last executing test programs: 8m15.783125502s ago: executing program 3 (id=11944): mkdir(&(0x7f0000000a40)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), 0x10000, &(0x7f0000000d00)={[{@mode={'mode', 0x3d, 0x4}}]}) 8m15.673100285s ago: executing program 3 (id=11947): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000080)=0x3c00, 0x4) 8m15.538980874s ago: executing program 3 (id=11951): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000006c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c) 8m15.267329849s ago: executing program 3 (id=11956): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffe}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts={{0x24, 0x29, 0x32, {0x73, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0xf4, 0xfffe}}]}}}], 0x24}, 0x40) 8m15.084607104s ago: executing program 3 (id=11959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 8m14.968352884s ago: executing program 3 (id=11964): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000740)=@urb_type_interrupt={0x1, {0x3, 0x1}, 0x1, 0x64, &(0x7f0000000140)="4cbe", 0x2, 0x285a89d0, 0x6, 0x0, 0x2, 0x2, 0x0}) 7m58.855176527s ago: executing program 32 (id=11964): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000740)=@urb_type_interrupt={0x1, {0x3, 0x1}, 0x1, 0x64, &(0x7f0000000140)="4cbe", 0x2, 0x285a89d0, 0x6, 0x0, 0x2, 0x2, 0x0}) 7m42.147942567s ago: executing program 2 (id=12553): r0 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000042c0)={0x30, 0x5, 0x0, {0x0, 0x6, 0x6, 0x2}}, 0x30) 7m41.992143476s ago: executing program 2 (id=12555): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 7m40.296508307s ago: executing program 2 (id=12580): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) 7m40.207402495s ago: executing program 2 (id=12582): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_fd]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 7m40.017528987s ago: executing program 2 (id=12586): r0 = openat$vimc0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0x2, {0x7, 0x7, 0xffff, 0xdc66}, {0x3, 0x0, 0x9d82, 0x5}, {0x6, 0x8001}}) 7m39.883632647s ago: executing program 2 (id=12590): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, 0x0) 7m23.785135158s ago: executing program 33 (id=12590): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, 0x0) 4m11.982459651s ago: executing program 5 (id=17459): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r0, &(0x7f0000012300)={0x2020}, 0x2020) 4m11.919223114s ago: executing program 5 (id=17461): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x3) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)) 4m11.916139504s ago: executing program 5 (id=17463): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) 4m11.756514439s ago: executing program 5 (id=17469): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) 4m11.755035254s ago: executing program 5 (id=17470): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001300)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x5800}, 0x4) 4m11.572125499s ago: executing program 5 (id=17472): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newtfilter={0x5c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xf, 0x3}, {0x1}, {0x300, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "feb19c0398d4ce8052eb415f9ac5f7c3"}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "30cc9a184f1f18d426280e7b45b0dbff"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008014}, 0x0) 4m11.551227591s ago: executing program 34 (id=17472): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newtfilter={0x5c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xf, 0x3}, {0x1}, {0x300, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "feb19c0398d4ce8052eb415f9ac5f7c3"}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "30cc9a184f1f18d426280e7b45b0dbff"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008014}, 0x0) 2m15.105131243s ago: executing program 4 (id=21585): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r0, 0x29, 0x4e, &(0x7f0000000400)=0x2, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 2m15.104894681s ago: executing program 4 (id=21588): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 2m15.050493455s ago: executing program 4 (id=21591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x28, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}]}]}, 0x28}}, 0x4040884) 2m15.045519673s ago: executing program 4 (id=21594): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 2m14.976685793s ago: executing program 4 (id=21596): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) close(0x3) 2m14.822978393s ago: executing program 4 (id=21598): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 2m14.776168117s ago: executing program 35 (id=21598): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 2m12.978494038s ago: executing program 6 (id=21629): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) 2m12.938138388s ago: executing program 6 (id=21632): open(&(0x7f0000000080)='./file1\x00', 0x24842, 0x1a6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x1e, 0x7ffffffe}]}) stat(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)) 2m12.937203479s ago: executing program 6 (id=21635): socket$unix(0x1, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000020c0)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) 2m12.870695414s ago: executing program 6 (id=21637): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x24, r1, 0x1, 0x70bd2c, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x24}}, 0x0) 2m12.870382372s ago: executing program 6 (id=21640): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r0, 0x402, 0x8000000b) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) 2m12.806712053s ago: executing program 6 (id=21643): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000ec0)="56c2d0a8", &(0x7f0000002280)=""/196, &(0x7f00000021c0), &(0x7f0000000440), 0x3, r0}, 0x38) 1m56.297616204s ago: executing program 36 (id=21643): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000ec0)="56c2d0a8", &(0x7f0000002280)=""/196, &(0x7f00000021c0), &(0x7f0000000440), 0x3, r0}, 0x38) 9.619736784s ago: executing program 1 (id=24885): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./proc\x00', &(0x7f00000000e0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/pm_type\x00', 0x1, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000200)={0x20, 0x0, 0x0, {0x0, 0x18}}, 0x20) 9.558599457s ago: executing program 1 (id=24888): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @remote, 0x4}, 0x1c) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) 9.494355129s ago: executing program 1 (id=24890): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @pic={0x5, 0x1, 0x7, 0x8, 0x2, 0x80, 0x8, 0xf, 0x31, 0x5, 0xfe, 0xa, 0xfe, 0x8e, 0x5}}) 9.33697623s ago: executing program 1 (id=24895): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 9.257619845s ago: executing program 1 (id=24900): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 8.91313204s ago: executing program 1 (id=24912): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)={0x28, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0xc, 0x145, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd=r0}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x28}}, 0x2004c000) 8.870093364s ago: executing program 37 (id=24912): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)={0x28, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0xc, 0x145, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd=r0}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x28}}, 0x2004c000) 2.459526878s ago: executing program 8 (id=25056): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 2.392196956s ago: executing program 8 (id=25058): io_setup(0x4, &(0x7f0000000040)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) io_submit(r0, 0x3, &(0x7f0000002800)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, r1, &(0x7f0000000080)="84", 0x1, 0x9, 0x0, 0x4}, 0x0, 0x0]) 1.772738809s ago: executing program 0 (id=25067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="c9f7b986f2ca3a0800e370723eae", 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.634645312s ago: executing program 0 (id=25077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x2]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x48044) 1.585110945s ago: executing program 0 (id=25071): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x200812, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1.528551302s ago: executing program 0 (id=25073): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.435023342s ago: executing program 0 (id=25078): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r0, 0x7) listen(r0, 0x0) 1.305293321s ago: executing program 8 (id=25085): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x3ff, 0x9, 0x40, 0x9, 0x40, 0xf, 0x80000006, 0x3}, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x108) 1.267525809s ago: executing program 0 (id=25086): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x8) 404.048457ms ago: executing program 8 (id=25103): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0xfffffffffffffe52, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) 403.979897ms ago: executing program 7 (id=25104): sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x4020042) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14) 380.071643ms ago: executing program 7 (id=25105): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdir(&(0x7f0000000040)='./mount_sys\x00', 0x1ff) 358.803106ms ago: executing program 8 (id=25106): syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x3000005, 0x401d031, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000682000/0x4000)=nil, 0xa) 254.221123ms ago: executing program 8 (id=25107): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xffffff01, 0x2) 221.720685ms ago: executing program 9 (id=25108): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='!sub:evt:mod:syz_mod_123', 0x18) 190.35506ms ago: executing program 9 (id=25109): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x9, 0x21, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x8, 0x8000, 0x5b30, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x0, 0x10}}) 149.888117ms ago: executing program 7 (id=25110): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) listen(r0, 0x5) listen(r0, 0xfffffffe) 111.284278ms ago: executing program 9 (id=25112): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000", 0x21) 111.049793ms ago: executing program 7 (id=25113): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x0, 0x1}, 0x8) 87.501825ms ago: executing program 9 (id=25114): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv4/vs/conn_lfactor\x00', 0x2, 0x0) write$bt_hci(r0, &(0x7f00000005c0)=ANY=[], 0x11) 86.686144ms ago: executing program 7 (id=25115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x25000, 0x9000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xfffffffffffff001, 0x13000}) 56.838803ms ago: executing program 9 (id=25117): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000a80)={'c', ' *:* ', 'rwm\x00'}, 0xa) 23.816159ms ago: executing program 9 (id=25118): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='measure #', 0x9) 0s ago: executing program 7 (id=25119): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x33) ioctl$BLKZEROOUT(r0, 0xc01070ce, &(0x7f0000000040)={0x1, 0xffff}) kernel console output (not intermixed with test programs): 67295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16286 comm="syz.7.22136" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x0 [ 816.790966][T16343] netlink: 'syz.1.22156': attribute type 32 has an invalid length. [ 816.790981][T16343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22156'. [ 816.802020][T16343] bond12: Setting coupled_control to off (0) [ 816.813634][T16346] netlink: 8 bytes leftover after parsing attributes in process `syz.8.22157'. [ 817.006782][T16411] netlink: 36 bytes leftover after parsing attributes in process `syz.1.22166'. [ 817.014398][T16413] block nbd1: Unsupported socket: should be TCP or UNIX. [ 817.414342][T16478] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 817.505344][T16498] 9p: p9: multiple sources not supported [ 817.546288][T16510] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 817.630758][T16520] Bluetooth: hci0: unsupported parameter 5161 [ 817.630772][T16520] Bluetooth: hci0: unsupported parameter 8192 [ 817.630779][T16520] Bluetooth: hci0: unsupported parameter 5161 [ 817.630792][T16520] Bluetooth: hci0: unsupported parameter 8192 [ 817.697359][T19027] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 817.802921][ T43] audit: type=1326 audit(1700006945.953:10034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16553 comm="syz.8.22220" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x0 [ 818.035417][T16594] UBLK_F_QUIESCE requires UBLK_F_USER_RECOVERY [ 818.209253][T10701] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 828.711815][T16671] netlink: 'syz.1.22261': attribute type 1 has an invalid length. [ 828.711829][T16671] __nla_validate_parse: 2 callbacks suppressed [ 828.711835][T16671] netlink: 232 bytes leftover after parsing attributes in process `syz.1.22261'. [ 828.711843][T16671] netlink: 'syz.1.22261': attribute type 1 has an invalid length. [ 828.832622][T16696] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.8.22269:16696 [ 828.852252][T16699] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22270'. [ 829.034243][T14022] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 829.219796][T14022] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 829.220621][T14022] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 829.220634][T14022] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 829.220644][T14022] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 829.220664][T14022] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 829.220677][T14022] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 829.221937][T14022] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 829.221949][T14022] usb 6-1: Product: syz [ 829.221957][T14022] usb 6-1: Manufacturer: syz [ 829.224807][T14022] cdc_wdm 6-1:1.0: skipping garbage [ 829.224819][T14022] cdc_wdm 6-1:1.0: skipping garbage [ 829.253273][T14022] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 829.253288][T14022] cdc_wdm 6-1:1.0: Unknown control protocol [ 829.455875][ T57] usb 6-1: USB disconnect, device number 21 [ 829.595436][T16844] netlink: 'syz.8.22313': attribute type 3 has an invalid length. [ 829.902754][T16900] random: crng reseeded on system resumption [ 829.908334][T16900] Restarting kernel threads ... [ 829.908802][T16900] Done restarting kernel threads. [ 830.024857][T16923] hugetlbfs: Bad value 'p' for mount option 'nr_inodes' [ 830.024857][T16923] [ 831.264542][T17062] tipc: Enabled bearer , priority 10 [ 831.462954][T17098] nbd: must specify a size in bytes for the device [ 831.555497][ T1534] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 831.580780][ T1534] kernel write not supported for file /uhid (pid: 1534 comm: kworker/0:2) [ 831.593584][T17117] Bluetooth: hci0: unsupported parameter 5135 [ 831.593601][T17117] Bluetooth: hci0: unsupported parameter 8192 [ 831.593610][T17117] Bluetooth: hci0: unsupported parameter 5135 [ 831.593619][T17117] Bluetooth: hci0: unsupported parameter 8192 [ 831.761471][T17141] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22406'. [ 831.761497][T17141] netlink: 70 bytes leftover after parsing attributes in process `syz.7.22406'. [ 832.220956][ T1158] IPVS: starting estimator thread 0... [ 832.326455][T17198] IPVS: using max 47 ests per chain, 112800 per kthread [ 832.506451][T14386] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 832.667100][ T1534] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 832.667765][T14386] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 832.668715][T14386] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 832.668740][T14386] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 