last executing test programs: 1m56.218844804s ago: executing program 1 (id=1398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+|[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x109041, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)=0x3) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000040)=0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r8 = epoll_create1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f00000004c0)) writev(r3, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a", 0x12}], 0x2) 1m56.100047206s ago: executing program 1 (id=1403): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000005c0)=@generic={0x0, r0}, 0x18) 1m56.099784504s ago: executing program 1 (id=1405): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x543c, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) 1m56.032275115s ago: executing program 1 (id=1406): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r3) 1m53.198959838s ago: executing program 1 (id=1449): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m53.196640164s ago: executing program 1 (id=1451): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2b, 0x801, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x101280) r1 = getpid() gettid() syz_pidfd_open(r1, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 1m43.77893015s ago: executing program 2 (id=1544): r0 = gettid() r1 = eventfd2(0x0, 0x0) write$eventfd(r1, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r1, &(0x7f0000000040)=0x7fff, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000008, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005d40)={&(0x7f0000005cc0)=ANY=[@ANYBLOB="400000000c06010800000000008000000a000003"], 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000200)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000004b80)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000240)={0x9, [0x9, 0x10000], 0x9}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1997e358660e994000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056087d7200000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x6, 0x8000, 0x0, r6, r7, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000004d40)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) 1m42.816400178s ago: executing program 2 (id=1548): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x6c4594d00e0a7047) 1m42.590605206s ago: executing program 2 (id=1554): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 1m42.589996499s ago: executing program 2 (id=1556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffbfffaaaaaaaaaabb8100ffff08004a00002800faf2"], 0x0) 1m42.530163062s ago: executing program 2 (id=1557): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) 1m42.485760841s ago: executing program 2 (id=1558): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x100, 0x640, &(0x7f0000000240), 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m37.843050844s ago: executing program 32 (id=1451): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2b, 0x801, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x101280) r1 = getpid() gettid() syz_pidfd_open(r1, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 1m27.338913758s ago: executing program 33 (id=1558): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x100, 0x640, &(0x7f0000000240), 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.131059269s ago: executing program 3 (id=2682): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0xff, 0x0, @tick=0x2, {0x0, 0xb8}, {0x4, 0x6}, @queue={0x6, {0x1, 0x5}}}, {0x0, 0x0, 0x0, 0x4, @time={0x10001, 0x3ff}, {0x6, 0xc}, {0x1}, @time=@time={0x7d, 0x80}}], 0x38) 5.070172407s ago: executing program 3 (id=2683): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x7, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) readv(r6, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 4.199667506s ago: executing program 3 (id=2689): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r0, &(0x7f0000000640)={@void, @void, @ipv6=@dccp_packet={0x4, 0x6, "9ea078", 0x10, 0x21, 0x1, @mcast2, @loopback, {[], {{0x4e24, 0x4e24, 0x4, 0x1, 0x5, 0x0, 0x0, 0x2, 0x2, "992427", 0x3, "caa048"}}}}}, 0x38) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={0x0, &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1}}, 0x3c) 4.199487077s ago: executing program 3 (id=2690): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c00000048a6540319e0b58500000000020000000900030073797a32000002000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 4.139977086s ago: executing program 3 (id=2691): socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000004000000010000000000", @ANYRES32=0x1], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x8, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 3.209819525s ago: executing program 4 (id=2701): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000090505022a8992"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.268869693s ago: executing program 5 (id=2707): ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x800) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) 1.469827404s ago: executing program 0 (id=2714): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x300000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x104}}, 0x0) time(&(0x7f0000000200)) socket(0x2, 0x80805, 0x0) timerfd_settime(r3, 0x2, &(0x7f00000002c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7, 0xd09) 1.389984795s ago: executing program 5 (id=2715): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x100000000000000, 0x80, 0x0, 0xd2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c00000048a6540319e0b58500000000020000000900030073797a32000002000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) 815.722122ms ago: executing program 3 (id=2716): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='ext4_fallocate_exit\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff9}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}}) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d72646d612cc792fbaa584a323461d64a706f72743d30322c00bb4fb37263ba48ac028276ec411a8846b389587dcb5a0bfdb07d359d06eb856928d1954d8290f349f265b4eaa6d2214c95880061444f043e2c18fbea8037aff4457244a6377800c3bf7798370000000000000000955e6556ad0b20a5a5ae0000"]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 497.185537ms ago: executing program 0 (id=2717): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="e9a4", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2ebb203023d89132c1980796d3480bf302680bb6d94cc2ddc4b641c81144696a15b4d88e56d04ec393bf39b3774c70aa01f9aee0fc51897c613f9ed201e53a48b093ea3325ebab77c2d8afcdd9e30fec85fdb932aa067d0f6e891750cd952158d3", 0x61}], 0x1}}], 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x16) 496.987107ms ago: executing program 0 (id=2718): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r0, &(0x7f0000000640)={@void, @void, @ipv6=@dccp_packet={0x4, 0x6, "9ea078", 0x10, 0x21, 0x1, @mcast2, @loopback, {[], {{0x4e24, 0x4e24, 0x4, 0x1, 0x5, 0x0, 0x0, 0x2, 0x2, "992427", 0x3, "caa048"}}}}}, 0x38) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000500)=[0x2]}}, 0x3c) 430.10255ms ago: executing program 0 (id=2719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 429.944533ms ago: executing program 0 (id=2720): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r1, @ANYBLOB="010100000000000000002b000000080003", @ANYRES32=r2], 0xb4}, 0x1, 0x0, 0x0, 0x4090}, 0x0) 358.705242ms ago: executing program 5 (id=2721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x34, r1, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x4000) 358.294933ms ago: executing program 0 (id=2722): syz_emit_ethernet(0xde, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) r0 = openat(0xffffffffffffff9c, 0x0, 0x82400, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) rt_sigpending(&(0x7f0000000340), 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(r0, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x8802d, 0x0) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r5, 0x0, 0xffffffffffffff9c, 0x0, 0x207) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x3097c98, 0x0) unshare(0x2c020400) umount2(0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="540100001800010000040000010000001d0100001500030006000000000000008ca5be073cff296e020000001e0106000000fc"], 0x154}, 0x1, 0x0, 0x0, 0x4000800}, 0x20008030) getdents(0xffffffffffffffff, &(0x7f0000000100)=""/171, 0xab) 358.153522ms ago: executing program 5 (id=2723): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000200)={0x40, r2, 0xb97534d5fe9704cf, 0x800004, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xfffd}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}]}]}, 0x40}}, 0x0) 358.005506ms ago: executing program 5 (id=2724): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x100000000000000, 0x80, 0x0, 0xd2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c00000048a6540319e0b58500000000020000000900030073797a32000002000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 299.69037ms ago: executing program 5 (id=2725): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x2, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x2, 0xbc5, 0x0, 0x201, 0x0, 0x1}) io_uring_enter(r1, 0x57b6, 0x810003, 0x2, 0x0, 0x0) getpid() 139.692507ms ago: executing program 4 (id=2726): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf05", 0x29}], 0x1}, 0x40000) 59.627767ms ago: executing program 4 (id=2727): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) 59.307685ms ago: executing program 4 (id=2728): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x60, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x42, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_b, @device_a, @from_mac=@device_b, {0x2, 0x5f}, @value=@ver_80211n={0x0, 0x5, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x1480, 0x6, {}, @void, @val={0x2d, 0x1a, {0x8200, 0x1, 0x2, 0x0, {0x3, 0xd, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1}, 0x300, 0x6, 0x6}}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) 162.203µs ago: executing program 4 (id=2729): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) 0s ago: executing program 4 (id=2730): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x7fff, 0x0) getdents(r0, 0x0, 0x58) kernel console output (not intermixed with test programs): t from the interface descriptor's value: 1 [ 143.221952][ T5956] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 143.226425][ T5956] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 143.229621][ T5956] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 143.233770][ T5956] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 143.235998][ T5956] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 143.274240][ T9765] speed is unknown, defaulting to 1000 [ 143.361941][ T9765] speed is unknown, defaulting to 1000 [ 143.418639][ T65] usb 8-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 143.421152][ T65] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.427050][ T65] usb 8-1: Product: syz [ 143.428324][ T65] usb 8-1: Manufacturer: syz [ 143.429630][ T65] usb 8-1: SerialNumber: syz [ 143.433599][ T65] usb 8-1: config 0 descriptor?? [ 143.442935][ T65] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input11 [ 143.443597][ T9765] chnl_net:caif_netlink_parms(): no params data found [ 143.522253][ T9765] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.524868][ T9765] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.526932][ T9765] bridge_slave_0: entered allmulticast mode [ 143.529866][ T9765] bridge_slave_0: entered promiscuous mode [ 143.532725][ T9765] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.534774][ T9765] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.536789][ T9765] bridge_slave_1: entered allmulticast mode [ 143.539119][ T9765] bridge_slave_1: entered promiscuous mode [ 143.571503][ T9765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.576892][ T9765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.607008][ T9765] team0: Port device team_slave_0 added [ 143.610604][ T9765] team0: Port device team_slave_1 added [ 143.639975][ T65] imon:send_packet: packet tx failed (-71) [ 143.646913][ T9765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.648848][ T9765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.652503][ T65] imon 8-1:0.0: panel buttons/knobs setup failed [ 143.656611][ T9765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.657499][ T9765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.664705][ T9765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.675004][ T9765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.702521][ T65] rc_core: IR keymap rc-imon-pad not found [ 143.704340][ T65] Registered IR keymap rc-empty [ 143.705877][ T65] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 143.709108][ T65] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 143.712785][ T65] imon:send_packet: packet tx failed (-71) [ 143.716601][ T9765] hsr_slave_0: entered promiscuous mode [ 143.718595][ T9765] hsr_slave_1: entered promiscuous mode [ 143.720572][ T9765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.723955][ T9765] Cannot create hsr debugfs directory [ 143.732630][ T65] imon 8-1:0.0: remote input dev register failed [ 143.734559][ T65] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 143.749623][ T65] imon 8-1:0.0: unable to initialize intf0, err 0 [ 143.751508][ T65] imon:imon_probe: failed to initialize context! [ 143.753449][ T65] imon 8-1:0.0: unable to register, err -19 [ 143.757927][ T65] usb 8-1: USB disconnect, device number 7 [ 143.843321][ T9765] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 143.847074][ T9765] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 143.851069][ T9765] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 143.855274][ T9765] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 143.893810][ T9765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.908822][ T9765] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.916510][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.918576][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.924478][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.926487][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.039366][ T9765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.164439][ T9765] veth0_vlan: entered promiscuous mode [ 144.169134][ T9765] veth1_vlan: entered promiscuous mode [ 144.185734][ T9765] veth0_macvtap: entered promiscuous mode [ 144.189274][ T9765] veth1_macvtap: entered promiscuous mode [ 144.197755][ T9765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.201466][ T9765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.205888][ T9765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.209789][ T9765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.213171][ T9765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.216021][ T9765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.218667][ T9765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.221465][ T9765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.225398][ T9765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.237334][ T9765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.240665][ T9765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.243510][ T9765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.246472][ T9765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.249595][ T9765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.253604][ T9765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.256490][ T9765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.260208][ T9765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.265498][ T9765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.270976][ T9765] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.275235][ T9765] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.279746][ T9765] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.286000][ T9765] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.326295][ T9765] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 144.330177][ T9765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.340083][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.342382][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.355371][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.357666][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.432936][ T834] vhci_hcd: vhci_device speed not set [ 145.313469][ T5956] Bluetooth: hci4: command tx timeout [ 145.510679][ T9806] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.547662][ T9807] netlink: 'syz.4.1594': attribute type 10 has an invalid length. [ 145.550761][ T9807] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1594'. [ 145.563381][ T9807] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 145.566675][ T9807] team0: Failed to send options change via netlink (err -105) [ 145.569417][ T9807] team0: Port device geneve0 added [ 146.711013][ T40] kauditd_printk_skb: 66 callbacks suppressed [ 146.711027][ T40] audit: type=1326 audit(1744153782.916:5258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9817 comm="syz.0.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 146.724849][ T40] audit: type=1326 audit(1744153782.916:5259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9817 comm="syz.0.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 146.731097][ T40] audit: type=1326 audit(1744153782.916:5260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9817 comm="syz.0.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 146.739195][ T40] audit: type=1326 audit(1744153782.916:5261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9817 comm="syz.0.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 146.746676][ T40] audit: type=1326 audit(1744153782.916:5262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9817 comm="syz.0.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 146.754135][ T40] audit: type=1326 audit(1744153782.916:5263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9817 comm="syz.0.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 146.760182][ T40] audit: type=1326 audit(1744153782.916:5264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9817 comm="syz.0.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 146.767094][ T40] audit: type=1326 audit(1744153782.916:5265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9817 comm="syz.0.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 146.775012][ T40] audit: type=1326 audit(1744153782.916:5266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9817 comm="syz.0.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 146.781363][ T40] audit: type=1326 audit(1744153782.916:5267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9817 comm="syz.0.1599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 146.871324][ T9821] netlink: 8 bytes leftover after parsing attributes in process `+|[@'. [ 147.182240][ T9806] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.392697][ T5952] Bluetooth: hci4: command tx timeout [ 147.888013][ T9828] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 148.152520][ T6008] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 148.301755][ T9806] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.304157][ T6008] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 148.312581][ T6008] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 148.315938][ T6008] usb 5-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 148.318836][ T6008] usb 5-1: Manufacturer: syz [ 148.320589][ T6008] usb 5-1: SerialNumber: syz [ 148.324388][ T6008] usb 5-1: config 0 descriptor?? [ 148.328887][ T6008] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 148.331632][ T6008] usb 5-1: No valid video chain found. [ 148.361443][ T9806] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.438547][ T9806] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.447047][ T9806] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.453150][ T9806] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.459404][ T9806] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.535373][ T34] usb 5-1: USB disconnect, device number 3 [ 148.948836][ T9844] netlink: 8 bytes leftover after parsing attributes in process `+|[@'. [ 149.382548][ T34] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 149.425214][ T9865] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 149.441938][ T9868] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 149.473572][ T5952] Bluetooth: hci4: command tx timeout [ 149.522150][ T9873] netlink: 8 bytes leftover after parsing attributes in process `+|[@'. [ 149.542579][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 149.546501][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 35114, setting to 1024 [ 149.550703][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 149.556484][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.560151][ T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.564949][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.567852][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.672657][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 149.776090][ T34] usb 8-1: GET_CAPABILITIES returned 0 [ 149.777620][ T34] usbtmc 8-1:16.0: can't read capabilities [ 149.824281][ T24] usb 9-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 149.828548][ T24] usb 9-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 149.831090][ T24] usb 9-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 149.833497][ T24] usb 9-1: Manufacturer: syz [ 149.834926][ T24] usb 9-1: SerialNumber: syz [ 149.838347][ T24] usb 9-1: config 0 descriptor?? [ 149.842345][ T24] usb 9-1: Found UVC 0.00 device (046d:08c1) [ 149.846844][ T24] usb 9-1: No valid video chain found. [ 149.983516][ T34] usb 8-1: USB disconnect, device number 8 [ 150.047644][ T24] usb 9-1: USB disconnect, device number 2 [ 150.596190][ T9893] netlink: 8 bytes leftover after parsing attributes in process `+|[@'. [ 151.312620][ T6008] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 151.478295][ T6008] usb 8-1: unable to get BOS descriptor or descriptor too short [ 151.491243][ T6008] usb 8-1: config 0 has an invalid interface number: 172 but max is 0 [ 151.494151][ T6008] usb 8-1: config 0 has no interface number 0 [ 151.496118][ T6008] usb 8-1: config 0 interface 172 altsetting 0 endpoint 0xA is Bulk; changing to Interrupt [ 151.499244][ T6008] usb 8-1: config 0 interface 172 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 151.510153][ T6008] usb 8-1: string descriptor 0 read error: -22 [ 151.511995][ T6008] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=5e.2d [ 151.514914][ T6008] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.522127][ T6008] usb 8-1: config 0 descriptor?? [ 151.533722][ T6008] usbhid 8-1:0.172: couldn't find an input interrupt endpoint [ 151.562609][ T5952] Bluetooth: hci4: command tx timeout [ 151.664828][ T9919] netlink: 'syz.4.1641': attribute type 1 has an invalid length. [ 151.894802][ T34] usb 8-1: USB disconnect, device number 9 [ 152.224979][ T9930] overlayfs: missing 'lowerdir' [ 152.407393][ T9942] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.455378][ T9942] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.456244][ T9945] netlink: 'syz.0.1653': attribute type 10 has an invalid length. [ 152.460770][ T9945] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1653'. [ 152.505027][ T9942] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.547240][ T9942] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.639511][ T9950] overlayfs: missing 'lowerdir' [ 152.651148][ T9942] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.660388][ T9942] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.669572][ T9942] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.682114][ T9942] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.694769][ T9954] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1658'. [ 152.697285][ T9954] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1658'. [ 153.674454][ T9983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1670'. [ 153.704732][ T5956] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.707757][ T5956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.710910][ T5956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.717715][ T5956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.720190][ T5956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.752004][ T9984] speed is unknown, defaulting to 1000 [ 153.883692][ T9984] speed is unknown, defaulting to 1000 [ 153.925847][ T40] kauditd_printk_skb: 176 callbacks suppressed [ 153.925856][ T40] audit: type=1326 audit(1744153790.136:5444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.3.1679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 153.934327][ T40] audit: type=1326 audit(1744153790.136:5445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.3.1679" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 153.940567][ T40] audit: type=1326 audit(1744153790.136:5446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.3.1679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 153.954759][ T40] audit: type=1326 audit(1744153790.136:5447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.3.1679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 153.962952][ T40] audit: type=1326 audit(1744153790.136:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.3.1679" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 153.968933][ T40] audit: type=1326 audit(1744153790.136:5449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.3.1679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 153.975264][ T40] audit: type=1326 audit(1744153790.136:5450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.3.1679" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 153.981089][ T40] audit: type=1326 audit(1744153790.136:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.3.1679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 153.985597][ T9984] chnl_net:caif_netlink_parms(): no params data found [ 153.987594][ T40] audit: type=1326 audit(1744153790.136:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.3.1679" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 153.995189][ T40] audit: type=1326 audit(1744153790.136:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.3.1679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 154.046093][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1682'. [ 154.113131][ T9984] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.115927][ T9984] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.118208][ T9984] bridge_slave_0: entered allmulticast mode [ 154.120543][ T9984] bridge_slave_0: entered promiscuous mode [ 154.127418][ T9984] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.129966][ T9984] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.131970][ T9984] bridge_slave_1: entered allmulticast mode [ 154.136226][ T9984] bridge_slave_1: entered promiscuous mode [ 154.195625][ T9984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.201499][ T9984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.235993][T10026] netlink: 8 bytes leftover after parsing attributes in process `+|[@'. [ 154.256595][ T9984] team0: Port device team_slave_0 added [ 154.260710][ T9984] team0: Port device team_slave_1 added [ 154.290700][ T9984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.293126][ T9984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.301427][ T9984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.309662][ T9984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.311625][ T9984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.318773][ T9984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.364162][ T9984] hsr_slave_0: entered promiscuous mode [ 154.366477][ T9984] hsr_slave_1: entered promiscuous mode [ 154.368287][ T9984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.370367][ T9984] Cannot create hsr debugfs directory [ 154.538197][ T9984] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 154.543398][ T9984] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 154.555860][ T9984] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 154.560106][ T9984] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 154.580715][ T9984] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.582894][ T9984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.585000][ T9984] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.587084][ T9984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.626838][ T9984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.681927][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.685887][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.703851][ T9984] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.714211][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.716272][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.727353][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.728458][T10067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1698'. [ 154.729356][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.747728][ T9984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.778663][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1701'. [ 154.853312][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1704'. [ 154.859589][ T9984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.089787][ T9984] veth0_vlan: entered promiscuous mode [ 155.097374][ T9984] veth1_vlan: entered promiscuous mode [ 155.119412][ T9984] veth0_macvtap: entered promiscuous mode [ 155.123937][ T9984] veth1_macvtap: entered promiscuous mode [ 155.130966][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.136244][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.138822][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.141654][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.147850][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.150737][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.153882][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.156886][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.159677][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.162882][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.166590][ T9984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.177717][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.184783][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.187397][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.190206][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.194157][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.197098][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.199761][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.202876][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.205852][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.208686][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.213216][ T9984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.245362][T10095] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 155.248083][T10095] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 155.251199][ T9984] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.254411][ T9984] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.257128][ T9984] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.260170][ T9984] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.301643][ T9984] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 155.305338][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.317353][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.319800][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.339319][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.341857][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.757220][T10107] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.792579][ T5956] Bluetooth: hci0: command tx timeout [ 155.801419][T10108] netlink: 'syz.5.1713': attribute type 10 has an invalid length. [ 155.803819][T10108] __nla_validate_parse: 1 callbacks suppressed [ 155.803826][T10108] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1713'. [ 155.814500][T10108] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 155.817094][T10108] team0: Failed to send options change via netlink (err -105) [ 155.819277][T10108] team0: Port device geneve0 added [ 155.838110][T10107] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.898738][T10107] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.954448][T10107] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.312690][ T58] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 156.464865][ T58] usb 5-1: unable to get BOS descriptor or descriptor too short [ 156.467743][ T58] usb 5-1: config 0 has an invalid interface number: 172 but max is 0 [ 156.470198][ T58] usb 5-1: config 0 has no interface number 0 [ 156.471967][ T58] usb 5-1: config 0 interface 172 altsetting 0 endpoint 0xA is Bulk; changing to Interrupt [ 156.474872][ T58] usb 5-1: config 0 interface 172 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 156.480862][ T58] usb 5-1: string descriptor 0 read error: -22 [ 156.488754][ T58] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=5e.2d [ 156.501394][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.504888][ T58] usb 5-1: config 0 descriptor?? [ 156.509539][ T58] usbhid 5-1:0.172: couldn't find an input interrupt endpoint [ 157.097844][ T5950] usb 5-1: USB disconnect, device number 4 [ 157.181456][T10107] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.191602][T10107] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.202250][T10107] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.212944][T10107] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.281370][T10156] No control pipe specified [ 157.752608][ T7417] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 157.872559][ T5956] Bluetooth: hci0: command tx timeout [ 157.932487][ T7417] usb 10-1: Using ep0 maxpacket: 8 [ 157.935974][ T7417] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 35114, setting to 1024 [ 157.939221][ T7417] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 157.942175][ T7417] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.945073][ T7417] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.948667][ T7417] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.951335][ T7417] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.158792][ T7417] usb 10-1: GET_CAPABILITIES returned 0 [ 158.160876][ T7417] usbtmc 10-1:16.0: can't read capabilities [ 158.371611][ T6008] usb 10-1: USB disconnect, device number 2 [ 159.177056][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1754'. [ 159.180181][ T40] kauditd_printk_skb: 86 callbacks suppressed [ 159.180189][ T40] audit: type=1326 audit(1744153795.386:5540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.5.1754" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 159.180529][T10213] overlayfs: missing 'lowerdir' [ 159.184299][ T40] audit: type=1326 audit(1744153795.386:5541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.5.1754" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 159.198740][ T40] audit: type=1326 audit(1744153795.386:5542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.5.1754" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 159.204732][ T40] audit: type=1326 audit(1744153795.386:5543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.5.1754" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 159.210653][ T40] audit: type=1326 audit(1744153795.386:5544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.5.1754" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 159.237602][ T40] audit: type=1326 audit(1744153795.386:5545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.5.1754" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 159.244073][ T40] audit: type=1326 audit(1744153795.386:5546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.5.1754" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 159.258546][ T40] audit: type=1326 audit(1744153795.386:5547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.5.1754" exe="/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 159.266312][ T40] audit: type=1326 audit(1744153795.386:5548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.5.1754" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 159.274294][ T40] audit: type=1326 audit(1744153795.406:5549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10207 comm="syz.5.1754" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 159.849768][T10236] overlayfs: missing 'lowerdir' [ 159.962538][ T5956] Bluetooth: hci0: command tx timeout [ 160.154892][T10241] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 160.238687][T10246] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 160.312610][T10252] autofs: Unknown parameter '0x0000000000000000' [ 160.379977][T10256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1773'. [ 160.383557][T10256] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 160.532499][ T7417] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 160.714111][ T7417] usb 9-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 160.719510][ T7417] usb 9-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 160.723185][ T7417] usb 9-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 160.726319][ T7417] usb 9-1: Manufacturer: syz [ 160.728141][ T7417] usb 9-1: SerialNumber: syz [ 160.732109][ T7417] usb 9-1: config 0 descriptor?? [ 160.742015][ T7417] usb 9-1: Found UVC 0.00 device (046d:08c1) [ 160.744860][ T7417] usb 9-1: No valid video chain found. [ 160.788305][T10274] autofs: Unknown parameter '0x0000000000000000' [ 161.081475][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1786'. [ 161.084990][T10286] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 161.087727][T10286] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 161.167231][T10291] overlayfs: missing 'workdir' [ 161.196145][T10294] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1789'. [ 161.578457][T10308] autofs: Unknown parameter '0x0000000000000000' [ 161.608559][T10312] overlayfs: missing 'workdir' [ 161.674898][T10317] netlink: 8 bytes leftover after parsing attributes in process `+|[@'. [ 161.796705][T10319] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1800'. [ 161.983417][T10326] loop2: detected capacity change from 0 to 7 [ 161.985905][T10326] Dev loop2: unable to read RDB block 7 [ 161.987476][T10326] loop2: unable to read partition table [ 161.989344][T10326] loop2: partition table beyond EOD, truncated [ 161.991140][T10326] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 162.005113][T10326] speed is unknown, defaulting to 1000 [ 162.032497][ T5956] Bluetooth: hci0: command tx timeout [ 162.723423][T10326] speed is unknown, defaulting to 1000 [ 163.115499][ T5950] libceph: connect (1)[c::]:6789 error -101 [ 163.118317][ T5950] libceph: mon0 (1)[c::]:6789 connect error [ 163.233873][ T833] usb 9-1: USB disconnect, device number 3 [ 163.354839][T10347] ceph: No mds server is up or the cluster is laggy [ 163.463546][T10359] autofs: Unknown parameter '0x0000000000000000' [ 163.670128][T10382] autofs: Unknown parameter 'fd0x0000000000000000' [ 164.023211][T10395] loop2: detected capacity change from 0 to 7 [ 164.042847][T10395] Dev loop2: unable to read RDB block 7 [ 164.061394][T10395] loop2: unable to read partition table [ 164.073355][T10395] loop2: partition table beyond EOD, truncated [ 164.083679][T10395] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 164.339801][T10395] speed is unknown, defaulting to 1000 [ 164.527280][T10395] speed is unknown, defaulting to 1000 [ 165.166855][T10409] autofs: Unknown parameter 'fd0x0000000000000000' [ 165.534198][ T58] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 165.745125][ T58] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.747934][ T58] usb 8-1: config 0 has no interfaces? [ 165.749460][ T58] usb 8-1: New USB device found, idVendor=0404, idProduct=97c1, bcdDevice= 0.00 [ 165.751961][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.983792][ T58] usb 8-1: config 0 descriptor?? [ 167.574489][T10473] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 167.652626][ T58] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 167.811148][T10487] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1865'. [ 167.816586][ T58] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.823624][ T58] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 167.826483][ T58] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.828448][ T58] usb 9-1: Product: syz [ 167.829533][ T58] usb 9-1: Manufacturer: syz [ 167.830662][ T58] usb 9-1: SerialNumber: syz [ 168.041777][ T58] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 168.242219][ T24] usb 9-1: USB disconnect, device number 4 [ 168.248365][ T24] usblp0: removed [ 168.258410][ T7417] usb 8-1: USB disconnect, device number 10 [ 168.882518][ T40] kauditd_printk_skb: 219 callbacks suppressed [ 168.882530][ T40] audit: type=1326 audit(1744153805.086:5769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10514 comm="syz.5.1875" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 168.893075][ T40] audit: type=1326 audit(1744153805.096:5770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10514 comm="syz.5.1875" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 168.901535][T10516] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 168.902509][ T40] audit: type=1326 audit(1744153805.096:5771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10514 comm="syz.5.1875" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 168.908963][T10516] CIFS mount error: No usable UNC path provided in device string! [ 168.908963][T10516] [ 168.914941][ T40] audit: type=1326 audit(1744153805.096:5772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10514 comm="syz.5.1875" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 168.923782][ T40] audit: type=1326 audit(1744153805.096:5773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10514 comm="syz.5.1875" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 