last executing test programs: 1m50.77054662s ago: executing program 2 (id=1301): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000e00000000000009500000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x804) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x17b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') 1m49.874163584s ago: executing program 2 (id=1305): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) gettid() r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x40040) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) 1m48.950775306s ago: executing program 2 (id=1313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000e00000000000009500000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x804) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x17b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') 1m48.020910716s ago: executing program 2 (id=1320): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x11a) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m47.960710925s ago: executing program 2 (id=1321): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) gettid() r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x40040) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) 1m47.651018292s ago: executing program 2 (id=1323): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)={0x1c, r0, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1m47.519245111s ago: executing program 32 (id=1323): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)={0x1c, r0, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 4.729901609s ago: executing program 4 (id=2056): mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f0000000440)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000001180)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus/file0\x00', 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000300)=""/104, 0x68) 4.729584292s ago: executing program 4 (id=2057): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000080)) 4.651890415s ago: executing program 4 (id=2058): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000e00000000000009500000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x804) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x17b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') 4.088644205s ago: executing program 3 (id=2065): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 4.087923721s ago: executing program 3 (id=2066): mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f0000000440)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000001180)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000300)=""/104, 0x68) 4.013062227s ago: executing program 3 (id=2067): bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 4.012144822s ago: executing program 3 (id=2069): socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000040)=0x80000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000500)) clock_settime(0x3, &(0x7f00000000c0)={0x0, 0x3938700}) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) syz_usb_connect(0x6, 0x5f, &(0x7f0000000700)=ANY=[@ANYRESDEC=r1, @ANYBLOB="2cfed582f7275db22008c61439ac73e6c29c7f6532b2b1a25214a9bdfcdba472a12a89e98c5bd0c6a71111113bed331ab8ead08a05948483a8e2e40e61b90242737f74d6fc212b870cc0183c62b22a133303214e4acf8f7ff4b35872feaac999784fd37fcb2fe9dc2e20035b68353175439c2d6bb0b43f6ca6ad45ef310f180a6ab674f7fc443419efaffa99c37d1d1172984ddabf7330114156278edc7f4e01eec259c6b8eab135bdb5a9228cfb3b2d62e404a043c203ab515536c30cf8ad22659565ecf6ee73318b70587559965d0e2efcfff40e9a44af621e"], 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x78) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000c8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000640)={0x1, 0x800}) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 3.726736095s ago: executing program 4 (id=2074): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r1, r0, 0x4, r0}, 0x10) 3.549478082s ago: executing program 4 (id=2077): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r4, 0x4e, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x18, 0x37, 0xfb, 0x10, 0x46d, 0xc281, 0x5cec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x5, 0x40, 0x4, [{{0x9, 0x4, 0x7f, 0x1, 0x1, 0x9f, 0xad, 0xb7, 0x0, [], [{{0x9, 0x5, 0x0, 0x3, 0x400, 0x3, 0x5, 0x9}}]}}]}}]}}, 0x0) write$binfmt_script(r3, &(0x7f0000000800)={'#! ', './file0'}, 0xb) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x21a2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={0xffffffffffffffff, 0x0, &(0x7f00000003c0)=""/61}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 3.049363912s ago: executing program 0 (id=2078): bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 2.989613254s ago: executing program 0 (id=2079): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x11) r3 = dup(r2) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x43, 0x0, 0x0) 2.735932448s ago: executing program 0 (id=2081): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2a, 0x25dfdbfb, {{{@in6=@remote, @in6=@loopback, 0x4e24, 0x3, 0x4e26, 0x0, 0x8, 0x20, 0x180, 0x87}, {@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d6, 0x6c}, @in=@multicast1, {0x100000001, 0x6, 0x2, 0x2c, 0x6, 0x5, 0xd, 0x4}, {0x6, 0x2, 0x4, 0x4}, {0x4, 0x5, 0x3}, 0x70bd29, 0x0, 0x0, 0x3, 0x1, 0x45}, 0x3, 0x6}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x44) 2.7353895s ago: executing program 1 (id=2082): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000e00000000000009500000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x804) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x17b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') 1.909913507s ago: executing program 4 (id=2083): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b89200000001"], 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000240)='smaps_rollup\x00') 1.809986941s ago: executing program 1 (id=2084): mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f0000000440)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000001180)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000300)=""/104, 0x68) 1.748472392s ago: executing program 1 (id=2085): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r1, r0, 0x4, r0}, 0x10) 1.748162572s ago: executing program 1 (id=2086): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000e00000000000009500000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x804) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x17b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') 1.147045376s ago: executing program 0 (id=2087): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020007000000000000000c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 899.898884ms ago: executing program 0 (id=2088): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mq_open(&(0x7f0000000400)='+\'\x00', 0x40, 0x9, &(0x7f0000000440)={0x2000000020, 0x8001, 0x500947db, 0x5}) r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x40) write$cgroup_int(r3, &(0x7f00000003c0)=0xd9d, 0x12) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000380)=@ng={0x4, 0x11}, 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) keyctl$assume_authority(0x10, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) 749.902123ms ago: executing program 1 (id=2089): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) 749.526615ms ago: executing program 3 (id=2090): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x11) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x43, 0x0, 0x0) 644.902695ms ago: executing program 1 (id=2091): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 642.602051ms ago: executing program 3 (id=2092): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x242082, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x4}) syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=2093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc34000000000010902"], 0x0) kernel console output (not intermixed with test programs): ing attributes in process `syz.1.96'. [ 61.973760][ T6343] netlink: 36 bytes leftover after parsing attributes in process `syz.1.96'. [ 61.976577][ T6343] netlink: 36 bytes leftover after parsing attributes in process `syz.1.96'. [ 62.084813][ T6347] openvswitch: netlink: Tunnel attr 16370 out of range max 16 [ 62.363200][ T6360] tipc: Started in network mode [ 62.364970][ T6360] tipc: Node identity ac1414aa, cluster identity 4711 [ 62.371352][ T6360] tipc: Enabled bearer , priority 10 [ 62.664768][ T58] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 62.817094][ T58] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.820772][ T58] usb 7-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 62.824925][ T58] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.829658][ T58] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 62.832956][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.841451][ T58] usbtmc 7-1:16.0: bulk endpoints not found [ 63.026895][ T6370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 63.505436][ T58] tipc: Node number set to 2886997162 [ 64.590024][ T6415] blktrace: Concurrent blktraces are not allowed on sg0 [ 64.669605][ T5966] Bluetooth: hci0: unexpected event for opcode 0x0401 [ 65.435990][ T58] usb 7-1: USB disconnect, device number 2 [ 66.604747][ T5963] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 66.604817][ T6455] fuse: Unknown parameter 'use00000000000000000000' [ 66.768449][ T5963] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 66.772671][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 66.776374][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 66.779841][ T5963] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.784627][ T5963] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.788308][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.793210][ T5963] usb 5-1: config 0 descriptor?? [ 67.201902][ T5963] usbhid 5-1:0.0: can't add hid device: -71 [ 67.203672][ T5963] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 67.208859][ T5963] usb 5-1: USB disconnect, device number 3 [ 67.664779][ T5963] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 67.816234][ T5963] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.819784][ T5963] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.823420][ T5963] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 67.826250][ T5963] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.831210][ T6480] fuse: Unknown parameter 'user_i00000000000000000000' [ 68.038302][ T5963] usb 8-1: GET_CAPABILITIES returned 0 [ 68.040634][ T5963] usbtmc 8-1:16.0: can't read capabilities [ 68.241433][ T57] usb 8-1: USB disconnect, device number 5 [ 68.613069][ T6494] __nla_validate_parse: 5 callbacks suppressed [ 68.613080][ T6494] netlink: 44 bytes leftover after parsing attributes in process `syz.2.145'. [ 68.617386][ T6494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.145'. [ 68.620064][ T6494] netlink: 44 bytes leftover after parsing attributes in process `syz.2.145'. [ 68.892815][ T5966] Bluetooth: hci2: unexpected event for opcode 0x0401 [ 69.045007][ T57] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 69.216190][ T57] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.219602][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 69.222665][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 69.225792][ T57] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.229444][ T57] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.232080][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.237292][ T57] usb 8-1: config 0 descriptor?? [ 69.263276][ T6509] blktrace: Concurrent blktraces are not allowed on sg0 [ 69.646162][ T57] usbhid 8-1:0.0: can't add hid device: -71 [ 69.648035][ T57] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 69.654927][ T57] usb 8-1: USB disconnect, device number 6 [ 70.005889][ T12] bond0: (slave bond_slave_0): interface is now down [ 70.007425][ T6526] netlink: 'syz.1.158': attribute type 10 has an invalid length. [ 70.009158][ T12] bond0: (slave bond_slave_1): interface is now down [ 70.013897][ T6526] syz_tun: entered promiscuous mode [ 70.019373][ T6526] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 70.025953][ T218] bond0: (slave bond_slave_0): interface is now down [ 70.027870][ T218] bond0: (slave bond_slave_1): interface is now down [ 70.029716][ T218] bond0: (slave syz_tun): interface is now down [ 70.033331][ T218] bond0: now running without any active interface! [ 70.368933][ T5966] Bluetooth: hci3: unexpected event for opcode 0x0401 [ 70.552433][ T6551] blktrace: Concurrent blktraces are not allowed on sg0 [ 70.781134][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.783809][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.441285][ T5966] Bluetooth: hci1: unexpected event for opcode 0x0401 [ 71.474402][ T6580] netlink: 32 bytes leftover after parsing attributes in process `syz.0.178'. [ 71.859543][ T6600] sch_tbf: burst 7710 is lower than device lo mtu (65550) ! [ 72.114916][ T5995] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 72.274744][ T5995] usb 7-1: Using ep0 maxpacket: 8 [ 72.278708][ T5995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 72.282120][ T5995] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 72.284782][ T5995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.288615][ T5995] usb 7-1: config 0 descriptor?? [ 72.498622][ T5995] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 72.907388][ T5963] usb 7-1: USB disconnect, device number 3 [ 73.440895][ T6630] sch_tbf: burst 7710 is lower than device lo mtu (65550) ! [ 74.527498][ T6654] netlink: 32 bytes leftover after parsing attributes in process `syz.2.204'. [ 74.572090][ T6656] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 74.979535][ T6668] ptrace attach of "/syz-executor exec"[5960] was attempted by "/syz-executor exec"[6668] [ 75.764030][ T6687] netlink: 44 bytes leftover after parsing attributes in process `syz.1.214'. [ 75.767174][ T6687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.214'. [ 75.769676][ T6687] netlink: 44 bytes leftover after parsing attributes in process `syz.1.214'. [ 77.589901][ T6710] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 78.521936][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 78.572617][ T58] IPVS: starting estimator thread 0... [ 78.754887][ T6747] IPVS: using max 44 ests per chain, 105600 per kthread [ 78.819998][ T6760] macsec0: entered promiscuous mode [ 78.821885][ T6760] macsec0: entered allmulticast mode [ 78.823404][ T6760] veth1_macvtap: entered allmulticast mode [ 79.169906][ T6764] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 79.790162][ T6776] netlink: 36 bytes leftover after parsing attributes in process `syz.1.241'. [ 79.792768][ T6776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.241'. [ 79.795471][ T6776] netlink: 36 bytes leftover after parsing attributes in process `syz.1.241'. [ 80.124283][ T6783] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 80.182649][ T6784] ptrace attach of "/syz-executor exec"[5968] was attempted by ""[6784] [ 80.866792][ T6806] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 81.064786][ T1016] cfg80211: failed to load regulatory.db [ 81.766790][ T6826] fuse: Unknown parameter '0x0000000000000003' [ 81.895849][ T5966] Bluetooth: hci0: unexpected event for opcode 0x0401 [ 82.207763][ T6851] fuse: Unknown parameter '0x0000000000000003' [ 82.268027][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.267'. [ 82.270740][ T6853] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 82.594463][ T6864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.272'. [ 82.634296][ T6864] macsec0: left promiscuous mode [ 83.942522][ T6891] tipc: Started in network mode [ 83.944009][ T6891] tipc: Node identity 4, cluster identity 4711 [ 83.947391][ T6891] tipc: Node number set to 4 [ 85.244874][ T5961] Bluetooth: hci3: command 0x0419 tx timeout [ 86.199116][ T58] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 86.348292][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 86.351303][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.353953][ T58] usb 7-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 86.356723][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.364095][ T58] usb 7-1: config 0 descriptor?? [ 86.566911][ T6955] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 86.777975][ T58] hid-generic 0003:04F3:0754.0002: failed to start in urb: -90 [ 86.782632][ T58] hid-generic 0003:04F3:0754.0002: hidraw1: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.2-1/input0 [ 86.976202][ T1019] usb 7-1: USB disconnect, device number 4 [ 87.108056][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'. [ 87.113074][ T6959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.282396][ T6972] fuse: Bad value for 'group_id' [ 87.284384][ T6972] fuse: Bad value for 'group_id' [ 88.398422][ T7006] netlink: 36 bytes leftover after parsing attributes in process `syz.1.310'. [ 88.401323][ T7006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.310'. [ 88.404085][ T7006] netlink: 36 bytes leftover after parsing attributes in process `syz.1.310'. [ 89.854801][ T58] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 90.006045][ T58] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.009308][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 90.012353][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 90.015282][ T58] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.018901][ T58] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.021414][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.025552][ T58] usb 6-1: config 0 descriptor?? [ 90.633031][ T58] usbhid 6-1:0.0: can't add hid device: -71 [ 90.636495][ T58] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 90.642538][ T58] usb 6-1: USB disconnect, device number 2 [ 92.314854][ T57] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 92.471436][ T57] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.480482][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 92.487626][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 92.491800][ T57] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.498759][ T57] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.503262][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.512554][ T57] usb 6-1: config 0 descriptor?? [ 93.125604][ T57] usbhid 6-1:0.0: can't add hid device: -71 [ 93.128214][ T57] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 93.133893][ T57] usb 6-1: USB disconnect, device number 3 [ 93.464356][ T7099] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 94.459477][ T7121] blktrace: Concurrent blktraces are not allowed on sg0 [ 95.116511][ T7128] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 95.504737][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 95.553098][ T7156] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 95.657430][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.661588][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 95.664710][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 95.667526][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.671573][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.674211][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.679071][ T9] usb 7-1: config 0 descriptor?? [ 96.245136][ T7203] fuse: Unknown parameter 'group_i00000000000000000000' [ 96.294248][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 96.296226][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 96.307371][ T9] usb 7-1: USB disconnect, device number 5 [ 96.879362][ T5966] Bluetooth: hci1: unexpected event for opcode 0x0401 [ 97.312348][ T7227] fuse: Unknown parameter 'group_i00000000000000000000' [ 97.359590][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 97.781753][ T5966] Bluetooth: hci0: unexpected event for opcode 0x0401 [ 97.813054][ T7253] fuse: Unknown parameter 'group_i00000000000000000000' [ 98.165513][ T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.345997][ T29] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 98.349144][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.352397][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.355564][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 98.360293][ T29] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 98.363322][ T29] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 98.366002][ T29] usb 5-1: Manufacturer: syz [ 98.368510][ T29] usb 5-1: config 0 descriptor?? [ 98.611074][ T7265] ptrace attach of "/syz-executor exec"[5968] was attempted by ""[7265] [ 98.779295][ T29] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 98.782606][ T29] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 98.791334][ T29] appleir 0003:05AC:8243.0003: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 98.877046][ T5966] Bluetooth: hci0: unexpected event for opcode 0x0401 [ 98.899835][ T7280] fuse: Unknown parameter 'group_id00000000000000000000' [ 98.929974][ T7282] trusted_key: syz.1.393 sent an empty control message without MSG_MORE. [ 99.036910][ T9] usb 5-1: USB disconnect, device number 4 [ 99.787775][ T7299] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 99.914461][ T5966] Bluetooth: hci2: unexpected event for opcode 0x0401 [ 100.386491][ T7324] ptrace attach of "/syz-executor exec"[5953] was attempted by ""[7324] [ 101.276326][ T7364] blktrace: Concurrent blktraces are not allowed on sg0 [ 101.295863][ T7366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 101.829780][ T7395] ptrace attach of "/syz-executor exec"[5968] was attempted by ""[7395] [ 103.067477][ T7428] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 103.070600][ T7428] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 103.134592][ T7430] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.137046][ T7430] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 103.138888][ T7430] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 103.140654][ T7430] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 103.288314][ T7436] blktrace: Concurrent blktraces are not allowed on sg0 [ 103.404519][ T7443] fuse: Bad value for 'user_id' [ 103.409067][ T7443] fuse: Bad value for 'user_id' [ 104.672078][ T7487] ptrace attach of "/syz-executor exec"[5954] was attempted by ""[7487] [ 105.164855][ T5961] Bluetooth: hci3: command 0x0419 tx timeout [ 105.164943][ T5303] Bluetooth: hci1: command 0x0419 tx timeout [ 105.166502][ T5966] Bluetooth: hci2: command 0x0419 tx timeout [ 105.166537][ T5966] Bluetooth: hci0: command 0x0419 tx timeout [ 105.435224][ T40] audit: type=1326 audit(1744572356.109:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.2.441" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x0 [ 105.454854][ T5999] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 105.616398][ T5999] usb 5-1: config 0 has no interfaces? [ 105.621591][ T5999] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 105.624863][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.627772][ T5999] usb 5-1: Product: syz [ 105.629394][ T5999] usb 5-1: Manufacturer: syz [ 105.630831][ T5999] usb 5-1: SerialNumber: syz [ 105.634299][ T5999] usb 5-1: config 0 descriptor?? [ 108.132585][ T58] usb 5-1: USB disconnect, device number 5 [ 109.275290][ T7564] overlayfs: failed to resolve './file0': -2 [ 109.544797][ T58] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 109.564763][ T5961] Bluetooth: hci3: command 0x0419 tx timeout [ 109.694767][ T58] usb 7-1: Using ep0 maxpacket: 8 [ 109.698317][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.701845][ T58] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 109.704410][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.709429][ T58] usb 7-1: config 0 descriptor?? [ 109.919857][ T58] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 110.507244][ T40] audit: type=1326 audit(1744572361.189:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.0.475" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x0 [ 110.914071][ T7610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.478'. [ 110.999718][ T7613] netlink: 52 bytes leftover after parsing attributes in process `syz.1.479'. [ 111.002339][ T7613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.479'. [ 111.005085][ T7613] netlink: 52 bytes leftover after parsing attributes in process `syz.1.479'. [ 111.823422][ T7637] fuse: Invalid rootmode [ 111.967712][ T7642] overlayfs: failed to resolve './file0': -2 [ 112.234967][ T7647] ptrace attach of "/syz-executor exec"[5953] was attempted by ""[7647] [ 112.329008][ T9] usb 7-1: USB disconnect, device number 6 [ 112.543715][ T7670] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 113.194805][ T834] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 113.374742][ T834] usb 6-1: Using ep0 maxpacket: 8 [ 113.378543][ T834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.382625][ T834] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 113.386074][ T834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.391252][ T834] usb 6-1: config 0 descriptor?? [ 113.647718][ T834] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 114.288342][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'. [ 114.479839][ T7707] fuse: Invalid rootmode [ 115.414487][ T9] IPVS: starting estimator thread 0... [ 115.505621][ T7724] IPVS: using max 44 ests per chain, 105600 per kthread [ 115.937446][ T7731] ptrace attach of "/syz-executor exec"[5960] was attempted by ""[7731] [ 115.970223][ T58] usb 6-1: USB disconnect, device number 4 [ 116.354264][ T7746] openvswitch: netlink: Missing key (keys=40, expected=80) [ 116.531399][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.520'. [ 117.734802][ T65] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 117.886933][ T65] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.890214][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 117.893273][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 117.898051][ T65] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.902879][ T65] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.906398][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.911235][ T65] usb 5-1: config 0 descriptor?? [ 118.016548][ T7803] capability: warning: `syz.1.531' uses deprecated v2 capabilities in a way that may be insecure [ 118.258915][ T7817] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 118.337630][ T65] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 118.342633][ T7821] ptrace attach of "/syz-executor exec"[5954] was attempted by ""[7821] [ 118.347611][ T65] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 119.179122][ T40] audit: type=1326 audit(1744572369.859:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.2.539" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x0 [ 119.179787][ T7848] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 119.353030][ T7861] overlayfs: failed to resolve './file1': -2 [ 119.391491][ T40] audit: type=1326 audit(1744572370.069:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.545" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x0 [ 119.736794][ T7881] ptrace attach of "/syz-executor exec"[5968] was attempted by ""[7881] [ 120.025115][ T65] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 121.288617][ T29] usb 5-1: USB disconnect, device number 6 [ 122.197102][ T7910] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 122.199516][ T7910] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 122.201627][ T7910] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 122.203524][ T7910] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 122.272834][ T7935] No control pipe specified [ 122.446018][ T7946] ptrace attach of "/syz-executor exec"[5960] was attempted by ""[7946] [ 123.484796][ T5303] Bluetooth: hci0: command 0x0419 tx timeout [ 123.594711][ T7981] ptrace attach of "/syz-executor exec"[5953] was attempted by ""[7981] [ 124.096454][ T7978] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.205488][ T5303] Bluetooth: hci3: command 0x0419 tx timeout [ 124.205904][ T5961] Bluetooth: hci2: command 0x0419 tx timeout [ 124.207216][ T5303] Bluetooth: hci1: command 0x0419 tx timeout [ 124.440380][ T40] audit: type=1326 audit(1744572375.119:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.1.581" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x0 [ 124.443938][ T7993] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 125.150494][ T8012] fuse: Unknown parameter 'user_id00000000000000000000' [ 125.231800][ T8015] ptrace attach of "/syz-executor exec"[5968] was attempted by ""[8015] [ 125.464283][ T29] IPVS: starting estimator thread 0... [ 125.575084][ T8029] IPVS: using max 44 ests per chain, 105600 per kthread [ 125.577203][ T8030] macsec0: entered promiscuous mode [ 125.578777][ T8030] macsec0: entered allmulticast mode [ 125.580273][ T8030] veth1_macvtap: entered allmulticast mode [ 125.640834][ T8032] autofs: Unknown parameter '0x0000000000000000' [ 125.957947][ T8039] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 125.961348][ T8039] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 126.581495][ T8052] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.583347][ T8052] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.585167][ T8052] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.594173][ T8052] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.726421][ T8061] autofs: Unknown parameter '0x0000000000000000' [ 126.924852][ T8067] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 126.928068][ T8067] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 126.969977][ T8073] fuse: Bad value for 'fd' [ 127.001422][ T8071] macsec0: entered promiscuous mode [ 127.003017][ T8071] macsec0: entered allmulticast mode [ 127.004567][ T8071] veth1_macvtap: entered allmulticast mode [ 127.023139][ T8077] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 128.476060][ T8102] fuse: Unknown parameter '0x0000000000000003' [ 128.534817][ T5957] Bluetooth: hci0: command 0x0419 tx timeout [ 128.604833][ T5957] Bluetooth: hci2: command 0x0419 tx timeout [ 128.604864][ T5303] Bluetooth: hci1: command 0x0419 tx timeout [ 128.604919][ T5966] Bluetooth: hci3: command 0x0419 tx timeout [ 129.672345][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.627'. [ 130.082059][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'. [ 130.659855][ T8151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 130.684791][ T5303] Bluetooth: hci3: command 0x0419 tx timeout [ 130.762187][ T8153] netlink: 36 bytes leftover after parsing attributes in process `syz.3.634'. [ 130.764751][ T8153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.634'. [ 130.767285][ T8153] netlink: 36 bytes leftover after parsing attributes in process `syz.3.634'. [ 131.149011][ T8159] netlink: 168 bytes leftover after parsing attributes in process `syz.1.637'. [ 131.478664][ T8174] ======================================================= [ 131.478664][ T8174] WARNING: The mand mount option has been deprecated and [ 131.478664][ T8174] and is ignored by this kernel. Remove the mand [ 131.478664][ T8174] option from the mount to silence this warning. [ 131.478664][ T8174] ======================================================= [ 131.676723][ T8182] blktrace: Concurrent blktraces are not allowed