last executing test programs: 4m46.166458946s ago: executing program 4 (id=630): syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x3, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m45.962119063s ago: executing program 4 (id=632): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000003c0)) 4m45.331550921s ago: executing program 4 (id=635): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000180)=0xffff0018) close_range(r0, 0xffffffffffffffff, 0x0) 4m44.95893872s ago: executing program 4 (id=637): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="7a0af8ff75253073bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f81d9217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000098045f785a1292fcb8c1d3079a00db453620ce72d75946c2b638d91dbef661935839c77edf2d34b12cd48a1b20fb7dd8430a19f2c50d77bc0ea9b0af58e604f4942eb613eff28902010045ef76d7d864409ef2dc9518a09f4886afc26abba34635d0e8b598a51bc7421d33fe226c944bc76be40d435aa8b5208ff0df2db7619a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be34dda66fb977aef7c9cb92428ef25d9bf665bd60020500000000000000abe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e02200b95941d34ac81fd48f9b7314ffa730017f3d37fdb23bc26992529402a520ef67e246415a697a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f000000000080c4adf75a0a108585e9b2000000000000000000000074054d643c2b5692d8304a23eaf9153c457ae5bbe49b3c164461470a452bd357fa62341c759dc21b45a06ec414cadf9695d030012acad582e3fe75e61ae908347e4d6d089b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040810}, 0x0) 4m44.787202272s ago: executing program 4 (id=641): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4m44.633485879s ago: executing program 4 (id=643): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x761, 0x8, 0x8008000, 0x2d1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x628, 0xc88d, 0x43, 0x0, 0x0) 4m29.451362887s ago: executing program 32 (id=643): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x761, 0x8, 0x8008000, 0x2d1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x628, 0xc88d, 0x43, 0x0, 0x0) 3m32.307413971s ago: executing program 0 (id=1692): unshare(0x4040600) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x2, &(0x7f0000000000)={0x2, 0x1, 0x80}, 0x0) 3m32.205529011s ago: executing program 0 (id=1693): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x58cd, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 3m32.187882946s ago: executing program 0 (id=1694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004802c0001800e000100696d6d656469617465000000180002800c00028005000100c40000000800014000000009100001800c0001006e6f747261636b000900010073797a30000000000900020073797a320000000014000000080a010100000000000000000700000428000000080a010300000000000000000100000808000a40000000010900010073797a300000000044000000000a030000000000000000000000000626000600a6691f10de17ec44175bca8a4c3068720b495da043c2bccb60426d1d9c4703c1f01d000008000240000000015c000000030a01030000000000000000030000060900030073797a31000000000900030073797a320000000008000a40000000010900030073797a320000000008000540fffffffc0900030073797a310000000008000540fffffffed45700000e0a01020000000000000000000000010900010073797a30000000000900020073797a3000000000903903800424008068230180990001006cf21fa5a3505e822c544f4b1e7d92eb2f2d94e4e45888286f5045dcf2fba98d89fc896c8806cfb4aceef011b7ebc3339c6a886664337b592f731016753c7e2db9d0b4eea089f8c430bbdc9f18b512b6dedba57fe472da05e2a4ac56e56be2e7b4f94305679a2d1122d89a76168268a94fa7904e92a7800273ffec151188c84de1e0b0005cc7cea11fdcf1fc8a1d4edb98b8355531000000c700010068fc1d7eb31fb6d4eed096590ec587a8d741532e862e0e6a8713a48113b95fd48cde2a63f2d99434644b4a606eb3e45c56c0d5d422a7fcb10c318a36bc2716fee40a1687af2fd5df3c249ac1dcbe934268d30d52f4ea34c7386ea0e849bd57572bb945643643721a856546e5b45675f895b7eec01fac84db8f35c1603c1179e3408537ebb36dcbcfb957ea2b6245f76ed45f3d1354319aa1b4db64f9ad39e1ed45e2e9219675bcbb4d4198ffac68b05df9678bbaadf6adda24d7fa71ec9628fc12863400570001004e5a14458a4fb89de5d43590fa0dd32121e86b34ec7b15c5726c75964392e52240db848269ea5a3049cc3fcfa381c7e26cd18b6ee325b3513b0be6075be6f318f12ecfe8243304d6efd64e7138c0a9494daeb1000c000280080003400000000304100100f55136ad4f7ad7f72017aba3dcd181a35982c6f2e003e3ab050d353888e5e1205baaa4d235df55197e17712a93c3162415cb1c3777fe59f2df11a6ad6f0d5a2274fa634d8b4f97bdd30ffbcdfdee3e25cd839b7399231e0266f507d31a08ee6f814afe682367a39adac00dadbd65d551a5d7d2ebcb12626a0859a032ca4a4719fceb0111e56c7aa7b80492de662192a9196021279f15537d74367c9d41e5741a90191fae091472a1acd6828495d02caa998e61bf8d83795b27f09c1822dd8dcdb136a01100cbf84a56bc35b4f67a00d06cc8faf9a05770686b6495bc2ac0c4cb064dc2c4e30165d88bcb34b18dd18ae942d2bd036a7bc610e37ac0d3b2e7a3e57e1eb54a3f378d7f29f45a2fdcca5abd8dbd9e188d007a34beefb8cb80cdce0bc1a85d5eaa165915ba00a146c44b4edd3ed95ec48809cd26afd72636b23c9a577744524a45e1866d966124600c449a384dd7ec3ce2c0b3e307337eafb15a45fffba1a6426f4b2f508c9db12eea19edf88509fa2d3e03a4c8349b9ccc4100cea85ff7cbbc20924ad10af1a25e8a2276015f6021448300f2dfed9eb8e9535eb64997da80ceac7ba4883fd5728e162426f9527bcd8d7ad8cdca8bd839c77b04a48ce8ace293592f3855bf219ed6f9102370b6d3cc15cebb193ae255699d645373675c2775f0a67a7c4763dc512be526d24bff842942539f55b332a010be01456e6fbd7763b8103d9de8f84fafac4fc7ad1551f3b4f8dc2459ce5aad77c41937fba389cc8d419955e2e6054a5e9cf0331e0916a7afb9459e2e4b4489e8c57ac9223db38d4a978532531ad561b174638138506371dcf8893263fbc5513e02a4b7498f8a84843cb7b9b7d4fab2d75a8132fd9e81c193864653f6355dc2d53a14cc3a48a32adb2f0c931c22dfa6c630905724e4747b2f43bb7a852ae2b19e126be545eafbc2aead941bbdc5eee96cb6d7928483cd334d19f2cb7d0b7d46a98c970594a84450e4f1f51e73a78a9985f62d51564a63ba98aea5bc9940ae6053692141291f5bb7e5b1824863d23e7433cfbef6fc8cc87e4f1405f9f8f07ddf7a9211594162651f333256c541018ab425a68e2df007fe1f36f03c8a99c5d89567d18add955f4bf205b4c4d56eb08a90616e3e1a07686b83c52d990abd4e4b9a06885cb4ff2557d96c93bbaa76ba16783a769705b2640f7190b5124b4236959535645c0667b66e18bb1b3017b28df020811bccff75d64d289c123c32ee75c4b37d57284f3ebf47de203e9ca069b035ff089a8662aa782101ee6439dabaccfa06dd786c2aaf9b28c6c5752541e71b8c0611aa57051d93c2e8ff906d47fec4f96d991d101d917f257376bd65221b0aa82f7593a584fd19b13e7d22f499e6a7432766c7f6fbf9b5422f76b841f08da33251bede8b974289807dfc69b174275171f65e872e75409467484cfb90aa8137c5f06e91b7385393de32acad0b238fccd9c37ca1ab33bad8b3e1b3902075df59e6776b61e1ad4d4b321807d370de105106f42dc6c1b281648fe1736ca81551202a9cc6ebae2f00ffaa811bbf32105ea85b27373cbb057570dc732aa1f3b0333b854442852b091cb9a9231198408ae50d3b68e59a52c7a2fea3da6a36671f18f3bf224f6d8b47595566f79865dccbebad3a1ec58363a99f5e056c9873968cf48f2dac7a40faa57b120d04bf4fa8893dad6dcb08b662a094a7174725b64a241cf977d0c71a500dbb1241b9f9bd115b5778cc7e6a8960e0cca0438c6e8ab610bcc64e0958f61e1bdf6e3071723232c61b7055d06329c3d1823e4b2e2a90846f39163bddac3619b2f90dc8b4623fc60eb5ff7e6e7c05964be097e4c223a2cb7ecb1a665fbaa9f2017d1d934b90594cb9b68eb93ae08da30bcca80318c98a1bd3b14ec53ac4ecbcbe3f4ae2dff57966a106cf00a42fd845f092651eddb471857411e95d80cec66aab0d74901364672b8d750cd1ed16cc62c06868abaed8d56eaf3a709d9dd624b55a2f0e8269080440256d648ec6aaac228a6cb02ed38a53105285022674945c88160eafcf9622abbfd9c38a256310d647625bea2ac91ff0665b162dceeee6d5b5d777e2d0b45a62e8389ae0adf528f0698fcd03f161f7955d7a0c8d78d519f0ec0a58eea132f1a76470dcb6cc2b82c521cdb60735f6e798731ae2a777667bbb2fe16445274bbe98d883343383d4fbbd53ab321e803e72c761e1185e2ff302228a936591d662e5173bb2260e41cc26b1a4ecb6c04c0a03d149da5de8df78186c25e6944d2600817bfe4325224524c2f261fd53a6922fda8624e8d8cbbf6e36e71098837097cb8bbf951541eaacd92179fa2484c15544a384dc0ae65b833d4ef87aaf0c9b80b38248b47e004064cb6397d636bebfeff6d5b1199245980154b259dc228917314993bd636efbe12a5db05061fe87ea23fa37165bf31449cf67e83ce0641b050d3b62607a4b685195b389389d58d61abd3beac181012b5a02fd62b337c2e434fa8ac7d460492846ac3d597d998c685e5b3aa6873459000a63476c7d6a9ce0c40cf5468f21b1c74f72801ddd5bc4897b8d4c0208bdf57dab034bee4ccb0fbe73d87afb8423b95ae5dd997d62025734a81e44ec9c28f779741899c245cc845ae631bf3c3698654bb2b843a2dc3da724e07b509106eb385960fff25adba45b0a1b5bf56ea194d9e7573a3c74cc32f12f6733bb6d573d602fa7496782137a7841180ce69df03d9298a09664caf104475710b44a3d9e1c65cdc67b28b720561581a19ee5703c521f61463d302cf7496e88a8f4e5bb183174575861f8241bfc6f7218fd876163a3d100e636e6344afd49cdc6b3e611d00fb5bc06ee6cd73e93cd665883c53f2be6ee66b921ada9853da473130785ddd727e64b4fbb4199e194a83b37f47ee56561f7e4266e731db3dfc5870a8d2ce5acea37de963e5955d3b5d2a65a2fe7aeea4058d52aa02b3b58db9812afd4cf1059fe3047d3bbf689696c5b45d5da0fec510d05ae469f9b5ee312838c90dd1857b0507a0cc21933fed1bda1ed4c2b39e9698a1f6bdd34faafad87d7798b59cdbdd083ad38164a3d5ffe60978205c919d2a90a646f7074701827ff31388e2210b7e7ca9a7b7818afd0efd799947e1035c63be1428712ea3d1a181da9bb13d0796b94242aeb21b573173d8fcdde1f7380a5502d725f043183711e3f8130c85ca10b3e6d892d842385deaef909e44e79362ec54f0ff620d15203ae75518c554e597659bd2c86670ed30685a7c6bba55d9a42404622c776ad6c91fbdf1b935f322c9441597541b38e56b0fd18faca9545ef8c60f853897449c892f32c8bed63951aa830ec6cb2d82703df731bc0cc0d399ba371a22776f310147323f5d4b9a110819721ab0e10128d0c18c880f347988523a8796117c97f4236115a95471d7a992d42a65f07ca6e2823467abd454a51065551e189de9215b0c89f62559440a14ab6b5fba183d8870a36b5e4ac5a17694e5e464f4c164c34bbba8b0e97fc790fcea23cb1743ba287044519bf7428c416093f1aff6e0c82265e293f4a2ebf3412dbe1d7e3b05c1aa96bb496ec9681993caef99149d10629c3e8ed77e3f5511a9898b7d44b2a1cd6714888725ac4f6f32b3abe95c8791f72c4983bca50f42f6fb08a18b274b59d7a296ed1878d6a523391e6948f3712595c7799c2a1ad46e5c17e7b56c09b15b45a78e0210725c092e47029d4458f1f5326d385d1881c188fd3d3931773cb57ee763234aaf607cb310cad1ff5e6f8198f347e85abc0f78e07fdd4c46bd093b040ad08d9980ac72c3ca14d61481883fe35326b9a647c2212cff51f2116ae5011d0b14d0c39320cbd9b6a1bb03707c20050c97822691ac86738eaf582a60f97c959d86668ba8c49b08449a549b80cc6d0df19d781b4f3a096edb41ee4c60f9eaca622cc63bd289fe2b1c5fe2bad8be1471fcd8e1984db961dce10bb4d65e05ce34c7e4172b9dc4f7c8acf2ace5ff2b68db22ec0ae63a18f037f0ac4a5a653baf364402737b0795a1dd24fe2313068e0e715a2acace0efc60f9a1a8f32f1d2fdc03fdd7ffd78719ab72b333bb4aa1c0fab0bd52bcae4d07d774de832ca9f2e02bba6bb35a68c5730e3d434316ed558b9ed1f64239ec6a6d5235f903fd9b337406e5a43c2d535a8d8f2599d43c451cbc9e73ab4f7d06b8c36531a9f36680a7805efb10d5a6e79d798e3dedd2fbbc587517788c3c1617f5d27e1763c7a9c4858b2d0106256843a319abbaed170182b1f70ae93d91b9c79142290cdffe3d28b5f6bce9b4e41fac82eb0e5e13fba7336a7997c3fbcd395031f7d3322530fb4e0a92c651fa7d8c5ce6887f035385e1a94b52d7330803afcfdc7744cf6999ecc0a1067f230393305c72315b7c8961403bfa6c1c6758a9e5176fba81951e52ac40813183c01be0e6042cc8648a8d7c889c43aa303e903c66d745c67ecd1c4ccf289f6462b827c1eb33c3e94746a7823f16068a7222e6a547071dc4b605284bf49214a0d576848d3f42653102856f076d369eb499acad2dd8576e3efbeb3d8189a84ede17d41b29519d8914cc9378ac90bad9998581585932bf796f027b6b270462e90df40eebaf86c57872959ee245c7083417142048fe7014432c0a2b88396dbe8bfd0b05c9cb2b4a741415e311b602beb0f5da00007e9a677eb4180db0061d12287b96a2d8dc80cc710dd199d3e0447bca3a97c2e98c941df96d0c0db2abb05292b7f864c96e8f4884678f8959be356d9d1e1460b07bbe7f867b9036be67bdb135e5368e942ee5c7916dd5adf5011d84fea5a380a90d7923cd9e9545863252e6a211eef822b75804ac3d8f1bcfc932be53f83f95a422b8155cc42147e2e1dc9441a5c0b6256a104eacbf91eaf35b5efb1013122f915f4b3e4ec63ab42e62268a566ab89774acf56f7119a1bf1ee8dc3b69498ed536c7c7aea55089ab26a556939b0553e144a2c1f822779c45ce720469ee77effa41159be122dab88ea2efe10a7c3afcc86c7641daa1d241a40fc48e7a7b1a60a65546c1d40de945bfe68836ba4f0fe0fae5a76627d0fce205d0abb265873fe412eeeef486aeff1535618da4c9f6f73bade851d04737a527f914b42e7259ada125f67336208aad745f8786e6eb5449f7d954c028316a94d9b43265ab282adda9224bcd7f17bf74900adef05f1817c4f7adfe255a6fbc3c91e8db77ebae397944f70bc287347be0fce8b5ac99d3c4c31b3328d48f2a46a830aab9332dd7006e0d19601a7180092e54b03dafabe02ca3e33e10875377f6a340b830b6fe7a34969958c3eb744b25efe6bdfbee116b9fdbf1a6a7120b9b97ec97313d55cb5d1e0d284a868bb9dfcce87cc491b314191ac3ee64777067f1222560178610167fbf05d7a9e634ddb009adbd8f25996cdd4892fe7bcfb6e45af8da7cbe5c77331043d49149441866df96e3785d3ce51eab738b3edfb265a47d09348e078b2885e8d11b2784ac6876237331d0a0227272ba6f54b37ae121cdba34909086158a4597e13e49f857ef2796f5729289ba4f77c393b17071fecc99f015810e73fb136c1952bf97e12a923353dcb83a54948bca7e6621ee0e659b0b0bac0b7a56a6eb1a26e1e933cbbed7541595e6eeff1266e463cc36ec914845d212edeecc49c14b34aa95c0248c3b89ab11069bf8d6fa839d908c139ecc102be01078a50ba6772eac6563df61a5d95f37585fb9248a2319fa0cf2eec35da496da569f5ec3701fe0ae243c2ce38fc3c2beb6c75ce98e89bc9c80001006eb944ec9ab5cdc77f1c4d616d7682533975589ab72759363b30ade15a7b5d5fc16109957332936df414efd2353758ff54e46d747b1c320e76c32f213ddd3840aee4327f5c4d5e074b0ecfdd4cffb08c1b305db938a40870e4c4494a7c2392fafbe170893d78863357cb4fef387d45f60e34338ef3ac66ff19fed53108e6d80330ae96b08f4a15f08c2fe141c0757e481abbb95b9105af1ed8dd67e60e9b2889bd718beaa7fab1154bd8f0f416559286ec76d91878de9ab3a10635c6f9d6e22a195f9575660001001d719d11a9a8e97506bf1759db143110261388f129a7a68797e009063ddbd40e0fa7b0ff833782626d384e41f012fcbd0cac81f6b0407174aa56a08051a357826df0373c07147bb26ca3ea06958ba896d64a2088e1f474f32ed7632a3a2f92f0028d0000620001005dd71d3f7bae9e36a59c101c7ed005d3f78fcb7c949310debe207fb77b9b8d89e5cc5a3440b79d18e2580d33bcacfa60dfeb60038acfe415c8869491b8d48069dadec1c24b5484418388a325786b515504c7d7d3251987788ce7e381309f0000041001004d3c18b7d5d68cf8249065f55f03659a6708c2325b7bcbae21a77c37e0e314cf95560dc7122c0b1e757f4f8b773229601e4cea629b60bf77e98b4e4e9c61f97fd096009548808f7df702599a30c677bcc349c6d37f44a6c4ac161de8e1f64ff9f764491b4bd2157a140794a3904b2513dd04c6466669afc9b968db238413162eeff9dd308a2e2923fe09d27db9f7f4a46e08756fec13413be576e7ea792a69abcc6bcf33c0307ae9b86d33c1c853c355417ab98079686b4918bbfbf13f6c5d63642f5db7ac659a547bea55d276808128fbc0d3ea794fcf9087f62153fb9613ba3ac60091f72301f2f1793589ff4d11542f3f697413b9bffc24cd50beca7fe309e29cdcb799c9c41bc1de83bd1141182ba1984be79522d63d8440c0c3ae97a86d0a4ccc0c7cd89e5ea81c89edc01e5c9a03ed225db74aaa511583b4821a6adf8f5f384abf93a447977b193ae5fe2bac0e705cc6e2d709f50dc611be13f5c2cc26da9c272eba8de0cf4e6988a9d388f0010e433d3a0f6128a800017d6ebc082abfc77e0bfb0c604091f4d3c771985f9b6372dd5cfaa22740d2cce77fd93dd050cfb99f189c8274046ae28cfe7fcb8230a787a17adfda7130fd203acfa0f91694b3683d37c62dfa5e1b898a2fa647e0edaf07bcb1caa7e3a2a169f79cc176618617b3a356aa359ad8b184fbe9502a5ec14ee9ccb6031fab0125b80cd792601c8d8c03ce750f1024d63ecc2aa1474e95fc789df27a9bd7198040b74f6868896c7658e33eb12e40a35593e97fa19fae0f9b333dee619592116a5632298663cb81e0a7ef872fa5e55b7022bd67d9b949f13e04a9e7b0d6a77726773606ac1fafccc5fa4b88149cb964021a9e2b061d165b5c332e9dce82a9853c0177caa0698de75886571b0a4f671b809d27508df5a0e568480bb1e1a75cccd7291d422164d291de6cf97372a57a31a537d52681af9fb48d1419807398e02939b0810074df761a7b280cd0bdc5b1efeb4505b5de60ec1e2a72b82e839e2fdcc4188465adb4ba5e0fdda9e4ed3cf9d107a0ab3b7555b96a06f51f291343bd76d5be276ce5627a940a8eb9b9ff77339994ba93ebce9fe52472ce07bd4eee777b6eeff9c71ce1b4acf961a7fba92601726efc2a0c21dfe80b947118b7292a7e1033dc890bd39c36c1c9d5f93d8059b894035bcf67b385b1ddd610e758fc435ea45795f00e25a3382dfb20a0859f4a9f6b92e756bac4bd61c7f866929670aabe8fa1875a5eeeb5b5bec8667ffaa94b5a47e3e41e00b76187e9815c747978c29a116d9521dbd3a75f7f74c8805671754ca36453435728208f7fa04ec9c0554aaf703f6b49933a77716cda67b141ae2d25c1f9881a0aa94868661b8a6b490acd27da97ec4683239a6916def1f0c42990ff6f6eb8eb4bd6461355c181ba05df8f6439a4d4882a14b2260a3ac09438c595b8c1e1b84a25ebb1e5ab3b91303498d9e86497b5f5638cc8b67ad8da0c3f837ce9d697f779296e64c1a15b001d59c5510aa314d7f4c6ce98406f2248156f615ec556c1b8d8735cfdfaf70fb3a2b0419f04b9babc68a7fa14a23e69dade5c670c6835e323bf9156743935a599121b20766320ac4936bf234d2ad720dba544c5b04d13238b07fbfe9dc450f20655e1903c5cc49e160ea56383e3689071e3a31f5e1d0b342afcfa941d999e841eb0302d18ec721a9b5aef77d7ec5579ebd7dd5c0faeb18add974fb150d2ce9f09057fc358b261c37052bb73362fc1ed73a6769972e9a777be3dd378c480d25feaa2d26b855dd6998bfb0db0a9d7f1c2bbf52dab59c0097079fb09dab466b31f544007d0a6bff27263b8bf0561cb60d34762edfa4ac9d4a99c6ad3c478e7e0ec900890deb358adee1b5c27dd28c2d17e04e50a96bf221244bf12691c88024664427128b31ed59a14e924bed6d6920586c96ca127743999744ea83647e038140d71972d4bdf88d624ddebdc720a2132974d94bb4222e8d11dd656589e0b59be483892ce6e43c080f0ad97da97345e8d26eb44d63a48d160206e7ec22a1561ba7877cae0e67e0274a02438229ecd4a95be25a34f7acd837e5a71551eadd89ee4bc0c8247881a9f4f39e43c8505660f9b341f04aecb1e9f9646e2700a1cfb20b11d61ed1f383483563d989a107ad844f59be0411347b829c12adce3232d3f2877408b7c4b775ac90075ba0d35814c20411bd095ef34f668b87a8c6d62076ec8e7eb3f916dba222461c1ef1f8e6e2d8fc5d2dd543120dd23c766da67336df07e8452390ac49afbf8c6e7ccea271c43923d06f97a37be6be0b7535f0f106fbc81ce97b6fe047b10d8d04f69b234fefd5a10ee19b01aa934b51fce9e06594034ab7d33b4a65a0d4dc5fca8119d25f0de7b7b075ea8f32d34998239c920f3d8922c6e41c89b85753f028c1d891578d6cc54ca9457d432ed4eb3e69760b58e97d703ef2ed041c4c6deed2fc89130786cd7b0bec0615047f7d52ec2db40e03a22c9b701a18a0194eb28e33eac5587d48e0063b12201050c7d553fb78039932e2d1476c9134b116e2b332a445c84cc5afa1a95a1631769d85a250c54dd0c0abe85531ac04a20505947e7582b28cd48e1993730b65a91b52adfa4ca9c20fec29753eeffefb074afc0b77db4bc5261e817dc45e241404766b51d5b046940e2d6c5dc83f7b19146004ade7d5d521a0c1e15713a1d5516f9a3f94f44e5816cba3d76ade6de47a1f6aa8ecd02e2a43a2bc5e38202052a8218bf3d192f5f0abcbb7bbaadf324dfbd78865b1103cfae6b5d87f7ca6a98b338ae6ac3f9afd976dac5bf5c580fe0613c2b8420117525d7c3833c2799b80a9a3cc38c83e6afaf0b061fe9ce84c596f9f75230bf8bb8561f6f731a786f8157ddece5613cdcbd8803ac2a17b1e9efbadc28ede2eb8a80cadfdbb95c31fc77a934eeb69b8c3bafb284b5b2a3793399ff51ade55ff1f3f975453919920f2495ef4fe04ecf1b77e77d9f0d98d764dcb9e84e1747b0ee5e63fa0734ba0e3d7098e39acff188f678e03fde993585155705bd23ccbc93de10e75b7a234d175811fdc41281273635414635d7df886e26833a220894a7665e1b73a6a6708c48aca33dabb024f527ca6bf0c9487ea25e33d4018658648cdd5a3812f646d7a6e398fd3f302bd837b045c7f2ba220d7a6ef6b34c382f6936b2e5d4d27f28e08cfabe5ab320ce7bec452e54c695f376cadd7c5c45353d4fe31d9ad0acac581da344daac00419d57a0465ef3243b8fe89066f30a9cf099a6886ad67bdf49a68dc1a3ee7e3dba4e33fd1fcf3a3e66623f9148f308ff67d8052f7b626a29df7a15e52b0f50e358bfb2fd2d56c722bc51851954b5d9db9691dae1e2ba435b252af4956c66653f6a0b501c542d449e1a7b40c8e93b51e661f6e6e15fb32aa2259b6365907f30eca6213a3695ed041c3b38872d0b9dab2cbd0f33d1807d1d99715ea42769085db4f07c994ad24602e50fc6a433249c9aa32d5c25d3b6df481fad1caa66b93b79b642c79fcb42fab53d7b3629ad6bbf1bf5f0c272d9828ec22444d52e2c8fe031d0a14e290d2f012ab953ece21e03a8a438fac1c5267a1330376bd01e3bae5f7e616fb7560f2137c930b76814985ef1cdd1dffe16defb5761c2d3a6ed7088305da24f2847104c64865555236b4c1efcfd5f9ff679b81d30455f162ae57bb9e1ab1399a49b92b362111934e599ffb4b0d4e6dc5012e3bdb80f1d422cc4a091c33730b983763b1dbf77cc5fd2540c4755561f1b93f83208dfad0e7df6359cf9e5b3fb1b50ad826d9b63dc27da4e06dfc3192f3d54069a2888e779617552193d2f339b7c9d5e02edf8649b387ff67c8c46c1450208c44a3831a9fdec4481b37094347e3dfd4dadc92ec087fd47522f7c104037da0e8333a952e210b79f8341057dbde00872eaa80fc3d4f8fc245e9c52131a53d936f6906c4a75d05fc4782bcaa7e650e91eb7edf1e504f97fe9727c6f826005b9d34333695949c0768e0ff7305c31fefdb836c623c2491ce4e1215b663b7d96d2b85efaf62036057d36b0660b78af1e2e1be2bfe672f7da528cf4c2f71526e051e888b92c840fbe725189ded961b0158334f05841b0dd4aad2abc2a939c5f27c95f0ce112999ec172ec93f7fac593116e4f901701431d1470bd887d9002e41ad3217f29e4d7c442573dc07a152fa772eff05233f0efaaa3cae78ea6cf160bca2c577f41bd30538ac52d1463e3f1862c51532518777ccfc4782d0c6aeec27b957524dead61f3d0e52361ace2afadfce65815451820ad6e1e493fcd8fdeb1aa7aef3b446a252c5d4656a14bc8a5b0c70bcf7281c8d66e30849704f79cc8654a13ac0ef26dcc3905b11529502cb7e939a2cd599e862e1e96c5f69f3c7bb74c5122c06f91b955e6e78ef2130db13b970c1ee5fbc68efc21d98af16054b40eb0b1aae0f3415dd216a962ab70c8a22276779698a7f7a9f0f6b4c62686eae8d0a73390149912ecb0a273b0f19b9a445bf13faf4f106f584698eef4e5de39b2f4f8253307e807ae4846a2343e5538415e3b157ebe6fb4338bf5f1f828f03d742aea1584c301d30feb000decd08e87206a0747c44da3939c0035fdb35c1a395cb83911a1c049852ef8258b4dbbadca054fa1bd96e523a64b49c4d0f8c072678ba6c8dd3a3b5faf6da10827d0939b590bbe124d26184e3e316389c795c64d1ed80e66f5ca1494bcbafa806c1dc918b76830fce38811fabcbb9c8dc103f86759cd3cf72013b1508c48d8112f4e657ae042f8742c5994aa17a07c29dee4b250b060c456eae555db8b32d971f1394f698c1e5bf5019bc997e03242d710294c1eed3824827c3169dcdb61023ab62b54367e1b4401a530484b6035affabf579113f60180d8871167ae0a66797d9e6c2a9644452aa316534eeaa7ed204021f5c032183057851c66664628e1b79ab3634ab2cf17d5db0099b8b45915c0c94bbb178cb91bbdc92e10235a84a5369ff7709fef1234214c4a80f1516187711539fb0a432b5a0834bc91b8654c8a230d07273680ec7dbb4d3bcc2b8d92a05d4cacf2b822422821c9dc797e978ffc62b7148dc3dbb001c99493461d3aad3437c944e54ad582a62aab9259acefa81daf6d72e564a54a087a39de7828f769adf6472f788d3309bff4a3ef1c95d8153dcdda703585fe1855108c62ba58d7a461a109f6893d47055483a508aea9bb05ad6c478825539d4aa5215e25498a086209809900adcb90b136679523669fda04b51b9688b16b9fc432988df76c0c2d3d078752088fcc7f4a53f5dc4ef64790487a04caa3cd6689d43aa7ce1bb40e5ef019d76b60daea349a9fbe086b1533caa00ab833793d56b2d1150cfc787e2193b3cb3e2493dc4ed8a2062d47805268f8ffaace144a7851428489961eb27b016c99d8801406301873f41768d1d2feceff9c7ea06b397c803f43ac2f688e2a1d113490325f6a70a7fd37693bdb365390a368a55ac217ff9214dbd248e842777c523bf1e280653257cb31f0d1587419d8d7640ab51d18c314e73ec8d241c9086ad30a79c7946f3682a4d627bc0657764e15919ee10d26bfa1f5af3650672e1aa86677a13a2d4a818dac6b869c4171d79a17513b1bafe86627acd3aaaa93eeb811b67b81dffa7b3b011bff898983724d4897601678798c57f9599da548f777178e27c38a5114f3f0eb53c1f9bd24ff8591eac0f3548e97b511684fdfa16439b46093005004778b0b504db452ee930de02d2cf92c48dd91be72931dcca9449ace3d10e61f0900090073797a31000000000c00044000000000000000033000078008000100647570002400028008000140000000150800014000000017080002400000000f0800024000000015500007800800010066776400440002800800024000000000080003400000000a080001400000000e0800034000000002080003400000000a080002400000000108000140000000140800014000000001741400800900090073797a30000000007c130180be0001009ace03c447824a287699316bc74d9ab0849127f4485b4f2f013a1a701016eb3eca24ecf901206e02c99fffad214b51a521d294d52fd2da3a478e35f8e258e36d8a8df3f4408c543c6246c29fb674c4cad88e65491ce78d28f6ab157f4ddfe500190e6a33807f506d5e3dbce613a9f83be15f858beae98dbc71947fa31baa2a679378b24325bcd30f62