last executing test programs: 1m47.016290287s ago: executing program 3 (id=504): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) munlock(&(0x7f00000db000/0x2000)=nil, 0x2000) 1m46.837200526s ago: executing program 3 (id=508): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) 1m46.78047064s ago: executing program 3 (id=511): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xc00e, &(0x7f00000001c0)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000000010000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2048840) 1m46.718220296s ago: executing program 3 (id=513): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r0) 1m46.707082137s ago: executing program 3 (id=517): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file6\x00', 0x200) 1m46.670641179s ago: executing program 3 (id=519): setresuid(0x0, 0xee00, 0xee00) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x3, 0x2, 0xfffffffffffffffc, 0xf4, 0x0, 0x0, 0xfffd}) shmctl$SHM_UNLOCK(r0, 0xc) 1m31.628562382s ago: executing program 32 (id=519): setresuid(0x0, 0xee00, 0xee00) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x3, 0x2, 0xfffffffffffffffc, 0xf4, 0x0, 0x0, 0xfffd}) shmctl$SHM_UNLOCK(r0, 0xc) 1.402797684s ago: executing program 1 (id=2493): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) write(r0, &(0x7f0000000040)="9c699d343d5ac0c4f3b71ba3a4e8800d3abeabc521c0e663f0453525ba31ff9ca88bc5f535898c7b14f0ef7f67eeb1c102dd3af6c21c360ba9a003fb57445d6382030f2e3ddbfe5d95645b94c65be3a137508c51ae60b5e79ba4bcb3235e794d2c5654cef3fcf9f1879edc1223661fed13a15294bb12fa864097afc914ce9cca3ea42bd010fed2142b7891aa19d972f0142a1bba3ec6059b0ad0288be7cb1acfc50041ad234a27191e55c9f380", 0xffcc) 1.340007864s ago: executing program 1 (id=2495): r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(r1, 0x0, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) rt_sigaction(0x12, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff, {[0x400]}}, 0x0, 0x8, &(0x7f0000000180)) 1.338597491s ago: executing program 1 (id=2503): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.220773671s ago: executing program 1 (id=2498): r0 = syz_io_uring_setup(0x10f, &(0x7f0000000340)={0x0, 0x0, 0x2}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x0, 0x0, 0x6, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) 1.22039268s ago: executing program 1 (id=2502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002300)=ANY=[@ANYBLOB="000080f30180c20000000180c20000008100500008004f1400fc006420"], 0x112) 1.089917214s ago: executing program 1 (id=2511): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000001580)={{0x3, 0xffffffff, 0x1, 0x101, 0x8, 0x5584}, 0x2a8, [0x401, 0x6, 0xfff, 0x101, 0x7, 0xfffffffc, 0x3, 0x223, 0x8b4c, 0x1, 0x1, 0x8001, 0x0, 0x59c, 0x4, 0x3, 0x3, 0x8, 0x0, 0x80, 0x31, 0xffff, 0x8a, 0x441, 0x5, 0x2, 0x6, 0x4, 0x4, 0xc2, 0x2, 0x4, 0x800, 0x4, 0x619b, 0x3, 0x5, 0x2, 0x8, 0x74, 0x7f, 0x1, 0x7, 0x6, 0x9, 0x4, 0x6, 0x5, 0xb2, 0x101, 0xf0bd, 0x7fffffff, 0x5d5, 0x8, 0x40, 0x5, 0x1, 0x3, 0x2, 0x7, 0x98, 0x4, 0x6, 0x1, 0x2, 0x0, 0x200, 0x1, 0x8, 0xdbc, 0x5, 0x6b7, 0x6, 0x766, 0x7, 0xd60, 0xfffffffb, 0x67, 0x9, 0x8, 0x10, 0xff, 0x0, 0x2, 0xc95d, 0xe, 0x54, 0xc, 0x8, 0xf, 0x10, 0x5, 0x5, 0x80, 0x2, 0x800, 0x4a, 0x3, 0x1, 0x7fff, 0x4, 0xffff, 0x6, 0x80000000, 0x3, 0xc8f000, 0x6, 0x2, 0x8, 0x4a75, 0x6, 0x3, 0x6, 0x8, 0x9e90b3f, 0x4, 0x9, 0xf, 0x7b, 0xab3, 0x2e6, 0x0, 0x3, 0x8, 0xa35b, 0x6, 0x6, 0xe, 0xb, 0x0, 0x7fffffff, 0x3, 0xfffffffe, 0x80000000, 0x5, 0xef8b, 0x3d, 0x7e, 0x4, 0x7, 0x3, 0x1, 0x3, 0x9, 0x400, 0x3075, 0x8, 0x8000, 0x1, 0xffffffff, 0x8, 0x7, 0x800, 0x3, 0x200, 0x28, 0x5, 0xfffffffa, 0x6, 0x38d0, 0x5, 0x0, 0x8, 0x9d, 0x40, 0x0, 0x2, 0x6, 0x5, 0x2, 0x0, 0x0, 0xed6, 0x8c94, 0x2, 0x4, 0x6, 0x1, 0x401, 0xa0, 0x8ece, 0xe, 0x7, 0x1972, 0x2, 0x0, 0x2, 0x5, 0x2, 0x6, 0xc, 0x6, 0x86, 0x4, 0x1, 0x9, 0xb, 0xe, 0x8, 0x1, 0x4, 0x101, 0x6, 0x80000001, 0x2, 0x3ff, 0x4266, 0x5, 0x7, 0x3, 0x7f, 0x8000, 0x80, 0x80000000, 0x4, 0x8, 0x5, 0x80000000, 0x10000, 0x4, 0x1, 0xa7c8, 0x2, 0x7, 0x10001, 0x6, 0x1, 0x6, 0xd48, 0xfffffffd, 0x9, 0x3, 0x0, 0x101, 0x3, 0x8, 0xff, 0x2, 0x7, 0x82, 0x677, 0x9, 0xfffffff7, 0x2, 0x8, 0x5, 0x8, 0x7f, 0x1000, 0x9, 0x8, 0x50f, 0x1c00000, 0x8f, 0x8, 0x717, 0x5, 0x1, 0xb63, 0xde, 0x80000001, 0x8, 0x1ff, 0x200, 0x4, 0x9a83, 0x3, 0x6, 0x6, 0xfe8, 0x5, 0x1, 0x7ff, 0x4, 0xd4, 0x9, 0x8001, 0xd164, 0xfff, 0x80000001, 0x6, 0x7, 0x8, 0x8, 0xe90a, 0xb125, 0xba, 0x6, 0x800, 0x0, 0x8, 0x7fffffff, 0x0, 0x3, 0x7, 0xb99c, 0x208, 0x8, 0x200, 0x10000, 0x2, 0x1, 0x9, 0x4, 0x401, 0x7eb, 0x81, 0x1, 0x6, 0x5, 0x2, 0x89, 0x1, 0xfff, 0x4, 0x6, 0x8001, 0xfffffffc, 0xfffffff7, 0x10001, 0x2, 0x2, 0x5, 0x7, 0x3, 0x7, 0x3, 0x221, 0x7da, 0x7, 0x2, 0x7fff, 0x3, 0x5, 0xc48f, 0xd83, 0x5, 0x7, 0x0, 0x7e8, 0x1, 0x1, 0xd, 0xa8ad, 0x8, 0x1, 0x1, 0x7, 0x3, 0x8, 0x9, 0x8, 0x7ff, 0x7, 0x1, 0x1, 0x1, 0x5, 0x100, 0x1, 0xa00000, 0x7, 0x3, 0xf, 0x4660, 0x9, 0x4d4, 0xfffffffe, 0xfffffff8, 0xa, 0x40000, 0x4, 0x16a27a47, 0x8, 0x3, 0x8, 0xfffff801, 0x8000, 0x1, 0x9, 0xfffffff9, 0x8, 0x6, 0xfffffffb, 0x1, 0x1, 0x3d, 0x73, 0x5, 0x25, 0x0, 0x4, 0x6c073d05, 0x2, 0xb, 0x1ff, 0x1ff, 0x6, 0x200, 0x80, 0x9, 0x17, 0x9, 0x4, 0x7, 0x7, 0x8, 0xd4, 0x4, 0x2, 0x60, 0xffffffdc, 0x6, 0x9, 0xf5e6, 0x7, 0x2, 0x1ff, 0x8, 0x3a0, 0x4, 0x71, 0x800, 0x7, 0x1, 0x1, 0x2, 0x7, 0xc5, 0x6, 0x0, 0x7, 0xc, 0x9, 0x6, 0x6000, 0x8, 0x8, 0x5, 0x240, 0x1000, 0x8, 0x4, 0xe, 0x4, 0xfffffffd, 0x8, 0x6, 0xa79, 0x0, 0x8001, 0x6, 0x8, 0xffff, 0xb9dd, 0x0, 0xee, 0x4, 0x0, 0x3, 0x80, 0x7, 0x80, 0xfffff183, 0x6, 0x0, 0x466a, 0xf, 0xfffffff9, 0x10001, 0x0, 0x0, 0xff, 0x7, 0x9, 0x7, 0x4a, 0x1000, 0x2, 0x5, 0x9, 0x4, 0x5, 0x2, 0x100, 0x80, 0x5, 0x14f, 0xffffff9b, 0x7, 0x3e471a27, 0x80000000, 0x7, 0x80000001, 0x4, 0x7c8, 0x8, 0x8, 0x1, 0x74, 0x1d844197, 0x6, 0x9, 0x6, 0x5, 0x3, 0xf3, 0x3, 0x2, 0x8000, 0x9, 0xfffffff4, 0x81, 0x6, 0x400, 0x8000, 0x3, 0x400, 0x6, 0x1, 0x9, 0x5, 0x7f88, 0x8ed1, 0x5, 0x9, 0xfffffff7, 0x1, 0x352, 0x4, 0x8, 0xab4a, 0x3, 0x2, 0x3, 0x202, 0x8001, 0x10001, 0x80000001, 0x1, 0x5, 0x0, 0x1, 0x8000, 0x9, 0x2, 0x3, 0x2, 0x2d, 0x400, 0x9, 0x7, 0xd0e6, 0xc0000000, 0x3257, 0x3, 0x8, 0x80000000, 0x7, 0x800, 0x8, 0x8, 0x1, 0x1, 0x101, 0x1, 0x5, 0x7, 0x2, 0x7, 0x9, 0x3, 0x9, 0x8, 0x6, 0x1000, 0x6, 0x9, 0x8, 0x8, 0x80000001, 0x3, 0x7, 0xbc, 0x2, 0x7, 0x3, 0x7, 0x0, 0x8, 0x3, 0x0, 0x0, 0x400, 0x4, 0x3, 0x6dd, 0xe00, 0x5, 0x7, 0x2, 0x4, 0x6, 0x10, 0x800, 0x5aa, 0xfffffff7, 0xab9, 0x8, 0xffff033c, 0x3, 0x2184, 0x6, 0xfffffff7, 0x0, 0x3, 0x6, 0x4, 0x3, 0x6, 0xfffffffe, 0x7, 0x7558, 0x4, 0x9, 0x4, 0x401, 0x3, 0x2, 0xfe6, 0x5, 0x7ff, 0x1000, 0x1, 0xff, 0xffffffff, 0xfffff32a, 0x74, 0xd14, 0xfffffffa, 0x8be5, 0x4, 0xda, 0x3, 0x3, 0x2, 0x7, 0x6, 0x1000, 0x3, 0x70, 0x3, 0x8, 0x6, 0x8001, 0x7ff, 0x8, 0x1, 0xf, 0xcb2d, 0x0, 0x9a9, 0x9, 0x2, 0x8, 0x6, 0x0, 0x3, 0x8000, 0x2, 0x7, 0x1, 0xbbb, 0x1a3a, 0x8, 0x101, 0x8, 0x3, 0x9, 0x0, 0x2, 0x4, 0x2, 0x7, 0x6, 0x2, 0x101, 0x6, 0x7, 0x7, 0x9, 0x9, 0x2, 0x9, 0x80, 0xff, 0x9, 0x2, 0x5, 0x7, 0x1, 0x5428, 0x34, 0x3ff, 0x5, 0x3b2, 0x4, 0x7, 0x7b, 0xd, 0x80000000, 0xa, 0x9, 0x5, 0x7, 0x401, 0x6, 0x4, 0x1, 0x8, 0x6, 0x3, 0x80, 0x3, 0x2, 0x101, 0x1, 0x6, 0xfffffff9, 0x5, 0xffffffff, 0x9043, 0x7901e84c, 0x1, 0x1, 0x0, 0x1, 0x6a, 0xc6, 0x0, 0xfff, 0xffff0001, 0x3, 0x5, 0xe9, 0x7, 0x8001, 0x8, 0x0, 0x0, 0x76d, 0x0, 0x101, 0xfddb, 0x6, 0x8, 0x2, 0x10000, 0x1dc9, 0x5, 0x1, 0x9, 0xfff, 0x989, 0x10, 0x0, 0x0, 0x9, 0xef9, 0x1000, 0x1, 0x82, 0x4, 0x2, 0x5, 0x2, 0x7fffffff, 0xffff, 0xc, 0x4, 0x3ff, 0x2, 0x81, 0x27, 0x43, 0xfffffff7, 0x9, 0x9, 0x7, 0xb2d, 0xf74, 0x9, 0x4, 0xc6, 0x1, 0x1, 0x7, 0x9, 0xd, 0x7, 0x0, 0x100, 0x3, 0x22e, 0x1, 0x6, 0x4, 0xde, 0x4, 0x3, 0x6, 0x8000, 0x6, 0x1ff, 0x0, 0x80000001, 0x1, 0x81, 0x1, 0x3, 0xf235, 0x345e, 0xd, 0x5, 0x4, 0x6, 0x2f33, 0x3, 0x1, 0x5, 0x5, 0x1000, 0x1, 0x2, 0x4, 0x0, 0x3, 0x2, 0x1, 0x7, 0x1, 0x0, 0xb60, 0xbde, 0x81, 0x9, 0x2c, 0x8, 0x4, 0x0, 0x80000001, 0x71, 0x40, 0x6, 0x10, 0x3, 0x80, 0x3, 0x3, 0x2, 0x9, 0x7, 0x9, 0x7fff, 0x9, 0x8, 0xfffffffd, 0x1, 0x6, 0x1, 0x8d2, 0xa41, 0x1e, 0x8001, 0xc63, 0x4, 0x6, 0x4, 0x5f4, 0x4000000, 0x2, 0x1c0, 0xfa, 0x9, 0x2, 0xfa2, 0x9c, 0x2, 0x0, 0x7fffffff, 0x10, 0x7ff, 0x8, 0x7f, 0x8, 0x80, 0x401, 0xc8, 0x3, 0x4, 0x9, 0x3ff, 0x800, 0x9, 0x2, 0x6736, 0x9766, 0x3, 0x285, 0x10001, 0x44e, 0x49fc, 0x2, 0x3, 0x3, 0x3, 0x3, 0xfffffc01, 0xe985, 0x0, 0x7, 0x64c, 0x1, 0x1, 0x8, 0xf, 0x1f, 0x3ff, 0x3, 0xfffffff9, 0x401, 0xa7, 0x7, 0x5, 0x1, 0x1, 0x0, 0x2, 0xfffff801, 0x8001, 0x89, 0x2c35, 0x4, 0xff, 0x6, 0x2, 0x3, 0xe3e, 0x6, 0x101, 0xfffffffc, 0x7fff, 0x7, 0x1, 0x5f21, 0x3, 0x9, 0xf, 0xc5f, 0x6, 0x7, 0xff, 0x3, 0x2, 0x2660, 0x4, 0xf4, 0xff, 0xfffffffb, 0xfffffffe, 0xfffffe01, 0x0, 0x8, 0x80, 0x10001, 0xd, 0x2, 0x8, 0x8, 0x7ff, 0x5, 0x1, 0x7f, 0x6, 0x7b, 0x5b6, 0x6, 0x7, 0x5, 0x0, 0x5, 0x80000001, 0x19c, 0x1, 0xa8a, 0x9016, 0xfffffff0, 0x366, 0x9, 0x3, 0x5, 0x4, 0x1, 0x9, 0xc, 0x5, 0x9, 0x200, 0x8, 0x8, 0x2, 0x7, 0x9, 0x8f58, 0x80000000, 0x4, 0xfffffff8, 0xfffff000, 0x62c, 0x0, 0x81, 0x7ff, 0x9, 0x1]}) 860.019235ms ago: executing program 4 (id=2520): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000000)=""/22, 0x16, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) 800.520958ms ago: executing program 4 (id=2521): r0 = socket(0x10, 0x803, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000140)=0x79ae, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x1d, r2, 0x3}, 0x10, &(0x7f0000000080)={&(0x7f0000000300)=@can={{0x3, 0x0, 0x1, 0x1}, 0x6, 0x4, 0x0, 0x0, "d9bd3ac2d97360a1"}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 800.256358ms ago: executing program 4 (id=2523): mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xc}}, {@allow_other}]}}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f000000c1c0)={0x2020}, 0x2020) 740.724383ms ago: executing program 4 (id=2525): r0 = socket(0x2, 0x3, 0xa) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) recvfrom$unix(r0, 0x0, 0x0, 0x12122, 0x0, 0x0) 680.940632ms ago: executing program 4 (id=2528): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x25) 680.67596ms ago: executing program 4 (id=2530): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)="cca19ba75fd6d08889f44f233e5a34330b050000000000000000000000000000000013f455458a1e", 0xfffffffffffffd4e, 0x4044887, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x40) 300.754829ms ago: executing program 2 (id=2533): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) 300.596257ms ago: executing program 2 (id=2534): r0 = timerfd_create(0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 240.700561ms ago: executing program 2 (id=2535): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="00000000010000000000000084"], 0x48}}, 0x0) 240.040614ms ago: executing program 2 (id=2537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xaece, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 180.53151ms ago: executing program 0 (id=2538): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') fchdir(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=""/203, 0xcb) 180.332568ms ago: executing program 2 (id=2539): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x81000000) fcntl$setpipe(r0, 0x407, 0x4) 180.199435ms ago: executing program 0 (id=2540): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x24, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xb}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) 110.794968ms ago: executing program 0 (id=2541): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 110.632846ms ago: executing program 2 (id=2542): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 110.515681ms ago: executing program 0 (id=2543): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000002c0)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 64.364ms ago: executing program 0 (id=2544): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=2545): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) munlock(&(0x7f0000fde000/0x1000)=nil, 0x1000) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:20623' (ED25519) to the list of known hosts. [ 40.986687][ T5930] cgroup: Unknown subsys name 'net' [ 41.092416][ T5930] cgroup: Unknown subsys name 'cpuset' [ 41.097797][ T5930] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 41.859495][ T5930] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.255630][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.262145][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.262446][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.265432][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.267456][ T5950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.269557][ T5947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.271960][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.273813][ T5954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.275453][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.280383][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.280450][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.282726][ T5950] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.285947][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.287097][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.289700][ T5954] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.290251][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.290990][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.291341][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.291570][ T5953] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.293991][ T5954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.298117][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.304288][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.311906][ T5955] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.316295][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.463449][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 44.474502][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 44.518479][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 44.679379][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.682801][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.685705][ T5942] bridge_slave_0: entered allmulticast mode [ 44.688998][ T5942] bridge_slave_0: entered promiscuous mode [ 44.719191][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 44.727658][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.730407][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.732758][ T5942] bridge_slave_1: entered allmulticast mode [ 44.734862][ T5942] bridge_slave_1: entered promiscuous mode [ 44.738578][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.740752][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.743459][ T5941] bridge_slave_0: entered allmulticast mode [ 44.746562][ T5941] bridge_slave_0: entered promiscuous mode [ 44.788481][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.790644][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.792718][ T5941] bridge_slave_1: entered allmulticast mode [ 44.794934][ T5941] bridge_slave_1: entered promiscuous mode [ 