last executing test programs: 1m57.260655836s ago: executing program 0 (id=1536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) getpeername$packet(r4, 0x0, 0x0) connect$bt_sco(r4, &(0x7f00000001c0)={0x1f, @none}, 0x8) connect$netlink(r4, &(0x7f0000000040)=@unspec, 0xc) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x101300) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000180)={0x80, 0xc, 0x5, 0xda5, 0x7}) 1m56.370373699s ago: executing program 0 (id=1544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1m55.089635608s ago: executing program 0 (id=1554): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x3c, r2, 0x9a911db71367741f, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @key_params=[@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}]}], @NL80211_ATTR_SSID={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 1m55.008918941s ago: executing program 0 (id=1555): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x48) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file1\x00') 1m54.930009227s ago: executing program 0 (id=1557): sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000780)={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x6, 0x8, 0x3, 0x500, 0x3, 0x3020000}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="00002202f5355ac6cf2e16"], 0x48) 1m54.851026379s ago: executing program 0 (id=1558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="40020000", @ANYRES16=r1, @ANYBLOB="01000000000000000000810000000800", @ANYRES32=r2, @ANYBLOB="060066008e8800000a000600ffffffffffff00000f0233"], 0x240}}, 0x0) 1m54.677652517s ago: executing program 32 (id=1558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="40020000", @ANYRES16=r1, @ANYBLOB="01000000000000000000810000000800", @ANYRES32=r2, @ANYBLOB="060066008e8800000a000600ffffffffffff00000f0233"], 0x240}}, 0x0) 1m50.490766939s ago: executing program 1 (id=1604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}}, 0x20004000) close(r0) 1m50.490203378s ago: executing program 1 (id=1606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf65f2000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881a5, 0x14}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1m47.581200689s ago: executing program 1 (id=1625): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000480)) 1m47.050774322s ago: executing program 1 (id=1627): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x48) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file1\x00') 1m46.96819466s ago: executing program 1 (id=1628): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x30000, 0x0, 0x8000, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000002200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) futimesat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0) 1m46.660414711s ago: executing program 1 (id=1629): bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000000}, 0x4000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4044c00) r5 = socket(0x400000000010, 0xa, 0xfffffffc) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x851}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000300)=@newtaction={0xac, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x98, 0x1, [@m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfffffffe, 0x3ff, 0xf, 0x401, 0x6}}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) 1m46.43125118s ago: executing program 33 (id=1629): bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000000}, 0x4000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4044c00) r5 = socket(0x400000000010, 0xa, 0xfffffffc) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x851}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000300)=@newtaction={0xac, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x98, 0x1, [@m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfffffffe, 0x3ff, 0xf, 0x401, 0x6}}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) 1m1.159619156s ago: executing program 4 (id=1991): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1m0.24015227s ago: executing program 4 (id=2000): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000100)=0x7) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'tunl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x1, 0x700, 0x35, 0x1, {{0x47, 0x4, 0x0, 0x4, 0x11c, 0x66, 0x0, 0xf, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0x15, 0x3, [{0x5, 0xf, "d2346f6f06186fb22bdeb7dfe3"}]}, @timestamp_addr={0x44, 0x14, 0xb2, 0x1, 0x9, [{@empty, 0x10000}, {@empty, 0xfffffeff}]}, @timestamp_addr={0x44, 0x24, 0x2b, 0x1, 0x5, [{@remote, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x2b83}, {@remote, 0x4d}, {@private=0xa010102, 0x1}]}, @generic={0x89, 0xd, "17243eed62f8b3d92aa00c"}, @cipso={0x86, 0x58, 0x3, [{0x7, 0x7, "a78e78efe1"}, {0x6, 0x4, "eb40"}, {0x5, 0x10, "72aa39e152a3d2ae8169dfbc74e8"}, {0x2, 0xb, "5be36410601fdcb2a5"}, {0x0, 0x11, "f2db3ee23892608a1c9963b0ba3e5e"}, {0x7, 0xe, "1fa4a407e10a0f65f0329287"}, {0x0, 0xd, "e1ab718c175f077d9b3328"}]}, @ssrr={0x89, 0xb, 0x5e, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x1f, 0x64, [@private=0xa010101, @private=0xa010101, @private=0xa010100, @remote, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @lsrr={0x83, 0x27, 0x88, [@multicast1, @loopback, @rand_addr=0x64010101, @remote, @dev={0xac, 0x14, 0x14, 0x3c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @ra={0x94, 0x4}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f00000001c0)}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x80, 0x20, 0x7f, 0xfa73, {{0x14, 0x4, 0x3, 0x0, 0x50, 0x64, 0x0, 0xc7, 0x29, 0x0, @local, @loopback, {[@end, @ssrr={0x89, 0xb, 0xeb, [@loopback, @private=0xa010101]}, @lsrr={0x83, 0x13, 0xc6, [@private=0xa010102, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xf, 0x58, [@empty, @broadcast, @loopback]}, @ssrr={0x89, 0xb, 0x6d, [@local, @empty]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan0\x00'}) r2 = getpid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) read(r3, &(0x7f0000000080)=""/1, 0x1) kcmp(r4, r4, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) write$cgroup_pid(r3, &(0x7f00000000c0)=r2, 0x12) close(r3) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x2, 0x6, 0x1c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x1, 0x7, 0x7, 0x6}}) 58.310739789s ago: executing program 4 (id=2008): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x20, 0x0) fanotify_mark(r2, 0x1, 0x48000002, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0xa2040000, 0x0, 0xfffffffffffffdd2, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) 58.249896781s ago: executing program 4 (id=2009): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file1\x00') 58.249641051s ago: executing program 4 (id=2010): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) 57.959644963s ago: executing program 4 (id=2012): openat$vcsa(0xffffffffffffff9c, 0x0, 0x62802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) getrlimit(0xa, &(0x7f0000000540)) 57.893034784s ago: executing program 34 (id=2012): openat$vcsa(0xffffffffffffff9c, 0x0, 0x62802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) getrlimit(0xa, &(0x7f0000000540)) 3.329373496s ago: executing program 2 (id=2395): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000280)={0x20, 0x0, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x20000040) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)=0x1) fsopen(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0xfffffffffffffd15}}}}}, 0x0) 3.256697931s ago: executing program 2 (id=2397): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 3.210029542s ago: executing program 2 (id=2399): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 3.209752796s ago: executing program 2 (id=2400): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000980)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) 3.137898344s ago: executing program 2 (id=2401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) r5 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0), 0x0, 0xffffffffffffffff) keyctl$read(0xb, r5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x38}}, 0x200c8080) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.849997995s ago: executing program 6 (id=2403): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xf6c447fee59251f4}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) close_range(r0, r1, 0x0) 2.700369967s ago: executing program 6 (id=2404): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) writev(r0, &(0x7f0000000a40)=[{&(0x7f00000007c0)="4eabf26665e1929a09a8ede6203e707a34484302bc4d8537319f8fec4dc37280aa77c17b66bf9b9ba0e1f3b1c0ce543dcde3a9ffd35f54db96a204da09769c838156128b0e292779e05ed1096c0382162aca2e44426d38e05fe5b9fed738b095b348112a9107f3e4dfcbd2791396107b7301c34225776e9d6e51f7c51fbb93bfb9dcbd655e4dede1b75015739ecffc4033f31c6f8438576182b0952be11a2f373b0c69568cfc0eb5d3b47ee5ce5e379dd05c6eccbf36619cc83060ce357a4ca1ed86a9f4c106e56f0ea9c9c3f98093af01c3c9af07bff442324f8cb6905b3194384ecee95e0a", 0xe6}, {&(0x7f00000009c0)="d15437e1cafc2d8f2cbc80add153791c9860744f34deb4c578eada5f7c2f8bfc9b08efafee3459860014deae430f715556c489f61128cf173a9f5c54316b0be14b43d811acc0e1a42a47171d085004934754ff2d4d16415785793f538198521a11e729fc86ca", 0x66}, {&(0x7f00000003c0)}, {&(0x7f0000000580)="83b85f9393265ad5d8fd5231080f1623c910605f35573258183e02a6895098c5bd96", 0x22}, {0x0}, {&(0x7f0000000640)="5e1d01f9528cadf879c1d3ce5271fdd2684ec20753a4c11ec7c901cd25978d680d5da759969bcb3864e7f915f96e2a1d0876f5d93985c57b93e97e1d003136d65842ef", 0x43}], 0x6) 2.61037159s ago: executing program 6 (id=2405): r0 = openat$sysfs(0xffffff9c, &(0x7f0000002e80)='/sys/kernel/fscaps', 0x0, 0xc7) read$msr(r0, &(0x7f00000002c0)=""/4096, 0x1000) 2.609540834s ago: executing program 6 (id=2406): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000280)={0x20, 0x0, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x20000040) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)=0x1) fsopen(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0xfffffffffffffd15}}}}}, 0x0) 2.510337046s ago: executing program 6 (id=2407): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x3, @empty}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x2e, {0x2, 0x4e22, @empty}}) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.339317423s ago: executing program 3 (id=2410): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000003c0), 0x100000000000022d) 2.259982581s ago: executing program 3 (id=2411): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000540)='workqueue_activate_work\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) 2.259764686s ago: executing program 3 (id=2412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="fcff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0xffe3, 0x0}}], 0x400005c, 0x2400c8a0) 1.340233466s ago: executing program 3 (id=2413): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x8}, {0xfff2}, {0xfff1, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}}, 0x0) 1.290117928s ago: executing program 3 (id=2414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfffffffffffffff4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) ioprio_get$pid(0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.099977967s ago: executing program 5 (id=2417): sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) write(r2, &(0x7f00000002c0)="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", 0xfc) 1.029722324s ago: executing program 2 (id=2418): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket(0x2, 0x3, 0xff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)='U', 0x1}], 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) 1.029392592s ago: executing program 5 (id=2419): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) listen(r0, 0x3) 949.884061ms ago: executing program 5 (id=2420): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) gettid() timer_create(0x0, 0x0, 0x0) 718.857397ms ago: executing program 6 (id=2421): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000180)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x3, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="40230d0000000dba71ce62d23b09dcadb31317e5e124909c04be"], 0x0, 0x0, 0x0, 0x0}, 0x0) 409.992619ms ago: executing program 3 (id=2422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0x1, 0x8da8, 0x2, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6, 0x8, 0x9, 0x1, 0x800199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x8002, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xd, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffffa, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xec, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x2050, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x5, 0x4, 0xe47, 0x3, 0x1654, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20004, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x87, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) 49.894748ms ago: executing program 5 (id=2423): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000980)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) 49.709068ms ago: executing program 5 (id=2424): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x3d) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000300)=0x99, 0x4) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002022, 0x0) 0s ago: executing program 5 (id=2425): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'tunl0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00'}, 0x10) kernel console output (not intermixed with test programs): usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.947199][ T842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.947221][ T842] usb 5-1: Product: syz [ 85.947233][ T842] usb 5-1: Manufacturer: syz [ 85.947243][ T842] usb 5-1: SerialNumber: syz [ 85.950017][ T6885] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 86.167288][ T6885] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 86.372451][ T6885] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 86.391688][ T29] cfg80211: failed to load regulatory.db [ 86.778822][ T6885] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 86.783954][ T842] cdc_ncm 5-1:1.1: bind() failure [ 86.987681][ T6062] usb 5-1: USB disconnect, device number 5 [ 87.343408][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'. [ 88.076637][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 89.833144][ T6996] netlink: 'syz.2.377': attribute type 12 has an invalid length. [ 89.916370][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 91.002381][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 92.542846][ T5954] Bluetooth: hci2: unexpected event 0x04 length: 4 < 10 [ 92.591741][ T7048] overlayfs: failed to resolve './file1': -2 [ 93.450416][ T5954] Bluetooth: hci3: unexpected event 0x04 length: 4 < 10 [ 93.629694][ T7078] overlayfs: failed to resolve './file1': -2 [ 95.008019][ T7097] overlayfs: failed to resolve './file1': -2 [ 95.283971][ T7120] overlayfs: failed to resolve './file0': -2 [ 95.840133][ T54] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 95.990159][ T54] usb 7-1: Using ep0 maxpacket: 32 [ 95.997045][ T54] usb 7-1: unable to get BOS descriptor or descriptor too short [ 96.002309][ T54] usb 7-1: config 3 has an invalid interface number: 98 but max is 0 [ 96.006135][ T54] usb 7-1: config 3 has no interface number 0 [ 96.008629][ T54] usb 7-1: config 3 interface 98 altsetting 10 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 96.012336][ T54] usb 7-1: config 3 interface 98 has no altsetting 0 [ 