last executing test programs: 1m59.120000619s ago: executing program 3 (id=448): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x7}, 0xe) listen(r1, 0x9) accept4$vsock_stream(r2, 0x0, 0x58, 0x0) 1m58.128469819s ago: executing program 3 (id=454): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000140)='./file0\x00', 0x0) 1m57.754715771s ago: executing program 3 (id=455): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) 1m57.529153068s ago: executing program 3 (id=456): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000280)={0xfffffffb, "ff0f0000e3ffffff080040e99dccdbfb00000000deff00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000080)=0x2) 1m57.32357371s ago: executing program 3 (id=459): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m57.219646273s ago: executing program 3 (id=460): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) r3 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) 1m42.204112959s ago: executing program 32 (id=460): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) r3 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) 1m22.409739011s ago: executing program 4 (id=554): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x4000)=nil}) 1m21.04656591s ago: executing program 4 (id=561): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2002004}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="b0000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000007c5eb094942e981100000000000000000000000000000000000400"], 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/192, 0xc0) 1m20.658200788s ago: executing program 4 (id=564): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) syz_pidfd_open(0x0, 0x0) 1m19.320077958s ago: executing program 4 (id=570): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x2) 1m19.100651216s ago: executing program 4 (id=572): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 1m18.273118055s ago: executing program 4 (id=575): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xdbcfb000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 1m17.705082738s ago: executing program 33 (id=575): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xdbcfb000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 5.134042721s ago: executing program 1 (id=960): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r5, 0x5403, 0x0) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000140)=""/135, 0x87}], 0x1) 4.559631799s ago: executing program 1 (id=962): socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x20000, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0x2, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffff2a4, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.404748704s ago: executing program 1 (id=964): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x30}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) recvmmsg(r1, &(0x7f0000006c00)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x2, 0x0) close(r0) socket$kcm(0x23, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) openat$cgroup_ro(r0, &(0x7f0000000040)='memory.numa_stat\x00', 0x0, 0x0) 4.339789496s ago: executing program 1 (id=965): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x1d, 0x1, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000640)=ANY=[@ANYRESOCT=r0, @ANYBLOB="439a1ce17ecd3e8b731d64fd3cb4a7e6a615eb83ff9a54702b8b99125a1b21d582f8a4049b7a8ce378cfa7ae269b3df6cd5dea94f90d995976e3464f5001b71c25ad51cb8f509649db7ed99a3edef9a4f166f65cdbf1e62f18c7c2bc751a1beeb287133e89acdc80f08a491a7b0cea5eb1bb1c4e5ede3e69c3d26bcfc73f14dfe91fb3e3fcd04b38d3f0eb54ab3e018cf352fa8e3c714423c3974a285536b269277ba59f6a7da057a5cee9eeb5e4d5b9855e586beda327c79065144e3be899218d7afd3165cdfa1e87b63fff1ac3b6a9a9ff63181d0e544a12e1749148fb2e615ded1887f95445a1"], &(0x7f0000000000)='GPL\x00', 0x2, 0xb7, &(0x7f0000000140)=""/183, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f00000004c0)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0, @mcast2, 0x9, 0xd58, 0x3, 0x180, 0x38, 0x85420066}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x0, 0x80600}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000040)="e5", 0xffffffffffffff99, 0x20004000, 0x0, 0x0) unshare(0x40020000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x42) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000067000000080003007a0b891b501e84a86e6e008f73dc61e885f6dd0e126e5ee8424a359f50801f4e611e5667e0eac47a999c5e9b61de653244b9d77cba778ec0bf7af7c280f3436e45e2f7057bb090e212b78511d4c3a0636b8dc63675207ec009c44d674bc38d4731e5b6f84df7dec81de38341de0a5914c24ff2320845537aba56ab9aabc845ea46f80a447e7d132e5a5d7bc18dd0308fc5208ec1b72aa966fe537cb4ba7c77872b79186a333ec28fe87427455d1ee5f19b65fa6642c3f70e5a2b78b077117b5581db32b1addccb2b0fc0c1c2f787612a63a18e246ad0087d8d66704652ce02", @ANYRES32, @ANYBLOB="0800c300741300000800c400ff000000"], 0x2c}}, 0x40000) 4.047611125s ago: executing program 2 (id=967): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x6}]}}) socket(0x2c, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) sched_setaffinity(r0, 0x0, 0x0) 3.729580608s ago: executing program 5 (id=969): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) setrlimit(0x8, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000003c0)=""/4096, 0x1000) vmsplice(r3, &(0x7f0000000780)=[{&(0x7f0000000800)="366c3d15cc3b565398e8b36c499f4ccb64274b83315c98a12cc2779ffd7920b8adb39bfd42274ad6c9300b77a2d6f571271493ccccdfb2b0e3335ff33fd688cf1adc1b5959e221d41b6a2c11d09fb84c7fc6ebdcd120ea360c615f41dc8f0dd8af2b", 0x62}], 0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000001640), 0x0, &(0x7f00000015c0)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRESOCT=r5]) chdir(&(0x7f0000000300)='./file0\x00') r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB, @ANYRESHEX=r6, @ANYRES16, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB]) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00') r7 = socket$inet_sctp(0x2, 0x5, 0x84) connect$bt_rfcomm(r5, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x80}, 0xa) bind$inet(r7, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r7, &(0x7f00000004c0)="ab", 0xff04, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 3.656541717s ago: executing program 0 (id=971): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) openat(r2, 0x0, 0x111042, 0x11) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x1010, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r3, 0x0, 0x7}, 0x38) 3.093881169s ago: executing program 2 (id=972): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r5, 0x5403, 0x0) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000140)=""/135, 0x87}], 0x1) 3.092439146s ago: executing program 1 (id=973): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xa0000) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xa0, 0x85, 0x54, 0x20, 0x856, 0xac29, 0xa83c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0xba, 0x0, 0x1, 0x5f, 0x8e, 0xcd, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) poll(&(0x7f00000000c0)=[{r5, 0x3388}], 0x1, 0x800) 2.769025724s ago: executing program 5 (id=974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a5c000000080a220300000000000000000a0000010c00064000000000000000020900020073797a31000000000800094000000002140005800800014000000021080001400000000814000580080002400000000108000100000000173c000000090a01040000000000"], 0x120}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80400) 2.685258895s ago: executing program 0 (id=975): syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x1) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 2.489827066s ago: executing program 5 (id=976): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 2.160707697s ago: executing program 2 (id=977): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x6}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0x68}}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0x980914, 0xffffff7c}) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec07000000000108000000000023000400000000", @ANYRES32=r5, @ANYBLOB="0000000000000000cc001a8018002d8014000700fe8000000000000000000000000000aa30000280040001800300000000000000080000000000000004000000000000000800000000000000080000000000000018000280140001801100000000000000080000000000000018000a8014000700ff02000000000000000000000000000100000700ff02000000000000000000000000000100000700fe8000000000000000000000000000002800028024000180080000000000000008000000000000000800000000000000080000000000000004001c0000000a8000000700200100000000000000000000000000000000080000000000000008000000000000000700fe80000000000000000000000000000000000700ff020000000000000000000000000001000007002001000000000000000000000000000000000700fc0100000000000000000000000000000000080000000000000008000000000004001c00"], 0xec}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) 1.669416348s ago: executing program 0 (id=978): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffe, 0x1) 1.669097827s ago: executing program 2 (id=979): mount$9p_rdma(&(0x7f00000013c0), 0x0, &(0x7f0000001440), 0x800, &(0x7f0000000080)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_open_procfs$namespace(0x0, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x1b, 0x20000002, r0) syz_pidfd_open(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 1.638040704s ago: executing program 0 (id=980): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x42280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000140)={0x0, 0x2, 0xc, 0x4, 0x8, 0x9, 0x0, 0x5}, 0x0, &(0x7f0000000280)={0xff, 0xffff, 0x753, 0x22, 0x0, 0x1, 0x5, 0x7}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 1.509561475s ago: executing program 5 (id=981): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(0x0, 0x13b) mkdir(0x0, 0x0) chdir(0x0) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) r2 = socket$kcm(0x25, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) recvmsg$kcm(r2, 0x0, 0x160) 1.099371013s ago: executing program 2 (id=982): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r6, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) 657.16835ms ago: executing program 0 (id=983): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) 581.811043ms ago: executing program 5 (id=984): socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="1c0000005e007f029e3b470d649b72ab25399cd93690000000000000", 0x1c}], 0x1}, 0x0) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x100000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x8000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) getsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) 537.504837ms ago: executing program 0 (id=985): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) rmdir(0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x51) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f00000000c0)={0x1}) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x14, &(0x7f00000002c0)={0x40, 0x23, 0x8a, {0x8a, 0xc, "1db30652807ed2cfa752ecf7de0a4778ae9afa488499520c1b07433f0f481ba594377a7c1a0d7fe592b172631e61430e2167ac77c47242802150d0c3fefab205c13d576d65cdff35d34a95e8742057a29cce08f79328bcfb1c4d0b7a45096a215e60fd25c25769d0bfc4333f99f2973d75298ad8d0626e45d80570036cfb28c614d1a296213b434e"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}, &(0x7f00000001c0)={0x0, 0x22, 0x20, {[@local=@item_012={0x2, 0x2, 0x0, "8c0c"}, @main=@item_4={0x3, 0x0, 0x8, "0b0d89b0"}, @local=@item_4={0x3, 0x2, 0x7, "cb1a5837"}, @main=@item_012={0x1, 0x0, 0x9, "14"}, @local=@item_4={0x3, 0x2, 0x2, "5e1b4ca9"}, @main=@item_012={0x0, 0x0, 0xc}, @main, @main=@item_4={0x3, 0x0, 0x8, "1f0fe9c9"}, @main=@item_4={0x3, 0x0, 0xc, "4bd540e3"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0xece}}}}, &(0x7f0000000580)={0x18, &(0x7f00000003c0)={0x40, 0x31, 0x13, "76cf335c625928e21eecff60e41e888fd939ce"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000480), &(0x7f0000000540)={0x20, 0x3, 0x1, 0x4}}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 398.067332ms ago: executing program 5 (id=986): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r3, 0x0, 0x0) r5 = fcntl$dupfd(r3, 0x406, r3) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r4, 0x2, {0x0, 0xff}, 0xfe}, 0x18) syz_usbip_server_init(0x1) socket$netlink(0x10, 0x3, 0x15) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000040)={0x1d, r8, 0x8000000000000003}, 0x18) 160.185297ms ago: executing program 2 (id=987): open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e61e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x4) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000340)='.\x00', 0xa50003d1) 0s ago: executing program 1 (id=988): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000700)=0xe9, 0x4) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) kernel console output (not intermixed with test programs): devsim0: renamed from eth0 [ 124.027921][ T5955] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 124.037389][ T5955] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 124.058318][ T5955] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 124.187982][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.215408][ T5956] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 124.269506][ T5956] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 124.281597][ T5956] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 124.345801][ T5956] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 124.589585][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.621192][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.651450][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.654298][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.699352][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.720627][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.769637][ T5963] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.783062][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.834661][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.843866][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.851993][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.914727][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.918761][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.932434][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.937654][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.966349][ T5959] Bluetooth: hci0: command tx timeout [ 124.967077][ T5962] Bluetooth: hci1: command tx timeout [ 124.969012][ T5959] Bluetooth: hci2: command tx timeout [ 125.010120][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.047366][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.116401][ T5959] Bluetooth: hci3: command tx timeout [ 125.167062][ T5955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.254205][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.359102][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.434143][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.454300][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.465111][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.469077][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.571270][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.659900][ T5963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.670038][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.875405][ T5963] veth0_vlan: entered promiscuous mode [ 125.885264][ T5951] veth0_vlan: entered promiscuous mode [ 125.945458][ T5963] veth1_vlan: entered promiscuous mode [ 125.967869][ T5951] veth1_vlan: entered promiscuous mode [ 125.998666][ T5955] veth0_vlan: entered promiscuous mode [ 126.067649][ T5951] veth0_macvtap: entered promiscuous mode [ 126.087164][ T5955] veth1_vlan: entered promiscuous mode [ 126.098545][ T5951] veth1_macvtap: entered promiscuous mode [ 126.109232][ T5963] veth0_macvtap: entered promiscuous mode [ 126.124022][ T5963] veth1_macvtap: entered promiscuous mode [ 126.181781][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.225314][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.247502][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.295606][ T5951] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.300841][ T5951] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.310862][ T5951] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.323301][ T5951] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.348679][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.435556][ T5955] veth0_macvtap: entered promiscuous mode [ 126.444689][ T5955] veth1_macvtap: entered promiscuous mode [ 126.486784][ T5956] veth0_vlan: entered promiscuous mode [ 126.508141][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.547646][ T5963] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.558107][ T5963] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.567370][ T5963] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.574534][ T5963] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.623476][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.692089][ T5956] veth1_vlan: entered promiscuous mode [ 126.865093][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.879244][ T5955] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.885568][ T5955] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.890135][ T5955] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.893295][ T5955] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.935100][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.941553][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.967530][ T5956] veth0_macvtap: entered promiscuous mode [ 127.022842][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.027154][ T5956] veth1_macvtap: entered promiscuous mode [ 127.044809][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.159719][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.164716][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.212202][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.288546][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.292870][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.293423][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.381410][ T5956] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.401385][ T5956] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.406810][ T5956] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.424517][ T5956] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.477253][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.502401][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.578194][ T5951] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 127.641643][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.647307][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.864177][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.871585][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.008521][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.011800][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.334216][ T6051] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.632976][ T6056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5'. [ 128.633134][ T6061] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8'. [ 128.651940][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'. [ 129.296541][ T43] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 129.489049][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 129.497953][ T43] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 129.503976][ T43] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 129.531072][ T43] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 129.552356][ T41] audit: type=1326 audit(1750726492.905:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.1.17" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 129.555003][ T43] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.611358][ T41] audit: type=1326 audit(1750726492.935:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.1.17" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 129.613462][ T43] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.653318][ T43] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.657260][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.691297][ T841] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 129.942769][ T6092] smc: net device bond0 applied user defined pnetid SYZ2 [ 129.954468][ T43] usb 7-1: GET_CAPABILITIES returned 0 [ 129.968080][ T6092] smc: net device bond0 erased user defined pnetid SYZ2 [ 129.975969][ T841] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 129.987346][ T43] usbtmc 7-1:16.0: can't read capabilities [ 130.057648][ T841] usb 5-1: config 0 has no interface number 0 [ 130.060148][ T841] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 130.069204][ T841] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 130.098950][ T841] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 130.107354][ T841] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 130.115520][ T841] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 130.123281][ T841] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 130.132982][ T841] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 130.139558][ T841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.149440][ T841] usb 5-1: config 0 descriptor?? [ 130.155721][ T6083] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 130.161375][ T6083] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 130.172694][ T841] ldusb 5-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 130.174017][ T43] usb 7-1: USB disconnect, device number 2 [ 130.359890][ T6045] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 130.376199][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 130.444335][ T841] usb 5-1: USB disconnect, device number 2 [ 130.464306][ T841] ldusb 5-1:0.55: LD USB Device #1 now disconnected [ 130.559707][ T6045] usb 8-1: Using ep0 maxpacket: 8 [ 130.574332][ T6045] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 130.587810][ T6045] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.597754][ T10] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 130.610691][ T6045] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 130.635446][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.644705][ T6045] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.644734][ T6045] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.644769][ T6045] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 130.644787][ T6045] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.766388][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.782973][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 130.810242][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.821454][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.835507][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 130.857323][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.861928][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.883098][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 130.884084][ T6045] usb 8-1: GET_CAPABILITIES returned 0 [ 130.902430][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.902481][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.902508][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 130.904192][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.904236][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.904259][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 130.906470][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.906518][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.906543][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 130.909574][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.961348][ T6045] usbtmc 8-1:16.0: can't read capabilities [ 130.964679][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.043295][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 131.050422][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.054178][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.061474][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 131.067692][ T10] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 131.073337][ T10] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 131.077307][ T10] usb 6-1: Product: syz [ 131.080034][ T10] usb 6-1: Manufacturer: syz [ 131.081883][ T10] usb 6-1: SerialNumber: syz [ 131.086704][ T10] usb 6-1: config 0 descriptor?? [ 131.111925][ T10] yurex 6-1:0.0: USB YUREX device now attached to Yurex #1 [ 131.166829][ T6045] usb 8-1: USB disconnect, device number 2 [ 132.026267][ T6125] sctp: [Deprecated]: syz.2.33 (pid 6125) Use of int in max_burst socket option deprecated. [ 132.026267][ T6125] Use struct sctp_assoc_value instead [ 132.109513][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 132.335977][ T6130] syz.0.36: attempt to access beyond end of device [ 132.335977][ T6130] loop0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 132.391666][ T6130] gfs2: error -5 reading superblock [ 132.946150][ T6045] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 133.095795][ T6147] capability: warning: `syz.0.44' uses deprecated v2 capabilities in a way that may be insecure [ 133.179928][ T6045] usb 8-1: Using ep0 maxpacket: 16 [ 133.186861][ T6045] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.194426][ T6045] usb 8-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 133.206535][ T43] usb 6-1: USB disconnect, device number 2 [ 133.211466][ T6045] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.213800][ T6045] usb 8-1: config 0 descriptor?? [ 133.241279][ T43] yurex 6-1:0.0: USB YUREX #1 now disconnected [ 133.449263][ T6151] sctp: [Deprecated]: syz.1.46 (pid 6151) Use of int in max_burst socket option deprecated. [ 133.449263][ T6151] Use struct sctp_assoc_value instead [ 133.538166][ T839] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 133.675233][ T6045] input: HID 041e:3100 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:041E:3100.0002/input/input5 [ 133.733448][ T839] usb 5-1: Using ep0 maxpacket: 8 [ 133.741870][ T839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.783550][ T839] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 133.801706][ T839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.861901][ T839] usb 5-1: config 0 descriptor?? [ 133.883749][ T6045] creative-sb0540 0003:041E:3100.0002: input,hidraw1: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.3-1/input0 [ 133.920935][ T6045] usb 8-1: USB disconnect, device number 3 [ 133.936330][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 134.019136][ T6161] fido_id[6161]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/8-1/report_descriptor': No such file or directory [ 134.111203][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 134.112467][ T839] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 134.127809][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 134.161993][ T10] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 134.174071][ T10] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 134.181227][ T10] usb 6-1: Product: syz [ 134.183473][ T10] usb 6-1: Manufacturer: syz [ 134.186625][ T10] usb 6-1: SerialNumber: syz [ 134.209415][ T10] usb 6-1: config 0 descriptor?? [ 134.212626][ T6159] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 134.217785][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 134.220954][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 134.496734][ T6164] block device autoloading is deprecated and will be removed. [ 134.540660][ T10] usb 6-1: USB disconnect, device number 3 [ 134.593512][ T6025] usb 5-1: USB disconnect, device number 3 [ 134.952939][ T6168] netlink: 32 bytes leftover after parsing attributes in process `syz.3.52'. [ 134.962761][ T6168] Zero length message leads to an empty skb [ 135.404028][ T35] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 135.510452][ T6183] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 135.599205][ T35] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 135.680154][ T6186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.53'. [ 135.696768][ T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.702209][ T35] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 135.708467][ T35] usb 8-1: config 0 interface 0 has no altsetting 0 [ 135.723374][ T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.729048][ T35] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 135.735637][ T35] usb 8-1: config 0 interface 0 has no altsetting 0 [ 135.830158][ T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.854969][ T35] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 135.860621][ T35] usb 8-1: config 0 interface 0 has no altsetting 0 [ 135.879215][ T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.885510][ T35] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 135.891525][ T35] usb 8-1: config 0 interface 0 has no altsetting 0 [ 135.896824][ T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.901523][ T35] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 135.906594][ T35] usb 8-1: config 0 interface 0 has no altsetting 0 [ 135.982886][ T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.990045][ T35] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 135.994687][ T35] usb 8-1: config 0 interface 0 has no altsetting 0 [ 136.035917][ T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.047714][ T35] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.055978][ T35] usb 8-1: config 0 interface 0 has no altsetting 0 [ 136.069785][ T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.074355][ T35] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.128464][ T35] usb 8-1: config 0 interface 0 has no altsetting 0 [ 136.142717][ T35] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 136.146935][ T35] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 136.170396][ T35] usb 8-1: Product: syz [ 136.172293][ T35] usb 8-1: Manufacturer: syz [ 136.174144][ T35] usb 8-1: SerialNumber: syz [ 136.212116][ T6025] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 136.218773][ T35] usb 8-1: config 0 descriptor?? [ 136.272769][ T35] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 136.387235][ T6025] usb 6-1: Using ep0 maxpacket: 8 [ 136.401231][ T6025] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.410570][ T6025] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 136.414417][ T6025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.432829][ T6025] usb 6-1: config 0 descriptor?? [ 136.740035][ T6025] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 138.182273][ T35] usb 6-1: USB disconnect, device number 4 [ 138.248526][ T30] usb 8-1: USB disconnect, device number 4 [ 138.270086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 138.302934][ T30] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 138.456118][ T6223] syz.2.68 uses obsolete (PF_INET,SOCK_PACKET) [ 138.542611][ T6224] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 138.546906][ T6224] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 138.553651][ T6224] vhci_hcd vhci_hcd.0: Device attached [ 138.798869][ T6045] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 139.152091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 139.415389][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f668000: rx timeout, send abort [ 139.430763][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f668000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 139.574279][ T6247] netlink: 136 bytes leftover after parsing attributes in process `syz.2.78'. [ 139.656587][ T6247] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 140.195340][ T6259] vlan2: entered allmulticast mode [ 140.216475][ T6259] bond0: entered allmulticast mode [ 140.219418][ T6259] bond_slave_0: entered allmulticast mode [ 140.239095][ T6259] bond_slave_1: entered allmulticast mode [ 140.794106][ T6227] vhci_hcd: connection reset by peer [ 140.803412][ T12] vhci_hcd: stop threads [ 140.806274][ T12] vhci_hcd: release socket [ 140.810177][ T12] vhci_hcd: disconnect device [ 141.263934][ T6268] sp0: Synchronizing with TNC [ 141.460124][ T6260] [U] č` [ 141.720315][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 143.587484][ T6318] fuse: Bad value for 'fd' [ 144.140043][ T6323] netlink: 'syz.3.102': attribute type 3 has an invalid length. [ 144.176181][ T6045] vhci_hcd: vhci_device speed not set [ 144.603972][ T6332] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.850718][ T6336] Bluetooth: MGMT ver 1.23 [ 145.262998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 145.978212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 146.144754][ T6348] fuse: Bad value for 'fd' [ 146.198994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 146.798084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 147.512469][ T6370] veth0: entered promiscuous mode [ 147.515153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 147.542365][ T6367] veth0: left promiscuous mode [ 147.599697][ T6368] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 