on sg0 [ 132.216598][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.219049][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.454016][ T8200] ptrace attach of "/syz-executor exec"[5968] was attempted by ""[8200] [ 132.473631][ T8202] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 132.576744][ T8204] netlink: 36 bytes leftover after parsing attributes in process `syz.1.648'. [ 132.579360][ T8204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.648'. [ 132.582334][ T8204] netlink: 36 bytes leftover after parsing attributes in process `syz.1.648'. [ 133.102499][ T8211] overlayfs: failed to resolve './file0': -2 [ 133.251607][ T8212] overlayfs: failed to resolve './file0': -2 [ 134.608798][ T8275] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 134.612920][ T8275] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 134.962551][ T8288] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 134.965219][ T8288] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 134.967098][ T8288] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 134.968886][ T8288] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.201432][ T8299] overlayfs: failed to resolve './file1': -2 [ 136.924797][ T5303] Bluetooth: hci0: command 0x0419 tx timeout [ 137.005889][ T5303] Bluetooth: hci1: command 0x0419 tx timeout [ 137.014835][ T5303] Bluetooth: hci3: command 0x0419 tx timeout [ 137.016198][ T5961] Bluetooth: hci2: command 0x0419 tx timeout [ 138.143682][ T8395] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 138.146563][ T8395] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 138.633739][ T8423] ptrace attach of "/syz-executor exec"[5960] was attempted by ""[8423] [ 139.084840][ T5303] Bluetooth: hci3: command 0x0419 tx timeout [ 139.520987][ T8451] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 140.503022][ T8485] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.709'. [ 140.537070][ T8489] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 140.539881][ T8489] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 140.880712][ T8506] overlayfs: failed to resolve './file1': -2 [ 142.672991][ T8560] ptrace attach of "/syz-executor exec"[5968] was attempted by ""[8560] [ 142.820210][ T8561] overlayfs: failed to resolve './file1': -2 [ 143.462798][ T8578] No control pipe specified [ 143.829490][ T8586] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 144.118948][ T8590] blktrace: Concurrent blktraces are not allowed on sg0 [ 145.201339][ T8626] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 145.556815][ T40] audit: type=1326 audit(1744572396.239:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8631 comm="syz.1.753" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x0 [ 146.982522][ T8674] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 147.601206][ T8696] ptrace attach of "/syz-executor exec"[5953] was attempted by ""[8696] [ 148.914443][ T8724] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 149.896841][ T8738] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 150.204926][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 150.604768][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 150.754511][ T8762] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 150.757324][ T29] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.762055][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 150.766297][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 150.769714][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.773253][ T29] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.775986][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.779357][ T29] usb 5-1: config 0 descriptor?? [ 151.188362][ T29] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 151.193690][ T29] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 152.433147][ T8782] blktrace: Concurrent blktraces are not allowed on sg0 [ 152.849990][ T8792] overlayfs: missing 'workdir' [ 152.995424][ T8796] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 153.399417][ T9] usb 5-1: USB disconnect, device number 7 [ 153.602474][ T8826] macsec0: entered promiscuous mode [ 153.959041][ T8832] ptrace attach of "/syz-executor exec"[5953] was attempted by ""[8832] [ 154.191447][ T8836] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 154.194939][ T8836] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 157.057955][ T8911] blktrace: Concurrent blktraces are not allowed on sg0 [ 157.471604][ T8928] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 157.473894][ T8928] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 157.852806][ T8944] netlink: 'syz.3.849': attribute type 1 has an invalid length. [ 157.856759][ T8944] netlink: 1604 bytes leftover after parsing attributes in process `syz.3.849'. [ 158.849323][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.859'. [ 160.069147][ T9023] sp0: Synchronizing with TNC [ 160.787902][ T9018] [U] è [ 161.314814][ T5999] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 161.482511][ T5999] usb 6-1: New USB device found, idVendor=0bfd, idProduct=001d, bcdDevice=f2.28 [ 161.486045][ T5999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.489111][ T5999] usb 6-1: Product: syz [ 161.490736][ T5999] usb 6-1: Manufacturer: syz [ 161.492540][ T5999] usb 6-1: SerialNumber: syz [ 161.496288][ T5999] usb 6-1: config 0 descriptor?? [ 161.500086][ T5999] kvaser_usb 6-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 161.809378][ T9108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.812996][ T9108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.818452][ T9108] warning: `syz.1.885' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 162.289256][ T9120] ptrace attach of "/syz-executor exec"[5960] was attempted by ""[9120] [ 163.104802][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 163.254751][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 163.257666][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.260846][ T9] usb 8-1: config 0 has no interfaces? [ 163.262443][ T9] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 163.266129][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.270356][ T9] usb 8-1: config 0 descriptor?? [ 164.115581][ T58] usb 6-1: USB disconnect, device number 5 [ 164.450954][ T9174] overlayfs: failed to resolve './file0': -2 [ 164.538493][ T9178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.903'. [ 164.884763][ T29] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 165.046991][ T29] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.050510][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 165.053719][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 165.057052][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 165.060987][ T29] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.063723][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.068582][ T29] usb 7-1: config 0 descriptor?? [ 165.533818][ T29] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 165.556670][ T29] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 165.881008][ T57] usb 8-1: USB disconnect, device number 7 [ 167.064810][ T5963] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 167.174815][ T29] usb 7-1: reset high-speed USB device number 7 using dummy_hcd [ 167.214768][ T5963] usb 8-1: Using ep0 maxpacket: 8 [ 167.217502][ T5963] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.220541][ T5963] usb 8-1: config 0 has no interfaces? [ 167.222177][ T5963] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 167.224887][ T5963] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.228288][ T5963] usb 8-1: config 0 descriptor?? [ 168.425743][ T65] usb 7-1: USB disconnect, device number 7 [ 168.455739][ T9256] netlink: 24 bytes leftover after parsing attributes in process `syz.1.923'. [ 168.924199][ T40] audit: type=1326 audit(1744572419.599:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.2.927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 168.934405][ T40] audit: type=1326 audit(1744572419.599:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.2.927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 168.942933][ T40] audit: type=1326 audit(1744572419.599:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.2.927" exe="/syz-executor" sig=0 arch=40000003 syscall=334 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 168.948952][ T40] audit: type=1326 audit(1744572419.599:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.2.927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 168.954887][ T40] audit: type=1326 audit(1744572419.599:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.2.927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 168.961387][ T40] audit: type=1326 audit(1744572419.599:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.2.927" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 168.967952][ T40] audit: type=1326 audit(1744572419.599:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.2.927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 168.974062][ T40] audit: type=1326 audit(1744572419.599:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.2.927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 168.980221][ T40] audit: type=1326 audit(1744572419.599:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.2.927" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 168.986470][ T40] audit: type=1326 audit(1744572419.599:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.2.927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 169.834281][ T57] usb 8-1: USB disconnect, device number 8 [ 170.042704][ T9303] ptrace attach of "/syz-executor exec"[5953] was attempted by ""[9303] [ 170.981852][ T9325] overlayfs: failed to resolve './file0': -2 [ 171.825859][ T9340] netlink: 24 bytes leftover after parsing attributes in process `syz.3.950'. [ 172.558532][ T9356] ptrace attach of "/syz-executor exec"[5960] was attempted by ""[9356] [ 174.030194][ T9382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.964'. [ 174.214969][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 174.385042][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 174.393825][ T24] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 174.397658][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.400131][ T24] usb 5-1: Product: syz [ 174.401372][ T24] usb 5-1: Manufacturer: syz [ 174.402704][ T24] usb 5-1: SerialNumber: syz [ 174.405978][ T24] usb 5-1: config 0 descriptor?? [ 174.409151][ T24] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 174.413141][ T24] usb 5-1: Detected FT232H [ 174.966721][ T9397] ptrace attach of "/syz-executor exec"[5968] was attempted by ""[9397] [ 175.157523][ T9401] block nbd2: shutting down sockets [ 175.197330][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 175.197340][ T40] audit: type=1326 audit(1744572425.879:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.1.971" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x0 [ 175.216382][ T9407] syzkaller1: entered promiscuous mode [ 175.218453][ T9407] syzkaller1: entered allmulticast mode [ 175.596196][ T9414] netlink: 'syz.3.974': attribute type 72 has an invalid length. [ 176.385006][ T9437] netlink: 'syz.2.983': attribute type 72 has an invalid length. [ 176.990878][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 176.997165][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 176.999666][ T24] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 177.006768][ T24] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 177.011163][ T24] usb 5-1: USB disconnect, device number 8 [ 177.016687][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 177.020015][ T24] ftdi_sio 5-1:0.0: device disconnected [ 177.667189][ T9475] netlink: 24 bytes leftover after parsing attributes in process `syz.3.994'. [ 178.374320][ T9494] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1001'. [ 178.403441][ T9498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1003'. [ 179.270487][ T40] audit: type=1326 audit(1744572438.948:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.3.1008" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x0 [ 179.362345][ T9520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1009'. [ 179.565421][ T5303] Bluetooth: hci3: command 0x0419 tx timeout [ 180.471927][ T9542] ptrace attach of "/syz-executor exec"[5968] was attempted by ""[9542] [ 181.262790][ T40] audit: type=1326 audit(1744572440.938:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.0.1022" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x0 [ 181.334744][ T29] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 181.505986][ T29] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.508754][ T29] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.512423][ T29] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 181.514991][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.722611][ T29] usb 8-1: usb_control_msg returned -32 [ 181.724269][ T29] usbtmc 8-1:16.0: can't read capabilities [ 182.279917][ T5999] usb 8-1: USB disconnect, device number 9 [ 182.494736][ T57] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 182.666031][ T57] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 182.668983][ T57] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 182.671594][ T57] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 182.674115][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.298851][ T40] audit: type=1326 audit(1744572442.978:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9596 comm="syz.2.1034" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x0 [ 185.069755][ T5957] Bluetooth: hci4: sending frame failed (-49) [ 185.073272][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 185.180913][ T24] usb 5-1: USB disconnect, device number 9 [ 185.892771][ T9660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1055'. [ 186.607917][ T9686] mmap: syz.3.1065 (9686) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 187.119400][ T9702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1070'. [ 187.171800][ T9698] veth1_macvtap (unregistering): left allmulticast mode [ 187.431842][ T9715] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 187.881473][ T9725] ptrace attach of "/syz-executor exec"[5954] was attempted by ""[9725] [ 189.175173][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 189.230842][ T9758] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 189.314975][ T24] usb 6-1: device descriptor read/64, error -71 [ 189.505094][ T9766] [U] VÔ3¸ÂFÙ¾"WÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 189.507724][ T9766] [U] J"—E:ÀÆ" [ 189.554865][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 189.695163][ T24] usb 6-1: device descriptor read/64, error -71 [ 189.805179][ T24] usb usb6-port1: attempt power cycle [ 190.201146][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 190.225546][ T24] usb 6-1: device descriptor read/8, error -71 [ 190.494785][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 190.524796][ T24] usb 6-1: device descriptor read/8, error -71 [ 190.599218][ T9791] netlink: 'syz.0.1095': attribute type 11 has an invalid length. [ 190.601532][ T9791] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1095'. [ 190.634851][ T24] usb usb6-port1: unable to enumerate USB device [ 191.444388][ T9829] blktrace: Concurrent blktraces are not allowed on sg0 [ 191.775029][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 191.935094][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 191.939729][ T24] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 191.942916][ T24] usb 7-1: config 0 has no interface number 0 [ 