][ T5326] usb 1-1: USB disconnect, device number 31 [ 556.628509][ T1849] usb 4-1: USB disconnect, device number 26 [ 557.726090][T10008] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 557.907964][T10014] netlink: 'syz.4.1175': attribute type 9 has an invalid length. [ 558.046932][T10014] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1175'. [ 558.509542][T10014] siw: device registration error -23 [ 559.226532][T10038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.248417][ T5274] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 559.427726][ T8] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 559.440968][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.199493][ T29] audit: type=1326 audit(1728553474.081:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10040 comm="syz.4.1183" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f104717dff9 code=0x0 [ 560.233451][ T5274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.354517][ T5274] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 560.370184][ T5274] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 560.380243][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.161294][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 561.170387][ T5274] usb 2-1: config 0 descriptor?? [ 561.984378][ T8] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 561.992066][ T8] usb 3-1: can't read configurations, error -71 [ 561.999769][ T5274] usbhid 2-1:0.0: can't add hid device: -71 [ 562.007846][ T5274] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 562.025794][ T5274] usb 2-1: USB disconnect, device number 26 [ 562.477673][ T5274] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 563.136548][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.143093][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.157554][ T5274] usb 2-1: Using ep0 maxpacket: 16 [ 563.582100][T10073] netlink: 'syz.0.1192': attribute type 9 has an invalid length. [ 563.602077][T10073] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1192'. [ 563.822449][T10076] siw: device registration error -23 [ 564.077094][ T5274] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 564.086325][ T5274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.094451][ T5274] usb 2-1: Product: syz [ 564.101251][ T5274] usb 2-1: Manufacturer: syz [ 564.114432][ T5274] usb 2-1: SerialNumber: syz [ 564.162282][T10085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.178273][ T8831] Bluetooth: hci7: ACL packet for unknown connection handle 0 [ 564.306127][ T5274] usb 2-1: config 0 descriptor?? [ 565.047848][ T5221] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 565.231902][ T5221] usb 4-1: Using ep0 maxpacket: 8 [ 565.262178][ T5221] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 565.282473][ T5221] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 565.316547][ T5221] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 565.347559][ T5221] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 565.371442][ T5221] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 565.387909][ T5221] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 565.445138][ T5221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.755534][ T5221] usb 4-1: usb_control_msg returned -32 [ 565.770451][ T5221] usbtmc 4-1:16.0: can't read capabilities [ 565.798660][ T5221] usb 4-1: USB disconnect, device number 27 [ 566.110029][ T5221] usb 2-1: USB disconnect, device number 27 [ 566.247686][ T5323] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 566.459840][ T5323] usb 3-1: unable to get BOS descriptor or descriptor too short [ 566.469989][ T5323] usb 3-1: config 1 interface 0 altsetting 242 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 566.484061][T10120] netlink: 'syz.4.1205': attribute type 9 has an invalid length. [ 566.512310][ T5323] usb 3-1: config 1 interface 0 has no altsetting 0 [ 566.519474][T10120] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1205'. [ 566.542341][ T5323] usb 3-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 566.567861][ T5323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.607944][T10126] siw: device registration error -23 [ 566.616401][ T5323] usb 3-1: Product: syz [ 566.633610][ T5323] usb 3-1: Manufacturer: syz [ 566.654294][ T5323] usb 3-1: SerialNumber: syz [ 566.940673][ T5323] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input15 [ 566.989236][ T4661] bcm5974 3-1:1.0: could not read from device [ 567.008046][ T4661] bcm5974 3-1:1.0: could not read from device [ 567.019758][ T5323] usb 3-1: USB disconnect, device number 28 [ 568.477847][ T5323] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 568.657924][ T5323] usb 2-1: Using ep0 maxpacket: 16 [ 568.869194][ T5323] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 568.943009][ T5323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.028941][ T5323] usb 2-1: Product: syz [ 569.037588][ T5323] usb 2-1: Manufacturer: syz [ 569.038649][T10163] netlink: 'syz.3.1219': attribute type 9 has an invalid length. [ 569.043800][ T5323] usb 2-1: SerialNumber: syz [ 569.066619][T10163] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1219'. [ 569.081554][ T5323] usb 2-1: config 0 descriptor?? [ 569.175976][T10168] siw: device registration error -23 [ 570.677632][T10190] bio_check_eod: 2 callbacks suppressed [ 570.677650][T10190] syz.3.1224: attempt to access beyond end of device [ 570.677650][T10190] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 570.697165][T10190] syz.3.1224: attempt to access beyond end of device [ 570.697165][T10190] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 570.710602][T10190] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 570.721300][T10190] syz.3.1224: attempt to access beyond end of device [ 570.721300][T10190] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 570.734609][T10190] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 570.744258][T10190] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 570.751983][T10190] UDF-fs: Scanning with blocksize 512 failed [ 570.760746][T10190] syz.3.1224: attempt to access beyond end of device [ 570.760746][T10190] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 570.774594][T10190] syz.3.1224: attempt to access beyond end of device [ 570.774594][T10190] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 570.787849][T10190] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 570.817214][T10190] syz.3.1224: attempt to access beyond end of device [ 570.817214][T10190] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 570.830507][T10190] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 570.840134][T10190] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 570.847860][T10190] UDF-fs: Scanning with blocksize 1024 failed [ 570.856022][T10190] syz.3.1224: attempt to access beyond end of device [ 570.856022][T10190] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 570.869770][T10190] syz.3.1224: attempt to access beyond end of device [ 570.869770][T10190] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 570.883026][T10190] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 570.893211][T10190] syz.3.1224: attempt to access beyond end of device [ 570.893211][T10190] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 570.906679][T10190] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 570.916491][T10190] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 570.924231][T10190] UDF-fs: Scanning with blocksize 2048 failed [ 570.936648][T10190] syz.3.1224: attempt to access beyond end of device [ 570.936648][T10190] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 570.950460][T10190] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 570.960727][T10190] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 570.970362][T10190] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 570.978075][T10190] UDF-fs: Scanning with blocksize 4096 failed [ 570.984192][T10190] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 571.310640][ T8] usb 2-1: USB disconnect, device number 28 [ 571.506193][T10195] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 571.516132][T10195] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 571.526721][T10195] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 571.534437][T10195] UDF-fs: Scanning with blocksize 512 failed [ 571.542296][T10195] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 571.552310][T10195] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 571.561946][T10195] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 571.569633][T10195] UDF-fs: Scanning with blocksize 1024 failed [ 571.576064][T10195] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 571.585763][T10195] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 571.595347][T10195] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 571.603003][T10195] UDF-fs: Scanning with blocksize 2048 failed [ 571.609685][T10195] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 571.620029][T10195] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 571.629677][T10195] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 571.637332][T10195] UDF-fs: Scanning with blocksize 4096 failed [ 571.643497][T10195] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 572.852046][T10217] netlink: 'syz.1.1232': attribute type 9 has an invalid length. [ 572.887710][T10217] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1232'. [ 573.024339][T10217] siw: device registration error -23 [ 573.087673][ T8] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 573.243594][T10226] netlink: 'syz.1.1235': attribute type 9 has an invalid length. [ 573.252160][T10226] netlink: 'syz.1.1235': attribute type 7 has an invalid length. [ 573.260401][T10226] netlink: 'syz.1.1235': attribute type 8 has an invalid length. [ 573.289851][ T8] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 573.298561][ T8] usb 3-1: config 0 has no interface number 0 [ 573.315007][ T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=aa.e9 [ 573.353799][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.415930][ T8] usb 3-1: config 0 descriptor?? [ 574.862772][ T29] audit: type=1326 audit(1728553488.811:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10219 comm="syz.2.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 574.922127][ T29] audit: type=1326 audit(1728553488.811:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10219 comm="syz.2.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 574.944951][ T29] audit: type=1326 audit(1728553488.811:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10219 comm="syz.2.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 574.988325][ T29] audit: type=1326 audit(1728553488.811:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10219 comm="syz.2.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 575.088806][ T29] audit: type=1326 audit(1728553488.811:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10219 comm="syz.2.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 575.167581][ T29] audit: type=1326 audit(1728553488.811:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10219 comm="syz.2.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 575.190380][ T29] audit: type=1326 audit(1728553488.811:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10219 comm="syz.2.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 575.212592][ T29] audit: type=1326 audit(1728553488.811:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10219 comm="syz.2.