847e8748d35e7e9e555332cc8fc1297c03db4f66fceedc9a44376df58fc3051ee202bf5fa035d9c420a49bf8ef050c0e640000830001007b6776a05d73051bbf0ea75cb1be100bf29e43e9182d8fdd900f29023fc820d8d859d58902cd9a4bc92f489be27bf3a3dd1719a0a48b7f25858671f7e3c3245a3c2c454266a774df6b7b59c8863e34959272330e7a659b0e3c5dd7f93d0917a21a589ca0bbddcb85b2a510422c166d618cdfb58bdb0e472ea3be4e36fd88790014000280080001800000000008000180fffffffc04100100196d494a637ddc8f09e6281662c82a11aa9f09d0523349b16e81acf90ba867b7db622f0b200fc9092210ddffdd7ea8c45579603fa9aff87e38a597b4538920cbd35d28ad0c12de3255a336441acd7ac9b72d3efa09cf0ac73e64b5d3218277b100cf69a33b0417d507c386e7fa10b678d8a357b787d442a5b4c71391ec55fea799724f1a299bbe1bb3a0310453e0e6cb6a29789e41d15c7a1040b92c9da4ab8261a15168d71b48cf42f45c3848a16843f556fee73d1f380409a541514e1092afc446069263d33cfde9f565dc756bf4926d378becc45f43142809d096fffe96e44bb0fe7c63e21288297ef40101b8c4c8592918e0495375a00b7145bd71cd839fa9e07c11df64890c6626b15917eb53947ae0bae4fae70f03835242784663024581bbb6f40e1c5735aa70a11bfcd4476664fdad81b141e15edf52e3b839250cddbd38d144ad343dec727832ecf0b6cfe26a89d2ed77e5a1437b728ac36c11789049040d24fb23de74fbbfe306407fc03498147861de1d649d60f2ad14a46ba4361bf34d811f1b4cf4e9da84e7a04fd97d2ee146ad98c8f0124d7f30f32ed0e3c11bd126677bdc1694e805d07c32bb87ad42c14287429c3cec6b3ae461445705308bfb58b867b986afa56719466c0e1f3a0c7605179e56727fe70222f4b9057b1e95adffabc49db8189d2bd66be1c82edf802e2cf11f41fa2c29cd097327863f36bf3ded3c3b8580bbe27218ba9ddc48dd672f1eb1a672d6bc1ae18b4c6853492b8eb8e9d287153faba33e2f0dfdf8091387aed124559bfc0dc1867ee849a093969c628527ec00c92b94efb001140119059a535d9bfeb5d51c1b8168a7a653c4e84fb4d4356a5474aa2aa489ed8c9722233053d55f5744d44df5a7b9efafa7369c96c81f9870a82687ad3ef18b924c30f9af7c32f7311799849a818ed870c01baddb568e53c077fa46b584c34bc0a99a9bef59cc303685a455f99dd9f1ffa96d887cac647d8c597143b0f122de71fad0ddd3e2b3df8ca95f3b76b9f8059b6bb6b8ad5b912eb25c712520190776d5a0d1e6470d4b417d2118c858575773108c4b8f81d196040d67113c208506521490c9358cbe242a5b738a8a6023c367ca308c0d236ec18185e270c0b27fbd00b85ce6b66319a4ae32ca2968b474d42e0c94dd55c4862a35076824268bb5877fa10e68edc0b542cf7b62a0d59cdaac21ce98a0c2e517643dff88c23c43ccda7f93fae83ec90a99cf1d7957f8fc6d1cd0508fdca4dee647e47caf7a7fbd97c2b5c4f60e9b994449d0da520605da91f62ab19e2aee3281c0df2b6e030bfdcc6d7e8e40a38637ad43063861bb76b84048305c3939e4a0fd7dc75315fa9f14dca41970bfde059cf40d429af0f6d2355d06c7491531ecd02164d2fbd99e4915faa0995575e8e49af4092af6a36ebfa5500d3546b962ecb76e75c61d93b600ce28d4892e983a8d50c359d9a049537c7704e74aaa1ac05530e4768ce4e12330f2796a2f75e96b988329865fd8f76258c2d5747606337a7b6362c4694beae2c7938be0b6f73a745d83f178497601944ef49529af06e044272aadf17e54fc1d8247b59449fe177508f104c80bb0d644dc1dcf1942d3dc2676f7b3dd20e45d25fb372c7b1ac859a26452b00b9d7f79bc3b053b800c55578dabfd1f6c35d1a47e9bf58a930a2ccaa4c441901cbf95018b1e8c657414d25229f33a0be3ae5bad0ce51a422dd4c77e5c6a37755cd40b2762f046cdcb53c1a75b75cebc8d7eebc177a41026e998137a0fe068031895ea945e39caa4d2115a7023c43b2947c9a1f1e92443699bcddee0545245839eac4cc2e9af9ea819d3339c20b739b541e532118c046e99e358457af79437e3c40336441d99e9ea7f059b2ca118f3155839bc491d8271ca4b4a17d819c289afa4428a63b33b1eebfef04342c9f52f19f585b1883eb5d4fae73d40cf16d1e54fd84df2df877ea60a1c5e7a8a249977b3864eee2096f75cdad0d29fba9289909b610feb0dc5da6f0b5b87afa5ae67ea7ce51205a4a048f08dbb221abd454e6040eee89871791b75a1ac62a3cd8d89dca6cd1c47573dcfeb67e5070fbb91f3fed4da0028b2a5085237127e64a4223a507e59d98386a71f870882904acf43f5ba178d68d1f1c7523606519a373e68426129e34404eda05b0537226152fef65a717f2f802b5c67a2658b99f80718c5f44fc34bf1c14661fd8c42c18a9312a2bcac47f8dbd529e4c16174602d6e7666c8b59bb6bfddd58d32948a84d47b84113b0cfc3f4edc2b08c2d37fff920379c4d130fe76c2d641638263f2752d897dd01ab988f396ce0504b6b9bb449257002446b65cdbbd2f150f79f7103a9247e522a8c2fe135e45507859ccd151d7051a36f6ec5505adf9ced4596550c252c12303315862c55c1399f394dd193dc1035fe56ffb52be42e4b6f3c0d00aebaa7918d67e8ea4b17df28c345a9e05aab9e3353289a6dbf4bf5d4daedc34ce52dad8060874ea5b1bd95340c1ac5b0715d7e7d87a4014264d5e0c508dbcddc9117d65db03aad27ee979458f0c2cc17a4cf5b37bf13166542d8a2e374282e4936061766382fc6aac9857192336a7ca58968232ee87707839c6e39c4dcef4e84b0d74a77e57cfcbcd31a0543b0e57d6679cde449e484c6454c5e140c64f4c2b6f4dde7358cb0a55cfabc284bff1012a7dc5a8c9a9350acffa6d26a85a09734f9d138a0c4f955c2a7a6012014caef8647716d5bee9fd15bd1a37cfa762d3ea23181b68af1fdcbfa590979010ad09f344634105958a19324b4ee777e4524ec78fc4577d911931cbbed39fb0226b349acbec6965349db24d3214f39f9e898391346ed7497376bfc22407eae0cc23271de88f550180876ef3f1d06d207ef388b23a17292f952c26da81020ee5cf856b035e892cb44bf265df509f9a31d0825ef894a7815bb1456fef054154553dd33f95baf611c406999ed37ac3851bddc042beb04ce8e15275e3428705a197d464a005fb3ae544b210c0b9f9ae11358ef497148ff9c8eedd3af9b9cb94d5f03ea868b4d7c56754f7384c1bcda0c06c09e5bc7d44ec0859bb6b65e151c7d6434f8c1c6be7b0ca820073174af8e03a3de78f7f4383e84b925acf250a11fc6914fab025a76923ab1fe273f10dbe1c526dd1742f6ce5b990ca8366a5d2bb3ee4b67ce9080882d357af7eb65fe7289a90cfc631e52cab057fb04b5745754b457238f016e250638545dd63a96dab172ab5e4aea17c8c6eabe2162584b9c655b62c81ba718865cc77d82c8f7a9c222c3f45f39bc3463c0d4a34a5cd2171f384021d8cbe05ddfdfd3e606591e3ce15cbfa00b2a2ebb074630cd1eacb0e0e882f969cd95c9f6d9dc6c524d0baccb6f869d463aee762207dcf0cb84a20b5ba9237e22757c59a21598edcef7c6ace6b5f0ef91f0328812a4d473827ddb77a34b6c765f7da8f3f8d87d5db6e3a4842dcde1b18ab73911e8005b6f52472005842e31829808f79f5e755aa1fc78f31a21c895fd7deaada4afc5016b6021e77ae7e46dd69ded62cc2765ae9ab625a73b87075cd28648c10855c58a6965d63ff1312896188ad921b752a49a3c1db3d9a486c029083151a9bc40106697eeef4fd4069123cafbac591b794c0efafb078a13eb604143d2e11d40938172a23f46a46c0465bf5ccf0675fcf5d112876b06942806fa30777a2bb154296126bd487d3dc51a6f31db5dacdd6ca099904b80e52713902ff599db71acce451a7b4eff5bafde1a737fa78ba323453657e06fbc1033d85940b32d214f8d92493b5001037a0c1d9be71a1624e5dd76816e54459fc2d77554eaf7a4d81d49bd2fe3dd3bebdc1b02c8563e3bcaf7fd731237b3f9c3ad782c0113b92295f0f841009764f720ea4ca2a5ce71e34c81c5243ffd4167d0af957c3c94be69ed5e7bce940ba46f1041dc6d89ac23da36cb4182df1440870185ed6165d0b699cc694219bb8ad32ee54350dbf537efffa9710cac06b6b29149dd068ee4e272f8e1d8b3ac1247a7a807934de46117143f8f3aafadd12bbea81d37321a5a76ef5869bb69944fc0817a827fbc088f5bbe97aaf93d2f892f998b1b2eb7c49fcbe1dd29a886f52567744e7cf34d62a0058b6851f728b54491d1e8d1c85359903d477406b55f67a8f72c83ba08e24ae79190e505ed2feb72190f36075c98490ef8a6ba115f14987dc7af21643c73c85de7d451726dd740870c403f88e778e6624ee38476b97e2f7aef288f7e75a8d3c53491eba8124aaa56a98523fef7873368a6ae03e37f19d7d91470c3d5bc2748c7a90b1de78652749701596b52c4c60a2b7b5dae816fdd39932a7392de319b619fa7634ea2c408a09f162cdfa7e85d82949b356dea4725bc71181212b33147ee6342b910d654a4eb01b0d26dcdbeced4ebcde9aa88504305635b95148e5d286332f09f7a319b72bc38e9fcaf3e5c2442d8b863efe944b57d3fefb7886a5af2ce55c386dd7982c4003134627f55f70738d2f1495e497f37bc46b744113f863467bf4f9a167a7ca25538cb8e978a4e30f93528190b10b741494c98d657b34511a2b840c40456fecbb5221e1330168b5013e84381bfc32f3c2c5b025b3f9b28c58369e1e66f27a9feb4776b5ed49fa24e02248861b32b25a483d5b6aa88ae0b15232a72ccd2f9b0e59b462d5a0096bd218c23bf5dd33b31337258744d45376dd78e5069a728a68ee2ff6157143730565d9c8558ca093f9b051947f40d5db9f49b0341168e71ffaf6b65a9b28fe2c258ad847321bc967f521338e6b61ff2af9a1c58811f982065d9e31229b3e296aa7bce9e43f99a6be373b53e471c08e1e28f28197ab8b80d60f5f0cc33e281016560e9e7a0d8bc78b63d2ed647e8dc7a02a3db784ff730d898f91d08e7f56f515861908eeeaea803d1e410f215ca3601173646c054e3bfb4044dd6da68e613e1867b19a17e9a1dedacede3e11ca66c802353fdf01963bbe3a6ebe480be3ceb3d07fe7255b0a155ed24870197aba3ff08ed81fd2593b56d67a04b0116acd4ecb1e54644141bc12cee220e496362f55ece4d0a758f73f810c0411271ca8e98b3d63ca04439dd33fe2dd224ae5dee99e692bcd92a22d12734621b8a355bb2cd27fc55412803a9ef1a61f10987447a1a8655aef991653d8e4f941cc1d6ba4a401162c775a447c3dece29904303764c9d46c0c835ed5e35a7383d2fec24444473fbb0da3011ccb4a026925486a261d446054432bd5f5d2a69e992cd5b1820972a46aa28d188c7363991b938ec0e80647d19fdbe70d4d37f7e18d99f54a049dc0279746d3b791f78b8d3a908b9cb16ca207e7e4c79397f650577977060fe25258f15c2872a8cd0f152c1f552eea82b48024e2ab33c5631a55ab7d069d6dc4a633a3b79571e7b224dbcb07e2ef1945dbf733caff6f6f90c54dfc583dcedb37b81762565599d2e6dc2f5a7e3ef7d3eccccd9d84efef223ae2bb3a325c7c0d925c93d7e7634faeb5eab42da6f97c01e1b126d45d6076a64527676b21422e694dd71d42b1d02c075b5248b517ac550443f2e878548d09f03f4b17af764a8733274dd60d4871725d272a70fa077d824f56c4851d1a5a5753352d333221641cffc5c246438d79ce031c27ee6f058e4e0840ed6b72cf634453a09d6de5a07931bfe28344713b4797d1f18cd19ea0c5d5482e765e4f45c039554f3d830c6349ef9760f095b31d3ef2660ea48217e2dd49f47360df1f9286652a2dcc8223b6afe7fe79010b763a68c53cb34d05d5250001004a93b52bfadded0160d60c4cc05cc0d43c354b32b00a867a672cd6271b0ded021e000000d70001007d18ed95edfc40dfd09b806e04d7147e45f71a0c7acd96884c9b8465c0832207f0418ba8abaa8d6baefff1f2b2c5b7e8013a354e4127c5a07c2c0927827884fe9bd454ba28d472ac2c7d25db1e924d8d138af98d99956d1110eb3f381604148a399eb61bbf21d80a829705e26f6dd78ed41fda5232fd9046666aab9d7c13e457f50ce7b1d2acb9ace4ef829e46be88cfdd8a4f7fa5a96924ac58b17ebea66cb54c0055709e871a8c75b5195ce9c155209a3fed31acb415b5a451e9f64913e739b4431b44b78fccfde6044ac1209ff19d90669e00c5000100d2ab5122751274ab2f926fdee64c4a4f48e1d988e38cd5788e9a6797e971c962dc231913c64701d7d1e0a3dd36fd5f45f47a08d8346288e9a93742c3d87ef45ff57d2ca2c93a2fd3f17421a9e8923dbbf05319d6a83647e2bc496d97c4f06862e2caf16221557d35fe93721d1d5e7db7df835ec0545e612ef65293b2fbc03e7aca0215ca41cd2f494dbc560aa727c9a5e7d3a388c4b9ff3f6645b097c002893057f5655815b2fff640401c809c4b6763a91c7cca846e379fab249407d6efab955c0000001800028008000180fffffffd0900020073797a31000000003c00028008000180ffffffff0900020073797a32000000000900020073797a31000000000900020073797a32000000000900020073797a3100000000e5000640ba6958d3ae06733f8f0a760717e804525449320ef2e8f3679f454acf58442615c3a89e8ea113dd33c95884f2e4562f49615e16fa620c79d4ec83efb4beedd1aa5e3f6486016e02612f0b0c5fe62ac25180ffd52fe6f1de7d8834a9da10685576b3874fa57e14b49537a7b9c8962df384c4a5982dfca26da8cfe462d5ba8d2b0a619c98440ff23a27db791b8b3f8ff2db90dafa3806eddfc0122664593724a1307464294c9426abcbaa41ca0ff05a252cb189224aa72a10feb4392b8f8244463cc7946cd09ef54f830a0bf4654c6879831b29bb3861a2f5c4105ee11b9a3074eae100000014010080080003400000000304000180800007800a00010071756f746100000070000280080002400000000008000240000000030c000140fffffffffffffffc0c0001400000000000007fff0c00014000000000000000020c000140fffffffffffffc010c000140000000000000000108000240000000040c00044000000000000000090c000140000000000000ac3f78000a804800028008000340000000030800034000000001080003400000000208000180fffffffb0900020073797a30000000000800034000000001080001800000000008000340000000042c00028008000180fffffffd0900020073797a320000000008000340000000010900020073797a30000000000c00044000000000000000050900010073797a3100000000f41d0380c80300800900090073797a300000000024010b80100001800c000100636f756e74657200100001800b00010072656a65637400005c0001800b00010074756e6e656c00004c0002800800014000000000080001400000000108000240000000040800014000000000080002400000001508000240000000120800014000000001080003400000000108000140000000003c0001800b00010065787468647200002c000280080007400000000008000340000000750800014000000017080003400000004726df6340000000082c000180090001006d657461000000001c0002800800014000000008080002400000001008000240000000093c000180090001006d617371000000002c000280080003400000001008000140000000230800034000000008080003400000000908000340000000070c000440000000000000015a0900090073797a30000000000c000440000000003bbff1aa440002804000028008000340000000010900020073797a30000000000800018002df55d208000340000000030800034000000002080003400000000208000180fffffffc2c0201803000028008000340000000040900020073797a30000000000900020073797a32000000000900020073797a3100000000600002800800034000000001080001800000000008000340000000020900020073797a31000000000800034000000001080003400000000408000180fffffffd08000340000000040900020073797a32000000000900020073797a32000000000c00028008000180fffffffbca000100fdd9c9c8e40b005a7399a51073c3c2c29e4413352e2b78206fb3d4998848bf33d9a8babfeabdc33a44993de259a9010ca74b018b5a0a1f03ea5327caea62d1b06dd9e2a59f600dbded848e6fecaa1777a7446c6f21c175b2ca86c1b3c2f7e8886d8d505d6d99d10848ef12de11bbcc207e2f8d315a8c366d5d101418e4a51dfd26fb17be8468457050f7812a8c37e616c9eccc172cb36d6b6f0658e21f9ed6620140460d1cc9437dadadd0830abdbe31c44f7237cac2ecbea01b5449bb3f06afe5a0706939e70000b20001004f29fa2cca8011adf63a6b300c48a92be35fcc1ca1bfcd06805e79eac4e12e1a453af6452c870176114edecd1d6583a34492eef3665265ca2ddee4ea44a931b206dffa69c5b97f1b9f593d14121d90cb89d9a54cacbe941a37a2c3e479dae957e6cedf7c8fb8dd6000550e699b7011d3ffc3c4c46259e61f2fbd2470dc902ed6fa99f9574be2812223b1720f570367497f18fe86a422bdd7a886b62e58c09f7c8e2c41b4dbdcd14c41352dddbebe00000c00028008000340000000034c050080080003400000000234010b802c000180090001006c617374000000001c000280080001400000000208000140000000090800014000000007100001800a0001006c696d6974000000f40001800a00010072616e6765000000e4000280080002400000000108000240000000000800024000000001c0000480540002800900020073797a300000000008000340000000020900020073797a300000000008000340000000010900020073797a310000000008000180fffffffb08000340000000020900020073797a300000000065000100dfa9c5433170cc5b2e8227927ce6aeaecc065c799d608d5f86e40b9ee00a2081a30d1e88a924f95ad01506f25e482a99179d52bd73eca1dc50bdf857b63b3f11b7c7905bfedec04ca1d228578f440ddc6f47b746ce7fdb69eeed218d15838c089d000000080002400000000104000a800804028048000280080003400000000308000340000000010900020073797a310000000008000180ffffffff0900020073797a31000000000900020073797a31000000000800034000000001b70001005d22f14cbd5b42e36afd8316cc4d75de1e8319b620ae370aecf51c4ab60d9d7ce27ce8d858f9f1a06b66804c30568f07988d2ea0b5684851bb522d3c4cc6b3f3245809217aac00b0cadc30fe3f32f28a31ccd55c429ae40254d6e4c84e30f549b3d4ec9ab5fc452d5c2a59bd18ba87de9470d91ecb4189b24f094d7041a60a7469d25b0357a5ddab334ac4554c39ec1edcb8dda72edec5afe0ec312f57a514d72f51137a7c89bd3fb2f7d430c3fb97686e600300f9000100b87266ad39d504da19e4286e0a470c4924f345464b91d66dbc69c4e39521b8d52a2bc94c2aca7d0f03078d3d1441ed838ab949ace5acb2d42c226436c49b956aa6fcc253c2cafd3e8bfe36880865e3dafe712a4e74fb4d91e5b29251147df3e0430096b7573f6516babe936d83a890811afd895d443a51580e579efd4a57328b8a618432224e16ee8f46a0b45bc678acb98c759b66bca7c40b7b2a532af03ce32a8d0c24abbaed1bbc14da8fedfaeef6e1c2d535a045e5947422c2d1c4708c7beb774bcad3e05ebad85ed09b7a42c5d58830cd97ee1be612a22c545b2823b5ca8baba4ff117c1e8ea9140b29557041958f9bfe35b40000009e0001005e88279e49d279783ee183418d68bbd4d392f49d151f518a04fff748f07cf634e56762fe478935ab0dd7a68fb52d090a960cecb1fde3069b11037099fceb6cf67b5ea25770109257e30c4fae6b0eba53fc07ae5dd99aee481f1469b5ed673f76e6a34728d4b39fb358b1b96e6095e5d1fc56879d3f08dcbd402ed49fabd34a7ea70eb257c71157249df5a085ebcdc243beb023c628b3c116d6c800005b000100a8316760b23d0f9e8f8f1a19c9b6583886950d5a3967415a599989d87035733488c6f8e6e3122b78e3d21c28617d4c7bbcc264dbf3fc38a7a159db78ece9791339e4ccfd1802c47d944be23f3e1cc4a6015cd8ed92fa8900ee000100640556a60e58c4187957ea2e2bfdd28624576796a3b584c8a2909133c5c018b1668686165c4543a7639093300f73601b4c7f4ed9c21396480cdf81e4faf5824792d537e85bbbcd9e2f125e4025dba0ea1065e980389d544e454156537a75bd0e6ecb46543ad4a4164c019b81f51844cfd18fae812eb0914cc8f8e6fee987272bc959c9671e0f5cc86bd128e70bace4a2b3608792e9fc36e1815a040a49a775b10e32f90859468d6d257515d9a1c695107ab9fd5f0e15425e23685e138addabff7b48a94d0388ed9e39fef8b198ff9f932ec8e0b831577a00e19b89bd1d247437b91b49c613f5f066558000001c00028008000180fffffffe08000340000000020800034000000001d00000800900090073797a31000000000800034000000000080003400000000295000640220158221acbd73027814cf5860347a0db76fc78dd21f3b0df936018842c5c9eff8d599c515c392d48125fd7135d9caac371a8d7e727c8be8037d7bc0225c9439fd949d8e9c468d6069a783d09c0c5067515e42df81b817305bda4783c5535d4efd554cf0d40cf06e22c58a4a9cf0faadbe535406d4773d93d1059f812836c612e01b7b720285b6d95294256b3fd4ff1a00000000c00044000000000000000030c00044000000000ffffffffe4000080b8000b80140001800e000100636f6e6e6c696d6974000000400001800e000100636f6e6e6c696d69740000002c000280080001400000000c0800024000000001080001400001000008000240000000010800024000000001440001800b0001006e756d67656e0000340002800800014000000001080004400000002208000140000000000800024000000003080002400000000908000240000000000c000180080001006f736600100001800b0001006c6f6f6b7570000028000a8020000280080003400000000208000180ffffffff0900020073797a32000000000400028028130080d8110180180002800900020073797a300000000008000340000000033800028008000340000000030900020073797a300000000008000180fffffffe080003400000000208000180fffffffc08000180fffffffe29000100d3541e75f3053341774742193d44f9f9b68466057ae9417418be341e245592cda86937a54d0000000e00010023512bf947bffd7eb6be0000c5000100fc5a1150841bd32b2bdceab7e0804979ae14b180230a9444ee98937164450dde94ef3815660bd7edeadfbe92cf0c022adf5a7419b0e7790227c6f7e40a35c3901b40aed083a2780620dd2f4797589ce07811bf056a73e07ea0ce51b21e3857587d7c7c540b95dca0f61c8adcb0079b69b5da96b81837541c6d29fa16e8e27fa66a9a40a6df1b552b63f869d2eb6ab1567009010374883ccfc4ee8cff42bf203644309267c84b48ec8a021356fc49540425f3a27a22d4495adc898309311c7138390000000c00028008000180fffffffd6e0001007a3857c180a3f4bceb629fa3afaf66874fadb4d458a51b90785e0ebc0bde34228b0ae94d85ea4d1373ffc264016279b132f132db2b27ae5680d142dfc834d86ff3955ecd2805d7d391fe2370e50647d2f40f5611cf21f76ad174fbd3209cdf357f22687bdfb88c9ddea100000410010084ffd55735ef22346bea9694e34ea0556df6b20a2bc3c8bf2abc8545c708c6ff917cd84aa212d51e085855e7ad42efe0e03f38a38e9854d9c7bbdf47473dabc6c71b2085cfb236e1349dad32cbc60e50d83d54092fa46091ff8bf468b0624ffaf2e2f2e8201eeaab8cc20b74314b45a04121a188006a3a3cd1714e4f077df355a2e3a474c799d4142c9f58c46680b1d82e7f356fe332c3cefe280c71a7a5ddf38181baa674360dca18b9cfc99b9e3aa90e763141d1ca756dcafb10fba1e088cc16b01283fb3a4c5c44dd328908dfad4c1b0d4f05406a819af7ea71293cd8b7fe4347b3d3c12d39184ad9413dae2aff418879765c8cb9626c8390a81af7762eacdee85a0dc91e89c369c8ab54adcf39e952817d8b1521e7d5ebf2ac92eff59f25704121dde7157ba93f7335345a7888ea0926c1c6e3358339641637ead6e55855ebb72d22834c2a23e6c9e5bea1bb575bad411d484cc7974116f72dc973799792f3504474e65eecf8e99c6b6d7a6f67b96dd26093b771d009e4e31a89f0aea051361dc197a58a47eb436dda04299e350c8df6ff129dc2b0bcf6ab46c25fa72791f484aa99684d05ae39b07f7d7aa9a9527cbd517f9501364f8938f013f92d0602f45662bc43e42171b71e0036ef435baba1600bee0c7e447e78b6156c33d8169dc855f857b48bdf1bf4e0c7eb4eaa4332379a093377b6ea247aea7df1ec14b14fee3c4dce02a84adaca914db3f92c98b9b7c836e0f71632fdc22b2dadb626806cdb845ca8b3c47768a72ed274c7c76492bacf0f4ae2bee90ca763e41b3aa24a7df9603890e8da9f55ae60e95886b61bd87854330cda0fea09c416258afe434fdb5b829853376ffb022bac8c111714cf0588a55b6f38af1e17b46fe23375406ff936461d03a58c90d96239cac7cbe08f80906ec14f2ff9640ea623b42242d464fd27ae7ccfc4d4a4e45aa4de11896df700cf498dda3ec8de053a2d182fe0c9a39b346ea6719d80acc21295ad225f3fce472495df62277e21f3e2066e08b3e399fd8e45d4d387e193701dd17a7cede5b1441cfec5dc8a775ade4401516f902c9ec5b3f1417d6a848003de49b3188f26bec0c5207d1f99771614d6db8def9482f8af6aca4b311b447377daf5b4358d64739c7a2b8a9d13355e6f5219580f4d7ec6a8da6ea2d0771cd634e6e9a1924539e3d3f770bcc44a4a4622e6577ae1ceb463fac1d361fc2b64d353d1706ad35a382da15dd80ead741f45e6f5d83e7b06b73a4046aa834285b3585e8beaa33cacfe2b7820f70c003828c6f5ef9924a1ad24367b38bd90449c5a1c4ad88ce156dd9a2f123e45f6c9975b15badc886d528a21ffeb5013bd74382ac0c8a1a69a939f4883116e95025de36e8a90a62c1e9ed1ff900465e52d84ec6e6a6460bd0b97a6e8ef26f38e577295389e891c6394d9231576a5c8c7982d299026948ec37ecb18397e1b830470d77ea1d30a3ccf5dac459629b21727ddc104bbe8cd33d6117c33ef2d991076b857b060c2ec2df062e80ea3023bf273833e29f350534f1a04a6ba90b0fe42e3a119866240511e63da8ea7f788d210453ebe6d942511b3330a730d666e1ac2f7b359135e61967eff1e21f9daa50825ba81c271eb87ec14c84c06436b49f40f56f466016fc000c16f05dddef67c24d85888f4dbd87e7455d9f1ab57c9fcafcf6bca6b548664e161fd16e09a2d768b95d6982e38935e4167689985665a268891ac83f6245642753784d910d40e41b9578c99a7e97348ecca71f4ea7e607f207226355d7e517d108815df4d6c0be517d4705e1c47391df82efa741e461b1546ee56a1d6f5079561c1a7f35e94bbd5b38a29750e582b64e6a0e9f1bceb13de4d48f689044025aecbd3a1dec460ccedbcdfe449403943d0e0bda76c4fcdbfe81e3ab74f0db684d19554a08994d3595564ef84610c9e07661f9ad27b6ab565b74ef38e64d83683a8fbec41239ff60616d9e40d29ce9e86d53b8b3334ab866c771f33af5795f7d05bd9056cd89a8509132462b2276c82d8a4a7e963024a17c2ca7395951dd23f21fa64cbd0babf5fbbc3bd823168f6cf28d93652ccd07019c7ced363a4840c4d7d795419a6e4a03ca09a6d3215ef09aa7db4cd5fdac1850fff8762b1648cd1d0b0693785ee12a20eb5dcb7de036bd1b79b9b559d696bbde89c1e235ccb39f5775df4f9809c4cff3f46076559accbda01b6d037085c3b93a618cd44498c86597ce2bb0a12be87c2bc7c174333757b7672aa8a0e89de3885ad4ff3e14a3757df78d7cded44518090644465b1e5d2e5789edd186058d26ba2ce5174d868605ce0ae7212a2eef87fc100de18cf75d04f68931e50dbd1fdbd568f23a026509d65da2e6172022bed1b434f88a86a92b6ee81884823aaf30913922b3507560804cbaecec329c20ac4f1aa41a094dab9d4548a676433ae97d644c826ced685b5358b7b5430be583570eeca4bbecff48de566f5f8d46a8e1c66ac270b8695a9c4267bf0786a7d763d64b8a07c8b2460ba3a5968a94e24be1076996a6b0b64ac23a86ec0581b7cfd52b44a05ea5e27b4faf5f97288d69e5b621a22b35966ce9812dda3f030432b07bce16d0fa2e8d124d0e23370cdc4ce857b07a906233b9c8a6a68d2f9c7f0bb1223692ca4909366c851a9539e1996d0fce7b86fc7ab7a8a540887a8da80343fda084c31005da405ff02de6eb40b1258b28be0b46bd5df2c60c5ffd48f8e41ea247dafc21e227cdf7f0b99dd9f1dff4130aa983de90337a7e321e2c4a5055add784a7d9ee6ec8099f7da691169b535e3c495862ea710f9ee87681dac8a0d105f1fefbb763ace3da8bb93de032902296b4a8c6a1c7437c3de02a4e57a5ec653ae6ffbf40131311faaf75beb93fec81c1167da40afcf6246ffb9f5d70c988aa4b2f08fcb36f9252ec8e6de8b9e3de83151cfca232563ccb9318a587e0146ef022ab80146ba5f53f4d301ad01e64d6de5108ae27d677c0f294a83885db4032036fc53748eaab8bb00f37b8dd5398a946345587c8f271540afb7c3938a9ecbfb0d8f509934b8af0eb2e0e401d461a990506b473743dfd8182be94e8b8937ea96c71c6b7112a370e7ed225fd64176473a18507303b534706d165d2ab663785676ebec85812b28a22d68e98cb5075a62821dba354bb61f6d3860590257364abfdcc7d7d2bc14482f8628c86458b7863fa85eec311dad11055e6e63f858f9b9328a752c9738a7ad6bfddf2d70b8936603a6eafea2790f872c673975b2fc279962c1f1df1c2ccceaf16ff720b98d496274fdbd534ac7d3935dc8fbb47e1b6907f36da78a873fb8ed71219cadbf70bf74fa1b5a91461fad6ec6e5e89d982829f15fb7eb5c4eef9b1de408338a05bde1c55d5145f50dca0ef815c31fac1623fc9691a61161980dc69412736863b1b88dfc27a19a68f26abbe71215dc4bf2c1a4c492edbc582829a45381c0ea4fb931bff904af654d98721a19c7ac83778cc7a93a3d37f52b74dd305ac503d4deaed30a0191ec46e8d43ef1f3d31cb7bcf1145ee1db96c1f7c3827cb77d123d5f5ce0c5eb56d1347962b2717f1d0eb2898e632c471481938369e1e0cb34813dee6f923698d631cca5d72f7591b0a3a4c34f527d386b5d8362482018f673ad0130501c0e914f97a4b674a35b73fbea5e7f88d639d370845ddd43053d0e619a70b6485d1f93091dd9f116f15c2d2434ff9e52a4ea1d3a4ecac98d3b20df9fe690e0f983bb27ba7cc953378e9e6b802a08ed7fdcc97a4f02043684d801081e448c058ba2c2397f"], 