147.603582][ T6368] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 147.624501][ T6368] vhci_hcd vhci_hcd.0: Device attached [ 147.924137][ T6045] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 148.255635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 148.543656][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024178400: rx timeout, send abort [ 148.550731][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888024178400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 148.619596][ T6382] Bluetooth: hci0: unsupported parameter 2048 [ 148.635675][ T6382] Bluetooth: hci0: unsupported parameter 2048 [ 148.706215][ T6383] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 148.723628][ T6383] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.743405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 148.749605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 148.923343][ T6393] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.137615][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.140873][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 149.296703][ T6383] vhci_hcd vhci_hcd.0: Device attached [ 149.557059][ T6018] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 149.716469][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880206c7c00: rx timeout, send abort [ 149.720280][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880206c7c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 150.166324][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.126'. [ 150.303409][ T6369] vhci_hcd: connection reset by peer [ 150.314247][ T12] vhci_hcd: stop threads [ 150.316993][ T12] vhci_hcd: release socket [ 150.319814][ T12] vhci_hcd: disconnect device [ 150.964526][ T6404] fuse: Bad value for 'fd' [ 151.743797][ T6384] vhci_hcd: connection reset by peer [ 151.769355][ T50] vhci_hcd: stop threads [ 151.774122][ T50] vhci_hcd: release socket [ 151.794835][ T50] vhci_hcd: disconnect device [ 152.084028][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 152.704617][ T6418] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 152.814839][ T6421] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 152.928562][ T6426] syzkaller1: entered promiscuous mode [ 152.931748][ T6426] syzkaller1: entered allmulticast mode [ 153.032679][ T6045] vhci_hcd: vhci_device speed not set [ 153.315813][ T6442] netlink: 32 bytes leftover after parsing attributes in process `syz.0.141'. [ 153.501212][ T6446] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 153.505001][ T6446] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 153.518759][ T6446] vhci_hcd vhci_hcd.0: Device attached [ 153.798522][ T57] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 153.893468][ T6456] bridge0: port 3(erspan0) entered blocking state [ 153.911767][ T6456] bridge0: port 3(erspan0) entered disabled state [ 153.930200][ T6456] erspan0: entered allmulticast mode [ 153.939537][ T6456] erspan0: entered promiscuous mode [ 153.962995][ T6456] bridge0: port 3(erspan0) entered blocking state [ 153.976980][ T6456] bridge0: port 3(erspan0) entered forwarding state [ 153.987734][ T6459] erspan0: left allmulticast mode [ 153.995285][ T6459] erspan0: left promiscuous mode [ 153.998833][ T6459] bridge0: port 3(erspan0) entered disabled state [ 154.064521][ T6462] bridge0: entered promiscuous mode [ 154.117646][ T6462] batman_adv: batadv0: Adding interface: macsec1 [ 154.120403][ T6462] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.153590][ T6462] batman_adv: batadv0: Interface activated: macsec1 [ 154.472036][ C1] vcan0: j1939_tp_rxtimer: 0xffff888013afa400: rx timeout, send abort [ 154.478036][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888013afa400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 154.498805][ T6466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.506357][ T6466] bridge0: port 3(bond1) entered blocking state [ 154.522795][ T6466] bridge0: port 3(bond1) entered disabled state [ 154.526151][ T6466] bond1: entered allmulticast mode [ 154.544546][ T6466] bond1: entered promiscuous mode [ 154.549455][ T6466] bridge0: port 3(bond1) entered blocking state [ 154.554122][ T6466] bridge0: port 3(bond1) entered forwarding state [ 154.720645][ T6018] vhci_hcd: vhci_device speed not set [ 154.945242][ T50] bridge0: port 3(bond1) entered disabled state [ 155.779883][ T6485] fuse: Bad value for 'fd' [ 156.846125][ T6449] vhci_hcd: connection reset by peer [ 156.849998][ T50] vhci_hcd: stop threads [ 156.851745][ T50] vhci_hcd: release socket [ 156.854260][ T50] vhci_hcd: disconnect device [ 157.277645][ T6498] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 157.414374][ T6492] sp0: Synchronizing with TNC [ 157.494343][ T6502] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 157.496971][ T6502] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 157.500508][ T6502] vhci_hcd vhci_hcd.0: Device attached [ 157.577041][ T6487] [U] č` [ 157.781292][ T6018] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 157.987512][ T6025] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 158.180710][ T6025] usb 8-1: Using ep0 maxpacket: 32 [ 158.218118][ T6025] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 158.231364][ T6025] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 158.234980][ T6025] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 158.246338][ T6025] usb 8-1: Product: syz [ 158.249210][ T6025] usb 8-1: Manufacturer: syz [ 158.329905][ T6025] usb 8-1: SerialNumber: syz [ 158.348914][ T6025] usb 8-1: config 0 descriptor?? [ 158.352220][ T6506] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 158.372743][ T6025] hub 8-1:0.0: bad descriptor, ignoring hub [ 158.393173][ T6025] hub 8-1:0.0: probe with driver hub failed with error -5 [ 158.614023][ C2] vcan0: j1939_tp_rxtimer: 0xffff88805fc28400: rx timeout, send abort [ 158.621164][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88805fc28400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 158.918573][ T57] vhci_hcd: vhci_device speed not set [ 158.947852][ T6518] fuse: Bad value for 'fd' [ 159.157109][ T6503] vhci_hcd: connection reset by peer [ 159.160070][ T14] vhci_hcd: stop threads [ 159.162617][ T14] vhci_hcd: release socket [ 159.167599][ T14] vhci_hcd: disconnect device [ 162.191204][ T6570] netlink: 44 bytes leftover after parsing attributes in process `syz.1.185'. [ 162.234643][ T6570] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.242639][ T6570] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.451775][ T839] usb 8-1: USB disconnect, device number 5 [ 162.629474][ T6579] syzkaller1: entered promiscuous mode [ 162.631999][ T6579] syzkaller1: entered allmulticast mode [ 162.886391][ T6018] vhci_hcd: vhci_device speed not set [ 163.407412][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 164.506308][ T35] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 164.669302][ T35] usb 6-1: config 5 has an invalid interface number: 244 but max is 0 [ 164.695441][ T35] usb 6-1: config 5 has no interface number 0 [ 164.717596][ T35] usb 6-1: New USB device found, idVendor=16d6, idProduct=0001, bcdDevice=b2.cd [ 164.721562][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.725197][ T35] usb 6-1: Product: syz [ 164.756703][ T35] usb 6-1: Manufacturer: syz [ 164.759133][ T35] usb 6-1: SerialNumber: syz [ 164.995970][ T35] cp210x 6-1:5.244: cp210x converter detected [ 165.018078][ T35] cp210x 6-1:5.244: failed to get vendor val 0x370b size 1: -71 [ 165.055590][ T35] cp210x 6-1:5.244: querying part number failed [ 165.077628][ T35] usb 6-1: cp210x converter now attached to ttyUSB0 [ 165.085534][ T35] usb 6-1: USB disconnect, device number 5 [ 165.114635][ T6633] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 165.122588][ T6633] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 165.131457][ T6633] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 165.135275][ T6633] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 165.140317][ T6633] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 165.145319][ T6633] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 165.150475][ T6633] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 165.154890][ T6633] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 165.161217][ T6633] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 165.166599][ T6633] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 165.184380][ T35] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 165.193705][ T35] cp210x 6-1:5.244: device disconnected [ 166.034944][ C3] vkms_vblank_simulate: vblank timer overrun [ 166.287427][ C3] vkms_vblank_simulate: vblank timer overrun [ 166.333190][ C3] vkms_vblank_simulate: vblank timer overrun [ 166.374226][ T6018] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 166.696115][ T6018] usb 5-1: Using ep0 maxpacket: 32 [ 166.712209][ T6018] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.739566][ T6018] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.760260][ T6018] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 166.764915][ T6018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.835059][ T6018] usb 5-1: config 0 descriptor?? [ 166.902365][ C3] vkms_vblank_simulate: vblank timer overrun [ 167.145394][ T6666] sp0: Synchronizing with TNC [ 167.173615][ T6668] netlink: 'syz.3.219': attribute type 4 has an invalid length. [ 167.209818][ T6668] netlink: 'syz.3.219': attribute type 4 has an invalid length. [ 167.267823][ C3] vkms_vblank_simulate: vblank timer overrun [ 167.319602][ C3] vkms_vblank_simulate: vblank timer overrun [ 167.337414][ T6659] [U] č` [ 167.455597][ C3] vkms_vblank_simulate: vblank timer overrun [ 167.518439][ C3] vkms_vblank_simulate: vblank timer overrun [ 167.528544][ T6018] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 167.655739][ T840] usb 5-1: USB disconnect, device number 4 [ 168.544316][ T6694] sp0: Synchronizing with TNC [ 168.826208][ T6703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.224'. [ 168.835209][ T6684] [U] č` [ 169.068254][ C3] vkms_vblank_simulate: vblank timer overrun [ 169.218582][ C3] vkms_vblank_simulate: vblank timer overrun [ 169.628254][ C3] vkms_vblank_simulate: vblank timer overrun [ 169.682295][ C3] vkms_vblank_simulate: vblank timer overrun [ 169.782322][ C3] vkms_vblank_simulate: vblank timer overrun [ 169.931453][ C3] vkms_vblank_simulate: vblank timer overrun [ 170.031361][ C3] vkms_vblank_simulate: vblank timer overrun [ 170.194006][ T6727] input: syz1 as /devices/virtual/input/input6 [ 170.273196][ C3] vkms_vblank_simulate: vblank timer overrun [ 170.585354][ T6735] net_ratelimit: 3319 callbacks suppressed [ 170.585375][ T6735] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 171.710544][ T6758] netlink: 'syz.1.243': attribute type 3 has an invalid length. [ 171.799549][ C3] vkms_vblank_simulate: vblank timer overrun [ 172.955814][ T6793] syz_tun: entered allmulticast mode [ 172.998317][ T6792] syz_tun: left allmulticast mode [ 173.362447][ T841] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 173.608868][ T841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 173.627277][ T841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 173.642351][ T841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 173.672305][ T841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 173.687774][ T841] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 173.693282][ T841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.699392][ T841] usb 6-1: Product: syz [ 173.730166][ T841] usb 6-1: Manufacturer: syz [ 173.733758][ T841] usb 6-1: SerialNumber: syz [ 173.744377][ T841] usb 6-1: config 0 descriptor?? [ 173.982496][ T841] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 174.216333][ T6809] netlink: 'syz.2.265': attribute type 3 has an invalid length. [ 174.444197][ T841] usb 6-1: USB disconnect, device number 6 [ 174.530946][ T43] hid-generic 0005:16BF:5505.0004: unknown main item tag 0x0 [ 174.549109][ T43] hid-generic 0005:16BF:5505.0004: hidraw1: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 174.668425][ T6817] fido_id[6817]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 176.015668][ T6840] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 176.020632][ T6840] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 176.026845][ T6840] vhci_hcd vhci_hcd.0: Device attached [ 176.332004][ T6045] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 176.460257][ T5959] Bluetooth: hci1: adv larger than maximum supported [ 176.460313][ T5959] Bluetooth: hci1: Malformed LE Event: 0x0d [ 177.096473][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f66a800: rx timeout, send abort [ 177.100871][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f66a800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 177.526342][ T6863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.285'. [ 177.532265][ T6863] netlink: 204 bytes leftover after parsing attributes in process `syz.3.285'. [ 177.539801][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'. [ 178.424239][ T6841] vhci_hcd: connection reset by peer [ 178.477994][ T1147] vhci_hcd: stop threads [ 178.483153][ T1147] vhci_hcd: release socket [ 178.516236][ T1147] vhci_hcd: disconnect device [ 180.161284][ T6903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.294'. [ 181.025086][ T6902] 9pnet_fd: p9_fd_create_tcp (6902): problem connecting socket to 127.0.0.1 [ 181.498926][ T6045] vhci_hcd: vhci_device speed not set [ 182.063662][ T6930] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 182.075449][ T6930] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.108562][ T6927] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 182.111046][ T6927] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.114562][ T6927] vhci_hcd vhci_hcd.0: Device attached [ 182.207187][ T6930] vhci_hcd vhci_hcd.0: Device attached [ 182.486644][ T6018] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 182.577066][ T57] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 182.849224][ T35] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 183.120572][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cd02800: rx timeout, send abort [ 183.126268][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cd02800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 183.558718][ T6938] bridge_slave_1 (unregistering): left allmulticast mode [ 183.561890][ T6938] bridge_slave_1 (unregistering): left promiscuous mode [ 183.582684][ T6938] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.027401][ T6943] netlink: 'syz.0.307': attribute type 3 has an invalid length. [ 184.166399][ T35] usb 6-1: unable to get BOS descriptor or descriptor too short [ 184.171115][ T35] usb 6-1: no configurations [ 184.174316][ T35] usb 6-1: can't read configurations, error -22 [ 184.335479][ T6931] vhci_hcd: connection reset by peer [ 184.363353][ T14] vhci_hcd: stop threads [ 184.406878][ T14] vhci_hcd: release socket [ 184.428751][ T14] vhci_hcd: disconnect device [ 184.586117][ T6932] vhci_hcd: connection reset by peer [ 184.606158][ T14] vhci_hcd: stop threads [ 184.610464][ T14] vhci_hcd: release socket [ 184.612502][ T14] vhci_hcd: disconnect device [ 185.396227][ T840] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 185.432388][ T6967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.313'. [ 185.611283][ T840] usb 8-1: Using ep0 maxpacket: 32 [ 185.637104][ T840] usb 8-1: unable to get BOS descriptor or descriptor too short [ 185.676541][ T840] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 185.681985][ T840] usb 8-1: can't read configurations, error -71 [ 186.176768][ T841] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 186.364244][ T6982] ======================================================= [ 186.364244][ T6982] WARNING: The mand mount option has been deprecated and [ 186.364244][ T6982] and is ignored by this kernel. Remove the mand [ 186.364244][ T6982] option from the mount to silence this warning. [ 186.364244][ T6982] ======================================================= [ 186.386868][ T841] usb 7-1: Using ep0 maxpacket: 8 [ 186.433727][ C2] vkms_vblank_simulate: vblank timer overrun [ 186.468204][ T841] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 186.472302][ T841] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.520817][ C2] vkms_vblank_simulate: vblank timer overrun [ 186.527373][ T841] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.531983][ T841] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.559375][ C2] vkms_vblank_simulate: vblank timer overrun [ 186.562658][ T841] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.588516][ C2] vkms_vblank_simulate: vblank timer overrun [ 186.592262][ T841] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 186.607906][ T841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.845363][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 186.888612][ T841] usb 7-1: usb_control_msg returned -32 [ 186.891615][ T841] usbtmc 7-1:16.0: can't read capabilities [ 187.289579][ C2] vkms_vblank_simulate: vblank timer overrun [ 187.349326][ T7000] usbtmc 7-1:16.0: stb usb_control_msg returned -32 [ 187.355022][ T839] usb 7-1: USB disconnect, device number 3 [ 187.399840][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.329'. [ 187.697390][ T841] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 187.866583][ T841] usb 6-1: Using ep0 maxpacket: 16 [ 187.901359][ T841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.920072][ T841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.930240][ T841] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 187.936255][ T841] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 187.940216][ T841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.946332][ T57] vhci_hcd: vhci_device speed not set [ 187.948900][ T6018] vhci_hcd: vhci_device speed not set [ 187.960586][ T841] usb 6-1: config 0 descriptor?? [ 188.409711][ T841] HID 045e:07da: Invalid code 65791 type 1 [ 188.425691][ T841] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:045E:07DA.0005/input/input7 [ 188.447868][ T841] microsoft 0003:045E:07DA.0005: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 188.635666][ T841] usb 6-1: USB disconnect, device number 9 [ 188.879237][ C2] vkms_vblank_simulate: vblank timer overrun [ 189.079241][ C2] vkms_vblank_simulate: vblank timer overrun [ 189.967293][ C2] vkms_vblank_simulate: vblank timer overrun [ 190.103899][ C2] vkms_vblank_simulate: vblank timer overrun [ 190.471891][ T7046] overlayfs: failed to decode file handle (len=10, type=78, flags=0, err=-22) [ 191.743802][ T7067] netlink: 'syz.3.347': attribute type 3 has an invalid length. [ 192.267274][ C2] vkms_vblank_simulate: vblank timer overrun [ 192.451786][ C2] vkms_vblank_simulate: vblank timer overrun [ 192.648505][ T6045] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 192.826155][ T6045] usb 5-1: Using ep0 maxpacket: 8 [ 192.849082][ T6045] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 192.864939][ T6045] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 192.874210][ T6045] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 192.901942][ T6045] usb 5-1: config 250 has no interface number 0 [ 192.912240][ T6045] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 192.934210][ T6045] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 192.996535][ T841] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 193.166153][ T841] usb 6-1: Using ep0 maxpacket: 32 [ 193.176152][ T6045] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 193.181770][ T841] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 193.184129][ T6045] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 193.228491][ T6045] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 193.235279][ C2] vkms_vblank_simulate: vblank timer overrun [ 193.235367][ T6045] usb 5-1: config 250 interface 228 has no altsetting 0 [ 193.262429][ T841] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 193.276061][ T841] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 193.298383][ T841] usb 6-1: Product: syz [ 193.319965][ T841] usb 6-1: Manufacturer: syz [ 193.322047][ T841] usb 6-1: SerialNumber: syz [ 193.491360][ C2] vkms_vblank_simulate: vblank timer overrun [ 193.788609][ T7101] Bluetooth: (null): Too short H5 packet [ 193.830031][ T841] usb 6-1: config 0 descriptor?? [ 193.849599][ T6045] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 193.854919][ T7084] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 193.870273][ T6045] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 193.875734][ T6045] usb 5-1: Product: syz [ 193.880910][ T6045] usb 5-1: SerialNumber: syz [ 193.918550][ T6045] hub 5-1:250.228: bad descriptor, ignoring hub [ 193.932312][ T6045] hub 5-1:250.228: probe with driver hub failed with error -5 [ 194.123452][ T6045] usblp 5-1:250.228: usblp1: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 194.482411][ T7107] netlink: 'syz.3.361': attribute type 3 has an invalid length. [ 194.823625][ T841] usb 6-1: USB disconnect, device number 10 [ 194.971282][ T840] usb 5-1: USB disconnect, device number 6 [ 194.990614][ T840] usblp1: removed [ 197.087706][ T7139] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 197.090948][ T7139] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 197.108640][ T7139] vhci_hcd vhci_hcd.0: Device attached [ 197.255573][ T841] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 197.339724][ T57] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 197.406192][ T841] usb 7-1: Using ep0 maxpacket: 32 [ 197.452172][ T841] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 197.488396][ T841] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 197.493277][ T841] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 197.495004][ T7145] netlink: 'syz.3.372': attribute type 3 has an invalid length. [ 197.511227][ T841] usb 7-1: Product: syz [ 197.511244][ T841] usb 7-1: Manufacturer: syz [ 197.511256][ T841] usb 7-1: SerialNumber: syz [ 197.526428][ T841] usb 7-1: config 0 descriptor?? [ 197.534048][ T7140] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 198.088564][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802417bc00: rx timeout, send abort [ 198.093264][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802417bc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 198.155560][ T7141] vhci_hcd: connection reset by peer [ 198.158243][ T1143] vhci_hcd: stop threads [ 198.159801][ T1143] vhci_hcd: release socket [ 198.162361][ T1143] vhci_hcd: disconnect device [ 198.446656][ T839] usb 7-1: USB disconnect, device number 4 [ 199.069898][ T7165] bridge0: port 3(syz_tun) entered blocking state [ 199.085160][ T7165] bridge0: port 3(syz_tun) entered disabled state [ 199.095789][ T7165] syz_tun: entered allmulticast mode [ 199.104099][ T7165] syz_tun: entered promiscuous mode [ 199.130432][ T7165] bridge0: port 3(syz_tun) entered blocking state [ 199.137021][ T7165] bridge0: port 3(syz_tun) entered forwarding state [ 199.286276][ T6045] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 199.906358][ T7180] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 200.224077][ T6045] usb 7-1: Using ep0 maxpacket: 32 [ 200.228105][ T6045] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.233524][ T6045] usb 7-1: config 0 has no interface number 0 [ 200.241638][ T6045] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 200.246221][ T6045] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.251553][ T6045] usb 7-1: Product: syz [ 200.254198][ T6045] usb 7-1: Manufacturer: syz [ 200.257994][ T6045] usb 7-1: SerialNumber: syz [ 200.264422][ T6045] usb 7-1: config 0 descriptor?? [ 200.273581][ T6045] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 200.284152][ T6045] usb 7-1: selecting invalid altsetting 1 [ 200.288865][ T6045] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 200.322545][ T6045] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 200.326651][ T6045] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 200.331118][ T6045] usb 7-1: media controller created [ 200.347909][ T7182] Bluetooth: hci0: unsupported parameter 4096 [ 200.350335][ T7182] Bluetooth: hci0: unsupported parameter 51 [ 200.353972][ T7182] Bluetooth: hci0: unsupported parameter 4096 [ 200.355622][ T6045] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.358335][ T7182] Bluetooth: hci0: unsupported parameter 51 [ 200.520353][ T7186] overlayfs: failed to decode file handle (len=10, type=78, flags=0, err=-22) [ 200.747023][ T6045] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 200.755182][ T6045] zl10353_read_register: readreg error (reg=127, ret==-71) [ 200.777321][ T7164] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 200.784329][ T6045] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 201.431156][ T6045] usb 7-1: USB disconnect, device number 5 [ 201.635277][ T7201] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 201.637925][ T7201] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 201.641922][ T7201] vhci_hcd vhci_hcd.0: Device attached [ 201.981230][ T41] audit: type=1326 audit(1750726565.355:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz.2.392" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x0 [ 202.706049][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805cf74c00: rx timeout, send abort [ 202.727874][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cf74c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 203.168079][ T7202] vhci_hcd: connection reset by peer [ 203.170738][ T14] vhci_hcd: stop threads [ 203.172650][ T14] vhci_hcd: release socket [ 203.193420][ T14] vhci_hcd: disconnect device [ 203.279440][ T57] vhci_hcd: vhci_device speed not set [ 203.476141][ T839] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 204.002285][ T839] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 204.006708][ T839] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 204.010998][ T839] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 204.014804][ T839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.042200][ T7223] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 204.049852][ T839] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 204.878641][ T839] usb 7-1: USB disconnect, device number 6 [ 204.949934][ T5997] udevd[5997]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.347890][ T7251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.404'. [ 207.474497][ T97] Bluetooth: hci4: Frame reassembly failed (-84) [ 207.536815][ T5960] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 208.358458][ T7291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.417'. [ 209.521289][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 210.386290][ T839] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 210.536466][ T839] usb 8-1: Using ep0 maxpacket: 32 [ 210.557013][ T839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.562437][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 210.582112][ T839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.582162][ T839] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 210.582182][ T839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.596696][ T839] usb 8-1: config 0 descriptor?? [ 210.630839][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.085168][ T839] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 211.307753][ T839] usb 8-1: USB disconnect, device number 8 [ 212.077730][ T42] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 212.279429][ T42] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.284152][ T42] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.302632][ T42] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.306502][ T10] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 212.363318][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.541156][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 212.548331][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.583339][ T10] usb 7-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 212.593376][ T42] usb 5-1: GET_CAPABILITIES returned 0 [ 212.615237][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.629159][ T10] usb 7-1: config 0 descriptor?? [ 212.651805][ T42] usbtmc 5-1:16.0: can't read capabilities [ 212.842613][ T42] usb 5-1: USB disconnect, device number 7 [ 213.093005][ T10] hid-generic 0003:04F3:0754.0007: failed to start in urb: -90 [ 213.128101][ T10] hid-generic 0003:04F3:0754.0007: hidraw1: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.2-1/input0 [ 213.788721][ T35] usb 7-1: USB disconnect, device number 7 [ 214.220063][ T7366] fuse: Bad value for 'fd' [ 214.710753][ T7371] netlink: 'syz.1.440': attribute type 3 has an invalid length. [ 215.158913][ T7380] syzkaller1: entered promiscuous mode [ 215.161839][ T7380] syzkaller1: entered allmulticast mode [ 215.763049][ T7391] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 215.766509][ T7391] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 215.779639][ T7391] vhci_hcd vhci_hcd.0: Device attached [ 216.017273][ T30] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 216.805055][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880232ddc00: rx timeout, send abort [ 216.823106][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880232ddc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 216.846503][ T7412] fuse: Bad value for 'fd' [ 217.120009][ T7416] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 218.222210][ T7393] vhci_hcd: connection reset by peer [ 218.239575][ T14] vhci_hcd: stop threads [ 218.241236][ T14] vhci_hcd: release socket [ 218.246276][ T14] vhci_hcd: disconnect device [ 218.493854][ T6160] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 218.861919][ T6160] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 218.887939][ T6160] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 218.892293][ T6160] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 218.906174][ T6160] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 218.930592][ T6160] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 218.937872][ T6160] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 218.965477][ T6160] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 218.983181][ T6160] usb 7-1: Product: syz [ 218.999449][ T6160] usb 7-1: Manufacturer: syz [ 219.067055][ T6160] cdc_wdm 7-1:1.0: skipping garbage [ 219.069741][ T6160] cdc_wdm 7-1:1.0: skipping garbage [ 219.094124][ T6160] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 219.102912][ T6160] cdc_wdm 7-1:1.0: Unknown control protocol [ 219.389945][ T57] usb 7-1: USB disconnect, device number 8 [ 219.405369][ T7430] cdc_wdm 7-1:1.0: Tx URB error: -19 [ 219.499807][ T7438] kvm: apic: phys broadcast and lowest prio [ 220.121256][ T7445] fuse: Bad value for 'fd' [ 221.117860][ T30] vhci_hcd: vhci_device speed not set [ 221.681218][ T7458] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 221.684101][ T7458] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 221.690025][ T7458] vhci_hcd vhci_hcd.0: Device attached [ 222.116145][ T30] usb 37-1: device descriptor read/64, error -110 [ 222.183076][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024179400: rx timeout, send abort [ 222.377477][ T30] usb 37-1: new low-speed USB device number 6 using vhci_hcd [ 222.691227][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024179400: abort rx timeout. Force session deactivation [ 222.795758][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802827f400: rx timeout, send abort [ 222.803194][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff88802827f400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 224.478679][ T7459] vhci_hcd: connection reset by peer [ 224.484129][ T1147] vhci_hcd: stop threads [ 224.490388][ T1147] vhci_hcd: release socket [ 224.492750][ T1147] vhci_hcd: disconnect device [ 224.665607][ T7466] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 224.673971][ T7466] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 224.680320][ T7466] vhci_hcd vhci_hcd.0: Device attached [ 224.738948][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.834935][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.940906][ T43] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 225.621698][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fc2ac00: rx timeout, send abort [ 225.632449][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805fc2ac00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 226.186857][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.375258][ T7490] 9pnet_virtio: no channels available for device syz [ 226.502902][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.032875][ T7477] vhci_hcd: connection reset by peer [ 227.037724][ T49] vhci_hcd: stop threads [ 227.039585][ T49] vhci_hcd: release socket [ 227.041570][ T49] vhci_hcd: disconnect device [ 227.106850][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.275279][ T7500] macvlan1: entered promiscuous mode [ 227.283524][ T7500] bond0: entered promiscuous mode [ 227.288889][ T7500] bond_slave_0: entered promiscuous mode [ 227.292419][ T7500] bond_slave_1: entered promiscuous mode [ 227.299068][ T7500] hsr1: entered allmulticast mode [ 227.303306][ T7500] macvlan1: entered allmulticast mode [ 227.307161][ T7500] veth1_vlan: entered allmulticast mode [ 227.310701][ T7500] bond0: entered allmulticast mode [ 227.313441][ T7500] bond_slave_0: entered allmulticast mode [ 227.316970][ T7500] bond_slave_1: entered allmulticast mode [ 227.416299][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.511088][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.515307][ T30] vhci_hcd: vhci_device speed not set [ 227.835930][ T7509] evm: overlay not supported [ 228.466155][ T7525] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 228.469444][ T7525] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 228.473084][ T7525] vhci_hcd vhci_hcd.0: Device attached [ 228.592272][ T7528] fuse: Bad value for 'fd' [ 228.700700][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.809392][ T30] usb 37-1: new low-speed USB device number 7 using vhci_hcd [ 229.446755][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025debc00: rx timeout, send abort [ 229.452854][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888025debc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 230.207708][ T7545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.490'. [ 230.268926][ T43] vhci_hcd: vhci_device speed not set [ 231.170690][ T7526] vhci_hcd: connection reset by peer [ 231.174371][ T14] vhci_hcd: stop threads [ 231.177080][ T14] vhci_hcd: release socket [ 231.179195][ T14] vhci_hcd: disconnect device [ 231.448633][ T7555] netlink: 14 bytes leftover after parsing attributes in process `syz.0.497'. [ 231.991372][ T7555] bond0 (unregistering): left promiscuous mode [ 231.999991][ T7555] bond_slave_0: left promiscuous mode [ 232.003656][ T7555] bond_slave_1: left promiscuous mode [ 232.031441][ T7555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.075561][ T7555] bond_slave_0: left allmulticast mode [ 232.154925][ T7555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.188350][ T7555] bond_slave_1: left allmulticast mode [ 232.194870][ T7555] bond0 (unregistering): Released all slaves [ 232.794015][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 233.107370][ T5959] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 233.117165][ T5959] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 233.125184][ T5959] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 233.132489][ T5959] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 233.139212][ T5959] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 233.591402][ T14] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.693763][ T7577] chnl_net:caif_netlink_parms(): no params data found [ 233.772194][ T14] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.005802][ T14] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.271716][ T14] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.312360][ T7577] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.315175][ T7577] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.319390][ T7577] bridge_slave_0: entered allmulticast mode [ 234.325402][ T7577] bridge_slave_0: entered promiscuous mode [ 234.332893][ T7577] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.338013][ T7577] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.342866][ T7577] bridge_slave_1: entered allmulticast mode [ 234.348410][ T7577] bridge_slave_1: entered promiscuous mode [ 234.528467][ T30] vhci_hcd: vhci_device speed not set [ 234.545572][ T7577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.690084][ T7577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.811825][ T7596] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 234.815063][ T7596] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 234.823020][ T7596] vhci_hcd vhci_hcd.0: Device attached [ 234.906855][ T7577] team0: Port device team_slave_0 added [ 234.941970][ T14] bridge_slave_1: left allmulticast mode [ 234.945458][ T14] bridge_slave_1: left promiscuous mode [ 234.979420][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.024426][ T14] bridge_slave_0: left allmulticast mode [ 235.042079][ T14] bridge_slave_0: left promiscuous mode [ 235.056613][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.141253][ T30] usb 37-1: device descriptor read/64, error -110 [ 235.211136][ T5959] Bluetooth: hci1: command tx timeout [ 235.663812][ T30] usb 37-1: new low-speed USB device number 8 using vhci_hcd [ 235.903139][ C1] vcan0: j1939_tp_rxtimer: 0xffff888042d2c400: rx timeout, send abort [ 235.913351][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888042d2c400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 236.015808][ T7609] netlink: 16 bytes leftover after parsing attributes in process `syz.2.507'. [ 236.159946][ T7606] fuse: Bad value for 'fd' [ 236.628479][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.680008][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.703921][ T14] bond0 (unregistering): Released all slaves [ 236.762487][ T7577] team0: Port device team_slave_1 added [ 237.291396][ T5959] Bluetooth: hci1: command tx timeout [ 237.340141][ T7597] vhci_hcd: connection reset by peer [ 237.363644][ T12] vhci_hcd: stop threads [ 237.365814][ T12] vhci_hcd: release socket [ 237.375096][ T12] vhci_hcd: disconnect device [ 237.900111][ T7577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.904425][ T7577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.947677][ T7577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.955634][ T7577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.966879][ T7577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.005342][ T7577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.104461][ T7577] hsr_slave_0: entered promiscuous mode [ 239.122324][ T7577] hsr_slave_1: entered promiscuous mode [ 239.145940][ T7577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.150887][ T7577] Cannot create hsr debugfs directory [ 239.214896][ T14] hsr_slave_0: left promiscuous mode [ 239.243187][ T14] hsr_slave_1: left promiscuous mode [ 239.255450][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.290601][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.316447][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.341175][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.467464][ T5959] Bluetooth: hci1: command tx timeout [ 239.469626][ T14] veth1_macvtap: left promiscuous mode [ 239.474128][ T14] veth0_macvtap: left promiscuous mode [ 239.478214][ T14] veth1_vlan: left promiscuous mode [ 239.482079][ T14] veth0_vlan: left promiscuous mode [ 239.680366][ T7635] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 239.693683][ T7635] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 239.700219][ T7635] vhci_hcd vhci_hcd.0: Device attached [ 240.616365][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880232db000: rx timeout, send abort [ 240.650841][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880232db000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 241.521065][ T5960] Bluetooth: hci1: command tx timeout [ 241.937848][ T7637] vhci_hcd: connection reset by peer [ 241.941888][ T97] vhci_hcd: stop threads [ 241.944222][ T97] vhci_hcd: release socket [ 241.980629][ T97] vhci_hcd: disconnect device [ 242.750393][ T30] vhci_hcd: vhci_device speed not set [ 243.050377][ T14] team0 (unregistering): Port device team_slave_1 removed [ 243.353650][ T5960] Bluetooth: hci2: command 0x0406 tx timeout [ 243.434463][ T14] team0 (unregistering): Port device team_slave_0 removed [ 246.979848][ T7577] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 247.024065][ T7577] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 247.045233][ T7577] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 247.093745][ T7577] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 247.390298][ T7718] batman_adv: batadv0: Adding interface: dummy0 [ 247.393730][ T7718] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.416867][ T7718] batman_adv: batadv0: Interface activated: dummy0 [ 247.439754][ T7718] batadv0: mtu less than device minimum [ 247.445528][ T7718] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.473377][ T7718] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.495495][ T7718] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.502539][ T7718] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.509383][ T7718] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.517787][ T7718] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.524071][ T7718] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.533052][ T7718] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.550829][ T7718] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 247.631370][ T7577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.683209][ T7577] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.707013][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.719525][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.772653][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.775827][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.340073][ T7733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.536'. [ 248.486811][ T7735] fuse: Unknown parameter '0xffffffffffffffff0000Me 0004µ000' [ 248.620911][ T7577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.476701][ T7758] binder: 7757:7758 ioctl c0306201 80000640 returned -22 [ 249.738449][ T7766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.538'. [ 250.220163][ T7577] veth0_vlan: entered promiscuous mode [ 250.247520][ T7577] veth1_vlan: entered promiscuous mode [ 250.388576][ T7577] veth0_macvtap: entered promiscuous mode [ 250.423465][ T7577] veth1_macvtap: entered promiscuous mode [ 250.510658][ T7577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.610788][ T7577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.663298][ T7577] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.671445][ T7577] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.673167][ T7784] orangefs_devreq_open: device cannot be opened in blocking mode [ 250.679641][ T7577] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.711189][ T7577] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.046779][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.127348][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.183091][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.275042][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.378278][ T7865] batman_adv: batadv0: Adding interface: dummy0 [ 254.381681][ T7865] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.406415][ T7865] batman_adv: batadv0: Interface activated: dummy0 [ 254.443054][ T7865] net_ratelimit: 10 callbacks suppressed [ 254.443072][ T7865] batadv0: mtu less than device minimum [ 254.474447][ T7865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 254.497350][ T7865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 254.519798][ T7865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 254.537326][ T7865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 254.553275][ T7865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 254.565292][ T7865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 254.574447][ T7865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 254.583055][ T7865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 254.591107][ T7865] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 255.185902][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'. [ 255.191879][ T49] bond0: (slave bond_slave_0): interface is now down [ 255.218298][ T49] bond0: (slave bond_slave_1): interface is now down [ 255.251185][ T7877] netlink: 'syz.1.568': attribute type 10 has an invalid length. [ 255.304390][ T7877] erspan0: entered promiscuous mode [ 255.348708][ T7877] bond0: (slave erspan0): no link monitoring support [ 255.373613][ T7877] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 256.698463][ T7895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.573'. [ 256.763375][ T1147] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.109385][ T1147] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.133487][ T12] bond0: (slave bond_slave_0): interface is now down [ 257.182981][ T12] bond0: (slave bond_slave_1): interface is now down [ 257.528603][ T1147] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.612311][ T5960] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.632793][ T5960] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.644892][ T5960] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.686621][ T5960] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.732738][ T5960] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.790125][ T1147] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.538377][ T7926] binder: 7924:7926 ioctl c0306201 800003c0 returned -14 [ 258.831954][ T1147] bridge_slave_1: left allmulticast mode [ 258.839573][ T1147] bridge_slave_1: left promiscuous mode [ 258.844121][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.875700][ T1147] bridge_slave_0: left allmulticast mode [ 258.882163][ T1147] bridge_slave_0: left promiscuous mode [ 258.888699][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.123482][ T12] bond0: (slave bond_slave_0): interface is now down [ 259.126668][ T12] bond0: (slave bond_slave_1): interface is now down [ 259.129884][ T12] bond0: (slave erspan0): interface is now down [ 259.844946][ T5960] Bluetooth: hci1: command tx timeout [ 260.095137][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.161015][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.211838][ T1147] bond0 (unregistering): Released all slaves [ 261.108184][ T1143] bond0: (slave bond_slave_0): interface is now down [ 261.234883][ T1143] bond0: (slave bond_slave_1): interface is now down [ 261.239081][ T1143] bond0: (slave erspan0): interface is now down [ 261.264117][ T7956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.588'. [ 261.534277][ T7912] chnl_net:caif_netlink_parms(): no params data found [ 261.913932][ T5960] Bluetooth: hci1: command tx timeout [ 262.641451][ T7978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.590'. [ 262.942901][ T42] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 262.984631][ T7912] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.991914][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.995378][ T7912] bridge_slave_0: entered allmulticast mode [ 263.041161][ T7912] bridge_slave_0: entered promiscuous mode [ 263.050143][ T7912] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.072860][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.086149][ T7912] bridge_slave_1: entered allmulticast mode [ 263.095159][ T7912] bridge_slave_1: entered promiscuous mode [ 263.108824][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 263.120108][ T49] bond0: (slave bond_slave_0): interface is now down [ 263.156673][ T49] bond0: (slave bond_slave_1): interface is now down [ 263.166300][ T49] bond0: (slave erspan0): interface is now down [ 263.196595][ T42] usb 5-1: config 0 has no interfaces? [ 263.211255][ T42] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.233725][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.233792][ T1147] hsr_slave_0: left promiscuous mode [ 263.245378][ T42] usb 5-1: Product: syz [ 263.273350][ T1147] hsr_slave_1: left promiscuous mode [ 263.275122][ T42] usb 5-1: Manufacturer: syz [ 263.283471][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.283502][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.317103][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.319930][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.336854][ T42] usb 5-1: SerialNumber: syz [ 263.340852][ T42] usb 5-1: config 0 descriptor?? [ 263.455305][ T1147] veth1_macvtap: left promiscuous mode [ 263.478360][ T1147] veth0_macvtap: left promiscuous mode [ 263.482161][ T1147] veth1_vlan: left promiscuous mode [ 263.487395][ T1147] veth0_vlan: left promiscuous mode [ 263.603984][ T42] usb 5-1: USB disconnect, device number 8 [ 263.986569][ T5960] Bluetooth: hci1: command tx timeout [ 264.586310][ T57] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 264.756918][ T57] usb 5-1: Using ep0 maxpacket: 32 [ 264.764868][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.775447][ T57] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 264.812269][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.830347][ T57] usb 5-1: config 0 descriptor?? [ 264.844330][ T57] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 265.111116][ T49] bond0: (slave bond_slave_0): interface is now down [ 265.114644][ T49] bond0: (slave bond_slave_1): interface is now down [ 265.127565][ T49] bond0: (slave erspan0): interface is now down [ 266.066321][ T5960] Bluetooth: hci1: command tx timeout [ 266.242079][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 266.675739][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 267.034576][ T50] bond0: (slave bond_slave_0): interface is now down [ 267.040320][ T50] bond0: (slave bond_slave_1): interface is now down [ 267.052421][ T50] bond0: (slave erspan0): interface is now down [ 267.349843][ T42] usb 5-1: USB disconnect, device number 9 [ 268.982976][ T14] bond0: (slave bond_slave_0): interface is now down [ 268.986946][ T14] bond0: (slave bond_slave_1): interface is now down [ 268.990875][ T14] bond0: (slave erspan0): interface is now down [ 269.313995][ T7912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.381668][ T7912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.759145][ T7912] team0: Port device team_slave_0 added [ 269.777690][ T7912] team0: Port device team_slave_1 added [ 270.081729][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.101209][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.164504][ T7912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.197718][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.212199][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.275281][ T7912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.709641][ T7912] hsr_slave_0: entered promiscuous mode [ 270.726825][ T7912] hsr_slave_1: entered promiscuous mode [ 270.732715][ T7912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.801802][ T7912] Cannot create hsr debugfs directory [ 270.913430][ T1141] bond0: (slave bond_slave_0): interface is now down [ 270.927143][ T1141] bond0: (slave bond_slave_1): interface is now down [ 270.930775][ T1141] bond0: (slave erspan0): interface is now down [ 271.564343][ T7912] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 271.601314][ T7912] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.676634][ T7912] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.694138][ T7912] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 271.943487][ T7912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.007558][ T7912] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.013084][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 272.022975][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.058743][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.075720][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.101100][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.107238][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.260184][ T7912] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.537446][ T7912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.887245][ T49] bond0: (slave bond_slave_0): interface is now down [ 272.890544][ T49] bond0: (slave bond_slave_1): interface is now down [ 272.894494][ T49] bond0: (slave erspan0): interface is now down [ 272.908344][ T49] bond0: now running without any active interface! [ 273.197763][ T8097] netlink: 16 bytes leftover after parsing attributes in process `syz.1.607'. [ 273.504232][ T7912] veth0_vlan: entered promiscuous mode [ 273.556285][ T8099] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 273.564534][ T7912] veth1_vlan: entered promiscuous mode [ 273.902150][ T7912] veth0_macvtap: entered promiscuous mode [ 273.921495][ T7912] veth1_macvtap: entered promiscuous mode [ 274.091924][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.117724][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.165110][ T7912] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.181180][ T7912] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.197941][ T7912] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.218239][ T7912] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.526537][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.529333][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.657752][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.685415][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 syzkaller syzkaller login: [ 275.396730][ T8137] netlink: 32 bytes leftover after parsing attributes in process `syz.5.577'. [ 276.326884][ T8135] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 276.331988][ T8135] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 276.337393][ T8135] vhci_hcd vhci_hcd.0: Device attached [ 276.826398][ C3] vkms_vblank_simulate: vblank timer overrun [ 276.950550][ C3] vkms_vblank_simulate: vblank timer overrun [ 277.057314][ T6045] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 277.061847][ C3] vkms_vblank_simulate: vblank timer overrun [ 277.229909][ T8191] bridge1: entered allmulticast mode [ 277.233216][ T8193] netlink: 16 bytes leftover after parsing attributes in process `syz.5.622'. [ 277.294503][ C3] vkms_vblank_simulate: vblank timer overrun [ 277.545317][ C3] vkms_vblank_simulate: vblank timer overrun [ 278.095919][ T8220] Bluetooth: (null): Invalid header checksum [ 278.422412][ C3] vkms_vblank_simulate: vblank timer overrun [ 278.475810][ T8159] vhci_hcd: connection reset by peer [ 278.483503][ T41] audit: type=1326 audit(1750726641.855:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8224 comm="syz.5.629" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x0 [ 278.533386][ T1147] vhci_hcd: stop threads [ 278.544127][ T1147] vhci_hcd: release socket [ 278.557645][ T1147] vhci_hcd: disconnect device [ 280.117947][ T8241] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 280.120484][ T8241] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 280.124118][ T8241] vhci_hcd vhci_hcd.0: Device attached [ 281.690808][ T8281] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 89f1, magic 89 != 6b] [ 282.850234][ T8261] vhci_hcd: connection reset by peer [ 282.873012][ T1184] vhci_hcd: stop threads [ 282.874838][ T1184] vhci_hcd: release socket [ 282.877078][ T1184] vhci_hcd: disconnect device [ 283.020866][ T6045] vhci_hcd: vhci_device speed not set [ 283.433368][ T8314] gtp0: entered promiscuous mode [ 283.793995][ T8333] block device autoloading is deprecated and will be removed. [ 284.793380][ T8363] binder: 8362:8363 ioctl c0306201 800003c0 returned -14 [ 285.732834][ T8379] fuse: Bad value for 'fd' [ 286.495173][ T8406] tipc: Started in network mode [ 286.497573][ T8406] tipc: Node identity 86ee3e5f35b5, cluster identity 4711 [ 286.500065][ T8406] tipc: Enabled bearer , priority 0 [ 286.503184][ T8404] tipc: Resetting bearer [ 287.500671][ T43] tipc: Node number set to 3009101407 [ 287.665404][ T8404] tipc: Disabling bearer [ 287.711459][ T8423] tipc: Started in network mode [ 287.713452][ T8423] tipc: Node identity 52152b0df5c6, cluster identity 4711 [ 287.715754][ T8423] tipc: Enabled bearer , priority 0 [ 287.723386][ T8415] tipc: Resetting bearer [ 288.039278][ T8442] fuse: Bad value for 'fd' [ 288.836130][ T6160] tipc: Node number set to 2815634189 [ 288.963137][ T8415] tipc: Disabling bearer [ 289.085513][ T8462] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 289.397149][ T8475] kvm: pic: non byte read [ 289.399668][ T8475] kvm: pic: single mode not supported [ 289.399726][ T8475] kvm: pic: level sensitive irq not supported [ 289.402034][ T8475] kvm: pic: non byte read [ 289.406687][ T8475] kvm: pic: single mode not supported [ 289.406697][ T8475] kvm: pic: level sensitive irq not supported [ 289.408662][ T8475] kvm: pic: non byte read [ 289.412972][ T8475] kvm: pic: level sensitive irq not supported [ 289.413207][ T8475] kvm: pic: non byte read [ 289.417751][ T8475] kvm: pic: non byte read [ 289.420552][ T8475] kvm: pic: non byte read [ 289.423526][ T8475] kvm: pic: non byte read [ 289.426619][ T8475] kvm: pic: non byte read [ 289.429482][ T8475] kvm: pic: non byte read [ 289.664626][ T8491] netlink: 'syz.1.691': attribute type 1 has an invalid length. [ 289.668129][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'. [ 289.670900][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'. [ 289.713454][ T8492] fuse: Bad value for 'fd' [ 290.613721][ T8517] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 290.615839][ T8517] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 290.618708][ T8517] vhci_hcd vhci_hcd.0: Device attached [ 290.700483][ T8521] binder: 8520:8521 ioctl c0306201 800003c0 returned -14 [ 290.891325][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz.5.702'. [ 290.916056][ T6045] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 290.938027][ T41] audit: type=1326 audit(1750726654.315:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7fc00000 [ 290.946294][ T41] audit: type=1326 audit(1750726654.315:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7fa2579 code=0x7fc00000 [ 290.953697][ T41] audit: type=1326 audit(1750726654.315:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7fc00000 [ 290.960491][ T41] audit: type=1326 audit(1750726654.315:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7fc00000 [ 290.968750][ T41] audit: type=1326 audit(1750726654.315:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7fc00000 [ 290.970762][ T8529] netlink: 'syz.5.703': attribute type 10 has an invalid length. [ 290.988879][ T8529] syz_tun: entered promiscuous mode [ 291.006346][ T8529] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 291.029411][ T41] audit: type=1326 audit(1750726654.315:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7fc00000 [ 291.038336][ T41] audit: type=1326 audit(1750726654.315:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7fc00000 [ 291.047489][ T41] audit: type=1326 audit(1750726654.315:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7fc00000 [ 291.054857][ T41] audit: type=1326 audit(1750726654.315:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7fc00000 [ 291.064014][ T41] audit: type=1326 audit(1750726654.315:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8505 comm="syz.0.697" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7fc00000 [ 293.415355][ T8609] fuse: Bad value for 'fd' [ 293.559722][ T8518] vhci_hcd: connection reset by peer [ 293.564762][ T50] vhci_hcd: stop threads [ 293.570298][ T50] vhci_hcd: release socket [ 293.575640][ T50] vhci_hcd: disconnect device [ 293.604999][ T8621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.720'. [ 293.650736][ T8623] syzkaller0: entered promiscuous mode [ 293.652613][ T8623] syzkaller0: entered allmulticast mode [ 293.679774][ T8623] tipc: Enabled bearer , priority 0 [ 293.687010][ T8622] tipc: Resetting bearer [ 293.707331][ T8622] tipc: Disabling bearer [ 294.371184][ T8675] binder: 8674:8675 ioctl 4018620d 0 returned -22 [ 294.390591][ T8675] binder: 8674:8675 ioctl c0306201 0 returned -14 [ 294.490166][ T8680] binder: 8674:8680 ioctl c08c5332 0 returned -22 [ 294.493992][ T8680] binder: 8674:8680 ioctl 4018620d 0 returned -22 [ 294.717559][ T8669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.736'. [ 294.769525][ T8689] binder: 8688:8689 ioctl c0306201 0 returned -14 [ 295.391234][ T8694] fuse: Bad value for 'fd' [ 295.406818][ T8703] 9pnet_virtio: no channels available for device syz [ 295.427926][ T8705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.746'. [ 295.523052][ T8707] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 295.525172][ T8707] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 295.529087][ T8707] vhci_hcd vhci_hcd.0: Device attached [ 295.876395][ T57] usb 37-1: new low-speed USB device number 9 using vhci_hcd [ 296.066642][ T6045] vhci_hcd: vhci_device speed not set [ 296.547050][ T8733] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 296.549269][ T8733] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 296.554829][ T8733] vhci_hcd vhci_hcd.0: Device attached [ 296.643858][ C2] vcan0: j1939_tp_rxtimer: 0xffff88805c4a9000: rx timeout, send abort [ 296.646691][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c4a9000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 296.796149][ T6048] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 298.051641][ T8752] binder: 8751:8752 ioctl c0306201 800007c0 returned -14 [ 298.170364][ T8708] vhci_hcd: connection reset by peer [ 298.172304][ T1147] vhci_hcd: stop threads [ 298.173674][ T1147] vhci_hcd: release socket [ 298.175251][ T1147] vhci_hcd: disconnect device [ 298.177166][ T42] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 298.357636][ T42] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.360591][ T42] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.364550][ T42] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 298.367669][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.581259][ T42] usb 6-1: usb_control_msg returned -32 [ 298.583188][ T42] usbtmc 6-1:16.0: can't read capabilities [ 299.145808][ T6160] usb 6-1: USB disconnect, device number 11 [ 299.293613][ T8734] vhci_hcd: connection reset by peer [ 299.295957][ T97] vhci_hcd: stop threads [ 299.306377][ T97] vhci_hcd: release socket [ 299.308289][ T97] vhci_hcd: disconnect device [ 299.666368][ T5959] Bluetooth: hci3: command 0x0406 tx timeout [ 299.717492][ T8786] input: syz1 as /devices/virtual/input/input8 [ 300.086135][ T42] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 300.238677][ T42] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 300.241500][ T42] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.245015][ T42] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 300.248599][ T42] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 300.252078][ T42] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 101, setting to 64 [ 300.257533][ T42] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 300.260733][ T42] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 300.263242][ T42] usb 6-1: Product: syz [ 300.264559][ T42] usb 6-1: Manufacturer: syz [ 300.269310][ T8790] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 300.274867][ T42] cdc_wdm 6-1:1.0: skipping garbage [ 300.276929][ T42] cdc_wdm 6-1:1.0: skipping garbage [ 300.280228][ T42] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 300.282211][ T42] cdc_wdm 6-1:1.0: Unknown control protocol [ 300.475127][ T43] usb 6-1: USB disconnect, device number 12 [ 300.599739][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.773'. [ 300.608372][ T8800] netlink: 12 bytes leftover after parsing attributes in process `syz.5.773'. [ 300.916178][ T43] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 301.060798][ T57] vhci_hcd: vhci_device speed not set [ 301.087787][ T43] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 301.091662][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.095718][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 301.101422][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.107384][ T43] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 301.110851][ T43] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 301.114400][ T43] usb 6-1: Product: syz [ 301.119979][ T43] usb 6-1: Manufacturer: syz [ 301.129296][ T43] cdc_wdm 6-1:1.0: skipping garbage [ 301.131361][ T43] cdc_wdm 6-1:1.0: skipping garbage [ 301.135274][ T43] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 301.137875][ T43] cdc_wdm 6-1:1.0: Unknown control protocol [ 301.480211][ T8812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.776'. [ 301.592913][ T8817] binder: 8816:8817 ioctl c0306201 80000080 returned -14 [ 301.601265][ T8817] binder: 8816:8817 ioctl c0306201 80000600 returned -14 [ 301.680128][ T8822] netlink: 'syz.1.770': attribute type 1 has an invalid length. [ 301.884174][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 301.886450][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 301.886912][ T6025] usb 6-1: USB disconnect, device number 13 [ 301.888514][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 301.906366][ T6048] vhci_hcd: vhci_device speed not set [ 302.427627][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.783'. [ 302.438179][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.783'. [ 302.443935][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.783'. [ 302.452273][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.783'. [ 302.508131][ T8839] af_packet: tpacket_rcv: packet too big, clamped from 65532 to 3952. macoff=96 [ 302.512811][ C2] net_ratelimit: 10 