44.807027][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.809183][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.811238][ T5948] bridge_slave_0: entered allmulticast mode [ 44.813344][ T5948] bridge_slave_0: entered promiscuous mode [ 44.816829][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.852788][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.854770][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.856735][ T5948] bridge_slave_1: entered allmulticast mode [ 44.859358][ T5948] bridge_slave_1: entered promiscuous mode [ 44.862232][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.866326][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.914998][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.917602][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.919660][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.921705][ T5949] bridge_slave_0: entered allmulticast mode [ 44.924266][ T5949] bridge_slave_0: entered promiscuous mode [ 44.927796][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.934183][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.946572][ T5942] team0: Port device team_slave_0 added [ 44.966413][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.968544][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.971776][ T5949] bridge_slave_1: entered allmulticast mode [ 44.973877][ T5949] bridge_slave_1: entered promiscuous mode [ 45.004402][ T5942] team0: Port device team_slave_1 added [ 45.007685][ T5941] team0: Port device team_slave_0 added [ 45.036761][ T5948] team0: Port device team_slave_0 added [ 45.041494][ T5941] team0: Port device team_slave_1 added [ 45.044563][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.047345][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.050236][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.057219][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.063561][ T5948] team0: Port device team_slave_1 added [ 45.082813][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.085667][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.087797][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.095159][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.119530][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.121530][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.128559][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.154046][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.156607][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.166725][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.176663][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.179560][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.188966][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.194729][ T5949] team0: Port device team_slave_0 added [ 45.197474][ T5949] team0: Port device team_slave_1 added [ 45.210882][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.213192][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.220435][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.247491][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.250394][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.260394][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.283015][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.285705][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.295642][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.313301][ T5942] hsr_slave_0: entered promiscuous mode [ 45.315441][ T5942] hsr_slave_1: entered promiscuous mode [ 45.336480][ T5941] hsr_slave_0: entered promiscuous mode [ 45.340036][ T5941] hsr_slave_1: entered promiscuous mode [ 45.342940][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.345434][ T5941] Cannot create hsr debugfs directory [ 45.356997][ T5948] hsr_slave_0: entered promiscuous mode [ 45.360099][ T5948] hsr_slave_1: entered promiscuous mode [ 45.362874][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.365680][ T5948] Cannot create hsr debugfs directory [ 45.405085][ T5949] hsr_slave_0: entered promiscuous mode [ 45.407891][ T5949] hsr_slave_1: entered promiscuous mode [ 45.411859][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.414560][ T5949] Cannot create hsr debugfs directory [ 45.704573][ T5941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.712449][ T5941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.721810][ T5941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.729270][ T5941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.750109][ T5948] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.755276][ T5948] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.768599][ T5948] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.777129][ T5948] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.798112][ T5942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.803527][ T5942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.808510][ T5942] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.815275][ T5942] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.846220][ T5949] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.855000][ T5949] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.865169][ T5949] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.875090][ T5949] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.906034][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.917434][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.932402][ T4628] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.935262][ T4628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.951386][ T4628] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.954054][ T4628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.975899][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.992664][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.002783][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.011765][ T4628] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.013780][ T4628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.026844][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.030902][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.033029][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.047318][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.049474][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.062001][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.072228][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.074297][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.088091][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.095668][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.097991][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.113107][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.115978][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.161106][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.188262][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.195491][ T5941] veth0_vlan: entered promiscuous mode [ 46.211325][ T5941] veth1_vlan: entered promiscuous mode [ 46.235965][ T5941] veth0_macvtap: entered promiscuous mode [ 46.245625][ T5948] veth0_vlan: entered promiscuous mode [ 46.248020][ T5941] veth1_macvtap: entered promiscuous mode [ 46.259915][ T5948] veth1_vlan: entered promiscuous mode [ 46.271546][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.275095][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.277940][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.286796][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.294037][ T5941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.296581][ T5941] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.299686][ T5946] Bluetooth: hci0: command tx timeout [ 46.302281][ T5941] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.304725][ T5941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.308665][ T5948] veth0_macvtap: entered promiscuous mode [ 46.314201][ T5948] veth1_macvtap: entered promiscuous mode [ 46.338587][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.342284][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.346140][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.356815][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.360670][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.364222][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.369642][ T5948] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.372117][ T5948] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.374546][ T5948] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.377040][ T5948] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.379398][ T5946] Bluetooth: hci3: command tx timeout [ 46.379981][ T5955] Bluetooth: hci1: command tx timeout [ 46.379989][ T5945] Bluetooth: hci2: command tx timeout [ 46.401104][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.404379][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.405161][ T5942] veth0_vlan: entered promiscuous mode [ 46.412418][ T5949] veth0_vlan: entered promiscuous mode [ 46.427817][ T4796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.428028][ T5942] veth1_vlan: entered promiscuous mode [ 46.430555][ T4796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.441293][ T5949] veth1_vlan: entered promiscuous mode [ 46.476259][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.483111][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.484003][ T5941] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.486158][ T5942] veth0_macvtap: entered promiscuous mode [ 46.495848][ T5942] veth1_macvtap: entered promiscuous mode [ 46.510010][ T5949] veth0_macvtap: entered promiscuous mode [ 46.513727][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.516787][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.520230][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.523164][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.526806][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.533778][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.537093][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.541256][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.544265][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.550105][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.552495][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.553056][ T5949] veth1_macvtap: entered promiscuous mode [ 46.554729][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.562907][ T5942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.565397][ T5942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.567833][ T5942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.570847][ T5942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.578920][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.581951][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.584705][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.587651][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.596463][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.599880][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.603356][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.612138][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.615138][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.617866][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.621556][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.624481][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.627405][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.631324][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.643872][ T5949] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.647489][ T5949] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.651778][ T5949] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.655222][ T5949] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.695072][ T4628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.695880][ T6008] Bluetooth: MGMT ver 1.23 [ 46.698027][ T4628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.708086][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.712837][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.723888][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.726044][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.744888][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.747168][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.902578][ T6034] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.105114][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'. [ 47.310115][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 47.391783][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'. [ 47.431673][ T6085] loop6: detected capacity change from 0 to 63 [ 47.568234][ T6097] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 47.626742][ T6103] process 'syz.1.47' launched './file1' with NULL argv: empty string added [ 47.651386][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 47.940536][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 48.289468][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 48.379234][ T5955] Bluetooth: hci0: command tx timeout [ 48.458868][ T5955] Bluetooth: hci3: command tx timeout [ 48.458951][ T5946] Bluetooth: hci1: command tx timeout [ 48.460512][ T5955] Bluetooth: hci2: command tx timeout [ 48.502068][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'. [ 48.838816][ T39] audit: type=1326 audit(1737382504.766:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.3.93" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 48.844600][ T39] audit: type=1326 audit(1737382504.766:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.3.93" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 48.855363][ T39] audit: type=1326 audit(1737382504.766:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.3.93" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 48.864137][ T39] audit: type=1326 audit(1737382504.766:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.3.93" exe="/syz-executor" sig=0 arch=40000003 syscall=148 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 48.872279][ T39] audit: type=1326 audit(1737382504.766:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6206 comm="syz.3.93" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 48.939705][ T6217] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.473355][ T6265] Illegal XDP return value 4294967294 on prog (id 24) dev N/A, expect packet loss! [ 49.573673][ T6278] warning: `syz.2.125' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.678032][ T6288] netlink: 16 bytes leftover after parsing attributes in process `syz.2.131'. [ 49.685987][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.132'. [ 49.701593][ T6290] netlink: 277 bytes leftover after parsing attributes in process `syz.3.132'. [ 49.730413][ T6292] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 50.116838][ T6351] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 