0x5a1c}}, 0x0) 3m32.026099415s ago: executing program 0 (id=1696): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x10000, &(0x7f0000000040)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$cgroup2(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0xa00001, &(0x7f0000000300)={[], [{@smackfsdef={'smackfsdef', 0x3d, '@\xe8%*@\xfb\x8a-'}}]}) 3m31.832320828s ago: executing program 0 (id=1698): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) 3m31.477473667s ago: executing program 0 (id=1703): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x2) pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x2) 3m31.277794744s ago: executing program 33 (id=1703): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x2) pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x2) 2m48.624290056s ago: executing program 3 (id=2301): syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x44, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8}, {}, {}, {0xa888, 0x88be, 0x8000000, {{}, 0x1, {0x7}}}}}}}}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="28400103000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m46.78875789s ago: executing program 3 (id=2328): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r0, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 2m46.530063705s ago: executing program 3 (id=2335): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000580)={0x4, 0x8000}, 0x4) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3f}, 0x80, &(0x7f0000000040)=[{&(0x7f00000006c0)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4deb8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc0260ee65302fba79b6ede33d5653fc260616254bfd2094fcd732947077c67052b95dc84c79a46940cb8e29750471fde0e2190613b3537", 0x83}, {&(0x7f0000001340)="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", 0xec4}, {&(0x7f0000000300)="1f7da2f0c99ffb815b58c74d6f7c71bd8ba3b13dcd0b7303551c34c4e8c81b970f5efe39825400e5fdca4dcf71bee004f8076bc034909e4e7783bfe3b2f4b0021bece403dcd4246080aed97e3d62b45358a65243ee54211a374fb0cb80e8fd2711c9129aa71845005f136cc3add133d8e2232a7347864fc1afdf984833d0736e64d6833bd6006df2a7ea93e740c7cb88fbac42fd6d1a063f534535dfb275adb500f3bbb16e5ccca5fceaaa2c06cc903082e743", 0xb3}], 0x3}, 0x9cdc2384016b48f8) 2m46.263213265s ago: executing program 3 (id=2339): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x0) 2m46.121526201s ago: executing program 3 (id=2341): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2m45.841350837s ago: executing program 3 (id=2346): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000206010200000000000000000100000005fa0300000000000900020073797a"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007003219002bfd000000000000000000af1e4ccfb7b3cad800000800", [0x0, 0x2000000000001]}}) 2m45.482061134s ago: executing program 34 (id=2346): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000206010200000000000000000100000005fa0300000000000900020073797a"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007003219002bfd000000000000000000af1e4ccfb7b3cad800000800", [0x0, 0x2000000000001]}}) 1m34.109898292s ago: executing program 1 (id=3316): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200e92, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 1m33.919790014s ago: executing program 1 (id=3319): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x1, 0x32, 0x0, @multicast1, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb50347e93f4d381a753120000000000000000000000000000000000000000000900", "01acae826cea1443000000000000000000065b2c1e00", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) 1m33.850038682s ago: executing program 1 (id=3320): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@local, 0x4, 0x0, 0x2, 0x1, 0x0, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x20) 1m33.728481992s ago: executing program 1 (id=3323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x9, 0x0) 1m33.488040077s ago: executing program 1 (id=3325): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket(0x10, 0x3, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) 1m33.285616351s ago: executing program 1 (id=3329): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000011c0)) 1m31.561293401s ago: executing program 7 (id=3348): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [@hopopts={0x5e}]}}}}}}}, 0x0) 1m31.558902687s ago: executing program 7 (id=3349): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1m31.50030249s ago: executing program 7 (id=3350): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000280)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000240)={0x0, r2}) 1m31.39646103s ago: executing program 7 (id=3351): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, r1, 0x0, 0xc19) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x0) 1m31.201606019s ago: executing program 7 (id=3352): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r2, r3, 0x8, 0x0, 0x4, 0x8, {0x6, 0x0, 0xe, 0x30b4, 0x8000, 0x2025, 0xfffe, 0x3, 0x3e40, 0x7, 0x0, 0x9, 0x2, 0xfffffffc, "12d56163d7287bd287881d942450c7153a3243937ca9a58f1c702a4ccc476b15"}}) 1m31.180106149s ago: executing program 7 (id=3353): syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m18.185042564s ago: executing program 35 (id=3329): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000011c0)) 1m15.960478257s ago: executing program 36 (id=3353): syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m4.29747238s ago: executing program 6 (id=3661): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 53.690614444s ago: executing program 6 (id=3661): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 35.581488303s ago: executing program 6 (id=3661): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 24.329237022s ago: executing program 6 (id=3661): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 13.54171295s ago: executing program 6 (id=3661): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 5.300965606s ago: executing program 2 (id=4264): unshare(0x60400) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) recvmmsg(r0, &(0x7f0000007900), 0x40000000000003d, 0x0, 0x0) 5.057480758s ago: executing program 2 (id=4266): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0xd0}}, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000006b02"]) 4.874130811s ago: executing program 2 (id=4268): socket$tipc(0x1e, 0x2, 0x0) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 3.011026459s ago: executing program 8 (id=4281): syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) r0 = syz_io_uring_setup(0x110, &(0x7f0000002600)={0x0, 0x4b87, 0x10, 0x1}, &(0x7f0000000140)=0x0, &(0x7f00000025c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) 2.790417605s ago: executing program 8 (id=4283): r0 = io_uring_setup(0x2e34, &(0x7f0000000100)={0x0, 0x0, 0x1000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) close_range(r0, 0xffffffffffffffff, 0x0) 2.418370013s ago: executing program 8 (id=4287): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0xfffffffd, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x10, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80006}}}, 0x108) 2.181554543s ago: executing program 5 (id=4289): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000001980)=@assoc_value={r2, 0x8}, 0x8) 2.18073307s ago: executing program 8 (id=4290): r0 = socket$inet6(0xa, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 2.002950307s ago: executing program 9 (id=4291): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r0, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000380)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 1.903986086s ago: executing program 5 (id=4292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.888667853s ago: executing program 9 (id=4293): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xc0, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, @local, @multicast1, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x5, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "7f36c525"}]}]}}, "0006"}}}}}, 0x0) 1.784952145s ago: executing program 8 (id=4294): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001480)=""/4082, 0xff2}], 0x1) read(r0, &(0x7f0000000140)=""/215, 0xd7) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x5, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x2, 0x5, 0x0, 0x0, 0xff, 'syz0\x00', 0x0}) 1.784860397s ago: executing program 6 (id=3661): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 1.723978689s ago: executing program 5 (id=4295): r0 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 639.30853ms ago: executing program 9 (id=4296): r0 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 638.96914ms ago: executing program 8 (id=4297): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x26e1, 0x0) close(r0) socket$key(0xf, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 638.82234ms ago: executing program 2 (id=4298): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 636.604646ms ago: executing program 5 (id=4299): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000100)={0x1, 0x0, 0x2, 0x800000000}) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x100000000000}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) close(r1) 521.233096ms ago: executing program 9 (id=4300): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2e80, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r1, 0x0, r0, 0x0, 0x4, 0x0) 484.144533ms ago: executing program 5 (id=4301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x2c}}, 0x20004804) 455.557117ms ago: executing program 2 (id=4302): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 375.126685ms ago: executing program 9 (id=4303): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000d00)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001dc0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) 186.279008ms ago: executing program 2 (id=4304): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0xa0000680, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) 77.628855ms ago: executing program 9 (id=4305): r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {r1, r2+60000000}}, 0x0) 0s ago: executing program 5 (id=4306): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4048080) kernel console output (not intermixed with test programs): 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 306.099621][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 306.145774][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 306.172604][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.196263][ T24] hub 7-1:0.0: activate --> -90 [ 306.216866][ T5927] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 306.228174][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.272405][ T5927] usb 2-1: Product: syz [ 306.284101][ T5927] usb 2-1: Manufacturer: syz [ 306.288785][ T5927] usb 2-1: SerialNumber: syz [ 306.315605][ T5927] usb 2-1: config 0 descriptor?? [ 306.323483][T12683] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 306.335367][ T5927] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 306.406085][ T5881] usb 7-1: USB disconnect, device number 13 [ 306.412428][ T24] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 306.531467][ T978] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 306.683607][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.697228][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.707157][ T978] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 306.716489][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.728074][ T978] usb 3-1: config 0 descriptor?? [ 307.166621][ T5927] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 307.188800][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.196090][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.203187][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.210091][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.216995][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.223918][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.230823][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.237726][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.244637][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.251516][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.258380][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.265278][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.272165][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.279046][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.285957][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.292883][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.300080][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.306959][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.313930][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.320812][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.321753][ T5863] kernel write not supported for file /923/coredump_filter (pid: 5863 comm: kworker/0:3) [ 307.327775][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.344487][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.351407][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.358303][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.365203][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.372088][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.372983][ T5873] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 307.378966][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.395720][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.402805][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.409841][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.416759][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.423643][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.430532][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.437441][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.444345][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.451256][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.458175][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.465065][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.471940][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.478813][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.485704][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.492697][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.499595][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.506860][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.514058][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.521001][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.528026][ C1] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 307.534733][ C1] gspca_main: Resubmit URB failed with error -19 [ 307.541139][ T5927] usb 2-1: USB disconnect, device number 21 [ 307.569141][ T5873] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 307.591905][ T978] hid-led 0003:27B8:01ED.0019: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 307.608771][ T5873] usb 7-1: config 0 has no interface number 0 [ 307.616365][ T5873] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.645073][ T978] hid-led 0003:27B8:01ED.0019: ThingM blink(1) initialized [ 307.652956][ T5873] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.670603][ T5873] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 307.685665][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.697458][ T5873] usb 7-1: config 0 descriptor?? [ 307.807911][ T5927] usb 3-1: USB disconnect, device number 23 [ 308.131810][ T5873] prodikeys 0003:041E:2801.001A: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.6-1/input1 [ 308.149346][ T5873] hid_prodikeys: hid-prodikeys: failed to find output report [ 308.149346][ T5873] [ 308.391272][ T5927] usb 7-1: USB disconnect, device number 14 [ 308.997522][T12768] netlink: 'syz.6.3002': attribute type 3 has an invalid length. [ 309.041181][T12768] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3002'. [ 309.050324][T12768] netlink: 'syz.6.3002': attribute type 3 has an invalid length. [ 309.147975][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 309.236043][T12772] netlink: 'syz.1.3004': attribute type 34 has an invalid length. [ 309.316426][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 309.358114][ T24] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 309.371244][ T24] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 309.390670][ T24] usb 3-1: Product: syz [ 309.400421][ T24] usb 3-1: Manufacturer: syz [ 309.407438][ T24] usb 3-1: SerialNumber: syz [ 309.462419][ T24] usb 3-1: config 0 descriptor?? [ 309.487685][ T24] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 309.545753][ T5881] kernel write not supported for file /1445/projid_map (pid: 5881 comm: kworker/1:4) [ 309.685860][ T24] usb 3-1: USB disconnect, device number 24 [ 310.167190][T12811] netlink: 'syz.5.3021': attribute type 8 has an invalid length. [ 310.188104][T12811] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.207641][T12811] bridge0: entered allmulticast mode [ 310.559837][ T30] audit: type=1326 audit(1748909634.935:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12786 comm="syz.7.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26af8e969 code=0x7fc00000 [ 310.610738][ T30] audit: type=1326 audit(1748909634.935:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12786 comm="syz.7.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff26af8e969 code=0x7fc00000 [ 310.643684][ T30] audit: type=1326 audit(1748909634.935:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12786 comm="syz.7.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26af8e969 code=0x7fc00000 [ 310.680103][ T30] audit: type=1326 audit(1748909634.945:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12786 comm="syz.7.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26af8e969 code=0x7fc00000 [ 310.712915][ T30] audit: type=1326 audit(1748909634.945:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12786 comm="syz.7.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26af8e969 code=0x7fc00000 [ 310.736965][ T30] audit: type=1326 audit(1748909634.945:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12786 comm="syz.7.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26af8e969 code=0x7fc00000 [ 310.796907][ T30] audit: type=1326 audit(1748909634.945:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12786 comm="syz.7.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26af8e969 code=0x7fc00000 [ 310.847009][ T30] audit: type=1326 audit(1748909634.945:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12786 comm="syz.7.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26af8e969 code=0x7fc00000 [ 310.898020][ T30] audit: type=1326 audit(1748909634.945:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12786 comm="syz.7.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26af8e969 code=0x7fc00000 [ 310.949694][ T30] audit: type=1326 audit(1748909634.945:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12786 comm="syz.7.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26af8e969 code=0x7fc00000 [ 311.661381][ T5873] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 311.825124][ T5873] usb 7-1: Using ep0 maxpacket: 32 [ 311.833205][ T5873] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 311.845616][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.866108][ T5873] usb 7-1: config 0 descriptor?? [ 312.096741][ T5873] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 312.153283][ T5873] usb 7-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 312.175873][ T5873] usb 7-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 312.179915][T12888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 313.073822][T12926] pimreg: entered allmulticast mode [ 313.089117][T12926] pimreg: left allmulticast mode [ 314.307429][T12960] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3088'. [ 314.481224][ T5881] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 314.635112][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 314.651323][ T5881] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 314.660429][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.675321][ T5881] usb 3-1: config 0 descriptor?? [ 314.681059][T12957] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 314.911368][ T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 315.081290][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 315.092162][ T24] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 315.105313][ T24] usb 6-1: config 0 has no interface number 0 [ 315.117928][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 315.128077][ T5881] elan 0003:04F3:0755.001B: unknown main item tag 0x0 [ 315.139986][ T5881] elan 0003:04F3:0755.001B: unknown main item tag 0x0 [ 315.147694][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.156140][ T5881] elan 0003:04F3:0755.001B: unknown main item tag 0x0 [ 315.163333][ T24] usb 6-1: Product: syz [ 315.167545][ T24] usb 6-1: Manufacturer: syz [ 315.172280][ T5881] elan 0003:04F3:0755.001B: unknown main item tag 0x0 [ 315.179176][ T24] usb 6-1: SerialNumber: syz [ 315.184658][ T5881] elan 0003:04F3:0755.001B: unknown main item tag 0x0 [ 315.194719][ T24] usb 6-1: config 0 descriptor?? [ 315.206536][ T24] smsc95xx v2.0.0 [ 315.213846][ T5881] elan 0003:04F3:0755.001B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 315.337523][ T5881] usb 3-1: USB disconnect, device number 25 [ 316.179464][T13016] input: syz0 as /devices/virtual/input/input31 [ 316.240582][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 316.262247][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 316.282069][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 316.304585][ T24] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 316.323959][ T24] usb 6-1: USB disconnect, device number 17 [ 316.340410][T13020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.830277][T13029] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3120'. [ 316.840115][T13029] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3120'. [ 316.997094][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 316.997115][ T30] audit: type=1326 audit(1748909641.385:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13032 comm="syz.6.