168.923816][T10516] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 168.929867][ T40] audit: type=1326 audit(1744153805.096:5774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10514 comm="syz.5.1875" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 168.939040][ T40] audit: type=1326 audit(1744153805.096:5775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10514 comm="syz.5.1875" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 168.945173][ T40] audit: type=1326 audit(1744153805.096:5776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10514 comm="syz.5.1875" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 168.951155][ T40] audit: type=1326 audit(1744153805.096:5777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10514 comm="syz.5.1875" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 168.957316][ T40] audit: type=1326 audit(1744153805.096:5778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10514 comm="syz.5.1875" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 169.034380][T10519] 9pnet_fd: Insufficient options for proto=fd [ 169.039048][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1876'. [ 169.044791][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1876'. [ 169.049945][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1876'. [ 169.054576][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1876'. [ 169.153128][T10522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1877'. [ 169.662549][ T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 169.816814][ T34] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.819773][ T34] usb 5-1: config 0 has no interfaces? [ 169.881324][ T34] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 169.883967][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.886183][ T34] usb 5-1: Product: syz [ 169.887362][ T34] usb 5-1: Manufacturer: syz [ 169.888666][ T34] usb 5-1: SerialNumber: syz [ 169.892812][ T34] usb 5-1: config 0 descriptor?? [ 170.059725][T10554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1891'. [ 170.114827][ T5956] Bluetooth: hci1: command 0x0406 tx timeout [ 170.196228][T10559] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 170.562889][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 170.714353][ T10] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 170.719415][ T10] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 170.723125][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 170.725756][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 170.728697][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 170.734142][ T10] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 170.737247][ T10] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 170.739630][ T10] usb 9-1: Product: syz [ 170.740900][ T10] usb 9-1: Manufacturer: syz [ 170.751633][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 170.753441][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 170.756918][ T10] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 170.762073][ T10] cdc_wdm 9-1:1.0: Unknown control protocol [ 171.045779][T10576] loop2: detected capacity change from 0 to 7 [ 171.050300][T10576] Dev loop2: unable to read RDB block 7 [ 171.052149][T10576] loop2: unable to read partition table [ 171.054634][T10576] loop2: partition table beyond EOD, truncated [ 171.057270][T10576] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 171.061444][ T5952] Bluetooth: hci1: unexpected event for opcode 0x040e [ 171.075046][ C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 171.075098][ T24] usb 9-1: USB disconnect, device number 5 [ 171.077769][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 171.081370][T10576] speed is unknown, defaulting to 1000 [ 171.081939][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 171.266753][T10576] speed is unknown, defaulting to 1000 [ 172.041488][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1900'. [ 172.434017][ T833] usb 5-1: USB disconnect, device number 5 [ 172.724488][T10597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1903'. [ 172.727949][T10597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1903'. [ 172.736048][T10597] erspan0: entered promiscuous mode [ 172.738737][T10597] batadv_slave_1: entered promiscuous mode [ 173.118153][T10605] speed is unknown, defaulting to 1000 [ 173.232147][T10605] speed is unknown, defaulting to 1000 [ 173.782592][ T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 173.932615][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 173.935421][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 35114, setting to 1024 [ 173.938515][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 173.941335][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.944347][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.947929][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 173.950246][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.159883][ T10] usb 9-1: GET_CAPABILITIES returned 0 [ 174.161466][ T10] usbtmc 9-1:16.0: can't read capabilities [ 174.363367][ T34] usb 9-1: USB disconnect, device number 6 [ 174.474545][ T40] kauditd_printk_skb: 72 callbacks suppressed [ 174.474555][ T40] audit: type=1326 audit(1744153810.686:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 174.482480][ T40] audit: type=1326 audit(1744153810.686:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 174.488505][ T40] audit: type=1326 audit(1744153810.686:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 174.495149][ T40] audit: type=1326 audit(1744153810.686:5854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 174.501008][ T40] audit: type=1326 audit(1744153810.686:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 174.506974][ T40] audit: type=1326 audit(1744153810.686:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 174.513022][ T40] audit: type=1326 audit(1744153810.686:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 174.518944][ T40] audit: type=1326 audit(1744153810.686:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 174.525227][ T40] audit: type=1326 audit(1744153810.686:5859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 174.530940][ T40] audit: type=1326 audit(1744153810.686:5860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 174.719901][T10666] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input13 [ 174.727941][T10668] __nla_validate_parse: 2 callbacks suppressed [ 174.727950][T10668] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1931'. [ 174.895562][T10692] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1937'. [ 175.130474][T10702] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 175.139398][ T76] Bluetooth: hci2: Frame reassembly failed (-84) [ 175.193520][ T834] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 175.363618][ T834] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.365911][ T834] usb 10-1: config 0 has no interface number 0 [ 175.368701][ T834] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 175.371193][ T834] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.374651][ T834] usb 10-1: config 0 descriptor?? [ 175.377773][ T834] usb 10-1: selecting invalid altsetting 1 [ 175.379985][ T834] dvb_ttusb_budget: ttusb_init_controller: error [ 175.381767][ T834] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 175.402110][ T834] DVB: Unable to find symbol cx22700_attach() [ 175.418638][ T834] DVB: Unable to find symbol tda10046_attach() [ 175.420311][ T834] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 175.583583][ T10] usb 10-1: USB disconnect, device number 3 [ 176.912527][ T6008] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 177.062739][ T6008] usb 8-1: Using ep0 maxpacket: 16 [ 177.066226][ T6008] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 177.069777][ T6008] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 177.075410][ T6008] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 177.078838][ T6008] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.081562][ T6008] usb 8-1: Product: syz [ 177.084138][ T6008] usb 8-1: Manufacturer: syz [ 177.085965][ T6008] usb 8-1: SerialNumber: syz [ 177.089457][ T6008] usb 8-1: config 0 descriptor?? [ 177.093908][ T6008] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 177.097179][ T6008] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 177.152560][ T5952] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 177.152761][ T5956] Bluetooth: hci2: command 0x1003 tx timeout [ 177.698579][ T6008] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 177.702716][ T6008] em28xx 8-1:0.0: Config register raw data: 0xa9 [ 177.704535][ T6008] em28xx 8-1:0.0: I2S Audio (1 sample rate(s)) [ 177.704551][ T6008] em28xx 8-1:0.0: No AC97 audio processor [ 178.166653][T10812] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.218053][T10813] netlink: 'syz.4.1980': attribute type 10 has an invalid length. [ 178.221203][T10813] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1980'. [ 178.225167][T10812] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.231737][T10813] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 178.286625][T10812] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.425150][T10812] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.510214][ T5950] usb 8-1: USB disconnect, device number 11 [ 178.525794][T10812] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.532251][T10812] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.538485][T10812] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.550711][T10812] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.564994][T10823] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 179.156644][T10845] random: crng reseeded on system resumption [ 179.349784][T10858] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1999'. [ 179.385660][T10860] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 179.638087][T10874] loop2: detected capacity change from 0 to 7 [ 179.643965][T10874] Dev loop2: unable to read RDB block 7 [ 179.645919][T10874] loop2: unable to read partition table [ 179.648147][T10874] loop2: partition table beyond EOD, truncated [ 179.651145][T10874] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 179.982595][ T5950] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 180.132615][ T5950] usb 8-1: Using ep0 maxpacket: 8 [ 180.136772][ T5950] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 35114, setting to 1024 [ 180.140481][ T5950] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 180.143441][ T5950] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 180.146134][ T5950] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.149693][ T5950] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.152119][ T5950] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.251798][T10883] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2009'. [ 180.359352][ T5950] usb 8-1: GET_CAPABILITIES returned 0 [ 180.360967][ T5950] usbtmc 8-1:16.0: can't read capabilities [ 180.565416][ T10] usb 8-1: USB disconnect, device number 12 [ 180.790189][T10903] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 181.103546][T10907] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2018'. [ 181.265642][T10919] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 181.771927][T10930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2028'. [ 181.832029][T10932] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.887469][T10933] netlink: 'syz.0.2029': attribute type 10 has an invalid length. [ 181.889871][T10933] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2029'. [ 181.895919][T10932] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.949693][T10932] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.029753][T10932] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.109985][T10932] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.120235][T10932] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.127605][T10932] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.140016][T10932] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.201085][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 182.205479][T10944] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 182.209065][T10944] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 182.893768][T10963] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2039'. [ 183.143262][T10971] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.165588][ T40] kauditd_printk_skb: 63 callbacks suppressed [ 183.165597][ T40] audit: type=1326 audit(1744153819.376:5924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 183.173031][ T40] audit: type=1326 audit(1744153819.376:5925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 183.181196][ T40] audit: type=1326 audit(1744153819.376:5926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 183.189037][ T40] audit: type=1326 audit(1744153819.376:5927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 183.195622][ T40] audit: type=1326 audit(1744153819.376:5928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 183.201310][ T40] audit: type=1326 audit(1744153819.376:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 183.201893][T10976] netlink: 'syz.0.2043': attribute type 10 has an invalid length. [ 183.207108][ T40] audit: type=1326 audit(1744153819.376:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 183.209390][T10976] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2043'. [ 183.210747][T10971] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.215328][ T40] audit: type=1326 audit(1744153819.376:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 183.215357][ T40] audit: type=1326 audit(1744153819.376:5932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 183.215377][ T40] audit: type=1326 audit(1744153819.376:5933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10972 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 183.305969][T10971] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.405476][T10971] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.545473][T10989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2050'. [ 