50.335360][ T6366] bridee_slave_0: renamed from lo (while UP) [ 50.364441][ T6368] trusted_key: syz.3.167 sent an empty control message without MSG_MORE. [ 50.453597][ T6379] gfs2: path_lookup on  returned error -2 [ 50.471476][ T5955] Bluetooth: hci0: command tx timeout [ 50.539168][ T5955] Bluetooth: hci1: command tx timeout [ 50.539313][ T5945] Bluetooth: hci3: command tx timeout [ 50.540798][ T5955] Bluetooth: hci2: command tx timeout [ 50.855437][ T6418] capability: warning: `syz.2.192' uses deprecated v2 capabilities in a way that may be insecure [ 51.647529][ T6490] sp0: Synchronizing with TNC [ 51.651896][ T6490] sp0: Found TNC [ 51.814154][ T6163] hid-generic 0005:15C2:FFFA.0002: item fetching failed at offset 0/2 [ 51.822886][ T6163] hid-generic 0005:15C2:FFFA.0002: probe with driver hid-generic failed with error -22 [ 51.845037][ T6512] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 52.198296][ T6557] __nla_validate_parse: 8 callbacks suppressed [ 52.198306][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.246'. [ 52.281755][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 52.312941][ T5991] IPVS: starting estimator thread 0... [ 52.410957][ T6577] IPVS: using max 36 ests per chain, 86400 per kthread [ 52.470032][ T6596] netlink: 'syz.1.267': attribute type 4 has an invalid length. [ 52.470880][ T6598] Process accounting resumed [ 52.539094][ T5955] Bluetooth: hci0: command tx timeout [ 52.619016][ T5955] Bluetooth: hci3: command tx timeout [ 52.619035][ T5946] Bluetooth: hci1: command tx timeout [ 52.628926][ T5946] Bluetooth: hci2: command tx timeout [ 53.040347][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 53.042890][ T6688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.045011][ T6688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.050950][ T6688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.053109][ T6688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.294917][ T6705] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 53.438984][ T6732] netlink: 'syz.3.327': attribute type 25 has an invalid length. [ 53.441312][ T6732] netlink: 'syz.3.327': attribute type 7 has an invalid length. [ 54.218902][ T6163] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.378976][ T6163] usb 8-1: Using ep0 maxpacket: 8 [ 54.382858][ T6163] usb 8-1: config 0 has no interfaces? [ 54.386104][ T6163] usb 8-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=76.8e [ 54.388652][ T6163] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.392166][ T6163] usb 8-1: Product: syz [ 54.393852][ T6163] usb 8-1: Manufacturer: syz [ 54.395694][ T6163] usb 8-1: SerialNumber: syz [ 54.399988][ T6163] usb 8-1: config 0 descriptor?? [ 54.611642][ T833] usb 8-1: USB disconnect, device number 2 [ 54.851292][ T6853] ======================================================= [ 54.851292][ T6853] WARNING: The mand mount option has been deprecated and [ 54.851292][ T6853] and is ignored by this kernel. Remove the mand [ 54.851292][ T6853] option from the mount to silence this warning. [ 54.851292][ T6853] ======================================================= [ 55.294174][ T6898] netlink: 52 bytes leftover after parsing attributes in process `syz.3.403'. [ 55.517322][ T6927] netlink: 188 bytes leftover after parsing attributes in process `syz.3.416'. [ 55.897680][ T6970] netlink: 10 bytes leftover after parsing attributes in process `syz.1.436'. [ 56.333783][ T7010] syz.3.455 (7010) used greatest stack depth: 20688 bytes left [ 56.353475][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 56.402646][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.458'. [ 56.746139][ T6012] hid-generic 0000:0000:0003.0003: unknown main item tag 0x6 [ 56.749632][ T6012] hid-generic 0000:0000:0003.0003: unknown main item tag 0x2 [ 56.751938][ T6012] hid-generic 0000:0000:0003.0003: unknown main item tag 0x3 [ 56.754708][ T6012] hid-generic 0000:0000:0003.0003: unknown main item tag 0x2 [ 56.757780][ T6012] hid-generic 0000:0000:0003.0003: unknown main item tag 0x7 [ 56.761571][ T6012] hid-generic 0000:0000:0003.0003: unknown main item tag 0x2 [ 56.764681][ T6012] hid-generic 0000:0000:0003.0003: unknown main item tag 0x3 [ 56.767702][ T6012] hid-generic 0000:0000:0003.0003: unknown main item tag 0x2 [ 56.771745][ T6012] hid-generic 0000:0000:0003.0003: unknown main item tag 0x7 [ 56.774870][ T6012] hid-generic 0000:0000:0003.0003: unknown main item tag 0x7 [ 56.778031][ T6012] hid-generic 0000:0000:0003.0003: unknown main item tag 0x2 [ 56.781943][ T6012] hid-generic 0000:0000:0003.0003: unknown main item tag 0x3 [ 56.810427][ T6012] hid-generic 0000:0000:0003.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 57.052609][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 57.090785][ T39] audit: type=1326 audit(1737382513.026:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.0.494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 57.096887][ T39] audit: type=1326 audit(1737382513.026:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.0.494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 57.106044][ T39] audit: type=1326 audit(1737382513.026:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.0.494" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 57.113762][ T39] audit: type=1326 audit(1737382513.026:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.0.494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 57.119965][ T39] audit: type=1326 audit(1737382513.026:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.0.494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 57.127790][ T39] audit: type=1326 audit(1737382513.026:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.0.494" exe="/syz-executor" sig=0 arch=40000003 syscall=279 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 57.138024][ T39] audit: type=1326 audit(1737382513.026:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.0.494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 57.145064][ T39] audit: type=1326 audit(1737382513.026:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.0.494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 57.151306][ T39] audit: type=1326 audit(1737382513.026:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.0.494" exe="/syz-executor" sig=0 arch=40000003 syscall=280 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 57.158961][ T39] audit: type=1326 audit(1737382513.026:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7096 comm="syz.0.494" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 57.423030][ T7140] vcan0: tx drop: invalid da for name 0x000000000000c700 [ 57.539093][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'. [ 57.575320][ T7158] wireguard0: entered promiscuous mode [ 57.577247][ T7158] wireguard0: entered allmulticast mode [ 57.608889][ T1015] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.759120][ T1015] usb 5-1: Using ep0 maxpacket: 8 [ 57.763518][ T1015] usb 5-1: config 0 has no interfaces? [ 57.767419][ T1015] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=76.8e [ 57.771388][ T1015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.774678][ T1015] usb 5-1: Product: syz [ 57.776385][ T1015] usb 5-1: Manufacturer: syz [ 57.778285][ T1015] usb 5-1: SerialNumber: syz [ 57.782731][ T1015] usb 5-1: config 0 descriptor?? [ 57.847590][ T7165] syz.1.527 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 57.905784][ T7172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.530'. [ 57.993431][ T6012] usb 5-1: USB disconnect, device number 2 [ 58.360428][ T7210] IPVS: Error joining to the multicast group [ 59.521853][ T7254] netlink: 76 bytes leftover after parsing attributes in process `syz.2.569'. [ 59.628896][ T7265] netlink: 40 bytes leftover after parsing attributes in process `syz.2.575'. [ 59.631677][ T7265] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073692774399) [ 59.634684][ T7265] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 59.778980][ T1015] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.939730][ T1015] usb 6-1: Using ep0 maxpacket: 8 [ 59.949582][ T1015] usb 6-1: config 0 has no interfaces? [ 59.955627][ T1015] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=76.8e [ 59.958209][ T1015] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.961184][ T1015] usb 6-1: Product: syz [ 59.962438][ T1015] usb 6-1: Manufacturer: syz [ 59.963788][ T1015] usb 6-1: SerialNumber: syz [ 59.970178][ T1015] usb 6-1: config 0 descriptor?? [ 60.013953][ T7312] netlink: 52 bytes leftover after parsing attributes in process `syz.2.596'. [ 60.178132][ T1015] usb 6-1: USB disconnect, device number 2 [ 60.574344][ T7340] netlink: 'syz.0.608': attribute type 21 has an invalid length. [ 60.577579][ T7340] netlink: 'syz.0.608': attribute type 1 has an invalid length. [ 60.791106][ T7355] raw_sendmsg: syz.1.615 forgot to set AF_INET. Fix it! [ 61.034400][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'. [ 61.036909][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.623'. [ 61.329833][ T25] e1000 0000:00:06.0 eth0: Reset adapter [ 63.500039][ T833] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 70.861475][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.863389][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.113591][ T7472] netlink: zone id is out of range [ 72.231674][ T7488] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.234354][ T7488] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.305217][ T7488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.317373][ T7488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.404619][ T7488] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.408219][ T7488] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.413480][ T7488] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.417038][ T7488] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.639086][ T5955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.642906][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.646094][ T5955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.649290][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.651893][ T5955] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.654481][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.729328][ T7506] chnl_net:caif_netlink_parms(): no params data found [ 72.807969][ T7506] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.820332][ T7506] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.822472][ T7506] bridge_slave_0: entered allmulticast mode [ 72.824698][ T7506] bridge_slave_0: entered promiscuous mode [ 72.854611][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.860708][ T7506] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.862772][ T7506] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.864849][ T7506] bridge_slave_1: entered allmulticast mode [ 72.868428][ T7506] bridge_slave_1: entered promiscuous mode [ 72.902043][ T7506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.909196][ T7506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.929159][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.958757][ T7539] netlink: 'syz.2.680': attribute type 1 has an invalid length. [ 72.983215][ T7506] team0: Port device team_slave_0 added [ 72.987363][ T7506] team0: Port device team_slave_1 added [ 73.035956][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.053043][ T7506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.055633][ T7506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.063316][ T7506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.068470][ T7506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.070749][ T7506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.077915][ T7506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.112929][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.129242][ T7506] hsr_slave_0: entered promiscuous mode [ 73.131531][ T7506] hsr_slave_1: entered promiscuous mode [ 73.133636][ T7506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.135865][ T7506] Cannot create hsr debugfs directory [ 73.202063][ T7506] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.205561][ T7506] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.208661][ T7506] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.214167][ T7506] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.227170][ T7506] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.229314][ T7506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.231462][ T7506] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.233796][ T7506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.261663][ T11] bridge_slave_1: left allmulticast mode [ 73.263440][ T11] bridge_slave_1: left promiscuous mode [ 73.265704][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.270995][ T11] bridge_slave_0: left allmulticast mode [ 73.272753][ T11] bridge_slave_0: left promiscuous mode [ 73.274845][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.497746][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.503029][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.506449][ T11] bond0 (unregistering): Released all slaves [ 73.568518][ T7579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.580670][ T7579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.584952][ T7579] bond0 (unregistering): Released all slaves [ 73.591638][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.594950][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.634080][ T7506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.643354][ T7506] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.647648][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.649751][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.657062][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.659168][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.674232][ T7506] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.677500][ T7506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.758122][ T7506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.784885][ T11] hsr_slave_0: left promiscuous mode [ 73.786975][ T11] hsr_slave_1: left promiscuous mode [ 73.792581][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.794779][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.800626][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.802900][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.825576][ T11] veth1_macvtap: left promiscuous mode [ 73.828142][ T11] veth0_macvtap: left promiscuous mode [ 73.830770][ T11] veth1_vlan: left promiscuous mode [ 73.832472][ T11] veth0_vlan: left promiscuous mode [ 73.900739][ T7615] binder: 7614:7615 ioctl c018620c 20000400 returned -1 [ 74.211644][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 74.211660][ T39] audit: type=1326 audit(1737382530.146:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.1.711" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x0 [ 74.386086][ T11] team0 (unregistering): Port