last executing test programs: 5.29431455s ago: executing program 3 (id=1249): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mkdir(0x0, 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 5.210767159s ago: executing program 3 (id=1251): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000300)=ANY=[], 0x0) 5.184690407s ago: executing program 3 (id=1253): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x6, &(0x7f0000000240)={0x13, "c2ba2cdddf96c2d905bd4296ce341591ddc08dbe750690648bd79a7fbf3d4cefc6"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="a90018"], 0x0, 0x0, 0x0, 0x0}) 5.038934759s ago: executing program 1 (id=1254): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000001580)=@get={0x1, 0x0, 0x8000000000000001}) 5.038764294s ago: executing program 1 (id=1255): signalfd(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_RATE={0x6, 0x5, {0x7f}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000000) 3.932561211s ago: executing program 1 (id=1264): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.586322889s ago: executing program 2 (id=1266): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 3.585920669s ago: executing program 1 (id=1267): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) 3.495894225s ago: executing program 1 (id=1268): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200), 0x0) accept4(r0, 0x0, 0x0, 0x800) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000ac0)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) unshare(0x400) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000005c0)) read$FUSE(r3, &(0x7f0000005180)={0x2020}, 0x2020) 2.335556268s ago: executing program 1 (id=1275): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00'], 0x0, 0x0, 0x0}, 0x0) 1.843340126s ago: executing program 3 (id=1276): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000001600010a"], 0x18}}, 0x0) 1.843091113s ago: executing program 3 (id=1277): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d) io_uring_setup(0x10002f00, &(0x7f00000004c0)={0x0, 0xe8e3, 0x20, 0x20001, 0x2d4}) syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) 1.76080772s ago: executing program 0 (id=1278): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x100, 0x80000000, 0x2, 0xf, 0xe, 0x5, 0x79, 0x3, 0x80004, 0x0, 0xfffffff7, 0x1, 0x7, 0x1, 0xbfffffff, 0xfd, 0xfffffffb, 0x9, 0x0, 0x4, 0x89, 0xca9f, 0x0, 0x6, 0xffffffff, 0xf39e, 0x0, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) 1.760630155s ago: executing program 0 (id=1279): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x4040) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044800}, 0x0) socket$kcm(0x29, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x2000974) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f00000000c0)) ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x2, 0x0, 0xa}}) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) nanosleep(0x0, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000001680)='./file0\x00', 0x8) r3 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r5 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r5, 0x4606, &(0x7f0000000040)={0x356, 0xa0, 0x780, 0x600, 0x0, 0x4, 0x0, 0xfffffffe, {0x9, 0x7}, {0x27, 0x0, 0x1}, {0x401, 0x7}, {0x1, 0x4, 0x1}, 0x3, 0x0, 0xe512, 0x7fff, 0x1, 0x6e, 0x10, 0x2, 0x803, 0x80, 0x8fac, 0x8, 0x8, 0x100, 0x0, 0x6}) socket$qrtr(0x2a, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="500000002700010000000000000000000a000100000000000000000000000000ac1e01010000000000000000000000000000000000000800000000002b0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000073111ed1779bf3b190553519b26679e494845375337366b3713f580e283d934e84e7289d94b723d7b11c3374937c7a1b17fde44a079c79008b83a42e5591fcfa7016d0d50d18371006c3947f598594108d0764e2391697a307e18621d14be218991a4c935b2c737bf92ad3109f499a05c1961931cb467eb606b38751bca6a5e68b3be229ebecbef86d06650bcb29dacbc6dece39e4e8afdb26572d38764cf50e441ad3a20be8f63e5938e9af107681070d5860"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) 1.336051512s ago: executing program 2 (id=1280): creat(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read(r0, &(0x7f0000001b00)=""/194, 0xc2) 1.246365215s ago: executing program 2 (id=1281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000030605000000000000000000020000050900020073797a31000000000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x14) 1.245804308s ago: executing program 2 (id=1282): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x4f834c58, 0x3, 0x101, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f0000002140)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1e128dca5a5225db8052bd348c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda0f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df00", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xd5a6, 0x9, 0x0, 0xfffffffd, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 792.100924ms ago: executing program 3 (id=1283): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB='\r'], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 791.795727ms ago: executing program 0 (id=1284): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 586.501455ms ago: executing program 0 (id=1285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 586.148867ms ago: executing program 0 (id=1286): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f00000002c0)={0xc, 0x2, 0x0, 0x0, 'syz1\x00'}) 485.699763ms ago: executing program 0 (id=1287): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r0, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000708000/0x4000)=nil, &(0x7f000081f000/0x3000)=nil, 0x4000, 0x1}) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x4d, 0x400c080) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x27) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, 0x0, 0x0, r4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180), 0x4) 261.756349ms ago: executing program 2 (id=1288): ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x84, 0x4, 0x9, 0x4, 0x0, 0xb}]}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x880018, 0x0) r2 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r4) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x49801, 0x4dac1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x40}}, 0x0) sendto$packet(r3, &(0x7f0000000400)="05d936277c6f5422007f", 0xa, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mq_getsetattr(r2, &(0x7f00000001c0)={0x4000000007a, 0x40, 0x80000000000004, 0xffff}, 0x0) mq_timedreceive(r2, &(0x7f0000000440)=""/241, 0xf1, 0x35b66706, &(0x7f00000000c0)) io_submit(r1, 0x1f, &(0x7f0000000040)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x8, 0x13, r0, &(0x7f0000000000)="98", 0x1, 0x3e7ffffffc, 0x0, 0x10}]) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 2 (id=1289): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:18324' (ED25519) to the list of known hosts. [ 47.009581][ T5670] cgroup: Unknown subsys name 'net' [ 47.223674][ T5670] cgroup: Unknown subsys name 'cpuset' [ 47.227893][ T5670] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.335939][ T5670] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.137204][ T5747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.142179][ T5757] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.147753][ T5749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.148472][ T5751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.152001][ T5749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.154228][ T5751] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.155044][ T5756] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.155206][ T5749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.155821][ T5749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.156199][ T5749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.158046][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.159763][ T5751] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.161624][ T62] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.167326][ T5756] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.169967][ T62] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.172271][ T5751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.174732][ T5756] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.175001][ T62] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.182510][ T5745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.192363][ T5101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.718147][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.720861][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.723159][ T5739] bridge_slave_0: entered allmulticast mode [ 52.725871][ T5739] bridge_slave_0: entered promiscuous mode [ 52.755211][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.758078][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.760441][ T5739] bridge_slave_1: entered allmulticast mode [ 52.763426][ T5739] bridge_slave_1: entered promiscuous mode [ 52.813709][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.816568][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.818874][ T5740] bridge_slave_0: entered allmulticast mode [ 52.821713][ T5740] bridge_slave_0: entered promiscuous mode [ 52.837948][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.841803][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.844129][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.846460][ T5740] bridge_slave_1: entered allmulticast mode [ 52.849168][ T5740] bridge_slave_1: entered promiscuous mode [ 52.875596][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.902421][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.932661][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.949942][ T5739] team0: Port device team_slave_0 added [ 52.953763][ T5739] team0: Port device team_slave_1 added [ 52.967616][ T5752] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.970404][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.972821][ T5752] bridge_slave_0: entered allmulticast mode [ 52.975743][ T5752] bridge_slave_0: entered promiscuous mode [ 53.005982][ T5740] team0: Port device team_slave_0 added [ 53.017255][ T5752] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.020020][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.022529][ T5752] bridge_slave_1: entered allmulticast mode [ 53.025630][ T5752] bridge_slave_1: entered promiscuous mode [ 53.035629][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.038542][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.048847][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.056334][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.059250][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.069552][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.076222][ T5740] team0: Port device team_slave_1 added [ 53.112813][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.115266][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.117544][ T5741] bridge_slave_0: entered allmulticast mode [ 53.120147][ T5741] bridge_slave_0: entered promiscuous mode [ 53.125110][ T5752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.137409][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.140567][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.143570][ T5741] bridge_slave_1: entered allmulticast mode [ 53.147489][ T5741] bridge_slave_1: entered promiscuous mode [ 53.152883][ T5752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.177005][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.179931][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.190453][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.226212][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.229156][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.240092][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.247556][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.254001][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.259173][ T5752] team0: Port device team_slave_0 added [ 53.267025][ T5739] hsr_slave_0: entered promiscuous mode [ 53.270441][ T5739] hsr_slave_1: entered promiscuous mode [ 53.293986][ T5752] team0: Port device team_slave_1 added [ 53.317808][ T5741] team0: Port device team_slave_0 added [ 53.332888][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.335345][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.343656][ T5752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.349004][ T5741] team0: Port device team_slave_1 added [ 53.367340][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.369514][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.377814][ T5752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.401398][ T5740] hsr_slave_0: entered promiscuous mode [ 53.403737][ T5740] hsr_slave_1: entered promiscuous mode [ 53.405839][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 53.407673][ T5740] Cannot create hsr debugfs directory [ 53.419500][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.421798][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.429496][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.433977][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.436184][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.443989][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.530410][ T5752] hsr_slave_0: entered promiscuous mode [ 53.533470][ T5752] hsr_slave_1: entered promiscuous mode [ 53.536364][ T5752] debugfs: 'hsr0' already exists in 'hsr' [ 53.538724][ T5752] Cannot create hsr debugfs directory [ 53.575472][ T5741] hsr_slave_0: entered promiscuous mode [ 53.578187][ T5741] hsr_slave_1: entered promiscuous mode [ 53.580997][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 53.582771][ T5741] Cannot create hsr debugfs directory [ 53.828912][ T5740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.843159][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 53.847043][ T5740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.855893][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 53.860137][ T5740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.867053][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 53.886782][ T5740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.893284][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 53.944368][ T5739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.949959][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 53.952813][ T5739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.958135][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 53.963402][ T5739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.971544][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 53.975924][ T5739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.980025][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.037938][ T5752] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.043264][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.047277][ T5752] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.052173][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.055291][ T5752] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.059969][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.063019][ T5752] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.067584][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.134803][ T5741] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.145694][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.159091][ T5741] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.163568][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.171723][ T5741] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.176088][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.179431][ T5741] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.182081][ T5101] Bluetooth: hci1: command tx timeout [ 54.182377][ T5747] Bluetooth: hci0: command tx timeout [ 54.188968][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.209702][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.240452][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.260880][ T5101] Bluetooth: hci2: command tx timeout [ 54.263861][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.266595][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.270772][ T5101] Bluetooth: hci3: command tx timeout [ 54.278634][ T5752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.282741][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.288609][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.291158][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.316873][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.321564][ T5752] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.334135][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.336507][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.348806][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.351087][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.356977][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.359238][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.376397][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.378674][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.384482][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.419154][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.432875][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.435178][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.448066][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.450393][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.649240][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.679183][ T5740] veth0_vlan: entered promiscuous mode [ 54.688218][ T5740] veth1_vlan: entered promiscuous mode [ 54.694920][ T5752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.730423][ T5740] veth0_macvtap: entered promiscuous mode [ 54.738076][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.748984][ T5740] veth1_macvtap: entered promiscuous mode [ 54.754498][ T5752] veth0_vlan: entered promiscuous mode [ 54.767579][ T5752] veth1_vlan: entered promiscuous mode [ 54.771518][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.782675][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.796015][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.818624][ T5739] veth0_vlan: entered promiscuous mode [ 54.821367][ T779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.824899][ T779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.832029][ T779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.834859][ T779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.851970][ T5752] veth0_macvtap: entered promiscuous mode [ 54.857296][ T5739] veth1_vlan: entered promiscuous mode [ 54.864955][ T5752] veth1_macvtap: entered promiscuous mode [ 54.877781][ T5741] veth0_vlan: entered promiscuous mode [ 54.896873][ T5741] veth1_vlan: entered promiscuous mode [ 54.905950][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.915492][ T779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.917882][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.918647][ T779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.922440][ T5739] veth0_macvtap: entered promiscuous mode [ 54.942970][ T5739] veth1_macvtap: entered promiscuous mode [ 54.945334][ T162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.948966][ T162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.953247][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.956961][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.959965][ T162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.964398][ T779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.969700][ T5741] veth0_macvtap: entered promiscuous mode [ 54.982948][ T5741] veth1_macvtap: entered promiscuous mode [ 54.991925][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.009976][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.024900][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.028459][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.031010][ T5740] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.041264][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.050032][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.054519][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.071162][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.074889][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.085670][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.089555][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.097259][ T779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.105569][ T779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.110710][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.142932][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.146691][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.190664][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.196281][ T779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.196577][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.203397][ T779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.244609][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.247443][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.257176][ T3821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.260129][ T3821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.386057][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 56.108767][ T5913] netlink: 'syz.2.9': attribute type 39 has an invalid length. [ 56.260801][ T5101] Bluetooth: hci0: command tx timeout [ 56.262592][ T5101] Bluetooth: hci1: command tx timeout [ 56.340590][ T5747] Bluetooth: hci3: command tx timeout [ 56.342348][ T5101] Bluetooth: hci2: command tx timeout [ 56.533900][ T5920] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 56.850846][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 57.781046][ T5945] kvm: user requested TSC rate below hardware speed [ 57.788506][ T5945] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 58.102546][ T5954] netlink: 'syz.1.21': attribute type 39 has an invalid length. [ 58.340329][ T5101] Bluetooth: hci1: command tx timeout [ 58.342576][ T5747] Bluetooth: hci0: command tx timeout [ 58.430341][ T5747] Bluetooth: hci2: command tx timeout [ 58.430385][ T5101] Bluetooth: hci3: command tx timeout [ 58.647058][ T5964] vivid-001: ================= START STATUS ================= [ 58.651376][ T5964] vivid-001: Radio HW Seek Mode: Bounded [ 58.653479][ T5964] vivid-001: Radio Programmable HW Seek: false [ 58.655421][ T5964] vivid-001: RDS Rx I/O Mode: Block I/O [ 58.657161][ T5964] vivid-001: Generate RBDS Instead of RDS: false [ 58.659187][ T5964] vivid-001: RDS Reception: true [ 58.661581][ T5964] vivid-001: RDS Program Type: 0 inactive [ 58.663602][ T5964] vivid-001: RDS PS Name: inactive [ 58.665622][ T5964] vivid-001: RDS Radio Text: inactive [ 58.667382][ T5964] vivid-001: RDS Traffic Announcement: false inactive [ 58.669525][ T5964] vivid-001: RDS Traffic Program: false inactive [ 58.672438][ T5964] vivid-001: RDS Music: false inactive [ 58.677030][ T5964] vivid-001: ================== END STATUS ================== [ 58.834379][ T162] Bluetooth: (null): Invalid header checksum [ 58.941352][ T46] Bluetooth: (null): Invalid header checksum [ 58.971084][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 59.050757][ T46] Bluetooth: (null): Invalid header checksum [ 59.130306][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 59.135520][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 59.145220][ T10] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 59.150505][ T10] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 59.156578][ T10] usb 8-1: Product: syz [ 59.158645][ T10] usb 8-1: Manufacturer: syz [ 59.161784][ T162] Bluetooth: (null): Invalid header checksum [ 59.163781][ T10] usb 8-1: SerialNumber: syz [ 59.174806][ T10] usb 8-1: config 0 descriptor?? [ 59.180547][ T5967] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 59.193421][ T10] hub 8-1:0.0: bad descriptor, ignoring hub [ 59.198733][ T10] hub 8-1:0.0: probe with driver hub failed with error -5 [ 59.270716][ T162] Bluetooth: (null): Invalid header checksum [ 59.381865][ T72] Bluetooth: (null): Invalid header checksum [ 59.657892][ T5979] fuse: Bad value for 'fd' [ 60.045437][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'. [ 60.049732][ T5992] netlink: 104 bytes leftover after parsing attributes in process `syz.1.34'. [ 60.053007][ T5992] netlink: 104 bytes leftover after parsing attributes in process `syz.1.34'. [ 60.151658][ T72] raw-gadget.0 gadget.3: failed to queue suspend event [ 60.220523][ T5967] raw-gadget.0 gadget.3: failed to queue resume event [ 60.251572][ T13] raw-gadget.0 gadget.3: failed to queue suspend event [ 60.330633][ T5967] raw-gadget.0 gadget.3: failed to queue resume event [ 60.352971][ T46] raw-gadget.0 gadget.3: failed to queue suspend event [ 60.420500][ T5101] Bluetooth: hci0: command tx timeout [ 60.430516][ T5101] Bluetooth: hci1: command tx timeout [ 60.434185][ T5967] raw-gadget.0 gadget.3: failed to queue resume event [ 60.452932][ T46] raw-gadget.0 gadget.3: failed to queue suspend event [ 60.500381][ T5101] Bluetooth: hci2: command tx timeout [ 60.510272][ T5101] Bluetooth: hci3: command tx timeout [ 60.520484][ T5967] raw-gadget.0 gadget.3: failed to queue resume event [ 60.543180][ T13] raw-gadget.0 gadget.3: failed to queue suspend event [ 60.591011][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 60.610434][ T5967] raw-gadget.0 gadget.3: failed to queue resume event [ 60.632415][ T162] raw-gadget.0 gadget.3: failed to queue suspend event [ 60.710354][ T5967] raw-gadget.0 gadget.3: failed to queue resume event [ 60.731828][ T162] raw-gadget.0 gadget.3: failed to queue suspend event [ 60.800338][ T5967] raw-gadget.0 gadget.3: failed to queue resume event [ 60.822992][ T3821] raw-gadget.0 gadget.3: failed to queue suspend event [ 60.882414][ T6008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.37'. [ 60.900902][ T5967] raw-gadget.0 gadget.3: failed to queue resume event [ 60.922349][ T3821] raw-gadget.0 gadget.3: failed to queue suspend event [ 60.990661][ T5967] raw-gadget.0 gadget.3: failed to queue resume event [ 61.012452][ T13] raw-gadget.0 gadget.3: failed to queue suspend event [ 61.090743][ T5967] raw-gadget.0 gadget.3: failed to queue resume event [ 61.093141][ T6013] Zero length message leads to an empty skb [ 61.122983][ T162] raw-gadget.0 gadget.3: failed to queue suspend event [ 61.190376][ T5967] raw-gadget.0 gadget.3: failed to queue resume event [ 61.212812][ T46] raw-gadget.0 gadget.3: failed to queue suspend event [ 61.280371][ T5967] raw-gadget.0 gadget.3: failed to queue resume event [ 61.302552][ T13] raw-gadget.0 gadget.3: failed to queue suspend event [ 61.381036][ T5967] raw-gadget.0 gadget.3: failed to queue resume event [ 61.402409][ T72] raw-gadget.0 gadget.3: failed to queue suspend event [ 61.426831][ T6021] fuse: Invalid rootmode [ 61.470396][ T5967] raw-gadget.0 gadget.3: failed to queue resume event [ 61.491893][ T72] raw-gadget.0 gadget.3: failed to queue suspend event [ 61.560409][ T5967] raw-gadget.0 gadget.3: failed to queue resume event [ 61.581896][ T13] raw-gadget.0 gadget.3: failed to queue suspend event [ 61.660984][ T5967] raw-gadget.0 gadget.3: failed to queue resume event [ 61.684461][ T46] raw-gadget.0 gadget.3: failed to queue suspend event [ 61.729402][ T6038] tap0: tun_chr_ioctl cmd 1074025681 [ 61.750698][ T5967] raw-gadget.0 gadget.3: failed to queue resume event [ 61.775764][ T46] raw-gadget.0 gadget.3: failed to queue suspend event [ 61.783358][ T5967] raw-gadget.0 gadget.3: failed to queue disconnect event [ 61.792266][ T24] usb 8-1: USB disconnect, device number 2 [ 62.443121][ T6054] syzkaller0: entered promiscuous mode [ 62.446592][ T6054] syzkaller0: entered allmulticast mode [ 63.236234][ T6073] fuse: Invalid rootmode [ 63.555261][ T6083] warning: `syz.0.