183.550606][T10989] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 183.553791][T10989] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 184.776421][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2061'. [ 184.971544][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2059'. [ 185.326353][T11025] fuse: Bad value for 'fd' [ 185.710044][T11033] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 185.822600][ T58] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 185.974416][ T58] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 185.977519][ T58] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 185.980449][ T58] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 185.983281][ T58] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 185.986421][ T58] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 185.991614][ T58] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 185.994354][ T58] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 185.996659][ T58] usb 10-1: Product: syz [ 185.997890][ T58] usb 10-1: Manufacturer: syz [ 186.001985][ T58] cdc_wdm 10-1:1.0: skipping garbage [ 186.003650][ T58] cdc_wdm 10-1:1.0: skipping garbage [ 186.007086][ T58] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 186.008787][ T58] cdc_wdm 10-1:1.0: Unknown control protocol [ 186.118035][T10971] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.124406][T10971] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.131609][T10971] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.139920][T10971] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.569660][T11049] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2072'. [ 186.657087][ T5952] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 187.697163][T11077] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2084'. [ 187.791886][ T5956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.795112][ T5956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.797593][ T5956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.800744][ T5956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.804598][ T5956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.856635][T11082] speed is unknown, defaulting to 1000 [ 187.976504][T11082] speed is unknown, defaulting to 1000 [ 188.047488][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2089'. [ 188.052910][T11091] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 188.055539][T11091] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 188.088136][T11082] chnl_net:caif_netlink_parms(): no params data found [ 188.162725][T11082] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.165513][T11082] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.167540][T11082] bridge_slave_0: entered allmulticast mode [ 188.169924][T11082] bridge_slave_0: entered promiscuous mode [ 188.173047][T11082] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.175107][T11082] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.177140][T11082] bridge_slave_1: entered allmulticast mode [ 188.179501][T11082] bridge_slave_1: entered promiscuous mode [ 188.213263][T11082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.218042][T11082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.263576][T11082] team0: Port device team_slave_0 added [ 188.267172][T11082] team0: Port device team_slave_1 added [ 188.295195][T11082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.297138][T11082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.304113][T11082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.307849][T11082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.309750][T11082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.317614][T11082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.359421][T11082] hsr_slave_0: entered promiscuous mode [ 188.361967][T11082] hsr_slave_1: entered promiscuous mode [ 188.364746][T11082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.367641][T11082] Cannot create hsr debugfs directory [ 188.472598][T11082] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.547131][T11082] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.602901][ T57] usb 10-1: USB disconnect, device number 4 [ 188.617122][T11082] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.658060][T11082] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.761836][T11082] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 188.766579][T11082] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 188.770231][T11082] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 188.773826][T11082] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 188.786883][T11082] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.788693][T11082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.790586][T11082] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.792355][T11082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.844439][T11082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.866956][ T1166] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.875549][ T1166] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.894092][T11082] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.904192][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.907327][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.916938][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.918957][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.079597][T11082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.110063][T11082] veth0_vlan: entered promiscuous mode [ 189.118081][T11082] veth1_vlan: entered promiscuous mode [ 189.135740][T11082] veth0_macvtap: entered promiscuous mode [ 189.141279][T11082] veth1_macvtap: entered promiscuous mode [ 189.152783][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.155720][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.159187][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.164652][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.168288][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.172158][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.177253][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.179023][T11121] Invalid source name [ 189.180704][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.180724][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.180737][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.180749][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.180760][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.182203][T11082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.205442][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.208308][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.210978][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.214109][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.216781][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.219607][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.224564][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.227443][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.230106][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.233188][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.235882][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.238726][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.242211][T11082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.249276][T11082] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.251708][T11082] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.254248][T11082] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.256793][T11082] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.287668][T11082] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 189.290439][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.298871][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.306576][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.322960][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.325170][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.382666][T11126] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 189.482617][ T58] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 189.644618][ T58] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 189.647073][ T58] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 189.649896][ T58] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 189.652379][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 189.655693][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 189.662344][ T58] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 189.665489][ T58] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 189.667678][ T58] usb 5-1: Product: syz [ 189.668832][ T58] usb 5-1: Manufacturer: syz [ 189.674376][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 189.676418][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 189.680203][ T58] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 189.682093][ T58] cdc_wdm 5-1:1.0: Unknown control protocol [ 189.872656][ T5952] Bluetooth: hci2: command tx timeout [ 190.003427][T11165] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 190.048992][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 190.049007][ T40] audit: type=1326 audit(1744153826.256:5952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11166 comm="syz.5.2114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 190.062575][ T40] audit: type=1326 audit(1744153826.256:5953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11166 comm="syz.5.2114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 190.070174][ T40] audit: type=1326 audit(1744153826.256:5954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11166 comm="syz.5.2114" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 190.078145][ T40] audit: type=1326 audit(1744153826.256:5955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11166 comm="syz.5.2114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 190.086122][ T40] audit: type=1326 audit(1744153826.256:5956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11166 comm="syz.5.2114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 190.094506][ T40] audit: type=1326 audit(1744153826.256:5957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11166 comm="syz.5.2114" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 190.101787][ T40] audit: type=1326 audit(1744153826.256:5958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11166 comm="syz.5.2114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 190.108013][ T40] audit: type=1326 audit(1744153826.256:5959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11166 comm="syz.5.2114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 190.114165][ T40] audit: type=1326 audit(1744153826.256:5960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11166 comm="syz.5.2114" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 190.119901][ T40] audit: type=1326 audit(1744153826.256:5961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11166 comm="syz.5.2114" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x7ffc0000 [ 190.262173][T11172] netlink: 36 bytes leftover after parsing attributes in process `+|[@'. [ 190.516477][T11178] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 190.592526][ T5952] Bluetooth: hci3: command 0x0405 tx timeout [ 191.952574][ T5956] Bluetooth: hci2: command tx timeout [ 192.208508][T11206] sp0: Synchronizing with TNC [ 192.216221][T11206] [U] [ 192.260633][ T6008] usb 5-1: USB disconnect, device number 6 [ 192.884271][T11231] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 192.902484][ T58] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 193.064180][ T58] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 193.066618][ T58] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 193.069355][ T58] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 193.072026][ T58] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 193.075953][ T58] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 193.080563][ T58] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 193.083163][ T58] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 193.085403][ T58] usb 10-1: Product: syz [ 193.086585][ T58] usb 10-1: Manufacturer: syz [ 193.091630][ T58] cdc_wdm 10-1:1.0: skipping garbage [ 193.093226][ T58] cdc_wdm 10-1:1.0: skipping garbage [ 193.096126][ T58] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 193.097834][ T58] cdc_wdm 10-1:1.0: Unknown control protocol [ 193.464896][ T5952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.468582][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.471716][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.476019][ T5952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.478957][ T5952] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.497743][T11241] speed is unknown, defaulting to 1000 [ 193.566615][T11241] speed is unknown, defaulting to 1000 [ 193.624632][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2143'. [ 193.641025][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.642897][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.725680][T11241] chnl_net:caif_netlink_parms(): no params data found [ 193.860608][T11241] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.863040][T11241] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.866004][T11241] bridge_slave_0: entered allmulticast mode [ 193.868617][T11241] bridge_slave_0: entered promiscuous mode [ 193.873090][T11241] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.874796][T11241] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.877395][T11241] bridge_slave_1: entered allmulticast mode [ 193.879790][T11241] bridge_slave_1: entered promiscuous mode [ 193.925767][T11241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.930413][T11241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.979405][T11241] team0: Port device team_slave_0 added [ 193.986124][T11241] team0: Port device team_slave_1 added [ 