device team_slave_1 removed [ 74.440080][ T11] team0 (unregistering): Port device team_slave_0 removed [ 74.699825][ T5955] Bluetooth: hci3: command tx timeout [ 74.924505][ T7506] veth0_vlan: entered promiscuous mode [ 74.932057][ T7506] veth1_vlan: entered promiscuous mode [ 74.946719][ T7506] veth0_macvtap: entered promiscuous mode [ 74.952979][ T7506] veth1_macvtap: entered promiscuous mode [ 74.972682][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.975627][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.980430][ T7506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.994198][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.997421][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.001522][ T7506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.005234][ T7506] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.007728][ T7506] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.011175][ T7506] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.013690][ T7506] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.041163][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.044318][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.053933][ T4796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.056904][ T4796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.324275][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'. [ 75.551710][ T7710] netlink: 16 bytes leftover after parsing attributes in process `syz.1.731'. [ 75.609045][ T5981] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 75.711578][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.740'. [ 75.770146][ T5981] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 75.774117][ T5981] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.777690][ T5981] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.798761][ T5981] usb 9-1: config 0 interface 0 has no altsetting 0 [ 75.801798][ T5981] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.804432][ T5981] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.807503][ T5981] usb 9-1: config 0 interface 0 has no altsetting 0 [ 75.810361][ T5981] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.813035][ T5981] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.816145][ T5981] usb 9-1: config 0 interface 0 has no altsetting 0 [ 75.819023][ T5981] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.821743][ T5981] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.824832][ T5981] usb 9-1: config 0 interface 0 has no altsetting 0 [ 75.827420][ T5981] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.830234][ T5981] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.834132][ T5981] usb 9-1: config 0 interface 0 has no altsetting 0 [ 75.836760][ T5981] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.839572][ T5981] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.842689][ T5981] usb 9-1: config 0 interface 0 has no altsetting 0 [ 75.845492][ T5981] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.848049][ T5981] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.851773][ T5981] usb 9-1: config 0 interface 0 has no altsetting 0 [ 75.854380][ T5981] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 75.856942][ T5981] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 75.860951][ T5981] usb 9-1: config 0 interface 0 has no altsetting 0 [ 75.864266][ T5981] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 75.866869][ T5981] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 75.869487][ T5981] usb 9-1: Product: syz [ 75.870775][ T5981] usb 9-1: Manufacturer: syz [ 75.872164][ T5981] usb 9-1: SerialNumber: syz [ 75.877876][ T5981] usb 9-1: config 0 descriptor?? [ 75.900758][ T5981] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 76.101402][ T30] usb 9-1: USB disconnect, device number 2 [ 76.108697][ T30] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 76.636160][ T7797] net veth1_virt_wifi virt_wifi0: invalid flags given to default FDB implementation [ 76.779089][ T5955] Bluetooth: hci3: command tx timeout [ 76.815944][ T7826] vxcan3: entered promiscuous mode [ 76.817447][ T7826] vxcan3: entered allmulticast mode [ 76.854667][ T7832] netlink: 79 bytes leftover after parsing attributes in process `syz.0.780'. [ 76.979799][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.787'. [ 76.982735][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.787'. [ 77.021227][ T7855] netlink: 60 bytes leftover after parsing attributes in process `syz.2.792'. [ 77.682644][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.825'. [ 77.697164][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.825'. [ 78.299012][ T6006] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.375062][ T7976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.842'. [ 78.479075][ T6006] usb 5-1: Using ep0 maxpacket: 8 [ 78.490827][ T6006] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 78.493750][ T6006] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 78.497757][ T7986] @: renamed from vlan0 (while UP) [ 78.498055][ T6006] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 78.504467][ T6006] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 78.508845][ T6006] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 78.514044][ T6006] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 78.516701][ T6006] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 78.520834][ T6006] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 78.524173][ T6006] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 78.527356][ T6006] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 78.531525][ T6006] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 78.533722][ T6006] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 78.536917][ T6006] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 78.540995][ T6006] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 78.544597][ T6006] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 78.550313][ T6006] usb 5-1: string descriptor 0 read error: -22 [ 78.552335][ T6006] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 78.554971][ T6006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.562036][ T6006] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 78.606743][ T7994] netlink: 'syz.1.850': attribute type 1 has an invalid length. [ 78.771811][ T6006] usb 5-1: USB disconnect, device number 3 [ 78.859297][ T5955] Bluetooth: hci3: command tx timeout [ 79.083065][ T8023] mmap: syz.1.863 (8023) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.161847][ T8032] overlayfs: failed to clone lowerpath [ 79.380009][ T8062] netlink: 'syz.0.881': attribute type 9 has an invalid length. [ 79.424841][ T8068] input: syz1 as /devices/virtual/input/input7 [ 79.630905][ T8086] /dev/nullb0: Can't lookup blockdev [ 79.790643][ T5981] kernel write not supported for file /adsp1 (pid: 5981 comm: kworker/2:3) [ 80.058373][ T5955] Bluetooth: hci2: Invalid handle: 0x73c2 > 0x0eff [ 80.819310][ T5981] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 80.938864][ T5955] Bluetooth: hci3: command tx timeout [ 81.111600][ T8] cfg80211: failed to load regulatory.db [ 91.347979][ T8324] macsec0: entered allmulticast mode [ 91.487703][ T8354] syz.1.968 uses obsolete (PF_INET,SOCK_PACKET) [ 91.760571][ T8362] veth1_vlan: left promiscuous mode [ 92.592341][ T8423] __nla_validate_parse: 3 callbacks suppressed [ 92.592355][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 92.597983][ T8423] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1003'. [ 92.601632][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 92.772556][ T39] audit: type=1326 audit(1737382548.706:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8383 comm="syz.0.984" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7fc00000 [ 92.796570][ T8449] team0: entered promiscuous mode [ 92.799265][ T8449] team_slave_0: entered promiscuous mode [ 92.799531][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1017'. [ 92.801674][ T8449] team_slave_1: entered promiscuous mode [ 92.803625][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1017'. [ 92.810020][ T8449] batadv_slave_1: entered promiscuous mode [ 93.069641][ T8485] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 93.074257][ T8482] IPVS: stopping master sync thread 8485 ... [ 93.108260][ T8489] net veth1_virt_wifi virt_wifi0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 93.282197][ T8500] Process accounting resumed [ 93.566450][ T39] audit: type=1326 audit(1737382549.496:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.4.1047" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 93.580893][ T39] audit: type=1326 audit(1737382549.496:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.4.1047" exe="/syz-executor" sig=0 arch=40000003 syscall=332 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 93.599087][ T39] audit: type=1326 audit(1737382549.496:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.4.1047" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 93.605276][ T39] audit: type=1326 audit(1737382549.496:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.4.1047" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 93.625506][ T39] audit: type=1326 audit(1737382549.496:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.4.1047" exe="/syz-executor" sig=0 arch=40000003 syscall=292 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 93.636632][ T39] audit: type=1326 audit(1737382549.496:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.4.1047" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 93.659968][ T39] audit: type=1326 audit(1737382549.496:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.4.1047" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 93.668488][ T39] audit: type=1326 audit(1737382549.496:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.4.1047" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 93.677866][ T39] audit: type=1326 audit(1737382549.496:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.4.1047" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 93.995001][ T8561] netem: change failed [ 94.024221][ T8567] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1070'. [ 94.209995][ T8588] netlink: 'syz.2.1079': attribute type 2 has an invalid length. [ 94.213321][ T8588] netlink: 'syz.2.1079': attribute type 4 has an invalid length. [ 94.351991][ T8596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1083'. [ 94.368844][ T5323] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 94.518798][ T5323] usb 9-1: Using ep0 maxpacket: 8 [ 94.521635][ T5323] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 94.524116][ T5323] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.526922][ T5323] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.529818][ T5323] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.532759][ T5323] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.536459][ T5323] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.539242][ T5323] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.752028][ T5323] usb 9-1: GET_CAPABILITIES returned 0 [ 94.753769][ T5323] usbtmc 9-1:16.0: can't read capabilities [ 94.956278][ T5991] usb 9-1: USB disconnect, device number 3 [ 96.995155][ T8319] udevd[8319]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 97.046592][ T8] IPVS: starting estimator thread 0... [ 97.128886][ T8835] IPVS: using max 37 ests per chain, 88800 per kthread [ 97.258885][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 97.259023][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 97.265694][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 97.349402][ T99] wlan1: Trigger new scan to find an IBSS to join [ 97.423101][ T8899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1207'. [ 97.451076][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1208'. [ 97.454505][ T8903] netlink: 173 bytes leftover after parsing attributes in process `syz.4.1208'. [ 97.487002][ T8907] netlink: 'syz.4.1211': attribute type 4 has an invalid length. [ 98.368792][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 98.518864][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 98.522352][ T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 98.525533][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 98.528315][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.532169][ T8] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.535820][ T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.538258][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.730543][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1249'. [ 98.746571][ T8] usb 6-1: GET_CAPABILITIES returned 0 [ 98.748192][ T8] usbtmc 6-1:16.0: can't read capabilities [ 98.851775][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1257'. [ 98.882124][ T9010] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm [ 98.953167][ T5991] usb 6-1: USB disconnect, device number 3 [ 99.049217][ T6006] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 99.209380][ T6006] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 99.212540][ T6006] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.215082][ T6006] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.218260][ T6006] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.221149][ T6006] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.224049][ T6006] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.227590][ T6006] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.230425][ T6006] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.233129][ T6006] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.236064][ T6006] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.238605][ T6006] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.241148][ T6006] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.244216][ T6006] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.246790][ T6006] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.249440][ T6006] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.252471][ T6006] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.255100][ T6006] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.257545][ T6006] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.260596][ T6006] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.263264][ T6006] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.265813][ T6006] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.269054][ T6006] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.271691][ T6006] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 99.274167][ T6006] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.277162][ T6006] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.280454][ T6006] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 99.282912][ T6006] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 99.285188][ T6006] usb 5-1: Product: syz [ 99.286351][ T6006] usb 5-1: Manufacturer: syz [ 99.287643][ T6006] usb 5-1: SerialNumber: syz [ 99.290322][ T6006] usb 5-1: config 0 descriptor?? [ 99.293646][ T6006] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 99.503938][ T833] usb 5-1: USB disconnect, device number 4 [ 99.508594][ T833] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 99.800310][ T39] kauditd_printk_skb: 74 callbacks suppressed [ 99.800331][ T39] audit: type=1326 audit(1737382555.726:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.4.