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b5f2ab39 code=0x7ffc0000 [ 317.050376][T13035] can0: slcan on ttyS3. [ 317.080695][ T30] audit: type=1326 audit(1748909641.395:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13032 comm="syz.6.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b5f2ab39 code=0x7ffc0000 [ 317.151526][ T30] audit: type=1326 audit(1748909641.395:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13032 comm="syz.6.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b5f2ab39 code=0x7ffc0000 [ 317.174127][T13035] can0 (unregistered): slcan off ttyS3. [ 317.259178][ T30] audit: type=1326 audit(1748909641.395:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13032 comm="syz.6.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b5f2ab39 code=0x7ffc0000 [ 317.316932][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.323571][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.341175][ T30] audit: type=1326 audit(1748909641.395:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13032 comm="syz.6.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b5f2ab39 code=0x7ffc0000 [ 317.408874][ T30] audit: type=1326 audit(1748909641.395:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13032 comm="syz.6.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b5f2ab39 code=0x7ffc0000 [ 317.491166][ T30] audit: type=1326 audit(1748909641.395:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13032 comm="syz.6.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b5f2ab39 code=0x7ffc0000 [ 317.548109][T13042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.606782][ T30] audit: type=1326 audit(1748909641.395:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13032 comm="syz.6.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b5f2ab39 code=0x7ffc0000 [ 317.689491][ T30] audit: type=1326 audit(1748909641.395:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13032 comm="syz.6.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b5f2ab39 code=0x7ffc0000 [ 317.760733][ T30] audit: type=1326 audit(1748909641.395:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13032 comm="syz.6.3122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65b5f2ab39 code=0x7ffc0000 [ 317.791214][ T5932] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 317.971181][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 317.984194][ T5932] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 317.992883][ T5932] usb 3-1: config 179 has no interface number 0 [ 317.999216][ T5932] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 318.014418][ T5932] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 318.027084][ T5932] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 318.039303][ T5932] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 318.067458][ T5932] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 318.081276][ T5932] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 318.109423][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.137267][T13045] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 318.383053][T13045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.399529][T13045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.448392][T13068] pim6reg1: entered promiscuous mode [ 318.459085][T13068] pim6reg1: entered allmulticast mode [ 318.616495][ T5927] usb 3-1: USB disconnect, device number 26 [ 318.616512][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 318.631250][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 319.501177][ T5882] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 319.653538][ T5882] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.671367][ T5882] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 319.703252][ T5882] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 319.712563][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.720600][ T5882] usb 2-1: Product: syz [ 319.741218][ T5882] usb 2-1: Manufacturer: syz [ 319.745881][ T5882] usb 2-1: SerialNumber: syz [ 319.981961][ T5882] usb 2-1: 0:2 : does not exist [ 320.020714][ T5882] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 320.080097][ T5882] usb 2-1: USB disconnect, device number 22 [ 320.525057][ T5927] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 320.691386][ T5927] usb 6-1: Using ep0 maxpacket: 16 [ 320.709365][ T5927] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 320.745457][ T5927] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 320.757058][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.774657][ T5927] usb 6-1: config 0 descriptor?? [ 320.788594][ T5927] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input32 [ 321.052608][ T5179] bcm5974 6-1:0.0: could not read from device [ 321.075646][ T5179] bcm5974 6-1:0.0: could not read from device [ 321.085564][ T5927] bcm5974 6-1:0.0: could not read from device [ 321.098080][ T5179] bcm5974 6-1:0.0: could not read from device [ 321.107110][ T5927] input: failed to attach handler mousedev to device input32, error: -5 [ 321.124164][ T5927] usb 6-1: USB disconnect, device number 18 [ 321.130594][ T5179] bcm5974 6-1:0.0: could not read from device [ 322.126485][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3180'. [ 322.137625][T13175] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3180'. [ 323.130690][T13207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3196'. [ 323.751316][ T5882] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 323.804705][T13238] smc: net device bond0 applied user defined pnetid SYZ0 [ 323.922390][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 323.941402][ T5882] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 323.949660][ T5882] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 323.968215][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 323.989859][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 324.011126][ T5882] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.045492][ T5882] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 324.061986][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.416797][ T5882] usb 3-1: GET_CAPABILITIES returned 0 [ 324.433672][ T5882] usbtmc 3-1:16.0: can't read capabilities [ 324.629428][ T5882] usb 3-1: USB disconnect, device number 27 [ 324.970096][T13266] input: syz1 as /devices/virtual/input/input33 [ 325.467948][T13287] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 325.508594][T13287] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 325.814266][T13297] loop7: detected capacity change from 0 to 7 [ 325.830413][T13297] Dev loop7: unable to read RDB block 7 [ 325.840177][T13297] loop7: AHDI p1 p2 [ 325.844945][T13297] loop7: partition table partially beyond EOD, truncated [ 325.860729][T13297] loop7: p1 start 1702000233 is beyond EOD, truncated [ 327.089224][T13343] input: syz1 as /devices/virtual/input/input34 [ 327.112723][T13345] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 327.121635][T13346] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (20) [ 327.320548][T13356] syzkaller1: entered promiscuous mode [ 327.347601][T13356] syzkaller1: entered allmulticast mode [ 327.831596][ T978] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 328.003465][ T978] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 328.012754][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.023562][ T978] usb 3-1: config 0 descriptor?? [ 328.031666][ T978] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 328.051221][ T5927] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 328.201280][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 328.208412][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.222959][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.237595][ T5927] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 328.247004][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.258122][ T5927] usb 2-1: config 0 descriptor?? [ 328.678840][ T5927] ft260 0003:0403:6030.001C: unknown main item tag 0x0 [ 328.751404][ T5892] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 328.843616][ T978] gspca_stv06xx: I2C: Read error writing address: -71 [ 328.854085][ T978] usb 3-1: USB disconnect, device number 28 [ 328.886962][ T5927] ft260 0003:0403:6030.001C: chip code: 0000 0000 [ 328.921572][ T5892] usb 6-1: Using ep0 maxpacket: 32 [ 328.933250][ T5892] usb 6-1: config 0 interface 0 altsetting 74 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.945136][ T5892] usb 6-1: config 0 interface 0 altsetting 74 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.957265][ T5892] usb 6-1: config 0 interface 0 has no altsetting 0 [ 328.965596][ T5892] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 328.978231][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.990946][ T5892] usb 6-1: config 0 descriptor?? [ 329.103755][ T5927] ft260 0003:0403:6030.001C: failed to retrieve system status [ 329.120370][ T5927] ft260 0003:0403:6030.001C: probe with driver ft260 failed with error -71 [ 329.133523][ T5927] usb 2-1: USB disconnect, device number 23 [ 329.175515][T13398] syz_tun: entered allmulticast mode [ 329.185131][T13397] syz_tun: left allmulticast mode [ 329.408214][ T5892] petalynx 0003:18B1:0037.001D: unknown main item tag 0x0 [ 329.428496][ T5892] petalynx 0003:18B1:0037.001D: unknown main item tag 0x0 [ 329.440363][ T5892] petalynx 0003:18B1:0037.001D: item fetching failed at offset 2/3 [ 329.454613][ T5892] petalynx 0003:18B1:0037.001D: parse failed [ 329.460760][ T5892] petalynx 0003:18B1:0037.001D: probe with driver petalynx failed with error -22 [ 329.607922][ T5892] usb 6-1: USB disconnect, device number 19 [ 330.210898][T13417] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 332.405452][T13476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.616577][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 332.616596][ T30] audit: type=1326 audit(1748909657.005:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13485 comm="syz.1.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d558e969 code=0x7ffc0000 [ 332.679728][ T30] audit: type=1326 audit(1748909657.005:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13485 comm="syz.1.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d558e969 code=0x7ffc0000 [ 332.775282][ T30] audit: type=1326 audit(1748909657.005:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13485 comm="syz.1.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fc6d558e969 code=0x7ffc0000 [ 332.844612][ T30] audit: type=1326 audit(1748909657.005:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13485 comm="syz.1.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d558e969 code=0x7ffc0000 [ 332.930730][ T30] audit: type=1326 audit(1748909657.015:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13485 comm="syz.1.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d558e969 code=0x7ffc0000 [ 333.061752][T13495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3327'. [ 333.093579][T13495] IPVS: Error joining to the multicast group [ 333.481237][ T5882] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 333.631610][ T5882] usb 6-1: Using ep0 maxpacket: 16 [ 333.641976][ T5882] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 333.653765][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 333.662111][ T5882] usb 6-1: Product: syz [ 333.666528][ T5882] usb 6-1: Manufacturer: syz [ 333.671292][ T5882] usb 6-1: SerialNumber: syz [ 333.680366][ T5882] usb 6-1: config 0 descriptor?? [ 333.915920][ T978] usb 6-1: USB disconnect, device number 20 [ 334.420316][T13534] syzkaller1: entered promiscuous mode [ 334.428388][T13534] syzkaller1: entered allmulticast mode [ 334.756391][T13543] Bluetooth: hci0: load_link_keys: too big key_count value 65280 [ 335.478478][T13560] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3356'. [ 335.542715][T13562] syzkaller1: entered promiscuous mode [ 335.548331][T13562] syzkaller1: entered allmulticast mode [ 335.591164][ T5881] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 335.747665][ T5881] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.758876][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 335.771668][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 335.781832][ T5881] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 335.800512][ T5881] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 335.810268][ T5881] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 335.818893][ T5881] usb 6-1: Manufacturer: syz [ 335.831603][ T5881] usb 6-1: config 0 descriptor?? [ 336.141318][ T5881] rc_core: IR keymap rc-hauppauge not found [ 336.148325][ T5881] Registered IR keymap rc-empty [ 336.158638][ T5881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 336.185564][ T5881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 336.215513][ T5881] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 336.234288][ T5881] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input35 [ 336.257521][ T5881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 336.284919][ T5881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 336.311379][ T5881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 336.342736][ T5881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 336.361345][ T5881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 336.381442][ T5881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 336.401295][ T5881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 336.421370][ T5881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 336.445152][ T5881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 336.471423][ T5881] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 336.493415][ T5881] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 336.505393][ T5881] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 336.553304][ T5892] usb 6-1: USB disconnect, device number 21 [ 337.318768][ T5829] block nbd6: Receive control failed (result -32) [ 337.326563][T13574] block nbd6: shutting down sockets [ 338.145469][T13624] syzkaller1: entered promiscuous mode [ 338.151100][T13624] syzkaller1: entered allmulticast mode [ 339.728261][T13694] syzkaller1: entered promiscuous mode [ 339.733933][T13694] syzkaller1: entered allmulticast mode [ 340.905368][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3423'. [ 340.923129][T13713] bond_slave_0: entered promiscuous mode [ 340.929670][T13713] bond_slave_1: entered promiscuous mode [ 340.936570][T13713] batadv_slave_0: entered promiscuous mode [ 340.943983][T13713] macvlan2: entered promiscuous mode [ 340.951169][T13713] bond0: entered promiscuous mode [ 340.965187][T13713] bond1: entered promiscuous mode [ 340.982416][T13713] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 341.149683][T13724] netlink: 'syz.2.3428': attribute type 1 has an invalid length. [ 341.158064][T13724] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3428'. [ 341.656515][T13749] netlink: 'syz.5.3439': attribute type 39 has an invalid length. [ 342.105922][ T30] audit: type=1326 audit(1748909666.495:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13762 comm="syz.2.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aa18e969 code=0x7ffc0000 [ 342.148331][ T30] audit: type=1326 audit(1748909666.495:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13762 comm="syz.2.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aa18e969 code=0x7ffc0000 [ 342.169936][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.208031][ T30] audit: type=1326 audit(1748909666.495:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13762 comm="syz.2.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f14aa18e969 code=0x7ffc0000 [ 342.233878][ T30] audit: type=1326 audit(1748909666.495:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13762 comm="syz.2.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aa18e969 code=0x7ffc0000 [ 342.255449][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.281427][ T30] audit: type=1326 audit(1748909666.515:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13762 comm="syz.2.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aa18e969 code=0x7ffc0000 [ 342.303007][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.864973][T13781] vlan2: entered promiscuous mode [ 343.217544][T13798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3461'. [ 343.249300][T13798] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3461'. [ 343.266201][T13798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3461'. [ 344.329024][T13795] syz.5.3460 (13795): drop_caches: 2 [ 344.645494][T13831] siw: device registration error -23 [ 345.161228][ T978] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 345.277223][T13856] netlink: 'syz.6.3486': attribute type 2 has an invalid length. [ 345.321660][ T978] usb 6-1: Using ep0 maxpacket: 32 [ 345.328834][ T978] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 345.341688][ T978] usb 6-1: config 0 has no interface number 0 [ 345.360619][ T978] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 345.379002][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.397738][ T978] usb 6-1: Product: syz [ 345.403789][ T978] usb 6-1: Manufacturer: syz [ 345.408504][ T978] usb 6-1: SerialNumber: syz [ 345.416194][ T978] usb 6-1: config 0 descriptor?? [ 345.429070][ T978] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 345.438709][ T978] usb 6-1: selecting invalid altsetting 1 [ 345.447954][ T978] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 345.479270][ T978] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 345.496710][ T978] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 345.506787][ T978] usb 6-1: media controller created [ 345.545777][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 346.671577][ T978] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 346.686465][ T978] zl10353_read_register: readreg error (reg=127, ret==-110) [ 346.695865][ T978] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 346.773624][ T978] usb 6-1: USB disconnect, device number 22 [ 347.160949][ T30] audit: type=1326 audit(1748909671.545:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13909 comm="syz.6.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b5f8e969 code=0x7ffc0000 [ 347.187452][ T30] audit: type=1326 audit(1748909671.545:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13909 comm="syz.6.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b5f8e969 code=0x7ffc0000 [ 347.215957][ T30] audit: type=1326 audit(1748909671.545:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13909 comm="syz.6.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f65b5f8e969 code=0x7ffc0000 [ 347.239343][ T30] audit: type=1326 audit(1748909671.545:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13909 comm="syz.6.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b5f8e969 code=0x7ffc0000 [ 347.267895][ T30] audit: type=1326 audit(1748909671.545:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13909 comm="syz.6.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b5f8e969 code=0x7ffc0000 [ 347.295907][ T30] audit: type=1326 audit(1748909671.545:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13909 comm="syz.6.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65b5f8e969 code=0x7ffc0000 [ 347.322448][ T30] audit: type=1326 audit(1748909671.545:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13909 comm="syz.6.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b5f8e969 code=0x7ffc0000 [ 347.346348][ T30] audit: type=1326 audit(1748909671.545:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13909 comm="syz.6.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f65b5f8e969 code=0x7ffc0000 [ 347.368289][ T30] audit: type=1326 audit(1748909671.545:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13909 comm="syz.6.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b5f8e969 code=0x7ffc0000 [ 347.391581][ T30] audit: type=1326 audit(1748909671.545:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13909 comm="syz.6.