832.668767][T14386] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.674795][T17205] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 832.676528][T14386] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 832.951211][ T43] audit: type=1326 audit(1700006960.121:10035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17288 comm="syz.7.22446" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706efec code=0x0 [ 832.953353][ T57] usb 13-1: USB disconnect, device number 2 [ 833.406353][T17324] netlink: 52 bytes leftover after parsing attributes in process `syz.1.22453'. [ 833.406367][T17324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22453'. [ 833.406377][T17324] netlink: 52 bytes leftover after parsing attributes in process `syz.1.22453'. [ 833.406384][T17324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22453'. [ 833.406392][T17324] netlink: 52 bytes leftover after parsing attributes in process `syz.1.22453'. [ 833.767591][ T1534] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 833.970968][T17370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22468'. [ 834.072579][T17379] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 834.588533][T17401] support for cryptoloop has been removed. Use dm-crypt instead. [ 834.869036][T17416] Bluetooth: hci0: unsupported parameter 5135 [ 834.869050][T17416] Bluetooth: hci0: unsupported parameter 8192 [ 834.869057][T17416] Bluetooth: hci0: unsupported parameter 5135 [ 834.869064][T17416] Bluetooth: hci0: unsupported parameter 8192 [ 834.878933][ T1534] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 834.898028][T17418] 0x000000000000-0x000000010000 : "" [ 834.911390][T17418] ftl_cs: FTL header not found. [ 835.013248][T17438] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1169 instead [ 835.013379][T17438] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 835.013388][T17438] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 835.013397][T17438] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 835.019259][T17438] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 835.019275][T17438] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 835.028130][T17438] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 835.028141][T17438] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 835.078979][T17443] devtmpfs: Cannot change global quota limit on remount [ 835.373295][T17497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22511'. [ 835.373309][T17497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22511'. [ 835.373324][T17497] netlink: 'syz.1.22511': attribute type 6 has an invalid length. [ 835.411603][T17505] Invalid logical block size (768) [ 835.415434][T17503] o2cb: This node has not been configured. [ 835.415442][T17503] o2cb: Cluster check failed. Fix errors before retrying. [ 835.415460][T17503] (syz.0.22512,17503,1):user_dlm_register:674 ERROR: status = -22 [ 835.415474][T17503] (syz.0.22512,17503,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain0" [ 835.435899][T17507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22514'. [ 835.632019][T17528] program syz.8.22523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 836.001795][ T1534] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 836.007816][T17575] netlink: 108 bytes leftover after parsing attributes in process `syz.0.22540'. [ 836.314584][T17621] netlink: 8 bytes leftover after parsing attributes in process `syz.7.22558'. [ 836.323722][T17621] ipvlan2: entered allmulticast mode [ 836.323739][T17621] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 836.329668][T17621] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 836.406510][T17642] netlink: 'syz.8.22564': attribute type 4 has an invalid length. [ 836.406525][T17642] netlink: 'syz.8.22564': attribute type 5 has an invalid length. [ 836.406532][T17642] netlink: 'syz.8.22564': attribute type 1 has an invalid length. [ 836.406539][T17642] iwpm_parse_nlmsg: Invalid attribute (msg type Register Pid response ret = -22) [ 836.568494][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.7.22570'. [ 836.568516][T17662] netlink: 'syz.7.22570': attribute type 10 has an invalid length. [ 836.568524][T17662] netlink: 32 bytes leftover after parsing attributes in process `syz.7.22570'. [ 836.571811][T17662] geneve2: entered promiscuous mode [ 836.571823][T17662] geneve2: entered allmulticast mode [ 836.660615][T17677] binder: 17674:17677 ioctl 4018620d 0 returned -22 [ 836.661163][T17677] binder: 17674:17677 ioctl c0306201 80000180 returned -11 [ 836.661679][T17676] netlink: 'syz.0.22575': attribute type 21 has an invalid length. [ 836.661746][T17676] netlink: 128 bytes leftover after parsing attributes in process `syz.0.22575'. [ 836.661822][T17676] netlink: 3 bytes leftover after parsing attributes in process `syz.0.22575'. [ 836.834411][T17708] netlink: 'syz.7.22582': attribute type 3 has an invalid length. [ 836.986152][T17731] netlink: 'syz.7.22591': attribute type 2 has an invalid length. [ 837.102873][ T1534] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 837.124642][T17751] netlink: 'syz.8.22598': attribute type 1 has an invalid length. [ 837.178298][T17761] trusted_key: encrypted_key: key trusted:syz not found [ 837.449734][T17786] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.22612' resets device [ 837.649628][T17799] bridge_slave_0: default FDB implementation only supports local addresses [ 838.064650][T17850] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22638'. [ 838.224123][T15612] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 838.363995][ T43] audit: type=1800 audit(1700006965.184:10036): pid=17904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.22659" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 838.569941][T17942] tmpfs: Cannot change global quota limit on remount [ 838.661841][T17957] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 838.661857][T17957] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 838.661928][T17957] vhci_hcd vhci_hcd.0: Device attached [ 838.663169][T17960] vhci_hcd: connection closed [ 838.663385][ T5969] vhci_hcd vhci_hcd.8: stop threads [ 838.663402][ T5969] vhci_hcd vhci_hcd.8: release socket [ 838.663411][ T5969] vhci_hcd vhci_hcd.8: disconnect device [ 838.988601][T18003] netlink: 'syz.1.22694': attribute type 2 has an invalid length. [ 839.148162][T18038] sctp: [Deprecated]: syz.1.22707 (pid 18038) Use of int in max_burst socket option. [ 839.148162][T18038] Use struct sctp_assoc_value instead [ 839.231451][T18056] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 839.325202][T15612] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 839.441676][T19538] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 839.514688][T18102] syz.0.22728 (18102): drop_caches: 4 [ 839.615774][T19538] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 839.616852][T19538] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 839.616870][T19538] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 839.616888][T19538] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.624156][T18044] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 839.625792][T19538] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 840.437369][T19538] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 840.651713][ T30] usb 6-1: USB disconnect, device number 22 [ 840.709538][T18180] tipc: Started in network mode [ 840.709550][T18180] tipc: Node identity , cluster identity 4711 [ 840.709557][T18180] tipc: Failed to obtain node identity [ 840.709569][T18180] tipc: Enabling of bearer rejected, failed to enable media [ 840.802306][ T43] audit: type=1326 audit(1700006967.477:10037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.8.22757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 840.802460][ T43] audit: type=1326 audit(1700006967.477:10038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.8.22757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 840.803116][ T43] audit: type=1326 audit(1700006967.477:10039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.8.22757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 840.803200][ T43] audit: type=1326 audit(1700006967.477:10040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.8.22757" exe="/syz-executor" sig=0 arch=40000003 syscall=197 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 840.803379][ T43] audit: type=1326 audit(1700006967.477:10041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.8.22757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 840.803416][ T43] audit: type=1326 audit(1700006967.477:10042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.8.22757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 840.803452][ T43] audit: type=1326 audit(1700006967.477:10043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.8.22757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 840.803822][ T43] audit: type=1326 audit(1700006967.477:10044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.8.22757" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 840.804099][ T43] audit: type=1326 audit(1700006967.477:10045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18205 comm="syz.8.22757" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 840.914416][T18223] __nla_validate_parse: 2 callbacks suppressed [ 840.914435][T18223] netlink: 8 bytes leftover after parsing attributes in process `syz.7.22762'. [ 840.914452][T18223] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22762'. [ 840.914464][T18223] netlink: 13 bytes leftover after parsing attributes in process `syz.7.22762'. [ 840.914477][T18223] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22762'. [ 840.914490][T18223] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22762'. [ 841.087413][T18252] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 841.087440][T18252] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 841.087558][T18252] vhci_hcd vhci_hcd.0: Device attached [ 841.180071][T18269] netlink: 108 bytes leftover after parsing attributes in process `syz.7.22776'. [ 841.209791][T18271] validate_nla: 1 callbacks suppressed [ 841.209805][T18271] netlink: 'syz.0.22777': attribute type 4 has an invalid length. [ 841.220943][T18274] tc_dump_action: action bad kind [ 841.365492][ T57] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 841.386596][ T988] usb 54-1: SetAddress Request (2) to port 0 [ 841.386631][ T988] usb 54-1: new SuperSpeed USB device number 2 using vhci_hcd [ 841.525434][ T57] usb 13-1: Using ep0 maxpacket: 32 [ 841.529697][T18254] vhci_hcd: cannot find a urb of seqnum 6 max seqnum 1 [ 841.529868][ T12] vhci_hcd vhci_hcd.8: stop threads [ 841.529879][ T12] vhci_hcd vhci_hcd.8: release socket [ 841.534016][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 841.534525][ T57] usb 13-1: unable to get BOS descriptor or descriptor too short [ 841.534549][ T57] usb 13-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 841.535236][ T57] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 841.535253][ T57] usb 13-1: can't read configurations, error -71 [ 841.547439][T19538] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 842.232895][T18372] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 842.247222][T18374] netlink: 16 bytes leftover after parsing attributes in process `syz.8.22816'. [ 842.601421][T18436] netlink: 20 bytes leftover after parsing attributes in process `syz.8.22836'. [ 842.609396][T18440] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22837'. [ 842.610213][T18440] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22837'. [ 842.627582][T18203] udevd[18203]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 842.632192][T18203] udevd[18203]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 842.658446][T19538] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 842.888932][T18476] netlink: Setting conntrack mark requires 'commit' flag. [ 842.888950][T18476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 843.206153][T14386] hid_parser_main: 98 callbacks suppressed [ 843.206168][T14386] lg-g15 0003:046D:0A07.000E: unknown main item tag 0x0 [ 843.206227][T14386] lg-g15 0003:046D:0A07.000E: unknown main item tag 0x0 [ 843.206239][T14386] lg-g15 0003:046D:0A07.000E: unknown main item tag 0x0 [ 843.206251][T14386] lg-g15 0003:046D:0A07.000E: unknown main item tag 0x0 [ 843.206263][T14386] lg-g15 0003:046D:0A07.000E: unknown main item tag 0x0 [ 843.209213][T14386] lg-g15 0003:046D:0A07.000E: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 843.241637][T18536] fido_id[18536]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 843.383023][T18571] usb usb9: usbfs: process 18571 (syz.8.22876) did not claim interface 20 before use [ 843.479967][T14386] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 843.507928][T18594] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 843.509745][T14386] hid-generic 0000:0000:0000.000F: hidraw1: HID v0.00 Device [syz0] on syz0 [ 843.550446][T18600] fido_id[18600]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 843.613697][T18620] random: crng reseeded on system resumption [ 843.672541][T18629] [U]  [ 843.672557][T18629] [U] K{ [ 843.672618][T18629] [U] T 1ŠFFˊ`GJǘGO/MC [ 843.672924][T18629] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 843.673034][T18629] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 843.673597][T18629] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 843.674298][T18629] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 843.674434][T18629] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 843.674559][T18629] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 843.674841][T18629] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 843.676026][T18629] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 843.676180][T18629] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 843.676213][T18629] [U] 22Ʃ۩X?0;3U [ 843.676584][T18629] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 843.676693][T18629] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 843.676787][T18629] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 843.676843][T18629] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 843.677008][T18629] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 843.677022][T18629] [U] EC [ 843.677152][T18629] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 843.679102][T18628] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 843.786747][T15612] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 844.575049][T18721] openvswitch: netlink: Unknown key attributes 20 [ 844.590955][T19538] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 844.590974][T19538] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 844.591174][T19538] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 844.591187][T19538] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 844.594108][T19538] hid-generic 0000:0000:0000.0010: hidraw1: HID v0.03 Device [syz1] on syz1 [ 844.634953][T18732] fido_id[18732]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 844.639609][T18740] tipc: Enabling of bearer rejected, failed to enable media [ 844.881011][T19538] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 845.132104][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 845.132154][ T43] audit: type=1326 audit(1700006971.519:10073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.1.22943" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 845.132188][ T43] audit: type=1326 audit(1700006971.519:10074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.1.22943" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 845.133772][ T43] audit: type=1326 audit(1700006971.519:10075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.1.22943" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 845.133797][ T43] audit: type=1326 audit(1700006971.519:10076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.1.22943" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 845.133817][ T43] audit: type=1326 audit(1700006971.519:10077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.1.22943" exe="/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 845.133961][ T43] audit: type=1326 