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 575.297687][ T5328] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 575.468391][ T5328] usb 2-1: Using ep0 maxpacket: 8 [ 575.481649][ T5328] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 575.507553][ T5328] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 575.527705][ T5328] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 575.547670][ T5328] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 575.570968][ T5328] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 575.580253][ T5328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.597579][ T5323] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 575.747633][ T5323] usb 1-1: Using ep0 maxpacket: 32 [ 575.755143][ T5323] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.774207][ T5323] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 575.787830][ T5323] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 575.805521][ T5323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.814739][ T5328] usb 2-1: GET_CAPABILITIES returned 0 [ 575.824671][ T5328] usbtmc 2-1:16.0: can't read capabilities [ 575.831021][ T5323] usb 1-1: Product: syz [ 575.836061][ T5323] usb 1-1: Manufacturer: syz [ 575.854758][ T5323] usb 1-1: SerialNumber: syz [ 576.024173][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 576.033409][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 576.042519][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 576.051638][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 576.060931][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 576.070035][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 576.079139][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 576.088297][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.096442][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 576.105549][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 576.114618][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 576.123710][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 576.132790][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 576.141852][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 576.150904][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 576.169573][ T5307] usb 1-1: USB disconnect, device number 32 [ 576.183562][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 576.192684][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 576.244804][ T8] usb 3-1: string descriptor 0 read error: -71 [ 576.455385][ T8] ath6kl: Failed to submit usb control message: -71 [ 576.462665][ T8] ath6kl: unable to send the bmi data to the device: -71 [ 576.470130][ T8] ath6kl: Unable to send get target info: -71 [ 576.484138][ T8] ath6kl: Failed to init ath6kl core: -71 [ 576.490275][ T8] ath6kl_usb 3-1:0.143: probe with driver ath6kl_usb failed with error -71 [ 576.502001][ T8] usb 3-1: USB disconnect, device number 29 [ 576.541515][T10256] ptrace attach of "./syz-executor exec"[10257] was attempted by "./syz-executor exec"[10256] [ 576.650542][T10260] netlink: 'syz.2.1245': attribute type 9 has an invalid length. [ 576.659238][T10260] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1245'. [ 576.765937][T10260] siw: device registration error -23 [ 577.067743][ T8831] Bluetooth: hci1: command tx timeout [ 578.008822][ T5274] usb 2-1: USB disconnect, device number 29 [ 578.519739][T10288] lo speed is unknown, defaulting to 1000 [ 578.797600][ T5274] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 578.964362][ T5274] usb 5-1: config 0 has no interfaces? [ 578.999398][ T5274] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 579.040988][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.071646][ T5274] usb 5-1: config 0 descriptor?? [ 580.212050][ T5323] usb 5-1: USB disconnect, device number 35 [ 581.192764][T10309] netlink: 'syz.2.1258': attribute type 9 has an invalid length. [ 581.230632][T10309] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1258'. [ 581.473289][T10319] siw: device registration error -23 [ 581.677582][ T5272] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 581.878261][ T5272] usb 4-1: Using ep0 maxpacket: 32 [ 581.885550][ T5272] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.928144][ T5272] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 581.972673][ T5272] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 581.999259][ T5272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.057113][ T5272] usb 4-1: Product: syz [ 582.065958][ T5272] usb 4-1: Manufacturer: syz [ 582.071148][ T5272] usb 4-1: SerialNumber: syz [ 582.278281][ T8] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 582.325977][T10333] ptrace attach of "./syz-executor exec"[10334] was attempted by "./syz-executor exec"[10333] [ 582.420744][ T5272] usb 4-1: USB disconnect, device number 28 [ 582.437636][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 582.486241][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 582.497321][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 582.511811][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 582.522246][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 582.555203][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 582.577590][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.799545][ T8] usb 5-1: GET_CAPABILITIES returned 0 [ 582.805284][ T8] usbtmc 5-1:16.0: can't read capabilities [ 583.458431][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 583.467535][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 583.476586][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 