last executing test programs: 3.70413254s ago: executing program 2 (id=1728): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x13, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x3f}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x15}}, [@printk={@p, {}, {0x5, 0x1, 0xb, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x65c}, {0x14, 0x9}}], {{0x4, 0x1, 0x4, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.657948637s ago: executing program 2 (id=1729): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x141a42, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x1000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) r3 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) lsm_set_self_attr(0x65, &(0x7f0000000240)=ANY=[@ANYRESDEC=r4], 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000019300)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000180)=0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r5, 0x5605) socket$inet(0x2, 0x0, 0x2) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 2.723147873s ago: executing program 1 (id=1736): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) capset(0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000000440)=""/109}, {&(0x7f00000005c0)=""/66}, {&(0x7f0000000640)=""/82}], 0x0, &(0x7f0000000700)=[{&(0x7f0000000940)=""/143}, {&(0x7f0000000a00)=""/239}, {&(0x7f0000000b00)=""/132, 0x2b}, {&(0x7f0000000280)=""/9}, {&(0x7f0000000bc0)=""/139}, {&(0x7f0000000d80)=""/219}, {&(0x7f00000006c0)=""/4}], 0x286, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000300), 0x0) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, r1}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000380), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) listen(0xffffffffffffffff, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffef6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000040), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000040)={0x0, r9, r8}) socket$kcm(0x2, 0xd, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'pim6reg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000d0000000000000040000060cd3c680028060087c50000000000000000000000000000fe880000000000000000000001"], 0x5e) r10 = socket$inet(0xa, 0x801, 0x84) connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010101}, 0x10) listen(r10, 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) 2.594423269s ago: executing program 0 (id=1737): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044800}, 0x1) close(0x3) socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ocfs2_control(0xffffff9c, &(0x7f00000008c0), 0x40a000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1551], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.492968083s ago: executing program 1 (id=1739): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x6, 0x4, 0x8, 0x8, 0x8100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value, @void, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x10, 0xd, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES16=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0x541b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000004c0)}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)={0x9c, 0x9, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xc1}}]}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'pimreg0\x00'}}, {0x8, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="4898cdafc52a"}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = creat(0x0, 0x5) listen(0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000140)={0x81, 0x6000, 0x8, r3, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000880)=""/61, 0x3d}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='contention_begin\x00'}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0x0, 0x0, 0x208, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xdc, 0x100, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}]}, @REJECT={0x24}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'geneve0\x00'}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@unspec=@connlabel={{0x24}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3f4) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000040)=0x2) r7 = socket(0x10, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000840)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000070900010073797a30000000000900020073797a32000000002c0004802800018008000100666962001c000280080001400000000308000340000000210800024000001001140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) write(r7, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 2.492666901s ago: executing program 0 (id=1740): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040), &(0x7f00000000c0)=0x8) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000040)=@usbdevfs_connect) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = dup2(r2, r1) write$P9_RRENAME(r3, &(0x7f0000000140)={0x7, 0x15, 0x1}, 0x7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000100)={0x7, "9aaf11b59eb60dd0df86877f798a60ea3ca0c80acb407b34d0821e6323f1a55d", 0x7}) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) (async) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040), &(0x7f00000000c0)=0x8) (async) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000040)=@usbdevfs_connect) (async) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) dup2(r2, r1) (async) write$P9_RRENAME(r3, &(0x7f0000000140)={0x7, 0x15, 0x1}, 0x7) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000100)={0x7, "9aaf11b59eb60dd0df86877f798a60ea3ca0c80acb407b34d0821e6323f1a55d", 0x7}) (async) 