96.019138][ T54] usb 7-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=b9.a8 [ 96.023106][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.026505][ T54] usb 7-1: Product: syz [ 96.028372][ T54] usb 7-1: Manufacturer: syz [ 96.032192][ T54] usb 7-1: SerialNumber: syz [ 96.254928][ T54] usb 7-1: USB disconnect, device number 2 [ 97.097141][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 97.123637][ T54] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 97.292806][ T54] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.296342][ T54] usb 8-1: config 1 has no interface number 0 [ 97.298546][ T54] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 97.323133][ T54] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 97.336388][ T54] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 97.354731][ T54] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 97.367242][ T54] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 65535, setting to 64 [ 97.395764][ T54] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.402417][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.410694][ T54] usb 8-1: Product: syz [ 97.416273][ T54] usb 8-1: Manufacturer: syz [ 97.420805][ T54] usb 8-1: SerialNumber: syz [ 97.431104][ T7195] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.678437][ T7195] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.681932][ T7195] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.887946][ T7195] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.020130][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 98.190313][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 98.193592][ T29] usb 5-1: config 0 has an invalid interface number: 19 but max is 0 [ 98.196363][ T29] usb 5-1: config 0 has no interface number 0 [ 98.198899][ T29] usb 5-1: config 0 interface 19 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 98.203288][ T29] usb 5-1: config 0 interface 19 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 98.208800][ T29] usb 5-1: New USB device found, idVendor=d768, idProduct=27bf, bcdDevice=d9.ce [ 98.213071][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.216101][ T29] usb 5-1: Product: syz [ 98.217791][ T29] usb 5-1: Manufacturer: syz [ 98.219519][ T29] usb 5-1: SerialNumber: syz [ 98.224915][ T29] usb 5-1: config 0 descriptor?? [ 98.227858][ T7231] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 98.234967][ T29] usb-storage 5-1:0.19: USB Mass Storage device detected [ 98.305241][ T7195] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.310355][ T7195] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 98.331853][ T54] cdc_ncm 8-1:1.1: bind() failure [ 98.514035][ T7242] netlink: 56 bytes leftover after parsing attributes in process `syz.1.468'. [ 98.533063][ T54] usb 8-1: USB disconnect, device number 3 [ 99.009268][ T7251] overlayfs: failed to resolve './file0': -2 [ 99.658604][ T7272] overlayfs: failed to resolve './file1': -2 [ 99.749906][ T7274] netlink: 56 bytes leftover after parsing attributes in process `syz.2.482'. [ 100.787001][ T10] usb 5-1: USB disconnect, device number 6 [ 100.936989][ T7296] overlayfs: failed to resolve './file1': -2 [ 102.278444][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'. [ 102.377785][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.504'. [ 103.250453][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 103.872392][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 103.900249][ T7374] fuse: Bad value for 'fd' [ 104.113958][ T7393] binder: 7392:7393 ioctl c0306201 800001c0 returned -14 [ 104.144010][ T5954] Bluetooth: hci0: unexpected event 0x04 length: 4 < 10 [ 104.823677][ T7434] netlink: 32 bytes leftover after parsing attributes in process `syz.0.541'. [ 105.775597][ T7471] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 105.815499][ T5954] Bluetooth: hci3: unexpected event 0x04 length: 4 < 10 [ 105.892914][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'. [ 106.156182][ T5954] Bluetooth: hci0: command tx timeout [ 107.141311][ T5954] Bluetooth: hci3: unexpected event 0x04 length: 4 < 10 [ 107.247582][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 107.416754][ T5954] Bluetooth: hci1: unexpected event 0x04 length: 4 < 10 [ 107.436337][ T7539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.587'. [ 109.662895][ T7620] fuse: Bad value for 'fd' [ 109.665300][ T7619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.613'. [ 110.549910][ T7654] fuse: Bad value for 'fd' [ 110.666772][ T7658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.627'. [ 110.733528][ T7662] syzkaller0: entered promiscuous mode [ 110.735291][ T7662] syzkaller0: entered allmulticast mode [ 111.092832][ T7687] netlink: 24 bytes leftover after parsing attributes in process `syz.3.636'. [ 111.221047][ T7698] syzkaller0: entered promiscuous mode [ 111.222819][ T7698] syzkaller0: entered allmulticast mode [ 111.694496][ T7728] syzkaller0: entered promiscuous mode [ 111.696790][ T7728] syzkaller0: entered allmulticast mode [ 111.800256][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 111.830776][ T5954] Bluetooth: hci1: unexpected event 0x04 length: 4 < 10 [ 111.981709][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.985659][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.991739][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.996041][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.998901][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.004004][ T10] usb 5-1: config 0 descriptor?? [ 112.504360][ T10] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 112.672904][ T34] usb 5-1: USB disconnect, device number 7 [ 112.780875][ T7756] netlink: 16 bytes leftover after parsing attributes in process `syz.3.663'. [ 112.858126][ T5954] Bluetooth: hci0: unexpected event 0x04 length: 4 < 10 [ 112.922333][ T7762] syzkaller0: entered promiscuous mode [ 112.924208][ T7762] syzkaller0: entered allmulticast mode [ 113.054951][ T7776] netlink: 16 bytes leftover after parsing attributes in process `syz.3.672'. [ 113.103373][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.673'. [ 113.466541][ T7784] netlink: 'syz.3.674': attribute type 12 has an invalid length. [ 113.910873][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 114.263823][ T7800] syzkaller0: entered promiscuous mode [ 114.266084][ T7800] syzkaller0: entered allmulticast mode [ 114.700943][ T7809] process 'syz.2.682' launched './file0' with NULL argv: empty string added [ 114.870236][ T5954] Bluetooth: hci0: command tx timeout [ 115.443590][ T7820] overlayfs: missing 'lowerdir' [ 116.532074][ T7847] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 116.535677][ T7847] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 116.974478][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.704'. [ 118.644901][ T7894] netlink: 'syz.0.715': attribute type 72 has an invalid length. [ 118.647558][ T7894] netlink: 56 bytes leftover after parsing attributes in process `syz.0.715'. [ 118.797791][ T7903] syzkaller0: entered promiscuous mode [ 118.800299][ T7903] syzkaller0: entered allmulticast mode [ 119.169040][ T7921] netlink: 'syz.3.725': attribute type 72 has an invalid length. [ 119.172866][ T7921] netlink: 56 bytes leftover after parsing attributes in process `syz.3.725'. [ 119.316998][ T7926] overlayfs: missing 'lowerdir' [ 120.441738][ T7946] netlink: 'syz.1.734': attribute type 72 has an invalid length. [ 120.444919][ T7946] netlink: 56 bytes leftover after parsing attributes in process `syz.1.734'. [ 120.489435][ T7950] overlayfs: missing 'lowerdir' [ 120.586164][ T7961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.741'. [ 120.622510][ T7955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.738'. [ 120.855173][ T7978] overlayfs: missing 'lowerdir' [ 120.934336][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'. [ 120.938237][ T7982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.744'. [ 120.978506][ T7979] netlink: 'syz.3.743': attribute type 12 has an invalid length. [ 120.991979][ T7987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.750'. [ 121.067453][ T7991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.752'. [ 121.070539][ T7993] syzkaller0: entered promiscuous mode [ 121.073003][ T7993] syzkaller0: entered allmulticast mode [ 121.259540][ T8002] netlink: 56 bytes leftover after parsing attributes in process `syz.1.757'. [ 121.778620][ T8014] fuse: Bad value for 'group_id' [ 121.782348][ T8014] fuse: Bad value for 'group_id' [ 122.407302][ T8023] syzkaller0: entered promiscuous mode [ 122.409669][ T8023] syzkaller0: entered allmulticast mode [ 123.919311][ T8049] __nla_validate_parse: 1 callbacks suppressed [ 123.919327][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.773'. [ 124.206329][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.784'. [ 124.243878][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.785'. [ 125.038072][ T40] audit: type=1326 audit(1760945844.129:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.2.789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 125.061225][ T40] audit: type=1326 audit(1760945844.159:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.2.789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 125.073427][ T40] audit: type=1326 audit(1760945844.169:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.2.789" exe="/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 125.080114][ T40] audit: type=1326 audit(1760945844.169:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.2.789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 125.086731][ T40] audit: type=1326 audit(1760945844.169:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.2.789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 125.093452][ T40] audit: type=1326 audit(1760945844.169:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.2.789" exe="/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 125.100119][ T40] audit: type=1326 audit(1760945844.179:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.2.789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 125.106780][ T40] audit: type=1326 audit(1760945844.179:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.2.789" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 125.113543][ T40] audit: type=1326 audit(1760945844.179:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.2.789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 125.120402][ T40] audit: type=1326 audit(1760945844.179:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.2.789" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 125.882017][ T8106] netlink: 16 bytes leftover after parsing attributes in process `syz.0.798'. [ 127.762003][ T8164] syzkaller0: entered promiscuous mode [ 127.764405][ T8164] syzkaller0: entered allmulticast mode [ 128.314505][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.828'. [ 128.401651][ T8185] syzkaller0: entered promiscuous mode [ 128.403959][ T8185] syzkaller0: entered allmulticast mode [ 132.274414][ T8265] syzkaller0: entered promiscuous mode [ 132.276172][ T8265] syzkaller0: entered allmulticast mode [ 132.509185][ T8272] fuse: Bad value for 'fd' [ 132.934309][ T8292] syzkaller0: entered promiscuous mode [ 132.935939][ T8292] syzkaller0: entered allmulticast mode [ 132.949164][ T8294] fuse: Bad value for 'fd' [ 133.282750][ T8304] fuse: Unknown parameter 'grou00000000000000000000' [ 133.369942][ T8314] fuse: Bad value for 'fd' [ 133.472893][ T8323] fuse: Unknown parameter 'grou00000000000000000000' [ 134.055567][ T8344] fuse: Unknown parameter 'grou00000000000000000000' [ 134.061477][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.893'. [ 135.332915][ T8372] fuse: Unknown parameter 'group_i00000000000000000000' [ 135.527846][ T8380] syzkaller0: entered promiscuous mode [ 135.530331][ T8380] syzkaller0: entered allmulticast mode [ 135.610742][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.907'. [ 135.692939][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.909'. [ 135.703833][ T8386] syz_tun (unregistering): left allmulticast mode [ 135.765984][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 135.822693][ T8396] fuse: Unknown parameter 'group_i00000000000000000000' [ 135.865586][ T8398] netlink: 36 bytes leftover after parsing attributes in process `syz.1.913'. [ 136.200129][ T6034] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 136.352930][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 136.372887][ T6034] usb 8-1: Using ep0 maxpacket: 16 [ 136.381101][ T6034] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 136.383853][ T6034] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.387046][ T6034] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.398686][ T6034] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.402368][ T6034] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.404862][ T6034] usb 8-1: Product: syz [ 136.406250][ T6034] usb 8-1: Manufacturer: syz [ 136.407837][ T6034] usb 8-1: SerialNumber: syz [ 136.413888][ T8417] fuse: Unknown parameter 'group_i00000000000000000000' [ 136.445093][ T8419] syzkaller0: entered promiscuous mode [ 136.446868][ T8419] syzkaller0: entered allmulticast mode [ 136.678442][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.927'. [ 136.822558][ T6034] usb 8-1: 0:2 : does not exist [ 136.910868][ T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 136.969636][ T8439] fuse: Unknown parameter 'group_id00000000000000000000' [ 137.060165][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 137.060761][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.931'. [ 137.065990][ T29] usb 6-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 137.071477][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.074877][ T29] usb 6-1: Product: syz [ 137.077122][ T29] usb 6-1: Manufacturer: syz [ 137.079092][ T29] usb 6-1: SerialNumber: syz [ 137.083545][ T29] usb 6-1: config 0 descriptor?? [ 137.295565][ T29] usb-storage 6-1:0.0: USB Mass Storage device detected [ 137.300936][ T29] usb-storage 6-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 137.304799][ T29] usb-storage 6-1:0.0: This device (054c,002e,0500 S 04 P cd) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 137.304799][ T29] Please send a copy of this message to and [ 137.419185][ T29] usb 6-1: USB disconnect, device number 3 [ 137.439382][ T6034] usb 8-1: 1:0: failed to get current value for ch 0 (-22) [ 137.468813][ T6034] usb 8-1: USB disconnect, device number 4 [ 137.481273][ T8407] udevd[8407]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.595013][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.597734][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.620911][ T8469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.939'. [ 137.695007][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.942'. [ 138.216863][ T8504] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 139.671467][ T8532] netlink: 'syz.3.960': attribute type 12 has an invalid length. [ 140.661123][ T8538] __nla_validate_parse: 1 callbacks suppressed [ 140.661139][ T8538] netlink: 36 bytes leftover after parsing attributes in process `syz.0.964'. [ 141.131626][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.969'. [ 141.678907][ T8571] fuse: Bad value for 'fd' [ 141.883203][ T8577] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 142.041830][ T8583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.978'. [ 142.246575][ T8586] fuse: Bad value for 'user_id' [ 142.249561][ T8586] fuse: Bad value for 'user_id' [ 