583.485624][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 583.494664][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 583.503727][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 583.512765][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 583.521835][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 583.530925][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 583.547023][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 583.556143][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 583.565302][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 583.574362][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 583.583404][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 583.592450][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 583.601501][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 583.624823][ T8] usb 5-1: USB disconnect, device number 36 [ 584.161772][T10353] bio_check_eod: 14 callbacks suppressed [ 584.161823][T10353] syz.3.1269: attempt to access beyond end of device [ 584.161823][T10353] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 584.182250][T10353] syz.3.1269: attempt to access beyond end of device [ 584.182250][T10353] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 584.195646][T10353] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 584.206781][T10353] syz.3.1269: attempt to access beyond end of device [ 584.206781][T10353] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 584.221448][T10353] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 584.231526][T10353] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 584.239300][T10353] UDF-fs: Scanning with blocksize 512 failed [ 584.250290][T10353] syz.3.1269: attempt to access beyond end of device [ 584.250290][T10353] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 584.264469][T10353] syz.3.1269: attempt to access beyond end of device [ 584.264469][T10353] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 584.284987][T10353] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 584.295775][T10353] syz.3.1269: attempt to access beyond end of device [ 584.295775][T10353] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 584.309217][T10353] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 584.319200][T10353] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 584.327221][T10353] UDF-fs: Scanning with blocksize 1024 failed [ 584.336612][T10353] syz.3.1269: attempt to access beyond end of device [ 584.336612][T10353] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 584.351139][T10353] syz.3.1269: attempt to access beyond end of device [ 584.351139][T10353] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 584.364790][T10353] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 584.375633][T10353] syz.3.1269: attempt to access beyond end of device [ 584.375633][T10353] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 584.389080][T10353] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 584.399050][T10353] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 584.406750][T10353] UDF-fs: Scanning with blocksize 2048 failed [ 584.417880][T10353] syz.3.1269: attempt to access beyond end of device [ 584.417880][T10353] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 584.432337][T10353] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 584.442459][T10353] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 584.453102][T10353] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 584.456305][ T8831] Bluetooth: hci7: command 0x0406 tx timeout [ 584.461810][T10353] UDF-fs: Scanning with blocksize 4096 failed [ 584.473144][T10353] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 584.502472][T10351] netlink: 'syz.1.1270': attribute type 9 has an invalid length. [ 584.510447][T10351] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1270'. [ 584.601322][T10351] siw: device registration error -23 [ 584.614637][ T5272] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 584.779567][ T5272] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 584.794187][ T5272] usb 3-1: config 0 has no interface number 0 [ 584.805363][ T5272] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=aa.e9 [ 584.815904][ T5272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.835661][ T5272] usb 3-1: config 0 descriptor?? [ 585.017899][ T5274] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 585.209847][ T5274] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.296458][ T5274] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 585.472829][ T29] audit: type=1326 audit(1728553499.421:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10344 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 585.494521][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.922518][ T5274] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 585.941472][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.975147][ T5274] usb 4-1: config 0 descriptor?? [ 585.992541][ T29] audit: type=1326 audit(1728553499.421:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10344 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 586.021181][ T5274] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 586.047523][ T5274] dvb-usb: bulk message failed: -22 (3/0) [ 586.070438][ T5274] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 586.092829][ T29] audit: type=1326 audit(1728553499.431:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10344 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 586.137544][ T29] audit: type=1326 audit(1728553499.431:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10344 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 