callbacks suppressed [ 302.512821][ C2] IPv4: Oversized IP packet from 172.20.20.170 [ 302.526447][ C2] IPv4: Oversized IP packet from 172.20.20.170 [ 302.531081][ C2] IPv4: Oversized IP packet from 172.20.20.170 [ 302.533841][ C2] IPv4: Oversized IP packet from 172.20.20.170 [ 302.536912][ C2] IPv4: Oversized IP packet from 172.20.20.170 [ 302.539306][ C2] IPv4: Oversized IP packet from 172.20.20.170 [ 302.541807][ C2] IPv4: Oversized IP packet from 172.20.20.170 [ 302.544394][ C2] IPv4: Oversized IP packet from 172.20.20.170 [ 302.549598][ C2] IPv4: Oversized IP packet from 172.20.20.170 [ 302.552155][ C2] IPv4: Oversized IP packet from 172.20.20.170 [ 302.754566][ T8845] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 302.845079][ T8851] block device autoloading is deprecated and will be removed. [ 305.207167][ T8913] netlink: 16 bytes leftover after parsing attributes in process `syz.5.806'. [ 307.015891][ T8938] netlink: 16 bytes leftover after parsing attributes in process `syz.5.813'. [ 307.022216][ T8941] IPv6: Can't replace route, no match found [ 308.006357][ T43] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 308.166169][ T43] usb 10-1: Using ep0 maxpacket: 32 [ 308.170583][ T43] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 308.173907][ T43] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 308.177586][ T43] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 308.181423][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 308.185717][ T43] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 308.190115][ T43] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 308.195605][ T43] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 308.203915][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.216469][ T43] usb 10-1: config 0 descriptor?? [ 308.248329][ T8970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.821'. [ 308.424902][ T43] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 308.439487][ T43] usb 10-1: USB disconnect, device number 2 [ 308.444772][ T43] usblp0: removed [ 308.916143][ T43] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 308.923017][ T9004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.829'. [ 309.086101][ T43] usb 10-1: Using ep0 maxpacket: 32 [ 309.093454][ T43] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 309.097746][ T43] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 309.100471][ T43] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 309.103620][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 309.108198][ T43] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 309.111318][ T43] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 309.115317][ T43] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 309.118498][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.125784][ T43] usb 10-1: config 0 descriptor?? [ 309.334517][ T5960] block nbd1: Receive control failed (result -32) [ 309.340943][ T8998] block nbd1: shutting down sockets [ 309.486456][ T41] kauditd_printk_skb: 57 callbacks suppressed [ 309.486467][ T41] audit: type=1804 audit(1750726672.865:73): pid=9013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.832" name="/newroot/201/bus/file0" dev="overlay" ino=1159 res=1 errno=0 [ 309.533958][ T43] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 309.615853][ T9020] net_ratelimit: 22 callbacks suppressed [ 309.615867][ T9020] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 309.693353][ T9020] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.835'. [ 309.697229][ T9020] netlink: zone id is out of range [ 309.700016][ T9020] netlink: zone id is out of range [ 309.702308][ T9020] netlink: zone id is out of range [ 309.706337][ T9020] netlink: zone id is out of range [ 309.707964][ T9020] netlink: zone id is out of range [ 309.709563][ T9020] netlink: zone id is out of range [ 309.711167][ T9020] netlink: zone id is out of range [ 309.712780][ T9020] netlink: zone id is out of range [ 309.714385][ T9020] netlink: zone id is out of range [ 309.746672][ T43] usb 10-1: USB disconnect, device number 3 [ 309.756363][ T43] usblp0: removed [ 310.076250][ T839] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 310.226202][ T839] usb 6-1: Using ep0 maxpacket: 32 [ 310.230786][ T839] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 310.233503][ T839] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 310.236535][ T839] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 310.239347][ T839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 310.242403][ T839] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 310.245376][ T839] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 310.249883][ T839] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 310.252934][ T839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.260457][ T839] usb 6-1: config 0 descriptor?? [ 310.300581][ T9029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.837'. [ 310.467461][ T839] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 311.144967][ T9046] fuse: Bad value for 'fd' [ 311.206349][ C2] usblp0: nonzero read bulk status received: -71 [ 311.211204][ T841] usb 6-1: USB disconnect, device number 14 [ 311.227484][ T43] usblp0: removed [ 311.553936][ T9052] netlink: 16 bytes leftover after parsing attributes in process `syz.5.842'. [ 313.335921][ T9111] syzkaller0: entered promiscuous mode [ 313.340004][ T9111] syzkaller0: entered allmulticast mode [ 314.317611][ T9132] binder: 9131:9132 unknown command 0 [ 314.319368][ T9132] binder: 9131:9132 ioctl c0306201 80000080 returned -22 [ 314.838268][ T9144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.866'. [ 315.995042][ T41] audit: type=1804 audit(1750726679.365:74): pid=9187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.880" name="/newroot/213/file1" dev="fuse" ino=1 res=1 errno=0 [ 316.004083][ T41] audit: type=1800 audit(1750726679.385:75): pid=9187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.880" name="/" dev="fuse" ino=1 res=0 errno=0 [ 316.010978][ T41] audit: type=1800 audit(1750726679.385:76): pid=9180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.880" name="/" dev="fuse" ino=1 res=0 errno=0 [ 316.029033][ T9191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'. [ 316.188254][ T9196] input: syz1 as /devices/virtual/input/input9 [ 316.427678][ T9192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.879'. [ 316.499167][ T9206] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 316.501967][ T9206] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 316.505473][ T9206] vhci_hcd vhci_hcd.0: Device attached [ 316.806108][ T6045] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 318.185890][ T41] audit: type=1804 audit(1750726681.555:77): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.892" name="/newroot/239/file1" dev="fuse" ino=1 res=1 errno=0 [ 318.193173][ T41] audit: type=1800 audit(1750726681.555:78): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.892" name="/" dev="fuse" ino=1 res=0 errno=0 [ 318.200887][ T41] audit: type=1800 audit(1750726681.565:79): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.892" name="/" dev="fuse" ino=1 res=0 errno=0 [ 318.717422][ T9246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.894'. [ 318.915801][ T9255] capability: warning: `syz.0.896' uses 32-bit capabilities (legacy support in use) [ 319.051159][ T9207] vhci_hcd: connection reset by peer [ 319.053693][ T97] vhci_hcd: stop threads [ 319.055556][ T97] vhci_hcd: release socket [ 319.057318][ T97] vhci_hcd: disconnect device [ 319.327049][ T9266] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 319.329219][ T9266] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 319.335628][ T9266] vhci_hcd vhci_hcd.0: Device attached [ 319.596252][ T6018] usb 39-1: new low-speed USB device number 7 using vhci_hcd [ 319.722663][ T9257] syz.0.897 (9257): drop_caches: 2 [ 320.104832][ T9264] orangefs_mount: mount request failed with -4 [ 321.146133][ T42] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 321.307999][ T42] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.310810][ T42] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.319236][ T42] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 321.321929][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.324258][ T42] usb 7-1: Product: syz [ 321.325547][ T42] usb 7-1: Manufacturer: syz [ 321.336103][ T42] usb 7-1: SerialNumber: syz [ 321.918479][ T6045] vhci_hcd: vhci_device speed not set [ 321.980331][ T42] usb 7-1: 0:2 : does not exist [ 322.005618][ T42] usb 7-1: USB disconnect, device number 9 [ 322.066650][ T9304] netlink: 'syz.5.908': attribute type 1 has an invalid length. [ 322.069066][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.5.908'. [ 322.081241][ T9267] vhci_hcd: connection reset by peer [ 322.083404][ T1147] vhci_hcd: stop threads [ 322.084812][ T1147] vhci_hcd: release socket [ 322.090512][ T1147] vhci_hcd: disconnect device [ 322.537368][ T41] audit: type=1326 audit(1750726685.915:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.2.914" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 322.546173][ T41] audit: type=1326 audit(1750726685.915:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.2.914" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 322.554821][ T41] audit: type=1326 audit(1750726685.915:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.2.914" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 322.567372][ T41] audit: type=1326 audit(1750726685.915:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.2.914" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 322.573942][ T41] audit: type=1326 audit(1750726685.915:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.2.914" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 322.580644][ T41] audit: type=1326 audit(1750726685.925:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.2.914" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 322.588820][ T41] audit: type=1326 audit(1750726685.925:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.2.914" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 322.595407][ T41] audit: type=1326 audit(1750726685.925:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.2.914" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 322.602686][ T41] audit: type=1326 audit(1750726685.925:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.2.914" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 322.610466][ T41] audit: type=1326 audit(1750726685.925:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9327 comm="syz.2.914" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe598 code=0x7ffc0000 [ 322.716113][ T6160] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 322.868975][ T6160] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 322.872983][ T6160] usb 6-1: config 0 has no interface number 0 [ 322.878496][ T6160] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 322.885406][ T6160] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 322.888694][ T6160] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.891425][ T6160] usb 6-1: Product: syz [ 322.892796][ T6160] usb 6-1: Manufacturer: syz [ 322.894359][ T6160] usb 6-1: SerialNumber: syz [ 322.903375][ T6160] usb 6-1: config 0 descriptor?? [ 322.910492][ T6160] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 323.266211][ T839] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 323.473055][ T9345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.476626][ T9345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.538609][ T9346] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 323.541161][ T9346] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 323.544883][ T9346] vhci_hcd vhci_hcd.0: Device attached [ 323.684705][ T9350] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 323.686993][ T9350] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 323.690042][ T9350] vhci_hcd vhci_hcd.0: Device attached [ 323.703265][ T9351] vhci_hcd: connection closed [ 323.703513][ T1184] vhci_hcd: stop threads [ 323.708780][ T1184] vhci_hcd: release socket [ 323.710511][ T1184] vhci_hcd: disconnect device [ 323.786167][ T57] usb 37-1: new low-speed USB device number 10 using vhci_hcd [ 324.696136][ T6018] vhci_hcd: vhci_device speed not set [ 325.054943][ T9359] kvm: MONITOR instruction emulated as NOP! [ 325.189296][ T6160] usb 6-1: USB disconnect, device number 15 [ 325.194317][ T6160] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 325.626206][ T6043] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 325.776288][ T6043] usb 7-1: Using ep0 maxpacket: 32 [ 325.779579][ T6043] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 325.782303][ T6043] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 325.785177][ T6043] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 325.789563][ T6043] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 325.793207][ T6043] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 325.797560][ T6043] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 325.802038][ T6043] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 325.805379][ T6043] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.810120][ T6043] usb 7-1: config 0 descriptor?? [ 325.948114][ T9379] kvm: kvm [9378]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 325.953206][ T9379] kvm: kvm [9378]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 325.958396][ T9379] kvm: kvm [9378]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 325.963350][ T9379] kvm: kvm [9378]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 325.969077][ T9379] kvm: kvm [9378]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 325.974346][ T9379] kvm: kvm [9378]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 325.980477][ T9379] kvm: kvm [9378]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 326.027873][ T6043] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 326.038778][ T9379] kvm: kvm [9378]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 326.043785][ T9379] kvm: kvm [9378]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 326.045281][ T6043] usb 7-1: USB disconnect, device number 10 [ 326.048936][ T9379] kvm: kvm [9378]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 326.056855][ T6043] usblp0: removed [ 326.300483][ T9390] syz.5.933 (9390): drop_caches: 2 [ 326.346171][ T9347] vhci_hcd: connection reset by peer [ 326.350962][ T1184] vhci_hcd: stop threads [ 326.352411][ T1184] vhci_hcd: release socket [ 326.361089][ T1184] vhci_hcd: disconnect device [ 326.536088][ T6043] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 326.696225][ T6043] usb 7-1: Using ep0 maxpacket: 32 [ 326.700004][ T6043] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 326.702737][ T6043] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 326.705493][ T6043] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 326.709079][ T6043] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 326.712092][ T6043] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 326.715365][ T6043] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 326.721307][ T6043] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 326.724370][ T6043] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.729165][ T6043] usb 7-1: config 0 descriptor?? [ 327.138429][ T6043] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 327.341526][ T839] usb 7-1: USB disconnect, device number 11 [ 327.349041][ T839] usblp0: removed [ 327.624120][ T9427] tipc: Started in network mode [ 327.625695][ T9427] tipc: Node identity 4, cluster identity 4711 [ 327.628247][ T9427] tipc: Node number set to 4 [ 327.962604][ T9438] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 327.964947][ T9438] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 327.968128][ T9438] vhci_hcd vhci_hcd.0: Device attached [ 328.206313][ T6018] usb 47-1: new low-speed USB device number 4 using vhci_hcd [ 329.064431][ T9466] netlink: 16 bytes leftover after parsing attributes in process `syz.1.952'. [ 329.070046][ T57] vhci_hcd: vhci_device speed not set [ 329.144835][ T9473] fuse: Unknown parameter '0xffffffffffffffff˙˙' [ 329.316205][ T9471] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 329.320386][ T9471] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 329.322347][ T9471] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 329.329001][ T9471] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 329.331249][ T9471] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 