142.397520][ T8587] netlink: 'syz.0.979': attribute type 12 has an invalid length. [ 145.940232][ T54] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 145.980297][ T8622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.988'. [ 146.102602][ T54] usb 6-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.108804][ T54] usb 6-1: config 1 interface 0 has no altsetting 0 [ 146.113040][ T54] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.116493][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 146.119008][ T54] usb 6-1: SerialNumber: syz [ 146.160464][ T8625] netlink: 'syz.3.992': attribute type 12 has an invalid length. [ 146.336470][ T54] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 146.348573][ T54] usb 6-1: USB disconnect, device number 4 [ 148.590598][ T8673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1009'. [ 148.626287][ T8675] syzkaller0: entered promiscuous mode [ 148.628398][ T8675] syzkaller0: entered allmulticast mode [ 148.660240][ T29] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 148.820254][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 148.830834][ T29] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 148.834356][ T29] usb 6-1: config 179 has no interface number 0 [ 148.837067][ T29] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 148.846168][ T29] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 148.851419][ T29] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 148.856256][ T29] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 148.866528][ T29] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 148.875194][ T29] usb 6-1: config 179 interface 65 has no altsetting 0 [ 148.878230][ T29] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 148.883550][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.961058][ T29] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input9 [ 149.052645][ T5337] input input9: unable to receive magic message: -110 [ 149.063977][ T5337] input input9: unable to receive magic message: -32 [ 149.073297][ T5337] input input9: unable to receive magic message: -32 [ 149.088154][ T5337] input input9: unable to receive magic message: -32 [ 149.170843][ T8667] input input9: unable to receive magic message: -32 [ 149.202095][ T34] usb 6-1: USB disconnect, device number 5 [ 149.202250][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 150.019914][ T8689] fuse: Bad value for 'fd' [ 151.416080][ T8703] syzkaller0: entered promiscuous mode [ 151.418315][ T8703] syzkaller0: entered allmulticast mode [ 151.449847][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1019'. [ 151.577647][ T8707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1021'. [ 151.823511][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 152.012120][ T6062] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 152.172513][ T6062] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.190114][ T6062] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 152.194979][ T6062] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 152.199776][ T6062] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 152.207583][ T6062] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.212858][ T6062] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.216521][ T6062] usb 5-1: Product: syz [ 152.218365][ T6062] usb 5-1: Manufacturer: syz [ 152.220843][ T6062] usb 5-1: SerialNumber: syz [ 152.234522][ T8722] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.499842][ T8722] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.531155][ T8722] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.601888][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 152.601904][ T40] audit: type=1326 audit(1760945871.699:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.3.1022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7fc00000 [ 152.620432][ T40] audit: type=1326 audit(1760945871.699:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.3.1022" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708d579 code=0x7fc00000 [ 152.630332][ T40] audit: type=1326 audit(1760945871.699:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.3.1022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7fc00000 [ 152.650581][ T40] audit: type=1326 audit(1760945871.699:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.3.1022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7fc00000 [ 153.160360][ T8722] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.174342][ T8722] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 153.421055][ T6062] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 153.423962][ T6062] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 153.430185][ T6062] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 153.683780][ T6062] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 153.710913][ T6062] usb 5-1: USB disconnect, device number 8 [ 153.714560][ T6062] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 154.296599][ T40] audit: type=1326 audit(1760945873.389:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.0.1033" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 154.320648][ T40] audit: type=1326 audit(1760945873.389:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.0.1033" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 154.340614][ T40] audit: type=1326 audit(1760945873.389:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.0.1033" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 154.348568][ T40] audit: type=1326 audit(1760945873.389:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.0.1033" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 154.377199][ T40] audit: type=1326 audit(1760945873.389:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.0.1033" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 154.391210][ T40] audit: type=1326 audit(1760945873.399:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8749 comm="syz.0.1033" exe="/syz-executor" sig=0 arch=40000003 syscall=326 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 156.714576][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1044'. [ 158.140619][ T8794] syzkaller0: entered promiscuous mode [ 158.142991][ T8794] syzkaller0: entered allmulticast mode [ 158.963472][ T8820] syzkaller0: entered promiscuous mode [ 158.965954][ T8820] syzkaller0: entered allmulticast mode [ 159.274511][ T8828] fuse: Bad value for 'rootmode' [ 159.352673][ T8832] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 160.968338][ T8871] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1077'. [ 163.341582][ T8899] netlink: 'syz.3.1083': attribute type 25 has an invalid length. [ 163.344868][ T8899] netlink: 'syz.3.1083': attribute type 7 has an invalid length. [ 163.809670][ T8902] fuse: Unknown parameter 'use00000000000000000000' [ 164.892041][ T8919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1086'. [ 165.833282][ T8944] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1098'. [ 165.892112][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1099'. [ 166.372439][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 166.372451][ T40] audit: type=1804 audit(1760945885.469:56): pid=8962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1106" name="/newroot/296/file0" dev="fuse" ino=1 res=1 errno=0 [ 166.399291][ T40] audit: type=1804 audit(1760945885.489:57): pid=8962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1106" name="/newroot/296/file0" dev="fuse" ino=1 res=1 errno=0 [ 172.383291][ T40] audit: type=1326 audit(1760945891.479:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.0.1125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 172.417476][ T40] audit: type=1326 audit(1760945891.479:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.0.1125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 172.440338][ T40] audit: type=1326 audit(1760945891.499:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.0.1125" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 172.449806][ T40] audit: type=1326 audit(1760945891.499:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.0.1125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 172.481714][ T40] audit: type=1326 audit(1760945891.499:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.0.1125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 172.520195][ T40] audit: type=1326 audit(1760945891.499:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.0.1125" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 172.532407][ T40] audit: type=1326 audit(1760945891.499:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.0.1125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 172.550413][ T40] audit: type=1326 audit(1760945891.499:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.0.1125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 172.559523][ T40] audit: type=1326 audit(1760945891.499:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.0.1125" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 172.580795][ T40] audit: type=1326 audit(1760945891.509:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9023 comm="syz.0.1125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 173.101269][ T9029] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 173.110330][ T9029] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 173.113570][ T9029] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 173.116165][ T9029] UDF-fs: Scanning with blocksize 512 failed [ 173.122755][ T9029] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 173.126201][ T9029] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 173.129554][ T9029] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 173.132729][ T9029] UDF-fs: Scanning with blocksize 1024 failed [ 173.137058][ T9029] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 173.142170][ T9029] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 173.146331][ T9029] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 173.149461][ T9029] UDF-fs: Scanning with blocksize 2048 failed [ 173.154318][ T9029] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 173.158875][ T9029] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 173.163850][ T9029] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 173.167128][ T9029] UDF-fs: Scanning with blocksize 4096 failed [ 173.169536][ T9029] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 174.137846][ T9043] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1128'. [ 175.431669][ T9059] warning: `syz.0.1132' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 175.512504][ T5952] Bluetooth: hci0: command 0x0406 tx timeout [ 175.512535][ T5948] Bluetooth: hci2: command 0x0406 tx timeout [ 175.512563][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 177.740238][ T9060] syz.0.1132 (9060) used greatest stack depth: 19384 bytes left [ 178.562964][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 178.864701][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1139'. [ 179.147004][ T9088] loop9: detected capacity change from 0 to 7 [ 179.178369][ T9088] buffer_io_error: 22 callbacks suppressed [ 179.178385][ T9088] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.203509][ T9088] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.230328][ T9088] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.233886][ T9088] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.241146][ T9088] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.250164][ T9088] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.280870][ T9088] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.290328][ T9088] ldm_validate_partition_table(): Disk read failed. [ 179.296480][ T9088] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.310794][ T9088] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.321329][ T9088] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.330699][ T9088] Dev loop9: unable to read RDB block 0 [ 179.344063][ T9088] loop9: unable to read partition table [ 179.360728][ T9088] loop9: partition table beyond EOD, truncated [ 179.370352][ T9088] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒø) failed (rc=-5) [ 179.381953][ T9090] ldm_validate_partition_table(): Disk read failed. [ 179.385057][ T9090] Dev loop9: unable to read RDB block 0 [ 179.402445][ T9090] loop9: unable to read partition table [ 179.413456][ T9090] loop9: partition table beyond EOD, truncated [ 179.781103][ T9041] syz.1.1127 (9041) used greatest stack depth: 18840 bytes left [ 181.450495][ T6062] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 181.623619][ T6062] usb 8-1: Using ep0 maxpacket: 16 [ 181.635761][ T6062] usb 8-1: config 0 has an invalid interface number: 29 but max is 0 [ 181.638417][ T6062] usb 8-1: config 0 has no interface number 0 [ 181.662463][ T6062] usb 8-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 181.670332][ T6062] usb 8-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 181.682770][ T6062] usb 8-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 181.690291][ T6062] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.692810][ T6062] usb 8-1: Product: syz [ 181.694220][ T6062] usb 8-1: Manufacturer: syz [ 181.695764][ T6062] usb 8-1: SerialNumber: syz [ 181.708109][ T6062] usb 8-1: config 0 descriptor?? [ 181.710617][ T9121] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 184.238400][ T6062] usb 8-1: USB disconnect, device number 5 [ 184.429576][ T9171] trusted_key: syz.2.1166 sent an empty control message without MSG_MORE. [ 184.710345][ T6062] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 184.870574][ T6062] usb 8-1: Using ep0 maxpacket: 16 [ 184.877291][ T6062] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 184.881575][ T6062] usb 8-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 184.884755][ T6062] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.895261][ T6062] usb 8-1: config 0 descriptor?? [ 185.111030][ T9170] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1167'. [ 185.118716][ T6062] usb 8-1: string descriptor 0 read error: -71 [ 185.125847][ T6062] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input10 [ 185.134084][ T5337] bcm5974 8-1:0.0: could not read from device [ 185.139120][ T5337] bcm5974 8-1:0.0: could not read from device [ 185.146244][ T5337] bcm5974 8-1:0.0: could not read from device [ 185.153745][ T5337] bcm5974 8-1:0.0: could not read from device [ 185.153845][ T6062] usb 8-1: USB disconnect, device number 6 [ 185.420255][ T9183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1171'. [ 185.982757][ T9193] cgroup: Unknown subsys name 'cpuset' [ 187.262292][ T6034] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 187.331328][ T6034] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 187.471506][ T9217] 9pnet_fd: Insufficient options for proto=fd [ 190.518667][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1195'. [ 190.532834][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1195'. [ 190.553281][ T9273] fuse: Unknown parameter '0x0000000000000003' [ 190.691117][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1198'. [ 191.876102][ T9291] netlink: 548 bytes leftover after parsing attributes in process `syz.1.1203'. [ 191.987892][ T9299] fuse: Unknown parameter '0x0000000000000003' [ 192.462752][ T9310] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 193.467062][ T9335] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 194.254539][ T9358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1229'. [ 194.903127][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 