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f65b5f8e969 code=0x7ffc0000 [ 348.479591][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.490247][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.501454][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.519091][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.529050][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 348.808601][T13928] chnl_net:caif_netlink_parms(): no params data found [ 349.092402][T13928] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.099731][T13928] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.107408][T13928] bridge_slave_0: entered allmulticast mode [ 349.115673][T13928] bridge_slave_0: entered promiscuous mode [ 349.126041][T13928] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.133454][T13928] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.140808][T13928] bridge_slave_1: entered allmulticast mode [ 349.149337][T13928] bridge_slave_1: entered promiscuous mode [ 349.246200][T13928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.270166][T13928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.348541][T13928] team0: Port device team_slave_0 added [ 349.366159][T13928] team0: Port device team_slave_1 added [ 349.435813][T13928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.443971][T13928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.469873][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.497614][T13928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.512066][T13928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.519085][T13928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.545189][T13928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.626539][T13928] hsr_slave_0: entered promiscuous mode [ 349.642338][T13928] hsr_slave_1: entered promiscuous mode [ 349.648634][T13928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.663841][T13928] Cannot create hsr debugfs directory [ 349.741225][ T5882] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 349.897618][ T5882] usb 6-1: too many endpoints for config 26 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 349.915103][ T5882] usb 6-1: config 26 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.927923][ T5882] usb 6-1: config 26 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.960390][ T5882] usb 6-1: config 26 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 349.978414][T13928] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 349.980447][ T5882] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 350.001003][ T5882] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 350.010716][ T5882] usb 6-1: Manufacturer: syz [ 350.020616][T13928] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 350.047413][T13928] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 350.059968][T13928] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 350.175786][T13928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.198555][T13928] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.216879][ T7344] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.224125][ T7344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.258816][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.266026][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.332199][ T5881] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 350.455452][ T5882] appleir 0003:05AC:8243.001E: unknown main item tag 0x0 [ 350.492505][ T5882] appleir 0003:05AC:8243.001E: No inputs registered, leaving [ 350.501461][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 350.527115][ T5881] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.548120][ T5882] appleir 0003:05AC:8243.001E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 350.571199][ T5881] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.591701][ T5831] Bluetooth: hci5: command tx timeout [ 350.595691][ T5881] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 350.643271][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.698785][ T5881] usb 3-1: Product: syz [ 350.721129][ T5881] usb 3-1: Manufacturer: syz [ 350.736053][ T5881] usb 3-1: SerialNumber: syz [ 350.926609][T13928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.086416][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 351.097457][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 351.106768][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 351.115412][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 351.124748][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 351.199763][ T5881] usb 3-1: USB disconnect, device number 29 [ 351.600408][T13969] chnl_net:caif_netlink_parms(): no params data found [ 351.929739][T13969] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.942366][T13969] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.949645][T13969] bridge_slave_0: entered allmulticast mode [ 351.958240][T13969] bridge_slave_0: entered promiscuous mode [ 351.973244][T13928] veth0_vlan: entered promiscuous mode [ 351.987599][T13928] veth1_vlan: entered promiscuous mode [ 352.013876][T13969] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.027006][T13969] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.035548][T13969] bridge_slave_1: entered allmulticast mode [ 352.043592][T13969] bridge_slave_1: entered promiscuous mode [ 352.124400][T13969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.138008][T13969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.187281][T13969] team0: Port device team_slave_0 added [ 352.196983][T13969] team0: Port device team_slave_1 added [ 352.238593][T13969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.245882][T13969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.273505][T13969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.298780][T13969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.309499][T13969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.337261][T13969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.358500][T13928] veth0_macvtap: entered promiscuous mode [ 352.416544][T13928] veth1_macvtap: entered promiscuous mode [ 352.437639][T13969] hsr_slave_0: entered promiscuous mode [ 352.445120][T13969] hsr_slave_1: entered promiscuous mode [ 352.452271][T13969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.460300][T13969] Cannot create hsr debugfs directory [ 352.595085][T13928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.624785][T13928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.632597][ T5881] usb 6-1: USB disconnect, device number 23 [ 352.655303][T13928] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.668047][T13928] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.676923][ T5829] Bluetooth: hci5: command tx timeout [ 352.685406][T13928] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.694144][T13928] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.791536][T13969] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 352.815214][T13969] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 352.836908][T13969] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 352.852719][T13969] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 352.879529][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.890148][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.933901][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.941991][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.038362][T13969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.090954][T13969] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.119753][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.127058][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.149040][ T194] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.156289][ T194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.162425][ T5829] Bluetooth: hci6: command tx timeout [ 353.716168][T13969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.284007][T13969] veth0_vlan: entered promiscuous mode [ 354.313185][T13969] veth1_vlan: entered promiscuous mode [ 354.420055][T13969] veth0_macvtap: entered promiscuous mode [ 354.444574][T13969] veth1_macvtap: entered promiscuous mode [ 354.495115][T13969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.543727][T13969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.564552][T13969] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.575960][T13969] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.590014][T13969] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.610471][T13969] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.722807][ T7347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.733740][ T7347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.751691][ T5829] Bluetooth: hci5: command tx timeout [ 354.793683][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.801931][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.239945][ T5829] Bluetooth: hci6: command tx timeout [ 356.095989][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 356.194853][T14079] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 356.282795][ T24] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 356.308841][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.332136][ T24] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 356.363297][T14085] netlink: 'syz.6.3568': attribute type 1 has an invalid length. [ 356.371173][ T24] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 356.379193][ T24] usb 9-1: Manufacturer: syz [ 356.387063][T14085] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3568'. [ 356.412029][ T24] usb 9-1: config 0 descriptor?? [ 356.629192][ T24] rc_core: IR keymap rc-hauppauge not found [ 356.650891][ T24] Registered IR keymap rc-empty [ 356.665050][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 356.693415][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input36 [ 356.764981][ C1] igorplugusb 9-1:0.0: Error: urb status = -32 [ 356.833426][ T5829] Bluetooth: hci5: command tx timeout [ 356.839941][ T5889] usb 9-1: USB disconnect, device number 2 [ 357.311665][ T5831] Bluetooth: hci6: command tx timeout [ 357.553788][T14130] syzkaller1: entered promiscuous mode [ 357.559328][T14130] syzkaller1: entered allmulticast mode [ 357.607109][T14137] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 357.619232][T14136] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3592'. [ 357.673857][T14136] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3592'. [ 358.041593][ T5863] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 358.089157][T14160] vivid-002: disconnect [ 358.101882][T14159] vivid-002: reconnect [ 358.223477][T14166] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 358.224741][ T5863] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.261737][ T5863] usb 6-1: config 0 interface 0 has no altsetting 0 [ 358.280821][ T5863] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 358.299489][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.320147][ T5863] usb 6-1: Product: syz [ 358.338639][ T5863] usb 6-1: Manufacturer: syz [ 358.347757][ T5863] usb 6-1: SerialNumber: syz [ 358.374542][ T5863] usb 6-1: config 0 descriptor?? [ 358.389578][ T5863] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 358.416887][ T5863] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 358.420482][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3608'. [ 358.434124][ T5863] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 358.467912][ T5863] usb 6-1: media controller created [ 358.545712][ T5863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 358.648753][ T5863] DVB: Unable to find symbol tda10046_attach() [ 358.660189][ T5863] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 358.679725][ T5863] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 358.953690][T14187] tc_dump_action: action bad kind [ 358.991347][ T5829] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 359.299817][ T5863] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 359.322730][ T5863] usb 6-1: USB disconnect, device number 24 [ 359.391832][ T5831] Bluetooth: hci6: command tx timeout [ 360.782402][T14255] input: syz1 as /devices/virtual/input/input37 [ 360.921385][T14261] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 360.951337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 361.305733][T14274] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3649'. [ 361.665413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 361.674231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 361.812571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 361.844169][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 361.844189][ T30] audit: type=1326 audit(1748909686.225:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14286 comm="syz.2.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f14aa12ab39 code=0x7ffc0000 [ 361.903609][ T30] audit: type=1326 audit(1748909686.225:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14286 comm="syz.2.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aa18e969 code=0x7ffc0000 [ 361.926074][T14289] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3659'. [ 361.969363][ T30] audit: type=1326 audit(1748909686.225:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14286 comm="syz.2.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f14aa12ab39 code=0x7ffc0000 [ 362.028639][ T30] audit: type=1326 audit(1748909686.225:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14286 comm="syz.2.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aa18e969 code=0x7ffc0000 [ 362.117070][ T7344] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.121237][ T30] audit: type=1326 audit(1748909686.225:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14286 comm="syz.2.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aa18e969 code=0x7ffc0000 [ 362.244662][ T30] audit: type=1326 audit(1748909686.225:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14286 comm="syz.2.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f14aa12ab39 code=0x7ffc0000 [ 362.341176][ T30] audit: type=1326 audit(1748909686.225:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14286 comm="syz.2.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f14aa12ab39 code=0x7ffc0000 [ 362.445063][ T7344] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.464979][ T30] audit: type=1326 audit(1748909686.225:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14286 comm="syz.2.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aa18e969 code=0x7ffc0000 [ 362.536067][ T30] audit: type=1326 audit(1748909686.225:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14286 comm="syz.2.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aa18e969 code=0x7ffc0000 [ 362.626448][ T30] audit: type=1326 audit(1748909686.265:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14286 comm="syz.2.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14aa18e969 code=0x7ffc0000 [ 362.799636][ T7344] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.827855][T14298] batadv_slave_1: entered promiscuous mode [ 362.848102][T14296] batadv_slave_1: left promiscuous mode [ 363.006323][ T7344] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.370140][T14317] can0: slcan on ttyS3. [ 363.375411][ T7344] vlan2: left allmulticast mode [ 363.380369][ T7344] dummy0: left allmulticast mode [ 363.421267][ T7344] vlan2: left promiscuous mode [ 363.446447][ T7344] dummy0: left promiscuous mode [ 363.463913][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.463948][ T7344] bridge0: port 3(vlan2) entered disabled state [ 363.486026][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.495013][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.505196][ T7344] bridge_slave_1: left allmulticast mode [ 363.511229][ T7344] bridge_slave_1: left promiscuous mode [ 363.518218][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.525741][ T7344] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.534250][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.583420][ T7344] bridge_slave_0: left allmulticast mode [ 363.598719][T14326] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3674'. [ 363.602765][ T7344] bridge_slave_0: left promiscuous mode [ 363.631468][ T7344] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.562071][ T7344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.586047][ T7344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.596336][ T7344] bond0 (unregistering): Released all slaves [ 364.646382][T14343] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 364.708345][T14317] can0 (unregistered): slcan off ttyS3. [ 365.287996][ T7344] hsr_slave_0: left promiscuous mode [ 365.309383][ T7344] hsr_slave_1: left promiscuous mode [ 365.330385][ T7344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.341967][ T5927] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 365.349597][ T7344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.374112][ T7344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.390939][ T7344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.418545][T14360] overlayfs: failed to clone upperpath [ 365.446326][ T7344] veth1_macvtap: left promiscuous mode [ 365.464026][ T7344] veth0_macvtap: left promiscuous mode [ 365.470067][ T7344] veth1_vlan: left promiscuous mode [ 365.475940][ T7344] veth0_vlan: left promiscuous mode [ 365.511552][ T5927] usb 10-1: Using ep0 maxpacket: 16 [ 365.527381][ T5927] usb 10-1: config index 0 descriptor too short (expected 16456, got 72) [ 365.547706][ T5927] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 365.570108][ T5927] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 365.583805][ T5927] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 365.609505][ T5927] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 365.620413][ T5927] usb 10-1: config 0 has no interface number 0 [ 365.633702][ T5927] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 365.645059][ T5831] Bluetooth: hci0: command tx timeout [ 365.656547][ T5927] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 365.668527][ T5927] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 365.684886][ T5927] usb 10-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 365.751414][ T5927] usb 10-1: config 0 interface 125 has no altsetting 0 [ 365.758337][ T5927] usb 10-1: config 0 interface 125 has no altsetting 2 [ 365.789445][ T5927] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 365.804509][ T5927] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.821319][ T5927] usb 10-1: Product: syz [ 365.825742][ T5927] usb 10-1: Manufacturer: syz [ 365.830452][ T5927] usb 10-1: SerialNumber: syz [ 365.852724][ T5927] usb 10-1: config 0 descriptor?? [ 365.927518][ T5927] usb 10-1: selecting invalid altsetting 2 [ 366.358368][ T7344] team0 (unregistering): Port device team_slave_1 removed [ 366.433766][ T7344] team0 (unregistering): Port device team_slave_0 removed [ 366.946545][ T5927] usb 10-1: USB disconnect, device number 2 [ 367.077838][T14321] chnl_net:caif_netlink_parms(): no params data found [ 367.337136][T14321] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.344636][T14321] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.352199][T14321] bridge_slave_0: entered allmulticast mode [ 367.360214][T14321] bridge_slave_0: entered promiscuous mode [ 367.371120][T14321] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.378406][T14321] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.385938][T14321] bridge_slave_1: entered allmulticast mode [ 367.408184][T14321] bridge_slave_1: entered promiscuous mode [ 367.541915][T14321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.569840][ T7344] IPVS: stop unused estimator thread 0... [ 367.575230][T14321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.723328][ T5831] Bluetooth: hci0: command tx timeout [ 367.729665][T14321] team0: Port device team_slave_0 added [ 367.759281][T14321] team0: Port device team_slave_1 added [ 367.806727][T14398] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3704'. [ 367.906457][T14321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.931158][T14321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.006565][T14321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.029674][T14321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.048028][T14321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.075864][T14321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.282244][T14321] hsr_slave_0: entered promiscuous mode [ 368.302967][T14321] hsr_slave_1: entered promiscuous mode [ 369.387024][T14321] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 369.405425][T14321] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 369.426295][T14321] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 369.450454][T14321] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 369.613954][T14321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.655028][T14321] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.678305][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.685608][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.734959][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.742207][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.791994][ T5831] Bluetooth: hci0: command tx timeout [ 369.987045][T14464] 9pnet_fd: Insufficient options for proto=fd [ 370.247050][T14321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.567303][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 370.567322][ T30] audit: type=1326 audit(1748909694.955:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14477 comm="syz.9.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cea38e969 code=0x7fc00000 [ 370.804725][T14321] veth0_vlan: entered promiscuous mode [ 370.820579][T14321] veth1_vlan: entered promiscuous mode [ 370.872786][T14321] veth0_macvtap: entered promiscuous mode [ 370.885335][T14321] veth1_macvtap: entered promiscuous mode [ 370.912292][T14321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.933455][T14321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.952204][T14321] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.961777][T14321] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.970680][T14321] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.980151][T14321] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.149017][ T7347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.170863][ T7347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.244300][ T30] audit: type=1326 audit(1748909695.625:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14477 comm="syz.9.