audit(1700006971.519:10078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.1.22943" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 845.134444][ T43] audit: type=1326 audit(1700006971.519:10079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.1.22943" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 845.134477][ T43] audit: type=1326 audit(1700006971.519:10080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.1.22943" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 845.134509][ T43] audit: type=1326 audit(1700006971.519:10081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.1.22943" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 845.134530][ T43] audit: type=1326 audit(1700006971.519:10082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18775 comm="syz.1.22943" exe="/syz-executor" sig=0 arch=40000003 syscall=118 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 845.405330][T18813] CacheFiles: Failed to register: -95 [ 845.741939][T18856] netlink: 'syz.7.22969': attribute type 7 has an invalid length. [ 845.741953][T18856] netlink: 'syz.7.22969': attribute type 8 has an invalid length. [ 845.854039][T18870] netlink: 'syz.7.22974': attribute type 3 has an invalid length. [ 845.854054][T18870] netlink: 'syz.7.22974': attribute type 1 has an invalid length. [ 846.003102][T19538] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 846.053645][T18895] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000) [ 846.560098][T18980] netlink: 'syz.8.23010': attribute type 1 has an invalid length. [ 846.560112][T18980] __nla_validate_parse: 5 callbacks suppressed [ 846.560118][T18980] netlink: 200 bytes leftover after parsing attributes in process `syz.8.23010'. [ 846.560127][T18980] netlink: 41 bytes leftover after parsing attributes in process `syz.8.23010'. [ 846.761889][ T988] usb 54-1: device descriptor read/8, error -110 [ 846.872795][T19087] batman_adv: batadv0: Adding interface: wlan0 [ 846.872811][T19087] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.872836][T19087] batman_adv: batadv0: Interface activated: wlan0 [ 847.104728][T15612] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 847.106367][T24777] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 847.189564][ T988] usb usb54-port1: attempt power cycle [ 847.264472][T24777] usb 12-1: Using ep0 maxpacket: 8 [ 847.264936][T24777] usb 12-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 847.265768][T24777] usb 12-1: config index 0 descriptor too short (expected 5924, got 36) [ 847.265786][T24777] usb 12-1: config 250 has an invalid interface number: 228 but max is -1 [ 847.265801][T24777] usb 12-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 847.265816][T24777] usb 12-1: config 250 has no interface number 0 [ 847.265840][T24777] usb 12-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 847.265861][T24777] usb 12-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 847.265880][T24777] usb 12-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 847.265896][T24777] usb 12-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 847.265915][T24777] usb 12-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 847.265934][T24777] usb 12-1: config 250 interface 228 has no altsetting 0 [ 847.268485][T24777] usb 12-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 847.268499][T24777] usb 12-1: Product: syz [ 847.268506][T24777] usb 12-1: SerialNumber: syz [ 847.271878][T24777] hub 12-1:250.228: bad descriptor, ignoring hub [ 847.271891][T24777] hub 12-1:250.228: probe with driver hub failed with error -5 [ 847.493691][T24777] usblp 12-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 847.501002][T19216] netlink: 220 bytes leftover after parsing attributes in process `syz.1.23047'. [ 847.788319][ T988] usb usb54-port1: unable to enumerate USB device [ 847.820077][ T5990] usb 12-1: USB disconnect, device number 3 [ 847.832829][ T5990] usblp0: removed [ 847.883083][T19249] netlink: 16146 bytes leftover after parsing attributes in process `syz.1.23058'. [ 848.216122][T15612] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 848.338636][T19312] xt_socket: unknown flags 0x50 [ 848.413528][T19325] netlink: 'syz.8.23087': attribute type 1 has an invalid length. [ 849.042100][T19410] netlink: 132 bytes leftover after parsing attributes in process `syz.8.23119'. [ 849.118555][T19425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23121'. [ 849.118577][T19425] netlink: 'syz.0.23121': attribute type 14 has an invalid length. [ 849.235887][T19444] tmpfs: Cannot change global quota limit on remount [ 849.327517][T15612] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 849.494271][T15612] kernel write not supported for file /uinput (pid: 15612 comm: kworker/0:8) [ 849.618587][T19508] bridge: RTM_NEWNEIGH with unconfigured vlan 5 on bridge_slave_0 [ 849.661001][T19514] netlink: 'syz.8.23154': attribute type 2 has an invalid length. [ 849.663131][T19515] netlink: 'syz.0.23155': attribute type 1 has an invalid length. [ 849.663143][T19515] netlink: 212 bytes leftover after parsing attributes in process `syz.0.23155'. [ 849.801911][T19541] netlink: 8 bytes leftover after parsing attributes in process `syz.8.23165'. [ 849.801937][T19541] netlink: 'syz.8.23165': attribute type 14 has an invalid length. [ 849.814896][T20992] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.818431][ T12] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.828706][ T12] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.828746][ T12] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.046579][T19565] VFS: Can't find a romfs filesystem on dev romfs. [ 850.046579][T19565] [ 850.050015][T19565] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 850.050015][T19565] [ 850.438846][T15612] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 850.561510][T19622] ubi: mtd0 is already attached to ubi0 [ 850.626450][T19632] [U]  [ 850.626467][T19632] [U] K{ [ 850.626528][T19632] [U] T 1ŠFFˊ`GJǘGO/MC [ 850.626831][T19632] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 850.626947][T19632] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 850.627468][T19632] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 850.628111][T19632] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 850.628248][T19632] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 850.628468][T19632] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 850.628763][T19632] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 850.631571][T19632] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 850.631876][T19632] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 850.631967][T19632] [U] 22Ʃ۩X?0;3U [ 850.632535][T19632] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 850.632985][T19632] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 850.633148][T19632] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 850.633244][T19632] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 850.633489][T19632] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 850.633515][T19632] [U] EC [ 850.633756][T19632] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 850.652620][T19631] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 850.794075][T19649] netlink: 108 bytes leftover after parsing attributes in process `syz.0.23204'. [ 850.854862][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 850.854874][ T43] audit: type=1326 audit(1700006976.881:10105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19655 comm="syz.0.23208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 850.854983][ T43] audit: type=1326 audit(1700006976.881:10106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19655 comm="syz.0.23208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 850.856717][ T43] audit: type=1326 audit(1700006976.881:10107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19655 comm="syz.0.23208" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf703efec code=0x7ffc0000 [ 850.856829][ T43] audit: type=1326 audit(1700006976.881:10108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19655 comm="syz.0.23208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 850.856932][ T43] audit: type=1326 audit(1700006976.881:10109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19655 comm="syz.0.23208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 850.859280][ T43] audit: type=1326 audit(1700006976.881:10110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19655 comm="syz.0.23208" exe="/syz-executor" sig=0 arch=40000003 syscall=78 compat=1 ip=0xf703efec code=0x7ffc0000 [ 850.859386][ T43] audit: type=1326 audit(1700006976.881:10111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19655 comm="syz.0.23208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 850.859501][ T43] audit: type=1326 audit(1700006976.881:10112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19655 comm="syz.0.23208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 850.916633][T19664] sg_write: data in/out 12582877/14 bytes for SCSI command 0x0-- guessing data in; [ 850.916633][T19664] program syz.0.23212 not setting count and/or reply_len properly [ 850.972381][ T57] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 851.023835][T19674] syz.1.23217 (19674) used obsolete PPPIOCDETACH ioctl [ 851.137284][T19682] lo speed is unknown, defaulting to 1000 [ 851.138727][T19682] wlan0 speed is unknown, defaulting to 1000 [ 851.154012][ T57] usb 13-1: Using ep0 maxpacket: 16 [ 851.154613][ T57] usb 13-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 851.156330][ T57] usb 13-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 851.156353][ T57] usb 13-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 851.156374][ T57] usb 13-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 851.156395][ T57] usb 13-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 851.156417][ T57] usb 13-1: config 0 interface 0 has no altsetting 0 [ 851.158634][ T57] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.158654][ T57] usb 13-1: Product: syz [ 851.158667][ T57] usb 13-1: Manufacturer: syz [ 851.158679][ T57] usb 13-1: SerialNumber: syz [ 851.161960][ T57] usb 13-1: config 0 descriptor?? [ 851.166330][T19636] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 851.351442][T19725] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 851.351465][T19725] Error validating options; rc = [-22] [ 851.396166][T19636] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 851.408897][ T57] input: syz syz as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input75 [ 851.549153][T15612] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 851.609906][T19760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23238'. [ 851.682862][T15612] usb 13-1: USB disconnect, device number 5 [ 851.719312][T19787] netlink: 'syz.7.23245': attribute type 29 has an invalid length. [ 851.722017][T19787] netlink: 'syz.7.23245': attribute type 29 has an invalid length. [ 851.762442][T19792] vivid-007: disconnect [ 851.763309][T19791] vivid-007: reconnect [ 851.763533][T19793] overlayfs: failed to resolve '//file0': -2 [ 852.078297][T19833] program syz.7.23262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 852.197423][ T43] audit: type=1326 audit(1700006978.135:10113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19856 comm="syz.0.23272" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efec code=0x0 [ 852.255895][T19865] netlink: 436 bytes leftover after parsing attributes in process `syz.8.23275'. [ 852.412947][T19890] netlink: 35 bytes leftover after parsing attributes in process `syz.1.23284'. [ 852.660469][T15612] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 853.134228][T19949] tmpfs: Too small a size for current use [ 853.242953][ T988] wlan0 speed is unknown, defaulting to 1000 [ 853.292636][T15612] kernel write not supported for file /vcs (pid: 15612 comm: kworker/0:8) [ 853.498826][T19977] netlink: 52 bytes leftover after parsing attributes in process `syz.7.23315'. [ 853.782445][T15612] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 854.381556][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 854.507809][T20019] netlink: 24 bytes leftover after parsing attributes in process `syz.7.23331'. [ 854.507825][T20019] netlink: 40 bytes leftover after parsing attributes in process `syz.7.23331'. [ 854.624287][T20039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 854.723327][ T1128] ata1.00: exception Emask 0x0 SAct 0x40000 SErr 0x0 action 0x6 [ 854.723354][ T1128] ata1.00: waking up from sleep [ 854.723404][ T1128] ata1: hard resetting link [ 854.883572][ T1534] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 854.979334][T20091] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23357'. [ 854.979368][T20091] netlink: 12 bytes leftover after parsing attributes in process `syz.7.23357'. [ 855.069786][ T1128] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 855.070596][ T1128] ata1.00: configured for UDMA/100 [ 855.070738][ T1128] ata1: EH complete [ 855.405450][T20136] binder_alloc: binder_alloc_mmap_handler: 20135 80ffd000-81000000 already mapped failed -16 [ 855.435424][T20140] nftables ruleset with unbound set [ 855.868406][T20172] lo speed is unknown, defaulting to 1000 [ 855.869251][T20172] wlan0 speed is unknown, defaulting to 1000 [ 855.921588][T20200] can0: slcan on ptm0. [ 855.986053][T20197] can0 (unregistered): slcan off ptm0. [ 855.994587][T15612] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 856.282557][T20254] lo speed is unknown, defaulting to 1000 [ 856.287485][T20254] wlan0 speed is unknown, defaulting to 1000 [ 856.319671][T20273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23409'. [ 856.344980][T20273] macvtap1: entered promiscuous mode [ 856.344995][T20273] batadv0: entered promiscuous mode [ 856.345615][T20273] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 856.346731][T20273] batadv0: left promiscuous mode [ 856.443566][T20301] ip6gretap0: entered promiscuous mode [ 856.553920][T24777] kernel write not supported for file /input/mouse0 (pid: 24777 comm: kworker/3:1) [ 856.630053][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23424'. [ 856.639439][T20332] ip6erspan0: entered promiscuous mode [ 856.668291][T20339] lo speed is unknown, defaulting to 1000 [ 856.668995][T20339] wlan0 speed is unknown, defaulting to 1000 [ 856.898977][ T43] audit: type=1326 audit(1700006982.534:10114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20387 comm="syz.7.23435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 856.899076][ T43] audit: type=1326 audit(1700006982.534:10115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20387 comm="syz.7.23435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 856.901094][ T43] audit: type=1326 audit(1700006982.534:10116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20387 comm="syz.7.23435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 856.902031][ T43] audit: type=1326 audit(1700006982.534:10117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20387 comm="syz.7.23435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 856.902260][ T43] audit: type=1326 audit(1700006982.534:10118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20387 comm="syz.7.23435" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf706efec code=0x7ffc0000 [ 856.903748][ T43] audit: type=1326 audit(1700006982.543:10119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20387 comm="syz.7.23435" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf706efec code=0x7ffc0000 [ 856.904185][ T43] audit: type=1326 audit(1700006982.543:10120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20387 comm="syz.7.23435" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf706efec code=0x7ffc0000 [ 856.905043][ T43] audit: type=1326 audit(1700006982.543:10121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20387 comm="syz.7.23435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 856.908340][ T43] audit: type=1326 audit(1700006982.543:10122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20387 comm="syz.7.23435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 856.911016][ T43] audit: type=1326 audit(1700006982.543:10123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20387 comm="syz.7.23435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 857.035888][T20407] lo speed is unknown, defaulting to 1000 [ 857.036566][T20407] wlan0 speed is unknown, defaulting to 1000 [ 857.065479][T20418] netlink: 12 bytes leftover after parsing attributes in process `syz.8.23441'. [ 857.116856][ T1534] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 857.305762][T20467] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 857.323583][T20471] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 857.445528][T20493] EXT4-fs: Conflicting test_dummy_encryption options [ 857.735887][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23489'. [ 857.942476][T20585] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23504'. [ 857.942498][T20585] netlink: 'syz.0.23504': attribute type 1 has an invalid length. [ 858.044387][T20602] netlink: 12 bytes leftover after parsing attributes in process `syz.8.23510'. [ 858.044419][T20602] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 858.107736][T20611] program syz.8.23514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 858.139161][T20617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23516'. [ 858.158634][T20621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23518'. [ 858.183017][T20623] netlink: 32 bytes leftover after parsing attributes in process `syz.8.23520'. [ 858.218835][T15612] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 858.438588][T20664] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 858.506903][T14022] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 858.666786][T14022] usb 6-1: Using ep0 maxpacket: 8 [ 858.667596][T14022] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 858.668561][T14022] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 858.668582][T14022] usb 6-1: config 179 has no interface number 0 [ 858.668614][T14022] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 858.668635][T14022] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 858.668658][T14022] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 858.668680][T14022] usb 6-1: config 179 interface 65 has no altsetting 0 [ 858.668705][T14022] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.695707][T14022] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input76 [ 858.895603][T15612] usb 6-1: USB disconnect, device number 23 [ 858.895629][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 859.015981][T20743] binder: 20742:20743 ioctl 400c620e 80000100 returned -22 [ 859.034247][T20745] netlink: 24 bytes leftover after parsing attributes in process `syz.8.23557'. [ 859.131774][T20758] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 859.341675][T15612] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 859.498828][T20797] netlink: 4 bytes leftover after parsing attributes in process `syz.7.23578'. [ 860.440383][T15612] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 860.492299][T20928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23629'. [ 860.496189][T20928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23629'. [ 860.721626][T20972] netlink: 'syz.8.23645': attribute type 49 has an invalid length. [ 860.858300][T20972] ip6gretap0: left promiscuous mode [ 860.858645][T20972] ip6gretap0: entered promiscuous mode [ 860.858660][T20972] ip6gretap0: entered allmulticast mode [ 861.502721][T21091] netlink: 'syz.0.23691': attribute type 10 has an invalid length. [ 861.502806][T21091] gretap0: entered promiscuous mode [ 861.502817][T21091] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 861.551293][T15612] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 862.662665][ T1534] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 862.667028][T21139] syz.1.23700: page allocation failure: order:0, mode:0x144cca(GFP_HIGHUSER_MOVABLE|__GFP_RETRY_MAYFAIL|__GFP_COMP), nodemask=0,cpuset=/,mems_allowed=0-1 [ 862.667089][T21139] CPU: 3 UID: 0 PID: 21139 Comm: syz.1.23700 Tainted: G L syzkaller #0 PREEMPT(full) [ 862.667105][T21139] Tainted: [L]=SOFTLOCKUP [ 862.667109][T21139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 862.667116][T21139] Call Trace: [ 862.667120][T21139] [ 862.667125][T21139] dump_stack_lvl+0x100/0x190 [ 862.667197][T21139] warn_alloc.cold+0x9e/0xb2 [ 862.667211][T21139] ? __pfx_warn_alloc+0x10/0x10 [ 862.667246][T21139] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 862.667279][T21139] ? __pfx_get_page_from_freelist+0x10/0x10 [ 862.667296][T21139] __alloc_frozen_pages_noprof+0xcb6/0x3300 [ 862.667317][T21139] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 862.667330][T21139] ? __lock_acquire+0x5c0/0x1f40 [ 862.667346][T21139] ? __pfx_try_to_migrate_one+0x10/0x10 [ 862.667372][T21139] ? __lock_acquire+0x5c0/0x1f40 [ 862.667390][T21139] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 862.667409][T21139] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 862.667430][T21139] ? policy_nodemask+0xed/0x4f0 [ 862.667456][T21139] alloc_pages_mpol+0x201/0x550 [ 862.667480][T21139] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 862.667500][T21139] folio_alloc_mpol_noprof+0x36/0x260 [ 862.667512][T21139] alloc_migration_target_by_mpol+0x2c1/0x650 [ 862.667526][T21139] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 862.667555][T21139] ? __pfx___might_resched+0x10/0x10 [ 862.667577][T21139] migrate_pages_batch+0x5c4/0x4680 [ 862.667596][T21139] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 862.667613][T21139] ? __pfx_migrate_pages_batch+0x10/0x10 [ 862.667630][T21139] ? kasan_save_track+0x14/0x30 [ 862.667643][T21139] ? __kasan_slab_alloc+0x89/0x90 [ 862.667657][T21139] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 862.667671][T21139] ? mpol_set_shared_policy+0xa5/0x850 [ 862.667682][T21139] ? mbind_range+0x339/0x550 [ 862.667693][T21139] ? __do_fast_syscall_32+0x13a/0x8b0 [ 862.667706][T21139] ? do_fast_syscall_32+0x32/0x70 [ 862.667718][T21139] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 862.667740][T21139] migrate_pages_sync+0x12c/0x880 [ 862.667757][T21139] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 862.667771][T21139] ? look_up_lock_class+0x55/0x120 [ 862.667784][T21139] ? __pfx_migrate_pages_sync+0x10/0x10 [ 862.667804][T21139] ? __lock_acquire+0x5c0/0x1f40 [ 862.667822][T21139] migrate_pages+0x1a83/0x2850 [ 862.667842][T21139] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 862.667856][T21139] ? mpol_set_shared_policy+0x26a/0x850 [ 862.667867][T21139] ? mpol_set_shared_policy+0x26a/0x850 [ 862.667879][T21139] ? __pfx_migrate_pages+0x10/0x10 [ 862.667898][T21139] ? do_mbind+0x555/0xfd0 [ 862.667915][T21139] do_mbind+0x5a4/0xfd0 [ 862.667930][T21139] ? __pfx_do_mbind+0x10/0x10 [ 862.667948][T21139] ? __pfx_get_nodes+0x10/0x10 [ 862.667963][T21139] ? find_held_lock+0x2b/0x80 [ 862.667975][T21139] ? kcov_ioctl+0x17a/0x760 [ 862.667992][T21139] kernel_mbind+0x1b7/0x200 [ 862.668004][T21139] ? __pfx_kernel_mbind+0x10/0x10 [ 862.668020][T21139] __do_fast_syscall_32+0x13a/0x8b0 [ 862.668035][T21139] do_fast_syscall_32+0x32/0x70 [ 862.668048][T21139] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 862.668066][T21139] RIP: 0023:0xf6fdefec [ 862.668081][T21139] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 862.668087][T21139] RSP: 002b:00000000f53ac50c EFLAGS: 00000292 ORIG_RAX: 0000000000000112 [ 862.668098][T21139] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 862.668105][T21139] RDX: 0000000000000002 RSI: 0000000080000000 RDI: 0000000000000008 [ 862.668113][T21139] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 862.668120][T21139] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 862.668126][T21139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 862.668141][T21139] [ 862.668146][T21139] Mem-Info: [ 862.668151][T21139] active_anon:6389 inactive_anon:1584 isolated_anon:1525 [ 862.668151][T21139] active_file:2563 inactive_file:24946 isolated_file:0 [ 862.668151][T21139] unevictable:1000 dirty:650 writeback:0 [ 862.668151][T21139] slab_reclaimable:7831 slab_unreclaimable:71769 [ 862.668151][T21139] mapped:25825 shmem:3919 pagetables:2736 [ 862.668151][T21139] sec_pagetables:377 bounce:0 [ 862.668151][T21139] kernel_misc_reclaimable:0 [ 862.668151][T21139] free:43003 free_pcp:119 free_cma:0 [ 862.668178][T21139] Node 0 active_anon:8kB inactive_anon:8kB active_file:100kB inactive_file:40kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8448kB pagetables:1312kB sec_pagetables:1288kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 862.668206][T21139] Node 0 DMA free:3628kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:4kB active_file:96kB inactive_file:28kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 862.668235][T21139] lowmem_reserve[]: 0 278 278 278 278 [ 862.668255][T21139] Node 0 DMA32 free:40784kB boost:28404kB min:41028kB low:44184kB high:47340kB reserved_highatomic:0kB free_highatomic:0kB active_anon:8kB inactive_anon:4kB active_file:16kB inactive_file:0kB unevictable:2000kB writepending:0kB zspages:2108kB present:1032196kB managed:284808kB mlocked:0kB bounce:0kB free_pcp:476kB local_pcp:476kB free_cma:0kB [ 862.668284][T21139] lowmem_reserve[]: 0 0 0 0 0 [ 862.668303][T21139] Node 0 DMA: 180*4kB (UE) 32*8kB (UE) 8*16kB (U) 23*32kB (UE) 4*64kB (UE) 2*128kB (UE) 1*256kB (E) 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 3632kB [ 862.668378][T21139] Node 0 DMA32: 883*4kB (UE) 310*8kB (UME) 141*16kB (UME) 330*32kB (UME) 95*64kB (UME) 26*128kB (UME) 9*256kB (UM) 4*512kB (UME) 4*1024kB (UM) 2*2048kB (M) 0*4096kB = 40780kB [ 862.668459][T21139] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 862.668468][T21139] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 862.668476][T21139] 32865 total pagecache pages [ 862.668481][T21139] 1439 pages in swap cache [ 862.668485][T21139] Free swap = 98612kB [ 862.668489][T21139] Total swap = 124996kB [ 862.668493][T21139] 524155 pages RAM [ 862.668497][T21139] 0 pages HighMem/MovableOnly [ 862.668501][T21139] 212061 pages reserved [ 862.668504][T21139] 0 pages cma reserved [ 862.768557][T21169] [U] [ 862.768577][T21169] [U] [ 862.768593][T21169] [U] [ 862.768608][T21169] [U] [ 862.768624][T21169] [U] [ 862.768642][T21169] [U] [ 862.768659][T21169] [U] [ 862.768675][T21169] [U] [ 862.768696][T21169] [U] [ 862.768713][T21169] [U] [ 862.768729][T21169] [U] [ 862.768745][T21169] [U] [ 862.768760][T21169] [U] [ 862.768775][T21169] [U] [ 862.768790][T21169] [U] [ 862.768804][T21169] [U] [ 862.768825][T21169] [U] [ 862.768840][T21169] [U] [ 862.768854][T21169] [U] [ 862.768869][T21169] [U] [ 862.768884][T21169] [U] [ 862.768898][T21169] [U] [ 862.768913][T21169] [U] [ 862.768928][T21169] [U] [ 862.768948][T21169] [U] [ 862.768963][T21169] [U] [ 862.768978][T21169] [U] [ 862.768992][T21169] [U] [ 862.769007][T21169] [U] [ 862.769021][T21169] [U] [ 862.769036][T21169] [U] [ 862.769050][T21169] [U] [ 862.769070][T21169] [U] [ 862.769085][T21169] [U] [ 862.769100][T21169] [U] [ 862.769115][T21169] [U] [ 862.769130][T21169] [U] [ 862.769144][T21169] [U] [ 862.769159][T21169] [U] [ 862.769174][T21169] [U] [ 862.769193][T21169] [U] [ 862.769233][T21169] [U] [ 862.769250][T21169] [U] [ 862.769267][T21169] [U] [ 862.769284][T21169] [U] [ 862.769301][T21169] [U] [ 862.769318][T21169] [U] [ 862.769335][T21169] [U] [ 862.769893][T21169] [U] [ 862.769912][T21169] [U] [ 862.769928][T21169] [U] [ 862.769945][T21169] [U] [ 862.769960][T21169] [U] [ 862.769975][T21169] [U] [ 862.769990][T21169] [U] [ 862.770005][T21169] [U] [ 862.770024][T21169] [U] [ 862.770039][T21169] [U] [ 862.770053][T21169] [U] [ 862.770068][T21169] [U] [ 862.770083][T21169] [U] [ 862.770097][T21169] [U] [ 862.770112][T21169] [U] [ 862.770126][T21169] [U] [ 862.770145][T21169] [U] [ 862.770160][T21169] [U] [ 862.770175][T21169] [U] [ 862.770190][T21169] [U] [ 862.770211][T21169] [U] [ 862.770228][T21169] [U] [ 862.770245][T21169] [U] [ 862.770260][T21169] [U] [ 862.770282][T21169] [U] [ 862.770299][T21169] [U] [ 862.770327][T21169] [U] [ 862.770345][T21169] [U] [ 862.770360][T21169] [U] [ 862.770375][T21169] [U] [ 862.770390][T21169] [U] [ 862.770405][T21169] [U] [ 862.770447][T21169] [U] [ 862.770463][T21169] [U] [ 862.770478][T21169] [U] [ 862.770493][T21169] [U] [ 862.770507][T21169] [U] [ 862.770522][T21169] [U] [ 862.770536][T21169] [U] [ 862.770551][T21169] [U] [ 862.770571][T21169] [U] [ 862.770589][T21169] [U] [ 862.770605][T21169] [U] [ 862.770622][T21169] [U] [ 862.770639][T21169] [U] [ 862.770654][T21169] [U] [ 862.770669][T21169] [U] [ 862.770683][T21169] [U] [ 862.770702][T21169] [U] [ 862.770717][T21169] [U] [ 862.770731][T21169] [U] [ 862.770746][T21169] [U] [ 862.770760][T21169] [U] [ 862.770775][T21169] [U] [ 862.770790][T21169] [U] [ 862.770804][T21169] [U] [ 862.770823][T21169] [U] [ 862.770838][T21169] [U] [ 862.770853][T21169] [U] [ 862.770867][T21169] [U] [ 862.770882][T21169] [U] [ 862.770897][T21169] [U] [ 862.770911][T21169] [U] [ 862.770926][T21169] [U] [ 862.770945][T21169] [U] [ 862.770959][T21169] [U] [ 862.770974][T21169] [U] [ 862.770989][T21169] [U] [ 862.771004][T21169] [U] [ 862.771019][T21169] [U] [ 862.771033][T21169] [U] [ 862.788420][T21166] [U] [ 863.012146][T21206] netlink: NAT attribute has 4 unknown bytes [ 863.012164][T21206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 863.484126][T21292] ptrace attach of "/syz-executor exec"[15008] was attempted by " [ 863.574903][T21302] __nla_validate_parse: 7 callbacks suppressed [ 863.574916][T21302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23774'. [ 863.773935][ T1534] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 863.874717][T21341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23787'. [ 863.949804][ T43] kauditd_printk_skb: 30 callbacks suppressed [ 863.949818][ T43] audit: type=1800 audit(1700006989.131:10154): pid=21347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.23791" name="trace_pipe" dev="tracefs" ino=6066 res=0 errno=0 [ 863.955506][T24777] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 864.075770][T21365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23800'. [ 864.122147][T21324] netlink: 12 bytes leftover after parsing attributes in process `syz.7.23790'. [ 864.885314][ T1534] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 865.027135][T24777] usb 12-1: unable to get BOS descriptor or descriptor too short [ 865.027165][T24777] usb 12-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 865.027969][T24777] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 865.027987][T24777] usb 12-1: can't read configurations, error -71 [ 865.514150][T21422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23825'. [ 865.723413][T21448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23837'. [ 865.724180][T21448] netlink: 104 bytes leftover after parsing attributes in process `syz.1.23837'. [ 865.724192][T21448] netlink: 104 bytes leftover after parsing attributes in process `syz.1.23837'. [ 865.889244][T21474] netlink: 'syz.8.23850': attribute type 21 has an invalid length. [ 865.889261][T21474] IPv6: NLM_F_CREATE should be specified when creating new route [ 865.889308][T21474] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 865.889313][T21474] IPv6: NLM_F_CREATE should be set when creating new route [ 865.889332][T21474] IPv6: NLM_F_CREATE should be set when creating new route [ 865.889343][T21474] IPv6: NLM_F_CREATE should be set when creating new route [ 865.906988][T21474] netlink: 'syz.8.23850': attribute type 21 has an invalid length. [ 865.907033][T21474] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 866.008115][ T1534] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 866.130873][ T43] audit: type=1326 audit(1700006991.171:10155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21507 comm="syz.7.23867" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 866.130904][ T43] audit: type=1326 audit(1700006991.171:10156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21507 comm="syz.7.23867" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 866.131543][ T43] audit: type=1326 