586.159204][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.166389][ T5274] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 586.167177][ T29] audit: type=1326 audit(1728553499.431:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10344 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 586.187894][ T5274] usb 4-1: media controller created [ 586.195305][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.248798][ T29] audit: type=1326 audit(1728553499.431:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10344 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 586.327370][ T29] audit: type=1326 audit(1728553499.431:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10344 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 586.328085][ T5274] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 586.387285][ T29] audit: type=1326 audit(1728553499.431:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10344 comm="syz.2.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 586.408987][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.246270][ T5274] dvb-usb: bulk message failed: -22 (6/0) [ 587.314063][ T5274] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 587.406705][ T5274] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 587.427838][ T5272] usb 3-1: string descriptor 0 read error: -71 [ 587.469252][ T5274] dvb-usb: schedule remote query interval to 150 msecs. [ 587.506533][ T5274] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 587.510961][ T5272] ath6kl: Failed to submit usb control message: -71 [ 587.521318][ T5272] ath6kl: unable to send the bmi data to the device: -71 [ 587.529099][ T5272] ath6kl: Unable to send get target info: -71 [ 587.542144][ T5274] usb 4-1: USB disconnect, device number 29 [ 587.559145][T10391] fuse: Bad value for 'fd' [ 587.563731][ T5272] ath6kl: Failed to init ath6kl core: -71 [ 587.570233][ T5272] ath6kl_usb 3-1:0.143: probe with driver ath6kl_usb failed with error -71 [ 587.590695][T10387] ptrace attach of "./syz-executor exec"[10392] was attempted by "./syz-executor exec"[10387] [ 587.615801][ T5274] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 587.647618][ T5272] usb 3-1: USB disconnect, device number 30 [ 587.947888][T10399] netlink: 'syz.2.1283': attribute type 9 has an invalid length. [ 588.058474][T10400] siw: device registration error -23 [ 588.073238][T10399] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1283'. [ 589.477598][ T5323] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 589.697680][ T5323] usb 1-1: Using ep0 maxpacket: 8 [ 589.714681][ T5323] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 589.757547][ T5323] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 589.767418][ T5323] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 589.788506][ T5307] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 589.822726][ T5323] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 589.825941][T10429] fuse: Bad value for 'fd' [ 589.835807][ T5323] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 589.835836][ T5323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.953806][ T5307] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 589.970901][ T5307] usb 4-1: config 0 has no interface number 0 [ 589.987360][ T5307] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=aa.e9 [ 590.015177][ T5307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.052978][ T5307] usb 4-1: config 0 descriptor?? [ 590.500355][ T5323] usb 1-1: GET_CAPABILITIES returned 0 [ 590.505886][ T5323] usbtmc 1-1:16.0: can't read capabilities [ 590.938045][ T29] audit: type=1326 audit(1728553504.861:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10423 comm="syz.3.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4477dff9 code=0x7ffc0000 [ 591.148225][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 591.157312][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 591.166358][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 591.175394][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 591.184437][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 591.193476][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 591.202553][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 591.211647][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 591.216393][ T29] audit: type=1326 audit(1728553504.871:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10423 comm="syz.3.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4477dff9 code=0x7ffc0000 [ 591.220707][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 591.283969][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 591.293093][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 591.302190][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 591.311281][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 591.311600][T10438] ptrace attach of "./syz-executor exec"[10441] was attempted by "./syz-executor exec"[10438] [ 591.320347][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 591.320389][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 591.320425][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 591.392558][ T5274] usb 1-1: USB disconnect, device number 33 [ 592.353144][T10459] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1299'. [ 592.477810][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1299'. [ 593.032024][T10459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1299'. [ 593.134958][ T5307] usb 4-1: string descriptor 0 read error: -71 [ 593.665700][ T5307] ath6kl: Failed to submit usb control message: -71 [ 593.672685][ T5307] ath6kl: unable to send the bmi data to the device: -71 [ 593.680126][ T5307] ath6kl: Unable to send get target info: -71 [ 