191.945472][ T24] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.949490][ T24] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 191.952853][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.959180][ T24] usb 7-1: config 0 descriptor?? [ 191.968624][ T24] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 193.246895][ T57] usb 7-1: USB disconnect, device number 8 [ 193.366955][ T9862] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 193.370219][ T9862] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 193.655343][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.657422][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.334949][ T9877] ptrace attach of "/syz-executor exec"[5968] was attempted by ""[9877] [ 194.645691][ T40] audit: type=1326 audit(1744572454.328:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 194.672111][ T40] audit: type=1326 audit(1744572454.328:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 194.673712][ T9881] capability: warning: `syz.1.1117' uses 32-bit capabilities (legacy support in use) [ 194.679271][ T40] audit: type=1326 audit(1744572454.328:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 194.689480][ T40] audit: type=1326 audit(1744572454.328:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 194.695483][ T40] audit: type=1326 audit(1744572454.328:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 194.701806][ T40] audit: type=1326 audit(1744572454.338:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 194.708324][ T40] audit: type=1326 audit(1744572454.338:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 194.714309][ T40] audit: type=1326 audit(1744572454.338:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 194.720543][ T40] audit: type=1326 audit(1744572454.338:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 194.726917][ T40] audit: type=1326 audit(1744572454.338:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.1.1117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 195.281946][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1121'. [ 195.595468][ T5999] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 195.745519][ T5999] usb 5-1: Using ep0 maxpacket: 32 [ 195.749421][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.753777][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.759139][ T5999] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 195.763449][ T5999] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 195.766967][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.773713][ T5999] usb 5-1: config 0 descriptor?? [ 196.189958][ T5999] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0007/input/input9 [ 196.259525][ T5999] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.0007/input/input10 [ 196.271575][ T5999] kye 0003:0458:5011.0007: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 196.595014][ T9896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.598177][ T9896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.253052][ T9938] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 197.424819][ T5999] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 197.497437][ T9945] syz.1.1139: attempt to access beyond end of device [ 197.497437][ T9945] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 197.503143][ T9945] hpfs: hpfs_map_sector(): read error [ 198.207621][ T57] usb 5-1: USB disconnect, device number 10 [ 198.945928][ T9975] ptrace attach of "/syz-executor exec"[5953] was attempted by ""[9975] [ 199.558511][ T9983] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 199.561416][ T9983] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 199.563744][ T9983] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 199.567727][ T9983] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 200.547135][ T5999] libceph: connect (1)[c::]:6789 error -101 [ 200.549857][ T5999] libceph: mon0 (1)[c::]:6789 connect error [ 200.807488][ T5999] libceph: connect (1)[c::]:6789 error -101 [ 200.809388][ T5999] libceph: mon0 (1)[c::]:6789 connect error [ 201.014952][ T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 201.081518][T10021] ceph: No mds server is up or the cluster is laggy [ 201.185320][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 201.190695][ T24] usb 8-1: config 0 has no interfaces? [ 201.192678][ T24] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 201.195955][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.204185][ T24] usb 8-1: config 0 descriptor?? [ 201.321536][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 201.495135][ T5303] Bluetooth: hci0: command 0x0419 tx timeout [ 201.565203][ T5303] Bluetooth: hci2: command 0x0419 tx timeout [ 201.565238][ T5957] Bluetooth: hci1: command 0x0419 tx timeout [ 201.575904][ T24] usb 8-1: USB disconnect, device number 10 [ 201.624846][ T5963] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 201.644907][ T5957] Bluetooth: hci3: command 0x0419 tx timeout [ 201.774812][ T5963] usb 6-1: Using ep0 maxpacket: 8 [ 201.778567][ T5963] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 201.781247][ T5963] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 201.783948][ T5963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.788496][ T5963] usb 6-1: config 0 descriptor?? [ 201.791610][ T5963] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 203.823085][ T29] hid-generic C990:0003:007F.0008: unknown main item tag 0x0 [ 203.825999][ T29] hid-generic C990:0003:007F.0008: unknown main item tag 0x0 [ 203.828745][ T29] hid-generic C990:0003:007F.0008: unknown main item tag 0x0 [ 203.831799][ T29] hid-generic C990:0003:007F.0008: unknown main item tag 0x0 [ 203.835140][ T29] hid-generic C990:0003:007F.0008: unknown main item tag 0x0 [ 203.837988][ T29] hid-generic C990:0003:007F.0008: unknown main item tag 0x0 [ 203.840378][ T29] hid-generic C990:0003:007F.0008: unknown main item tag 0x0 [ 203.842773][ T29] hid-generic C990:0003:007F.0008: unknown main item tag 0x0 [ 203.845116][ T29] hid-generic C990:0003:007F.0008: unknown main item tag 0x0 [ 203.847545][ T29] hid-generic C990:0003:007F.0008: unknown main item tag 0x0 [ 203.849980][ T29] hid-generic C990:0003:007F.0008: unknown main item tag 0x0 [ 203.852258][ T29] hid-generic C990:0003:007F.0008: unknown main item tag 0x0 [ 203.854405][ T29] hid-generic C990:0003:007F.0008: unknown main item tag 0x0 [ 203.856700][ T29] hid-generic C990:0003:007F.0008: unknown main item tag 0x0 [ 203.858971][ T29] hid-generic C990:0003:007F.0008: unknown main item tag 0x0 [ 203.861170][ T29] hid-generic C990:0003:007F.0008: unknown main item tag 0x0 [ 203.863380][ T29] hid-generic C990:0003:007F.0008: unknown main item tag 0x0 [ 203.870478][ T29] hid-generic C990:0003:007F.0008: hidraw1: HID v0.00 Device [syz0] on syz1 [ 204.418226][ T24] usb 6-1: USB disconnect, device number 10 [ 205.842599][T10126] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 205.846037][T10126] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 206.313309][T10147] netlink: 'syz.2.1190': attribute type 10 has an invalid length. [ 206.317684][T10147] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1190'. [ 206.321591][T10147] bridge0: port 3(macvlan1) entered blocking state [ 206.324272][T10147] bridge0: port 3(macvlan1) entered disabled state [ 206.326453][T10147] macvlan1: entered allmulticast mode [ 206.328036][T10147] veth1_vlan: entered allmulticast mode [ 206.330927][T10147] macvlan1: entered promiscuous mode [ 206.333705][T10147] bridge0: port 3(macvlan1) entered blocking state [ 206.336017][T10147] bridge0: port 3(macvlan1) entered forwarding state [ 206.494790][ T5963] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 206.545741][T10152] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1192'. [ 206.550177][T10152] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.553175][T10152] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.654826][ T5963] usb 8-1: Using ep0 maxpacket: 8 [ 206.660889][ T5963] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 206.665056][ T5963] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.668265][ T5963] usb 8-1: Product: syz [ 206.669451][ T5963] usb 8-1: Manufacturer: syz [ 206.670855][ T5963] usb 8-1: SerialNumber: syz [ 206.673787][ T5963] usb 8-1: config 0 descriptor?? [ 206.677283][ T5963] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 206.679651][ T5963] usb 8-1: setting power ON [ 206.681205][ T5963] dvb-usb: bulk message failed: -22 (2/0) [ 206.687842][ T5963] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 206.691846][ T5963] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 206.694170][ T5963] usb 8-1: media controller created [ 206.703223][ T5963] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.732744][ T5963] usb 8-1: selecting invalid altsetting 6 [ 206.734512][ T5963] usb 8-1: digital interface selection failed (-22) [ 206.736483][ T5963] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 206.740862][ T5963] usb 8-1: setting power OFF [ 206.742624][ T5963] dvb-usb: bulk message failed: -22 (2/0) [ 206.744720][ T5963] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 206.747793][ T5963] (NULL device *): no alternate interface [ 206.762998][ T5963] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 208.331832][T10190] ptrace attach of "/syz-executor exec"[5953] was attempted by ""[10190] [ 209.287414][ T24] usb 8-1: USB disconnect, device number 11 [ 210.060969][T10234] wireguard0: entered promiscuous mode [ 210.063462][T10234] wireguard0: entered allmulticast mode [ 210.104706][T10236] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 210.108701][T10236] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 210.275324][ T5999] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 210.442355][ T5999] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.446816][ T5999] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 210.450912][ T5999] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 210.456664][ T5999] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 210.460641][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.461407][T10243] lo speed is unknown, defaulting to 1000 [ 210.467447][T10243] lo speed is unknown, defaulting to 1000 [ 210.468206][T10230] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 210.472631][T10243] lo speed is unknown, defaulting to 1000 [ 210.476882][ T5999] hub 5-1:1.0: bad descriptor, ignoring hub [ 210.479336][T10243] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 210.479985][ T5999] hub 5-1:1.0: probe with driver hub failed with error -5 [ 210.486699][ T5999] cdc_wdm 5-1:1.0: skipping garbage [ 210.488110][T10243] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 210.489117][ T5999] cdc_wdm 5-1:1.0: skipping garbage [ 210.491097][ T5999] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 210.498849][ T5999] cdc_wdm 5-1:1.0: Unknown control protocol [ 210.521249][T10243] lo speed is unknown, defaulting to 1000 [ 210.531321][T10243] lo speed is unknown, defaulting to 1000 [ 210.536677][T10243] lo speed is unknown, defaulting to 1000 [ 210.538989][T10243] lo speed is unknown, defaulting to 1000 [ 210.759015][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 210.761606][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 210.765178][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 210.767847][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 211.010680][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 211.013586][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 211.016780][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 211.020247][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 211.023244][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 211.025840][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 211.028454][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 211.030893][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 211.033321][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 211.036006][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 211.038749][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 211.041469][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 211.044263][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 211.046985][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 211.049642][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 211.052136][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 212.986633][ T65] usb 5-1: USB disconnect, device number 11 [ 213.447217][T10303] input: syz0 as /devices/virtual/input/input11 [ 213.984962][ T24] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 214.158039][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.162796][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.167646][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 214.170935][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.383015][ T24] usb 8-1: usb_control_msg returned -32 [ 214.387820][ T24] usbtmc 8-1:16.0: can't read capabilities [ 214.967367][ T5999] usb 8-1: USB disconnect, device number 12 [ 216.984884][ T24] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 217.167559][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.170510][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.175755][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 217.179985][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.344053][T10384] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 217.347871][T10384] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 217.389937][ T24] usb 6-1: usb_control_msg returned -32 [ 217.391532][ T24] usbtmc 6-1:16.0: can't read capabilities [ 217.755064][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 217.914749][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 217.917760][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.921480][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 217.924451][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.929801][ T24] usb 5-1: config 0 descriptor?? [ 217.946925][ T5999] usb 6-1: USB disconnect, device number 11 [ 218.134428][T10405] blktrace: Concurrent blktraces are not allowed on sg0 [ 218.139854][ T24] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 218.542583][ T9] usb 5-1: USB disconnect, device number 12 [ 218.734836][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 218.895750][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 218.905527][ T24] usb 6-1: config 0 has no interfaces? [ 218.907695][ T24] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 218.915065][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.923287][ T24] usb 6-1: config 0 descriptor?? [ 219.219094][ T65] libceph: connect (1)[c::]:6789 error -101 [ 219.224851][ T65] libceph: mon0 (1)[c::]:6789 connect error [ 219.334965][ T65] usb 6-1: USB disconnect, device number 12 [ 219.487928][ T29] libceph: connect (1)[c::]:6789 error -101 [ 219.490754][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 219.772353][T10423] ceph: No mds server is up or the cluster is laggy [ 220.267757][ T24] kernel write not supported for file /967/timerslack_ns (pid: 24 comm: kworker/2:0) [ 224.690760][ T5303] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 224.695446][ T5303] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 224.699298][ T5303] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 224.702424][ T5303] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 224.708146][ T5303] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 224.732019][T10588] lo speed is unknown, defaulting to 1000 [ 224.839160][T10588] chnl_net:caif_netlink_parms(): no params data