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7fc00000 [ 99.808855][ T39] audit: type=1326 audit(1737382555.726:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.4.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf712e579 code=0x7fc00000 [ 99.815484][ T39] audit: type=1326 audit(1737382555.726:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.4.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7fc00000 [ 99.821811][ T39] audit: type=1326 audit(1737382555.726:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.4.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7fc00000 [ 99.827079][ T39] audit: type=1326 audit(1737382555.726:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.4.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7fc00000 [ 99.832574][ T39] audit: type=1326 audit(1737382555.736:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.4.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7fc00000 [ 99.837797][ T39] audit: type=1326 audit(1737382555.736:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.4.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7fc00000 [ 99.843222][ T39] audit: type=1326 audit(1737382555.736:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.4.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7fc00000 [ 99.848507][ T39] audit: type=1326 audit(1737382555.736:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.4.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7fc00000 [ 99.853951][ T39] audit: type=1326 audit(1737382555.736:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.4.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7fc00000 [ 100.041253][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1290'. [ 100.217210][ T9112] netlink: 'syz.4.1303': attribute type 10 has an invalid length. [ 100.286371][ T9112] infiniband syz1: set active [ 100.287860][ T9112] infiniband syz1: added team_slave_0 [ 100.322591][ T9112] RDS/IB: syz1: added [ 100.324198][ T9112] smc: adding ib device syz1 with port count 1 [ 100.326687][ T9112] smc: ib device syz1 port 1 has pnetid [ 100.728906][ T35] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 100.911065][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.915372][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.919160][ T35] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 100.924376][ T35] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.928014][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.932497][ T35] usb 5-1: config 0 descriptor?? [ 100.937341][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1324'. [ 100.961250][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1324'. [ 100.997590][ T9163] syzkaller1: entered promiscuous mode [ 101.000025][ T9163] syzkaller1: entered allmulticast mode [ 101.255709][ T9175] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1330'. [ 101.264519][ T9175] Zero length message leads to an empty skb [ 101.351146][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.353741][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.355833][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.357989][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.363840][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.365976][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.375785][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.377830][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.379911][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.381983][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.384000][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.386052][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.388106][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.391115][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.393403][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.395548][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.397673][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.401559][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.404702][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.406854][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.409581][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.411725][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.414020][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.416281][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.418398][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.421031][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.423667][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.426441][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.430406][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.432519][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.435052][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.437796][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.437990][ T9188] input: syz0 as /devices/virtual/input/input8 [ 101.445349][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.449832][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.453440][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.456329][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.459876][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.462831][ T35] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 101.466517][ T35] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 101.486751][ T35] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 101.556568][ T9206] syz.2.1345[9206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.556622][ T9206] syz.2.1345[9206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.561478][ T9206] syz.2.1345[9206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.602359][ T25] usb 5-1: USB disconnect, device number 5 [ 101.939255][ T9243] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1361'. [ 101.941932][ T9243] netlink: 'syz.4.1361': attribute type 7 has an invalid length. [ 101.944145][ T9243] netlink: 'syz.4.1361': attribute type 8 has an invalid length. [ 101.946351][ T9243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1361'. [ 102.248956][ T5991] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 102.280884][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1367'. [ 102.286679][ T9255] tipc: Started in network mode [ 102.288496][ T9255] tipc: Node identity ac14140f, cluster identity 4711 [ 102.291763][ T9255] tipc: New replicast peer: 255.255.255.255 [ 102.294700][ T9255] tipc: Enabled bearer , priority 10 [ 102.309193][ T4628] wlan1: Trigger new scan to find an IBSS to join [ 102.412133][ T5991] usb 9-1: Using ep0 maxpacket: 8 [ 102.415274][ T5991] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 102.417665][ T5991] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.420891][ T5991] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.428750][ T5991] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.432001][ T5991] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.435527][ T5991] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 102.438140][ T5991] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.648329][ T5991] usb 9-1: usb_control_msg returned -32 [ 102.650648][ T5991] usbtmc 9-1:16.0: can't read capabilities [ 102.694933][ T9289] could not open pipe file descriptor [ 102.899200][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1391'. [ 103.004243][ T9315] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 103.007078][ T5991] usb 9-1: USB disconnect, device number 4 [ 103.333886][ T99] wlan1: Creating new IBSS network, BSSID a2:97:d6:50:6f:23 [ 103.420844][ T6012] tipc: Node number set to 2886997007 [ 103.710917][ T9358] IPVS: Error joining to the multicast group [ 104.000185][ T9397] netlink: 'syz.1.1430': attribute type 10 has an invalid length. [ 104.002869][ T9397] syz_tun: entered promiscuous mode [ 104.014971][ T9399] syzkaller1: entered promiscuous mode [ 104.016575][ T9399] syzkaller1: entered allmulticast mode [ 104.479000][ T9430] @: renamed from vlan0 (while UP) [ 104.690391][ T9442] ISOFS: Unable to identify CD-ROM format. [ 104.814148][ T9452] @: renamed from vlan0 [ 104.999931][ T9470] ISOFS: Unable to identify CD-ROM format. [ 105.156651][ T9489] veth1_macvtap: left promiscuous mode [ 105.158539][ T9489] macsec0: entered allmulticast mode [ 106.171139][ T9582] veth1_macvtap: left promiscuous mode [ 106.172214][ T9584] __nla_validate_parse: 3 callbacks suppressed [ 106.172223][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1512'. [ 106.172823][ T9582] macsec0: entered allmulticast mode [ 106.174630][ T9584] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1512'. [ 106.177698][ T9587] ISOFS: Unable to identify CD-ROM format. [ 106.180012][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1512'. [ 106.333125][ T9605] syz.4.1526: attempt to access beyond end of device [ 106.333125][ T9605] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 106.337105][ T9605] syz.4.1526: attempt to access beyond end of device [ 106.337105][ T9605] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 106.340824][ T9605] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 106.343809][ T9605] syz.4.1526: attempt to access beyond end of device [ 106.343809][ T9605] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 106.348312][ T9605] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 106.351210][ T9605] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 106.353992][ T9605] UDF-fs: Scanning with blocksize 512 failed [ 106.357339][ T9605] syz.4.1526: attempt to access beyond end of device [ 106.357339][ T9605] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 106.362149][ T9605] syz.4.1526: attempt to access beyond end of device [ 106.362149][ T9605] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 106.366388][ T9605] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 106.369153][ T9605] syz.4.1526: attempt to access beyond end of device [ 106.369153][ T9605] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 106.372802][ T9605] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 106.375448][ T9605] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 106.377580][ T9605] UDF-fs: Scanning with blocksize 1024 failed [ 106.380200][ T9605] syz.4.1526: attempt to access beyond end of device [ 106.380200][ T9605] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 106.384118][ T9605] syz.4.1526: attempt to access beyond end of device [ 106.384118][ T9605] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 106.388483][ T9605] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 106.391343][ T9605] syz.4.1526: attempt to access beyond end of device [ 106.391343][ T9605] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 106.394949][ T9605] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 106.397546][ T9605] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 106.399769][ T9605] UDF-fs: Scanning with blocksize 2048 failed [ 106.401680][ T9605] syz.4.1526: attempt to access beyond end of device [ 106.401680][ T9605] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 106.406200][ T9605] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 106.408949][ T9605] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 106.412708][ T9605] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 106.414876][ T9605] UDF-fs: Scanning with blocksize 4096 failed [ 106.416572][ T9605] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 107.119944][ T9614] veth1_macvtap: left promiscuous mode [ 107.121558][ T9614] macsec0: entered allmulticast mode [ 107.183874][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1531'. [ 107.188988][ T9624] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1531'. [ 107.194239][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1531'. [ 107.404667][ T9653] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 107.407456][ T9653] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 107.411133][ T9653] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 107.413670][ T9653] UDF-fs: Scanning with blocksize 512 failed [ 107.415848][ T9653] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 107.418600][ T9653] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 107.421659][ T9653] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 107.423821][ T9653] UDF-fs: Scanning with blocksize 1024 failed [ 107.425808][ T9653] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 107.428561][ T9653] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 107.431330][ T9653] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 107.433512][ T9653] UDF-fs: Scanning with blocksize 2048 failed [ 107.435533][ T9653] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 107.438335][ T9653] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 107.438605][ T5323] IPVS: starting estimator thread 0... [ 107.441405][ T9653] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 107.445106][ T9653] UDF-fs: Scanning with blocksize 4096 failed [ 107.446830][ T9653] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 107.489843][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1555'. [ 107.495535][ T9667] netlink: 173 bytes leftover after parsing attributes in process `syz.2.1555'. [ 107.559420][ T9662] IPVS: using max 37 ests per chain, 88800 per kthread [ 108.394834][ T9683] Process accounting resumed [ 108.639386][ T9720] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1580'. [ 108.692117][ T9723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1589'. [ 108.703176][ T39] kauditd_printk_skb: 58 callbacks suppressed [ 108.703186][ T39] audit: type=1326 audit(1737382564.636:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9724 comm="syz.1.1581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 108.726133][ T39] audit: type=1326 audit(1737382564.636:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9724 comm="syz.1.1581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 108.736227][ T39] audit: type=1326 audit(1737382564.646:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9724 comm="syz.1.1581" exe="/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 108.742599][ T39] audit: type=1326 audit(1737382564.646:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9724 comm="syz.1.1581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 108.751747][ T9730] netem: change failed [ 108.754491][ T39] audit: type=1326 audit(1737382564.646:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9724 comm="syz.1.1581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 