194.043680][T11241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.045718][T11241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.054975][T11241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.058807][T11241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.060732][T11241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.067808][T11241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.112192][T11241] hsr_slave_0: entered promiscuous mode [ 194.114578][T11241] hsr_slave_1: entered promiscuous mode [ 194.117612][T11241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.119769][T11241] Cannot create hsr debugfs directory [ 194.235128][T11241] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.323886][T11241] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.380742][T11241] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.453825][T11241] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.478724][T11258] netlink: 8 bytes leftover after parsing attributes in process `+|[@'. [ 194.560473][T11241] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 194.569257][T11241] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 194.577417][T11241] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 194.582672][T11241] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 194.629341][T11241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.639022][T11241] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.643802][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.645978][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.652078][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.654110][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.773771][T11241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.805403][T11241] veth0_vlan: entered promiscuous mode [ 194.814242][T11241] veth1_vlan: entered promiscuous mode [ 194.830070][T11241] veth0_macvtap: entered promiscuous mode [ 194.833986][T11241] veth1_macvtap: entered promiscuous mode [ 194.841225][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.844365][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.847500][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.850349][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.854603][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.857494][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.860169][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.863179][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.865892][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.868611][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.871303][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.874056][T11276] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2153'. [ 194.874213][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.879773][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.882683][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.886246][T11241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.895140][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.897992][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.901938][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.904865][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.907538][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.910358][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.913180][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.915953][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.918616][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.921444][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.924184][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.927044][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.929775][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.932654][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.942918][T11241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.949047][T11241] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.951421][T11241] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.954046][T11241] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.957231][T11241] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.013336][T11241] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 195.016009][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.022686][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.030113][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.055901][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.058005][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.144027][T11290] netlink: 764 bytes leftover after parsing attributes in process `syz.0.2142'. [ 195.469811][T11298] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2160'. [ 195.485612][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2159'. [ 195.491684][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2159'. [ 195.552782][ T5952] Bluetooth: hci1: command tx timeout [ 195.676209][ T58] usb 10-1: USB disconnect, device number 5 [ 195.715092][T11309] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 195.716974][T11309] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.723369][T11309] vhci_hcd vhci_hcd.0: Device attached [ 195.946670][T11311] vhci_hcd: connection closed [ 195.950362][ T1035] vhci_hcd: stop threads [ 195.954474][ T1035] vhci_hcd: release socket [ 195.955964][ T1035] vhci_hcd: disconnect device [ 195.962508][ T29] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 195.964730][ T29] usb 43-1: enqueue for inactive port 0 [ 196.042728][ T29] vhci_hcd: vhci_device speed not set [ 196.316028][T11323] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2170'. [ 196.319356][T11323] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 196.322102][T11323] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 196.654688][T11336] ubi31: attaching mtd0 [ 196.659107][T11336] ubi31: scanning is finished [ 196.660551][T11336] ubi31: empty MTD device detected [ 196.807234][T11336] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 196.809462][T11336] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 196.811554][T11336] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 196.814051][T11336] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 196.816228][T11336] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 196.818226][T11336] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 196.820475][T11336] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3913743388 [ 196.824009][T11336] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 196.828712][T11338] ubi31: background thread "ubi_bgt31d" started, PID 11338 [ 196.833702][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2176'. [ 196.837424][T11340] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 196.840311][T11340] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 197.642571][ T5952] Bluetooth: hci1: command tx timeout [ 197.778761][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2184'. [ 197.782018][ T40] kauditd_printk_skb: 104 callbacks suppressed [ 197.782027][ T40] audit: type=1326 audit(1744153833.986:6066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 197.790008][ T40] audit: type=1326 audit(1744153833.986:6067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 197.797351][ T40] audit: type=1326 audit(1744153833.986:6068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 197.803711][ T40] audit: type=1326 audit(1744153833.986:6069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 197.810204][ T40] audit: type=1326 audit(1744153833.996:6070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 197.826254][ T40] audit: type=1326 audit(1744153833.996:6071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 197.841953][ T40] audit: type=1326 audit(1744153833.996:6072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 197.848493][ T40] audit: type=1326 audit(1744153833.996:6073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 197.854665][ T40] audit: type=1326 audit(1744153833.996:6074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 197.860774][ T40] audit: type=1326 audit(1744153833.996:6075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 198.710160][T11386] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 199.712902][ T5952] Bluetooth: hci1: command tx timeout [ 199.732519][ T65] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 199.905106][ T65] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 199.908336][ T65] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 199.912056][ T65] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 199.916103][ T65] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 199.919944][ T65] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 199.926190][ T65] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 199.928922][ T65] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 199.931907][ T65] usb 9-1: Product: syz [ 199.933655][ T65] usb 9-1: Manufacturer: syz [ 199.940484][ T65] cdc_wdm 9-1:1.0: skipping garbage [ 199.942807][ T65] cdc_wdm 9-1:1.0: skipping garbage [ 199.946108][ T65] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 199.948306][ T65] cdc_wdm 9-1:1.0: Unknown control protocol [ 199.958916][T11405] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 201.135779][T11450] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.161407][T11451] netlink: 'syz.0.2217': attribute type 10 has an invalid length. [ 201.164258][T11451] __nla_validate_parse: 1 callbacks suppressed [ 201.164270][T11451] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2217'. [ 201.178219][T11451] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 201.181436][T11451] team0: Failed to send options change via netlink (err -105) [ 201.184498][T11451] team0: Port device geneve0 added [ 201.226275][T11450] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.295256][T11450] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.396238][T11450] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.483306][T11450] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.493376][T11450] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.504639][T11450] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.514682][T11450] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.632634][ T10] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 201.756073][T11460] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 201.794927][ T5952] Bluetooth: hci1: command tx timeout [ 201.802633][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 201.807902][ T10] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 201.810479][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.813620][ T10] usb 10-1: Product: syz [ 201.813779][T11464] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2223'. [ 201.814856][ T10] usb 10-1: Manufacturer: syz [ 201.814865][ T10] usb 10-1: SerialNumber: syz [ 201.816069][ T10] usb 10-1: config 0 descriptor?? [ 202.026823][ T10] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 202.246502][T11477] input: syz1 as /devices/virtual/input/input14 [ 202.638425][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2230'. [ 202.641439][T11482] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 202.644194][T11482] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 202.946584][ T834] usb 9-1: USB disconnect, device number 7 [ 203.302651][ T834] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 203.441480][ T10] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 203.445445][ T10] usb 10-1: USB disconnect, device number 6 [ 203.452653][ T834] usb 9-1: Using ep0 maxpacket: 16 [ 203.457293][ T834] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 203.460345][ T834] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 203.463994][ T834] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 203.466468][ T834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.470575][ T834] usb 9-1: config 0 descriptor?? [ 203.885432][ T834] kovaplus 0003:1E7D:2D50.0004: hidraw1: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 204.407133][T11510] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2240'. [ 204.488738][ T834] kovaplus 0003:1E7D:2D50.0004: couldn't init struct kovaplus_device [ 204.494492][ T834] kovaplus 0003:1E7D:2D50.0004: couldn't install mouse [ 204.501413][ T834] kovaplus 0003:1E7D:2D50.0004: probe with driver kovaplus failed with error -71 [ 204.517050][ T834] usb 9-1: USB disconnect, device number 8 [ 204.796998][T11522] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 205.382486][ T34] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 205.549331][ T34] usb 10-1: device descriptor read/64, error -71 [ 205.862483][ T34] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 206.182502][ T34] usb 10-1: device descriptor read/64, error -71 [ 206.296600][ T34] usb usb10-port1: attempt power cycle [ 206.522531][ T7417] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 206.642503][ T34] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 206.662953][ T34] usb 10-1: device descriptor read/8, error -71 [ 206.672520][ T7417] usb 9-1: Using ep0 maxpacket: 32 [ 206.675771][ T7417] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 206.678093][ T7417] usb 9-1: config 0 has no interface number 0 [ 206.679869][ T7417] usb 9-1: config 0 interface 12 has no altsetting 0 [ 206.683753][ T7417] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 206.688535][ T7417] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.702506][ T7417] usb 9-1: Product: syz [ 206.703702][ T7417] usb 9-1: Manufacturer: syz [ 206.705064][ T7417] usb 9-1: SerialNumber: syz [ 206.707959][ T7417] usb 9-1: config 0 descriptor?? [ 206.902498][ T34] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 206.923666][ T34] usb 10-1: device descriptor read/8, error -71 [ 206.991972][T11578] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2268'. [ 207.034088][ T34] usb usb10-port1: unable to enumerate USB device [ 208.929150][ T7417] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 208.931376][ T7417] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 208.933550][ T7417] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 208.935721][ T7417] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 208.944742][ T7417] usb 9-1: USB disconnect, device number 9 [ 209.616349][ T7417] IPVS: starting estimator thread 0... [ 209.702509][T11646] IPVS: using max 45 ests per chain, 108000 per kthread [ 210.637573][T11696] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2310'. [ 211.095211][T11722] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 211.236288][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2323'. [ 211.304020][T11734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2324'. [ 212.452710][ T57] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 212.602508][ T57] usb 8-1: Using ep0 maxpacket: 8 [ 212.609059][ T57] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 212.617717][ T57] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.621230][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.981463][T11792] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2348'. [ 213.820211][T11831] netlink: 'syz.5.2364': attribute type 39 has an invalid length. [ 213.908661][T11837] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 214.132064][ T64] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.197956][ T64] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.252605][ T833] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 214.277668][ T64] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.347340][ T64] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.424310][ T833] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 214.426909][ T833] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 214.429817][ T833] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 214.432502][ T833] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 214.437262][ T833] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 214.442950][ T833] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 214.445617][ T833] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 214.448066][ T833] usb 10-1: Product: syz [ 214.449360][ T833] usb 10-1: Manufacturer: syz [ 214.454133][ T833] cdc_wdm 10-1:1.0: skipping garbage [ 214.455950][ T833] cdc_wdm 10-1:1.0: skipping garbage [ 214.475426][ T833] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 214.478490][ T833] cdc_wdm 10-1:1.0: Unknown control protocol [ 214.496072][ T64] bridge_slave_1: left allmulticast mode [ 214.497966][ T64] bridge_slave_1: left promiscuous mode [ 214.500976][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.508093][ T64] bridge_slave_0: left allmulticast mode [ 214.511035][ T64] bridge_slave_0: left promiscuous mode [ 214.514023][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.608251][ T64] xfrm0 (unregistering): left allmulticast mode [ 214.688757][ T64] team0: Port device geneve0 removed [ 214.715524][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 214.717463][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 214.717597][ T65] usb 10-1: USB disconnect, device number 11 [ 214.719158][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 214.829318][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.834285][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.837814][ T64] bond0 (unregistering): Released all slaves [ 214.843860][ T64] bond1 (unregistering): Released all slaves [ 214.878636][T11861] vlan0: entered promiscuous mode [ 214.880257][T11861] vlan0: entered allmulticast mode [ 214.882445][T11861] hsr_slave_1: entered allmulticast mode [ 214.902756][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2374'. [ 215.127145][T11877] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 215.224335][ T57] usb 8-1: USB disconnect, device number 13 [ 215.252845][ T5950] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 215.417512][ T5950] usb 9-1: unable to get BOS descriptor or descriptor too short [ 215.423007][ T5950] usb 9-1: config 0 has an invalid interface number: 172 but max is 0 [ 215.428080][ T5950] usb 9-1: config 0 has no interface number 0 [ 215.429851][ T5950] usb 9-1: config 0 interface 172 altsetting 0 endpoint 0xA is Bulk; changing to Interrupt [ 215.432845][ T5950] usb 9-1: config 0 interface 172 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 215.441664][ T5950] usb 9-1: string descriptor 0 read error: -22 [ 215.443566][ T5950] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=5e.2d [ 215.446038][ T5950] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.449627][ T5950] usb 9-1: config 0 descriptor?? [ 215.455043][ T5950] usbhid 9-1:0.172: couldn't find an input interrupt endpoint [ 215.505860][ T833] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 215.592503][T11918] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 215.666599][ T833] usb 5-1: config 0 has an invalid interface number: 220 but max is 0 [ 215.669391][ T833] usb 5-1: config 0 has no interface number 0 [ 215.671162][ T833] usb 5-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=48.e3 [ 215.676496][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.687746][ T833] usb 5-1: config 0 descriptor?? [ 215.701269][ T833] aiptek 5-1:0.220: interface has no int in endpoints, but must have minimum 1 [ 215.895632][ T833] usb 5-1: USB disconnect, device number 7 [ 216.090057][ T65] usb 9-1: USB disconnect, device number 10 [ 216.511938][ T64] tipc: Left network mode [ 217.012835][ T64] hsr_slave_0: left promiscuous mode [ 217.020767][ T64] hsr_slave_1: left promiscuous mode [ 217.023439][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.026560][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.035430][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.037633][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.075217][ T64] veth1_macvtap: left promiscuous mode [ 217.077526][ T64] veth0_macvtap: left promiscuous mode [ 217.081792][ T64] veth1_vlan: left promiscuous mode [ 217.084635][ T64] veth0_vlan: left promiscuous mode [ 217.292029][T11984] netlink: 'syz.5.2397': attribute type 10 has an invalid length. [ 217.296210][T11984] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2397'. [ 217.759789][ T64] team0 (unregistering): Port device team_slave_1 removed [ 217.782737][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2400'. [ 217.832726][ T64] team0 (unregistering): Port device team_slave_0 removed [ 218.345015][T11982] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.379407][T11999] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 218.506649][T11982] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.905450][T11982] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.987825][T11982] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.166169][T11982] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.175837][T11982] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.182043][T11982] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.190452][T11982] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.275939][T12021] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 219.557387][T12038] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.587282][T12042] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 219.606190][T12044] netlink: 'syz.4.2419': attribute type 10 has an invalid length. [ 219.608330][T12044] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2419'. [ 219.690448][T12038] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.735809][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2426'. [ 219.739382][T12053] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 219.744923][T12053] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 219.765811][T12038] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.847104][T12038] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.914987][T12038] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.921233][T12038] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.928082][T12038] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.934277][T12038] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.029674][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2427'. [ 220.671787][T12070] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 221.052605][ T7897] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 221.212585][ T7897] usb 5-1: Using ep0 maxpacket: 8 [ 221.215778][ T7897] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 221.218948][ T7897] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.221472][ T7897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.454329][T12094] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 221.678697][T12106] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.728984][T12113] netlink: 'syz.4.2445': attribute type 10 has an invalid length. [ 221.730406][T12106] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.731841][T12113] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2445'. [ 221.750450][T12117] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2450'. [ 221.799349][T12106] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.896851][T12106] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.342584][ T57] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 222.502525][ T57] usb 8-1: Using ep0 maxpacket: 16 [ 222.510461][ T57] usb 8-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 222.513981][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.516797][ T57] usb 8-1: Product: syz [ 222.518287][ T57] usb 8-1: Manufacturer: syz [ 222.520026][ T57] usb 8-1: SerialNumber: syz [ 222.523822][ T57] usb 8-1: config 0 descriptor?? [ 222.529883][ T57] ssu100 8-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 222.734174][ T57] ssu100 8-1:0.0: probe with driver ssu100 failed with error -71 [ 222.742589][ T57] usb 8-1: USB disconnect, device number 14 [ 223.104238][ T9] hid-generic C990:0003:0000.0005: unknown main item tag 0x0 [ 223.106457][ T9] hid-generic C990:0003:0000.0005: unknown main item tag 0x0 [ 223.111453][ T9] hid-generic C990:0003:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz1 [ 223.719727][T12106] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.739477][T12106] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.749359][T12106] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.760690][T12106] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.815967][ T834] usb 5-1: USB disconnect, device number 8 [ 224.009164][T12228] Bluetooth: MGMT ver 1.23 [ 224.015394][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2490'. [ 224.116004][T12240] syzkaller1: entered promiscuous mode [ 224.117666][T12240] syzkaller1: entered allmulticast mode [ 224.570338][T12257] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 224.612505][ T34] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 224.762488][ T34] usb 10-1: Using ep0 maxpacket: 8 [ 224.765243][ T34] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 224.768064][ T34] usb 10-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.771613][ T34] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 224.774575][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.779684][ T34] usbtmc 10-1:16.0: bulk endpoints not found [ 224.829035][T12282] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 225.046191][T12301] speed is unknown, defaulting to 1000 [ 225.121389][T12301] speed is unknown, defaulting to 1000 [ 225.192620][T12309] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 225.554074][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2527'. [ 225.957857][ T10] libceph: connect (1)[c::]:6789 error -101 [ 225.959975][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 226.223955][ T10] libceph: connect (1)[c::]:6789 error -101 [ 226.226090][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 226.445160][T12336] ceph: No mds server is up or the cluster is laggy [ 226.698891][ T5956] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 227.055056][T12391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2536'. [ 227.358957][ T7897] usb 10-1: USB disconnect, device number 12 [ 227.646899][T12433] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 227.752528][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2549'. [ 227.912614][ T7417] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 227.999418][T12451] syz.3.2550 (12451): drop_caches: 2 [ 228.082656][ T7417] usb 10-1: Using ep0 maxpacket: 8 [ 228.087781][ T7417] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 228.091813][ T7417] usb 10-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.096556][ T7417] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 228.099973][ T7417] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.110441][ T7417] usbtmc 10-1:16.0: bulk endpoints not found [ 228.676011][T12463] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 228.772799][T12473] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2558'. [ 228.776618][T12473] netlink: 'syz.4.2558': attribute type 5 has an invalid length. [ 228.955933][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2557'. [ 229.346039][T12485] [U]  [ 229.347144][T12485] [U] K{ [ 229.348611][T12485] [U] T 1ŠFFˊ`GJǘGO/MC [ 229.353356][T12485] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 229.358309][T12485] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 229.391313][T12485] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 229.406889][T12485] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 229.417691][T12485] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 229.420800][T12485] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 229.424123][T12485] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 229.449451][T12485] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 229.452041][T12485] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 229.455831][T12485] [U] 22Ʃ۩X?0;3U [ 229.457401][T12485] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 229.464124][T12485] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 229.466688][T12485] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 229.469227][T12485] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 229.471156][T12485] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 229.474999][T12485] [U] EC [ 229.476045][T12485] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 229.484039][T12483] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 229.523354][T12489] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 229.662349][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2566'. [ 229.743368][T12503] Invalid/unusable pipe [ 230.452054][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2575'. [ 230.487537][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 230.487678][ T40] audit: type=1326 audit(1744153866.696:6077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12522 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 230.495045][ T40] audit: type=1326 audit(1744153866.696:6078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12522 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 230.500083][ T40] audit: type=1326 audit(1744153866.706:6079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12522 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 230.507405][ T40] audit: type=1326 audit(1744153866.706:6080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12522 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 230.513122][ T40] audit: type=1326 audit(1744153866.706:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12522 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 230.518547][ T40] audit: type=1326 audit(1744153866.706:6082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12522 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 230.524025][ T40] audit: type=1326 audit(1744153866.706:6083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12522 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 230.529468][ T40] audit: type=1326 audit(1744153866.706:6084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12522 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 230.535197][ T40] audit: type=1326 audit(1744153866.706:6085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12522 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 230.540605][ T40] audit: type=1326 audit(1744153866.706:6086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12522 comm="+|[@" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 230.674489][ T2297] usb 10-1: USB disconnect, device number 13 [ 230.754891][ T5956] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 230.757352][ T5956] Bluetooth: hci1: Injecting HCI hardware error event [ 230.838541][T12527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2578'. [ 231.201220][T12549] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 231.264570][T12552] overlayfs: failed to resolve './file0': -2 [ 231.676961][T12571] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 231.712744][T12574] overlayfs: failed to resolve './file0': -2 [ 231.897591][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2599'. [ 232.400312][T12595] overlayfs: failed to resolve './file0': -2 [ 232.520161][T12602] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2609'. [ 232.575742][T12607] tipc: Started in network mode [ 232.577741][T12607] tipc: Node identity ac14140f, cluster identity 4711 [ 232.581713][T12607] tipc: New replicast peer: 255.255.255.255 [ 232.587037][T12607] tipc: Enabled bearer , priority 10 [ 232.590208][T12607] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2611'. [ 232.592988][T12607] tipc: Disabling bearer [ 232.657090][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2608'. [ 232.679181][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2613'. [ 232.892624][T12622] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2618'. [ 233.083810][T12632] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.087453][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2623'. [ 233.125628][T12637] netlink: 'syz.4.2622': attribute type 10 has an invalid length. [ 233.128490][T12637] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2622'. [ 233.146837][T12632] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.189588][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2624'. [ 233.207376][T12632] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.267787][T12632] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.341122][T12632] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.348959][T12632] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.358239][T12632] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.364399][T12632] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.703904][T12648] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 234.116266][T12671] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 234.300824][T12679] netlink: 'syz.5.2642': attribute type 72 has an invalid length. [ 234.424375][ T57] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 234.455928][T12693] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 234.582487][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 234.590135][ T57] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 234.595029][ T57] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 35114, setting to 1024 [ 234.598099][ T57] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 234.600904][ T57] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 234.604518][ T57] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 234.606963][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.612716][ T57] usbtmc 5-1:16.0: bulk endpoints not found [ 234.827676][T12719] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 235.418007][T12751] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.450331][T12758] netlink: 'syz.3.2671': attribute type 10 has an invalid length. [ 235.461340][T12758] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 235.464140][T12758] team0: Failed to send options change via netlink (err -105) [ 235.466345][T12758] team0: Port device geneve0 added [ 235.486722][T12751] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.575269][T12751] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.666867][T12751] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.743425][T12751] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.749817][T12751] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.756119][T12751] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.763330][T12751] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.258164][T12778] cgroup: fork rejected by pids controller in /syz3 [ 236.719453][T12834] __nla_validate_parse: 8 callbacks suppressed [ 236.719463][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2690'. [ 236.751407][T12837] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.801293][T12840] netlink: 'syz.3.2691': attribute type 10 has an invalid length. [ 236.804325][T12840] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2691'. [ 236.807889][T12840] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 236.817643][T12837] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.900183][T12837] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.955577][T12837] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.182577][ T7417] usb 5-1: USB disconnect, device number 9 [ 237.694087][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2700'. [ 237.942510][ T7417] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 238.092666][ T7417] usb 9-1: Using ep0 maxpacket: 8 [ 238.096029][ T7417] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 238.099957][ T7417] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 35114, setting to 1024 [ 238.105877][ T7417] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 238.108620][ T7417] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 238.113307][ T7417] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.116140][ T7417] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.121893][ T7417] usbtmc 9-1:16.0: bulk endpoints not found [ 239.293393][T12889] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2711'. [ 239.322664][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2712'. [ 239.565622][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2715'. [ 240.058613][T12837] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.066355][T12837] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.075927][T12837] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.084718][T12837] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.504747][T12914] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2720'. [ 240.568082][T12922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2724'. [ 240.691269][ T7897] usb 9-1: USB disconnect, device number 11 [ 240.704236][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2722'. [ 240.947510][T12939] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 240.956188][T12939] BUG: sleeping function called from invalid context at ./include/linux/sched/mm.h:321 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 240.959295][T12939] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 12939, name: syz.4.2730 [ 240.964489][T12939] preempt_count: 0, expected: 0 [ 240.965879][T12939] RCU nest depth: 1, expected: 0 [ 240.967317][T12939] 4 locks held by syz.4.2730/12939: [ 240.968752][T12939] #0: ffff88801fd4feb8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 240.971316][T12939] #1: ffff8880425cef40 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: wrap_directory_iterator+0x54/0xe0 [ 240.976636][T12939] #2: ffff888071428148 (&type->i_mutex_dir_key#9){.+.+}-{4:4}, at: iterate_dir+0x18b/0xb40 [ 240.981069][T12939] #3: ffffffff8e3c1580 (rcu_read_lock){....}-{1:3}, at: afs_dynroot_readdir+0x619/0xf50 [ 240.985725][T12939] CPU: 3 UID: 0 PID: 12939 Comm: syz.4.2730 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 240.985741][T12939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 240.985749][T12939] Call Trace: [ 240.985752][T12939] [ 240.985757][T12939] dump_stack_lvl+0x16c/0x1f0 [ 240.985775][T12939] __might_resched+0x3c0/0x5e0 [ 240.985791][T12939] ? find_held_lock+0x2b/0x80 [ 240.985805][T12939] ? __pfx___might_resched+0x10/0x10 [ 240.985830][T12939] ? ovl_cache_entry_new+0x3d/0x730 [ 240.985843][T12939] __kmalloc_noprof+0x386/0x510 [ 240.985862][T12939] ovl_cache_entry_new+0x3d/0x730 [ 240.985877][T12939] ovl_fill_merge+0x2c1/0xa90 [ 240.985892][T12939] afs_dynroot_readdir+0x9bb/0xf50 [ 240.985904][T12939] ? __pfx_ovl_fill_merge+0x10/0x10 [ 240.985918][T12939] ? __pfx_afs_dynroot_readdir+0x10/0x10 [ 240.985935][T12939] ? apparmor_file_permission+0x251/0x400 [ 240.985949][T12939] iterate_dir+0x293/0xb40 [ 240.985968][T12939] ovl_dir_read_merged+0x3ef/0x5d0 [ 240.985980][T12939] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 240.985995][T12939] ? __pfx_ovl_fill_merge+0x10/0x10 [ 240.986013][T12939] ? kasan_save_track+0x14/0x30 [ 240.986030][T12939] ovl_iterate+0x86c/0xe40 [ 240.986042][T12939] ? __pfx_down_read_killable+0x10/0x10 [ 240.986054][T12939] ? __pfx_ovl_iterate+0x10/0x10 [ 240.986066][T12939] wrap_directory_iterator+0x9f/0xe0 [ 240.986080][T12939] iterate_dir+0x293/0xb40 [ 240.986095][T12939] __ia32_compat_sys_getdents+0x14d/0x2c0 [ 240.986108][T12939] ? __ia32_sys_futex_time32+0x2fc/0x460 [ 240.986124][T12939] ? __pfx___ia32_compat_sys_getdents+0x10/0x10 [ 240.986139][T12939] ? __pfx_compat_filldir+0x10/0x10 [ 240.986152][T12939] ? ovl_dir_llseek+0x2c2/0x4d0 [ 240.986164][T12939] ? rcu_is_watching+0x12/0xc0 [ 240.986178][T12939] __do_fast_syscall_32+0x73/0x120 [ 240.986194][T12939] do_fast_syscall_32+0x32/0x80 [ 240.986209][T12939] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 240.986222][T12939] RIP: 0023:0xf7f24579 [ 240.986231][T12939] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 240.986240][T12939] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 000000000000008d [ 240.986250][T12939] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 240.986256][T12939] RDX: 0000000000000058 RSI: 0000000000000000 RDI: 0000000000000000 [ 240.986262][T12939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 240.986267][T12939] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 240.986273][T12939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 240.986286][T12939] [ 241.065202][ C3] vkms_vblank_simulate: vblank timer overrun VM DIAGNOSIS: 23:11:17 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000007 RBX=ffff8880419e26b8 RCX=dffffc0000000000 RDX=0000000000000000 RSI=0000000000000004 RDI=ffff8880419e26bc RBP=0000000000000000 RSP=ffffc90002f2f760 R8 =0000000000000000 R9 =ffffed100833c4d7 R10=ffff8880419e26bf R11=0000000000000000 R12=ffff8880419e2670 R13=0000000000000001 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff822b1755 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f36e40 CR3=00000000460c0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000c87459 RBX=ffff88801dac2440 RCX=ffffffff81c3002f RDX=0000000000000000 RSI=ffffffff8dbeaf36 RDI=ffffffff8bf451c0 RBP=ffffc9000046fc28 RSP=ffffc9000046fbb8 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff90867317 R11=0000000000000000 R12=ffff88802b339f00 R13=ffff8880269a2440 R14=ffff888043975a00 R15=ffff88802b33ad30 RIP=ffffffff81001530 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000003261fffc CR3=00000000460c0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffff88802b432de8 RCX=0000000000000000 RDX=1ffffffff1b9eda2 RSI=ffffffff8bf45140 RDI=ffffffff8dcf6d10 RBP=0000000000000002 RSP=ffffc9000689fa08 R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff90867317 R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81a0e835 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc06090c9c CR3=000000007518c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffffff93a79de8 RCX=0000000000000002 RDX=1ffffffff1b9eda3 RSI=ffffffff8bf45140 RDI=ffffffff8dcf6d18 RBP=0000000000000003 RSP=ffffc900005e8948 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000007 R11=0000000000009aef R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81a0e821 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097ab9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73e6188 CR3=00000000437ce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000032e7 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000