593.688642][ T5307] ath6kl: Failed to init ath6kl core: -71 [ 593.694706][ T5307] ath6kl_usb 4-1:0.143: probe with driver ath6kl_usb failed with error -71 [ 593.824627][T10467] fuse: Bad value for 'fd' [ 594.120943][T10482] ptrace attach of "./syz-executor exec"[10483] was attempted by "./syz-executor exec"[10482] [ 595.232066][ T5307] usb 4-1: USB disconnect, device number 30 [ 596.027696][ T5323] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 596.936125][ T5323] usb 1-1: Using ep0 maxpacket: 8 [ 596.953861][ T5323] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 596.966060][ T5323] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 596.978647][ T5323] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 596.992642][ T5323] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 597.011797][ T5323] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 597.021325][ T5323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.127666][ T5272] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 597.127917][ T5307] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 597.234547][ T5323] usb 1-1: GET_CAPABILITIES returned 0 [ 597.240257][ T5323] usbtmc 1-1:16.0: can't read capabilities [ 597.290437][ T5307] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 597.298602][ T5272] usb 4-1: not running at top speed; connect to a high speed hub [ 597.299522][ T5272] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 57, changing to 4 [ 597.307060][ T5307] usb 3-1: config 0 has no interface number 0 [ 597.324903][ T5307] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=aa.e9 [ 597.326074][ T5272] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 597.334307][ T5307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.356334][ T5307] usb 3-1: config 0 descriptor?? [ 597.363769][ T5272] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 597.373353][ T5272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.387866][ T5272] usb 4-1: Product: syz [ 597.392330][ T5272] usb 4-1: Manufacturer: syz [ 597.397049][ T5272] usb 4-1: SerialNumber: syz [ 597.452033][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 597.461159][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 597.470223][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 597.479289][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 597.488353][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 597.497512][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.510285][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 597.519396][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 597.528467][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 597.539380][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 597.549879][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 597.565576][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 597.575947][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 597.587113][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 597.597455][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 597.607423][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 597.616509][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 597.770605][ T5272] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 598.427995][ T29] audit: type=1326 audit(1728553511.981:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10500 comm="syz.2.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 598.454011][ T30] INFO: task syz.3.794:8445 blocked for more than 144 seconds. [ 598.478479][ T5274] usb 1-1: USB disconnect, device number 34 [ 598.482020][ T30] Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 598.497609][ T29] audit: type=1326 audit(1728553511.981:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10500 comm="syz.2.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 598.516009][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 598.542557][ T29] audit: type=1326 audit(1728553511.991:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10500 comm="syz.2.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 598.564187][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.578236][ T29] audit: type=1326 audit(1728553511.991:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10500 comm="syz.2.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 598.583432][ T30] task:syz.3.794 state:D [ 598.599901][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.610833][ T30] stack:23512 pid:8445 tgid:8443 ppid:7245 flags:0x00004000 [ 598.618713][ T30] Call Trace: [ 598.622016][ T30] [ 598.624976][ T30] __schedule+0x1843/0x4ae0 [ 598.629619][ T30] ? __pfx___schedule+0x10/0x10 [ 598.634506][ T30] ? __pfx_lock_release+0x10/0x10 [ 598.639629][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 598.645647][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 598.652089][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 598.657541][ T30] ? schedule+0x90/0x320 [ 598.662089][ T30] schedule+0x14b/0x320 [ 598.666280][ T30] schedule_preempt_disabled+0x13/0x30 [ 598.671817][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 598.677641][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 598.684092][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 598.690334][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 598.695406][ T30] ? exit_mmap+0x28b/0xc40 [ 598.699932][ T30] down_write+0x1d7/0x220 [ 598.704288][ T30] ? __pfx_down_write+0x10/0x10 [ 598.709278][ T30] exit_mmap+0x2bd/0xc40 [ 598.713543][ T30] ? __mutex_lock+0x2ef/0xd70 [ 598.718283][ T30] ? __pfx_exit_mmap+0x10/0x10 [ 598.723088][ T30] ? __pfx_exit_aio+0x10/0x10 [ 598.727872][ T30] ? uprobe_clear_state+0x271/0x290 [ 598.733087][ T30] ? mm_update_next_owner+0xa2/0x8a0 [ 598.738459][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 598.743689][ T30] __mmput+0x115/0x380 [ 598.747848][ T30] exit_mm+0x220/0x310 [ 598.751942][ T30] ? __pfx_exit_mm+0x10/0x10 [ 598.757076][ T30] ? taskstats_exit+0x326/0xa60 [ 598.762034][ T30] do_exit+0x9b2/0x28e0 [ 598.766221][ T30] ? __pfx_do_exit+0x10/0x10 [ 598.767690][ T29] audit: type=1326 audit(1728553511.991:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10500 comm="syz.2.