329.337661][ T9471] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 329.410326][ T9478] kvm: emulating exchange as write [ 329.513564][ T9482] binder: 9481:9482 ioctl 4018620d 0 returned -22 [ 329.516358][ T9482] binder: 9481:9482 ioctl c0306201 0 returned -14 [ 329.636189][ T840] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 329.806108][ T840] usb 5-1: Using ep0 maxpacket: 8 [ 329.809472][ T840] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 329.812231][ T840] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 329.815307][ T840] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 329.818599][ T840] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 329.822089][ T840] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 329.826892][ T840] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 329.829904][ T840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.089315][ T840] usb 5-1: GET_CAPABILITIES returned 0 [ 330.091098][ T840] usbtmc 5-1:16.0: can't read capabilities [ 330.253757][ T9479] net_ratelimit: 3 callbacks suppressed [ 330.253770][ T9479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.272072][ T9495] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 330.277128][ T6043] usb 5-1: USB disconnect, device number 10 [ 330.279739][ T9495] kvm: pic: single mode not supported [ 330.280212][ T9495] kvm: pic: non byte read [ 330.284898][ T9495] kvm: pic: level sensitive irq not supported [ 330.285170][ T9495] kvm: pic: non byte read [ 330.290230][ T9495] kvm: pic: level sensitive irq not supported [ 330.290533][ T9495] kvm: pic: non byte read [ 330.295557][ T9495] kvm: pic: level sensitive irq not supported [ 330.295880][ T9495] kvm: pic: non byte read [ 330.881448][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.968'. [ 330.889168][ T9518] batman_adv: batadv0: Interface deactivated: dummy0 [ 330.913927][ T9506] netlink: 16 bytes leftover after parsing attributes in process `syz.1.965'. [ 330.915299][ T9518] batman_adv: batadv0: Removing interface: dummy0 [ 330.927055][ T9439] vhci_hcd: connection reset by peer [ 330.928883][ T14] vhci_hcd: stop threads [ 330.930127][ T14] vhci_hcd: release socket [ 330.933101][ T14] vhci_hcd: disconnect device [ 331.266302][ T5960] Bluetooth: hci2: command 0x0406 tx timeout [ 331.287223][ T9530] fuse: Unknown parameter '0xffffffffffffffff˙˙' [ 331.348234][ T5960] Bluetooth: hci1: command 0x0c1a tx timeout [ 331.350769][ T5960] Bluetooth: hci3: command 0x0406 tx timeout [ 332.016306][ T839] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 332.098993][ T9545] netlink: 40 bytes leftover after parsing attributes in process `syz.5.974'. [ 333.336508][ T6018] vhci_hcd: vhci_device speed not set [ 333.431813][ T5959] Bluetooth: hci3: command 0x0406 tx timeout [ 333.435708][ T5959] Bluetooth: hci1: command 0x0c1a tx timeout [ 333.436837][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.440643][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.658634][ T5960] Bluetooth: hci1: Unable to find connection for big 0x65 [ 334.257971][ T9597] No control pipe specified [ 334.501587][ T9608] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 334.503794][ T9608] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 334.506610][ T840] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 334.512999][ T9608] vhci_hcd vhci_hcd.0: Device attached [ 334.656255][ T840] usb 5-1: Using ep0 maxpacket: 8 [ 334.662612][ T840] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.670388][ T840] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 334.677409][ T840] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 334.683967][ T840] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.692593][ T840] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 334.697808][ T840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.766199][ T6018] usb 47-1: new low-speed USB device number 5 using vhci_hcd [ 334.910562][ T840] usb 5-1: GET_CAPABILITIES returned 0 [ 334.914516][ T840] usbtmc 5-1:16.0: can't read capabilities [ 335.131986][ T9597] ================================================================== [ 335.131999][ T9597] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 335.132035][ T9597] Write of size 8 at addr ffffc900047b9020 by task syz.0.985/9597 [ 335.132047][ T9597] [ 335.132053][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: syz.0.985 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 335.132069][ T9597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 335.132077][ T9597] Call Trace: [ 335.132082][ T9597] [ 335.132087][ T9597] dump_stack_lvl+0x116/0x1f0 [ 335.132111][ T9597] print_report+0xcd/0x680 [ 335.132123][ T9597] ? __virt_addr_valid+0x81/0x610 [ 335.132137][ T9597] ? sys_imageblit+0x1a6f/0x1e60 [ 335.132150][ T9597] kasan_report+0xe0/0x110 [ 335.132160][ T9597] ? sys_imageblit+0x1a6f/0x1e60 [ 335.132175][ T9597] sys_imageblit+0x1a6f/0x1e60 [ 335.132189][ T9597] ? __pfx_sys_imageblit+0x10/0x10 [ 335.132202][ T9597] ? prep_compound_page+0x265/0x4e0 [ 335.132219][ T9597] ? get_page_from_freelist+0x1b2a/0x3890 [ 335.132240][ T9597] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 335.132255][ T9597] bit_putcs+0x90f/0xde0 [ 335.132275][ T9597] ? __pfx_bit_putcs+0x10/0x10 [ 335.132293][ T9597] ? fb_get_color_depth+0x120/0x250 [ 335.132308][ T9597] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 335.132327][ T9597] ? __pfx_bit_putcs+0x10/0x10 [ 335.132343][ T9597] fbcon_putcs+0x383/0x4a0 [ 335.132359][ T9597] do_update_region+0x2e6/0x3f0 [ 335.132372][ T9597] invert_screen+0x1e4/0x590 [ 335.132388][ T9597] ? __pfx_invert_screen+0x10/0x10 [ 335.132403][ T9597] ? __pfx_complement_pos+0x10/0x10 [ 335.132418][ T9597] ? trace_kmalloc+0x2b/0xd0 [ 335.132428][ T9597] ? __kmalloc_noprof.cold+0x5c/0x61 [ 335.132444][ T9597] ? find_held_lock+0x2b/0x80 [ 335.132455][ T9597] clear_selection+0x59/0x70 [ 335.132469][ T9597] vc_do_resize+0xd9b/0x10e0 [ 335.132486][ T9597] ? __pfx_vc_do_resize+0x10/0x10 [ 335.132503][ T9597] fbcon_set_disp+0x7ad/0xe40 [ 335.132518][ T9597] set_con2fb_map+0x703/0x1060 [ 335.132536][ T9597] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 335.132553][ T9597] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 335.132571][ T9597] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 335.132588][ T9597] do_fb_ioctl+0x328/0x7e0 [ 335.132599][ T9597] ? __pfx_do_fb_ioctl+0x10/0x10 [ 335.132609][ T9597] ? lockdep_hardirqs_on+0x7c/0x110 [ 335.132625][ T9597] ? find_held_lock+0x2b/0x80 [ 335.132638][ T9597] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 335.132659][ T9597] fb_compat_ioctl+0x55e/0x670 [ 335.132671][ T9597] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 335.132682][ T9597] ? hook_file_ioctl_common+0x145/0x410 [ 335.132695][ T9597] ? __fget_files+0x20e/0x3c0 [ 335.132709][ T9597] ? __ia32_compat_sys_openat+0xb0/0x210 [ 335.132724][ T9597] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 335.132734][ T9597] __ia32_compat_sys_ioctl+0x23f/0x370 [ 335.132748][ T9597] __do_fast_syscall_32+0x7c/0x3a0 [ 335.132768][ T9597] do_fast_syscall_32+0x32/0x80 [ 335.132785][ T9597] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 335.132798][ T9597] RIP: 0023:0xf7fa2579 [ 335.132807][ T9597] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 335.132819][ T9597] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 335.132831][ T9597] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000004610 [ 335.132839][ T9597] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 335.132847][ T9597] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 335.132853][ T9597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.132860][ T9597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 335.132870][ T9597] [ 335.132874][ T9597] [ 335.132891][ T9597] The buggy address ffffc900047b9020 belongs to a vmalloc virtual mapping [ 335.132899][ T9597] Memory state around the buggy address: [ 335.132909][ T9597] ffffc900047b8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 335.132921][ T9597] ffffc900047b8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 335.132933][ T9597] >ffffc900047b9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 335.132943][ T9597] ^ [ 335.132953][ T9597] ffffc900047b9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 335.132962][ T9597] ffffc900047b9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 335.132979][ T9597] ================================================================== [ 335.132989][ T9597] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 335.133000][ T9597] CPU: 1 UID: 0 PID: 9597 Comm: syz.0.985 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 335.133016][ T9597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 335.133023][ T9597] Call Trace: [ 335.133028][ T9597] [ 335.133032][ T9597] dump_stack_lvl+0x3d/0x1f0 [ 335.133057][ T9597] panic+0x71c/0x800 [ 335.133081][ T9597] ? __pfx_panic+0x10/0x10 [ 335.133109][ T9597] ? __pfx__printk+0x10/0x10 [ 335.133135][ T9597] ? rcu_is_watching+0x12/0xc0 [ 335.133158][ T9597] ? sys_imageblit+0x1a6f/0x1e60 [ 335.133178][ T9597] check_panic_on_warn+0xab/0xb0 [ 335.133194][ T9597] end_report+0x107/0x170 [ 335.133211][ T9597] kasan_report+0xee/0x110 [ 335.133221][ T9597] ? sys_imageblit+0x1a6f/0x1e60 [ 335.133237][ T9597] sys_imageblit+0x1a6f/0x1e60 [ 335.133251][ T9597] ? __pfx_sys_imageblit+0x10/0x10 [ 335.133264][ T9597] ? prep_compound_page+0x265/0x4e0 [ 335.133279][ T9597] ? get_page_from_freelist+0x1b2a/0x3890 [ 335.133298][ T9597] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 335.133312][ T9597] bit_putcs+0x90f/0xde0 [ 335.133332][ T9597] ? __pfx_bit_putcs+0x10/0x10 [ 335.133350][ T9597] ? fb_get_color_depth+0x120/0x250 [ 335.133365][ T9597] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 335.133382][ T9597] ? __pfx_bit_putcs+0x10/0x10 [ 335.133398][ T9597] fbcon_putcs+0x383/0x4a0 [ 335.133415][ T9597] do_update_region+0x2e6/0x3f0 [ 335.133430][ T9597] invert_screen+0x1e4/0x590 [ 335.133446][ T9597] ? __pfx_invert_screen+0x10/0x10 [ 335.133461][ T9597] ? __pfx_complement_pos+0x10/0x10 [ 335.133476][ T9597] ? trace_kmalloc+0x2b/0xd0 [ 335.133486][ T9597] ? __kmalloc_noprof.cold+0x5c/0x61 [ 335.133502][ T9597] ? find_held_lock+0x2b/0x80 [ 335.133513][ T9597] clear_selection+0x59/0x70 [ 335.133526][ T9597] vc_do_resize+0xd9b/0x10e0 [ 335.133545][ T9597] ? __pfx_vc_do_resize+0x10/0x10 [ 335.133562][ T9597] fbcon_set_disp+0x7ad/0xe40 [ 335.133577][ T9597] set_con2fb_map+0x703/0x1060 [ 335.133594][ T9597] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 335.133611][ T9597] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 335.133629][ T9597] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 335.133645][ T9597] do_fb_ioctl+0x328/0x7e0 [ 335.133657][ T9597] ? __pfx_do_fb_ioctl+0x10/0x10 [ 335.133668][ T9597] ? lockdep_hardirqs_on+0x7c/0x110 [ 335.133684][ T9597] ? find_held_lock+0x2b/0x80 [ 335.133697][ T9597] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 335.133718][ T9597] fb_compat_ioctl+0x55e/0x670 [ 335.133730][ T9597] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 335.133742][ T9597] ? hook_file_ioctl_common+0x145/0x410 [ 335.133755][ T9597] ? __fget_files+0x20e/0x3c0 [ 335.133804][ T9597] ? __ia32_compat_sys_openat+0xb0/0x210 [ 335.133821][ T9597] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 335.133833][ T9597] __ia32_compat_sys_ioctl+0x23f/0x370 [ 335.133847][ T9597] __do_fast_syscall_32+0x7c/0x3a0 [ 335.133866][ T9597] do_fast_syscall_32+0x32/0x80 [ 335.133884][ T9597] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 335.133898][ T9597] RIP: 0023:0xf7fa2579 [ 335.133906][ T9597] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 335.133917][ T9597] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 335.133928][ T9597] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000004610 [ 335.133935][ T9597] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 335.133941][ T9597] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 335.133948][ T9597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.133954][ T9597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 335.133964][ T9597] [ 335.134678][ T9597] Kernel Offset: disabled VM DIAGNOSIS: 00:58:19 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff816048c0 RDX=ffffffff8e297780 RSI=ffffffff81604908 RDI=ffffffff93d12080 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27a2410 R10=ffffffff93d12087 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81604909 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097560000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000560b72deb138 CR3=0000000048ed0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffe00 Opmask01=0000000000000000 Opmask02=000000003f3f3dff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000003166e419 0000000000000002 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056264087bd10 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f675a57cb20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562640898810 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 06001eac00000002 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8f728cde00000000 0000000000000000 000000000000fb00 f942a06300060101 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3701013563538263 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ec2f01000100de13 8f72ff133dd00502 39773b3a3633211c 1a0f0c060379010e ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff 0101910101740050 de138f728cdeadb3 ec2f01000100de13 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8f72ff133dd00502 39773b3a3633211c 1a0f0c060379010e 3701013563538263 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20640a2032392031 3920206465200a65 0a0020625f203634 005f363420203461 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855820d5 RDI=ffffffff9b06ca00 RBP=ffffffff9b06c9c0 RSP=ffffc900309f6e88 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000032 R14=ffffffff9b06c9c0 R15=ffffffff85582070 RIP=ffffffff855820ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097660000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c331c60 CR3=0000000028309000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff816048c0 RDX=ffff888024a60000 RSI=ffffffff81604908 RDI=ffffffff93d12080 RBP=0000000000000002 RSP=ffffc90000548fd0 R8 =0000000000000001 R9 =fffffbfff27a2410 R10=ffffffff93d12087 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81604909 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097760000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd3f4fa268 CR3=000000006e1a6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000005325 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff816048c0 RDX=ffff8880242f4880 RSI=ffffffff81604908 RDI=ffffffff93d12080 RBP=0000000000000003 RSP=ffffc900005f8fd0 R8 =0000000000000001 R9 =fffffbfff27a2410 R10=ffffffff93d12087 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81604909 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097860000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008000d000 CR3=000000006e1a6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000015422003 Opmask01=0000000000003fff Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000004000010015 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000001100010015 0000000900000050 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000600000048 0000000000000006 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 00001fff01000045 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000f00000054 0000000000000050 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000c 0000000400000024 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004400010015 0000000200000048 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6168730073257325 7325204650420050 5241006e65706f5f 667062203a732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444d560056005600 5600054650420050 5241004b40554a5f 435547051f560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 00001f0b00001f0b ffffffffffffffff 00060014e78dd961 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8eed276100000000 000080fe00010014 00000003fd80400a b71a7db76859f72f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 00000001000b0005 0000008000080008 00001c4700001c47 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0006001401000000 0000000000000000 0000000000010014 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20640a2032392031 3920206465200a65 0a0020625f203634 005f363420203461 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000