108.763518][ T39] audit: type=1326 audit(1737382564.646:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9724 comm="syz.1.1581" exe="/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 108.769993][ T39] audit: type=1326 audit(1737382564.646:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9724 comm="syz.1.1581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 108.776067][ T39] audit: type=1326 audit(1737382564.646:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9724 comm="syz.1.1581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 108.782868][ T39] audit: type=1326 audit(1737382564.646:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9724 comm="syz.1.1581" exe="/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 108.789237][ T39] audit: type=1326 audit(1737382564.646:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9724 comm="syz.1.1581" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 108.827337][ T5991] IPVS: starting estimator thread 0... [ 108.918897][ T9739] IPVS: using max 36 ests per chain, 86400 per kthread [ 109.021051][ T9761] netlink: 'syz.4.1598': attribute type 2 has an invalid length. [ 109.025537][ T9761] netlink: 'syz.4.1598': attribute type 4 has an invalid length. [ 110.880799][ T9867] loop2: detected capacity change from 0 to 7 [ 110.886495][ T9867] Dev loop2: unable to read RDB block 7 [ 110.888288][ T9867] loop2: unable to read partition table [ 110.893029][ T9867] loop2: partition table beyond EOD, truncated [ 110.897259][ T9867] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 111.469024][ T5991] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 111.640088][ T5991] usb 6-1: Using ep0 maxpacket: 8 [ 111.643362][ T5991] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 111.645737][ T5991] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.648528][ T5991] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.651688][ T5991] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.655175][ T5991] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.659108][ T5991] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 111.661736][ T5991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.872195][ T5991] usb 6-1: GET_CAPABILITIES returned 0 [ 111.873776][ T5991] usbtmc 6-1:16.0: can't read capabilities [ 112.077309][ T35] usb 6-1: USB disconnect, device number 4 [ 113.688815][ T5323] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 113.749240][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 113.831424][ T5955] Bluetooth: hci3: Invalid handle: 0x73c2 > 0x0eff [ 113.838791][ T5323] usb 6-1: Using ep0 maxpacket: 16 [ 113.846830][ T5323] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 113.851111][ T5323] usb 6-1: New USB device found, idVendor=046d, idProduct=ffff, bcdDevice= 0.00 [ 113.853899][ T5323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.859494][ T5323] usb 6-1: config 0 descriptor?? [ 113.865733][ T5323] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 114.068237][ T5323] usb 6-1: USB disconnect, device number 5 [ 124.109160][T10044] ubi0: attaching mtd0 [ 124.111818][T10044] ubi0: scanning is finished [ 124.113125][T10044] ubi0: empty MTD device detected [ 124.172949][T10044] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 124.175037][T10044] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 124.177034][T10044] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 124.179150][T10044] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 124.181235][T10044] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 124.183100][T10044] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 124.185292][T10044] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3701890536 [ 124.188033][T10044] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 124.191224][T10050] ubi0: background thread "ubi_bgt0d" started, PID 10050 [ 124.191605][T10049] ubi0: detaching mtd0 [ 124.197258][T10049] ubi0: mtd0 is detached [ 124.320329][ T5955] Bluetooth: hci1: Invalid handle: 0x73c2 > 0x0eff [ 124.339216][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 132.302011][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.304653][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.367902][ T1142] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 134.684389][T10119] syzkaller1: entered promiscuous mode [ 134.686431][T10119] syzkaller1: entered allmulticast mode [ 134.980434][T10166] udevd[10166]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 135.345092][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 135.539948][T10224] __nla_validate_parse: 2 callbacks suppressed [ 135.539966][T10224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1768'. [ 136.233651][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 136.233661][ T39] audit: type=1326 audit(1737382592.166:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.1.1787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7fc00000 [ 136.242272][ T39] audit: type=1326 audit(1737382592.166:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.1.1787" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf706e579 code=0x7fc00000 [ 136.249128][ T39] audit: type=1326 audit(1737382592.166:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.1.1787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7fc00000 [ 136.257363][ T39] audit: type=1326 audit(1737382592.166:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.1.1787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7fc00000 [ 136.266501][ T39] audit: type=1326 audit(1737382592.166:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.1.1787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7fc00000 [ 136.274305][ T39] audit: type=1326 audit(1737382592.166:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.1.1787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7fc00000 [ 136.280822][ T39] audit: type=1326 audit(1737382592.166:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.1.1787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7fc00000 [ 136.287075][ T39] audit: type=1326 audit(1737382592.166:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.1.1787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7fc00000 [ 136.293715][ T39] audit: type=1326 audit(1737382592.166:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.1.1787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7fc00000 [ 136.301336][ T39] audit: type=1326 audit(1737382592.166:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10264 comm="syz.1.1787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7fc00000 [ 136.843960][T10316] input: syz0 as /devices/virtual/input/input9 [ 136.888820][ T6012] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 136.914236][T10322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1810'. [ 137.049265][ T6012] usb 6-1: Using ep0 maxpacket: 32 [ 137.052322][ T6012] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.055074][ T6012] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 137.061469][ T6012] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 137.064608][ T6012] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.066843][ T6012] usb 6-1: Product: syz [ 137.068046][ T6012] usb 6-1: Manufacturer: syz [ 137.070067][ T6012] usb 6-1: SerialNumber: syz [ 137.090691][T10348] unknown channel width for channel at 909000KHz? [ 137.206156][T10359] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1827'. [ 137.285208][ T6012] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 137.488253][ T5323] usb 6-1: USB disconnect, device number 6 [ 137.492104][ T5323] usblp0: removed [ 138.161423][T10427] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1855'. [ 138.560248][T10482] netlink: 'syz.0.1877': attribute type 10 has an invalid length. [ 138.572209][T10482] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.576149][T10482] bond0: (slave team0): Enslaving as an active interface with an up link [ 138.584683][T10482] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 138.707047][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1886'. [ 138.722584][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1886'. [ 138.856818][T10517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1893'. [ 139.640793][T10575] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 140.748545][T10614] input: syz0 as /devices/virtual/input/input10 [ 140.932459][T10636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1939'. [ 140.935244][T10636] netlink: 'syz.1.1939': attribute type 7 has an invalid length. [ 140.937513][T10636] netlink: 'syz.1.1939': attribute type 8 has an invalid length. [ 140.943563][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1939'. [ 141.029804][ T5956] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 141.190519][ T5956] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.194698][ T5956] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.208777][ T5956] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 141.212537][ T5956] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.215278][ T5956] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.221669][ T5956] usb 9-1: config 0 descriptor?? [ 141.310534][T10673] pimreg: entered allmulticast mode [ 141.313993][T10673] syz_tun: entered allmulticast mode [ 141.315736][T10673] syz_tun: left allmulticast mode [ 141.317300][T10673] pimreg: left allmulticast mode [ 141.633904][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.636035][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.638175][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.641764][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.644097][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.646200][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.648360][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.650784][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.652922][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.655030][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.657112][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.659444][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.661643][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.663841][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.666013][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.668171][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.670412][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.672535][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.674625][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.676735][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.679152][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.681338][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.683493][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.685634][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.688064][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.690476][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.692683][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.695094][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.697242][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.699651][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.701861][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.703996][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.706110][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.708188][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.710373][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.712463][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.714564][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.716676][ T5956] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 141.719081][ T5956] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 141.726036][ T5956] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 141.763882][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 141.763896][ T39] audit: type=1326 audit(1737382598.695:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10741 comm="syz.0.1988" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x0 [ 141.894127][ T6012] usb 9-1: USB disconnect, device number 5 [ 142.466427][ T39] audit: type=1326 audit(1737382599.395:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10728 comm="syz.1.1983" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7fc00000 [ 142.679581][T10796] netlink: 'syz.0.2011': attribute type 27 has an invalid length. [ 142.699063][ T5956] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 142.849474][ T5956] usb 9-1: Using ep0 maxpacket: 8 [ 142.852256][ T5956] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 142.854552][ T5956] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.857313][ T5956] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.860184][ T5956] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.863836][ T5956] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.874500][ T5956] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 142.878159][ T5956] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.008930][ T5991] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 143.086786][ T5956] usb 9-1: usb_control_msg returned -32 [ 143.088430][ T5956] usbtmc 9-1:16.0: can't read capabilities [ 143.179042][ T5991] usb 6-1: Using ep0 maxpacket: 8 [ 143.182526][ T5991] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.186189][ T5991] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.190140][ T5991] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 143.194069][ T5991] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.199610][ T5991] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.203052][ T5991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.413235][ T5991] usb 6-1: usb_control_msg returned -32 [ 143.415058][ T5991] usbtmc 6-1:16.0: can't read capabilities [ 143.442409][T10847] usbtmc 9-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 143.645166][ T5956] usb 9-1: USB disconnect, device number 6 [ 143.809978][T10852] openvswitch: netlink: nsh attribute has 18408 unknown bytes. [ 143.813117][T10852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.983353][T10860] geneve2: entered promiscuous mode [ 143.985456][T10860] geneve2: entered allmulticast mode [ 144.262071][ T39] audit: type=1326 audit(1737382601.195:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.2.2043" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 144.268278][ T39] audit: type=1326 audit(1737382601.195:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.2.2043" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 144.276629][ T39] audit: type=1326 audit(1737382601.205:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.2.2043" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 144.283536][ T39] audit: type=1326 audit(1737382601.205:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.2.2043" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 144.289901][ T39] audit: type=1326 