found [ 225.022672][T10588] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.025756][T10588] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.028210][T10588] bridge_slave_0: entered allmulticast mode [ 225.031170][T10588] bridge_slave_0: entered promiscuous mode [ 225.040910][T10588] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.045291][T10588] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.048744][T10588] bridge_slave_1: entered allmulticast mode [ 225.056187][T10588] bridge_slave_1: entered promiscuous mode [ 225.140099][T10588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.144634][T10588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.201832][T10588] team0: Port device team_slave_0 added [ 225.214978][T10588] team0: Port device team_slave_1 added [ 225.300951][T10588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.303283][T10588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.311540][T10588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.317304][T10588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.319475][T10588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.327714][T10588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.383741][T10588] hsr_slave_0: entered promiscuous mode [ 225.386122][T10588] hsr_slave_1: entered promiscuous mode [ 225.388006][T10588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.390131][T10588] Cannot create hsr debugfs directory [ 225.545403][T10588] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 225.550832][T10588] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 225.558201][T10588] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 225.565501][T10588] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 225.638697][T10588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.667644][T10588] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.680913][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.683622][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.693035][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.695782][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.740581][T10588] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 225.749530][T10588] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.770019][T10616] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 225.771935][T10616] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 225.773946][T10616] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 225.778299][T10616] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.780675][T10616] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 225.783916][T10616] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 225.916224][T10588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.090211][T10588] veth0_vlan: entered promiscuous mode [ 226.097052][T10588] veth1_vlan: entered promiscuous mode [ 226.124683][T10588] veth0_macvtap: entered promiscuous mode [ 226.129359][T10588] veth1_macvtap: entered promiscuous mode [ 226.137889][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.140768][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.143515][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.147583][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.150518][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.153641][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.156684][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.159650][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.163240][T10588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.168848][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.172051][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.175050][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.178019][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.180824][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.184001][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.187073][T10588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.189874][T10588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.193483][T10588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.199965][T10588] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.203101][T10588] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.206313][T10588] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.209035][T10588] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.259341][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.262508][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.282689][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.287201][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.571645][T10648] ptrace attach of "/syz-executor exec"[10588] was attempted by ""[10648] [ 227.735122][ T5961] Bluetooth: hci0: command 0x0419 tx timeout [ 227.806951][ T5961] Bluetooth: hci1: command 0x041b tx timeout [ 227.806998][ T5957] Bluetooth: hci2: command 0x0419 tx timeout [ 227.810839][ T5303] Bluetooth: hci3: command 0x0419 tx timeout [ 228.119444][T10659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1340'. [ 229.647536][T10686] ptrace attach of "/syz-executor exec"[10588] was attempted by ""[10686] [ 229.756866][T10691] overlayfs: missing 'lowerdir' [ 229.836279][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 229.887934][ T5303] Bluetooth: hci1: command 0x041b tx timeout [ 230.138582][T10705] overlayfs: failed to resolve './file0': -2 [ 230.966382][ T57] IPVS: starting estimator thread 0... [ 230.971550][ T58] hid-generic C990:0003:007F.0009: unknown main item tag 0x0 [ 230.975134][ T58] hid-generic C990:0003:007F.0009: unknown main item tag 0x0 [ 230.977469][ T58] hid-generic C990:0003:007F.0009: unknown main item tag 0x0 [ 230.980185][ T58] hid-generic C990:0003:007F.0009: unknown main item tag 0x0 [ 230.982821][ T58] hid-generic C990:0003:007F.0009: unknown main item tag 0x0 [ 230.985566][ T58] hid-generic C990:0003:007F.0009: unknown main item tag 0x0 [ 230.987646][ T58] hid-generic C990:0003:007F.0009: unknown main item tag 0x0 [ 230.990044][ T58] hid-generic C990:0003:007F.0009: unknown main item tag 0x0 [ 230.992040][ T58] hid-generic C990:0003:007F.0009: unknown main item tag 0x0 [ 230.994091][ T58] hid-generic C990:0003:007F.0009: unknown main item tag 0x0 [ 230.996291][ T58] hid-generic C990:0003:007F.0009: unknown main item tag 0x0 [ 230.998374][ T58] hid-generic C990:0003:007F.0009: unknown main item tag 0x0 [ 231.000424][ T58] hid-generic C990:0003:007F.0009: unknown main item tag 0x0 [ 231.002728][ T58] hid-generic C990:0003:007F.0009: unknown main item tag 0x0 [ 231.005738][ T58] hid-generic C990:0003:007F.0009: unknown main item tag 0x0 [ 231.007965][ T58] hid-generic C990:0003:007F.0009: unknown main item tag 0x0 [ 231.010260][ T58] hid-generic C990:0003:007F.0009: unknown main item tag 0x0 [ 231.018138][ T58] hid-generic C990:0003:007F.0009: hidraw1: HID v0.00 Device [syz0] on syz1 [ 231.044958][T10718] lo speed is unknown, defaulting to 1000 [ 231.074929][T10717] IPVS: using max 43 ests per chain, 103200 per kthread [ 231.317679][T10725] vlan2: entered allmulticast mode [ 231.319910][T10725] bond0: entered allmulticast mode [ 231.321825][T10725] bond_slave_0: entered allmulticast mode [ 231.324129][T10725] bond_slave_1: entered allmulticast mode [ 231.965372][ T5957] Bluetooth: hci1: command 0x041b tx timeout [ 232.949238][T10757] infiniband syz1: set active [ 232.951330][T10757] infiniband syz1: added bond0 [ 232.989713][T10757] RDS/IB: syz1: added [ 232.991213][T10757] smc: adding ib device syz1 with port count 1 [ 232.993021][T10757] smc: ib device syz1 port 1 has pnetid [ 233.142463][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 233.142538][ T40] audit: type=1326 audit(1744572492.818:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10768 comm="syz.3.1377" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf741e579 code=0x0 [ 233.637230][T10777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1380'. [ 233.757165][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 233.904826][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 233.908262][ T24] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 233.911047][ T24] usb 9-1: config 0 has no interface number 0 [ 233.912868][ T24] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.916465][ T24] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 233.919464][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.925712][ T24] usb 9-1: config 0 descriptor?? [ 233.937223][ T24] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 233.998881][T10787] mkiss: ax0: crc mode is auto. [ 234.045296][ T5303] Bluetooth: hci1: command 0x041b tx timeout [ 234.131640][ T5963] usb 9-1: USB disconnect, device number 2 [ 235.837545][T10829] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 235.841305][T10829] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 235.856176][T10830] ptrace attach of "/syz-executor exec"[5960] was attempted by ""[10830] [ 236.125169][ T5303] Bluetooth: hci1: command 0x041b tx timeout [ 236.602558][T10841] blktrace: Concurrent blktraces are not allowed on sg0 [ 237.185990][ T5303] Bluetooth: hci3: unexpected event for opcode 0x0405 [ 237.539929][T10864] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 237.543342][T10864] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 237.776274][T10868] ptrace attach of "/syz-executor exec"[10588] was attempted by ""[10868] [ 238.205007][ T5303] Bluetooth: hci1: command 0x041b tx timeout [ 239.210298][T10895] netlink: 'syz.0.1419': attribute type 4 has an invalid length. [ 239.796744][T10909] overlayfs: overlapping lowerdir path [ 239.804008][T10909] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 240.015067][ T57] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 240.165101][ T57] usb 6-1: Using ep0 maxpacket: 16 [ 240.168642][ T57] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 240.170930][ T57] usb 6-1: config 0 has no interface number 0 [ 240.172842][ T57] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.177166][ T57] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.180557][ T57] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 240.186324][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.190237][ T57] usb 6-1: config 0 descriptor?? [ 240.284812][ T5303] Bluetooth: hci1: command 0x041b tx timeout [ 240.488913][T10927] blktrace: Concurrent blktraces are not allowed on sg0 [ 240.802332][ T57] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.1/0003:28BD:0071.000A/input/input12 [ 240.871938][ T57] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.1/0003:28BD:0071.000A/input/input13 [ 240.877485][ T57] uclogic 0003:28BD:0071.000A: input,hidraw1: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 241.002505][ T24] usb 6-1: USB disconnect, device number 13 [ 241.455622][T10948] netlink: 'syz.4.1439': attribute type 1 has an invalid length. [ 241.459553][T10948] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1439'. [ 241.527490][ T58] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 241.675042][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 241.679399][ T58] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 241.699201][ T58] usb 5-1: config 0 has no interface number 0 [ 241.702336][ T58] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 241.705806][ T58] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 241.709291][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.715161][ T58] usb 5-1: config 0 descriptor?? [ 241.721195][ T58] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 241.769826][T10958] blktrace: Concurrent blktraces are not allowed on sg0 [ 242.166893][T10962] Invalid ELF header magic: != ELF [ 242.375152][ T5303] Bluetooth: hci1: command 0x041b tx timeout [ 242.936995][ T58] usb 5-1: USB disconnect, device number 13 [ 244.287876][ T40] audit: type=1804 audit(1744572503.968:112): pid=11010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1462" name="/newroot/343/bus/file1" dev="overlay" ino=1996 res=1 errno=0 [ 244.978041][T11028] sp0: Synchronizing with TNC [ 244.981842][T11027] [U] è [ 245.021528][T11029] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 245.448187][T11039] ptrace attach of "/syz-executor exec"[5968] was attempted by ""[11039] [ 246.636395][T11076] ptrace attach of "/syz-executor exec"[10588] was attempted by ""[11076] [ 247.640923][T11090] dccp_invalid_packet: P.Data Offset(100) too large [ 247.915178][T11096] netlink: 'syz.0.1489': attribute type 11 has an invalid length. [ 247.917413][T11096] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1489'. [ 248.747705][T11130] ptrace attach of "/syz-executor exec"[5953] was attempted by ""[11130] [ 249.740817][T11149] overlayfs: failed to resolve './file1': -2 [ 250.613189][T11156] ptrace attach of "/syz-executor exec"[5953] was attempted by ""[11156] [ 251.140116][T11164] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 251.141988][T11164] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 251.144430][T11164] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.149568][T11164] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 251.165268][ T5999] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 251.325167][ T5999] usb 9-1: Using ep0 maxpacket: 8 [ 251.348104][ T5999] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 251.358350][ T5999] usb 9-1: config 0 has no interface number 0 [ 251.360266][ T5999] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 251.363220][ T5999] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 251.366865][ T5999] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.370392][ T5999] usb 9-1: config 0 descriptor?? [ 251.377686][ T5999] iowarrior 9-1:0.1: no interrupt-in endpoint found [ 251.582961][ T1019] usb 9-1: USB disconnect, device number 3 [ 251.832915][T11179] netlink: 'syz.0.1510': attribute type 1 has an invalid length. [ 251.835823][T11179] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1510'. [ 252.070017][T11183] ptrace attach of "/syz-executor exec"[5960] was attempted by ""[11183] [ 252.414919][ T40] audit: type=1326 audit(1744572512.088:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11188 comm="syz.1.1514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7fc00000 [ 253.072116][ T40] audit: type=1326 audit(1744572512.748:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11188 comm="syz.1.1514" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf742e598 code=0x7fc00000 [ 253.086182][ T5303] Bluetooth: hci0: command 0x0419 tx timeout [ 253.165531][ T5303] Bluetooth: hci3: command 0x0419 tx timeout [ 253.167739][ T5303] Bluetooth: hci2: command 0x0419 tx timeout [ 253.169837][ T5303] Bluetooth: hci1: command 0x041b tx timeout [ 253.597857][T11208] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1519'. [ 253.884962][ T5963] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 254.034813][ T5963] usb 5-1: Using ep0 maxpacket: 8 [ 254.038610][ T5963] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 254.041570][ T5963] usb 5-1: config 0 has no interface number 0 [ 254.043950][ T5963] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 254.048243][ T5963] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 254.052293][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.057415][ T5963] usb 5-1: config 0 descriptor?? [ 254.062692][ T5963] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 254.264362][ T5999] usb 5-1: USB disconnect, device number 14 [ 255.087846][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.090545][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.212758][T11248] netlink: 'syz.0.1528': attribute type 10 has an invalid