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 64.477754][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 64.573502][ T6105] fuse: Bad value for 'rootmode' [ 65.245709][ T50] cfg80211: failed to load regulatory.db [ 66.181278][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 66.360744][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 66.371716][ T29] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.380580][ T29] usb 7-1: config 0 has no interfaces? [ 66.390527][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 66.400349][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.425188][ T29] usb 7-1: config 0 descriptor?? [ 66.608109][ T6136] fuse: Bad value for 'rootmode' [ 66.640853][ T29] usb 7-1: USB disconnect, device number 2 [ 67.350737][ T6145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.83'. [ 67.616324][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 67.754435][ T6153] netlink: 'syz.0.86': attribute type 10 has an invalid length. [ 67.761420][ T6153] syz_tun: entered promiscuous mode [ 67.774072][ T6153] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 67.839691][ T6155] trusted_key: syz.1.87 sent an empty control message without MSG_MORE. [ 68.170379][ T58] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.301097][ T58] usb 5-1: device descriptor read/64, error -71 [ 68.560617][ T58] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.690319][ T58] usb 5-1: device descriptor read/64, error -71 [ 68.800490][ T58] usb usb5-port1: attempt power cycle [ 69.150610][ T58] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 69.181948][ T58] usb 5-1: device descriptor read/8, error -71 [ 69.421206][ T58] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 69.451012][ T58] usb 5-1: device descriptor read/8, error -71 [ 69.562104][ T58] usb usb5-port1: unable to enumerate USB device [ 71.815565][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 72.331649][ T6197] fuse: Bad value for 'rootmode' [ 72.560383][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 72.643137][ T6204] o2cb: This node has not been configured. [ 72.645190][ T6204] o2cb: Cluster check failed. Fix errors before retrying. [ 72.647992][ T6204] (syz.3.98,6204,2):user_dlm_register:674 ERROR: status = -22 [ 72.651493][ T6204] (syz.3.98,6204,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 72.720326][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 72.725223][ T24] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 72.728138][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.732124][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.735421][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.739330][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.744868][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 72.747879][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.958909][ T24] usb 7-1: GET_CAPABILITIES returned 0 [ 72.961220][ T24] usbtmc 7-1:16.0: can't read capabilities [ 73.164027][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.168131][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.170925][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.174326][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.178075][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.181782][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.191496][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.195265][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.198916][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.202547][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.207408][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.211168][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.214458][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.218187][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.223621][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.224094][ T5846] usb 7-1: USB disconnect, device number 3 [ 73.227371][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.422183][ T6216] Bluetooth: MGMT ver 1.23 [ 73.509549][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.108'. [ 73.940367][ T5846] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 74.105647][ T5846] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 74.109457][ T5846] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.113387][ T5846] usb 8-1: Product: syz [ 74.115310][ T5846] usb 8-1: Manufacturer: syz [ 74.117145][ T5846] usb 8-1: SerialNumber: syz [ 74.121627][ T5846] usb 8-1: config 0 descriptor?? [ 74.200516][ T50] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 74.209231][ T6229] batman_adv: batadv0: Adding interface: dummy0 [ 74.213052][ T6229] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.221129][ T6229] batman_adv: batadv0: Interface activated: dummy0 [ 74.236392][ T6229] batadv0: mtu less than device minimum [ 74.239036][ T6229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.243213][ T6229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.247563][ T6229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.251460][ T6229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.256016][ T6229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.259979][ T6229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.263634][ T6229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.268054][ T6229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.271853][ T6229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.329195][ T5846] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 74.360266][ T50] usb 7-1: Using ep0 maxpacket: 8 [ 74.363721][ T50] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 74.366735][ T50] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.370704][ T50] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 74.374435][ T50] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.378340][ T50] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.383554][ T50] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 74.387054][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.602573][ T50] usb 7-1: usb_control_msg returned -32 [ 74.605192][ T50] usbtmc 7-1:16.0: can't read capabilities [ 74.890100][ T6233] kvm: user requested TSC rate below hardware speed [ 74.893920][ T6233] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 75.152216][ T6235] usbtmc 7-1:16.0: usbtmc_ioctl_request failed -71 [ 75.153407][ T857] usb 7-1: USB disconnect, device number 4 [ 75.747404][ T5846] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 75.755100][ T5846] usb 8-1: USB disconnect, device number 3 [ 75.800646][ T6254] fuse: Unknown parameter 'user_id00000000000000000000' [ 76.104131][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.107519][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.320860][ T6265] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 76.699450][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'. [ 76.929406][ T6289] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 76.968320][ T6291] fuse: Unknown parameter 'use00000000000000000000' [ 77.785871][ T6308] fuse: Unknown parameter 'user_id00000000000000000000' [ 79.984588][ T6352] syzkaller0: entered promiscuous mode [ 79.986426][ T6352] syzkaller0: entered allmulticast mode [ 80.168570][ T6359] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 80.182903][ T5846] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 80.263500][ T6361] IPVS: Scheduler module ip_vs_ not found [ 80.344076][ T5846] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 80.360740][ T5846] usb 7-1: config 0 has no interface number 0 [ 80.363329][ T5846] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 80.370336][ T5846] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 80.378420][ T5846] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 80.391524][ T5846] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 80.399029][ T5846] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 80.409460][ T5846] usb 7-1: Product: syz [ 80.411595][ T5846] usb 7-1: SerialNumber: syz [ 80.419881][ T5846] usb 7-1: config 0 descriptor?? [ 80.439848][ T5846] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 80.464178][ T5846] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input5 [ 80.932151][ T6375] syzkaller0: entered promiscuous mode [ 80.934181][ T6375] syzkaller0: entered allmulticast mode [ 81.422450][ T6383] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 82.284469][ T6394] fuse: Unknown parameter 'user_i00000000000000000000' [ 82.538706][ T6401] syzkaller0: entered promiscuous mode [ 82.543242][ T6401] syzkaller0: entered allmulticast mode [ 82.923090][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 82.923247][ T843] usb 7-1: USB disconnect, device number 5 [ 82.925765][ C3] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 82.984464][ T843] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 83.190616][ T6410] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 84.191944][ T5101] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 84.195536][ T5101] Bluetooth: hci2: Injecting HCI hardware error event [ 84.200067][ T5747] Bluetooth: hci2: hardware error 0x00 [ 84.287085][ T6428] syzkaller0: entered promiscuous mode [ 84.295892][ T6428] syzkaller0: entered allmulticast mode [ 84.555022][ T6432] fuse: Unknown parameter 'user_i00000000000000000000' [ 84.673397][ T5101] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 84.676508][ T5101] Bluetooth: hci3: Injecting HCI hardware error event [ 84.681332][ T5101] Bluetooth: hci3: hardware error 0x00 [ 85.300384][ T58] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 85.472046][ T58] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.476772][ T58] usb 7-1: config 0 interface 0 has no altsetting 0 [ 85.479206][ T58] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 85.482425][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.486102][ T6456] syzkaller0: entered promiscuous mode [ 85.488475][ T6456] syzkaller0: entered allmulticast mode [ 85.592033][ T58] usb 7-1: config 0 descriptor?? [ 85.733743][ T6462] MTD: Couldn't look up '/dev/md0': -2 [ 86.019234][ T58] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x1 [ 86.021925][ T58] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 86.024957][ T58] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 86.027741][ T58] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 86.030944][ T58] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 86.033330][ T58] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 86.035871][ T58] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 86.038419][ T58] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 86.041366][ T58] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 86.043818][ T58] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 86.052098][ T58] lua 0003:1E7D:2C2E.0002: hidraw1: USB HID v0.20 Device [HID 1e7d:2c2e] on usb-dummy_hcd.2-1/input0 [ 86.211632][ T58] usb 7-1: USB disconnect, device number 6 [ 86.241923][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 86.261959][ T5747] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 86.702687][ T6482] tipc: Started in network mode [ 86.703119][ T6481] netlink: 51 bytes leftover after parsing attributes in process `syz.0.192'. [ 86.704361][ T6482] tipc: Node identity 52488733d6e3, cluster identity 4711 [ 86.709717][ T6482] tipc: Enabled bearer , priority 0 [ 86.718717][ T6482] syzkaller0: entered promiscuous mode [ 86.720742][ T6482] syzkaller0: entered allmulticast mode [ 86.740320][ T5101] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 86.768468][ T6482] tipc: Resetting bearer [ 86.792898][ T6480] tipc: Resetting bearer [ 86.821146][ T6480] tipc: Disabling bearer [ 86.830024][ T6490] fuse: Unknown parameter 'user_i00000000000000000000' [ 87.970515][ T5530] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 88.143620][ T5530] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.155661][ T5530] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.175917][ T5530] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.186063][ T5530] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.189170][ T5530] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.210690][ T5530] usb 6-1: config 0 descriptor?? [ 88.638544][ T5530] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 89.024181][ T5846] usb 6-1: USB disconnect, device number 2 [ 89.502448][ T6561] syz.0.218(6561): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 89.635669][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'. [ 89.816749][ T6573] fuse: Unknown parameter 'user_id00000000000000000000' [ 91.338533][ T6606] overlayfs: missing 'lowerdir' [ 92.517274][ T6620] batman_adv: batadv0: Adding interface: dummy0 [ 92.519916][ T6620] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.532919][ T6620] batman_adv: batadv0: Interface activated: dummy0 [ 92.615663][ T6623] net_ratelimit: 10 callbacks suppressed [ 92.615678][ T6623] batadv0: mtu less than device minimum [ 92.620006][ T6623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.623715][ T6623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.627384][ T6623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.631155][ T6623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.634845][ T6623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.638472][ T6623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.642150][ T6623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.645793][ T6623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 92.649405][ T6623] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.760946][ T6644] fuse: Unknown parameter 'user_id00000000000000000000' [ 93.846987][ T6650] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 93.948143][ T6656] netlink: 72 bytes leftover after parsing attributes in process `syz.0.241'. [ 95.426467][ T6685] fuse: fd is not a fuse device [ 95.464421][ T6687] fuse: Bad value for 'fd' [ 95.613793][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'. [ 95.767330][ T6705] batman_adv: batadv0: Adding interface: dummy0 [ 95.781846][ T6705] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.791229][ T6705] batman_adv: batadv0: Interface activated: dummy0 [ 96.065966][ T6709] geneve2: entered promiscuous mode [ 96.080370][ T6709] geneve2: entered allmulticast mode [ 96.192645][ T50] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 96.289249][ T6720] process 'syz.0.266' launched '/dev/fd/3' with NULL argv: empty string added [ 96.360296][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 96.363703][ T50] usb 8-1: no configurations [ 96.365282][ T50] usb 8-1: can't read configurations, error -22 [ 96.429257][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'. [ 96.438877][ T6729] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 96.490350][ T50] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 96.640343][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 96.642548][ T50] usb 8-1: no configurations [ 96.644024][ T50] usb 8-1: can't read configurations, error -22 [ 96.647085][ T50] usb usb8-port1: attempt power cycle [ 97.004527][ T50] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 97.036822][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 97.042414][ T50] usb 8-1: no configurations [ 97.044198][ T50] usb 8-1: can't read configurations, error -22 [ 97.210350][ T50] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 97.235420][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 97.243892][ T50] usb 8-1: no configurations [ 97.246500][ T50] usb 8-1: can't read configurations, error -22 [ 97.252901][ T50] usb usb8-port1: unable to enumerate USB device [ 97.960063][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.283'. [ 97.968107][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.283'. [ 98.031733][ T6775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.285'. [ 98.178233][ T6790] netlink: 80 bytes leftover after parsing attributes in process `syz.2.288'. [ 98.182016][ T6790] netlink: 'syz.2.288': attribute type 22 has an invalid length. [ 98.849226][ T6829] netlink: 60 bytes leftover after parsing attributes in process `syz.1.297'. [ 98.998906][ T6834] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 99.857992][ T6854] fuse: Bad value for 'fd' [ 100.291582][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 100.984451][ T6892] netlink: 'syz.0.312': attribute type 4 has an invalid length. [ 101.265139][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 101.270531][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 102.490323][ T5889] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 102.650323][ T5889] usb 7-1: Using ep0 maxpacket: 8 [ 102.654407][ T5889] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 102.657724][ T5889] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.662294][ T5889] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.666197][ T5889] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.670161][ T5889] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.674259][ T5889] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 102.677961][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.890565][ T5889] usb 7-1: usb_control_msg returned -32 [ 102.892391][ T5889] usbtmc 7-1:16.0: can't read capabilities [ 103.100323][ T5530] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 103.243980][ T6942] usbtmc 7-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 103.250445][ T5530] usb 6-1: Using ep0 maxpacket: 16 [ 103.253649][ T5530] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 103.256236][ T5530] usb 6-1: config 0 has no interface number 0 [ 103.258202][ T5530] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 103.261347][ T5530] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 103.265890][ T5530] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 103.268784][ T5530] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.271364][ T5530] usb 6-1: Product: syz [ 103.272676][ T5530] usb 6-1: Manufacturer: syz [ 103.274325][ T5530] usb 6-1: SerialNumber: syz [ 103.277394][ T5530] usb 6-1: config 0 descriptor?? [ 103.279487][ T6941] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 103.281983][ T6941] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 103.445446][ T5846] usb 7-1: USB disconnect, device number 7 [ 103.488743][ T6941] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 103.491920][ T6941] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 103.695957][ T5530] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 103.908495][ T5453] veth1_vlan: left promiscuous mode [ 104.294881][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 104.300492][ T5530] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 104.307170][ T5530] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 104.332720][ T5530] asix 6-1:0.34: probe with driver asix failed with error -71 [ 104.347157][ T5530] usb 6-1: USB disconnect, device number 3 [ 104.386420][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.339'. [ 105.323359][ T7025] fuse: Unknown parameter '0x0000000000000003' [ 106.618538][ T7070] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 107.116617][ T7077] netlink: 'syz.2.368': attribute type 10 has an invalid length. [ 107.123742][ T7077] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.127653][ T7077] bond0: (slave team0): Enslaving as an active interface with an up link [ 107.379332][ T7085] fuse: Unknown parameter '0x0000000000000003' [ 107.410337][ T5889] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 107.560570][ T5889] usb 7-1: Using ep0 maxpacket: 8 [ 107.563454][ T5889] usb 7-1: no configurations [ 107.565439][ T5889] usb 7-1: can't read configurations, error -22 [ 107.690329][ T5889] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 107.840321][ T5889] usb 7-1: Using ep0 maxpacket: 8 [ 107.842886][ T5889] usb 7-1: no configurations [ 107.844488][ T5889] usb 7-1: can't read configurations, error -22 [ 107.847482][ T5889] usb usb7-port1: attempt power cycle [ 108.190383][ T5889] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 108.210996][ T5889] usb 7-1: Using ep0 maxpacket: 8 [ 108.213203][ T5889] usb 7-1: no configurations [ 108.214731][ T5889] usb 7-1: can't read configurations, error -22 [ 108.340341][ T5889] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 108.360735][ T5889] usb 7-1: Using ep0 maxpacket: 8 [ 108.362986][ T5889] usb 7-1: no configurations [ 108.364812][ T5889] usb 7-1: can't read configurations, error -22 [ 108.367377][ T5889] usb usb7-port1: unable to enumerate USB device [ 108.462421][ T7111] fuse: Unknown parameter '0x0000000000000003' [ 109.341975][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.388'. [ 109.345708][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.388'. [ 109.380524][ T5747] Bluetooth: hci4: command 0x1003 tx timeout [ 109.381638][ T5101] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 109.700312][ T5101] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 109.705741][ T5101] Bluetooth: hci1: Injecting HCI hardware error event [ 109.710098][ T5101] Bluetooth: hci1: hardware error 0x00 [ 109.868121][ T7151] capability: warning: `syz.1.395' uses 32-bit capabilities (legacy support in use) [ 110.098132][ T7155] netlink: 76 bytes leftover after parsing attributes in process `syz.0.397'. [ 110.228970][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.401'. [ 110.232632][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.401'. [ 110.831152][ T5846] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 111.000287][ T5846] usb 7-1: Using ep0 maxpacket: 32 [ 111.003510][ T7184] fuse: Unknown parameter '0x0000000000000004' [ 111.006624][ T5846] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.010993][ T5846] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.016029][ T5846] usb 7-1: config 0 interface 0 has no altsetting 0 [ 111.018681][ T5846] usb 7-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 111.022795][ T5846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.037286][ T5846] usb 7-1: config 0 descriptor?? [ 111.151737][ T7189] netlink: 620 bytes leftover after parsing attributes in process `syz.0.411'. [ 111.379185][ T7194] fuse: fd is not a fuse device [ 111.455338][ T5846] hid_parser_main: 11 callbacks suppressed [ 111.455352][ T5846] lg-g15 0003:046D:0A07.0004: unknown main item tag 0x0 [ 111.460384][ T5846] lg-g15 0003:046D:0A07.0004: unknown main item tag 0x0 [ 111.462623][ T5846] lg-g15 0003:046D:0A07.0004: unknown main item tag 0x0 [ 111.465100][ T5846] lg-g15 0003:046D:0A07.0004: unknown main item tag 0x0 [ 111.467255][ T5846] lg-g15 0003:046D:0A07.0004: unknown main item tag 0x6 [ 111.469299][ T5846] lg-g15 0003:046D:0A07.0004: item fetching failed at offset 37/40 [ 111.473511][ T5846] lg-g15 0003:046D:0A07.0004: probe with driver lg-g15 failed with error -22 [ 111.524034][ T7198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.416'. [ 111.621075][ T7207] fuse: Unknown parameter '0x0000000000000004' [ 111.663651][ T5831] usb 7-1: USB disconnect, device number 12 [ 111.780498][ T5101] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 113.653176][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'. [ 114.722049][ T7290] netlink: 'syz.1.445': attribute type 4 has an invalid length. [ 115.599016][ T7309] netlink: 'syz.3.452': attribute type 10 has an invalid length. [ 115.605079][ T7309] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.608217][ T7309] bond0: (slave team0): Enslaving as an active interface with an up link [ 115.744838][ T7315] netlink: 'syz.1.455': attribute type 4 has an invalid length. [ 116.398793][ T7351] binder: BINDER_SET_CONTEXT_MGR already set [ 116.404199][ T7351] binder: 7342:7351 ioctl 4018620d 80000040 returned -16 [ 116.666389][ T7356] netlink: 'syz.0.466': attribute type 4 has an invalid length. [ 116.980331][ T5101] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 116.983627][ T5101] Bluetooth: hci0: Injecting HCI hardware error event [ 116.986759][ T5747] Bluetooth: hci0: hardware error 0x00 [ 117.200913][ T7370] xt_hl: Unknown TTL match mode: 255 [ 117.250607][ T7384] fuse: Unknown parameter 'fd0x0000000000000003' [ 117.426064][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.475'. [ 117.467975][ T7396] netlink: 'syz.0.476': attribute type 10 has an invalid length. [ 117.492661][ T7396] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.504176][ T7396] bond0: (slave team0): Enslaving as an active interface with an up link [ 118.121320][ T7405] vivid-001: ================= START STATUS ================= [ 118.123787][ T7405] vivid-001: Radio HW Seek Mode: Bounded [ 118.125751][ T7405] vivid-001: Radio Programmable HW Seek: false [ 118.128442][ T7405] vivid-001: RDS Rx I/O Mode: Block I/O [ 118.131008][ T7405] vivid-001: Generate RBDS Instead of RDS: false [ 118.133816][ T7405] vivid-001: RDS Reception: true [ 118.136034][ T7405] vivid-001: RDS Program Type: 0 inactive [ 118.138639][ T7405] vivid-001: RDS PS Name: inactive [ 118.144117][ T7405] vivid-001: RDS Radio Text: inactive [ 118.147230][ T7405] vivid-001: RDS Traffic Announcement: false inactive [ 118.150596][ T7405] vivid-001: RDS Traffic Program: false inactive [ 118.153360][ T7405] vivid-001: RDS Music: false inactive [ 118.155706][ T7405] vivid-001: ================== END STATUS ================== [ 118.735849][ T7430] fuse: Unknown parameter 'fd0x0000000000000003' [ 118.784042][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'. [ 119.116036][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 119.150496][ T5747] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 119.780570][ T5831] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 119.940577][ T5831] usb 6-1: Using ep0 maxpacket: 8 [ 119.946091][ T5831] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 119.949715][ T5831] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.953834][ T5831] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.958041][ T5831] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.962546][ T5831] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.968543][ T5831] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 119.972731][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.184499][ T5831] usb 6-1: usb_control_msg returned -32 [ 120.187100][ T5831] usbtmc 6-1:16.0: can't read capabilities [ 120.421119][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.504'. [ 120.427033][ T7487] IPv6: sit1: Disabled Multicast RS [ 120.429622][ T7487] sit1: entered allmulticast mode [ 120.741662][ T7490] usbtmc 6-1:16.0: usbtmc_ioctl_request failed -71 [ 120.750297][ T843] usb 6-1: USB disconnect, device number 4 [ 120.898834][ T7509] netlink: 'syz.2.513': attribute type 10 has an invalid length. [ 121.368512][ T7533] fuse: fd is not a fuse device [ 121.402931][ T7535] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 123.994744][ T7577] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 124.542791][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.540'. [ 124.916929][ T7609] fuse: fd is not a fuse device [ 126.430389][ T39] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 126.580303][ T39] usb 8-1: Using ep0 maxpacket: 32 [ 126.584661][ T39] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 126.590323][ T39] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 126.593077][ T39] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 126.595875][ T39] usb 8-1: config 1 has no interface number 0 [ 126.597781][ T39] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.610350][ T39] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 126.614376][ T39] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 126.617161][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.628619][ T39] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 126.701553][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'. [ 126.834750][ T39] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 127.038845][ T39] usb 8-1: USB disconnect, device number 8 [ 127.047574][ T39] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 128.255740][ T7674] fuse: fd is not a fuse device [ 129.211501][ T7699] fuse: fd is not a fuse device [ 130.073331][ T7715] netlink: 'syz.2.583': attribute type 11 has an invalid length. [ 130.076552][ T7715] netlink: 36 bytes leftover after parsing attributes in process `syz.2.583'. [ 130.349903][ T7726] trusted_key: encrypted_key: insufficient parameters specified [ 130.842141][ T7733] netlink: 'syz.3.590': attribute type 4 has an invalid length. [ 131.070497][ T5892] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 131.250372][ T5892] usb 6-1: Using ep0 maxpacket: 8 [ 131.271300][ T5892] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 131.281600][ T5892] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.295818][ T5892] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.307934][ T5892] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.322644][ T5892] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.329383][ T5892] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 131.341822][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.694546][ T5892] usb 6-1: usb_control_msg returned -32 [ 131.702318][ T5892] usbtmc 6-1:16.0: can't read capabilities [ 131.873304][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 131.982897][ T7764] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 132.785050][ T7793] netlink: 'syz.2.600': attribute type 4 has an invalid length. [ 132.804573][ T7795] fuse: fd is not a fuse device [ 132.897154][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.604'. [ 133.829425][ T5892] usb 6-1: USB disconnect, device number 5 [ 133.954982][ T7820] fuse: fd is not a fuse device [ 134.627121][ T7835] faux_driver vgem: [drm] Unknown color mode 31471; guessing buffer size. [ 134.639842][ T7835] netlink: 'syz.2.616': attribute type 21 has an invalid length. [ 134.645967][ T7835] netlink: 132 bytes leftover after parsing attributes in process `syz.2.616'. [ 137.542668][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.546610][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.956290][ T7980] netlink: 620 bytes leftover after parsing attributes in process `syz.1.661'. [ 140.430336][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 140.484670][ T8006] netlink: 620 bytes leftover after parsing attributes in process `syz.2.670'. [ 140.580785][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 140.584621][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.589305][ T10] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 140.595858][ T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 140.599136][ T10] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 140.602221][ T10] usb 6-1: Product: syz [ 140.603689][ T10] usb 6-1: Manufacturer: syz [ 140.605248][ T10] usb 6-1: SerialNumber: syz [ 141.227051][ T39] usb 6-1: USB disconnect, device number 6 [ 141.585925][ T8019] tipc: Started in network mode [ 141.588960][ T8019] tipc: Node identity 4e8e475d7a0a, cluster identity 4711 [ 141.591929][ T8019] tipc: Enabled bearer , priority 0 [ 141.599785][ T8019] tipc: Disabling bearer [ 141.767669][ T8026] netlink: 620 bytes leftover after parsing attributes in process `syz.1.679'. [ 142.961126][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.689'. [ 143.486555][ T8101] netlink: 'syz.2.697': attribute type 10 has an invalid length. [ 143.500346][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 143.671415][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 143.684966][ T10] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 143.688144][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.694439][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.698315][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 143.704169][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.709036][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 143.712753][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.944573][ T10] usb 8-1: usb_control_msg returned -32 [ 143.949846][ T10] usbtmc 8-1:16.0: can't read capabilities [ 144.503805][ T29] usb 8-1: USB disconnect, device number 9 [ 144.945527][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 145.483265][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.720'. [ 145.800394][ T50] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 145.960363][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 145.968757][ T50] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 145.974639][ T50] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.978779][ T50] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.983797][ T50] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.988868][ T8172] netlink: 'syz.0.723': attribute type 10 has an invalid length. [ 145.989527][ T50] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.000163][ T50] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 146.003348][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.214516][ T50] usb 8-1: usb_control_msg returned -32 [ 146.219509][ T50] usbtmc 8-1:16.0: can't read capabilities [ 146.770604][ T50] usb 8-1: USB disconnect, device number 10 [ 147.158422][ T8195] netlink: 'syz.0.732': attribute type 10 has an invalid length. [ 147.548134][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 147.597958][ T8211] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 147.630296][ T39] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 147.799209][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.803418][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.807121][ T39] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 147.812733][ T39] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.816490][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.825185][ T39] usb 8-1: config 0 descriptor?? [ 148.273565][ T39] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 148.614582][ T39] usb 8-1: USB disconnect, device number 11 [ 149.163479][ T8238] netlink: 'syz.3.748': attribute type 4 has an invalid length. [ 150.510388][ T39] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 150.697278][ T39] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 150.707292][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.713077][ T39] usb 8-1: Product: syz [ 150.719191][ T39] usb 8-1: Manufacturer: syz [ 150.723772][ T39] usb 8-1: SerialNumber: syz [ 150.823758][ T8296] netlink: 'syz.2.769': attribute type 10 has an invalid length. [ 150.944035][ T39] net_ratelimit: 30 callbacks suppressed [ 150.944058][ T39] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 150.961516][ T39] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 150.967181][ T39] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 150.975079][ T39] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 151.806387][ T8345] netlink: 'syz.2.778': attribute type 4 has an invalid length. [ 151.910089][ T8349] netlink: 556 bytes leftover after parsing attributes in process `syz.2.779'. [ 152.525105][ T8355] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 152.682343][ T8362] fuse: fd is not a fuse device [ 152.723318][ T8365] syzkaller0: entered promiscuous mode [ 152.725145][ T8365] syzkaller0: entered allmulticast mode [ 152.729204][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'. [ 153.291397][ T39] usb 8-1: USB disconnect, device number 12 [ 153.598163][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'. [ 154.638431][ T8410] netlink: 'syz.1.799': attribute type 4 has an invalid length. [ 155.303739][ T8433] netlink: 620 bytes leftover after parsing attributes in process `syz.0.803'. [ 155.735766][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'. [ 156.730371][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 156.890322][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 156.906467][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.917668][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.930291][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 156.950311][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 156.957581][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.988094][ T10] usb 6-1: config 0 descriptor?? [ 157.408906][ T10] appleir 0003:05AC:8241.0006: collection stack underflow [ 157.416585][ T10] appleir 0003:05AC:8241.0006: item 0 0 0 12 parsing failed [ 157.420530][ T10] appleir 0003:05AC:8241.0006: parse failed [ 157.423802][ T10] appleir 0003:05AC:8241.0006: probe with driver appleir failed with error -22 [ 157.608178][ T10] usb 6-1: USB disconnect, device number 7 [ 158.206649][ T8476] netlink: 'syz.0.819': attribute type 10 has an invalid length. [ 158.271276][ T8480] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 159.697038][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.834'. [ 160.380373][ T24] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 160.531977][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 160.531997][ T24] usb 6-1: config 0 has no interface number 0 [ 160.532016][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 160.532030][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 160.532049][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 160.532061][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.533483][ T24] usb 6-1: config 0 descriptor?? [ 160.533980][ T8529] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 160.539046][ T24] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 160.755441][ T10] usb 6-1: USB disconnect, device number 8 [ 160.758228][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 160.778710][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.843'. [ 161.687451][ T40] audit: type=1326 audit(1779304902.277:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.2.849" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 161.695727][ T40] audit: type=1326 audit(1779304902.277:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.2.849" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 161.703173][ T40] audit: type=1326 audit(1779304902.287:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.2.849" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 161.711651][ T40] audit: type=1326 audit(1779304902.287:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.2.849" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 161.719412][ T40] audit: type=1326 audit(1779304902.287:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.2.849" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 161.726093][ T40] audit: type=1326 