audit(1700006991.171:10157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21507 comm="syz.7.23867" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706efec code=0x7ffc0000 [ 866.131648][ T43] audit: type=1326 audit(1700006991.171:10158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21507 comm="syz.7.23867" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 866.131757][ T43] audit: type=1326 audit(1700006991.171:10159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21507 comm="syz.7.23867" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 866.133082][ T43] audit: type=1326 audit(1700006991.171:10160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21507 comm="syz.7.23867" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf706efec code=0x7ffc0000 [ 866.133186][ T43] audit: type=1326 audit(1700006991.171:10161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21507 comm="syz.7.23867" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 866.133277][ T43] audit: type=1326 audit(1700006991.171:10162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21507 comm="syz.7.23867" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 866.346065][T21546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23881'. [ 866.451175][T21566] overlayfs: regular lower layers cannot follow data lower layers [ 867.118682][ T1534] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 867.601763][T21626] usb usb4: usbfs: process 21626 (syz.1.23912) did not claim interface 0 before use [ 867.713374][T21638] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 867.713802][T21638] ALSA: mixer_oss: invalid index 137438 [ 867.744134][T21644] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 868.220903][ T1534] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 868.332297][T21718] lo speed is unknown, defaulting to 1000 [ 868.333438][T21718] wlan0 speed is unknown, defaulting to 1000 [ 868.424803][T21708] hid-generic 0003:0627:0001.0001: pid 21708 passed too large report [ 868.468075][T21752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23958'. [ 868.692117][T21781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 868.908036][T21810] ovs-dp0: entered promiscuous mode [ 868.955873][T21819] CacheFiles: Failed to register: -2 [ 868.972653][T21821] tmpfs: Cannot disable swap on remount [ 869.065888][T21834] xt_IDLETIMER: timeout value is too big [ 869.207465][T21852] Could not find key with description: [0123456789abcdef] [ 869.207477][T21852] process_request_key_err: No key [ 869.207482][T21852] Could not find valid key in user session keyring for sig specified in mount option: [0123456789abcdef] [ 869.207489][T21852] One or more global auth toks could not properly register; rc = [-2] [ 869.207507][T21852] Error validating options; rc = [-2] [ 869.331043][ T1534] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 869.364152][T21850] hid-generic 0003:0627:0001.0001: pid 21850 passed too large report [ 869.429872][T21857] CacheFiles: Failed to register: -2 [ 869.476604][T21865] xt_IDLETIMER: timeout value is too big [ 869.527484][T21873] netlink: 'syz.8.24011': attribute type 1 has an invalid length. [ 869.527505][T21873] netlink: 240 bytes leftover after parsing attributes in process `syz.8.24011'. [ 869.527543][T21873] netlink: 'syz.8.24011': attribute type 1 has an invalid length. [ 869.608950][T21887] CacheFiles: Failed to register: -2 [ 869.722444][T21908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24027'. [ 869.722465][T21908] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 869.765712][T21923] openvswitch: netlink: Missing key (keys=40, expected=100) [ 869.793230][T21926] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 869.825710][T21935] sctp: [Deprecated]: syz.0.24037 (pid 21935) Use of struct sctp_assoc_value in delayed_ack socket option. [ 869.825710][T21935] Use struct sctp_sack_info instead [ 869.826100][T21935] sctp: [Deprecated]: syz.0.24037 (pid 21935) Use of struct sctp_assoc_value in delayed_ack socket option. [ 869.826100][T21935] Use struct sctp_sack_info instead [ 869.988363][T21952] lo: entered promiscuous mode [ 869.988379][T21952] lo: entered allmulticast mode [ 869.989006][T21952] bond0: entered promiscuous mode [ 869.989017][T21952] bond0: entered allmulticast mode [ 869.989359][T21952] dummy0: entered promiscuous mode [ 869.989368][T21952] dummy0: entered allmulticast mode [ 869.993603][T21952] eql: remember to turn off Van-Jacobson compression on your slave devices [ 869.993633][T21952] eql: entered promiscuous mode [ 869.993645][T21952] eql: entered allmulticast mode [ 869.994079][T21952] ifb0: entered promiscuous mode [ 869.994089][T21952] ifb0: entered allmulticast mode [ 869.994284][T21952] ifb1: entered promiscuous mode [ 869.994292][T21952] ifb1: entered allmulticast mode [ 869.997079][T21952] e1000 0000:00:06.0 eth0: entered promiscuous mode [ 869.999673][T21952] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 870.015022][ T5997] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 870.109926][T21952] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 870.127858][T21952] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 870.128013][T21952] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 870.128544][T21952] 8021q: adding VLAN 0 to HW filter on device eth1 [ 870.129145][T21952] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 870.129159][T21952] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 870.129624][T21952] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 870.129636][T21952] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 870.130004][T21952] hwsim0: entered promiscuous mode [ 870.130013][T21952] hwsim0: entered allmulticast mode [ 870.130318][T21952] teql0: entered promiscuous mode [ 870.130326][T21952] teql0: entered allmulticast mode [ 870.130334][T21952] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 870.186002][ T5997] usb 12-1: Using ep0 maxpacket: 32 [ 870.186503][ T5997] usb 12-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 870.187358][ T5997] usb 12-1: config 0 has an invalid interface number: 196 but max is 0 [ 870.187371][ T5997] usb 12-1: config 0 has no interface number 0 [ 870.187389][ T5997] usb 12-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 870.187402][ T5997] usb 12-1: config 0 interface 196 has no altsetting 0 [ 870.189094][ T5997] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.189107][ T5997] usb 12-1: Product: syz [ 870.189114][ T5997] usb 12-1: Manufacturer: syz [ 870.189122][ T5997] usb 12-1: SerialNumber: syz [ 870.190511][ T5997] usb 12-1: config 0 descriptor?? [ 870.190961][T21913] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 870.442164][T15612] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 870.588526][ T5997] ipheth 12-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 870.588757][ T5997] ipheth 12-1:0.196: probe with driver ipheth failed with error -71 [ 870.591342][ T5997] usb 12-1: USB disconnect, device number 6 [ 870.607797][T21512] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 870.864193][T21977] lo speed is unknown, defaulting to 1000 [ 870.864883][T21977] wlan0 speed is unknown, defaulting to 1000 [ 870.921751][T22003] ovs-dp0: entered promiscuous mode [ 871.087947][T22018] netlink: 'syz.1.24057': attribute type 2 has an invalid length. [ 871.553457][T15612] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 871.679809][T22091] bridge0: entered promiscuous mode [ 871.679824][T22091] bridge0: entered allmulticast mode [ 871.771482][T22105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24093'. [ 871.876977][T22122] binder: 22119:22122 ioctl 4018620d 0 returned -22 [ 872.003266][T22143] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 872.136727][T22169] sctp: [Deprecated]: syz.8.24124 (pid 22169) Use of struct sctp_assoc_value in delayed_ack socket option. [ 872.136727][T22169] Use struct sctp_sack_info instead [ 872.460226][T22299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24141'. [ 872.566624][T22334] lo speed is unknown, defaulting to 1000 [ 872.569013][T22334] wlan0 speed is unknown, defaulting to 1000 [ 872.665947][T15612] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 872.876233][T22406] lo speed is unknown, defaulting to 1000 [ 872.881346][T22406] wlan0 speed is unknown, defaulting to 1000 [ 872.958810][T22435] netlink: Conntrack attr type has unexpected length (type=9, length=0, expected=32) [ 872.967664][T22437] netlink: 40 bytes leftover after parsing attributes in process `syz.7.24165'. [ 872.967678][T22437] netlink: 28 bytes leftover after parsing attributes in process `syz.7.24165'. [ 873.071190][ T5997] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 873.210033][T22460] lo speed is unknown, defaulting to 1000 [ 873.210861][T22460] wlan0 speed is unknown, defaulting to 1000 [ 873.233430][ T5997] usb 6-1: Using ep0 maxpacket: 32 [ 873.236288][ T5997] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 873.237137][ T5997] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 873.237150][ T5997] usb 6-1: config 0 has no interface number 0 [ 873.237168][ T5997] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 873.237181][ T5997] usb 6-1: config 0 interface 196 has no altsetting 0 [ 873.238961][ T5997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.238974][ T5997] usb 6-1: Product: syz [ 873.238981][ T5997] usb 6-1: Manufacturer: syz [ 873.238989][ T5997] usb 6-1: SerialNumber: syz [ 873.248356][ T5997] usb 6-1: config 0 descriptor?? [ 873.250830][T22400] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 873.494603][T22508] lo speed is unknown, defaulting to 1000 [ 873.495287][T22508] wlan0 speed is unknown, defaulting to 1000 [ 873.660028][ T5997] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 873.660146][ T5997] ipheth 6-1:0.196: probe with driver ipheth failed with error -71 [ 873.663339][ T5997] usb 6-1: USB disconnect, device number 24 [ 873.689816][ T43] audit: type=1326 audit(1700006998.246:10163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22551 comm="syz.8.24189" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x0 [ 873.786833][T24769] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 874.888841][ T5902] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 875.131122][T22616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24217'. [ 875.131149][T22616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24217'. [ 875.206330][T22630] bridge0: port 3(team0) entered blocking state [ 875.206412][T22630] bridge0: port 3(team0) entered disabled state [ 875.206494][T22630] team0: entered allmulticast mode [ 875.206503][T22630] team_slave_0: entered allmulticast mode [ 875.206513][T22630] team_slave_1: entered allmulticast mode [ 875.211694][T22632] netlink: 4 bytes leftover after parsing attributes in process `syz.7.24225'. [ 875.212879][T22630] team0: entered promiscuous mode [ 875.212891][T22630] team_slave_0: entered promiscuous mode [ 875.213056][T22630] team_slave_1: entered promiscuous mode [ 875.213511][T22630] bridge0: port 3(team0) entered blocking state [ 875.213594][T22630] bridge0: port 3(team0) entered forwarding state [ 875.238656][T22632] veth0_macvtap: left promiscuous mode [ 875.262041][T22635] netlink: 32 bytes leftover after parsing attributes in process `syz.8.24227'. [ 875.298999][T22645] netlink: 48 bytes leftover after parsing attributes in process `syz.8.24229'. [ 875.351795][T22651] program syz.1.24231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 875.428012][T22667] bond0: (slave macsec4): Error -34 calling dev_set_mtu [ 876.010033][ T5902] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 876.075243][T22733] netlink: 256 bytes leftover after parsing attributes in process `syz.0.24266'. [ 876.075258][T22733] netlink: 56 bytes leftover after parsing attributes in process `syz.0.24266'. [ 876.270003][ T43] audit: type=1326 audit(1700007000.660:10164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22761 comm="syz.1.24278" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 876.270157][ T43] audit: type=1326 audit(1700007000.660:10165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22761 comm="syz.1.24278" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 876.271945][ T43] audit: type=1326 audit(1700007000.660:10166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22761 comm="syz.1.24278" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 876.272057][ T43] audit: type=1326 audit(1700007000.660:10167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22761 comm="syz.1.24278" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 876.272213][ T43] audit: type=1326 audit(1700007000.660:10168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22761 comm="syz.1.24278" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 876.272573][ T43] audit: type=1326 audit(1700007000.660:10169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22761 comm="syz.1.24278" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 876.272705][ T43] audit: type=1326 audit(1700007000.660:10170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22761 comm="syz.1.24278" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 876.272797][ T43] audit: type=1326 audit(1700007000.660:10171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22761 comm="syz.1.24278" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 876.289728][T22765] random: crng reseeded on system resumption [ 876.385831][T22783] netlink: 'syz.0.24287': attribute type 9 has an invalid length. [ 876.470493][T22799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24292'. [ 876.858800][T22859] option changes via remount are deprecated (pid=22857 comm=syz.7.24320) [ 877.083223][T22896] openvswitch: netlink: IP tunnel attribute has 5377 unknown bytes. [ 877.110282][ T5902] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 877.137226][T22900] netlink: zone id is out of range [ 877.137236][T22900] netlink: zone id is out of range [ 877.137240][T22900] netlink: zone id is out of range [ 877.137244][T22900] netlink: zone id is out of range [ 877.137248][T22900] netlink: zone id is out of range [ 877.137253][T22900] netlink: zone id is out of range [ 877.137259][T22900] netlink: zone id is out of range [ 877.137263][T22900] netlink: zone id is out of range [ 877.137266][T22900] netlink: zone id is out of range [ 877.272863][T22925] ubi0: detaching mtd0 [ 877.285541][T22925] ubi0: mtd0 is detached [ 877.438052][T22948] ubi0: attaching mtd0 [ 877.438067][T22948] ubi0 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 878.221797][T24769] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 878.395464][ T988] lg-g15 0003:046D:0A07.0011: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 878.399796][ T988] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0011/input/input77 [ 878.716616][ T43] audit: type=1326 audit(1700007003.955:10172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23008 comm="syz.0.24379" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x0 [ 878.752467][T23015] input input78: cannot allocate more than FF_MAX_EFFECTS effects [ 878.812623][T22988] fido_id[22988]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 878.859360][T23025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24385'. [ 878.862260][T23026] netlink: 28 bytes leftover after parsing attributes in process `syz.8.24386'. [ 879.137931][T22913] syz.7.24341 (22913) used greatest stack depth: 18896 bytes left [ 879.172193][T23064] netlink: 'syz.7.24403': attribute type 5 has an invalid length. [ 879.282882][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 879.282989][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 879.322672][ T5997] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 879.333377][T24769] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 879.655105][T24769] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 879.737011][T23152] netlink: 'syz.8.24439': attribute type 8 has an invalid length. [ 879.821159][T23165] ima: policy update failed [ 879.821395][ T43] audit: type=1802 audit(1700007004.985:10173): pid=23165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.24445" res=0 errno=0 [ 