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0cea38e969 code=0x7fc00000 [ 371.251351][ T7347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.320140][ T7347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.783590][ T7344] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.128823][ T30] audit: type=1326 audit(1748909697.515:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14531 comm="syz.8.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca0d8e969 code=0x7ffc0000 [ 373.166983][T14530] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 373.171389][ T5863] IPVS: starting estimator thread 0... [ 373.233431][ T30] audit: type=1326 audit(1748909697.545:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14531 comm="syz.8.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca0d8e969 code=0x7ffc0000 [ 373.281268][T14534] IPVS: using max 28 ests per chain, 67200 per kthread [ 373.313463][ T30] audit: type=1326 audit(1748909697.545:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14531 comm="syz.8.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3ca0d8e969 code=0x7ffc0000 [ 373.383509][ T30] audit: type=1326 audit(1748909697.545:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14531 comm="syz.8.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca0d8e969 code=0x7ffc0000 [ 373.437170][T14538] tipc: Started in network mode [ 373.442228][T14538] tipc: Node identity ff55, cluster identity 4711 [ 373.452916][ T30] audit: type=1326 audit(1748909697.545:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14531 comm="syz.8.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca0d8e969 code=0x7ffc0000 [ 373.487828][T14538] tipc: Enabling of bearer rejected, failed to enable media [ 373.499210][ T30] audit: type=1326 audit(1748909697.565:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14531 comm="syz.8.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f3ca0d8e969 code=0x7ffc0000 [ 373.593584][ T30] audit: type=1326 audit(1748909697.565:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14531 comm="syz.8.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca0d8e969 code=0x7ffc0000 [ 373.637809][ T5873] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 373.675378][ T30] audit: type=1326 audit(1748909697.565:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14531 comm="syz.8.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ca0d8e969 code=0x7ffc0000 [ 373.703132][ T5873] dvb_usb_az6027 7-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 373.719402][T14544] GUP no longer grows the stack in syz.9.3762 (14544): 200000004000-200000008000 (200000002000) [ 373.756399][T14544] CPU: 1 UID: 0 PID: 14544 Comm: syz.9.3762 Not tainted 6.15.0-syzkaller-11061-g7f9039c524a3 #0 PREEMPT(full) [ 373.756434][T14544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 373.756453][T14544] Call Trace: [ 373.756466][T14544] [ 373.756476][T14544] dump_stack_lvl+0x189/0x250 [ 373.756519][T14544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.756551][T14544] ? __pfx__printk+0x10/0x10 [ 373.756569][T14544] ? find_vma+0xe7/0x160 [ 373.756611][T14544] __get_user_pages+0x2a60/0x30b0 [ 373.756674][T14544] ? __pfx___get_user_pages+0x10/0x10 [ 373.756709][T14544] get_user_pages_remote+0x2f9/0xaa0 [ 373.756733][T14544] ? __pfx_mtree_load+0x10/0x10 [ 373.756771][T14544] ? __pfx_get_user_pages_remote+0x10/0x10 [ 373.756807][T14544] __access_remote_vm+0x215/0x5f0 [ 373.756856][T14544] ? __pfx___access_remote_vm+0x10/0x10 [ 373.756886][T14544] ? alloc_pages_noprof+0xbe/0x190 [ 373.756919][T14544] proc_pid_cmdline_read+0x440/0x840 [ 373.756948][T14544] ? __asan_memset+0x22/0x50 [ 373.756977][T14544] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 373.757010][T14544] ? rw_verify_area+0x258/0x650 [ 373.757039][T14544] vfs_readv+0x5aa/0x850 [ 373.757070][T14544] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 373.757102][T14544] ? __pfx_vfs_readv+0x10/0x10 [ 373.757155][T14544] ? __fget_files+0x2a/0x420 [ 373.757190][T14544] ? __fget_files+0x3a0/0x420 [ 373.757217][T14544] ? __fget_files+0x2a/0x420 [ 373.757256][T14544] __x64_sys_preadv+0x197/0x2a0 [ 373.757287][T14544] ? __pfx___x64_sys_preadv+0x10/0x10 [ 373.757312][T14544] ? rcu_is_watching+0x15/0xb0 [ 373.757353][T14544] ? do_syscall_64+0xbe/0x3b0 [ 373.757389][T14544] do_syscall_64+0xfa/0x3b0 [ 373.757417][T14544] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.757446][T14544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.757467][T14544] ? clear_bhb_loop+0x60/0xb0 [ 373.757493][T14544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.757512][T14544] RIP: 0033:0x7f0cea38e969 [ 373.757537][T14544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.757555][T14544] RSP: 002b:00007f0ce81f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 373.757579][T14544] RAX: ffffffffffffffda RBX: 00007f0cea5b5fa0 RCX: 00007f0cea38e969 [ 373.757595][T14544] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000003 [ 373.757608][T14544] RBP: 00007f0cea410ab1 R08: 0000000000000200 R09: 0000000000000000 [ 373.757622][T14544] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 373.757634][T14544] R13: 0000000000000000 R14: 00007f0cea5b5fa0 R15: 00007ffd7459b8a8 [ 373.757666][T14544] [ 374.028409][ T5873] usb 7-1: USB disconnect, device number 15 [ 374.161900][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.182665][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.192301][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.200571][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.208652][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.468856][ T7344] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.813311][ T7344] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.141642][ T7344] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.853841][ T7344] bridge_slave_1: left allmulticast mode [ 375.859574][ T7344] bridge_slave_1: left promiscuous mode [ 375.913551][ T7344] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.029146][ T7344] bridge_slave_0: left allmulticast mode [ 376.058099][ T7344] bridge_slave_0: left promiscuous mode [ 376.082977][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 376.082993][ T30] audit: type=1326 audit(1748909700.455:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14582 comm="syz.9.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cea38e969 code=0x7ffc0000 [ 376.094352][ T7344] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.111122][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.154808][ T30] audit: type=1326 audit(1748909700.455:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14582 comm="syz.9.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cea32ab39 code=0x7ffc0000 [ 376.181533][ T30] audit: type=1326 audit(1748909700.455:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14582 comm="syz.9.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cea32ab39 code=0x7ffc0000 [ 376.208283][ T30] audit: type=1326 audit(1748909700.455:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14582 comm="syz.9.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cea38e969 code=0x7ffc0000 [ 376.267268][ T30] audit: type=1326 audit(1748909700.455:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14582 comm="syz.9.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cea38e969 code=0x7ffc0000 [ 376.291617][ T5829] Bluetooth: hci0: command tx timeout [ 376.357219][ T30] audit: type=1326 audit(1748909700.455:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14582 comm="syz.9.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cea38e969 code=0x7ffc0000 [ 376.378896][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.418028][ T30] audit: type=1326 audit(1748909700.455:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14582 comm="syz.9.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cea38e969 code=0x7ffc0000 [ 376.491910][ T30] audit: type=1326 audit(1748909700.455:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14582 comm="syz.9.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cea32ab39 code=0x7ffc0000 [ 376.513520][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.559532][ T30] audit: type=1326 audit(1748909700.455:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14582 comm="syz.9.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cea32ab39 code=0x7ffc0000 [ 376.586780][ T30] audit: type=1326 audit(1748909700.455:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14582 comm="syz.9.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cea38e969 code=0x7ffc0000 [ 377.117564][ T7344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.128985][ T7344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.145245][ T7344] bond0 (unregistering): Released all slaves [ 377.608187][T14545] chnl_net:caif_netlink_parms(): no params data found [ 377.781562][ T5863] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 377.946360][ T5863] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 377.958919][ T5863] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.971886][ T5863] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 377.982062][ T5863] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 377.991121][ T7344] hsr_slave_0: left promiscuous mode [ 377.996701][ T5863] usb 10-1: Product: syz [ 378.000989][ T5863] usb 10-1: Manufacturer: syz [ 378.009582][ T7344] hsr_slave_1: left promiscuous mode [ 378.017811][ T5863] hub 10-1:4.0: USB hub found [ 378.024108][ T7344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.032214][ T7344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.040846][ T7344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.049902][ T7344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.050169][T14642] sctp: [Deprecated]: syz.2.3802 (pid 14642) Use of int in maxseg socket option. [ 378.050169][T14642] Use struct sctp_assoc_value instead [ 378.108916][ T7344] veth1_macvtap: left promiscuous mode [ 378.114919][ T7344] veth0_macvtap: left promiscuous mode [ 378.120729][ T7344] veth1_vlan: left promiscuous mode [ 378.131413][ T7344] veth0_vlan: left promiscuous mode [ 378.227254][ T5863] hub 10-1:4.0: config failed, hub has too many ports! (err -19) [ 378.356984][ T5829] Bluetooth: hci0: command tx timeout [ 378.562513][ T5881] usb 10-1: USB disconnect, device number 3 [ 378.760859][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.964598][ T7344] team0 (unregistering): Port device team_slave_1 removed [ 379.019962][ T7344] team0 (unregistering): Port device team_slave_0 removed [ 380.256884][T14545] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.269513][T14545] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.280728][T14545] bridge_slave_0: entered allmulticast mode [ 380.289469][T14545] bridge_slave_0: entered promiscuous mode [ 380.364575][T14545] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.372159][T14545] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.379421][T14545] bridge_slave_1: entered allmulticast mode [ 380.388072][T14545] bridge_slave_1: entered promiscuous mode [ 380.431301][ T5829] Bluetooth: hci0: command tx timeout [ 380.538132][T14545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.569326][T14545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.745654][T14545] team0: Port device team_slave_0 added [ 380.776381][T14545] team0: Port device team_slave_1 added [ 380.878090][T14545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.902010][T14545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.927955][ C1] vkms_vblank_simulate: vblank timer overrun [ 380.973845][T14545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.990017][T14545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.006488][T14545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.032430][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.122463][T14545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.286943][ T7344] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.619874][ T7344] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.838486][T14545] hsr_slave_0: entered promiscuous mode [ 381.847120][T14545] hsr_slave_1: entered promiscuous mode [ 381.918586][ T7344] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.931305][T14722] syz.9.3830 (14722): drop_caches: 2 [ 382.188557][ T7344] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.511700][ T5829] Bluetooth: hci0: command tx timeout [ 382.615104][ T5880] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 382.741390][ T7344] bridge_slave_1: left allmulticast mode [ 382.747213][ T7344] bridge_slave_1: left promiscuous mode [ 382.778236][ T7344] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.800940][ T7344] bridge_slave_0: left allmulticast mode [ 382.802204][ T5880] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 382.820201][ T7344] bridge_slave_0: left promiscuous mode [ 382.834193][ T7344] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.841788][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.849930][ T5880] usb 3-1: Product: syz [ 382.860758][ T5880] usb 3-1: Manufacturer: syz [ 382.875895][ T5880] usb 3-1: SerialNumber: syz [ 382.886232][ T5880] usb 3-1: config 0 descriptor?? [ 382.962756][ T5873] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 383.100904][ T5880] hso 3-1:0.0: Can't find BULK IN endpoint [ 383.107632][ T5880] usb-storage 3-1:0.0: USB Mass Storage device detected [ 383.155280][ T5873] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 383.182584][ T5873] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.212652][ T5873] usb 9-1: config 0 descriptor?? [ 383.247730][ T5873] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 383.319423][ T5880] usb 3-1: USB disconnect, device number 30 [ 383.452270][T14751] overlayfs: failed to clone lowerpath [ 383.657161][ T5873] cpia1 9-1:0.0: unexpected state after lo power cmd: 00 [ 383.864628][ T7344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.889088][ T7344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.911887][ T7344] bond0 (unregistering): Released all slaves [ 384.248370][ T5873] gspca_cpia1: usb_control_msg 05, error -71 [ 384.257016][ T5873] cpia1 9-1:0.0: unexpected systemstate: 00 [ 384.306248][ T5873] usb 9-1: USB disconnect, device number 3 [ 384.545086][ T7344] hsr_slave_0: left promiscuous mode [ 384.555246][ T7344] hsr_slave_1: left promiscuous mode [ 384.575472][ T7344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.588182][ T7344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.615208][ T7344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.624035][ T7344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.685138][ T7344] veth1_macvtap: left promiscuous mode [ 384.690844][ T7344] veth0_macvtap: left promiscuous mode [ 384.696796][ T7344] veth1_vlan: left promiscuous mode [ 384.702580][ T7344] veth0_vlan: left promiscuous mode [ 384.771256][ T5873] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 384.936328][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.948035][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.976130][ T5873] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 385.004434][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.014073][ T978] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 385.039013][ T5873] usb 3-1: config 0 descriptor?? [ 385.061193][ T978] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 385.301211][ T5863] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 385.472267][ T5863] usb 9-1: config 0 has no interfaces? [ 385.480757][ T5873] cm6533_jd 0003:0D8C:0022.0020: unknown main item tag 0x0 [ 385.513100][ T5863] usb 9-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 385.523581][ T5873] cm6533_jd 0003:0D8C:0022.0020: unknown main item tag 0x0 [ 385.530854][ T5873] cm6533_jd 0003:0D8C:0022.0020: unknown main item tag 0x0 [ 385.541328][ T5863] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.558384][ T5863] usb 9-1: Product: syz [ 385.563034][ T5873] cm6533_jd 0003:0D8C:0022.0020: unknown main item tag 0x0 [ 385.570276][ T5873] cm6533_jd 0003:0D8C:0022.0020: unknown main item tag 0x0 [ 385.577774][ T5863] usb 9-1: Manufacturer: syz [ 385.595951][ T5863] usb 9-1: SerialNumber: syz [ 385.603384][ T5863] usb 9-1: config 0 descriptor?? [ 385.609021][ T5873] cm6533_jd 0003:0D8C:0022.0020: No inputs registered, leaving [ 385.644006][ T5873] cm6533_jd 0003:0D8C:0022.0020: hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 385.718351][ T7344] team0 (unregistering): Port device team_slave_1 removed [ 385.752284][ T5873] usb 3-1: USB disconnect, device number 31 [ 385.800900][ T7344] team0 (unregistering): Port device team_slave_0 removed [ 385.865246][ T5882] usb 9-1: USB disconnect, device number 4 [ 386.767536][T14545] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 386.854623][T14545] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 386.939345][T14545] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 386.970153][T14545] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 387.387353][T14545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.497175][T14545] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.679216][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.686473][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.754351][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.761607][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.006653][T14545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.665744][T14545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.509914][T14545] veth0_vlan: entered promiscuous mode [ 389.555748][T14545] veth1_vlan: entered promiscuous mode [ 389.671327][ T5927] psmouse serio5: Failed to reset mouse on : -5 [ 389.678716][T14904] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 389.683906][T14545] veth0_macvtap: entered promiscuous mode [ 389.745471][T14545] veth1_macvtap: entered promiscuous mode [ 389.800431][T14545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.818354][T14545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.860313][T14545] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.893147][T14545] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.907060][T14545] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.917740][T14545] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.152753][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.160745][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.200699][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.223787][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.597340][T14937] loop8: detected capacity change from 0 to 7 [ 390.617646][T14937] Dev loop8: unable to read RDB block 7 [ 390.636053][T14937] loop8: unable to read partition table [ 390.651364][T14937] loop8: partition table beyond EOD, truncated [ 390.660898][T14937] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 390.838856][ T7344] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.964750][ T7344] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.074249][ T7344] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.279636][T14956] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3928'. [ 391.289229][T14956] netlink: 112 bytes leftover after parsing attributes in process `syz.8.3928'. [ 391.305820][ T7344] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.343085][T14956] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3928'. [ 391.679567][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 391.692184][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 391.703040][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 391.710704][ T7344] bridge_slave_1: left allmulticast mode [ 391.721253][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 391.729734][ T7344] bridge_slave_1: left promiscuous mode [ 391.735758][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 391.748743][ T7344] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.807597][ T7344] bridge_slave_0: left allmulticast mode [ 391.827832][ T7344] bridge_slave_0: left promiscuous mode [ 391.839960][ T7344] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.247862][ T7344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.258966][ T7344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.269434][ T7344] bond0 (unregistering): Released all slaves [ 392.271329][ T978] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 392.440993][ T978] usb 3-1: Using ep0 maxpacket: 8 [ 392.457148][ T978] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 392.475940][ T978] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 392.505594][ T978] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 392.520227][ T978] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 392.531593][ T978] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 392.545516][ T978] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 392.553350][ T978] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 392.584610][ T978] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 392.622668][ T978] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 392.638285][ T978] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 392.672351][ T978] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 392.698852][ T978] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 392.727280][ T978] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 392.747746][ T978] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 392.767425][ T978] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 392.787033][ T978] usb 3-1: string descriptor 0 read error: -22 [ 392.808241][ T978] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 392.817700][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.842040][ T7344] hsr_slave_0: left promiscuous mode [ 392.849477][ T7344] hsr_slave_1: left promiscuous mode [ 392.849591][ T978] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 392.857100][ T7344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.877484][ T7344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.887387][ T7344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.898029][ T7344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.924605][ T7344] veth1_macvtap: left promiscuous mode [ 392.930169][ T7344] veth0_macvtap: left promiscuous mode [ 392.937878][ T7344] veth1_vlan: left promiscuous mode [ 392.943342][ T7344] veth0_vlan: left promiscuous mode [ 393.048880][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 393.048898][ T30] audit: type=1326 audit(1748909717.435:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14980 comm="syz.2.3938" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14aa18e969 code=0x0 [ 393.154074][ T5881] usb 3-1: USB disconnect, device number 32 [ 393.511141][ T5927] misc userio: Buffer overflowed, userio client isn't keeping up [ 393.536034][ T7344] team0 (unregistering): Port device team_slave_1 removed [ 393.587557][ T7344] team0 (unregistering): Port device team_slave_0 removed [ 393.796709][ T5831] Bluetooth: hci0: command tx timeout [ 394.125626][T14966] chnl_net:caif_netlink_parms(): no params data found [ 394.298490][T15010] loop8: detected capacity change from 0 to 7 [ 394.329364][T15010] Dev loop8: unable to read RDB block 7 [ 394.370630][T15010] loop8: unable to read partition table [ 394.379394][T15010] loop8: partition table beyond EOD, truncated [ 394.403679][T15010] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 394.591692][ T5927] input: PS/2 Generic Mouse as /devices/serio5/input/input39 [ 394.624520][T14966] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.647971][T14966] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.689201][T14966] bridge_slave_0: entered allmulticast mode [ 394.702162][T14966] bridge_slave_0: entered promiscuous mode [ 394.720267][T14966] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.751411][T14966] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.776702][T14966] bridge_slave_1: entered allmulticast mode [ 394.796597][T14966] bridge_slave_1: entered promiscuous mode [ 394.821362][ T5927] psmouse serio5: Failed to enable mouse on [ 394.948341][T14966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.987052][T14966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.156911][T15037] overlayfs: failed to clone lowerpath [ 395.200256][T14966] team0: Port device team_slave_0 added [ 395.315223][T14966] team0: Port device team_slave_1 added [ 395.445102][T14966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.481162][T14966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.581516][T14966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.621709][T14966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.651197][T14966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.731147][T14966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.871854][ T5831] Bluetooth: hci0: command tx timeout [ 395.957677][T14966] hsr_slave_0: entered promiscuous mode [ 395.987855][T14966] hsr_slave_1: entered promiscuous mode [ 396.359988][T15077] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.053855][T15102] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3989'. [ 397.422032][T14966] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 397.447691][T14966] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 397.481247][T14966] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 397.525303][T14966] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 397.663225][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3998'. [ 397.952599][ T5831] Bluetooth: hci0: command tx timeout [ 398.079289][T15124] veth1_vlan (unregistering): left allmulticast mode [ 398.707353][T14966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.773472][T15153] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4010'. [ 398.780100][T14966] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.819084][T15156] 9pnet_fd: Insufficient options for proto=fd [ 398.884266][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.891532][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.974840][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.982146][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.865672][T14966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.041350][ T5831] Bluetooth: hci0: command tx timeout [ 400.622500][ T5880] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 400.700898][T14966] veth0_vlan: entered promiscuous mode [ 400.714505][T14966] veth1_vlan: entered promiscuous mode [ 400.786032][T14966] veth0_macvtap: entered promiscuous mode [ 400.837542][T14966] veth1_macvtap: entered promiscuous mode [ 400.849811][ T5880] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.863621][ T5880] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.911511][ T5880] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 400.935475][T14966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.957684][ T5880] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 400.978178][ T5880] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.995273][T14966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.995323][T15243] loop4: detected capacity change from 0 to 524288000 [ 401.005835][ T5880] usb 10-1: config 0 descriptor?? [ 401.020591][T14966] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.035404][T14966] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.056805][T14966] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.074728][T14966] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.339938][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.358216][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.450458][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.474330][ T5880] plantronics 0003:047F:FFFF.0021: ignoring exceeding usage max [ 401.475415][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.508303][ T5880] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 401.552124][ T5880] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 401.799682][ T5882] usb 10-1: USB disconnect, device number 4 [ 402.096346][ T50] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.227235][ T50] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.444771][ T50] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.559444][ T50] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.674696][ T50] bridge_slave_1: left allmulticast mode [ 402.680487][ T50] bridge_slave_1: left promiscuous mode [ 402.686851][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.696266][ T50] bridge_slave_0: left allmulticast mode [ 402.702521][ T50] bridge_slave_0: left promiscuous mode [ 402.708237][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.410169][T15294] atomic_op ffff888029f25998 conn xmit_atomic 0000000000000000 [ 403.677269][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.689334][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 403.706035][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.716376][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 403.726181][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 403.742302][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 403.743063][ T50] bond0 (unregistering): Released all slaves [ 403.764392][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 404.505723][ T50] hsr_slave_0: left promiscuous mode [ 404.511445][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 404.526879][ T50] hsr_slave_1: left promiscuous mode [ 404.533219][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.540820][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.550250][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.558108][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.588107][ T50] veth1_macvtap: left promiscuous mode [ 404.595006][T15328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4079'. [ 404.604776][ T50] veth0_macvtap: left promiscuous mode [ 404.610550][ T50] veth1_vlan: left promiscuous mode [ 404.616256][ T50] veth0_vlan: left promiscuous mode [ 404.671775][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 404.680755][ T24] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 404.691644][ T24] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 404.715736][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 404.737136][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 404.762005][ T24] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.792395][ T24] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 404.812174][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.035335][ T24] usb 9-1: usb_control_msg returned -32 [ 405.048721][ T24] usbtmc 9-1:16.0: can't read capabilities [ 405.458215][ T50] team0 (unregistering): Port device team_slave_1 removed [ 405.515541][ T50] team0 (unregistering): Port device team_slave_0 removed [ 405.876343][ T5831] Bluetooth: hci0: command tx timeout [ 405.959217][T15334] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4083'. [ 406.000952][T15297] chnl_net:caif_netlink_parms(): no params data found [ 406.382229][T15297] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.389607][T15297] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.403053][T15297] bridge_slave_0: entered allmulticast mode [ 406.414018][T15297] bridge_slave_0: entered promiscuous mode [ 406.438000][T15297] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.446537][T15297] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.460945][T15297] bridge_slave_1: entered allmulticast mode [ 406.469624][T15297] bridge_slave_1: entered promiscuous mode [ 406.595883][T15297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.626290][T15297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.816082][T15297] team0: Port device team_slave_0 added [ 406.934350][T15297] team0: Port device team_slave_1 added [ 406.954059][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 406.989749][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 406.990808][ T5873] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 407.170356][T15297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.178007][T15297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.217734][T15297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.244454][T15297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.253331][T15297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.330091][T15297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.358265][ T5881] usb 9-1: USB disconnect, device number 5 [ 407.541136][T15297] hsr_slave_0: entered promiscuous mode [ 407.559841][T15297] hsr_slave_1: entered promiscuous mode [ 407.711308][ T5881] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 407.733242][ T5863] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 407.953714][ T5831] Bluetooth: hci0: command tx timeout [ 408.328675][ T5831] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 408.341442][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: kworker/u9:4 Not tainted 6.15.0-syzkaller-11061-g7f9039c524a3 #0 PREEMPT(full) [ 408.341474][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.341488][ T5831] Workqueue: hci6 hci_rx_work [ 408.341523][ T5831] Call Trace: [ 408.341531][ T5831] [ 408.341541][ T5831] dump_stack_lvl+0x189/0x250 [ 408.341573][ T5831] ? kernfs_path_from_node+0x2c/0x260 [ 408.341607][ T5831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.341636][ T5831] ? __pfx__printk+0x10/0x10 [ 408.341660][ T5831] ? kernfs_path_from_node+0x2c/0x260 [ 408.341689][ T5831] ? kernfs_path_from_node+0x2c/0x260 [ 408.341721][ T5831] ? kernfs_path_from_node+0x22c/0x260 [ 408.341750][ T5831] ? kernfs_path_from_node+0x2c/0x260 [ 408.341784][ T5831] sysfs_create_dir_ns+0x259/0x280 [ 408.341817][ T5831] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 408.341849][ T5831] ? do_raw_spin_unlock+0x122/0x240 [ 408.341876][ T5831] kobject_add_internal+0x59f/0xb40 [ 408.341905][ T5831] kobject_add+0x155/0x220 [ 408.341941][ T5831] ? __pfx_kobject_add+0x10/0x10 [ 408.341974][ T5831] ? _raw_spin_unlock+0x28/0x50 [ 408.342004][ T5831] ? get_device_parent+0x366/0x3a0 [ 408.342035][ T5831] device_add+0x408/0xb50 [ 408.342066][ T5831] hci_conn_add_sysfs+0xd5/0x1e0 [ 408.342108][ T5831] le_conn_complete_evt+0xc3a/0x1220 [ 408.342144][ T5831] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 408.342169][ T5831] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 408.342199][ T5831] ? __asan_memcpy+0x40/0x70 [ 408.342222][ T5831] ? __pfx___mutex_lock+0x10/0x10 [ 408.342254][ T5831] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 408.342282][ T5831] ? skb_pull_data+0xfb/0x200 [ 408.342317][ T5831] hci_le_conn_complete_evt+0x187/0x450 [ 408.342348][ T5831] hci_event_packet+0x78f/0x1200 [ 408.342380][ T5831] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 408.342404][ T5831] ? __pfx_hci_event_packet+0x10/0x10 [ 408.342436][ T5831] ? kcov_remote_start+0x4d3/0x7f0 [ 408.342461][ T5831] ? local_clock_noinstr+0xe0/0xe0 [ 408.342493][ T5831] ? hci_send_to_monitor+0xe2/0x570 [ 408.342521][ T5831] hci_rx_work+0x46a/0xe80 [ 408.342560][ T5831] ? process_scheduled_works+0x9ef/0x17b0 [ 408.342592][ T5831] process_scheduled_works+0xae1/0x17b0 [ 408.342654][ T5831] ? __pfx_process_scheduled_works+0x10/0x10 [ 408.342704][ T5831] worker_thread+0x8a0/0xda0 [ 408.342738][ T5831] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 408.342774][ T5831] ? __kthread_parkme+0x7b/0x200 [ 408.342816][ T5831] kthread+0x711/0x8a0 [ 408.342840][ T5831] ? __pfx_worker_thread+0x10/0x10 [ 408.342869][ T5831] ? __pfx_kthread+0x10/0x10 [ 408.342893][ T5831] ? _raw_spin_unlock_irq+0x23/0x50 [ 408.342919][ T5831] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.342945][ T5831] ? __pfx_kthread+0x10/0x10 [ 408.342968][ T5831] ret_from_fork+0x3f9/0x770 [ 408.342999][ T5831] ? __pfx_ret_from_fork+0x10/0x10 [ 408.343033][ T5831] ? __switch_to_asm+0x39/0x70 [ 408.343051][ T5831] ? __switch_to_asm+0x33/0x70 [ 408.343068][ T5831] ? __pfx_kthread+0x10/0x10 [ 408.343109][ T5831] ret_from_fork_asm+0x1a/0x30 [ 408.343147][ T5831] [ 408.343178][ T5831] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 408.660141][ T5831] Bluetooth: hci6: failed to register connection device [ 409.009959][T15429] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000004 [ 409.396799][T15297] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 409.485812][T15297] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 409.513082][T15447] program syz.8.4127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 409.564484][T15297] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 409.589500][T15297] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 409.735658][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4131'. [ 409.840391][T15297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.858542][T15462] binder: 15461:15462 ioctl c0306201 2000000003c0 returned -14 [ 409.876830][T15297] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.892226][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.899453][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.940769][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.948110][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.990504][T15297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 410.009126][T15297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 410.011194][ T978] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 410.047915][ T5831] Bluetooth: hci0: command tx timeout [ 410.216686][ T978] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.244821][ T978] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.284407][ T978] usb 10-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 410.314220][ T978] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.350843][ T978] usb 10-1: config 0 descriptor?? [ 410.556117][T15297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.751601][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.815542][ T978] hid-led 0003:0FC5:B080.0022: unknown main item tag 0x0 [ 411.278262][T15297] veth0_vlan: entered promiscuous mode [ 411.309451][T15297] veth1_vlan: entered promiscuous mode [ 411.368917][T15297] veth0_macvtap: entered promiscuous mode [ 411.381797][T15297] veth1_macvtap: entered promiscuous mode [ 411.400388][ T24] usb 10-1: USB disconnect, device number 5 [ 411.434184][T15297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.480936][T15297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.518971][T15297] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.539855][T15297] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.555665][T15297] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.567345][T15297] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.725817][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.754086][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.824549][ T7347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.837149][ T7347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.292795][T15532] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 412.304117][ T5882] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 412.393303][T15536] netlink: 'syz.9.4164': attribute type 29 has an invalid length. [ 412.481414][ T5882] usb 9-1: Using ep0 maxpacket: 16 [ 412.497602][ T5882] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 412.521008][ T5882] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.540410][ T5882] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 412.557246][ T5882] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 412.581452][ T5882] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.596475][ T5882] usb 9-1: Product: syz [ 412.600753][ T5882] usb 9-1: Manufacturer: syz [ 412.606190][ T5882] usb 9-1: SerialNumber: syz [ 412.859682][ T5882] usb 9-1: 0:2 : does not exist [ 412.919913][ T5882] usb 9-1: USB disconnect, device number 6 [ 412.979135][ T7347] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.082179][ T7347] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.239838][ T7347] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.333664][ T7347] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.485350][ T7347] bridge_slave_1: left allmulticast mode [ 413.491331][ T7347] bridge_slave_1: left promiscuous mode [ 413.497104][ T7347] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.506718][ T7347] bridge_slave_0: left allmulticast mode [ 413.512893][ T7347] bridge_slave_0: left promiscuous mode [ 413.518603][ T7347] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.661975][T15564] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4176'. [ 413.667830][T15562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.394401][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 414.406998][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 414.419646][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 414.451270][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 414.470344][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 414.614665][ T7347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.626947][ T7347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.637192][ T7347] bond0 (unregistering): Released all slaves [ 414.656943][T15596] netlink: 'syz.9.4188': attribute type 29 has an invalid length. [ 414.676249][T15598] netlink: 'syz.9.4188': attribute type 29 has an invalid length. [ 414.688379][T15596] netlink: 500 bytes leftover after parsing attributes in process `syz.9.4188'. [ 414.737576][T15596] unsupported nla_type 58 [ 415.808513][ T7347] hsr_slave_0: left promiscuous mode [ 415.847377][ T7347] hsr_slave_1: left promiscuous mode [ 415.878513][ T7347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.902750][ T7347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.947454][ T7347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.976373][ T7347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.098356][ T7347] veth1_macvtap: left promiscuous mode [ 416.138480][ T7347] veth0_macvtap: left promiscuous mode [ 416.159525][ T7347] veth1_vlan: left promiscuous mode [ 416.170766][ T7347] veth0_vlan: left promiscuous mode [ 416.512650][ T5829] Bluetooth: hci0: command tx timeout [ 416.653127][T15662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4214'. [ 416.665515][T15662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4214'. [ 416.830638][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4217'. [ 416.861461][ T5873] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 417.053133][ T5873] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 417.066826][ T5873] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 417.077991][ T5873] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.087846][ T7347] team0 (unregistering): Port device team_slave_1 removed [ 417.099344][ T5873] usb 10-1: config 0 descriptor?? [ 417.117742][T15659] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 417.146198][ T7347] team0 (unregistering): Port device team_slave_0 removed [ 417.568635][ T5873] elan 0003:04F3:0755.0023: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0 [ 417.727938][T15590] chnl_net:caif_netlink_parms(): no params data found [ 417.799079][ T5881] usb 10-1: USB disconnect, device number 6 [ 417.832943][T15666] vxcan3: entered allmulticast mode [ 418.177555][T15590] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.191886][T15590] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.210329][T15590] bridge_slave_0: entered allmulticast mode [ 418.243040][T15590] bridge_slave_0: entered promiscuous mode [ 