194.903142][ T40] audit: type=1800 audit(1760945913.999:97): pid=9356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1227" name="/" dev="fuse" ino=1 res=0 errno=0 [ 194.934029][ T9369] fuse: Unknown parameter '0x0000000000000003' [ 195.009281][ T9378] syzkaller0: entered promiscuous mode [ 195.015544][ T9378] syzkaller0: entered allmulticast mode [ 195.338051][ T40] audit: type=1804 audit(1760945914.429:98): pid=9390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1241" name="/newroot/321/file0" dev="fuse" ino=1 res=1 errno=0 [ 195.355163][ T40] audit: type=1804 audit(1760945914.439:99): pid=9390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1241" name="/newroot/321/file0" dev="fuse" ino=1 res=1 errno=0 [ 195.447237][ T9400] gretap1: entered promiscuous mode [ 195.532286][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'. [ 195.918763][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 196.048232][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1265'. [ 197.538867][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1291'. [ 197.974319][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1300'. [ 198.021599][ T9535] netlink: 'syz.0.1294': attribute type 12 has an invalid length. [ 199.033141][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.035254][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.131514][ T9576] netlink: 528 bytes leftover after parsing attributes in process `syz.2.1318'. [ 199.858995][ T40] audit: type=1804 audit(1760945918.949:100): pid=9583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1322" name="/newroot/355/file0" dev="fuse" ino=1 res=1 errno=0 [ 199.868403][ T40] audit: type=1804 audit(1760945918.949:101): pid=9583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1322" name="/newroot/355/file0" dev="fuse" ino=1 res=1 errno=0 [ 199.907611][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1321'. [ 200.450449][ T9605] netlink: 'syz.2.1329': attribute type 12 has an invalid length. [ 200.899175][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1332'. [ 201.437153][ T9636] netlink: 512 bytes leftover after parsing attributes in process `syz.3.1340'. [ 201.446426][ T9634] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 201.843387][ T9655] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 201.847507][ T9655] block device autoloading is deprecated and will be removed. [ 201.894330][ T9657] syzkaller0: entered promiscuous mode [ 201.896297][ T9657] syzkaller0: entered allmulticast mode [ 203.986148][ T9715] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 204.172202][ T9733] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 204.394746][ T40] audit: type=1804 audit(1760945923.489:102): pid=9749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1386" name="/newroot/373/file0" dev="fuse" ino=1 res=1 errno=0 [ 204.592121][ T9772] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 204.750280][ T9779] netlink: 548 bytes leftover after parsing attributes in process `syz.2.1399'. [ 205.165432][ T9802] netlink: 548 bytes leftover after parsing attributes in process `syz.0.1410'. [ 205.614393][ T40] audit: type=1804 audit(1760945924.709:103): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1417" name="/newroot/343/file0" dev="fuse" ino=1 res=1 errno=0 [ 205.734004][ T9828] fuse: root generation should be zero [ 206.974879][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1441'. [ 207.270952][ T9886] netlink: 'syz.3.1443': attribute type 12 has an invalid length. [ 208.190234][ T6062] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 208.340243][ T6062] usb 6-1: Using ep0 maxpacket: 32 [ 208.349107][ T6062] usb 6-1: unable to get BOS descriptor or descriptor too short [ 208.357996][ T6062] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 208.366905][ T6062] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.380269][ T6062] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.400368][ T6062] usb 6-1: string descriptor 0 read error: -22 [ 208.411958][ T6062] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 208.415988][ T6062] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.443526][ T6062] usb 6-1: 0:2 : does not exist [ 208.633783][ T6062] usb 6-1: USB disconnect, device number 6 [ 209.171241][ T9946] syz.1.1467 (9946): /proc/9945/oom_adj is deprecated, please use /proc/9945/oom_score_adj instead. [ 209.293984][ T9956] tipc: Started in network mode [ 209.295596][ T9956] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 209.298844][ T9956] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 209.302518][ T9956] tipc: Enabled bearer , priority 10 [ 209.576162][ T40] audit: type=1326 audit(1760945928.669:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.1.1474" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x0 [ 209.850417][ T9980] netlink: 'syz.2.1480': attribute type 12 has an invalid length. [ 210.201709][ T40] audit: type=1326 audit(1760945929.289:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.2.1483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 210.219433][ T40] audit: type=1326 audit(1760945929.289:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.2.1483" exe="/syz-executor" sig=0 arch=40000003 syscall=258 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 210.240142][ T40] audit: type=1326 audit(1760945929.289:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.2.1483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 210.310363][ T40] audit: type=1326 audit(1760945929.399:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9992 comm="syz.1.1485" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 210.319320][ T40] audit: type=1326 audit(1760945929.399:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9992 comm="syz.1.1485" exe="/syz-executor" sig=0 arch=40000003 syscall=290 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 210.334573][ T40] audit: type=1326 audit(1760945929.399:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9992 comm="syz.1.1485" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 210.423908][ T24] tipc: Node number set to 1 [ 210.596910][T10005] No control pipe specified [ 211.634798][T10029] No control pipe specified [ 212.008958][T10048] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1508'. [ 214.575927][T10122] can: request_module (can-proto-0) failed. [ 215.558748][T10150] syzkaller0: entered promiscuous mode [ 215.562564][T10150] syzkaller0: entered allmulticast mode [ 216.495570][ T40] audit: type=1326 audit(1760945935.599:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10166 comm="syz.1.1549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 216.504206][ T40] audit: type=1326 audit(1760945935.599:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10166 comm="syz.1.1549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 216.512400][ T40] audit: type=1326 audit(1760945935.599:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10166 comm="syz.1.1549" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 216.519178][ T40] audit: type=1326 audit(1760945935.599:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10166 comm="syz.1.1549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 216.526142][ T40] audit: type=1326 audit(1760945935.599:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10166 comm="syz.1.1549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 216.534072][ T40] audit: type=1326 audit(1760945935.599:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10166 comm="syz.1.1549" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 216.542616][ T40] audit: type=1326 audit(1760945935.599:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10166 comm="syz.1.1549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 216.551426][ T40] audit: type=1326 audit(1760945935.599:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10166 comm="syz.1.1549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 216.559985][ T40] audit: type=1326 audit(1760945935.599:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10166 comm="syz.1.1549" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 216.568178][ T40] audit: type=1326 audit(1760945935.599:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10166 comm="syz.1.1549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 216.920216][ T6062] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 217.082255][ T6062] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.086677][ T6062] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.091743][ T6062] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 217.100174][ T6062] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.105884][ T6062] usb 6-1: config 0 descriptor?? [ 217.476185][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.482194][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.487238][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.492655][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.497422][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.522546][ T6062] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 217.525498][ T6062] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 217.528422][ T6062] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x0 [ 217.534875][ T6062] pyra 0003:1E7D:2CF6.0007: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 217.665736][T10188] chnl_net:caif_netlink_parms(): no params data found [ 217.725289][ T6062] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device [ 217.729021][ T6062] pyra 0003:1E7D:2CF6.0007: couldn't install mouse [ 217.751756][ T6062] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -71 [ 217.767306][ T6062] usb 6-1: USB disconnect, device number 7 [ 217.847192][T10188] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.851997][T10188] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.855402][T10188] bridge_slave_0: entered allmulticast mode [ 217.859725][T10188] bridge_slave_0: entered promiscuous mode [ 217.865797][T10188] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.869006][T10188] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.872296][T10188] bridge_slave_1: entered allmulticast mode [ 217.876716][T10188] bridge_slave_1: entered promiscuous mode [ 217.945115][T10188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.955452][T10188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.015052][T10188] team0: Port device team_slave_0 added [ 218.021215][T10188] team0: Port device team_slave_1 added [ 218.057597][T10188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.059779][T10188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.068236][T10188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.074061][T10188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.076246][T10188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.085482][T10188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.158530][T10188] hsr_slave_0: entered promiscuous mode [ 218.163264][T10188] hsr_slave_1: entered promiscuous mode [ 218.166444][T10188] debugfs: 'hsr0' already exists in 'hsr' [ 218.168871][T10188] Cannot create hsr debugfs directory [ 218.356303][T10188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.363416][T10188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.371645][T10188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.383729][T10188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.421576][T10188] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.424754][T10188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.428729][T10188] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.431827][T10188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.505110][T10188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.519160][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.524621][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.554568][T10188] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.565502][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.567810][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.577479][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.580788][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.796846][T10188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.983161][T10271] overlayfs: failed to resolve './file0': -2 [ 219.028308][T10188] veth0_vlan: entered promiscuous mode [ 219.039682][T10188] veth1_vlan: entered promiscuous mode [ 219.062756][T10188] veth0_macvtap: entered promiscuous mode [ 219.072303][T10188] veth1_macvtap: entered promiscuous mode [ 219.088530][T10188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.098005][T10188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.108793][ T1145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.114190][ T1145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.120285][ T1145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.123875][ T1145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.174089][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.178027][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.192322][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.195832][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.511795][ T5954] Bluetooth: hci3: command tx timeout [ 220.245025][T10297] overlayfs: failed to resolve './file0': -2 [ 221.126299][ T9178] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 221.130188][ T9178] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 221.133090][ T9178] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 221.135630][ T9178] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 221.138725][ T9178] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 221.143907][ T9178] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 221.146574][ T9178] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 221.154000][ T9178] hid-generic 0000:3000000:0000.0008: hidraw1: HID v0.00 Device [sy] on syz0 [ 221.205089][T10319] fido_id[10319]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 221.590195][ T5954] Bluetooth: hci3: command tx timeout [ 222.368061][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1612'. [ 223.060175][ T24] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 223.210222][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 223.217069][ T24] usb 8-1: config 0 has an invalid interface number: 114 but max is 0 [ 223.221256][ T24] usb 8-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 223.224995][ T24] usb 8-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 223.229360][ T24] usb 8-1: config 0 has no interface number 0 [ 223.232527][ T24] usb 8-1: config 0 interface 114 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 223.237985][ T24] usb 8-1: config 0 interface 114 has no altsetting 0 [ 223.244911][ T24] usb 8-1: New USB device found, idVendor=0421, idProduct=00fc, bcdDevice=7f.8a [ 223.248724][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.252491][ T24] usb 8-1: Product: syz [ 223.254437][ T24] usb 8-1: Manufacturer: syz [ 223.256424][ T24] usb 8-1: SerialNumber: syz [ 223.270771][ T24] usb 8-1: config 0 descriptor?? [ 223.670605][ T5954] Bluetooth: hci3: command tx timeout [ 225.195097][ T1151] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.301400][ T1151] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.395850][ T1151] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.479706][ T1151] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.548834][ T5302] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.553128][ T5302] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.555764][ T5302] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.563057][ T5302] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.567197][ T5302] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.686388][ T1151] bridge_slave_1: left allmulticast mode [ 225.690933][ T1151] bridge_slave_1: left promiscuous mode [ 225.696480][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.706272][ T1151] bridge_slave_0: left allmulticast mode [ 225.708162][ T1151] bridge_slave_0: left promiscuous mode [ 225.710121][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.750265][ T5302] Bluetooth: hci3: command tx timeout [ 225.830008][ T24] rndis_host 8-1:0.114: skipping garbage [ 225.837400][ T24] rndis_host 8-1:0.114: skipping garbage [ 225.848652][ T24] usb 8-1: bad CDC descriptors [ 225.851480][ T24] cdc_acm 8-1:0.114: skipping garbage [ 225.853897][ T24] cdc_acm 8-1:0.114: skipping garbage [ 225.865984][ T24] usb 8-1: USB disconnect, device number 7 [ 226.053533][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.060345][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.065451][ T1151] bond0 (unregistering): Released all slaves [ 226.170141][T10426] overlayfs: failed to resolve './file1': -2 [ 226.214451][T10428] netlink: 296 bytes leftover after parsing attributes in process `syz.2.1635'. [ 226.224272][ T1151] tipc: Disabling bearer [ 226.228123][ T1151] tipc: Left network mode [ 226.319928][T10401] chnl_net:caif_netlink_parms(): no params data found [ 226.382132][T10442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1641'. [ 226.450328][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 226.536572][T10401] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.539741][T10401] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.543200][T10401] bridge_slave_0: entered allmulticast mode [ 226.547260][T10401] bridge_slave_0: entered promiscuous mode [ 226.552552][T10401] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.555655][T10401] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.558792][T10401] bridge_slave_1: entered allmulticast mode [ 226.563266][T10401] bridge_slave_1: entered promiscuous mode [ 226.601598][ T24] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 226.604688][ T24] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 226.609677][ T24] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 226.610472][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 226.610484][ T40] audit: type=1326 audit(1760945945.699:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.3.1644" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 226.612941][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.615181][ T40] audit: type=1326 audit(1760945945.719:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.3.1644" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 226.623916][ T24] usb 9-1: Product: syz [ 226.630111][ T40] audit: type=1326 audit(1760945945.729:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.3.1644" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 226.636073][ T24] usb 9-1: Manufacturer: syz [ 226.637990][ T40] audit: type=1326 audit(1760945945.729:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.3.1644" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 226.647650][ T24] usb 9-1: SerialNumber: syz [ 226.649397][ T40] audit: type=1326 audit(1760945945.739:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.3.1644" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 226.662286][ T24] usb 9-1: config 0 descriptor?? [ 226.670665][ T40] audit: type=1326 audit(1760945945.739:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.3.1644" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 226.677527][ T40] audit: type=1326 audit(1760945945.739:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.3.1644" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 226.677933][T10431] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 226.684719][ T40] audit: type=1326 audit(1760945945.739:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.3.1644" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 226.690778][T10431] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 226.694145][ T40] audit: type=1326 audit(1760945945.739:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.3.1644" exe="/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 226.703957][ T40] audit: type=1326 audit(1760945945.739:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10452 comm="syz.3.1644" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 226.712662][ T1151] hsr_slave_0: left promiscuous mode [ 226.714995][ T1151] hsr_slave_1: left promiscuous mode [ 226.717147][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.719473][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.725878][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.728295][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.750880][ T1151] veth1_macvtap: left promiscuous mode [ 226.753481][ T1151] veth0_macvtap: left promiscuous mode [ 226.755960][ T1151] veth1_vlan: left promiscuous mode [ 226.758184][ T1151] veth0_vlan: left promiscuous mode [ 226.910331][T10431] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 226.912790][T10431] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 227.321103][ T24] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 227.441857][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 227.509874][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 227.524041][ T24] dm9601 9-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 227.529320][ T24] usb 9-1: USB disconnect, device number 2 [ 227.671155][ T5302] Bluetooth: hci0: command tx timeout [ 228.075879][T10401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.084747][T10401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.180197][T10401] team0: Port device team_slave_0 added [ 228.186680][T10401] team0: Port device team_slave_1 added [ 228.249398][T10486] syzkaller0: entered promiscuous mode [ 228.255479][T10486] syzkaller0: entered allmulticast mode [ 228.272244][T10401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.274518][T10401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.287434][T10401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.292732][T10401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.295750][T10401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.307877][T10401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.397626][T10401] hsr_slave_0: entered promiscuous mode [ 228.401030][T10401] hsr_slave_1: entered promiscuous mode [ 228.403993][T10401] debugfs: 'hsr0' already exists in 'hsr' [ 228.406508][T10401] Cannot create hsr debugfs directory [ 228.707229][T10401] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 228.723958][T10401] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 228.735205][T10401] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 228.743827][T10401] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 228.843937][T10401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.863043][T10401] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.874025][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.877085][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.887938][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.890334][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.046458][T10401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.253761][T10401] veth0_vlan: entered promiscuous mode [ 229.262159][T10401] veth1_vlan: entered promiscuous mode [ 229.303409][T10401] veth0_macvtap: entered promiscuous mode [ 229.309366][T10401] veth1_macvtap: entered promiscuous mode [ 229.325294][T10401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.337813][T10401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.349761][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.354906][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.360340][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.363881][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.430423][T10553] syzkaller0: entered promiscuous mode [ 229.432926][T10553] syzkaller0: entered allmulticast mode [ 229.449293][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.453591][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.753983][ T5302] Bluetooth: hci0: command tx timeout [ 230.534245][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.538458][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.634036][T10582] futex_wake_op: syz.5.1630 tries to shift op by -1; fix this program [ 231.052086][T10613] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 231.830229][ T5302] Bluetooth: hci0: command tx timeout [ 232.664943][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 232.664957][ T40] audit: type=1326 audit(1760945951.759:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10650 comm="syz.2.1699" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 232.679794][ T40] audit: type=1326 audit(1760945951.759:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10650 comm="syz.2.1699" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 232.686822][ T40] audit: type=1326 audit(1760945951.759:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10650 comm="syz.2.1699" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 232.693993][ T40] audit: type=1326 audit(1760945951.769:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10650 comm="syz.2.1699" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 232.703075][ T40] audit: type=1326 audit(1760945951.769:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10650 comm="syz.2.1699" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 232.712360][ T40] audit: type=1326 audit(1760945951.769:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10650 comm="syz.2.1699" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 232.722466][ T40] audit: type=1326 audit(1760945951.769:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10650 comm="syz.2.1699" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 232.731745][ T40] audit: type=1326 audit(1760945951.779:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10650 comm="syz.2.1699" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 232.740810][ T40] audit: type=1326 audit(1760945951.779:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10650 comm="syz.2.1699" exe="/syz-executor" sig=0 arch=40000003 syscall=299 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 232.750453][ T40] audit: type=1326 audit(1760945951.779:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10650 comm="syz.2.1699" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 233.493643][T10676] netlink: 'syz.4.1708': attribute type 12 has an invalid length. [ 233.910247][ T5302] Bluetooth: hci0: command tx timeout [ 233.930256][ T53] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 233.948556][T10682] netlink: 'syz.5.1710': attribute type 25 has an invalid length. [ 233.952705][T10682] netlink: 'syz.5.1710': attribute type 7 has an invalid length. [ 233.955957][T10682] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1710'. [ 234.140491][ T53] usb 8-1: Using ep0 maxpacket: 16 [ 234.143601][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.146974][ T53] usb 8-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 234.149781][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.181193][ T53] usb 8-1: config 0 descriptor?? [ 234.265660][T10687] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 234.600845][ T53] logitech-djreceiver 0003:046D:C53F.0009: hidraw1: USB HID v10.05 Device [HID 046d:c53f] on usb-dummy_hcd.3-1/input0 [ 234.791135][ T53] usb 8-1: USB disconnect, device number 8 [ 235.498275][T10697] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 235.897478][T10701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1715'. [ 236.310167][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 236.310337][ T5302] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 236.420901][T10713] netlink: 548 bytes leftover after parsing attributes in process `syz.2.1719'. [ 236.837735][T10728] veth2: entered promiscuous mode [ 236.839710][T10728] veth2: entered allmulticast mode [ 236.893791][T10731] vlan2: entered allmulticast mode [ 237.531495][T10746] kvm: pic: level sensitive irq not supported [ 237.532313][T10746] kvm: pic: non byte read [ 237.537747][T10746] kvm: pic: level sensitive irq not supported [ 237.538066][T10746] kvm: pic: non byte read [ 237.544703][T10746] kvm: pic: non byte read [ 237.548304][T10746] kvm: pic: non byte read [ 237.553130][T10746] kvm: pic: non byte read [ 237.556825][T10746] kvm: pic: non byte read [ 237.561198][T10746] kvm: pic: non byte read [ 237.564716][T10746] kvm: pic: non byte read [ 237.568362][T10746] kvm: pic: single mode not supported [ 237.569005][T10746] kvm: pic: non byte read [ 237.949228][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 237.949244][ T40] audit: type=1326 audit(1760945957.039:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.2.1736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 237.959568][ T40] audit: type=1326 audit(1760945957.039:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.2.1736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 237.967853][ T40] audit: type=1326 audit(1760945957.049:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.2.1736" exe="/syz-executor" sig=0 arch=40000003 syscall=235 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 237.990450][ T40] audit: type=1326 audit(1760945957.049:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.2.1736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 237.997275][ T40] audit: type=1326 audit(1760945957.049:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.2.1736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 238.013914][ T40] audit: type=1326 audit(1760945957.049:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.2.1736" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 238.023561][ T40] audit: type=1326 audit(1760945957.049:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.2.1736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 238.032117][ T40] audit: type=1326 audit(1760945957.049:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.2.1736" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 238.039856][ T40] audit: type=1326 audit(1760945957.049:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.2.1736" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 238.051800][ T40] audit: type=1326 audit(1760945957.049:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10757 comm="syz.2.1736" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 238.250276][ T6034] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 238.347152][T10763] pim6reg1: entered promiscuous mode [ 238.349313][T10763] pim6reg1: entered allmulticast mode [ 238.410677][ T6034] usb 8-1: Using ep0 maxpacket: 32 [ 238.414061][ T6034] usb 8-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 238.417001][ T6034] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.421570][ T6034] usb 8-1: config 0 descriptor?? [ 238.834220][ T6034] hid_parser_main: 19 callbacks suppressed [ 238.834238][ T6034] ryos 0003:1E7D:3138.000A: unknown main item tag 0x0 [ 238.841450][ T6034] ryos 0003:1E7D:3138.000A: unknown main item tag 0x0 [ 238.846268][ T6034] ryos 0003:1E7D:3138.000A: unknown main item tag 0x0 [ 238.849389][ T6034] ryos 0003:1E7D:3138.000A: unknown main item tag 0x0 [ 238.853259][ T6034] ryos 