audit(1779304902.297:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.2.849" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 161.733934][ T40] audit: type=1326 audit(1779304902.297:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.2.849" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 161.740621][ T40] audit: type=1326 audit(1779304902.297:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.2.849" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 161.747792][ T40] audit: type=1326 audit(1779304902.307:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.2.849" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 161.755168][ T40] audit: type=1326 audit(1779304902.307:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.2.849" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef7c code=0x7ffc0000 [ 161.886918][ T8571] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 161.954316][ T8572] sctp: [Deprecated]: syz.1.848 (pid 8572) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.954316][ T8572] Use struct sctp_sack_info instead [ 163.575496][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 164.077195][ T50] IPVS: starting estimator thread 0... [ 164.180728][ T8627] IPVS: using max 43 ests per chain, 103200 per kthread [ 164.805628][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 165.410181][ T8648] netlink: 620 bytes leftover after parsing attributes in process `syz.0.881'. [ 165.756144][ T8653] dns_resolver: Unsupported content type (8) [ 166.627720][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.888'. [ 169.082558][ T8705] syzkaller0: entered promiscuous mode [ 169.084402][ T8705] syzkaller0: entered allmulticast mode [ 169.690538][ T5889] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 169.850310][ T5889] usb 7-1: Using ep0 maxpacket: 8 [ 169.856400][ T5889] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 169.860696][ T5889] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.871921][ T5889] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 169.880415][ T5889] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.894946][ T5889] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.904951][ T5889] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 169.910365][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.144547][ T5889] usb 7-1: usb_control_msg returned -32 [ 170.151657][ T5889] usbtmc 7-1:16.0: can't read capabilities [ 170.726705][ T8754] usbtmc 7-1:16.0: usbtmc_ioctl_request failed -71 [ 170.737109][ T857] usb 7-1: USB disconnect, device number 13 [ 171.646308][ T8783] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 172.073232][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.913'. [ 172.960750][ T8839] netlink: 'syz.0.914': attribute type 21 has an invalid length. [ 174.436229][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.922'. [ 174.994141][ T8881] geneve2: left promiscuous mode [ 174.996498][ T8881] geneve2: left allmulticast mode [ 176.400419][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.933'. [ 176.635774][ T8895] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 176.836184][ T8926] hugetlbfs: syz.0.940 (8926): Using mlock ulimits for SHM_HUGETLB is obsolete [ 178.880476][ T857] IPVS: starting estimator thread 0... [ 178.882616][ T8956] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:6 [ 178.897468][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 178.897488][ T40] audit: type=1326 audit(1779304919.487:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8955 comm="syz.0.950" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708ef7c code=0x0 [ 178.990349][ T8957] IPVS: using max 29 ests per chain, 69600 per kthread [ 179.270496][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.951'. [ 181.927488][ T9029] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 182.257304][ T9020] capability: warning: `syz.0.965' uses deprecated v2 capabilities in a way that may be insecure [ 183.049778][ T9048] qrtr: Invalid version 48 [ 185.895976][ T9108] netlink: 620 bytes leftover after parsing attributes in process `syz.0.988'. [ 186.107469][ T9120] fuse: fd is not a fuse device [ 186.835650][ T9141] netlink: 620 bytes leftover after parsing attributes in process `syz.2.1000'. [ 187.128531][ T9143] Mount JFS Failure: -5 [ 187.361722][ T9151] fuse: fd is not a fuse device [ 187.819127][ T9161] netlink: 620 bytes leftover after parsing attributes in process `syz.1.1009'. [ 189.101413][ T9211] hub 8-0:1.0: USB hub found [ 189.103939][ T9211] hub 8-0:1.0: 1 port detected [ 189.127218][ T9211] netlink: 'syz.3.1019': attribute type 36 has an invalid length. [ 189.134043][ T9211] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 189.134066][ T9211] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 189.158463][ T9211] netlink: 'syz.3.1019': attribute type 10 has an invalid length. [ 189.160115][ T9211] macvlan1: entered allmulticast mode [ 189.171346][ T9211] veth1_vlan: entered allmulticast mode [ 189.175091][ T9211] team0: Port device macvlan1 added [ 190.650372][ T24] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 190.843405][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.847822][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.853312][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.857389][ T24] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.860128][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.867054][ T24] usb 8-1: config 0 descriptor?? [ 191.292514][ T24] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 191.646734][ T857] usb 8-1: USB disconnect, device number 13 [ 191.955578][ T9312] input: syz1 as /devices/virtual/input/input8 [ 192.695249][ T9318] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 193.412454][ T9334] fuse: fd is not a fuse device [ 194.680386][ T39] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 194.759113][ T9364] netlink: 'syz.3.1066': attribute type 10 has an invalid length. [ 194.810336][ T39] usb 7-1: device descriptor read/64, error -71 [ 195.050421][ T39] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 195.180396][ T39] usb 7-1: device descriptor read/64, error -71 [ 195.292935][ T39] usb usb7-port1: attempt power cycle [ 195.430875][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1073'. [ 195.481389][ T9398] netlink: 556 bytes leftover after parsing attributes in process `syz.3.1077'. [ 195.650423][ T39] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 195.671217][ T39] usb 7-1: device descriptor read/8, error -71 [ 195.910339][ T39] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 195.930734][ T39] usb 7-1: device descriptor read/8, error -71 [ 196.040766][ T39] usb usb7-port1: unable to enumerate USB device [ 196.576688][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1085'. [ 197.791834][ T9444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1094'. [ 198.152369][ T5889] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 198.325239][ T5889] usb 6-1: Using ep0 maxpacket: 8 [ 198.328488][ T5889] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 198.331604][ T5889] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 198.335882][ T5889] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 198.339289][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.098374][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.101255][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.134156][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1107'. [ 199.645020][ T9485] netlink: 620 bytes leftover after parsing attributes in process `syz.0.1110'. [ 200.925212][ T9512] netlink: 620 bytes leftover after parsing attributes in process `syz.2.1119'. [ 201.143627][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1122'. [ 201.152927][ T39] usb 6-1: USB disconnect, device number 9 [ 202.060404][ T9541] netlink: 620 bytes leftover after parsing attributes in process `syz.3.1130'. [ 203.752126][ T857] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 203.937371][ T857] usb 7-1: Using ep0 maxpacket: 32 [ 203.946157][ T857] usb 7-1: unable to get BOS descriptor or descriptor too short [ 203.961549][ T857] usb 7-1: language id specifier not provided by device, defaulting to English [ 203.970737][ T857] usb 7-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 203.980796][ T857] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.990277][ T857] usb 7-1: Product: syz [ 203.991885][ T857] usb 7-1: Manufacturer: 줲袀侀䝤ㅤ事䆴ɬ㰝삕蒰ﶃ嚑柰虹늲襽ꭶ䯷洩Ἳ墔閪걚繆蜾 [ 203.996353][ T857] usb 7-1: SerialNumber: syz [ 204.225146][ T50] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 204.272313][ T857] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 204.289942][ T857] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 204.390765][ T857] usb 7-1: USB disconnect, device number 18 [ 204.869162][ T9615] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1152'. [ 205.159945][ T50] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 205.261784][ T50] usb 6-1: config 0 has an invalid descriptor of length 159, skipping remainder of the config [ 205.265856][ T50] usb 6-1: config 0 has no interface number 0 [ 205.268625][ T50] usb 6-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.277795][ T50] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 205.281748][ T50] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 205.285135][ T50] usb 6-1: Product: syz [ 205.286887][ T50] usb 6-1: SerialNumber: syz [ 205.301652][ T50] usb 6-1: config 0 descriptor?? [ 205.309506][ T50] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 205.319952][ T9629] tipc: Failed to remove unknown binding: 66,1,1/0:1065647703/1065647705 [ 205.334879][ T9629] tipc: Failed to remove unknown binding: 66,1,1/0:1065647703/1065647705 [ 205.590417][ T857] usb 6-1: USB disconnect, device number 10 [ 206.250105][ T9657] syz_tun: entered allmulticast mode [ 207.510929][ T5530] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 207.684066][ T5530] usb 6-1: Using ep0 maxpacket: 8 [ 207.693603][ T5530] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 207.697907][ T5530] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.701262][ T5530] usb 6-1: Product: syz [ 207.703017][ T5530] usb 6-1: Manufacturer: syz [ 207.704996][ T5530] usb 6-1: SerialNumber: syz [ 207.710065][ T5530] usb 6-1: config 0 descriptor?? [ 207.715278][ T5530] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 207.720077][ T5530] dvb-usb: bulk message failed: -22 (2/0) [ 207.733573][ T5530] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 207.737960][ T5530] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 207.742575][ T5530] usb 6-1: media controller created [ 207.755789][ T5530] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.936849][ T5530] dvb-usb: bulk message failed: -22 (1/0) [ 207.961618][ T5530] DVB: Unable to find symbol mt352_attach() [ 207.972485][ T5530] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 208.041574][ T5530] rc_core: IR keymap rc-dvico-portable not found [ 208.044460][ T5530] Registered IR keymap rc-empty [ 208.049362][ T5530] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 208.055341][ T5530] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input9 [ 208.063896][ T5530] dvb-usb: schedule remote query interval to 100 msecs. [ 208.067045][ T5530] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 208.157778][ T9679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.163016][ T9679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.184613][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 208.302295][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 208.360994][ T39] usb 6-1: USB disconnect, device number 11 [ 208.696592][ T39] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 208.867880][ T9715] fuse: Bad value for 'fd' [ 209.020018][ T9723] ======================================================= [ 209.020018][ T9723] WARNING: The mand mount option has been deprecated and [ 209.020018][ T9723] and is ignored by this kernel. Remove the mand [ 209.020018][ T9723] option from the mount to silence this warning. [ 209.020018][ T9723] ======================================================= [ 209.089580][ T9725] fuse: Bad value for 'fd' [ 209.144990][ T9728] tipc: Cannot configure node identity twice [ 209.296415][ T9734] input: syz1 as /devices/virtual/input/input10 [ 209.788614][ T9747] fuse: Bad value for 'fd' [ 210.283744][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 210.448492][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.452854][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.456738][ T10] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 210.460668][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.468207][ T10] usb 6-1: config 0 descriptor?? [ 211.041906][ T5846] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 211.293237][ T5846] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.297147][ T5846] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 211.302161][ T5846] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.305576][ T5846] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.309011][ T5846] usb 8-1: Product: syz [ 211.310682][ T5846] usb 8-1: Manufacturer: syz [ 211.312730][ T5846] usb 8-1: SerialNumber: syz [ 211.320488][ T5846] cdc_mbim 8-1:1.0: skipping garbage [ 211.353477][ T10] hid-led 0003:27B8:01ED.0008: hidraw1: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 211.373299][ T10] hid-led 0003:27B8:01ED.0008: ThingM blink(1) initialized [ 211.537969][ T9767] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 211.569774][ T5530] usb 6-1: USB disconnect, device number 12 [ 212.195768][ T9767] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 212.199143][ T5846] cdc_mbim 8-1:1.0: setting tx_max = 16384 [ 212.203687][ T5846] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 212.211262][ T5846] wwan wwan0: port wwan0mbim0 attached [ 212.225115][ T5846] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 1e:b0:87:7e:94:a5 [ 212.420049][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 212.423020][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 212.426518][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 212.429332][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 212.432122][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 212.434924][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 212.437707][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 212.440406][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 212.443343][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 212.446156][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 212.449026][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 212.451779][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 212.454668][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 212.457338][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 212.460158][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 212.462963][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 212.465763][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 212.468553][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 212.471383][ C3] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 212.474161][ C3] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 212.481151][ T5453] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 212.485673][ T5846] usb 8-1: USB disconnect, device number 14 [ 212.494777][ T5846] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 212.561759][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1215'. [ 212.623339][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 212.624116][ T5846] wwan wwan0: port wwan0mbim0 disconnected [ 212.809244][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.813974][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.818059][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 212.823558][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.827369][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.834198][ T10] usb 6-1: config 0 descriptor?? [ 213.366793][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 213.368788][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 213.373163][ T10] usb 6-1: USB disconnect, device number 13 [ 213.790955][ T40] audit: type=1326 audit(1779304953.155:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.3.1219" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 213.804029][ T40] audit: type=1326 audit(1779304953.155:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.3.1219" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 213.810790][ T40] audit: type=1326 audit(1779304953.155:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.3.1219" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 213.817665][ T40] audit: type=1326 audit(1779304953.155:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.3.1219" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 213.824658][ T40] audit: type=1326 audit(1779304953.155:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.3.1219" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 213.831694][ T40] audit: type=1326 audit(1779304953.155:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.3.1219" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 213.838744][ T40] audit: type=1326 audit(1779304953.155:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.3.1219" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 213.845305][ T40] audit: type=1326 audit(1779304953.155:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.3.1219" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 213.851883][ T40] audit: type=1326 audit(1779304953.155:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.3.1219" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 213.858343][ T40] audit: type=1326 audit(1779304953.155:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.3.1219" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef7c code=0x7ffc0000 [ 215.256900][ T5889] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 215.430148][ T5889] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 215.433159][ T5889] usb 6-1: config 0 has no interface number 0 [ 215.436859][ T5889] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 215.439755][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.442316][ T5889] usb 6-1: Product: syz [ 215.443570][ T5889] usb 6-1: Manufacturer: syz [ 215.445176][ T5889] usb 6-1: SerialNumber: syz [ 215.449255][ T5889] usb 6-1: config 0 descriptor?? [ 215.454729][ T5889] usb 6-1: selecting invalid altsetting 1 [ 215.458583][ T5889] dvb_ttusb_budget: ttusb_init_controller: error [ 215.460767][ T5889] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 215.492547][ T5889] DVB: Unable to find symbol stv0299_attach() [ 215.518883][ T5889] DVB: Unable to find symbol tda8083_attach() [ 215.523206][ T5889] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 215.672831][ T5889] usb 6-1: USB disconnect, device number 14 [ 216.598672][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 216.793599][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 216.801786][ T24] usb 8-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 216.807931][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.815810][ T24] usb 8-1: Product: syz [ 216.818882][ T24] usb 8-1: Manufacturer: syz [ 216.822199][ T24] usb 8-1: SerialNumber: syz [ 216.832622][ T24] usb 8-1: config 0 descriptor?? [ 217.074325][ T24] RobotFuzz Open Source InterFace, OSIF 8-1:0.0: version d4.15 found at bus 008 address 015 [ 217.931912][ T9968] autofs: Bad value for 'fd' [ 218.180176][ T843] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 218.375211][ T843] usb 7-1: Using ep0 maxpacket: 16 [ 218.382315][ T843] usb 7-1: unable to get BOS descriptor or descriptor too short [ 218.387724][ T843] usb 7-1: config 127 has an invalid interface number: 124 but max is 0 [ 218.390415][ T843] usb 7-1: config 127 has no interface number 0 [ 218.395132][ T843] usb 7-1: config 127 interface 124 has no altsetting 0 [ 218.410001][ T843] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 218.413049][ T843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.415730][ T843] usb 7-1: Product: syz [ 218.417131][ T843] usb 7-1: Manufacturer: syz [ 218.419323][ T843] usb 7-1: SerialNumber: syz [ 218.861129][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1274'. [ 219.383243][ T843] usb 7-1: reset high-speed USB device number 19 using dummy_hcd [ 219.534231][ T39] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 219.591347][ T5530] usb 8-1: USB disconnect, device number 15 [ 219.593736][ T843] usb 7-1: unable to get BOS descriptor or descriptor too short [ 219.620532][ T843] usb 7-1: device firmware changed [ 219.640683][ T843] usb 7-1: USB disconnect, device number 19 [ 219.707454][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 219.710980][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.719695][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.726352][ T39] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 219.741611][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.751512][ T39] usb 6-1: config 0 descriptor?? [ 219.758204][ T39] hub 6-1:0.0: USB hub found [ 219.983310][ T39] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 220.426505][ T39] hid-generic 0003:046D:C31C.0009: unknown main item tag 0x0 [ 220.437434][ T39] hid-generic 0003:046D:C31C.0009: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 220.812471][ T10] usb 6-1: USB disconnect, device number 15 [ 220.942252][ T843] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 221.115605][ T843] usb 8-1: Using ep0 maxpacket: 8 [ 221.119148][ T843] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 221.122367][ T843] usb 8-1: config 179 has no interface number 0 [ 221.124982][ T843] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 221.129634][ T843] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 221.133963][ T843] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 221.137824][ T843] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 221.141814][ T843] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 221.145879][ T843] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 221.148825][ T843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.153091][T10010] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 221.180565][ T857] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 221.343018][ T857] usb 6-1: Using ep0 maxpacket: 32 [ 221.350014][ T857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.353660][ T857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.356833][ T857] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 221.359675][ T857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.363384][ T857] usb 6-1: config 0 descriptor?? [ 221.367661][ T857] hub 6-1:0.0: USB hub found [ 221.381866][T10010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.387590][T10010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.584456][ T857] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 221.612100][ T58] usb 8-1: USB disconnect, device number 16 [ 221.612161][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 221.617293][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 221.620165][ C0] ================================================================== [ 221.622662][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23b/0x260 [ 221.625033][ C0] Read of size 4 at addr ffff88806bab885c by task syz.2.1289/10031 [ 221.628713][ C0] [ 221.630253][ C0] CPU: 0 UID: 0 PID: 10031 Comm: syz.2.1289 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.630271][ C0] Tainted: [L]=SOFTLOCKUP [ 221.630275][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.630300][ C0] Call Trace: [ 221.630305][ C0] [ 221.630310][ C0] dump_stack_lvl+0x100/0x190 [ 221.630326][ C0] print_report+0x13d/0x4b0 [ 221.630342][ C0] ? __virt_addr_valid+0x239/0x430 [ 221.630360][ C0] ? do_raw_spin_lock+0x23b/0x260 [ 221.630372][ C0] kasan_report+0xdf/0x1d0 [ 221.630385][ C0] ? do_raw_spin_lock+0x23b/0x260 [ 221.630399][ C0] do_raw_spin_lock+0x23b/0x260 [ 221.630413][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 221.630425][ C0] ? kcov_remote_stop+0x201/0x540 [ 221.630441][ C0] ? kcov_remote_stop+0x201/0x540 [ 221.630457][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 221.630560][ C0] ? __wake_up+0x1c/0x60 [ 221.630576][ C0] __wake_up+0x1c/0x60 [ 221.630592][ C0] usb_anchor_resume_wakeups+0xc7/0xf0 [ 221.630614][ C0] __usb_hcd_giveback_urb+0x3d6/0x610 [ 221.630627][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 221.630641][ C0] dummy_timer+0xda1/0x36c0 [ 221.630658][ C0] ? find_held_lock+0x2b/0x80 [ 221.630672][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 221.630690][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 221.630707][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 221.630720][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 221.630735][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 221.630754][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 221.630767][ C0] ? rcu_is_watching+0x12/0xc0 [ 221.630781][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 221.630796][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 221.630810][ C0] __hrtimer_run_queues+0x470/0xa00 [ 221.630825][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 221.630839][ C0] handle_softirqs+0x1ea/0xa00 [ 221.630853][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 221.630867][ C0] ? _raw_spin_unlock+0x28/0x50 [ 221.630881][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 221.630896][ C0] __irq_exit_rcu+0x162/0x210 [ 221.630913][ C0] irq_exit_rcu+0x9/0x30 [ 221.630926][ C0] sysvec_apic_timer_interrupt+0x56/0xc0 [ 221.630943][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 221.630956][ C0] RIP: 0023:0xf70df560 [ 221.630966][ C0] Code: 8b 7c 24 04 8b 4c 24 08 8b 5c 24 0c 81 e6 ff 1f 00 00 89 4c f5 00 89 5c f5 04 88 04 37 31 c0 83 c4 24 5b 5e 5f 5d c3 8d 76 00 <8b> 7c 24 04 8b 44 24 18 38 04 17 74 15 88 04 17 8b 44 24 08 89 44 [ 221.630977][ C0] RSP: 002b:00000000ff8bc248 EFLAGS: 00000246 [ 221.630987][ C0] RAX: 000000008256da70 RBX: 0000000000000000 RCX: 000000008256da70 [ 221.630994][ C0] RDX: 0000000000001a70 RSI: 00000000ffffffff RDI: 0000000000000000 [ 221.631001][ C0] RBP: 00000000f74a2000 R08: 0000000000000000 R09: 0000000000000000 [ 221.631007][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 221.631014][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 221.631023][ C0] [ 221.631027][ C0] [ 221.725498][ C0] Allocated by task 843: [ 221.727385][ C0] kasan_save_stack+0x30/0x50 [ 