879.918508][T23185] input: syz1 as /devices/virtual/input/input79 [ 880.188022][T21512] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 880.379689][T23225] bond0: entered promiscuous mode [ 880.379704][T23225] bond_slave_0: entered promiscuous mode [ 880.379804][T23225] bond_slave_1: entered promiscuous mode [ 880.381171][T23225] batadv0: entered promiscuous mode [ 880.386587][T23225] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 880.391949][T23225] bond0: left promiscuous mode [ 880.391968][T23225] bond_slave_0: left promiscuous mode [ 880.392092][T23225] bond_slave_1: left promiscuous mode [ 880.392485][ T43] audit: type=1326 audit(1700007005.527:10174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23228 comm="syz.1.24468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 880.392522][ T43] audit: type=1326 audit(1700007005.527:10175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23228 comm="syz.1.24468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 880.393818][ T43] audit: type=1326 audit(1700007005.527:10176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23228 comm="syz.1.24468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 880.393878][ T43] audit: type=1326 audit(1700007005.527:10177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23228 comm="syz.1.24468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 880.393943][ T43] audit: type=1326 audit(1700007005.527:10178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23228 comm="syz.1.24468" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 880.394031][ T43] audit: type=1326 audit(1700007005.527:10179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23228 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 880.394101][ T43] audit: type=1326 audit(1700007005.527:10180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23228 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 880.394339][T23225] batadv0: left promiscuous mode [ 880.394525][ T43] audit: type=1326 audit(1700007005.527:10181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23228 comm="syz.1.24468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 880.394554][ T43] audit: type=1326 audit(1700007005.527:10182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23228 comm="syz.1.24468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 880.456399][T24769] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 880.930549][T10701] kernel write not supported for file /media4 (pid: 10701 comm: kworker/2:4) [ 881.004572][T23249] netlink: 'syz.8.24475': attribute type 42 has an invalid length. [ 881.246051][T10701] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 881.555957][ T5902] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 882.666966][ T5902] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 883.350805][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 883.351076][T19027] Bluetooth: hci4: command 0x0405 tx timeout [ 883.778261][ T5902] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 884.247226][T23260] e1000e 0000:00:02.0 eth1: Hardware Error [ 884.581475][T23307] Invalid input. Must be >= 2304 [ 884.890053][ T5902] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 886.011740][ T5902] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 887.112522][ T5902] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 888.223672][ T5902] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 888.528799][T23318] bond1: invalid ARP target 0.0.0.0 specified for addition [ 888.528816][T23318] bond1: option arp_ip_target: invalid value (0) [ 888.531391][T23318] bond1 (unregistering): Released all slaves [ 888.667416][T23395] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 888.667452][T23395] block device autoloading is deprecated and will be removed. [ 888.948263][T23434] mac80211_hwsim hwsim56 wlan0: entered promiscuous mode [ 888.952869][T23434] batman_adv: batadv0: Adding interface: macvlan2 [ 888.952883][T23434] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.952908][T23434] batman_adv: batadv0: Interface activated: macvlan2 [ 889.018717][T23442] sctp: [Deprecated]: syz.7.24518 (pid 23442) Use of struct sctp_assoc_value in delayed_ack socket option. [ 889.018717][T23442] Use struct sctp_sack_info instead [ 889.157408][T23451] __nla_validate_parse: 6 callbacks suppressed [ 889.157421][T23451] netlink: 4 bytes leftover after parsing attributes in process `syz.7.24521'. [ 889.157712][T23451] hsr_slave_0: left promiscuous mode [ 889.158244][T23451] hsr_slave_1: left promiscuous mode [ 889.222869][T23462] Line length is too long: Should be less than 4094 [ 889.336725][ T5902] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 889.825389][T23489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24536'. [ 890.421217][T23489] hsr_slave_0: left promiscuous mode [ 890.446281][ T5902] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 890.551012][T23510] netlink: 40 bytes leftover after parsing attributes in process `syz.1.24541'. [ 890.585293][T23513] program syz.7.24543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 890.816874][T30408] Bluetooth: hci2: Frame reassembly failed (-84) [ 891.098285][ T5977] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 891.259209][ T5977] usb 13-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 891.260165][ T5977] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 891.260182][ T5977] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 891.260194][ T5977] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 891.260208][ T5977] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 891.262075][ T5977] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.262088][ T5977] usb 13-1: Product: syz [ 891.262096][ T5977] usb 13-1: Manufacturer: syz [ 891.262103][ T5977] usb 13-1: SerialNumber: syz [ 891.263455][ T5977] usb 13-1: config 0 descriptor?? [ 891.301613][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 891.487611][ T5977] adutux 13-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 891.568420][ T5902] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 891.702105][ T5977] usb 13-1: USB disconnect, device number 6 [ 892.564113][T23627] bond13: invalid ARP target 0.0.0.0 specified for addition [ 892.564130][T23627] bond13: option arp_ip_target: invalid value (0) [ 892.566834][T23627] bond13 (unregistering): Released all slaves [ 892.671250][ T5902] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 893.021553][T19027] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 893.583790][ T65] Bluetooth: hci2: sending frame failed (-49) [ 893.583921][T19027] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 893.745889][T23755] support for the xor transformation has been removed. [ 893.791246][T24769] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 893.884683][ T65] Bluetooth: hci2: sending frame failed (-49) [ 893.889137][T19027] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 894.007982][T23793] netlink: 140 bytes leftover after parsing attributes in process `syz.7.24628'. [ 894.891922][T24769] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 896.003191][T24769] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 897.125117][T24769] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 898.236736][ T1534] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 899.337351][ T1534] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 899.893419][T23833] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 899.911907][ T74] rtrs_client L2024: : CM error (CM event: address error, err: -ENODEV) [ 899.915083][T23833] rtrs_client L2644: : init_conns() failed: err=-EHOSTUNREACH path=@ip:27.0.0.1 [:0] [ 900.072967][T23855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.24643'. [ 900.130372][ T66] block nbd1: Receive control failed (result -32) [ 900.323952][ T43] kauditd_printk_skb: 12 callbacks suppressed [ 900.323965][ T43] audit: type=1400 audit(1700007024.178:10195): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=23882 comm="syz.1.24654" [ 900.449245][T24769] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 900.658405][T23914] kvm [23912]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x400006 [ 900.758095][T23920] zero sized request [ 900.860023][T23932] netlink: 8 bytes leftover after parsing attributes in process `syz.7.24673'. [ 901.228579][T24769] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 901.400543][T24769] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 901.401549][T24769] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 901.401576][T24769] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 901.401606][T24769] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.406001][T23943] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 901.409848][T24769] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 901.560236][T24769] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 901.621066][T23984] loop5: detected capacity change from 0 to 7 [ 901.629911][T23984] Dev loop5: unable to read RDB block 7 [ 901.629939][T23984] loop5: AHDI p1 [ 901.629957][T23984] loop5: partition table partially beyond EOD, truncated [ 901.649256][T23976] udevd[23976]: symlink '../../loop5' '/dev/disk/by-diskseq/107.tmp-b7:5' failed: Read-only file system [ 901.650960][T15778] usb 6-1: USB disconnect, device number 25 [ 901.664705][T23976] udevd[23976]: symlink '../../loop5' '/dev/disk/by-diskseq/107.tmp-b7:5' failed: Read-only file system [ 901.675943][T23976] udevd[23976]: symlink '../../loop5' '/dev/disk/by-diskseq/107.tmp-b7:5' failed: Read-only file system [ 901.682291][T23976] udevd[23976]: symlink '../../loop5' '/dev/disk/by-diskseq/107.tmp-b7:5' failed: Read-only file system [ 901.988606][T19027] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 902.412919][T24076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 902.413132][T24076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 902.413147][T24076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 902.413161][T24076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 902.413619][T24076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 902.413636][T24076] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000198c: 0x00e4 instead [ 902.425303][T24076] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 902.425317][T24076] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 902.441990][T24079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24724'. [ 902.672485][ T5902] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 902.836951][T24127] loop5: detected capacity change from 0 to 7 [ 903.014450][T24134] overlayfs: workdir and upperdir must reside under the same mount [ 903.015320][T24127] Dev loop5: unable to read RDB block 7 [ 903.015341][T24127] loop5: unable to read partition table [ 903.015461][T24127] loop5: partition table beyond EOD, truncated [ 903.015481][T24127] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 903.022689][T23976] udevd[23976]: symlink '../../loop5' '/dev/disk/by-diskseq/109.tmp-b7:5' failed: Read-only file system [ 903.048054][T23976] udevd[23976]: symlink '../../loop5' '/dev/disk/by-diskseq/109.tmp-b7:5' failed: Read-only file system [ 903.051398][T23976] udevd[23976]: symlink '../../loop5' '/dev/disk/by-diskseq/109.tmp-b7:5' failed: Read-only file system [ 903.143615][T24148] netlink: 64 bytes leftover after parsing attributes in process `syz.8.24752'. [ 903.409848][T24168] netlink: 16142 bytes leftover after parsing attributes in process `syz.7.24760'. [ 903.797263][ T5902] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 903.903691][T24239] rnbd_client L127: Can't parse path ip:127.0.0.1\ߐ?:bEz[۵>,: -22 [ 904.312952][T15778] kernel read not supported for file /dsp (pid: 15778 comm: kworker/1:7) [ 904.440057][T24288] veth0: entered promiscuous mode [ 904.440632][T24288] veth0: left promiscuous mode [ 904.894246][T24769] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 906.016710][ T5902] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 906.087773][T24422] bond0: unable to remove nonexistent ARP target 192.168.1.1 [ 906.087792][T24422] bond0: option arp_ip_target: invalid value (-192.168.1.1}13 HID v0.00 Device [syz0] on syz0 [ 906.297424][T24434] fido_id[24434]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 906.497133][T24458] nvme_fcloop: unknown parameter or missing value 'wwpn' [ 907.032266][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 907.049559][T24508] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10000 [ 907.049576][T24508] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 907.049593][T24508] raw: 00fff00000002000 ffffea0000400008 ffffea0000400008 0000000000000000 [ 907.049604][T24508] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 907.049611][T24508] page dumped because: unmovable page [ 907.049617][T24508] page_owner info is not present (never set?) [ 907.127271][T24769] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 907.184064][T24527] netlink: 'syz.7.24909': attribute type 12 has an invalid length. [ 907.184079][T24527] netlink: 'syz.7.24909': attribute type 2 has an invalid length. [ 907.184086][T24527] netlink: 460 bytes leftover after parsing attributes in process `syz.7.24909'. [ 907.272954][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 907.272977][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.417598][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 907.417621][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.434772][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 907.442665][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 907.448649][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 907.451144][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 907.451582][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 907.558577][ T13] bond0: (slave netdevsim1): Releasing backup interface [ 907.575402][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode [ 907.575430][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 907.580933][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 907.580954][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.687005][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 907.687039][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.748581][T24546] lo speed is unknown, defaulting to 1000 [ 907.749270][T24546] wlan0 speed is unknown, defaulting to 1000 [ 907.948977][ T13] bridge_slave_1: left allmulticast mode [ 907.948994][ T13] bridge_slave_1: left promiscuous mode [ 907.949095][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.957733][ T13] bridge_slave_0: left allmulticast mode [ 907.957747][ T13] bridge_slave_0: left promiscuous mode [ 907.957843][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.986638][ T43] audit: type=1326 audit(1700007031.346:10196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24664 comm="syz.8.24935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 907.986750][ T43] audit: type=1326 audit(1700007031.346:10197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24664 comm="syz.8.24935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 907.988876][ T43] audit: type=1326 audit(1700007031.346:10198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24664 comm="syz.8.24935" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 907.988900][ T43] audit: type=1326 audit(1700007031.346:10199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24664 comm="syz.8.24935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 907.988920][ T43] audit: type=1326 audit(1700007031.346:10200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24664 comm="syz.8.24935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 907.989577][ T43] audit: type=1326 audit(1700007031.346:10201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24664 comm="syz.8.24935" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 907.989600][ T43] audit: type=1326 audit(1700007031.346:10202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24664 comm="syz.8.24935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 907.989619][ T43] audit: type=1326 