length. [ 255.219845][T11248] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.225924][T11248] bond0: (slave team0): Enslaving as an active interface with an up link [ 255.929202][T11261] netlink: 'syz.0.1534': attribute type 1 has an invalid length. [ 255.932045][T11261] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1534'. [ 256.997288][T11281] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1540'. [ 257.001218][T11281] nbd: must specify at least one socket [ 257.011720][T11282] blktrace: Concurrent blktraces are not allowed on sg0 [ 257.026971][T11284] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1541'. [ 257.298076][T11290] netlink: 'syz.4.1544': attribute type 1 has an invalid length. [ 257.315172][T11290] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1544'. [ 258.121964][T11305] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1550'. [ 258.154428][T11307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1551'. [ 258.185935][T11309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1552'. [ 258.189409][T11309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1552'. [ 258.239702][T11312] netlink: 'syz.0.1554': attribute type 1 has an invalid length. [ 258.242950][T11312] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1554'. [ 258.568288][T11325] netlink: 'syz.0.1555': attribute type 11 has an invalid length. [ 259.076496][T11341] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 259.078460][T11341] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 259.080317][T11341] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 259.085869][T11341] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 259.390191][T11363] __nla_validate_parse: 1 callbacks suppressed [ 259.390202][T11363] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1559'. [ 259.394895][T11363] nbd: must specify at least one socket [ 259.409207][T11367] netlink: 'syz.0.1563': attribute type 1 has an invalid length. [ 259.413388][T11367] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1563'. [ 260.494756][ T65] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 260.608648][T11399] netlink: 'syz.3.1571': attribute type 11 has an invalid length. [ 260.611170][T11399] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1571'. [ 260.664716][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 260.668118][ T65] usb 6-1: config 0 has no interfaces? [ 260.669773][ T65] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 260.672485][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.696012][ T65] usb 6-1: config 0 descriptor?? [ 261.005162][ T5961] Bluetooth: hci0: command 0x0419 tx timeout [ 261.085293][ T5961] Bluetooth: hci3: command 0x0419 tx timeout [ 261.085314][ T5957] Bluetooth: hci2: command 0x0419 tx timeout [ 261.091414][ T65] usb 6-1: USB disconnect, device number 14 [ 261.165111][ T5957] Bluetooth: hci1: command 0x041b tx timeout [ 261.615527][T11430] ptrace attach of "/syz-executor exec"[5960] was attempted by ""[11430] [ 261.839384][T11436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1580'. [ 261.882165][T11438] syz.4.1581 uses obsolete (PF_INET,SOCK_PACKET) [ 261.945189][ T5999] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 262.095436][ T5999] usb 6-1: Using ep0 maxpacket: 16 [ 262.100837][ T5999] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 262.103896][ T5999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.107097][ T5999] usb 6-1: Product: syz [ 262.108316][ T5999] usb 6-1: Manufacturer: syz [ 262.109661][ T5999] usb 6-1: SerialNumber: syz [ 262.112507][ T5999] usb 6-1: config 0 descriptor?? [ 262.115990][ T5999] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 262.118667][ T5999] usb 6-1: Detected FT232H [ 262.243379][T11444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1582'. [ 262.371302][T11449] netlink: 'syz.0.1585': attribute type 1 has an invalid length. [ 262.373497][T11449] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1585'. [ 262.567639][ T5999] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 263.972263][T11494] ptrace attach of "/syz-executor exec"[10588] was attempted by ""[11494] [ 264.726385][ T5999] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 264.742595][ T5999] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 264.750974][ T5999] usb 6-1: USB disconnect, device number 15 [ 264.761415][ T5999] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 264.768079][ T5999] ftdi_sio 6-1:0.0: device disconnected [ 265.493954][T11521] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1604'. [ 265.496989][T11521] nbd: must specify at least one socket [ 266.297561][T11532] ptrace attach of "/syz-executor exec"[5968] was attempted by ""[11532] [ 267.015068][T11546] netlink: 'syz.1.1612': attribute type 11 has an invalid length. [ 267.017493][T11546] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1612'. [ 267.225323][ T5999] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 267.240313][T11561] blktrace: Concurrent blktraces are not allowed on sg0 [ 267.385043][ T5999] usb 5-1: Using ep0 maxpacket: 8 [ 267.387782][ T5999] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 267.390116][ T5999] usb 5-1: config 0 has no interface number 0 [ 267.392203][ T5999] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 267.397312][ T5999] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 267.399816][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.405420][ T5999] usb 5-1: config 0 descriptor?? [ 267.410700][ T5999] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 267.612551][ T5999] usb 5-1: USB disconnect, device number 15 [ 267.685667][T11577] macsec0: entered promiscuous mode [ 267.688462][T11577] macsec0: entered allmulticast mode [ 267.690500][T11577] veth1_macvtap: entered allmulticast mode [ 267.985499][T11579] netlink: 'syz.3.1616': attribute type 1 has an invalid length. [ 267.987732][T11579] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1616'. [ 268.072136][T11582] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1617'. [ 268.074705][T11582] nbd: must specify at least one socket [ 269.157571][T11604] netlink: 'syz.4.1622': attribute type 11 has an invalid length. [ 269.160643][T11604] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1622'. [ 269.181330][T11605] blktrace: Concurrent blktraces are not allowed on sg0 [ 270.664251][T11655] netlink: 'syz.4.1632': attribute type 1 has an invalid length. [ 270.670563][T11655] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1632'. [ 270.711344][T11657] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1631'. [ 270.715509][T11657] nbd: must specify at least one socket [ 272.858471][ T5999] libceph: connect (1)[c::]:6789 error -101 [ 272.871495][ T5999] libceph: mon0 (1)[c::]:6789 connect error [ 272.879187][T11720] ceph: No mds server is up or the cluster is laggy [ 272.933276][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1639'. [ 273.098445][T11728] blktrace: Concurrent blktraces are not allowed on sg0 [ 274.421772][T11750] input: syz1 as /devices/virtual/input/input14 [ 275.812896][T11775] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 275.819145][T11775] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 275.823945][T11775] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 275.829996][T11775] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 277.239445][T11804] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1658'. [ 277.242958][T11804] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.245791][T11804] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.805075][ T5957] Bluetooth: hci0: command 0x0419 tx timeout [ 277.895678][ T5957] Bluetooth: hci1: command 0x041b tx timeout [ 277.895741][ T5961] Bluetooth: hci3: command 0x0419 tx timeout [ 277.895762][ T5303] Bluetooth: hci2: command 0x0419 tx timeout [ 278.282281][T11822] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1665'. [ 278.285186][T11822] nbd: must specify at least one socket [ 278.493148][T11827] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1667'. [ 278.667548][T11840] blktrace: Concurrent blktraces are not allowed on sg0 [ 278.814782][ T65] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 279.003215][ T65] usb 9-1: config 68 has an invalid interface number: 220 but max is 0 [ 279.075047][ T65] usb 9-1: config 68 has no interface number 0 [ 279.077695][ T65] usb 9-1: config 68 interface 220 has no altsetting 0 [ 279.082683][ T65] usb 9-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=55.7a [ 279.086128][ T65] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.089113][ T65] usb 9-1: Product: syz [ 279.090802][ T65] usb 9-1: Manufacturer: syz [ 279.092576][ T65] usb 9-1: SerialNumber: syz [ 279.309906][T11831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.314508][T11831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.325440][ T65] gspca_main: spca501-2.14.0 probing 0497:c001 [ 279.332344][ T65] gspca_spca501: reg write: error -71 [ 279.334199][ T65] spca501 9-1:68.220: Reg write failed for 0x02,0x07,0x05 [ 279.337665][ T65] spca501 9-1:68.220: probe with driver spca501 failed with error -22 [ 279.350568][ T65] usb 9-1: USB disconnect, device number 4 [ 279.364114][T11854] ptrace attach of "/syz-executor exec"[5960] was attempted by ""[11854] [ 279.875472][T11859] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1676'. [ 280.466822][T11870] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1679'. [ 280.733942][T11887] netlink: 'syz.1.1683': attribute type 1 has an invalid length. [ 280.737739][T11887] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1683'. [ 280.827769][T11893] loop2: detected capacity change from 0 to 7 [ 280.836243][T11893] Dev loop2: unable to read RDB block 7 [ 280.843806][T11893] loop2: AHDI p1 p2 [ 280.846307][T11893] loop2: partition table partially beyond EOD, truncated [ 280.851811][T11893] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 280.870773][T11835] udevd[11835]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 281.042887][T11907] netlink: 'syz.0.1693': attribute type 1 has an invalid length. [ 281.045388][T11907] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1693'. [ 281.261119][T11917] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1695'. [ 281.264940][T11917] nbd: must specify at least one socket [ 282.359012][T11940] netlink: 'syz.1.1703': attribute type 1 has an invalid length. [ 282.361331][T11940] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1703'. [ 282.518541][T11957] overlayfs: failed to resolve './file1': -2 [ 283.137627][T11962] gtp0: entered promiscuous mode [ 283.148161][T11962] gtp0: entered allmulticast mode [ 283.725551][T11974] netlink: 'syz.3.1710': attribute type 7 has an invalid length. [ 283.741631][T11974] : entered promiscuous mode [ 284.079745][T11979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1712'. [ 284.083694][T11979] nbd: must specify at least one socket [ 284.942155][T11993] netlink: 'syz.3.1711': attribute type 11 has an invalid length. [ 284.944474][T11993] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1711'. [ 284.985871][T11992] blktrace: Concurrent blktraces are not allowed on sg0 [ 285.765130][ T24] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 285.925352][ T24] usb 8-1: config 0 has no interfaces? [ 285.930108][ T24] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 285.932928][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.936809][ T24] usb 8-1: Product: syz [ 285.938138][ T24] usb 8-1: Manufacturer: syz [ 285.939909][ T24] usb 8-1: SerialNumber: syz [ 285.948892][ T24] usb 8-1: config 0 descriptor?? [ 286.029056][T12037] vcan0: tx drop: invalid sa for name 0x00000000000000f0 [ 287.020967][T12052] ptrace attach of "/syz-executor exec"[5960] was attempted by ""[12052] [ 287.145792][ C2] hpet: Lost 1 RTC interrupts [ 287.617484][T12055] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1730'. [ 287.703628][T12061] netlink: 'syz.0.1733': attribute type 1 has an invalid length. [ 287.707638][T12061] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1733'. [ 288.440078][ T5995] usb 8-1: USB disconnect, device number 13 [ 288.444138][T12075] gtp0: entered promiscuous mode [ 288.446055][T12075] gtp0: entered allmulticast mode [ 288.751230][T12080] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 288.754146][T12080] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 288.758273][T12080] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 288.761582][T12080] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 289.002078][T12102] syz_tun: entered allmulticast mode [ 289.549669][T12085] syz_tun: left allmulticast mode [ 290.685316][ T5961] Bluetooth: hci0: command 0x0419 tx timeout [ 290.765161][ T5961] Bluetooth: hci1: command 0x041b tx timeout [ 290.775134][ T5961] Bluetooth: hci3: command 0x0419 tx timeout [ 290.777008][ T5961] Bluetooth: hci2: command 0x0419 tx timeout [ 291.005899][ T40] audit: type=1800 audit(1744573003.691:115): pid=12128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1753" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 291.773456][T12165] gtp0: entered promiscuous mode [ 291.775835][T12165] gtp0: entered allmulticast mode [ 292.607253][T12179] netlink: 'syz.3.1759': attribute type 11 has an invalid length. [ 292.612195][T12179] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1759'. [ 293.142532][T12192] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 293.146555][T12192] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 293.149551][T12192] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 293.151652][T12192] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 295.181065][ T5957] Bluetooth: hci1: command 0x041b tx timeout [ 295.183361][ T5961] Bluetooth: hci3: command 0x0419 tx timeout [ 295.186093][ T5303] Bluetooth: hci2: command 0x0419 tx timeout [ 295.188268][ T5303] Bluetooth: hci0: command 0x0419 tx timeout [ 295.419629][T12258] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1773'. [ 295.937693][ T40] audit: type=1326 audit(1744573008.621:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12267 comm="syz.1.1777" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742e579 code=0x0 [ 296.104759][ T5963] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 296.254703][ T5963] usb 5-1: Using ep0 maxpacket: 8 [ 296.258141][ T5963] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 296.261322][ T5963] usb 5-1: config 0 has no interface number 0 [ 296.263890][ T5963] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 296.267909][ T5963] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 296.271317][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.275759][ T5963] usb 5-1: config 0 descriptor?? [ 296.280940][ T5963] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 296.482457][ T5963] usb 5-1: USB disconnect, device number 16 [ 296.489049][T12277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1779'. [ 297.472592][T12293] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 297.474739][T12293] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 297.476688][T12293] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 297.478552][T12293] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 299.404798][ T5966] Bluetooth: hci0: command 0x0419 tx timeout [ 299.494884][ T5957] Bluetooth: hci3: command 0x0419 tx timeout [ 299.495137][ T5961] Bluetooth: hci2: command 0x0419 tx timeout [ 299.496827][ T5966] Bluetooth: hci1: command 0x041b tx timeout [ 300.177040][ T65] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 300.357250][ T65] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 300.360106][ T65] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.363643][ T65] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 300.366804][ T65] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.373012][ T65] usbtmc 8-1:16.0: bulk endpoints not found [ 300.374856][ T5963] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 300.544774][ T5963] usb 5-1: Using ep0 maxpacket: 8 [ 300.548390][ T5963] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 300.551330][ T5963] usb 5-1: config 0 has no interface number 0 [ 300.553450][ T5963] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 300.556604][ T5963] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 300.559342][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.567276][ T5963] usb 5-1: config 0 descriptor?? [ 300.570404][ T5963] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 300.771966][ T65] usb 5-1: USB disconnect, device number 17 [ 301.248968][T12411] bridge: RTM_NEWNEIGH with invalid ether address [ 301.316458][T12416] 9pnet_fd: Insufficient options for proto=fd [ 301.614919][ C2] hpet: Lost 2 RTC interrupts [ 301.964866][ C2] hpet: Lost 2 RTC interrupts [ 301.991772][ C2] hpet: Lost 1 RTC interrupts [ 302.055066][ C2] hpet: Lost 1 RTC interrupts [ 302.805039][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 302.862108][T12444] 9pnet_fd: Insufficient options for proto=fd [ 302.921708][ T5999] usb 8-1: USB disconnect, device number 14 [ 302.974915][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 302.979121][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 302.982758][ T9] usb 6-1: config 0 has no interface number 0 [ 302.984562][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 302.988103][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 302.991280][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.998883][ T9] usb 6-1: config 0 descriptor?? [ 303.005180][ T9] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 303.213812][ T5995] usb 6-1: USB disconnect, device number 16 [ 303.600661][T12461] netlink: 'syz.0.1829': attribute type 11 has an invalid length. [ 303.603428][T12461] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1829'. [ 305.003402][T12538] netlink: 'syz.1.1847': attribute type 11 has an invalid length. [ 305.006492][T12538] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1847'. [ 305.948232][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1857'. [ 305.952130][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1857'. [ 306.016410][T12595] gtp1: entered promiscuous mode [ 306.017932][T12595] gtp1: entered allmulticast mode [ 306.098423][T12601] blktrace: Concurrent blktraces are not allowed on sg0 [ 307.078183][T12623] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1869'. [ 307.081999][T12623] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1869'. [ 307.554770][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 307.562475][T12633] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1871'. [ 307.567241][T12633] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1871'. [ 307.570246][T12633] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1871'. [ 307.574032][T12633] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1871'. [ 307.704977][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 307.709036][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 307.712391][ T9] usb 5-1: config 0 has no interface number 0 [ 307.715577][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 307.719980][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 307.723498][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.730322][ T9] usb 5-1: config 0 descriptor?? [ 307.737776][ T9] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 307.744485][T12639] blktrace: Concurrent blktraces are not allowed on sg0 [ 307.943375][ T24] usb 5-1: USB disconnect, device number 18 [ 308.274828][ T5995] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 308.435225][ T5995] usb 9-1: Using ep0 maxpacket: 16 [ 308.439244][ T5995] usb 9-1: no configurations [ 308.441022][ T5995] usb 9-1: can't read configurations, error -22 [ 308.565770][ T5995] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 308.659083][T12661] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.662884][T12661] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.749804][T12661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.755523][ T5995] usb 9-1: Using ep0 maxpacket: 16 [ 308.762947][T12661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.770519][ T5995] usb 9-1: no configurations [ 308.772222][ T5995] usb 9-1: can't read configurations, error -22 [ 308.776001][ T5995] usb usb9-port1: attempt power cycle [ 308.904834][T12661] veth1_macvtap: left allmulticast mode [ 308.925350][T12661] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.929164][T12661] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.932888][T12661] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.942175][T12661] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.015187][ T5999] lo speed is unknown, defaulting to 1000 [ 309.017239][ T5999] syz0: Port: 1 Link DOWN [ 309.164812][ T5995] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 309.188198][ T5995] usb 9-1: Using ep0 maxpacket: 16 [ 309.207819][ T5995] usb 9-1: no configurations [ 309.215102][ T5995] usb 9-1: can't read configurations, error -22 [ 309.235391][T12668] __nla_validate_parse: 1 callbacks suppressed [ 309.235406][T12668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1883'. [ 309.354905][ T5995] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 309.395488][ T5995] usb 9-1: Using ep0 maxpacket: 16 [ 309.405289][ T5995] usb 9-1: no configurations [ 309.420348][ T5995] usb 9-1: can't read configurations, error -22 [ 309.436951][ T5995] usb usb9-port1: unable to enumerate USB device [ 310.261349][T12688] rdma_rxe: rxe_newlink: failed to add syz_tun [ 310.746363][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1893'. [ 311.456260][T12718] openvswitch: netlink: Multiple metadata blocks provided [ 311.479951][T12721] 9pnet_fd: Insufficient options for proto=fd [ 311.535855][T12727] netlink: zone id is out of range [ 311.537694][T12727] netlink: zone id is out of range [ 311.539489][T12727] netlink: zone id is out of range [ 311.541188][T12727] netlink: zone id is out of range [ 311.543000][T12727] netlink: zone id is out of range [ 311.546299][T12727] netlink: zone id is out of range [ 311.547905][T12727] netlink: zone id is out of range [ 311.549502][T12727] netlink: zone id is out of range [ 311.551618][T12727] netlink: zone id is out of range [ 312.644070][T12751] can0: slcan on ptm0. [ 312.743823][T12755] 9pnet_fd: Insufficient options for proto=fd [ 312.898130][T12750] can0 (unregistered): slcan off ptm0. [ 313.045248][T12774] tipc: Enabling of bearer rejected, already enabled [ 313.145374][ T57] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 313.298101][ T57] usb 5-1: Using ep0 maxpacket: 16 [ 313.301886][ T57] usb 5-1: config 0 has no interfaces? [ 313.306699][ T57] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 313.309995][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.314122][ T57] usb 5-1: Product: syz [ 313.323738][ T57] usb 5-1: Manufacturer: syz [ 313.329439][ T57] usb 5-1: SerialNumber: syz [ 313.334785][ T57] usb 5-1: config 0 descriptor?? [ 313.390629][T12789] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 313.393593][T12789] overlayfs: failed to set xattr on upper [ 313.398753][T12789] overlayfs: ...falling back to redirect_dir=nofollow. [ 313.401405][T12789] overlayfs: ...falling back to index=off. [ 313.403680][T12789] overlayfs: ...falling back to uuid=null. [ 313.548449][ T57] usb 5-1: USB disconnect, device number 19 [ 313.590946][T12790] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 313.593010][T12790] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 313.599272][T12790] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 313.601650][T12790] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 313.681159][T12801] ptrace attach of "/syz-executor exec"[5953] was attempted by ""[12801] [ 315.554704][ T29] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 315.564839][ T5966] Bluetooth: hci0: command 0x0419 tx timeout [ 315.644886][ T5966] Bluetooth: hci1: command 0x041b tx timeout [ 315.645592][ T5957] Bluetooth: hci3: command 0x0419 tx timeout [ 315.647538][ T5966] Bluetooth: hci2: command 0x0419 tx timeout [ 315.726690][ T29] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 315.730944][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.734858][ T29] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 315.739640][ T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 315.742444][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.753525][ T29] usbtmc 6-1:16.0: bulk endpoints not found [ 316.486237][T12867] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 316.488981][T12867] overlayfs: failed to set xattr on upper [ 316.495188][T12867] overlayfs: ...falling back to redirect_dir=nofollow. [ 316.497333][T12867] overlayfs: ...falling back to index=off. [ 316.499059][T12867] overlayfs: ...falling back to uuid=null. [ 316.527846][T12869] net_ratelimit: 3 callbacks suppressed [ 316.527860][T12869] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 316.533793][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.536243][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.583822][T12871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.620103][ T29] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 316.623847][ T29] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 316.645893][ T218] wlan1: authenticated [ 316.645913][T12871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.663365][ T218] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 316.663987][T12871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.666648][ T218] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 316.671230][ T218] wlan1: associated [ 317.311445][T12894] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 317.316823][T12893] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 317.470009][T12890] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 317.472533][T12890] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 317.475683][T12890] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 317.478468][T12890] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 317.714797][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 317.874937][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 317.877668][ T9] usb 8-1: no configurations [ 317.879733][ T9] usb 8-1: can't read configurations, error -22 [ 318.004823][ T9] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 318.154748][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 318.156728][ T9] usb 8-1: no configurations [ 318.158207][ T9] usb 8-1: can't read configurations, error -22 [ 318.160242][ T9] usb usb8-port1: attempt power cycle [ 318.302989][ T5963] usb 6-1: USB disconnect, device number 17 [ 318.504881][ T9] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 318.536455][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 318.539045][ T9] usb 8-1: no configurations [ 318.540929][ T9] usb 8-1: can't read configurations, error -22 [ 318.567465][T12910] veth1_macvtap: entered allmulticast mode [ 318.664852][ T9] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 318.689857][ T24] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 318.691533][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 318.694773][ T9] usb 8-1: no configurations [ 318.696957][ T9] usb 8-1: can't read configurations, error -22 [ 318.700099][ T9] usb usb8-port1: unable to enumerate USB device [ 318.865140][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 318.869021][ T24] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 318.871617][ T24] usb 9-1: config 0 has no interface number 0 [ 318.873367][ T24] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 318.876556][ T24] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 318.879697][ T24] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 318.882268][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.887305][ T24] usb 9-1: config 0 descriptor?? [ 318.891651][ T24] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 319.092944][T12904] iowarrior 9-1:0.1: Error -90 while submitting URB [ 319.099053][ T9] usb 9-1: USB disconnect, device number 9 [ 319.258046][T12912] netlink: zone id is out of range [ 319.259872][T12912] netlink: zone id is out of range [ 319.261654][T12912] netlink: zone id is out of range [ 319.263432][T12912] netlink: zone id is out of range [ 319.265594][T12912] netlink: zone id is out of range [ 319.267259][T12912] netlink: zone id is out of range [ 319.268939][T12912] netlink: zone id is out of range [ 319.270796][T12912] netlink: zone id is out of range [ 319.272401][T12912] netlink: zone id is out of range [ 319.395503][T12919] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 319.397485][T12919] overlayfs: failed to set xattr on upper [ 319.400314][T12919] overlayfs: ...falling back to redirect_dir=nofollow. [ 319.402240][T12919] overlayfs: ...falling back to index=off. [ 319.403844][T12919] overlayfs: ...falling back to uuid=null. [ 319.405659][ T5966] Bluetooth: hci0: command 0x0419 tx timeout [ 319.486224][ T5961] Bluetooth: hci2: command 0x0419 tx timeout [ 319.487518][ T5966] Bluetooth: hci3: command 0x0419 tx timeout [ 319.491028][T12923] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.494817][ T5966] Bluetooth: hci1: command 0x041b tx timeout [ 319.746715][T12927] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1966'. [ 319.980113][ T40] audit: type=1326 audit(1744573032.661:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.4.1967" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 319.996191][ T40] audit: type=1326 audit(1744573032.671:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.4.1967" exe="/syz-executor" sig=0 arch=40000003 syscall=290 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 320.004396][ T40] audit: type=1326 audit(1744573032.671:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.4.1967" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 320.022167][ T40] audit: type=1326 audit(1744573032.671:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.4.1967" exe="/syz-executor" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 320.028862][ T40] audit: type=1326 audit(1744573032.701:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.4.1967" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 320.038955][ T40] audit: type=1326 audit(1744573032.721:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12928 comm="syz.4.1967" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 320.522782][T12946] 9pnet_fd: Insufficient options for proto=fd [ 321.374671][T12954] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 321.376968][T12954] overlayfs: failed to set xattr on upper [ 321.379108][T12954] overlayfs: ...falling back to redirect_dir=nofollow. [ 321.386184][T12954] overlayfs: ...falling back to index=off. [ 321.388139][T12954] overlayfs: ...falling back to uuid=null. [ 321.425728][T12957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1978'. [ 321.428371][T12957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1978'. [ 321.464895][T12961] can0: slcan on ptm0. [ 321.488126][T12963] fuse: Bad value for 'fd' [ 321.526043][T12960] can0 (unregistered): slcan off ptm0. [ 321.672978][T12977] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 322.173874][T12983] lo speed is unknown, defaulting to 1000 [ 322.184935][ T24] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 