audit(1737382601.205:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.2.2043" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 144.296036][ T39] audit: type=1326 audit(1737382601.205:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.2.2043" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 144.302693][ T6012] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 144.304958][ T39] audit: type=1326 audit(1737382601.205:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.2.2043" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 144.311254][ T39] audit: type=1326 audit(1737382601.205:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10882 comm="syz.2.2043" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f355a7 code=0x7ffc0000 [ 144.459320][ T6012] usb 5-1: Using ep0 maxpacket: 8 [ 144.462804][ T6012] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.466960][ T6012] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 144.477058][ T6012] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 144.480986][ T6012] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 144.485435][ T6012] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 144.489314][ T6012] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.496039][ T6012] hub 5-1:1.0: bad descriptor, ignoring hub [ 144.497865][ T6012] hub 5-1:1.0: probe with driver hub failed with error -5 [ 144.500435][ T6012] cdc_wdm 5-1:1.0: skipping garbage [ 144.501973][ T6012] cdc_wdm 5-1:1.0: skipping garbage [ 144.505033][ T6012] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 144.506726][ T6012] cdc_wdm 5-1:1.0: Unknown control protocol [ 144.527283][T10907] (syz.4.2055,10907,1):dlmfs_mkdir:420 ERROR: invalid domain name for directory. [ 144.795326][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2062'. [ 144.934020][T10933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2067'. [ 144.936878][T10933] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2067'. [ 144.979571][ T5991] kernel write not supported for file /snd/pcmC0D0p (pid: 5991 comm: kworker/1:3) [ 145.117972][ T6012] usb 5-1: USB disconnect, device number 6 [ 145.118819][T10864] cdc_wdm 5-1:1.0: Error autopm - -16 [ 145.249086][ T6012] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 145.342165][T10951] binder: 10950:10951 ioctl 4018620d 0 returned -22 [ 145.399925][ T6012] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.403777][ T6012] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 145.408131][ T6012] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 145.411768][ T6012] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 145.414438][ T6012] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.419892][T10919] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 145.423097][ T6012] hub 5-1:1.0: bad descriptor, ignoring hub [ 145.424903][ T6012] hub 5-1:1.0: probe with driver hub failed with error -5 [ 145.427205][ T6012] cdc_wdm 5-1:1.0: skipping garbage [ 145.428846][ T6012] cdc_wdm 5-1:1.0: skipping garbage [ 145.430949][ T6012] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 145.432757][ T6012] cdc_wdm 5-1:1.0: Unknown control protocol [ 145.458305][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2078'. [ 145.465323][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2078'. [ 145.630524][T10979] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2088'. [ 145.727527][T10991] overlayfs: failed to clone lowerpath [ 145.739175][ T6012] usb 5-1: USB disconnect, device number 7 [ 145.789638][ T6012] usb 6-1: USB disconnect, device number 7 [ 145.835618][T11002] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 145.963608][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2101'. [ 145.967101][T11010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2101'. [ 145.972503][T11010] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2101'. [ 146.211670][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2112'. [ 146.219137][T11035] syzkaller1: entered promiscuous mode [ 146.221328][T11035] syzkaller1: entered allmulticast mode [ 146.698997][ T35] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 146.848785][ T35] usb 9-1: Using ep0 maxpacket: 32 [ 146.851496][ T35] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 146.853880][ T35] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 146.857024][ T35] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 146.860610][ T35] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 146.864332][ T35] usb 9-1: config 0 interface 0 has no altsetting 0 [ 146.867623][ T35] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 146.870613][ T35] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 146.872945][ T35] usb 9-1: Product: syz [ 146.874119][ T35] usb 9-1: Manufacturer: syz [ 146.875455][ T35] usb 9-1: SerialNumber: syz [ 146.877839][ T35] usb 9-1: config 0 descriptor?? [ 146.880783][ T35] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 146.884336][ T35] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 146.995725][ T39] kauditd_printk_skb: 81 callbacks suppressed [ 146.995735][ T39] audit: type=1326 audit(1737382603.925:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.1.2141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 147.003745][ T39] audit: type=1326 audit(1737382603.925:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.1.2141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 147.009838][ T39] audit: type=1326 audit(1737382603.925:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.1.2141" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 147.015927][ T39] audit: type=1326 audit(1737382603.925:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.1.2141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 147.022690][ T39] audit: type=1326 audit(1737382603.925:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.1.2141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 147.091334][ T5981] usb 9-1: USB disconnect, device number 7 [ 147.102810][ T5981] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 147.278845][ T5991] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 147.438917][ T5991] usb 6-1: Using ep0 maxpacket: 32 [ 147.441580][ T5991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.444687][ T5991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.447447][ T5991] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 147.450149][ T5991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.453280][ T5991] usb 6-1: config 0 descriptor?? [ 147.864676][ T5991] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 148.119910][ T5323] usb 6-1: USB disconnect, device number 8 [ 148.998772][ T39] audit: type=1326 audit(1737382605.915:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11162 comm="syz.0.2169" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff7579 code=0x0 [ 149.009582][T11170] IPVS: sync thread started: state = MASTER, mcast_ifn = tunl0, syncid = 262145, id = 0 [ 149.285980][T11176] syz.1.2165 (11176) used greatest stack depth: 19864 bytes left [ 149.340870][T11198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2181'. [ 149.355693][T11198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2181'. [ 149.686461][T11220] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 150.459318][T11298] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 150.462202][T11294] IPVS: stopping master sync thread 11298 ... [ 150.512869][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2224'. [ 150.515460][T11304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2224'. [ 150.524400][T11306] team0: entered promiscuous mode [ 150.525923][T11306] team_slave_0: entered promiscuous mode [ 150.527696][T11306] team_slave_1: entered promiscuous mode [ 150.530911][T11306] batadv_slave_1: entered promiscuous mode [ 150.534471][T11306] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 150.536713][T11306] Cannot create hsr debugfs directory [ 150.578787][ T39] audit: type=1326 audit(1737382607.505:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.2.2236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 150.585250][ T39] audit: type=1326 audit(1737382607.515:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.2.2236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 150.592083][ T39] audit: type=1326 audit(1737382607.515:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.2.2236" exe="/syz-executor" sig=0 arch=40000003 syscall=332 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 150.598673][ T39] audit: type=1326 audit(1737382607.515:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.2.2236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 150.632221][T11318] net veth1_virt_wifi virt_wifi0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 150.995868][T11330] Process accounting resumed [ 151.528227][T11364] loop2: detected capacity change from 0 to 7 [ 151.530971][T11364] Dev loop2: unable to read RDB block 7 [ 151.532600][T11364] loop2: unable to read partition table [ 151.534347][T11364] loop2: partition table beyond EOD, truncated [ 151.536134][T11364] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 151.604228][T11374] netlink: 'syz.4.2255': attribute type 10 has an invalid length. [ 151.610100][T11374] syz_tun: entered promiscuous mode [ 152.068481][T11412] syzkaller1: entered promiscuous mode [ 152.070580][T11412] syzkaller1: entered allmulticast mode [ 152.426265][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 152.426275][ T39] audit: type=1326 audit(1737382609.355:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11431 comm="syz.0.2280" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x0 [ 153.109687][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2291'. [ 153.113192][T11449] IPVS: Error joining to the multicast group [ 153.383605][T10301] udevd[10301]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 153.442715][T11485] input: syz0 as /devices/virtual/input/input12 [ 153.480123][T11487] syz.1.2308[11487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.480172][T11487] syz.1.2308[11487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.483900][T11487] syz.1.2308[11487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.738965][ T6006] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 153.908953][ T6006] usb 5-1: Using ep0 maxpacket: 32 [ 153.911812][ T6006] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 153.914998][ T6006] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 153.920295][ T6006] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 153.923753][ T6006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.926920][ T6006] usb 5-1: Product: syz [ 153.928195][ T6006] usb 5-1: Manufacturer: syz [ 153.929963][ T6006] usb 5-1: SerialNumber: syz [ 154.146588][ T6006] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 154.352347][ T35] usb 5-1: USB disconnect, device number 8 [ 154.356571][ T35] usblp0: removed [ 154.418180][T11507] input: syz0 as /devices/virtual/input/input13 [ 154.510718][T11516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2325'. [ 154.564306][T11523] syz.4.2319[11523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.564358][T11523] syz.4.2319[11523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.567992][T11523] syz.4.2319[11523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.628829][ T35] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 155.713671][T11581] loop2: detected capacity change from 0 to 7 [ 155.716003][T11581] Dev loop2: unable to read RDB block 7 [ 155.716660][T11583] netlink: 'syz.2.2351': attribute type 10 has an invalid length. [ 155.717731][T11581] loop2: unable to read partition table [ 155.721968][T11581] loop2: partition table beyond EOD, truncated [ 155.722259][T11583] syz_tun: entered promiscuous mode [ 155.723810][T11581] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 155.731599][T11583] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 155.789203][ T35] usb 9-1: Using ep0 maxpacket: 32 [ 155.792830][ T35] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 155.796318][ T35] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 155.801617][ T35] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 155.804304][ T35] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.806839][ T35] usb 9-1: Product: syz [ 155.808060][ T35] usb 9-1: Manufacturer: syz [ 155.809483][ T35] usb 9-1: SerialNumber: syz [ 155.888088][T11587] netlink: 'syz.2.2354': attribute type 10 has an invalid length. [ 155.897853][T11587] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 156.029114][ T35] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 156.224220][ T5991] usb 9-1: USB disconnect, device number 8 [ 156.227991][ T5991] usblp0: removed [ 157.037887][ T5955] Bluetooth: hci4: sending frame failed (-49) [ 157.041065][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 157.144128][ T39] audit: type=1326 audit(1737382614.075:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11634 comm="syz.2.2364" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x0 [ 157.358837][ T5956] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 157.468972][ T5323] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 157.508856][ T5956] usb 9-1: Using ep0 maxpacket: 32 [ 157.512338][ T5956] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 157.515932][ T5956] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 157.522173][ T5956] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 157.525679][ T5956] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.529000][ T5956] usb 9-1: Product: syz [ 157.530245][ T5956] usb 9-1: Manufacturer: syz [ 157.531795][ T5956] usb 9-1: SerialNumber: syz [ 157.628826][ T5323] usb 5-1: Using ep0 maxpacket: 8 [ 157.632828][ T5323] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 157.637251][ T5323] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 157.641401][ T5323] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.645381][ T5323] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.650566][ T5323] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.654064][ T5323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.743935][ T5956] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 157.863713][ T5323] usb 5-1: GET_CAPABILITIES returned 0 [ 157.865821][ T5323] usbtmc 5-1:16.0: can't read capabilities [ 157.951916][ T35] usb 9-1: USB disconnect, device number 9 [ 157.954423][ T35] usblp0: removed [ 158.020715][ T39] audit: type=1326 audit(1737382614.955:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11644 comm="syz.2.2367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 158.026875][ T39] audit: type=1326 audit(1737382614.955:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11644 comm="syz.2.2367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 158.033988][ T39] audit: type=1326 audit(1737382614.955:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11644 comm="syz.2.2367" exe="/syz-executor" sig=0 arch=40000003 syscall=276 