audit(1700007031.346:10203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24664 comm="syz.8.24935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 907.990248][ T43] audit: type=1326 audit(1700007031.346:10204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24664 comm="syz.8.24935" exe="/syz-executor" sig=0 arch=40000003 syscall=314 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 907.990338][ T43] audit: type=1326 audit(1700007031.346:10205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24664 comm="syz.8.24935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4fec code=0x7ffc0000 [ 908.228000][ T5902] tipc: Duplicate fe800010 using ib(00:00:00:01:aa:aa:aa:aa:aa:34:00:00:00:00:00:00:00:00:00:00) seen on [ 908.299751][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 908.300234][ T13] bond_slave_0: left promiscuous mode [ 908.300333][ T13] bond_slave_0: left allmulticast mode [ 908.309623][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 908.316399][ T13] bond_slave_1: left promiscuous mode [ 908.316467][ T13] bond_slave_1: left allmulticast mode [ 908.320412][ T13] bond0 (unregistering): Released all slaves [ 908.323397][ T13] bond1 (unregistering): Released all slaves [ 908.333079][ T13] bond2 (unregistering): Released all slaves [ 908.338205][ T13] bond3 (unregistering): Released all slaves [ 908.343037][ T13] bond4 (unregistering): Released all slaves [ 908.348287][ T13] bond5 (unregistering): Released all slaves [ 908.353300][ T13] bond6 (unregistering): Released all slaves [ 908.359780][ T13] bond7 (unregistering): Released all slaves [ 908.366100][ T13] bond8 (unregistering): Released all slaves [ 908.372729][ T13] bond9 (unregistering): Released all slaves [ 908.379294][ T13] bond10 (unregistering): Released all slaves [ 908.385918][ T13] bond11 (unregistering): Released all slaves [ 908.391931][ T13] bond12 (unregistering): Released all slaves [ 908.465567][ T5451] 8021q: adding VLAN 0 to HW filter on device eth26 [ 908.507303][T24733] netlink: 'syz.7.24946': attribute type 1 has an invalid length. [ 908.507322][T24733] netlink: 84 bytes leftover after parsing attributes in process `syz.7.24946'. [ 908.507354][T24733] netlink: 'syz.7.24946': attribute type 2 has an invalid length. [ 908.507365][T24733] netlink: 4 bytes leftover after parsing attributes in process `syz.7.24946'. [ 908.507430][T24546] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.507519][T24546] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.507578][T24546] bridge_slave_0: entered allmulticast mode [ 908.508326][T24546] bridge_slave_0: entered promiscuous mode [ 908.512113][T24546] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.512184][T24546] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.512243][T24546] bridge_slave_1: entered allmulticast mode [ 908.513008][T24546] bridge_slave_1: entered promiscuous mode [ 908.529649][T24546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.531156][T24546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 908.548037][T24546] team0: Port device team_slave_0 added [ 908.549787][T24546] team0: Port device team_slave_1 added [ 908.572264][ T5451] 8021q: adding VLAN 0 to HW filter on device eth27 [ 908.574924][T24546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.574934][T24546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.574947][T24546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.577918][T24546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.577928][T24546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.577941][T24546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.598980][ T13] tipc: Disabling bearer [ 908.642735][ T13] tipc: Disabling bearer [ 908.648391][ T13] tipc: Left network mode [ 908.678928][ T5451] 8021q: adding VLAN 0 to HW filter on device eth28 [ 908.705998][T24546] hsr_slave_0: entered promiscuous mode [ 908.706772][ T13] IPVS: stopping master sync thread 21277 ... [ 908.707566][ T13] IPVS: stopping backup sync thread 12141 ... [ 908.709488][T24546] hsr_slave_1: entered promiscuous mode [ 908.709783][T24546] debugfs: 'hsr0' already exists in 'hsr' [ 908.709794][T24546] Cannot create hsr debugfs directory [ 908.719497][ T25] kernel read not supported for file /media5 (pid: 25 comm: kworker/2:0) [ 908.864156][ T5451] 8021q: adding VLAN 0 to HW filter on device eth29 [ 909.077283][T24546] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 909.090280][T24546] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 909.090916][T24546] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 909.094752][T24546] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 909.100968][T24546] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 909.118441][T24546] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 909.129605][T24546] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 909.132083][T24546] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 909.149465][T24546] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.149556][T24546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.149704][T24546] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.149749][T24546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.205624][T24546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.213612][T30408] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.214139][T30408] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.227679][T24546] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.245904][T30408] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.245986][T30408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.254353][T30408] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.254400][T30408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.364275][T30408] smbdirect: ib_dev[syz0] removed [ 909.423087][ T13] hsr_slave_0: left promiscuous mode [ 909.423494][ T13] hsr_slave_1: left promiscuous mode [ 909.423916][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 909.423929][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 909.424457][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 909.424474][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 909.428005][ T13] batman_adv: batadv0: Interface deactivated: macsec0 [ 909.428021][ T13] batman_adv: batadv0: Removing interface: macsec0 [ 909.437562][ T13] veth1_macvtap: left allmulticast mode [ 909.437713][ T13] veth1_macvtap: left promiscuous mode [ 909.440431][ T13] veth0_macvtap: left promiscuous mode [ 909.440642][ T13] veth1_vlan: left promiscuous mode [ 909.683675][ T65] Bluetooth: hci0: command tx timeout [ 909.928604][T25003] netlink: 48 bytes leftover after parsing attributes in process `syz.7.24971'. [ 910.012375][T24769] usb 13-1: new full-speed USB device number 7 using dummy_hcd [ 910.177699][T24769] usb 13-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 910.177723][T24769] usb 13-1: too many configurations: 181, using maximum allowed: 8 [ 910.178935][T24769] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 910.178952][T24769] usb 13-1: can't read configurations, error -71 [ 910.383741][ T13] team0 (unregistering): Port device team_slave_1 removed [ 910.389785][ T13] team0 (unregistering): Port device team_slave_0 removed [ 910.560672][T24546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 910.674873][ T13] IPVS: stop unused estimator thread 0... [ 910.710946][T24546] veth0_vlan: entered promiscuous mode [ 910.716404][T24546] veth1_vlan: entered promiscuous mode [ 910.733921][T24546] veth0_macvtap: entered promiscuous mode [ 910.741094][T24546] veth1_macvtap: entered promiscuous mode [ 910.760264][T24546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 910.768531][T24546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.835607][T25027] bonding: unable to delete non-existent b [ 910.837289][T30241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.837306][T30241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.897670][T30408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.897684][T30408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.901343][T20903] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.901370][T20903] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.901387][T20903] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.901405][T20903] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.282020][T25107] netlink: 'syz.8.24989': attribute type 2 has an invalid length. [ 911.282034][T25107] netlink: 'syz.8.24989': attribute type 1 has an invalid length. [ 911.282041][T25107] netlink: 16 bytes leftover after parsing attributes in process `syz.8.24989'. [ 911.282049][T25107] netlink: 'syz.8.24989': attribute type 2 has an invalid length. [ 911.282056][T25107] netlink: 'syz.8.24989': attribute type 1 has an invalid length. [ 911.282063][T25107] netlink: 16 bytes leftover after parsing attributes in process `syz.8.24989'. [ 911.282070][T25107] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 911.450686][T23976] udevd[23976]: symlink '../../loop7' '/dev/disk/by-diskseq/111.tmp-b7:7' failed: Read-only file system [ 911.460006][T23976] udevd[23976]: symlink '../../loop7' '/dev/disk/by-diskseq/111.tmp-b7:7' failed: Read-only file system [ 911.481302][T23976] udevd[23976]: symlink '../../loop7' '/dev/disk/by-diskseq/111.tmp-b7:7' failed: Read-only file system [ 911.516333][T23976] udevd[23976]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 911.604758][T23976] udevd[23976]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 911.642854][T23976] udevd[23976]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 911.694771][T23976] udevd[23976]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 911.717069][T23976] udevd[23976]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 911.766511][T23976] udevd[23976]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 911.803973][T19027] Bluetooth: hci2: sending frame failed (-49) [ 911.806189][ T65] Bluetooth: hci2: Entering manufacturer mode failed (-49) [ 911.867084][T23976] udevd[23976]: symlink '../../loop7' '/dev/disk/by-diskseq/112.tmp-b7:7' failed: Read-only file system [ 911.916300][ T65] Bluetooth: hci0: command tx timeout [ 912.021942][T25168] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 912.021997][T25168] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 912.028115][T25168] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 912.034243][T25168] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 912.034393][T25168] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 912.045037][T25168] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 912.048346][T25168] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 912.048426][T25168] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 912.051671][T25168] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 912.489033][T25211] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 912.504928][ T74] rtrs_client L2024: : CM error (CM event: address error, err: -ENODEV) [ 912.505702][T25211] rtrs_client L2644: : init_conns() failed: err=-EHOSTUNREACH path=@ip:27.0.0.1 [:0] [ 913.050396][ T66] block nbd2: Receive control failed (result -32) [ 913.229762][T25250] netlink: 24 bytes leftover after parsing attributes in process `syz.9.25040'. [ 913.253435][T25250] netlink: 24 bytes leftover after parsing attributes in process `syz.9.25040'. [ 913.416479][T25269] syz.9.25046: vmalloc error: size 1768304430, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 913.416548][T25269] CPU: 3 UID: 0 PID: 25269 Comm: syz.9.25046 Tainted: G L syzkaller #0 PREEMPT(full) [ 913.416563][T25269] Tainted: [L]=SOFTLOCKUP [ 913.416568][T25269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 913.416574][T25269] Call Trace: [ 913.416579][T25269] [ 913.416585][T25269] dump_stack_lvl+0x100/0x190 [ 913.416603][T25269] warn_alloc.cold+0x9e/0xb2 [ 913.416616][T25269] ? __pfx_warn_alloc+0x10/0x10 [ 913.416635][T25269] ? __lock_acquire+0x5c0/0x1f40 [ 913.416656][T25269] __vmalloc_node_range_noprof+0x123b/0x1420 [ 913.416675][T25269] ? lock_acquire+0x1d1/0x380 [ 913.416690][T25269] ? nf_sockopt_find.isra.0+0x2a/0x290 [ 913.416710][T25269] ? __lock_acquire+0x5c0/0x1f40 [ 913.416725][T25269] ? ip_set_sockfn_get+0x18e/0xd20 [ 913.416738][T25269] ? trace_contention_end+0x126/0x160 [ 913.416756][T25269] ? __mutex_lock+0x26c/0x1bd0 [ 913.416770][T25269] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 913.416790][T25269] ? rcu_is_watching+0x13/0xc0 [ 913.416804][T25269] ? ip_set_sockfn_get+0x18e/0xd20 [ 913.416817][T25269] __vmalloc_node_noprof+0xad/0xf0 [ 913.416833][T25269] ? ip_set_sockfn_get+0x18e/0xd20 [ 913.416848][T25269] ip_set_sockfn_get+0x18e/0xd20 [ 913.416863][T25269] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 913.416879][T25269] ? nf_sockopt_find.isra.0+0x222/0x290 [ 913.416898][T25269] nf_getsockopt+0x7c/0xe0 [ 913.416915][T25269] ip_getsockopt+0x192/0x1e0 [ 913.416929][T25269] ? __pfx_ip_getsockopt+0x10/0x10 [ 913.416946][T25269] tcp_getsockopt+0xa1/0x110 [ 913.416963][T25269] smc_getsockopt+0x165/0x390 [ 913.416980][T25269] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 913.416993][T25269] ? __pfx_smc_getsockopt+0x10/0x10 [ 913.417008][T25269] ? aa_sock_opt_perm+0x114/0x1e0 [ 913.417025][T25269] ? __pfx_smc_getsockopt+0x10/0x10 [ 913.417042][T25269] do_sock_getsockopt+0x50a/0x6e0 [ 913.417057][T25269] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 913.417072][T25269] ? __fget_files+0x34/0x3d0 [ 913.417103][T25269] ? find_held_lock+0x2b/0x80 [ 913.417121][T25269] ? __fget_files+0x21f/0x3d0 [ 913.417139][T25269] __sys_getsockopt+0x133/0x1d0 [ 913.417162][T25269] ? __ia32_sys_getsockopt+0xbc/0x160 [ 913.417179][T25269] __ia32_sys_getsockopt+0xbc/0x160 [ 913.417196][T25269] ? __do_fast_syscall_32+0xb3/0x8b0 [ 913.417210][T25269] ? lockdep_hardirqs_on+0x7d/0x110 [ 913.417222][T25269] __do_fast_syscall_32+0x13a/0x8b0 [ 913.417236][T25269] do_fast_syscall_32+0x32/0x70 [ 913.417250][T25269] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 913.417264][T25269] RIP: 0023:0xf7fc4fec [ 913.417277][T25269] Code: Unable to access opcode bytes at 0xf7fc4fc2. [ 913.417282][T25269] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 913.417294][T25269] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 913.417301][T25269] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000080000040 [ 913.417307][T25269] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 913.417314][T25269] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 913.417321][T25269] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 913.417336][T25269] [ 913.417354][T25269] Mem-Info: [ 913.417361][T25269] active_anon:2454 inactive_anon:1110 isolated_anon:0 [ 913.417361][T25269] active_file:2846 inactive_file:21972 isolated_file:0 [ 913.417361][T25269] unevictable:1000 dirty:352 writeback:0 [ 913.417361][T25269] slab_reclaimable:7789 slab_unreclaimable:68086 [ 913.417361][T25269] mapped:22671 shmem:1025 pagetables:2678 [ 913.417361][T25269] sec_pagetables:380 bounce:0 [ 913.417361][T25269] kernel_misc_reclaimable:0 [ 913.417361][T25269] free:40540 free_pcp:14169 free_cma:0 [ 913.417391][T25269] Node 0 active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:140kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8448kB pagetables:1272kB sec_pagetables:1288kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 913.417469][T25269] Node 1 active_anon:9816kB inactive_anon:4436kB active_file:11384kB inactive_file:87748kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:90656kB dirty:1408kB writeback:0kB shmem:2100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7652kB pagetables:9440kB sec_pagetables:232kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 913.417500][T25269] Node 0 DMA free:3624kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:124kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 913.417539][T25269] lowmem_reserve[]: 0 278 278 278 278 [ 913.417558][T25269] Node 0 DMA32 free:39972kB boost:28404kB min:41028kB low:44184kB high:47340kB reserved_highatomic:2048kB free_highatomic:132kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:16kB unevictable:2000kB writepending:0kB