322.328050][T12986] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 322.330153][T12986] overlayfs: failed to set xattr on upper [ 322.331888][T12986] overlayfs: ...falling back to redirect_dir=nofollow. [ 322.334022][T12986] overlayfs: ...falling back to index=off. [ 322.334884][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 322.337925][T12986] overlayfs: ...falling back to uuid=null. [ 322.339356][ T24] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 322.342924][ T24] usb 8-1: config 0 has no interface number 0 [ 322.348684][ T24] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 322.352915][ T24] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 322.357904][ T24] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 322.362522][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.373838][ T24] usb 8-1: config 0 descriptor?? [ 322.380617][ T24] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 322.581709][T12991] netlink: 'syz.1.1989': attribute type 11 has an invalid length. [ 322.584141][T12991] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1989'. [ 322.588059][T12981] iowarrior 8-1:0.1: Error -90 while submitting URB [ 322.592159][ T24] usb 8-1: USB disconnect, device number 19 [ 322.636634][T12999] lo speed is unknown, defaulting to 1000 [ 322.640664][T12999] lo speed is unknown, defaulting to 1000 [ 322.648568][T12999] lo speed is unknown, defaulting to 1000 [ 322.842902][T12999] infiniband syz2: set down [ 322.845579][T12999] infiniband syz2: added lo [ 322.848603][ T57] lo speed is unknown, defaulting to 1000 [ 322.866828][T12999] RDS/IB: syz2: added [ 322.869867][T12999] smc: adding ib device syz2 with port count 1 [ 322.872548][T12999] smc: ib device syz2 port 1 has pnetid [ 322.876058][ T24] lo speed is unknown, defaulting to 1000 [ 322.880021][T12999] lo speed is unknown, defaulting to 1000 [ 322.988660][T12999] lo speed is unknown, defaulting to 1000 [ 323.129612][T12999] lo speed is unknown, defaulting to 1000 [ 323.203868][T13019] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 323.206397][T13018] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 323.291366][T12999] lo speed is unknown, defaulting to 1000 [ 323.367732][T13038] can0: slcan on ptm0. [ 323.436226][T12999] lo speed is unknown, defaulting to 1000 [ 323.475946][T13037] can0 (unregistered): slcan off ptm0. [ 323.662414][T13054] random: crng reseeded on system resumption [ 323.860030][T13062] netlink: 'syz.0.2009': attribute type 11 has an invalid length. [ 323.862692][T13062] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2009'. [ 324.633051][T13101] net_ratelimit: 1 callbacks suppressed [ 324.633067][T13101] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 324.645191][T13103] overlayfs: missing 'lowerdir' [ 325.619873][T13138] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2024'. [ 325.648049][T13140] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 325.650436][T13139] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 325.684030][T13144] openvswitch: netlink: EtherType 0 is less than min 600 [ 325.943947][T13158] overlayfs: missing 'lowerdir' [ 326.097243][T13119] Set syz1 is full, maxelem 65536 reached [ 326.670413][T13167] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 326.673337][T13166] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 326.701280][T13173] openvswitch: netlink: EtherType 0 is less than min 600 [ 326.825032][T13180] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 326.883501][T13187] netlink: 'syz.1.2039': attribute type 11 has an invalid length. [ 326.889833][T13187] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2039'. [ 326.910812][T13190] can0: slcan on ptm0. [ 327.047961][T13189] can0 (unregistered): slcan off ptm0. [ 327.225785][T13219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2055'. [ 327.228440][T13219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2055'. [ 327.262812][T13223] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 327.265051][T13223] overlayfs: failed to set xattr on upper [ 327.266915][T13223] overlayfs: ...falling back to redirect_dir=nofollow. [ 327.268986][T13223] overlayfs: ...falling back to index=off. [ 327.271151][T13223] overlayfs: ...falling back to uuid=null. [ 327.727857][T13251] can0: slcan on ptm0. [ 327.927098][T13269] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 327.929694][T13269] overlayfs: failed to set xattr on upper [ 327.931922][T13269] overlayfs: ...falling back to redirect_dir=nofollow. [ 327.935497][T13269] overlayfs: ...falling back to index=off. [ 327.938734][T13269] overlayfs: ...falling back to uuid=null. [ 327.956100][T13250] can0 (unregistered): slcan off ptm0. [ 328.375335][T13301] gtp1: entered promiscuous mode [ 328.377424][T13302] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 328.381231][T13301] gtp1: entered allmulticast mode [ 328.496402][T13293] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 328.498453][T13293] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 328.501181][T13293] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 328.503164][T13293] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 328.754933][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 328.914833][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 328.919863][ T9] usb 9-1: config 8 has an invalid interface number: 127 but max is 0 [ 328.923051][ T9] usb 9-1: config 8 has no interface number 0 [ 328.925143][ T9] usb 9-1: config 8 interface 127 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 328.928253][ T9] usb 9-1: config 8 interface 127 has no altsetting 0 [ 328.931882][ T9] usb 9-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice=5c.ec [ 328.935267][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.937944][ T9] usb 9-1: Product: syz [ 328.939700][ T9] usb 9-1: Manufacturer: syz [ 328.941672][ T9] usb 9-1: SerialNumber: syz [ 329.074977][T13315] can0: slcan on ptm0. [ 329.173842][ T9] usb 9-1: USB disconnect, device number 10 [ 329.218177][T13314] can0 (unregistered): slcan off ptm0. [ 329.330096][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2081'. [ 330.202324][T13341] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 330.204423][T13341] overlayfs: failed to set xattr on upper [ 330.206208][T13341] overlayfs: ...falling back to redirect_dir=nofollow. [ 330.208606][T13341] overlayfs: ...falling back to index=off. [ 330.210323][T13341] overlayfs: ...falling back to uuid=null. [ 330.334756][ T1019] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 330.544918][ T5966] Bluetooth: hci1: command 0x041b tx timeout [ 330.549245][ T5966] Bluetooth: hci3: command 0x0419 tx timeout [ 330.551867][ T5966] Bluetooth: hci2: command 0x0419 tx timeout [ 330.562078][ T5966] Bluetooth: hci0: command 0x0419 tx timeout [ 330.683640][ C2] hpet: Lost 3 RTC interrupts [ 330.694787][ T1019] usb 9-1: Using ep0 maxpacket: 16 [ 330.698077][ T1019] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 330.701016][ T1019] usb 9-1: can't read configurations, error -61 [ 330.824920][ T1019] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 330.984707][ T1019] usb 9-1: Using ep0 maxpacket: 16 [ 330.990579][ T1019] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 330.996469][ T1019] usb 9-1: can't read configurations, error -61 [ 331.001059][ T1019] usb usb9-port1: attempt power cycle [ 331.067659][T13352] openvswitch: netlink: EtherType 0 is less than min 600 [ 331.250611][T13357] can0: slcan on ptm0. [ 331.343733][T13356] can0 (unregistered): slcan off ptm0. [ 331.375036][ T1019] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 331.595539][ T1019] usb 9-1: Using ep0 maxpacket: 16 [ 331.599099][ T1019] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 331.601310][ T1019] usb 9-1: can't read configurations, error -61 [ 331.744739][ T1019] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 331.775153][ T1019] usb 9-1: Using ep0 maxpacket: 16 [ 331.778224][ T1019] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 331.780551][ T1019] usb 9-1: can't read configurations, error -61 [ 331.782773][ T1019] usb usb9-port1: unable to enumerate USB device [ 332.127635][ T209] ------------[ cut here ]------------ [ 332.129357][ T209] WARNING: CPU: 3 PID: 209 at net/mac80211/mlme.c:4306 ieee80211_mgd_probe_ap_send+0x461/0x510 [ 332.132463][ T209] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 332.134014][ T209] CPU: 3 UID: 0 PID: 209 Comm: kworker/u32:5 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(full) [ 332.139930][ T209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 332.143167][ T209] Workqueue: events_unbound cfg80211_wiphy_work [ 332.145896][ T209] RIP: 0010:ieee80211_mgd_probe_ap_send+0x461/0x510 [ 332.148160][ T209] Code: c7 c7 94 ae 86 90 e8 ae 68 20 f7 e9 0e fc ff ff e8 74 68 20 f7 e9 4b fc ff ff e8 9a 68 20 f7 e9 8a fc ff ff e8 20 ec bb f6 90 <0f> 0b 90 e9 e4 fc ff ff 48 89 34 24 e8 9e 69 20 f7 48 8b 34 24 e9 [ 332.154600][ T209] RSP: 0018:ffffc90002cafb80 EFLAGS: 00010293 [ 332.156713][ T209] RAX: 0000000000000000 RBX: ffff88804ff88d80 RCX: ffffc90002cafb1c [ 332.159633][ T209] RDX: ffff888021c62440 RSI: ffffffff8aff50a0 RDI: ffff888021c62884 [ 332.161959][ T209] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 332.164550][ T209] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 332.167212][ T209] R13: ffff88804ff8aa22 R14: ffff88804ff89720 R15: 0000000000000000 [ 332.170171][ T209] FS: 0000000000000000(0000) GS:ffff888097ab9000(0000) knlGS:0000000000000000 [ 332.173555][ T209] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.175543][ T209] CR2: 000000002ff16ffc CR3: 00000000655cc000 CR4: 0000000000352ef0 [ 332.177821][ T209] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 332.180096][ T209] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 332.182376][ T209] Call Trace: [ 332.183352][ T209] [ 332.184210][ T209] ieee80211_mgd_probe_ap+0x3a6/0x4c0 [ 332.186122][ T209] ieee80211_beacon_connection_loss_work+0xdb/0x1d0 [ 332.187991][ T209] cfg80211_wiphy_work+0x3dc/0x550 [ 332.189489][ T209] process_one_work+0x9cc/0x1b70 [ 332.190964][ T209] ? __pfx_process_one_work+0x10/0x10 [ 332.193077][ T209] ? assign_work+0x1a0/0x250 [ 332.195348][ T209] worker_thread+0x6c8/0xf10 [ 332.197064][ T209] ? __pfx_worker_thread+0x10/0x10 [ 332.198910][ T209] kthread+0x3c2/0x780 [ 332.200212][ T209] ? __pfx_kthread+0x10/0x10 [ 332.201621][ T209] ? __pfx_kthread+0x10/0x10 [ 332.203296][ T209] ? __pfx_kthread+0x10/0x10 [ 332.204596][ T209] ? __pfx_kthread+0x10/0x10 [ 332.206414][ T209] ? rcu_is_watching+0x12/0xc0 [ 332.207769][ T209] ? __pfx_kthread+0x10/0x10 [ 332.209203][ T209] ret_from_fork+0x45/0x80 [ 332.210979][ T209] ? __pfx_kthread+0x10/0x10 [ 332.212790][ T209] ret_from_fork_asm+0x1a/0x30 [ 332.215309][ T209] [ 332.216701][ T209] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 332.219766][ T209] CPU: 3 UID: 0 PID: 209 Comm: kworker/u32:5 Not tainted 6.15.0-rc1-syzkaller-00333-g5aaaedb0cb54 #0 PREEMPT(full) [ 332.224588][ T209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 332.228771][ T209] Workqueue: events_unbound cfg80211_wiphy_work [ 332.231227][ T209] Call Trace: [ 332.232611][ T209] [ 332.233869][ T209] dump_stack_lvl+0x3d/0x1f0 [ 332.235751][ T209] panic+0x71c/0x800 [ 332.237003][ T209] ? __pfx_panic+0x10/0x10 [ 332.238619][ T209] ? show_trace_log_lvl+0x29b/0x3e0 [ 332.240161][ T209] ? check_panic_on_warn+0x1f/0xb0 [ 332.241621][ T209] ? ieee80211_mgd_probe_ap_send+0x461/0x510 [ 332.243400][ T209] check_panic_on_warn+0xab/0xb0 [ 332.244779][ T209] __warn+0xf6/0x3c0 [ 332.246103][ T209] ? ieee80211_mgd_probe_ap_send+0x461/0x510 [ 332.247895][ T209] report_bug+0x3c3/0x580 [ 332.249170][ T209] ? ieee80211_mgd_probe_ap_send+0x461/0x510 [ 332.251072][ T209] handle_bug+0x184/0x210 [ 332.252529][ T209] exc_invalid_op+0x17/0x50 [ 332.254123][ T209] asm_exc_invalid_op+0x1a/0x20 [ 332.255791][ T209] RIP: 0010:ieee80211_mgd_probe_ap_send+0x461/0x510 [ 332.257831][ T209] Code: c7 c7 94 ae 86 90 e8 ae 68 20 f7 e9 0e fc ff ff e8 74 68 20 f7 e9 4b fc ff ff e8 9a 68 20 f7 e9 8a fc ff ff e8 20 ec bb f6 90 <0f> 0b 90 e9 e4 fc ff ff 48 89 34 24 e8 9e 69 20 f7 48 8b 34 24 e9 [ 332.263788][ T209] RSP: 0018:ffffc90002cafb80 EFLAGS: 00010293 [ 332.265627][ T209] RAX: 0000000000000000 RBX: ffff88804ff88d80 RCX: ffffc90002cafb1c [ 332.267860][ T209] RDX: ffff888021c62440 RSI: ffffffff8aff50a0 RDI: ffff888021c62884 [ 332.270250][ T209] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 332.272819][ T209] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 332.275096][ T209] R13: ffff88804ff8aa22 R14: ffff88804ff89720 R15: 0000000000000000 [ 332.277456][ T209] ? ieee80211_mgd_probe_ap_send+0x460/0x510 [ 332.279200][ T209] ieee80211_mgd_probe_ap+0x3a6/0x4c0 [ 332.280753][ T209] ieee80211_beacon_connection_loss_work+0xdb/0x1d0 [ 332.282891][ T209] cfg80211_wiphy_work+0x3dc/0x550 [ 332.284620][ T209] process_one_work+0x9cc/0x1b70 [ 332.286205][ T209] ? __pfx_process_one_work+0x10/0x10 [ 332.288046][ T209] ? assign_work+0x1a0/0x250 [ 332.289693][ T209] worker_thread+0x6c8/0xf10 [ 332.291186][ T209] ? __pfx_worker_thread+0x10/0x10 [ 332.293339][ T209] kthread+0x3c2/0x780 [ 332.294911][ T209] ? __pfx_kthread+0x10/0x10 [ 332.296714][ T209] ? __pfx_kthread+0x10/0x10 [ 332.298537][ T209] ? __pfx_kthread+0x10/0x10 [ 332.300335][ T209] ? __pfx_kthread+0x10/0x10 [ 332.302165][ T209] ? rcu_is_watching+0x12/0xc0 [ 332.304102][ T209] ? __pfx_kthread+0x10/0x10 [ 332.306221][ T209] ret_from_fork+0x45/0x80 [ 332.308176][ T209] ? __pfx_kthread+0x10/0x10 [ 332.310265][ T209] ret_from_fork_asm+0x1a/0x30 [ 332.312243][ T209] [ 332.314163][ T209] Kernel Offset: disabled [ 332.315837][ T209] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:29:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000000add4c1 RBX=0000000000000000 RCX=ffffffff8b703439 RDX=0000000000000000 RSI=ffffffff8dbeb4de RDI=ffffffff8bf44f80 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed10056465bd R10=ffff88802b232deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90867f10 R15=0000000000000000 RIP=ffffffff8b701ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000573064c0 CR3=0000000021b94000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000001854ee1 RBX=0000000000000001 RCX=ffffffff8b703439 RDX=0000000000000000 RSI=ffffffff8dbeb4de RDI=ffffffff8bf44f80 RBP=ffffed1003b53488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed10056665bd R10=ffff88802b332deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801da9a440 R14=ffffffff90867f10 R15=0000000000000000 RIP=ffffffff8b701ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5035510 CR3=00000000655cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff95adbfe8 RBX=ffff8880200f8af0 RCX=0000000000010000 RDX=0000000000040000 RSI=0000000000000000 RDI=ffff8880200f8af0 RBP=ffff8880200f8af0 RSP=ffffc900036efc70 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000000 R11=ffffffff8e41ae10 R12=0000000000000000 R13=0000000000000000 R14=ffff8880200f8000 R15=0000000000000000 RIP=ffffffff8197ac30 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880979b9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f71d00c0 CR3=000000004c9e2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73edff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854bd5a5 RDI=ffffffff9ae12b40 RBP=ffffffff9ae12b00 RSP=ffffc90002caf4f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000072 R14=ffffffff9ae12b00 R15=ffffffff854bd540 RIP=ffffffff854bd5cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097ab9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002ff16ffc CR3=00000000655cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000