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 158.041247][ T39] audit: type=1326 audit(1737382614.955:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11644 comm="syz.2.2367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 158.047316][ T39] audit: type=1326 audit(1737382614.955:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11644 comm="syz.2.2367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 158.072590][ T25] usb 5-1: USB disconnect, device number 9 [ 158.978916][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 159.128885][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 159.132347][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.135135][ T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 159.139610][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 159.142456][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.145352][ T25] usb 5-1: Product: syz [ 159.147038][ T25] usb 5-1: Manufacturer: syz [ 159.149054][ T25] usb 5-1: SerialNumber: syz [ 159.360935][ T25] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 159.563009][ T25] usb 5-1: USB disconnect, device number 10 [ 159.565667][ T25] usblp0: removed [ 161.021958][ T5323] kernel write not supported for file /input/event0 (pid: 5323 comm: kworker/0:2) [ 161.345177][T11788] tap0: tun_chr_ioctl cmd 1074025675 [ 161.346763][T11788] tap0: persist disabled [ 161.348168][T11788] tap0: tun_chr_ioctl cmd 1074025675 [ 161.350524][T11788] tap0: persist disabled [ 161.394918][T11799] syzkaller1: entered promiscuous mode [ 161.396486][T11799] syzkaller1: entered allmulticast mode [ 162.506629][ T5946] Bluetooth: hci3: link tx timeout [ 162.508827][ T5946] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 163.064540][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2510'. [ 163.150184][ T5991] kernel write not supported for file /media0 (pid: 5991 comm: kworker/1:3) [ 163.184035][T11986] pim6reg1: entered promiscuous mode [ 163.186349][T11986] pim6reg1: entered allmulticast mode [ 163.318777][ T35] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 163.481091][ T35] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.484770][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 163.487846][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 163.491201][ T35] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.495615][ T35] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.498454][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.503866][ T35] usb 6-1: config 0 descriptor?? [ 163.579930][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2532'. [ 163.914548][ T35] plantronics 0003:047F:FFFF.0007: ignoring exceeding usage max [ 163.919293][ T35] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 163.923018][ T35] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 163.998292][T12043] batman_adv: batadv0: Adding interface: macvlan3 [ 164.000527][T12043] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 164.006118][T12043] batman_adv: batadv0: Not using interface macvlan3 (retrying later): interface not active [ 164.187318][T12053] [ 164.188072][T12053] ============================= [ 164.189431][T12053] [ BUG: Invalid wait context ] [ 164.190865][T12053] 6.13.0-syzkaller #0 Not tainted [ 164.192391][T12053] ----------------------------- [ 164.195272][T12053] syz.0.2545/12053 is trying to lock: [ 164.196970][T12053] ffffffff8e021958 (kernfs_rename_lock){....}-{3:3}, at: kernfs_path_from_node+0x29/0x60 [ 164.200378][T12053] other info that might help us debug this: [ 164.202392][T12053] context-{5:5} [ 164.203582][T12053] 8 locks held by syz.0.2545/12053: [ 164.205286][T12053] #0: ffffffff8de3baa8 (tracepoints_mutex){+.+.}-{4:4}, at: tracepoint_probe_register_prio_may_exist+0x9c/0x110 [ 164.209394][T12053] #1: ffffffff8dc5e4d0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 164.212707][T12053] #2: ffffffff8deda788 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xb5/0x270 [ 164.216053][T12053] #3: ffffffff8dc7bf08 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 164.219470][T12053] #4: ffffffff8ddbad40 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x42/0x540 [ 164.222652][T12053] #5: ffff88802b63ed18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 164.225868][T12053] #6: ffffffff8ddbad40 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1c2/0x590 [ 164.228885][T12053] #7: ffff888051c71560 (&mm->mmap_lock){++++}-{4:4}, at: stack_map_get_build_id_offset+0x236/0x700 [ 164.232215][T12053] stack backtrace: [ 164.233329][T12053] CPU: 2 UID: 0 PID: 12053 Comm: syz.0.2545 Not tainted 6.13.0-syzkaller #0 [ 164.236113][T12053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.239573][T12053] Call Trace: [ 164.240658][T12053] [ 164.241614][T12053] dump_stack_lvl+0x116/0x1f0 [ 164.243079][T12053] __lock_acquire+0x878/0x3c40 [ 164.244704][T12053] ? __pfx___lock_acquire+0x10/0x10 [ 164.246523][T12053] ? __pfx___lock_acquire+0x10/0x10 [ 164.248341][T12053] ? __pfx_mark_lock+0x10/0x10 [ 164.250022][T12053] ? __pfx_widen_string+0x10/0x10 [ 164.251719][T12053] lock_acquire.part.0+0x11b/0x380 [ 164.253360][T12053] ? kernfs_path_from_node+0x29/0x60 [ 164.255149][T12053] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 164.257082][T12053] ? rcu_is_watching+0x12/0xc0 [ 164.258668][T12053] ? trace_lock_acquire+0x14e/0x1f0 [ 164.260721][T12053] ? trace_lock_acquire+0x14e/0x1f0 [ 164.262730][T12053] ? kernfs_path_from_node+0x29/0x60 [ 164.264611][T12053] ? lock_acquire+0x2f/0xb0 [ 164.266238][T12053] ? kernfs_path_from_node+0x29/0x60 [ 164.268082][T12053] _raw_read_lock_irqsave+0x74/0x90 [ 164.269918][T12053] ? kernfs_path_from_node+0x29/0x60 [ 164.271875][T12053] kernfs_path_from_node+0x29/0x60 [ 164.273648][T12053] get_mm_memcg_path.constprop.0+0xb7/0x3d0 [ 164.275675][T12053] __mmap_lock_do_trace_acquire_returned.part.0+0x95/0x2d0 [ 164.278069][T12053] ? __pfx___mmap_lock_do_trace_acquire_returned.part.0+0x10/0x10 [ 164.280831][T12053] ? stack_map_get_build_id_offset+0x5c5/0x700 [ 164.282933][T12053] ? __mmap_lock_do_trace_acquire_returned+0x14/0x40 [ 164.285274][T12053] ? __mmap_lock_do_trace_acquire_returned+0x1f/0x40 [ 164.287593][T12053] __mmap_lock_do_trace_acquire_returned+0x33/0x40 [ 164.289791][T12053] stack_map_get_build_id_offset+0x5d6/0x700 [ 164.291841][T12053] __bpf_get_stack+0x309/0xa30 [ 164.293497][T12053] ? __pfx___bpf_get_stack+0x10/0x10 [ 164.295327][T12053] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 164.297257][T12053] bpf_get_stack+0x32/0x40 [ 164.298822][T12053] bpf_get_stack_raw_tp+0x124/0x160 [ 164.300697][T12053] bpf_prog_ec3b2eefa702d8d3+0x43/0x47 [ 164.302559][T12053] bpf_trace_run2+0x231/0x590 [ 164.304247][T12053] ? lock_acquire+0x2f/0xb0 [ 164.305842][T12053] ? __pfx_bpf_trace_run2+0x10/0x10 [ 164.307698][T12053] trace_tlb_flush+0xf7/0x180 [ 164.309330][T12053] switch_mm_irqs_off+0x395/0xb10 [ 164.311244][T12053] ? trace_ctxwake_print+0x3d0/0x450 [ 164.313076][T12053] __schedule+0xc6f/0x5ad0 [ 164.314691][T12053] ? __pfx_mark_lock+0x10/0x10 [ 164.316379][T12053] ? __pfx_lock_release+0x10/0x10 [ 164.318211][T12053] ? __pfx___schedule+0x10/0x10 [ 164.319960][T12053] ? __pfx_mark_lock+0x10/0x10 [ 164.321702][T12053] ? bpf_trace_run2+0x2a6/0x590 [ 164.323490][T12053] ? preempt_schedule_thunk+0x1a/0x30 [ 164.325429][T12053] preempt_schedule_common+0x44/0xc0 [ 164.327264][T12053] preempt_schedule_thunk+0x1a/0x30 [ 164.329114][T12053] ? vm_insert_page+0x164/0x6d0 [ 164.330888][T12053] _raw_spin_unlock+0x3e/0x50 [ 164.332440][T12053] __text_poke+0x618/0xca0 [ 164.334080][T12053] ? __pfx_text_poke_memcpy+0x10/0x10 [ 164.336033][T12053] ? __pfx___text_poke+0x10/0x10 [ 164.337809][T12053] ? vm_insert_page+0x164/0x6d0 [ 164.339489][T12053] ? vm_insert_page+0x164/0x6d0 [ 164.341165][T12053] text_poke_bp_batch+0x1cd/0x760 [ 164.343061][T12053] ? __pfx___mutex_lock+0x10/0x10 [ 164.344852][T12053] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 164.346926][T12053] ? text_poke_queue+0xef/0x180 [ 164.348750][T12053] ? arch_jump_label_transform_queue+0xc0/0x120 [ 164.351093][T12053] text_poke_finish+0x30/0x40 [ 164.352853][T12053] arch_jump_label_transform_apply+0x1c/0x30 [ 164.355053][T12053] jump_label_update+0x1d7/0x400 [ 164.356708][T12053] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 164.359277][T12053] static_key_enable_cpuslocked+0x1b7/0x270 [ 164.361367][T12053] static_key_enable+0x1a/0x20 [ 164.362897][T12053] tracepoint_add_func+0xac8/0xeb0 [ 164.364633][T12053] ? find_held_lock+0x2d/0x110 [ 164.366147][T12053] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 164.368516][T12053] tracepoint_probe_register_prio_may_exist+0xbd/0x110 [ 164.370715][T12053] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 164.373040][T12053] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 164.375355][T12053] ? __local_bh_enable_ip+0xa4/0x120 [ 164.376999][T12053] bpf_probe_register+0x189/0x200 [ 164.378641][T12053] bpf_raw_tp_link_attach+0x2cd/0x5f0 [ 164.380359][T12053] ? __pfx_lock_release+0x10/0x10 [ 164.381960][T12053] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 164.383908][T12053] ? lock_acquire+0x2f/0xb0 [ 164.385169][T12053] ? __fget_files+0x40/0x3a0 [ 164.386344][T12053] ? fput+0x67/0x440 [ 164.387353][T12053] ? __bpf_prog_get+0xa0/0x290 [ 164.388558][T12053] __sys_bpf+0x3a7/0x57a0 [ 164.389656][T12053] ? __pfx___sys_bpf+0x10/0x10 [ 164.390869][T12053] ? __pfx_lock_release+0x10/0x10 [ 164.392191][T12053] ? do_futex+0x123/0x350 [ 164.393284][T12053] ? __pfx_do_futex+0x10/0x10 [ 164.394474][T12053] ? xfd_validate_state+0x5d/0x180 [ 164.395764][T12053] ? rcu_is_watching+0x12/0xc0 [ 164.396983][T12053] __ia32_sys_bpf+0x76/0xe0 [ 164.398131][T12053] __do_fast_syscall_32+0x73/0x120 [ 164.399471][T12053] do_fast_syscall_32+0x32/0x80 [ 164.400898][T12053] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.402723][T12053] RIP: 0023:0xf7ff7579 [ 164.403907][T12053] Code: Unable to access opcode bytes at 0xf7ff754f. [ 164.405785][T12053] RSP: 002b:00000000f512555c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 164.408137][T12053] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000020000080 [ 164.410391][T12053] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.412655][T12053] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 164.414903][T12053] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 164.417154][T12053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 164.419415][T12053] [ 164.420514][ C3] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 164.556992][ T5946] Bluetooth: hci3: command 0x0406 tx timeout [ 164.655714][T12054] bond0: (slave syz_tun): Releasing backup interface [ 165.068635][ T4796] bridge_slave_1: left allmulticast mode [ 165.070539][ T4796] bridge_slave_1: left promiscuous mode [ 165.072237][ T4796] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.075201][ T4796] bridge_slave_0: left allmulticast mode [ 165.076807][ T4796] bridge_slave_0: left promiscuous mode [ 165.078510][ T4796] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.338125][ T4796] batman_adv: batadv0: Removing interface: macvlan3 [ 165.338906][ T833] usb 6-1: reset high-speed USB device number 9 using dummy_hcd [ 165.344847][ T4796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.347731][ T4796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.350661][ T4796] bond0 (unregistering): (slave team0): Releasing backup interface [ 165.353941][ T4796] bond0 (unregistering): Released all slaves [ 165.405979][ T4796] tipc: Disabling bearer [ 165.407578][ T4796] tipc: Left network mode [ 165.470027][ T833] usb 6-1: device descriptor read/64, error -32 [ 165.610784][ T4796] hsr_slave_0: left promiscuous mode [ 165.613498][ T4796] hsr_slave_1: left promiscuous mode [ 165.615920][ T4796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.619144][ T4796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.070930][ T4796] team0 (unregistering): Port device team_slave_1 removed [ 166.130695][ T4796] team0 (unregistering): Port device team_slave_0 removed [ 166.349264][T12056] usb 6-1: USB disconnect, device number 9 [ 166.919877][ T4796] IPVS: stop unused estimator thread 0... [ 166.973727][ T4796] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.052034][ T4796] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.092792][ T4796] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.153257][ T4796] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.230474][ T4796] bridge_slave_1: left allmulticast mode [ 167.232781][ T4796] bridge_slave_1: left promiscuous mode [ 167.234848][ T4796] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.237741][ T4796] bridge_slave_0: left allmulticast mode [ 167.239600][ T4796] bridge_slave_0: left promiscuous mode [ 167.241236][ T4796] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.562369][ T4796] hsr_slave_0: left promiscuous mode [ 167.564705][ T4796] hsr_slave_1: left promiscuous mode [ 167.568170][ T4796] veth0_macvtap: left promiscuous mode [ 167.570384][ T4796] veth1_vlan: left promiscuous mode [ 167.572325][ T4796] veth0_vlan: left promiscuous mode [ 167.807667][ T4796] team0 (unregistering): Port device team_slave_1 removed [ 167.847053][ T4796] team0 (unregistering): Port device team_slave_0 removed [ 168.366121][ T4796] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 14:08:27 Registers: info registers vcpu 0 CPU#0 RAX=00fff80000000828 RBX=00fff80000000828 RCX=ffffffff81d573c9 RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffea0000ae72c0 RSP=ffffc9000105f278 R8 =0000000000000001 R9 =fffff5200020be57 R10=ffffc9000105f2bf R11=ffffffff81923275 R12=00fff20000000801 R13=0000000000000003 R14=ffff88801c6e0048 R15=0000000000000000 RIP=ffffffff819946c0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002041d000 CR3=000000005c840000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802b746720 RCX=ffffffff818d540c RDX=ffff888025912440 RSI=ffffffff818d53e6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000c20f7c0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=00000000000a201e R12=ffffed10056e8ce5 R13=0000000000000001 R14=ffff88802b746728 R15=ffff88802b53ff80 RIP=ffffffff81994de6 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f31bffc CR3=00000000630bc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85145395 RDI=ffffffff9a66e200 RBP=ffffffff9a66e1c0 RSP=ffffc9000c91e8c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff85145330 R15=0000000000000000 RIP=ffffffff851453bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020002000 CR3=000000002236c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000080000 RBX=0000000000000003 RCX=ffffc90004171000 RDX=0000000000080000 RSI=ffffffff8148499b RDI=0000000000000000 RBP=ffff88802b63ed00 RSP=ffffc9000366f378 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=000000000003ed00 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b73fc40 R15=ffffed10056c7da0 RIP=ffffffff8148499c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f74b6188 CR3=00000000630bc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000