0003:1E7D:3138.000A: unknown main item tag 0x0 [ 238.856074][ T6034] ryos 0003:1E7D:3138.000A: unknown main item tag 0x0 [ 238.861460][ T6034] ryos 0003:1E7D:3138.000A: hidraw1: USB HID v0.01 Device [HID 1e7d:3138] on usb-dummy_hcd.3-1/input0 [ 239.029245][ T6062] usb 8-1: USB disconnect, device number 9 [ 240.229941][T10821] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1751'. [ 240.350098][ T6034] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 240.501782][ T6034] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.505447][ T6034] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.508655][ T6034] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.512791][ T6034] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.516018][ T6034] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.520694][ T6034] usb 9-1: config 0 descriptor?? [ 240.956036][ T6034] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 241.128202][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1759'. [ 241.291978][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1760'. [ 241.466331][T10861] create_pit_timer: 3 callbacks suppressed [ 241.466346][T10861] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 243.105689][ T840] usb 9-1: USB disconnect, device number 3 [ 243.368806][T10908] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 243.658952][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 243.658970][ T40] audit: type=1326 audit(1760945962.749:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10923 comm="syz.4.1782" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 243.672505][ T40] audit: type=1326 audit(1760945962.749:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10923 comm="syz.4.1782" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 243.682788][ T40] audit: type=1326 audit(1760945962.749:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10923 comm="syz.4.1782" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 243.692102][ T40] audit: type=1326 audit(1760945962.749:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10923 comm="syz.4.1782" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 243.703142][ T40] audit: type=1326 audit(1760945962.749:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10923 comm="syz.4.1782" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 243.712693][ T40] audit: type=1326 audit(1760945962.769:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10923 comm="syz.4.1782" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 243.722467][ T40] audit: type=1326 audit(1760945962.769:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10923 comm="syz.4.1782" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 243.731748][ T40] audit: type=1326 audit(1760945962.769:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10923 comm="syz.4.1782" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 243.741107][ T40] audit: type=1326 audit(1760945962.769:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10923 comm="syz.4.1782" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 243.750473][ T40] audit: type=1326 audit(1760945962.769:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10923 comm="syz.4.1782" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 245.656498][T10971] overlayfs: missing 'workdir' [ 245.940466][ T1145] Bluetooth: hci4: Frame reassembly failed (-84) [ 246.337738][T10998] netlink: 'syz.3.1805': attribute type 12 has an invalid length. [ 247.959113][T11004] syzkaller0: entered promiscuous mode [ 247.961557][T11004] syzkaller0: entered allmulticast mode [ 248.000250][ T5302] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 248.000314][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 248.699160][T11009] overlayfs: missing 'lowerdir' [ 249.579203][T11033] netlink: 'syz.2.1818': attribute type 12 has an invalid length. [ 250.258204][T11040] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 250.481047][T11045] syzkaller0: entered promiscuous mode [ 250.483565][T11045] syzkaller0: entered allmulticast mode [ 251.656706][T11071] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 251.829894][T11084] ip6gretap0: entered promiscuous mode [ 254.022628][T11114] netlink: 592 bytes leftover after parsing attributes in process `syz.5.1847'. [ 256.692451][T11153] netlink: 'syz.2.1860': attribute type 12 has an invalid length. [ 257.351994][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 257.352009][ T40] audit: type=1326 audit(1760945976.449:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.4.1863" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 257.368787][ T40] audit: type=1326 audit(1760945976.449:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.4.1863" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 257.376980][ T40] audit: type=1326 audit(1760945976.469:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.4.1863" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 257.383712][ T40] audit: type=1326 audit(1760945976.469:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.4.1863" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 257.390787][ T40] audit: type=1326 audit(1760945976.469:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.4.1863" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 257.397927][ T40] audit: type=1326 audit(1760945976.469:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.4.1863" exe="/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 257.405685][ T40] audit: type=1326 audit(1760945976.469:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.4.1863" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 257.412874][ T40] audit: type=1326 audit(1760945976.469:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.4.1863" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 257.420647][ T40] audit: type=1326 audit(1760945976.479:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.4.1863" exe="/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 257.428243][ T40] audit: type=1326 audit(1760945976.489:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.4.1863" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 257.920534][T11176] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.030322][ T5992] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 259.190458][ T5992] usb 9-1: Using ep0 maxpacket: 32 [ 259.206246][ T5992] usb 9-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 259.209204][ T5992] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.230570][ T5992] usb 9-1: config 0 descriptor?? [ 259.706131][ T5992] sony 0003:054C:1000.000C: ignoring exceeding usage max [ 259.717304][ T5992] sony 0003:054C:1000.000C: hidraw1: USB HID vb4.34 Device [HID 054c:1000] on usb-dummy_hcd.4-1/input0 [ 259.722066][ T5992] sony 0003:054C:1000.000C: failed to claim input [ 259.904714][ T6062] usb 9-1: USB disconnect, device number 4 [ 260.060157][ T842] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 260.214543][ T842] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 260.218317][ T842] usb 8-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 260.221452][ T842] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.231800][ T842] usb 8-1: config 0 descriptor?? [ 260.306696][T11236] syzkaller0: entered promiscuous mode [ 260.308522][T11236] syzkaller0: entered allmulticast mode [ 260.473363][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.476011][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.644680][ T842] sony 0003:054C:024B.000D: unknown main item tag 0x0 [ 260.647375][ T842] sony 0003:054C:024B.000D: unknown main item tag 0x0 [ 260.657128][ T842] sony 0003:054C:024B.000D: unknown main item tag 0x0 [ 260.659783][ T842] sony 0003:054C:024B.000D: unknown main item tag 0x0 [ 260.662559][ T842] sony 0003:054C:024B.000D: unknown main item tag 0x0 [ 260.684253][ T842] sony 0003:054C:024B.000D: hiddev0,hidraw1: USB HID v0.00 Device [HID 054c:024b] on usb-dummy_hcd.3-1/input0 [ 260.692852][ T842] sony 0003:054C:024B.000D: failed to claim input [ 260.800227][T10439] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 260.861703][ T6014] usb 8-1: USB disconnect, device number 10 [ 260.951486][T10439] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 260.955088][T10439] usb 9-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 260.958155][T10439] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.962170][T10439] usb 9-1: config 0 descriptor?? [ 260.964614][T11241] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 261.374834][T10439] betop 0003:8380:1850.000E: unknown main item tag 0x0 [ 261.377061][T10439] betop 0003:8380:1850.000E: item fetching failed at offset 3/5 [ 261.379946][T10439] betop 0003:8380:1850.000E: parse failed [ 261.382600][T10439] betop 0003:8380:1850.000E: probe with driver betop failed with error -22 [ 261.447435][T11246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1894'. [ 261.574620][T10439] usb 9-1: USB disconnect, device number 5 [ 262.122164][T11264] No control pipe specified [ 262.633318][ T6014] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 262.792024][ T6014] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.796056][ T6014] usb 8-1: config 0 has no interface number 0 [ 262.798658][ T6014] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.802997][ T6014] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.807601][ T6014] usb 8-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.812251][ T6014] usb 8-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 262.815136][ T6014] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.819129][ T6014] usb 8-1: config 0 descriptor?? [ 263.111924][T11311] Bluetooth: MGMT ver 1.23 [ 263.435964][ T6014] input: HID 28bd:0042 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.1/0003:28BD:0042.000F/input/input11 [ 263.466733][T11316] netlink: 484 bytes leftover after parsing attributes in process `syz.5.1920'. [ 263.530197][ T6014] input: HID 28bd:0042 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.1/0003:28BD:0042.000F/input/input12 [ 263.551510][ T6014] uclogic 0003:28BD:0042.000F: input,hidraw1: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.3-1/input1 [ 263.633895][ T840] usb 8-1: USB disconnect, device number 11 [ 263.800116][T10439] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 263.950121][T10439] usb 10-1: Using ep0 maxpacket: 32 [ 263.954567][T10439] usb 10-1: unable to get BOS descriptor or descriptor too short [ 263.958866][T10439] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 263.962511][T10439] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.966223][T10439] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.972112][T10439] usb 10-1: string descriptor 0 read error: -22 [ 263.974187][T10439] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.977447][T10439] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.984654][T10439] usb 10-1: 0:2 : does not exist [ 264.186769][ T840] usb 10-1: USB disconnect, device number 2 [ 264.712673][T11341] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 264.715666][T11341] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 265.707180][T11359] syzkaller0: entered promiscuous mode [ 265.708912][T11359] syzkaller0: entered allmulticast mode [ 265.930159][ T6014] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 266.068931][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 266.068948][ T40] audit: type=1326 audit(1760945985.159:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11370 comm="syz.3.1938" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708d579 code=0x0 [ 266.081511][ T6014] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.085131][ T6014] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.088180][ T6014] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 266.093828][ T6014] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 266.096778][ T6014] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.104327][ T6014] usb 10-1: config 0 descriptor?? [ 266.518105][ T6014] plantronics 0003:047F:FFFF.0010: reserved main item tag 0xd [ 266.534978][ T6014] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 266.721952][ T6014] usb 10-1: USB disconnect, device number 3 [ 267.350566][T11397] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 267.407875][T11397] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 267.417034][T11404] autofs: Bad value for 'fd' [ 267.417668][T11397] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 267.426592][T11397] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 267.442551][T11397] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 267.452771][T11397] kvm: requested 11733 ns i8254 timer period limited to 200000 ns [ 267.474618][T11397] kvm: requested 119847 ns i8254 timer period limited to 200000 ns [ 267.487065][T11397] kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 268.024062][T11427] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1957'. [ 268.064295][T11429] autofs: Unknown parameter '0x0000000000000000' [ 268.452588][T11445] pim6reg1: entered promiscuous mode [ 268.454817][T11445] pim6reg1: entered allmulticast mode [ 269.105792][T11481] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 270.005664][T11496] netlink: 'syz.2.1984': attribute type 12 has an invalid length. [ 270.085562][T11499] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1982'. [ 271.912392][T11540] netlink: 'syz.5.2001': attribute type 12 has an invalid length. [ 273.526871][T11565] autofs: Unknown parameter '0x0000000000000000' [ 273.832181][ T1151] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.942209][ T1151] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.017731][ T1151] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.121276][ T1151] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.126224][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.129955][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.135315][T11586] autofs: Unknown parameter '0x0000000000000000' [ 274.137416][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.140230][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.142714][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.267229][T11581] chnl_net:caif_netlink_parms(): no params data found [ 274.316362][ T1151] bridge_slave_1: left allmulticast mode [ 274.318138][ T1151] bridge_slave_1: left promiscuous mode [ 274.320014][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.324707][ T1151] bridge_slave_0: left allmulticast mode [ 274.326635][ T1151] bridge_slave_0: left promiscuous mode [ 274.328490][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.985150][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.990688][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.994454][ T1151] bond0 (unregistering): Released all slaves [ 275.039047][T11594] netlink: 'syz.5.2019': attribute type 12 has an invalid length. [ 275.370315][T11581] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.373226][T11581] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.380327][T11581] bridge_slave_0: entered allmulticast mode [ 275.383796][T11581] bridge_slave_0: entered promiscuous mode [ 275.395842][T11581] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.409034][T11581] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.412276][T11581] bridge_slave_1: entered allmulticast mode [ 275.415917][T11581] bridge_slave_1: entered promiscuous mode [ 275.580813][T11581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.616876][T11581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.635452][ T1151] hsr_slave_0: left promiscuous mode [ 275.638890][ T1151] hsr_slave_1: left promiscuous mode [ 275.641972][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.644406][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.647771][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.650862][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.672986][ T1151] veth1_macvtap: left promiscuous mode [ 275.674883][ T1151] veth0_macvtap: left promiscuous mode [ 275.676822][ T1151] veth1_vlan: left promiscuous mode [ 275.678879][ T1151] veth0_vlan: left promiscuous mode [ 276.160272][ T5954] Bluetooth: hci3: command tx timeout [ 276.623887][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 276.761888][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 277.445472][T11629] netlink: 'syz.2.2027': attribute type 12 has an invalid length. [ 277.497278][T11581] team0: Port device team_slave_0 added [ 277.514852][T11581] team0: Port device team_slave_1 added [ 277.577212][T11581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.612894][T11581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.621079][T11581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.625682][T11581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.627825][T11581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.636694][T11581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.717742][T11581] hsr_slave_0: entered promiscuous mode [ 277.721424][T11581] hsr_slave_1: entered promiscuous mode [ 277.724238][T11581] debugfs: 'hsr0' already exists in 'hsr' [ 277.726561][T11581] Cannot create hsr debugfs directory [ 277.884545][T11581] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 277.889752][T11581] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 277.895260][T11581] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 277.902452][T11581] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 277.986703][T11581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.019184][T11581] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.035191][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.038104][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.056444][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.059229][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.230386][ T5954] Bluetooth: hci3: command tx timeout [ 278.267521][T11581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.475566][T11581] veth0_vlan: entered promiscuous mode [ 278.492671][T11581] veth1_vlan: entered promiscuous mode [ 278.523036][T11581] veth0_macvtap: entered promiscuous mode [ 278.527057][T11581] veth1_macvtap: entered promiscuous mode [ 278.537695][T11581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.548527][T11581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.556491][ T1151] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.559471][ T1151] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.565850][ T1151] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.586316][ T1151] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.620774][T11694] syzkaller0: entered promiscuous mode [ 278.622338][T11694] syzkaller0: entered allmulticast mode [ 279.705261][T11707] netlink: 'syz.5.2039': attribute type 12 has an invalid length. [ 279.741118][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.743927][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.795637][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.798026][ T40] audit: type=1326 audit(1760945998.889:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.3.2042" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 279.801954][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.834053][ T40] audit: type=1326 audit(1760945998.899:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.3.2042" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 279.857603][ T40] audit: type=1326 audit(1760945998.899:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.3.2042" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 279.867272][ T40] audit: type=1326 audit(1760945998.899:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.3.2042" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 279.874972][ T40] audit: type=1326 audit(1760945998.909:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.3.2042" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 279.883044][ T40] audit: type=1326 audit(1760945998.909:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.3.2042" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 279.891497][ T40] audit: type=1326 audit(1760945998.909:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.3.2042" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 279.899652][ T40] audit: type=1326 audit(1760945998.909:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.3.2042" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 279.907901][ T40] audit: type=1326 audit(1760945998.909:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.3.2042" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 279.925945][ T40] audit: type=1326 audit(1760945998.909:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.3.2042" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 279.948378][T11718] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 280.320294][ T5954] Bluetooth: hci3: command tx timeout [ 280.970978][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2046'. [ 280.973861][T11741] bridge_slave_1: left allmulticast mode [ 280.975613][T11741] bridge_slave_1: left promiscuous mode [ 280.977495][T11741] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.063223][T11741] bridge_slave_0: left promiscuous mode [ 281.065782][T11741] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.400426][T11746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.485137][T11753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2050'. [ 281.491422][T11753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2050'. [ 281.741337][T11757] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 282.160965][T11766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2054'. [ 282.390275][ T5954] Bluetooth: hci3: command tx timeout [ 283.170146][ T6034] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 283.322853][ T6034] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 283.332286][ T6034] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.351351][ T6034] usb 10-1: config 0 descriptor?? [ 283.620141][ T6014] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 283.762156][ T6034] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 283.770483][ T6034] asix 10-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 283.774457][ T6034] asix 10-1:0.0: probe with driver asix failed with error -32 [ 283.780136][ T6014] usb 8-1: Using ep0 maxpacket: 32 [ 283.802976][ T6014] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.807476][ T6014] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.811999][ T6014] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 283.815770][ T6014] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.826547][ T6014] usb 8-1: config 0 descriptor?? [ 283.834305][ T6014] hub 8-1:0.0: USB hub found [ 284.190586][ T24] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 284.342940][ T24] usb 11-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 284.346373][ T24] usb 11-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 284.349233][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.354331][T11817] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 285.172076][ T24] aiptek 11-1:17.0: Aiptek using 400 ms programming speed [ 285.189173][ T24] input: Aiptek as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:17.0/input/input14 [ 285.255412][ T24] usb 11-1: USB disconnect, device number 2 [ 285.258265][ C2] aiptek 11-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 285.959324][ T6062] usb 10-1: USB disconnect, device number 4 [ 286.395310][ T6014] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 286.412230][ T6014] usbhid 8-1:0.0: can't add hid device: -71 [ 286.414637][ T6014] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 286.451763][ T6014] usb 8-1: USB disconnect, device number 12 [ 286.590869][T11854] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 286.920600][T11863] input: syz1 as /devices/virtual/input/input15 [ 288.450943][ T10] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 288.611797][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 288.615785][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 36128, setting to 64 [ 288.630156][ T10] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.633894][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 288.637183][ T10] usb 10-1: SerialNumber: syz [ 288.654287][T11897] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 288.658687][ T10] cdc_acm 10-1:1.0: skipping garbage [ 288.666975][ T10] cdc_acm 10-1:1.0: probe with driver cdc_acm failed with error -12 [ 288.866169][ T54] usb 10-1: USB disconnect, device number 5 [ 289.078485][T11936] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 290.469970][T11980] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 291.614784][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 291.614800][ T40] audit: type=1326 audit(1760946010.709:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.3.2125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 291.626803][ T40] audit: type=1326 audit(1760946010.709:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.3.2125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 291.635438][ T40] audit: type=1326 audit(1760946010.709:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.3.2125" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 291.644244][ T40] audit: type=1326 audit(1760946010.709:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.3.2125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 291.653760][ T40] audit: type=1326 audit(1760946010.709:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.3.2125" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 291.663427][ T40] audit: type=1326 audit(1760946010.709:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.3.2125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 291.673858][ T40] audit: type=1326 audit(1760946010.709:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.3.2125" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 291.682988][ T40] audit: type=1326 audit(1760946010.709:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.3.2125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 291.691606][ T40] audit: type=1326 audit(1760946010.709:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.3.2125" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 291.699772][ T40] audit: type=1326 audit(1760946010.719:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.3.2125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 291.970132][ T24] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 291.988402][T12006] can: request_module (can-proto-0) failed. [ 292.130448][ T24] usb 11-1: Using ep0 maxpacket: 32 [ 292.134502][ T24] usb 11-1: config 0 has an invalid interface number: 154 but max is 0 [ 292.137850][ T24] usb 11-1: config 0 has no interface number 0 [ 292.142844][ T24] usb 11-1: New USB device found, idVendor=0b95, idProduct=7e2b, bcdDevice=c4.04 [ 292.147498][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.151149][ T24] usb 11-1: Product: syz [ 292.152930][ T24] usb 11-1: Manufacturer: syz [ 292.154817][ T24] usb 11-1: SerialNumber: syz [ 292.160172][ T24] usb 11-1: config 0 descriptor?? [ 292.367928][ T24] asix 11-1:0.154 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 292.372408][ T24] asix 11-1:0.154: probe with driver asix failed with error -61 [ 294.352040][T12048] tipc: Started in network mode [ 294.353772][T12048] tipc: Node identity ac14140f, cluster identity 4711 [ 294.356209][T12048] tipc: New replicast peer: 255.255.255.255 [ 294.358528][T12048] tipc: Enabled bearer , priority 10 [ 294.767649][ T29] usb 11-1: USB disconnect, device number 3 [ 294.889002][T12063] syzkaller0: entered promiscuous mode [ 294.893631][T12063] syzkaller0: entered allmulticast mode [ 295.360157][ T6062] tipc: Node number set to 2886997007 [ 295.972413][T12080] netlink: 'syz.3.2154': attribute type 12 has an invalid length. [ 296.801565][T12113] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 296.937069][T12122] netem: change failed [ 297.889201][T12140] pim6reg1: entered promiscuous mode [ 297.891516][T12140] pim6reg1: entered allmulticast mode [ 299.820890][T12208] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 300.258784][T12224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 300.386717][T12231] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 300.757165][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 300.757181][ T40] audit: type=1326 audit(1760946019.849:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.5.2207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 300.768480][ T40] audit: type=1326 audit(1760946019.849:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.5.2207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 300.777576][ T40] audit: type=1326 audit(1760946019.859:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.5.2207" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 300.786567][ T40] audit: type=1326 audit(1760946019.859:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.5.2207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 300.795901][ T40] audit: type=1326 audit(1760946019.859:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.5.2207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 300.803593][ T40] audit: type=1326 audit(1760946019.859:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.5.2207" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 300.811519][ T40] audit: type=1326 audit(1760946019.859:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.5.2207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 300.818171][ T40] audit: type=1326 audit(1760946019.859:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.5.2207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 300.825028][ T40] audit: type=1326 audit(1760946019.859:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.5.2207" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 300.832463][ T40] audit: type=1326 audit(1760946019.859:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12234 comm="syz.5.2207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000 [ 301.573641][T12258] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 302.018101][T12283] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.552753][T12297] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.970856][T12323] syz.5.2235 uses obsolete (PF_INET,SOCK_PACKET) [ 304.674584][T12342] syzkaller0: entered promiscuous mode [ 304.676864][T12342] syzkaller0: entered allmulticast mode [ 306.025911][T12371] netlink: 'syz.3.2252': attribute type 3 has an invalid length. [ 306.029386][T12371] netlink: 'syz.3.2252': attribute type 3 has an invalid length. [ 307.070114][ T29] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 307.232122][ T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 307.235242][ T29] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 307.238449][ T29] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.245712][ T29] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=fc.40 [ 307.249187][ T29] usb 10-1: New USB