418.274064][T15590] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.278836][T15685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.288568][T15590] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.296821][T15590] bridge_slave_1: entered allmulticast mode [ 418.306579][T15590] bridge_slave_1: entered promiscuous mode [ 418.431240][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.490087][T15590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.544335][T15590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.601272][ T5829] Bluetooth: hci0: command tx timeout [ 418.694082][T15697] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4231'. [ 418.778472][T15590] team0: Port device team_slave_0 added [ 418.876802][T15697] 8021q: adding VLAN 0 to HW filter on device team1 [ 418.916436][T15590] team0: Port device team_slave_1 added [ 419.000499][T15709] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4236'. [ 419.132157][T15590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.149917][T15590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.195780][T15590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.240129][T15590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.260123][T15590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.306738][T15590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.609308][T15590] hsr_slave_0: entered promiscuous mode [ 419.642369][T15590] hsr_slave_1: entered promiscuous mode [ 420.671110][ T5829] Bluetooth: hci0: command tx timeout [ 420.851848][T15771] syzkaller1: entered promiscuous mode [ 420.857709][T15771] syzkaller1: entered allmulticast mode [ 420.961622][T15590] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 420.985108][T15590] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 421.017999][T15590] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 421.029696][T15590] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 421.121440][ T5873] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 421.160451][T15590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.232837][T15590] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.276672][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.283945][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.293262][ T5873] usb 10-1: config 118 interface 0 has no altsetting 0 [ 421.316789][ T5873] usb 10-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 421.337667][ T5873] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.346162][ T5873] usb 10-1: Product: syz [ 421.350477][ T5873] usb 10-1: Manufacturer: syz [ 421.361092][ T5873] usb 10-1: SerialNumber: syz [ 421.364417][ T194] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.373065][ T194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.603168][ T5873] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 421.638068][ T5873] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 421.666147][ T5873] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 421.682922][ T5873] usb 10-1: media controller created [ 421.720873][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 421.921694][ T5873] DVB: Unable to find symbol mt352_attach() [ 421.951570][ T5873] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 421.972529][ T5873] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input40 [ 422.015688][ T5873] dvb-usb: schedule remote query interval to 100 msecs. [ 422.031797][ T5873] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 422.187244][T15590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.372201][T15804] sctp: [Deprecated]: syz.5.4274 (pid 15804) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.372201][T15804] Use struct sctp_sack_info instead [ 422.379072][ T5892] m920x_read = error: -71 [ 422.394310][ T5873] dvb_usb_m920x 10-1:118.0: probe with driver dvb_usb_m920x failed with error -71 [ 422.441215][ T5892] dvb-usb: error while querying for an remote control event. [ 422.449027][ T5873] usb 10-1: USB disconnect, device number 7 [ 422.581172][ T5863] m920x_read = error: -19 [ 422.585584][ T5863] dvb-usb: error while querying for an remote control event. [ 422.712750][ T5873] m920x_read = error: -19 [ 422.722602][ T5873] dvb-usb: error while querying for an remote control event. [ 422.751539][ T5829] Bluetooth: hci0: command tx timeout [ 422.855369][ T5863] m920x_read = error: -19 [ 422.870155][ T5863] dvb-usb: error while querying for an remote control event. [ 422.940819][T15590] veth0_vlan: entered promiscuous mode [ 422.978161][T15590] veth1_vlan: entered promiscuous mode [ 423.001170][ T5863] m920x_read = error: -19 [ 423.005590][ T5863] dvb-usb: error while querying for an remote control event. [ 423.057543][T15590] veth0_macvtap: entered promiscuous mode [ 423.095631][T15590] veth1_macvtap: entered promiscuous mode [ 423.134131][T15590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.148661][T15590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.164680][ T5892] m920x_read = error: -19 [ 423.179423][ T5892] dvb-usb: error while querying for an remote control event. [ 423.207143][T15590] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.234055][T15590] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.277358][T15590] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.299292][T15590] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.311618][ T5892] m920x_read = error: -19 [ 423.316021][ T5892] dvb-usb: error while querying for an remote control event. [ 423.441283][ T5863] m920x_read = error: -19 [ 423.448079][ T5863] dvb-usb: error while querying for an remote control event. [ 423.611496][ T5863] m920x_read = error: -19 [ 423.615931][ T5863] dvb-usb: error while querying for an remote control event. [ 423.650990][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.691592][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.729959][T15830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4284'. [ 423.794283][ T5863] m920x_read = error: -19 [ 423.798710][ T5863] dvb-usb: error while querying for an remote control event. [ 423.809373][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.827513][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.951480][ T5863] m920x_read = error: -19 [ 423.961105][ T5863] dvb-usb: error while querying for an remote control event. [ 424.121546][ T5892] m920x_read = error: -19 [ 424.125949][ T5892] dvb-usb: error while querying for an remote control event. [ 424.247424][T15839] sctp: [Deprecated]: syz.5.4289 (pid 15839) Use of struct sctp_assoc_value in delayed_ack socket option. [ 424.247424][T15839] Use struct sctp_sack_info instead [ 424.289573][ T5863] m920x_read = error: -19 [ 424.296545][ T5863] dvb-usb: error while querying for an remote control event. [ 424.329779][ T30] audit: type=1400 audit(1748909748.715:635): lsm=SMACK fn=smack_inode_set_acl action=denied subject="w" object="_" requested=w pid=15842 comm="syz.9.4291" name="177" dev="tmpfs" ino=931 [ 424.411966][ T5863] m920x_read = error: -19 [ 424.416579][ T5863] dvb-usb: error while querying for an remote control event. [ 424.548166][ T5873] m920x_read = error: -19 [ 424.564331][ T5873] dvb-usb: error while querying for an remote control event. [ 424.615981][ T7347] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.691499][ T5863] m920x_read = error: -19 [ 424.696064][ T5863] dvb-usb: error while querying for an remote control event. [ 424.768170][ T7347] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.821256][ T5863] m920x_read = error: -19 [ 424.825970][ T5863] dvb-usb: error while querying for an remote control event. [ 424.958476][ T7347] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.969061][ T5863] m920x_read = error: -19 [ 424.981139][ T5863] dvb-usb: error while querying for an remote control event. [ 425.102160][ T5863] m920x_read = error: -19 [ 425.106565][ T5863] dvb-usb: error while querying for an remote control event. [ 425.237113][ T5889] m920x_read = error: -19 [ 425.248253][ T5889] dvb-usb: error while querying for an remote control event. [ 425.278760][ T7347] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.371979][ T5889] m920x_read = error: -19 [ 425.376383][ T5889] dvb-usb: error while querying for an remote control event. [ 425.405590][ T7347] bridge_slave_1: left allmulticast mode [ 425.411785][ T7347] bridge_slave_1: left promiscuous mode [ 425.417549][ T7347] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.427073][ T7347] bridge_slave_0: left allmulticast mode [ 425.434761][ T7347] bridge_slave_0: left promiscuous mode [ 425.441895][ T7347] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.491369][ T5873] m920x_read = error: -19 [ 425.495772][ T5873] dvb-usb: error while querying for an remote control event. [ 425.612093][ T5873] m920x_read = error: -19 [ 425.616487][ T5873] dvb-usb: error while querying for an remote control event. [ 425.787257][ T5873] m920x_read = error: -19 [ 425.807407][ T5873] dvb-usb: error while querying for an remote control event. [ 425.943449][ T5873] m920x_read = error: -19 [ 425.947869][ T5873] dvb-usb: error while querying for an remote control event. [ 426.061253][ T5873] m920x_read = error: -19 [ 426.065958][ T5873] dvb-usb: error while querying for an remote control event. [ 426.212405][ T5873] m920x_read = error: -19 [ 426.216817][ T5873] dvb-usb: error while querying for an remote control event. [ 433.151238][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.231231][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 522.111253][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 531.311002][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 531.318012][ C1] rcu: 0-...!: (0 ticks this GP) idle=37ec/1/0x4000000000000000 softirq=80874/80874 fqs=1 [ 531.329250][ C1] rcu: (detected by 1, t=10502 jiffies, g=75417, q=228 ncpus=2) [ 531.337003][ C1] Sending NMI from CPU 1 to CPUs 0: [ 531.337042][ C0] NMI backtrace for cpu 0 [ 531.337066][ C0] CPU: 0 UID: 0 PID: 15857 Comm: syz-executor Not tainted 6.15.0-syzkaller-11061-g7f9039c524a3 #0 PREEMPT(full) [ 531.337095][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 531.337114][ C0] RIP: 0010:debug_smp_processor_id+0xb/0x20 [ 531.337146][ C0] Code: 90 f9 e9 66 ff ff ff cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 c7 c7 20 a0 e1 8b <48> c7 c6 60 a0 e1 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 531.337166][ C0] RSP: 0018:ffffc90000007bd0 EFLAGS: 00000087 [ 531.337181][ C0] RAX: 0000000000000000 RBX: ffff888028c842e8 RCX: 1ffff11005190865 [ 531.337193][ C0] RDX: 0000000000010000 RSI: ffffffff897d464f RDI: ffffffff8be1a020 [ 531.337205][ C0] RBP: ffff88802f9ecd50 R08: ffff88802f9ecc87 R09: 1ffff11005f3d990 [ 531.337217][ C0] R10: dffffc0000000000 R11: ffffed1005f3d991 R12: ffff888028c84340 [ 531.337229][ C0] R13: ffffffff897d464f R14: ffff888028c84300 R15: ffff88805b5ad400 [ 531.337241][ C0] FS: 000055555cb54500(0000) GS:ffff888125c93000(0000) knlGS:0000000000000000 [ 531.337255][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 531.337267][ C0] CR2: 0000200000000040 CR3: 0000000076c52000 CR4: 00000000003526f0 [ 531.337281][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 531.337290][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 531.337300][ C0] Call Trace: [ 531.337312][ C0] [ 531.337319][ C0] rcu_is_watching+0x15/0xb0 [ 531.337347][ C0] lock_release+0x4b/0x3e0 [ 531.337368][ C0] ? taprio_set_budgets+0x375/0x3b0 [ 531.337392][ C0] _raw_spin_unlock+0x16/0x50 [ 531.337413][ C0] advance_sched+0x99f/0xc90 [ 531.337442][ C0] ? __pfx_advance_sched+0x10/0x10 [ 531.337460][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 531.337495][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 531.337517][ C0] ? read_tsc+0x9/0x20 [ 531.337541][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 531.337579][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 531.337605][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 531.337628][ C0] [ 531.337633][ C0] [ 531.337639][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 531.337657][ C0] RIP: 0010:rcu_is_watching+0x60/0xb0 [ 531.337681][ C0] Code: 80 3c 38 00 74 08 4c 89 f7 e8 cc 93 7a 00 48 c7 c3 58 ff 99 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 <65> ff 0d 29 bc f1 10 74 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f e9 07 [ 531.337695][ C0] RSP: 0018:ffffc900047f7358 EFLAGS: 00000246 [ 531.337709][ C0] RAX: 00000000000d37ec RBX: ffff8880b8632f58 RCX: 41b388c52769ee00 [ 531.337720][ C0] RDX: 0000000000000000 RSI: ffffffff8be1a060 RDI: ffffffff8be1a020 [ 531.337731][ C0] RBP: ffffffff81728e15 R08: 0000000000000000 R09: 0000000000000000 [ 531.337742][ C0] R10: ffffc900047f7538 R11: ffffffff81ace490 R12: 0000000000000002 [ 531.337753][ C0] R13: ffffffff8e13f080 R14: ffffffff8db80c60 R15: dffffc0000000000 [ 531.337767][ C0] ? unwind_next_frame+0xa5/0x2390 [ 531.337791][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 531.337814][ C0] ? rcu_is_watching+0x15/0xb0 [ 531.337837][ C0] lock_acquire+0x5f/0x360 [ 531.337861][ C0] ? unwind_next_frame+0xa5/0x2390 [ 531.337883][ C0] ? kcov_ioctl+0x55/0x640 [ 531.337903][ C0] ? unwind_next_frame+0xa5/0x2390 [ 531.337926][ C0] unwind_next_frame+0xc2/0x2390 [ 531.337948][ C0] ? unwind_next_frame+0xa5/0x2390 [ 531.337985][ C0] ? unwind_next_frame+0xa5/0x2390 [ 531.338006][ C0] ? vmalloc_user_noprof+0xad/0xf0 [ 531.338029][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 531.338045][ C0] arch_stack_walk+0x11c/0x150 [ 531.338071][ C0] ? kcov_ioctl+0x55/0x640 [ 531.338091][ C0] stack_trace_save+0x9c/0xe0 [ 531.338107][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 531.338127][ C0] save_stack+0xf7/0x1f0 [ 531.338147][ C0] ? __pfx_save_stack+0x10/0x10 [ 531.338170][ C0] ? post_alloc_hook+0x240/0x2a0 [ 531.338189][ C0] ? get_page_from_freelist+0x21d5/0x22b0 [ 531.338212][ C0] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 531.338235][ C0] ? alloc_pages_mpol+0x232/0x4a0 [ 531.338253][ C0] ? alloc_pages_noprof+0xa9/0x190 [ 531.338271][ C0] ? __vmalloc_node_range_noprof+0x97d/0x12f0 [ 531.338291][ C0] ? vmalloc_user_noprof+0xad/0xf0 [ 531.338311][ C0] ? kcov_ioctl+0x55/0x640 [ 531.338332][ C0] ? seqcount_lockdep_reader_access+0x102/0x180 [ 531.338354][ C0] __set_page_owner+0x8d/0x4a0 [ 531.338375][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 531.338399][ C0] post_alloc_hook+0x240/0x2a0 [ 531.338422][ C0] get_page_from_freelist+0x21d5/0x22b0 [ 531.338470][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 531.338495][ C0] ? prepare_alloc_pages+0x213/0x610 [ 531.338521][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 531.338546][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 531.338574][ C0] ? policy_nodemask+0x27c/0x720 [ 531.338593][ C0] ? __pfx___might_resched+0x10/0x10 [ 531.338617][ C0] alloc_pages_mpol+0x232/0x4a0 [ 531.338640][ C0] alloc_pages_noprof+0xa9/0x190 [ 531.338661][ C0] __vmalloc_node_range_noprof+0x97d/0x12f0 [ 531.338697][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 531.338722][ C0] ? __pfx_kcov_ioctl+0x10/0x10 [ 531.338740][ C0] vmalloc_user_noprof+0xad/0xf0 [ 531.338761][ C0] ? kcov_ioctl+0x55/0x640 [ 531.338779][ C0] kcov_ioctl+0x55/0x640 [ 531.338798][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 531.338820][ C0] ? __pfx_kcov_ioctl+0x10/0x10 [ 531.338838][ C0] __se_sys_ioctl+0xfc/0x170 [ 531.338857][ C0] do_syscall_64+0xfa/0x3b0 [ 531.338879][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.338900][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.338915][ C0] ? clear_bhb_loop+0x60/0xb0 [ 531.338933][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.338947][ C0] RIP: 0033:0x7f7aecb8e56b [ 531.338963][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 531.338975][ C0] RSP: 002b:00007fff108afee0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.338990][ C0] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f7aecb8e56b [ 531.339001][ C0] RDX: 0000000000100000 RSI: ffffffff80086301 RDI: 00000000000000d7 [ 531.339011][ C0] RBP: 00007f7aecdb5f40 R08: 00000000000000da R09: 0000000000000000 [ 531.339021][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.339030][ C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 531.339048][ C0] [ 531.340029][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g75417 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 531.990633][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 532.000614][ C1] rcu: RCU grace-period kthread stack dump: [ 532.006510][ C1] task:rcu_preempt state:R running task stack:27320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 532.020036][ C1] Call Trace: [ 532.023328][ C1] [ 532.026279][ C1] __schedule+0x16a2/0x4cb0 [ 532.030821][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 532.036049][ C1] ? schedule+0x165/0x360 [ 532.040406][ C1] ? __lock_acquire+0xab9/0xd20 [ 532.045283][ C1] ? __pfx___schedule+0x10/0x10 [ 532.050181][ C1] ? schedule+0x91/0x360 [ 532.054450][ C1] schedule+0x165/0x360 [ 532.058631][ C1] schedule_timeout+0x12b/0x270 [ 532.063515][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 532.068914][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 532.074835][ C1] ? __pfx_process_timeout+0x10/0x10 [ 532.080155][ C1] ? prepare_to_swait_event+0x341/0x380 [ 532.085726][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 532.090607][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 532.096519][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 532.101836][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 532.107061][ C1] ? finish_swait+0xcd/0x1f0 [ 532.111676][ C1] rcu_gp_kthread+0x99/0x390 [ 532.116292][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 532.121510][ C1] ? __kthread_parkme+0x7b/0x200 [ 532.126473][ C1] ? __kthread_parkme+0x1a1/0x200 [ 532.131529][ C1] kthread+0x711/0x8a0 [ 532.135630][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 532.140846][ C1] ? __pfx_kthread+0x10/0x10 [ 532.145455][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 532.150670][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.155886][ C1] ? __pfx_kthread+0x10/0x10 [ 532.160498][ C1] ret_from_fork+0x3f9/0x770 [ 532.165122][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 532.170261][ C1] ? __switch_to_asm+0x39/0x70 [ 532.175040][ C1] ? __switch_to_asm+0x33/0x70 [ 532.179819][ C1] ? __pfx_kthread+0x10/0x10 [ 532.184426][ C1] ret_from_fork_asm+0x1a/0x30 [ 532.189222][ C1] [ 532.192249][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 532.198590][ C1] CPU: 1 UID: 0 PID: 7750 Comm: syz-executor Not tainted 6.15.0-syzkaller-11061-g7f9039c524a3 #0 PREEMPT(full) [ 532.210406][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 532.220473][ C1] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 532.227177][ C1] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 50 78 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 fb 73 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 e0 73 0b [ 532.246799][ C1] RSP: 0018:ffffc9001ac57580 EFLAGS: 00000293 [ 532.252977][ C1] RAX: ffffffff81b4d600 RBX: ffff8880b873c9c0 RCX: ffff888025fa1e00 [ 532.260966][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 532.268955][ C1] RBP: ffffc9001ac576e0 R08: ffffffff8f9fb6f7 R09: 1ffffffff1f3f6de [ 532.276952][ C1] R10: dffffc0000000000 R11: fffffbfff1f3f6df R12: 1ffff110170c868d [ 532.284940][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8643468 [ 532.292925][ C1] FS: 0000555562c5d500(0000) GS:ffff888125d93000(0000) knlGS:0000000000000000 [ 532.301873][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 532.308473][ C1] CR2: 00007f14aa3b7bac CR3: 00000000336fa000 CR4: 00000000003526f0 [ 532.316461][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 532.324449][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 532.332433][ C1] Call Trace: [ 532.335726][ C1] [ 532.338683][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 532.345043][ C1] ? ldt_dup_context+0x336/0x3e0 [ 532.350005][ C1] ? rcu_is_watching+0x15/0xb0 [ 532.354800][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 532.360017][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 532.365158][ C1] flush_tlb_mm_range+0x6b1/0x12c0 [ 532.370336][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 532.375902][ C1] ? up_write+0x1c4/0x420 [ 532.380279][ C1] dup_mmap+0x15a0/0x1ac0 [ 532.384660][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 532.389386][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 532.395305][ C1] ? mm_init+0xca7/0xf00 [ 532.399587][ C1] copy_mm+0x13c/0x4b0 [ 532.403675][ C1] copy_process+0x1706/0x3c00 [ 532.408422][ C1] ? copy_process+0x97f/0x3c00 [ 532.413224][ C1] ? __pfx_copy_process+0x10/0x10 [ 532.418286][ C1] ? __handle_mm_fault+0x1144/0x5620 [ 532.423601][ C1] kernel_clone+0x224/0x7f0 [ 532.428123][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 532.433184][ C1] __x64_sys_clone+0x18b/0x1e0 [ 532.437967][ C1] ? count_memcg_event_mm+0x21/0x260 [ 532.443280][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 532.448603][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 532.453912][ C1] ? do_syscall_64+0xbe/0x3b0 [ 532.458621][ C1] do_syscall_64+0xfa/0x3b0 [ 532.463150][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.468371][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.474461][ C1] ? clear_bhb_loop+0x60/0xb0 [ 532.479158][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.485062][ C1] RIP: 0033:0x7faa8cb851d3 [ 532.489494][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 532.509119][ C1] RSP: 002b:00007ffe4d7451b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 532.517557][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007faa8cb851d3 [ 532.525544][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 532.533535][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 532.541516][ C1] R10: 0000555562c5d7d0 R11: 0000000000000246 R12: 0000000000000000 [ 532.549593][ C1] R13: 00000000000927c0 R14: 00000000000680a5 R15: 00007ffe4d745350 [ 532.557598][ C1]