zspages:3400kB present:1032196kB managed:284808kB mlocked:0kB bounce:0kB free_pcp:952kB local_pcp:140kB free_cma:0kB [ 913.417592][T25269] lowmem_reserve[]: 0 0 0 0 0 [ 913.417611][T25269] Node 1 DMA32 free:118564kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:9816kB inactive_anon:4436kB active_file:11384kB inactive_file:87748kB unevictable:2000kB writepending:1408kB zspages:6816kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:55724kB local_pcp:21756kB free_cma:0kB [ 913.417648][T25269] lowmem_reserve[]: 0 0 0 0 0 [ 913.417666][T25269] Node 0 DMA: 182*4kB (UE) 30*8kB (UE) 8*16kB (U) 23*32kB (UE) 4*64kB (UE) 2*128kB (UE) 1*256kB (E) 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 3624kB [ 913.417766][T25269] Node 0 DMA32: 913*4kB (UMEH) 364*8kB (UMEH) 170*16kB (UMEH) 295*32kB (UMEH) 98*64kB (UME) 27*128kB (UME) 9*256kB (UM) 4*512kB (UME) 3*1024kB (UM) 2*2048kB (M) 0*4096kB = 39972kB [ 913.417856][T25269] Node 1 DMA32: 1710*4kB (UME) 312*8kB (UM) 55*16kB (UME) 194*32kB (UM) 117*64kB (UM) 181*128kB (UM) 97*256kB (UME) 33*512kB (UM) 19*1024kB (UE) 5*2048kB (U) 0*4096kB = 118504kB [ 913.417942][T25269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 913.417951][T25269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 913.417959][T25269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 913.417968][T25269] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 913.417976][T25269] 27205 total pagecache pages [ 913.417980][T25269] 1364 pages in swap cache [ 913.417984][T25269] Free swap = 82920kB [ 913.417988][T25269] Total swap = 124996kB [ 913.417993][T25269] 524155 pages RAM [ 913.417996][T25269] 0 pages HighMem/MovableOnly [ 913.418000][T25269] 212061 pages reserved [ 913.418004][T25269] 0 pages cma reserved [ 913.517499][T25280] overlayfs: workdir and upperdir must reside under the same mount [ 913.806596][T25296] netlink: 64 bytes leftover after parsing attributes in process `syz.9.25057'. [ 913.972378][T25302] netlink: 4 bytes leftover after parsing attributes in process `syz.9.25060'. [ 914.212027][ T65] Bluetooth: hci0: command 0x0419 tx timeout [ 914.222893][ T65] Bluetooth: hci4: command 0x0405 tx timeout [ 914.222963][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 914.766145][T25350] rnbd_client L127: Can't parse path ip:127.0.0.1\ߐ?:bEz[۵>,: -22 [ 914.793490][T25354] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25079'. [ 914.796776][T25356] netlink: 4 bytes leftover after parsing attributes in process `syz.9.25080'. [ 914.840289][T25362] netlink: 8 bytes leftover after parsing attributes in process `syz.7.25082'. [ 915.011558][T25385] netlink: 16 bytes leftover after parsing attributes in process `syz.7.25090'. [ 915.043943][T25389] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25091'. [ 916.073108][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 916.073121][ T43] audit: type=1400 audit(1700007038.917:10209): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=25458 comm="syz.9.25112" name="p" offset=33 [ 916.164449][ T43] audit: type=1807 audit(1700007038.992:10210): action=measure res=1 [ 916.164748][T25472] ima: policy update completed [ 916.164818][ T43] audit: type=1802 audit(1700007038.992:10211): pid=25472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.9.25118" res=1 errno=0 [ 916.184287][ T5149] [ 916.185119][ T5149] ====================================================== [ 916.187307][ T5149] WARNING: possible circular locking dependency detected [ 916.189507][ T5149] syzkaller #0 Tainted: G L [ 916.191910][ T5149] ------------------------------------------------------ [ 916.194539][ T5149] udevd/5149 is trying to acquire lock: [ 916.195358][T25475] sd 0:0:0:0: PR command failed: 1026 [ 916.195378][T25475] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 916.195414][T25475] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 916.202191][ T5149] ffff8880737f1298 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 916.204798][ T5149] [ 916.204798][ T5149] but task is already holding lock: [ 916.207085][ T5149] ffff8880219e4ed0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 916.210404][ T5149] [ 916.210404][ T5149] which lock already depends on the new lock. [ 916.210404][ T5149] [ 916.213587][ T5149] [ 916.213587][ T5149] the existing dependency chain (in reverse order) is: [ 916.216374][ T5149] [ 916.216374][ T5149] -> #4 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 916.219074][ T5149] lock_acquire+0x1d1/0x380 [ 916.220813][ T5149] __mutex_lock+0x1a4/0x1bd0 [ 916.222452][ T5149] process_measurement+0x5ab/0x2350 [ 916.223156][T25479] netlink: 4 bytes leftover after parsing attributes in process `syz.8.25123'. [ 916.226986][ T5149] ima_file_check+0xcc/0x120 [ 916.228622][ T5149] security_file_post_open+0xc4/0x210 [ 916.230607][ T5149] path_openat+0x5cd/0x2440 [ 916.232212][ T5149] do_file_open+0x20e/0x430 [ 916.233800][ T5149] file_open_name+0x1c3/0x3e0 [ 916.235455][ T5149] filp_open+0x2e/0x50 [ 916.236919][ T5149] kernel_read_file_from_path_initns+0xec/0x240 [ 916.239034][ T5149] _request_firmware+0x733/0x13c0 [ 916.240782][ T5149] request_firmware+0x35/0x50 [ 916.242417][ T5149] reg_reload_regdb+0x85/0x460 [ 916.244087][ T5149] genl_family_rcv_msg_doit+0x214/0x300 [ 916.246004][ T5149] genl_rcv_msg+0x560/0x800 [ 916.247609][ T5149] netlink_rcv_skb+0x159/0x420 [ 916.249293][ T5149] genl_rcv+0x28/0x40 [ 916.250730][ T5149] netlink_unicast+0x585/0x850 [ 916.252400][ T5149] netlink_sendmsg+0x8b0/0xda0 [ 916.254063][ T5149] ____sys_sendmsg+0xa4d/0xbe0 [ 916.255737][ T5149] ___sys_sendmsg+0x190/0x1e0 [ 916.257369][ T5149] __sys_sendmsg+0x160/0x210 [ 916.258978][ T5149] __do_fast_syscall_32+0x13a/0x8b0 [ 916.260795][ T5149] do_fast_syscall_32+0x32/0x70 [ 916.262482][ T5149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 916.264613][ T5149] [ 916.264613][ T5149] -> #3 (cb_lock){++++}-{4:4}: [ 916.266758][ T5149] lock_acquire+0x1d1/0x380 [ 916.268357][ T5149] down_read+0x99/0x4c0 [ 916.269845][ T5149] genl_release+0x7e/0x1d0 [ 916.271421][ T5149] netlink_release+0x105e/0x2000 [ 916.273136][ T5149] __sock_release+0xb3/0x260 [ 916.274750][ T5149] sock_close+0x1c/0x30 [ 916.276259][ T5149] __fput+0x3ff/0xb50 [ 916.277668][ T5149] fput_close_sync+0x118/0x250 [ 916.279359][ T5149] __x64_sys_close+0x8b/0x120 [ 916.280998][ T5149] do_syscall_64+0x121/0x770 [ 916.282607][ T5149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.284622][ T5149] [ 916.284622][ T5149] -> #2 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 916.287315][ T5149] lock_acquire+0x1d1/0x380 [ 916.288896][ T5149] down_write+0x8b/0x1f0 [ 916.290413][ T5149] __sock_release+0x86/0x260 [ 916.292030][ T5149] sock_close+0x1c/0x30 [ 916.293513][ T5149] __fput+0x3ff/0xb50 [ 916.294955][ T5149] __fput_sync+0xd7/0x100 [ 916.296505][ T5149] nvme_tcp_alloc_queue.isra.0+0xd6d/0x1770 [ 916.298505][ T5149] nvme_tcp_configure_admin_queue+0x26/0x530 [ 916.300565][ T5149] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 916.302301][ T5149] nvme_tcp_create_ctrl+0x970/0xd90 [ 916.304090][ T5149] nvmf_dev_write+0x4ee/0xb60 [ 916.305721][ T5149] vfs_write+0x2aa/0x1050 [ 916.307254][ T5149] ksys_write+0x12a/0x250 [ 916.308832][ T5149] __do_fast_syscall_32+0x13a/0x8b0 [ 916.310640][ T5149] do_fast_syscall_32+0x32/0x70 [ 916.312335][ T5149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 916.314463][ T5149] [ 916.314463][ T5149] -> #1 (nvmf_dev_mutex){+.+.}-{4:4}: [ 916.316824][ T5149] lock_acquire+0x1d1/0x380 [ 916.318407][ T5149] __mutex_lock+0x1a4/0x1bd0 [ 916.320025][ T5149] nvmf_dev_show+0x26/0x210 [ 916.321612][ T5149] seq_read_iter+0x32f/0x1270 [ 916.323243][ T5149] seq_read+0x344/0x4d0 [ 916.324733][ T5149] vfs_read+0x1e4/0xb40 [ 916.326204][ T5149] ksys_read+0x12a/0x250 [ 916.327719][ T5149] __do_fast_syscall_32+0x13a/0x8b0 [ 916.329534][ T5149] do_fast_syscall_32+0x32/0x70 [ 916.331150][ T5149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 916.333293][ T5149] [ 916.333293][ T5149] -> #0 (&p->lock){+.+.}-{4:4}: [ 916.335519][ T5149] check_prev_add+0xeb/0xe60 [ 916.337136][ T5149] __lock_acquire+0x1528/0x1f40 [ 916.338822][ T5149] lock_acquire+0x1d1/0x380 [ 916.340446][ T5149] __mutex_lock+0x1a4/0x1bd0 [ 916.342062][ T5149] seq_read_iter+0xe1/0x1270 [ 916.343677][ T5149] kernfs_fop_read_iter+0x46c/0x610 [ 916.345461][ T5149] __kernel_read+0x397/0xad0 [ 916.347072][ T5149] integrity_kernel_read+0x7e/0xb0 [ 916.348835][ T5149] ima_calc_file_hash_tfm+0x25e/0x350 [ 916.350701][ T5149] ima_calc_file_hash+0x1e3/0x380 [ 916.352395][ T5149] ima_collect_measurement+0x94f/0xb30 [ 916.354259][ T5149] process_measurement+0xdfe/0x2350 [ 916.356058][ T5149] ima_file_check+0xcc/0x120 [ 916.357660][ T5149] security_file_post_open+0xc4/0x210 [ 916.359534][ T5149] path_openat+0x5cd/0x2440 [ 916.361115][ T5149] do_file_open+0x20e/0x430 [ 916.362705][ T5149] do_sys_openat2+0x10f/0x1e0 [ 916.364352][ T5149] __x64_sys_openat+0x12d/0x210 [ 916.366048][ T5149] do_syscall_64+0x121/0x770 [ 916.367657][ T5149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.369656][ T5149] [ 916.369656][ T5149] other info that might help us debug this: [ 916.369656][ T5149] [ 916.372657][ T5149] Chain exists of: [ 916.372657][ T5149] &p->lock --> cb_lock --> &ima_iint_mutex_key[depth] [ 916.372657][ T5149] [ 916.376528][ T5149] Possible unsafe locking scenario: [ 916.376528][ T5149] [ 916.378814][ T5149] CPU0 CPU1 [ 916.380515][ T5149] ---- ---- [ 916.382171][ T5149] lock(&ima_iint_mutex_key[depth]); [ 916.383850][ T5149] lock(cb_lock); [ 916.385800][ T5149] lock(&ima_iint_mutex_key[depth]); [ 916.388247][ T5149] lock(&p->lock); [ 916.389494][ T5149] [ 916.389494][ T5149] *** DEADLOCK *** [ 916.389494][ T5149] [ 916.392009][ T5149] locks held by udevd/5149: 1, last CPU#2: [ 916.393830][ T5149] #0: ffff8880219e4ed0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 916.397155][ T5149] [ 916.397155][ T5149] stack backtrace: [ 916.398990][ T5149] CPU: 2 UID: 0 PID: 5149 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 916.402182][ T5149] Tainted: [L]=SOFTLOCKUP [ 916.403512][ T5149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 916.406632][ T5149] Call Trace: [ 916.407646][ T5149] [ 916.408563][ T5149] dump_stack_lvl+0x100/0x190 [ 916.410072][ T5149] print_circular_bug.cold+0x178/0x1be [ 916.411791][ T5149] check_noncircular+0x146/0x160 [ 916.413352][ T5149] check_prev_add+0xeb/0xe60 [ 916.414809][ T5149] __lock_acquire+0x1528/0x1f40 [ 916.416358][ T5149] ? unwind_next_frame+0xbd/0x2090 [ 916.417968][ T5149] lock_acquire+0x1d1/0x380 [ 916.419434][ T5149] ? seq_read_iter+0xe1/0x1270 [ 916.420944][ T5149] ? __pfx___might_resched+0x10/0x10 [ 916.422607][ T5149] ? is_bpf_text_address+0x8a/0x1a0 [ 916.424230][ T5149] ? is_bpf_text_address+0x8a/0x1a0 [ 916.425838][ T5149] __mutex_lock+0x1a4/0x1bd0 [ 916.427305][ T5149] ? seq_read_iter+0xe1/0x1270 [ 916.428797][ T5149] ? seq_read_iter+0xe1/0x1270 [ 916.430327][ T5149] ? kernel_text_address+0x8d/0x100 [ 916.431914][ T5149] ? __kernel_text_address+0xd/0x30 [ 916.433499][ T5149] ? unwind_get_return_address+0x59/0xa0 [ 916.434686][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 916.434712][ T65] Bluetooth: hci4: command 0x0405 tx timeout [ 916.434730][ T65] Bluetooth: hci0: command 0x0419 tx timeout [ 916.440851][ T5149] ? __pfx___mutex_lock+0x10/0x10 [ 916.442437][ T5149] ? stack_trace_save+0x8e/0xc0 [ 916.443979][ T5149] ? __pfx_stack_trace_save+0x10/0x10 [ 916.445656][ T5149] ? seq_read_iter+0xe1/0x1270 [ 916.447162][ T5149] seq_read_iter+0xe1/0x1270 [ 916.448624][ T5149] ? kasan_save_stack+0x30/0x50 [ 916.450184][ T5149] ? kasan_save_track+0x14/0x30 [ 916.451720][ T5149] ? __kasan_kmalloc+0xaa/0xb0 [ 916.453229][ T5149] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 916.454962][ T5149] ? ima_calc_file_hash_tfm+0x236/0x350 [ 916.456647][ T5149] ? ima_collect_measurement+0x94f/0xb30 [ 916.458344][ T5149] ? ima_file_check+0xcc/0x120 [ 916.459804][ T5149] ? security_file_post_open+0xc4/0x210 [ 916.461481][ T5149] ? do_file_open+0x20e/0x430 [ 916.462929][ T5149] ? do_sys_openat2+0x10f/0x1e0 [ 916.464475][ T5149] kernfs_fop_read_iter+0x46c/0x610 [ 916.466108][ T5149] __kernel_read+0x397/0xad0 [ 916.467566][ T5149] ? __pfx___kernel_read+0x10/0x10 [ 916.469170][ T5149] integrity_kernel_read+0x7e/0xb0 [ 916.470769][ T5149] ? __pfx_integrity_kernel_read+0x10/0x10 [ 916.472589][ T5149] ? ima_calc_file_hash_tfm+0x236/0x350 [ 916.474317][ T5149] ima_calc_file_hash_tfm+0x25e/0x350 [ 916.476008][ T5149] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 916.477858][ T5149] ? ima_alloc_tfm+0x21a/0x2e0 [ 916.479378][ T5149] ? kernfs_iop_getattr+0xc4/0xf0 [ 916.480962][ T5149] ima_calc_file_hash+0x1e3/0x380 [ 916.482504][ T5149] ima_collect_measurement+0x94f/0xb30 [ 916.484125][ T5149] ? __pfx_ima_collect_measurement+0x10/0x10 [ 916.486004][ T5149] ? vfs_getxattr_alloc+0xec/0x350 [ 916.487620][ T5149] ? ima_get_hash_algo+0x241/0x400 [ 916.489219][ T5149] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 916.490927][ T5149] ? process_measurement+0xdfe/0x2350 [ 916.492619][ T5149] process_measurement+0xdfe/0x2350 [ 916.494263][ T5149] ? __pfx_process_measurement+0x10/0x10 [ 916.496035][ T5149] ? find_held_lock+0x2b/0x80 [ 916.497517][ T5149] ? kernfs_fop_open+0x887/0xd50 [ 916.499071][ T5149] ? kernfs_fop_open+0x887/0xd50 [ 916.500655][ T5149] ? kernfs_put_active+0x93/0xe0 [ 916.502224][ T5149] ? kernfs_fop_open+0x3da/0xd50 [ 916.503790][ T5149] ima_file_check+0xcc/0x120 [ 916.505255][ T5149] ? __pfx_ima_file_check+0x10/0x10 [ 916.506894][ T5149] security_file_post_open+0xc4/0x210 [ 916.508590][ T5149] path_openat+0x5cd/0x2440 [ 916.510026][ T5149] ? __pfx_path_openat+0x10/0x10 [ 916.511591][ T5149] do_file_open+0x20e/0x430 [ 916.513050][ T5149] ? __pfx_do_file_open+0x10/0x10 [ 916.514643][ T5149] ? _raw_spin_unlock+0x28/0x50 [ 916.516206][ T5149] ? alloc_fd+0x471/0x7a0 [ 916.517572][ T5149] do_sys_openat2+0x10f/0x1e0 [ 916.519064][ T5149] ? __pfx_do_sys_openat2+0x10/0x10 [ 916.520777][ T5149] __x64_sys_openat+0x12d/0x210 [ 916.522329][ T5149] ? __pfx___x64_sys_openat+0x10/0x10 [ 916.524028][ T5149] do_syscall_64+0x121/0x770 [ 916.525495][ T5149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.527347][ T5149] RIP: 0033:0x7f6042aa7407 [ 916.528753][ T5149] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 916.534717][ T5149] RSP: 002b:00007fff13007dd0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 916.537311][ T5149] RAX: ffffffffffffffda RBX: 00007f60431cc880 RCX: 00007f6042aa7407 [ 916.539800][ T5149] RDX: 0000000000080000 RSI: 00007fff13007f50 RDI: ffffffffffffff9c [ 916.542296][ T5149] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 916.544755][ T5149] R10: 0000000000000000 R11: 0000000000000202 R12: 0000563cb69687f5 [ 916.547217][ T5149] R13: 0000563cb69687f5 R14: 0000000000000001 R15: 00007fff1300c5a0 [ 916.549682][ T5149] [ 916.562723][ T43] audit: type=1800 audit(1700007039.366:10212): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16310 res=0 errno=0 [ 916.565256][ T43] audit: type=1800 audit(1700007039.375:10213): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16310 res=0 errno=0 [ 916.565871][ T43] audit: type=1800 audit(1700007039.375:10214): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=25065 res=0 errno=0 [ 916.589807][ T43] audit: type=1800 audit(1700007039.394:10215): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=25274 res=0 errno=0 [ 916.592592][ T43] audit: type=1800 audit(1700007039.394:10216): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=25065 res=0 errno=0 [ 916.592616][ T43] audit: type=1800 audit(1700007039.394:10217): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16568 res=0 errno=0 [ 916.593930][ T43] audit: type=1800 audit(1700007039.394:10218): pid=5149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16568 res=0 errno=0 [ 917.118612][T19027] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 918.657988][T19027] Bluetooth: hci0: command 0x0419 tx timeout [ 918.658014][ T790] Bluetooth: hci4: command 0x0405 tx timeout [ 918.658020][T19027] Bluetooth: hci3: command 0x0c1a tx timeout [ 920.880119][ T65] Bluetooth: hci0: command 0x0419 tx timeout