device strings: Mfr=234, Product=2, SerialNumber=3 [ 307.252690][ T29] usb 10-1: Product: syz [ 307.254322][ T29] usb 10-1: Manufacturer: syz [ 307.255916][ T29] usb 10-1: SerialNumber: syz [ 307.336216][T12397] syzkaller0: entered promiscuous mode [ 307.338093][T12397] syzkaller0: entered allmulticast mode [ 308.376445][T12405] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2263'. [ 309.634110][ T29] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 309.641342][ T29] usb 10-1: USB disconnect, device number 6 [ 309.644956][ T29] usblp0: removed [ 311.650178][ T54] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 311.802096][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.806266][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.809656][ T54] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 311.812749][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.821157][ T54] usb 8-1: config 0 descriptor?? [ 311.862086][T12469] kvm: pic: non byte read [ 311.865575][T12469] kvm: pic: non byte read [ 311.880488][T12469] kvm: pic: single mode not supported [ 311.880500][T12469] kvm: pic: level sensitive irq not supported [ 311.884809][T12469] kvm: pic: non byte read [ 311.961502][T12469] kvm: pic: level sensitive irq not supported [ 311.961821][T12469] kvm: pic: non byte read [ 312.229834][ T54] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 312.232650][ T54] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 312.236036][ T54] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 312.238391][ T54] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 312.240776][ T54] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 312.243042][ T54] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 312.245235][ T54] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 312.249210][ T54] cp2112 0003:10C4:EA90.0011: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 312.431177][ T54] cp2112 0003:10C4:EA90.0011: Part Number: 0xE8 Device Version: 0x5E [ 312.633761][ T54] cp2112 0003:10C4:EA90.0011: error requesting SMBus config [ 312.639655][ T54] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -32 [ 312.644224][ T54] usb 8-1: USB disconnect, device number 13 [ 313.186528][T12489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2299'. [ 315.370187][T10439] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 315.530092][T10439] usb 11-1: Using ep0 maxpacket: 16 [ 315.533109][T10439] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.536555][T10439] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.538723][ T5302] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.539621][T10439] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 315.544270][ T5302] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.546132][T10439] usb 11-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 315.546145][T10439] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.547211][T10439] usb 11-1: config 0 descriptor?? [ 315.549797][ T5302] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.560173][ T5302] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 315.563037][ T5302] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 315.683108][T12529] chnl_net:caif_netlink_parms(): no params data found [ 315.756603][T12529] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.758944][T12529] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.761368][T12529] bridge_slave_0: entered allmulticast mode [ 315.764086][T12529] bridge_slave_0: entered promiscuous mode [ 315.768548][T12529] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.771029][T12529] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.773340][T12529] bridge_slave_1: entered allmulticast mode [ 315.775966][T12529] bridge_slave_1: entered promiscuous mode [ 315.813021][T12529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.817780][T12529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.857700][T12529] team0: Port device team_slave_0 added [ 315.861377][T12529] team0: Port device team_slave_1 added [ 315.897919][T12529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.901383][T12529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.909219][T12529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.914847][T12529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.917044][T12529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.925029][T12529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.974266][T12529] hsr_slave_0: entered promiscuous mode [ 315.977386][T12529] hsr_slave_1: entered promiscuous mode [ 315.980699][T12529] debugfs: 'hsr0' already exists in 'hsr' [ 315.983015][T12529] Cannot create hsr debugfs directory [ 315.987165][T10439] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:045E:07DA.0012/input/input16 [ 316.002938][T10439] microsoft 0003:045E:07DA.0012: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 316.138518][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 316.138534][ T40] audit: type=1326 audit(1760946035.229:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.3.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 316.139357][T12529] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.141584][ T40] audit: type=1326 audit(1760946035.229:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.3.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 316.160317][ T29] usb 11-1: USB disconnect, device number 4 [ 316.170544][ T40] audit: type=1326 audit(1760946035.229:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.3.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 316.179553][ T40] audit: type=1326 audit(1760946035.229:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.3.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 316.188828][ T40] audit: type=1326 audit(1760946035.229:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.3.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 316.198068][ T40] audit: type=1326 audit(1760946035.239:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.3.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 316.208494][ T40] audit: type=1326 audit(1760946035.239:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.3.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 316.217803][ T40] audit: type=1326 audit(1760946035.239:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.3.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 316.226567][ T40] audit: type=1326 audit(1760946035.239:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.3.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 316.233809][ T40] audit: type=1326 audit(1760946035.239:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.3.2309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 316.259002][T12529] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.344082][T12529] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.424842][T12529] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.556294][T12529] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 316.561533][T12529] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 316.565846][T12529] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 316.570873][T12529] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 316.589521][T12529] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.591889][T12529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.594279][T12529] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.596565][T12529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.625052][T12529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.636099][ T1216] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.642553][ T1216] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.657946][T12529] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.663627][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.666611][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.674106][ T1216] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.676493][ T1216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.787059][T12529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.813456][T12529] veth0_vlan: entered promiscuous mode [ 316.818119][T12529] veth1_vlan: entered promiscuous mode [ 316.832569][T12529] veth0_macvtap: entered promiscuous mode [ 316.836535][T12529] veth1_macvtap: entered promiscuous mode [ 316.846849][T12529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.853166][T12529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.859318][ T1151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.862295][ T1151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.865881][ T1151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.869562][ T1151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.905213][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.907722][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.928733][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.931447][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.044817][T12574] pim6reg1: entered promiscuous mode [ 317.047110][T12574] pim6reg1: entered allmulticast mode [ 317.600267][ T5954] Bluetooth: hci1: command tx timeout [ 332.026797][T12921] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 332.029245][T12921] CPU: 3 UID: 0 PID: 12921 Comm: syz.5.2425 Not tainted syzkaller #0 PREEMPT(full) [ 332.034014][T12921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 332.037346][T12921] Call Trace: [ 332.038395][T12921] [ 332.039374][T12921] dump_stack_lvl+0x3d/0x1f0 [ 332.041176][T12921] vpanic+0x640/0x6f0 [ 332.042464][T12921] ? reg_bounds_sanity_check+0x62b/0x1200 [ 332.044295][T12921] panic+0xca/0xd0 [ 332.045515][T12921] ? __pfx_panic+0x10/0x10 [ 332.046936][T12921] check_panic_on_warn+0xab/0xb0 [ 332.048536][T12921] __warn+0xf6/0x3c0 [ 332.050070][T12921] ? __pfx_vprintk_emit+0x10/0x10 [ 332.051914][T12921] ? reg_bounds_sanity_check+0x62b/0x1200 [ 332.053668][T12921] report_bug+0x3c3/0x580 [ 332.055044][T12921] ? reg_bounds_sanity_check+0x62b/0x1200 [ 332.057094][T12921] handle_bug+0x184/0x210 [ 332.058683][T12921] exc_invalid_op+0x17/0x50 [ 332.060190][T12921] asm_exc_invalid_op+0x1a/0x20 [ 332.061785][T12921] RIP: 0010:reg_bounds_sanity_check+0x62b/0x1200 [ 332.064062][T12921] Code: 45 ac 50 8b 45 b0 50 8b 45 b4 50 ff 75 b8 4c 8b 4d c0 4c 8b 45 c8 48 8b 95 58 ff ff ff 48 8b b5 60 ff ff ff e8 d6 fa aa ff 90 <0f> 0b 90 90 48 8b 95 40 ff ff ff 48 83 c4 38 48 b8 00 00 00 00 00 [ 332.071156][T12921] RSP: 0018:ffffc9000600f260 EFLAGS: 00010286 [ 332.073115][T12921] RAX: 0000000000000000 RBX: 00000000ffffdfcd RCX: ffffc9000dd91000 [ 332.075599][T12921] RDX: 0000000000080000 RSI: ffffffff817b3e65 RDI: 0000000000000001 [ 332.078067][T12921] RBP: ffffc9000600f358 R08: 0000000000000001 R09: 0000000000000000 [ 332.080570][T12921] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888063bc0000 [ 332.083071][T12921] R13: ffff88805985a284 R14: ffff88805985a27c R15: ffff88805985a230 [ 332.085599][T12921] ? __warn_printk+0x1a5/0x350 [ 332.087126][T12921] reg_set_min_max+0x183/0x2c0 [ 332.088662][T12921] check_cond_jmp_op+0x19c2/0x7490 [ 332.090445][T12921] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 332.092211][T12921] ? __asan_memset+0x23/0x50 [ 332.093689][T12921] do_check_common+0xa20a/0xb550 [ 332.095289][T12921] ? compute_live_registers+0x790/0x1020 [ 332.097081][T12921] ? rcu_is_watching+0x12/0xc0 [ 332.098588][T12921] ? __pfx_do_check_common+0x10/0x10 [ 332.100293][T12921] ? lockdep_hardirqs_on+0x7c/0x110 [ 332.101973][T12921] ? bpf_check+0x843e/0xbdd0 [ 332.103432][T12921] bpf_check+0x8805/0xbdd0 [ 332.104889][T12921] ? __pfx_bpf_check+0x10/0x10 [ 332.106433][T12921] ? __asan_memset+0x23/0x50 [ 332.107907][T12921] ? lsm_blob_alloc+0x2b/0x90 [ 332.109437][T12921] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 332.111073][T12921] bpf_prog_load+0x112e/0x2850 [ 332.112649][T12921] ? __pfx_bpf_prog_load+0x10/0x10 [ 332.114270][T12921] ? __lock_acquire+0xb8a/0x1c90 [ 332.115906][T12921] __sys_bpf+0x3e72/0x4980 [ 332.117321][T12921] ? futex_private_hash_put+0x18a/0x300 [ 332.119468][T12921] ? __pfx___sys_bpf+0x10/0x10 [ 332.121493][T12921] ? __pfx_futex_wait+0x10/0x10 [ 332.123586][T12921] ? do_futex+0x122/0x350 [ 332.125458][T12921] ? xfd_validate_state+0x61/0x180 [ 332.127622][T12921] __ia32_sys_bpf+0x76/0xe0 [ 332.129563][T12921] __do_fast_syscall_32+0x7c/0x300 [ 332.131743][T12921] do_fast_syscall_32+0x32/0x80 [ 332.133810][T12921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.136454][T12921] RIP: 0023:0xf70bd579 [ 332.137774][T12921] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 332.143961][T12921] RSP: 002b:00000000f546b55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 332.146590][T12921] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800054c0 [ 332.149146][T12921] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.152434][T12921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 332.155742][T12921] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 332.158993][T12921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 332.162295][T12921] [ 332.164292][T12921] Kernel Offset: disabled [ 332.166123][T12921] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:40:51 Registers: info registers vcpu 0 CPU#0 RAX=ffffc90024e9f7f0 RBX=ffffc90024e9f808 RCX=1ffff920049d3f01 RDX=dffffc0000000000 RSI=ffffffff8dada831 RDI=ffffffff8bf1e3c0 RBP=0000000000000001 RSP=ffffc9000c01f7b0 R8 =0000000000000304 R9 =fffff52001803eed R10=0000000000000003 R11=0000000000000001 R12=0000000000000304 R13=0000000000000010 R14=0000000000000304 R15=ffff88802382dc40 RIP=ffffffff81945bef RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977e1000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c336978 CR3=000000005ea92000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001e000000000 0000000600000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff88802b33a4c0 RCX=1ffff11005667601 RDX=0000004abb2d039f RSI=1ffff11005667600 RDI=ffffffff8bf1e3c0 RBP=ffffffff90837a34 RSP=ffffc90024e9f448 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000004 R11=0000000000000001 R12=ffff88802b33aff0 R13=0000000000000000 R14=ffff88802b33b010 R15=ffff88802b33b008 RIP=ffffffff819024c0 RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880978e1000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080000080 CR3=000000005ea92000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000024000000000 0000000600000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000000 RBX=ffffea0001c4e700 RCX=ffffffff81f377c6 RDX=ffff888023628000 RSI=ffffffff81f377d0 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc90003617728 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffffea0001c4e700 R14=0000000000000000 R15=1ffff920006c2f13 RIP=ffffffff81bcba0b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f32df403300 ffffffff 00c00000 GS =0000 ffff8880979e1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055c765b41f40 CR3=000000004f290000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000050 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852e2125 RDI=ffffffff9adf1ec0 RBP=ffffffff9adf1e80 RSP=ffffc9000600eaa8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000050 R14=ffffffff9adf1e80 R15=ffffffff852e20c0 RIP=ffffffff852e214f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097ae1000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f546bda4 CR3=000000005ea92000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000024000000000 0000000600000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000