2.404151343s ago: executing program 1 (id=1741): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$isdn_base(r1, &(0x7f0000004180)={0x22, 0x5, 0x7, 0xfc, 0x33}, 0x6) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x7f36, 0x10100, 0x0, 0x1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r6 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = dup(r6) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000004140)) read$FUSE(r7, &(0x7f0000000100)={0x2020}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000002140)="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", 0x2000, &(0x7f0000004980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$proc_mixer(r7, &(0x7f0000004bc0)=""/4096, 0x1000) accept4(r5, 0x0, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$MRT_DEL_MFC(r8, 0x0, 0xcd, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x10}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) 2.403849297s ago: executing program 0 (id=1742): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x6, 0x4, 0x8, 0x8, 0x8100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value, @void, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x10, 0xd, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES16=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0x541b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000004c0)}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = creat(0x0, 0x5) listen(0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000140)={0x81, 0x6000, 0x8, r3, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000880)=""/61, 0x3d}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='contention_begin\x00'}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0x0, 0x0, 0x208, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xdc, 0x100, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}]}, @REJECT={0x24}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'geneve0\x00'}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@unspec=@connlabel={{0x24}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3f4) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000040)=0x2) r7 = socket(0x10, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc00c64b5, &(0x7f0000000840)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000070900010073797a30000000000900020073797a32000000002c0004802800018008000100666962001c000280080001400000000308000340000000210800024000001001140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) write(r7, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 2.310298252s ago: executing program 0 (id=1744): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) 2.31005671s ago: executing program 0 (id=1745): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x141a42, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x1000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) r3 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000780)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) lsm_set_self_attr(0x65, &(0x7f0000000240)=ANY=[@ANYRESDEC=r4], 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000019300)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000180)=0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RELDISP(r5, 0x5605) socket$inet(0x2, 0x0, 0x2) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) 1.47456506s ago: executing program 1 (id=1746): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0x3}]}, 0x5c}}, 0x2000000) 1.404324544s ago: executing program 1 (id=1747): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x0}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) 1.403910212s ago: executing program 1 (id=1748): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) r1 = io_uring_setup(0x3ef5, &(0x7f0000000080)={0x0, 0x4006a23, 0x80, 0x3, 0x2f9}) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r2, r0, r0], 0x3) r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$SG_BLKTRACESTART(r3, 0x1274, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800080, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000540)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000a70ff37068500000000010011000000000900000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x6, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, &(0x7f0000000340)) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) 1.024912565s ago: executing program 2 (id=1753): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0xc0000484) ioctl$int_in(r4, 0x5421, &(0x7f0000000680)=0x3) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/48, 0x30}], 0x1) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="8000b6000a000200aaaaaaaaaaaa00000600050001"], 0x30}}, 0x0) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r0, 0x26, &(0x7f0000000180)) 884.78981ms ago: executing program 3 (id=1754): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00'}, 0x10) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) 614.049799ms ago: executing program 3 (id=1755): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003050000000000fff00000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 324.266685ms ago: executing program 3 (id=1756): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x11, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bind$unix(r0, &(0x7f0000000240)=@abs={0x1}, 0x6e) 323.989333ms ago: executing program 3 (id=1757): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7) read$FUSE(r0, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x24, 0x0, 0x200, 0x6}}, 0x50) 219.488832ms ago: executing program 0 (id=1758): socket$inet_udplite(0x2, 