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 598.770908][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 598.798502][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 598.804519][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 598.805976][ T29] audit: type=1326 audit(1728553511.991:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10500 comm="syz.2.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 598.810902][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 598.810938][ T30] do_group_exit+0x207/0x2c0 [ 598.832531][ C0] vkms_vblank_simulate: vblank timer overrun [ 598.842962][ T29] audit: type=1326 audit(1728553511.991:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10500 comm="syz.2.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 598.848514][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 598.848546][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 598.848582][ T30] get_signal+0x16a3/0x1740 [ 598.848621][ T30] ? __pfx_get_signal+0x10/0x10 [ 598.848654][ T30] arch_do_signal_or_restart+0x96/0x860 [ 598.882259][ T29] audit: type=1326 audit(1728553511.991:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10500 comm="syz.2.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcb77dff9 code=0x7ffc0000 [ 598.885830][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 598.885861][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 598.885900][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 598.937394][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 598.943232][ T30] do_syscall_64+0x100/0x230 [ 598.947949][ T30] ? clear_bhb_loop+0x35/0x90 [ 598.952650][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.958625][ T30] RIP: 0033:0x7fb58777dff9 [ 598.963604][ T30] RSP: 002b:00007fb58848e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 598.972134][ T30] RAX: 0000000000000001 RBX: 00007fb587935f88 RCX: 00007fb58777dff9 [ 598.980181][ T30] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb587935f8c [ 598.988377][ T30] RBP: 00007fb587935f80 R08: 7fffffffffffffff R09: 0000000000000000 [ 598.996925][ T30] R10: 0000000000000007 R11: 0000000000000246 R12: 00007fb587935f8c [ 599.005107][ T30] R13: 0000000000000000 R14: 00007ffcafd09a10 R15: 00007ffcafd09af8 [ 599.013243][ T30] [ 599.016337][ T30] [ 599.016337][ T30] Showing all locks held in the system: [ 599.025468][ T30] 1 lock held by ksoftirqd/0/16: [ 599.030494][ T30] #0: ffff8880b863ea58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 599.040528][ T30] 1 lock held by khungtaskd/30: [ 599.045408][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 599.055390][ T30] 3 locks held by kworker/u8:7/2920: [ 599.060922][ T30] 2 locks held by getty/4973: [ 599.067512][ T30] #0: ffff888031ce80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 599.077634][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 599.088587][ T30] 7 locks held by kworker/1:3/5272: [ 599.094295][ T30] 5 locks held by kworker/0:9/5307: [ 599.099592][ T30] #0: ffff888141adf148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 599.118243][ T30] #1: ffffc900043f7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 599.130244][ T30] #2: ffff888029008190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 599.139250][ T30] #3: ffff888066655190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 599.148614][ T30] #4: ffff8880202ef278 (&(&priv->bus_notifier)->rwsem){++++}-{3:3}, at: blocking_notifier_call_chain+0x53/0x90 [ 599.160720][ T30] 4 locks held by udevd/8002: [ 599.165994][ T30] #0: ffff88806b39c418 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xd70 [ 599.174931][ T30] #1: ffff88806e0e7888 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 599.184412][ T30] #2: ffff888034067a58 (kn->active#21){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 599.194071][ T30] #3: ffff8880262e6190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 [ 599.203732][ T30] 1 lock held by syz.3.794/8445: [ 599.209016][ T30] #0: ffff8880223d3118 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2bd/0xc40 [ 599.225907][ T30] [ 599.229777][ T30] ============================================= [ 599.229777][ T30] [ 599.238288][ T30] NMI backtrace for cpu 1 [ 599.242641][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 599.253173][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 599.263248][ T30] Call Trace: [ 599.266557][ T30] [ 599.269504][ T30] dump_stack_lvl+0x241/0x360 [ 599.274216][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.279422][ T30] ? __pfx__printk+0x10/0x10 [ 599.284051][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 599.289011][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 599.294484][ T30] ? _printk+0xd5/0x120 [ 599.298649][ T30] ? __pfx__printk+0x10/0x10 [ 599.303264][ T30] ? __wake_up_klogd+0xcc/0x110 [ 599.308143][ T30] ? __pfx__printk+0x10/0x10 [ 599.312755][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 599.317805][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 599.323809][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 599.329818][ T30] watchdog+0xff4/0x1040 [ 599.334083][ T30] ? watchdog+0x1ea/0x1040 [ 599.338534][ T30] ? __pfx_watchdog+0x10/0x10 [ 599.343231][ T30] kthread+0x2f0/0x390 [ 599.347302][ T30] ? __pfx_watchdog+0x10/0x10 [ 599.351983][ T30] ? __pfx_kthread+0x10/0x10 [ 599.356569][ T30] ret_from_fork+0x4b/0x80 [ 599.360987][ T30] ? __pfx_kthread+0x10/0x10 [ 599.365575][ T30] ret_from_fork_asm+0x1a/0x30 [ 599.370354][ T30] [ 599.374056][ T30] Sending NMI from CPU 1 to CPUs 0: [ 599.379807][ C0] NMI backtrace for cpu 0 [ 599.379818][ C0] CPU: 0 UID: 0 PID: 5274 Comm: kworker/0:6 Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 599.379838][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 599.379850][ C0] Workqueue: events nsim_dev_trap_report_work [ 599.379873][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 599.379895][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 e3 ba ac 03 0f 1f [ 599.379909][ C0] RSP: 0018:ffffc90000007e48 EFLAGS: 00000046 [ 599.379925][ C0] RAX: 0000000000001d62 RBX: 0000000000000020 RCX: 0000000000000838 [ 599.379936][ C0] RDX: 0000000000000000 RSI: 0000000000001d62 RDI: 0000000000000838 [ 599.379946][ C0] RBP: 0000000000001d62 R08: ffffffff81857969 R09: 1ffffffff203783d [ 599.379958][ C0] R10: dffffc0000000000 R11: ffffffff813ec4e0 R12: 000000000001d61b [ 599.379970][ C0] R13: dffffc0000000000 R14: 00000000100053e2 R15: ffff8880b8628340 [ 599.379982][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 599.379995][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 599.380006][ C0] CR2: 00007f3c44907ab8 CR3: 000000007130c000 CR4: 00000000003526f0 [ 599.380020][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 599.380030][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 599.380040][ C0] Call Trace: [ 599.380046][ C0] [ 599.380052][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 599.380071][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 599.380096][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 599.380114][ C0] ? nmi_handle+0x2a/0x5a0 [ 599.380137][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 599.380157][ C0] ? nmi_handle+0x14f/0x5a0 [ 599.380173][ C0] ? nmi_handle+0x2a/0x5a0 [ 599.380189][ C0] ? native_apic_msr_write+0x39/0x50 [ 599.380206][ C0] ? default_do_nmi+0x63/0x160 [ 599.380226][ C0] ? exc_nmi+0x123/0x1f0 [ 599.380245][ C0] ? end_repeat_nmi+0xf/0x53 [ 599.380260][ C0] ? __pfx_lapic_next_event+0x10/0x10 [ 599.380276][ C0] ? clockevents_program_event+0x189/0x350 [ 599.380298][ C0] ? native_apic_msr_write+0x39/0x50 [ 599.380316][ C0] ? native_apic_msr_write+0x39/0x50 [ 599.380335][ C0] ? native_apic_msr_write+0x39/0x50 [ 599.380352][ C0] [ 599.380358][ C0] [ 599.380363][ C0] lapic_next_event+0x11/0x20 [ 599.380377][ C0] clockevents_program_event+0x1c1/0x350 [ 599.380399][ C0] hrtimer_run_softirq+0x253/0x2c0 [ 599.380418][ C0] handle_softirqs+0x2c5/0x980 [ 599.380441][ C0] ? do_softirq+0x11b/0x1e0 [ 599.380462][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 599.380486][ C0] do_softirq+0x11b/0x1e0 [ 599.380505][ C0] [ 599.380510][ C0] [ 599.380516][ C0] ? __pfx_do_softirq+0x10/0x10 [ 599.380536][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 599.380560][ C0] ? rcu_is_watching+0x15/0xb0 [ 599.380578][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 599.380599][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 599.380618][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 599.380638][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 599.380659][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 599.380679][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 599.380704][ C0] ? process_scheduled_works+0x976/0x1850 [ 599.380726][ C0] process_scheduled_works+0xa63/0x1850 [ 599.380759][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 599.380790][ C0] ? assign_work+0x364/0x3d0 [ 599.380813][ C0] worker_thread+0x870/0xd30 [ 599.380838][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 599.380861][ C0] ? __kthread_parkme+0x169/0x1d0 [ 599.380885][ C0] ? __pfx_worker_thread+0x10/0x10 [ 599.380906][ C0] kthread+0x2f0/0x390 [ 599.380921][ C0] ? __pfx_worker_thread+0x10/0x10 [ 599.380941][ C0] ? __pfx_kthread+0x10/0x10 [ 599.380957][ C0] ret_from_fork+0x4b/0x80 [ 599.380978][ C0] ? __pfx_kthread+0x10/0x10 [ 599.380993][ C0] ret_from_fork_asm+0x1a/0x30 [ 599.381021][ C0] [ 599.381813][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 599.782976][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 599.793477][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 599.803531][ T30] Call Trace: [ 599.806802][ T30] [ 599.809732][ T30] dump_stack_lvl+0x241/0x360 [ 599.814411][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.819609][ T30] ? __pfx__printk+0x10/0x10 [ 599.824202][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 599.830189][ T30] ? vscnprintf+0x5d/0x90 [ 599.834521][ T30] panic+0x349/0x880 [ 599.838425][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 599.844574][ T30] ? __pfx_panic+0x10/0x10 [ 599.848987][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 599.854352][ T30] ? __irq_work_queue_local+0x137/0x410 [ 599.859897][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 599.865265][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 599.871417][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 599.877578][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 599.883741][ T30] watchdog+0x1033/0x1040 [ 599.888072][ T30] ? watchdog+0x1ea/0x1040 [ 599.892496][ T30] ? __pfx_watchdog+0x10/0x10 [ 599.897170][ T30] kthread+0x2f0/0x390 [ 599.901235][ T30] ? __pfx_watchdog+0x10/0x10 [ 599.905906][ T30] ? __pfx_kthread+0x10/0x10 [ 599.910493][ T30] ret_from_fork+0x4b/0x80 [ 599.914907][ T30] ? __pfx_kthread+0x10/0x10 [ 599.919502][ T30] ret_from_fork_asm+0x1a/0x30 [ 599.924278][ T30] [ 599.927562][ T30] Kernel Offset: disabled [ 599.931880][ T30] Rebooting in 86400 seconds..