221.728942][ C0] kasan_save_track+0x14/0x30 [ 221.730445][ C0] __kasan_kmalloc+0xaa/0xb0 [ 221.731924][ C0] xpad_probe+0x28e/0x1f60 [ 221.733427][ C0] usb_probe_interface+0x303/0x8f0 [ 221.735048][ C0] really_probe+0x241/0xa60 [ 221.736494][ C0] __driver_probe_device+0x22e/0x480 [ 221.738196][ C0] driver_probe_device+0x4c/0x1b0 [ 221.739789][ C0] __device_attach_driver+0x1df/0x340 [ 221.741504][ C0] bus_for_each_drv+0x159/0x1e0 [ 221.743076][ C0] __device_attach+0x1e4/0x4d0 [ 221.744616][ C0] device_initial_probe+0xaf/0xd0 [ 221.746225][ C0] bus_probe_device+0x64/0x160 [ 221.747781][ C0] device_add+0x1210/0x1950 [ 221.749275][ C0] usb_set_configuration+0xd97/0x1c60 [ 221.750977][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 221.752755][ C0] usb_probe_device+0xef/0x400 [ 221.754325][ C0] really_probe+0x241/0xa60 [ 221.755816][ C0] __driver_probe_device+0x22e/0x480 [ 221.757526][ C0] driver_probe_device+0x4c/0x1b0 [ 221.759117][ C0] __device_attach_driver+0x1df/0x340 [ 221.760806][ C0] bus_for_each_drv+0x159/0x1e0 [ 221.762402][ C0] __device_attach+0x1e4/0x4d0 [ 221.763947][ C0] device_initial_probe+0xaf/0xd0 [ 221.765616][ C0] bus_probe_device+0x64/0x160 [ 221.767289][ C0] device_add+0x1210/0x1950 [ 221.768943][ C0] usb_new_device.cold+0x685/0x115c [ 221.770589][ C0] hub_event+0x314d/0x4af0 [ 221.772011][ C0] process_one_work+0xa0e/0x1980 [ 221.774112][ C0] worker_thread+0x5ef/0xe50 [ 221.775591][ C0] kthread+0x370/0x450 [ 221.776953][ C0] ret_from_fork+0x72b/0xd50 [ 221.778486][ C0] ret_from_fork_asm+0x1a/0x30 [ 221.780013][ C0] [ 221.780795][ C0] Freed by task 58: [ 221.782016][ C0] kasan_save_stack+0x30/0x50 [ 221.783504][ C0] kasan_save_track+0x14/0x30 [ 221.785010][ C0] kasan_save_free_info+0x3b/0x70 [ 221.786609][ C0] __kasan_slab_free+0x5f/0x80 [ 221.788107][ C0] kfree+0x223/0x6c0 [ 221.789399][ C0] xpad_disconnect+0x1cf/0x530 [ 221.790946][ C0] usb_unbind_interface+0x1dd/0x9e0 [ 221.792656][ C0] device_remove+0x12a/0x180 [ 221.794179][ C0] device_release_driver_internal+0x44e/0x620 [ 221.796120][ C0] bus_remove_device+0x2bc/0x560 [ 221.797720][ C0] device_del+0x376/0x9b0 [ 221.799132][ C0] usb_disable_device+0x367/0x810 [ 221.800714][ C0] usb_disconnect+0x2e2/0x9a0 [ 221.802276][ C0] hub_event+0x1d0c/0x4af0 [ 221.803785][ C0] process_one_work+0xa0e/0x1980 [ 221.805677][ C0] worker_thread+0x5ef/0xe50 [ 221.807200][ C0] kthread+0x370/0x450 [ 221.808536][ C0] ret_from_fork+0x72b/0xd50 [ 221.810093][ C0] ret_from_fork_asm+0x1a/0x30 [ 221.811667][ C0] [ 221.812452][ C0] The buggy address belongs to the object at ffff88806bab8800 [ 221.812452][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 221.817097][ C0] The buggy address is located 92 bytes inside of [ 221.817097][ C0] freed 1024-byte region [ffff88806bab8800, ffff88806bab8c00) [ 221.822388][ C0] [ 221.823403][ C0] The buggy address belongs to the physical page: [ 221.825431][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6bab8 [ 221.828090][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 221.830662][ C0] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 221.833038][ C0] page_type: f5(slab) [ 221.834324][ C0] raw: 04fff00000000040 ffff88801b842dc0 dead000000000100 dead000000000122 [ 221.836966][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 221.839610][ C0] head: 04fff00000000040 ffff88801b842dc0 dead000000000100 dead000000000122 [ 221.842313][ C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 221.845004][ C0] head: 04fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 221.847690][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 221.850363][ C0] page dumped because: kasan: bad access detected [ 221.852351][ C0] page_owner tracks the page as allocated [ 221.854129][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5740, tgid 5740 (syz-executor), ts 55004551295, free_ts 0 [ 221.859715][ C0] post_alloc_hook+0xfd/0x120 [ 221.861196][ C0] get_page_from_freelist+0x11a6/0x33b0 [ 221.862975][ C0] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 221.864836][ C0] new_slab+0xa6/0x6c0 [ 221.866135][ C0] ___slab_alloc+0x6d7/0x8b0 [ 221.867615][ C0] __kmalloc_cache_node_noprof+0x384/0x770 [ 221.869440][ C0] alloc_fair_sched_group+0x216/0x430 [ 221.871711][ C0] sched_create_group+0x2d/0x80 [ 221.873742][ C0] cpu_cgroup_css_alloc+0x15/0x30 [ 221.875815][ C0] cgroup_apply_control_enable+0x602/0xdd0 [ 221.878217][ C0] cgroup_mkdir+0x59c/0x1310 [ 221.880130][ C0] kernfs_iop_mkdir+0x111/0x190 [ 221.882156][ C0] vfs_mkdir+0x361/0x850 [ 221.883963][ C0] filename_mkdirat+0x48b/0x5e0 [ 221.886022][ C0] __ia32_sys_mkdirat+0x88/0xc0 [ 221.888071][ C0] __do_fast_syscall_32+0xe7/0x950 [ 221.890123][ C0] page_owner free stack trace missing [ 221.892183][ C0] [ 221.893069][ C0] Memory state around the buggy address: [ 221.895068][ C0] ffff88806bab8700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 221.897911][ C0] ffff88806bab8780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 221.900730][ C0] >ffff88806bab8800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 221.903567][ C0] ^ [ 221.905984][ C0] ffff88806bab8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 221.908829][ C0] ffff88806bab8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 221.911666][ C0] ================================================================== [ 221.914543][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 221.917111][ C0] CPU: 0 UID: 0 PID: 10031 Comm: syz.2.1289 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.921274][ C0] Tainted: [L]=SOFTLOCKUP [ 221.922819][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.926354][ C0] Call Trace: [ 221.927570][ C0] [ 221.928644][ C0] dump_stack_lvl+0x100/0x190 [ 221.930350][ C0] vpanic+0x552/0x970 [ 221.931790][ C0] ? __pfx_vpanic+0x10/0x10 [ 221.933477][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 221.935303][ C0] ? do_raw_spin_lock+0x23b/0x260 [ 221.937127][ C0] panic+0xd1/0xe0 [ 221.938500][ C0] ? __pfx_panic+0x10/0x10 [ 221.940125][ C0] ? end_report.part.0+0x23/0x90 [ 221.941931][ C0] ? rcu_is_watching+0x12/0xc0 [ 221.943685][ C0] ? end_report.part.0+0x23/0x90 [ 221.945491][ C0] ? check_panic_on_warn+0x1f/0x90 [ 221.947338][ C0] check_panic_on_warn.cold+0x19/0x34 [ 221.949279][ C0] end_report.part.0+0x3a/0x90 [ 221.951029][ C0] kasan_report.cold+0xe/0x18 [ 221.952723][ C0] ? do_raw_spin_lock+0x23b/0x260 [ 221.954586][ C0] do_raw_spin_lock+0x23b/0x260 [ 221.956345][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 221.958286][ C0] ? kcov_remote_stop+0x201/0x540 [ 221.960104][ C0] ? kcov_remote_stop+0x201/0x540 [ 221.961945][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 221.963842][ C0] ? __wake_up+0x1c/0x60 [ 221.965394][ C0] __wake_up+0x1c/0x60 [ 221.966873][ C0] usb_anchor_resume_wakeups+0xc7/0xf0 [ 221.968827][ C0] __usb_hcd_giveback_urb+0x3d6/0x610 [ 221.970743][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 221.973274][ C0] dummy_timer+0xda1/0x36c0 [ 221.974909][ C0] ? find_held_lock+0x2b/0x80 [ 221.976593][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 221.978601][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 221.980597][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 221.982494][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 221.984591][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 221.986622][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 221.988408][ C0] ? rcu_is_watching+0x12/0xc0 [ 221.990144][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 221.992236][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 221.994059][ C0] __hrtimer_run_queues+0x470/0xa00 [ 221.995932][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 221.997783][ C0] handle_softirqs+0x1ea/0xa00 [ 221.999517][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 222.001420][ C0] ? _raw_spin_unlock+0x28/0x50 [ 222.003184][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 222.005209][ C0] __irq_exit_rcu+0x162/0x210 [ 222.006901][ C0] irq_exit_rcu+0x9/0x30 [ 222.008434][ C0] sysvec_apic_timer_interrupt+0x56/0xc0 [ 222.010457][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 222.012591][ C0] RIP: 0023:0xf70df560 [ 222.014077][ C0] Code: 8b 7c 24 04 8b 4c 24 08 8b 5c 24 0c 81 e6 ff 1f 00 00 89 4c f5 00 89 5c f5 04 88 04 37 31 c0 83 c4 24 5b 5e 5f 5d c3 8d 76 00 <8b> 7c 24 04 8b 44 24 18 38 04 17 74 15 88 04 17 8b 44 24 08 89 44 [ 222.020813][ C0] RSP: 002b:00000000ff8bc248 EFLAGS: 00000246 [ 222.022993][ C0] RAX: 000000008256da70 RBX: 0000000000000000 RCX: 000000008256da70 [ 222.026450][ C0] RDX: 0000000000001a70 RSI: 00000000ffffffff RDI: 0000000000000000 [ 222.029263][ C0] RBP: 00000000f74a2000 R08: 0000000000000000 R09: 0000000000000000 [ 222.032053][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 222.034923][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.037744][ C0] [ 222.039736][ C0] Kernel Offset: disabled [ 222.041100][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:22:42 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff857c5fb0 RDI=ffffffff9b465820 RBP=ffffffff9b4657e0 RSP=ffffc900041af3c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3630383838666666 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff368cb56 R15=dffffc0000000000 RIP=ffffffff857c5fd7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097174000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f74b2000 CR3=000000007357a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000026000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010004 RBX=ffffffff94110040 RCX=0000000000000002 RDX=0000000000000004 RSI=ffffffff81acc3fb RDI=ffffffff94110040 RBP=1ffff920000b218a RSP=ffffc90000590bd8 R8 =000000003b8173b4 R9 =00000000000000c3 R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=ffff88802b324640 R14=0000000000000001 R15=ffff8880296bca00 RIP=ffffffff8b8878b1 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097274000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005586ebf08000 CR3=000000004fa8e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000003da52d RBX=ffff88801c3f4a00 RCX=ffffffff8b889095 RDX=0000000000000000 RSI=ffffffff8df1f2e9 RDI=ffffffff8c1c4180 RBP=0000000000000000 RSP=ffffc9000047fdf0 R8 =0000000000000001 R9 =ffffed10056867b5 R10=ffff88802b433dab R11=0000000000000000 R12=0000000000000002 R13=ffffed100387e940 R14=0000000000000002 R15=ffffffff90d80450 RIP=ffffffff8b88787f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097374000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7402ac0 CR3=000000004afe7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000002 Opmask01=0000000000000002 Opmask02=000000007ffeffff Opmask03=0000000008400004 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005584e4dd8310 00005584e4dd8310 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005584e4d9c7d0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005584e4da66a0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fa05f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff00ffffffff ffffffffffffff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3831303b392b303d 0f021a1150564909 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 38353d2631272b30 3d0f223a31545874 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002d1 726f702d6f697472 000000003064656c 3a6465723a316d67 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005584e4db9e50 00005584e4d8ae30 00005584e4d978d0 00005584e4d8f820 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005584e4d948c0 00005584e4d92e40 00005584e4d97650 00005584e4d83ce0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005584e4d83d40 00005584e4d96f50 00005584e4e12ce0 00005584e4da9460 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0031383930002f4d 53002f332e002f31 2d2f2f312d362f36 42440000312e3d3d ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000435d09 RBX=ffff88801c3f2500 RCX=ffffffff8b889095 RDX=0000000000000000 RSI=ffffffff8df1f2e9 RDI=ffffffff8c1c4180 RBP=0000000000000000 RSP=ffffc9000048fdf0 R8 =0000000000000001 R9 =ffffed10056a67b5 R10=ffff88802b533dab R11=0000000000000000 R12=0000000000000003 R13=ffffed100387e4a0 R14=0000000000000003 R15=ffffffff90d80450 RIP=ffffffff8b88787f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097474000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f548bff4 CR3=000000004cc6d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefefc00 Opmask01=0000000000000000 Opmask02=00000000037f0037 Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005584e4d8e630 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005584e4db9e50 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fa05f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffffff00ffffff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff0000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0613626963011f19 7b75697a4e584b4e ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 444b5e79445a107f 676f7b445c2a5e44 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312d382f38627375 2f332e6463685f79 6d6d75642f6d726f 6674616c702f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a565c560a000a56 50470a565c560a00 0a484051565c5647 50560a565c560a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0fa05f1fe0 00007f0fa05f1fe0 0000000000000761 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000702 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000