0x2, 0x88) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r1}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000580)={0x8f, 0x0, 0x8}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0x1a, 0x100000005, 0x0, &(0x7f0000000000)) 138.131254ms ago: executing program 3 (id=1759): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 137.925484ms ago: executing program 2 (id=1760): socket$inet6(0xa, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 137.807283ms ago: executing program 3 (id=1761): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x3, 0x81) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000180)={@multicast2, @remote}, 0xc) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 63.910055ms ago: executing program 2 (id=1762): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001900)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = epoll_create(0xcd) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)={0x10000010}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) shutdown(r5, 0x2) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000080)={0xa0, 0x0, r1, {{0x4, 0x2, 0x0, 0x2, 0x4292, 0xc, {0x1, 0xffffffffffffffff, 0x62, 0x4c, 0x9, 0xffffffffffff4372, 0xfec, 0x6, 0x25, 0x6000, 0x41e, r2, r3, 0x1, 0x21a5}}, {0x0, 0xefd26ca1dd724ec9}}}, 0xa0) r6 = accept4$ax25(0xffffffffffffffff, &(0x7f00000003c0)={{0x3, @default}, [@null, @default, @remote, @netrom, @default, @rose, @null, @bcast]}, &(0x7f00000002c0)=0x48, 0x80000) setsockopt$ax25_int(r6, 0x101, 0x3, &(0x7f0000000440)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x94, "4e2b699b895f04b0d170f3294069ee0624726604db7f159ae57f5223c16aeaadb89ebfb32aedf3c06f715b98c5bcc3874da61b18c8909f83fae2eefbd3c7c79ecd7ec2038c9babde5daffb11805d9ec86f368437fc787cbf478b966e6f6319e71d75e3b72d4069c4d4aae7d23a62cb462dafdde222e109857cd2bc8cb30b1e4ff6f1360887b78a4abaf85690ceb9a9b5f784190f"}, &(0x7f0000000200)=0x9c) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x408c5333, &(0x7f0000000500)) 0s ago: executing program 2 (id=1763): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x13c, 0x1170, 0x1170, 0x13c, 0x1170, 0x360, 0x1398, 0x1398, 0x360, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0xf4, 0x13c, 0x0, {}, [@common=@inet=@set2={{0x24}, {{0x0, 0x1, 0x4}}}, @common=@unspec=@connmark={{0x2c}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1dc, 0x224, 0x0, {}, [@common=@rt={{0x138}, {0x3000000, [0x4], 0x0, 0x0, 0x0, [@empty, @local, @remote, @remote, @private2, @rand_addr=' \x01\x00', @mcast1, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @private1, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x484) kernel console output (not intermixed with test programs): 64][ T6836] netlink: 40 bytes leftover after parsing attributes in process `syz.2.457'. [ 108.536789][ T6859] netlink: 28 bytes leftover after parsing attributes in process `syz.0.465'. [ 108.539291][ T6859] netlink: 'syz.0.465': attribute type 7 has an invalid length. [ 108.541446][ T6859] netlink: 'syz.0.465': attribute type 8 has an invalid length. [ 108.543502][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 108.656014][ T6861] Cannot find set identified by id 0 to match [ 108.690888][ T6863] netlink: 40 bytes leftover after parsing attributes in process `syz.0.467'. [ 108.995698][ T6878] netlink: 'syz.2.473': attribute type 27 has an invalid length. [ 109.010362][ T6876] tmpfs: Unknown parameter 'usrquota€©–„0pMèÔ`Ʀr¯lïý‚é²>æ|ËèËk’Q×R&' [ 109.182955][ T6879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.190360][ T6879] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.195984][ T6879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.222647][ T6885] netlink: 1680 bytes leftover after parsing attributes in process `syz.1.476'. [ 109.272347][ T6887] can0: slcan on ttyprintk. [ 109.360837][ T6892] UHID_CREATE from different security context by process 297 (syz.1.478), this is not allowed. [ 109.367058][ T5665] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 109.379278][ T5665] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 109.490741][ T6887] can0 (unregistered): slcan off ttyprintk. [ 109.624202][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.482'. [ 109.657983][ T6914] 8021q: adding VLAN 0 to HW filter on device bond3 [ 109.723027][ T6923] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 109.725058][ T6923] netlink: 636 bytes leftover after parsing attributes in process `syz.3.483'. [ 109.730818][ T6922] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 109.733965][ T6923] mmap: syz.3.483 (6923) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.996631][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 109.996649][ T39] audit: type=1326 audit(1727724562.299:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.2.487" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 110.167320][ T6937] netlink: 'syz.1.489': attribute type 4 has an invalid length. [ 110.181045][ T6937] netlink: 'syz.1.489': attribute type 4 has an invalid length. [ 110.991248][ T6945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.493'. [ 110.994346][ T6945] netlink: 'syz.1.493': attribute type 7 has an invalid length. [ 110.996932][ T6945] netlink: 'syz.1.493': attribute type 8 has an invalid length. [ 111.000152][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.493'. [ 111.005825][ T6945] gretap0: entered promiscuous mode [ 111.008480][ T6945] batadv_slave_1: entered promiscuous mode [ 111.011487][ T6945] debugfs: Directory 'hsr2' with parent 'hsr' already present! [ 111.014015][ T6945] Cannot create hsr debugfs directory [ 111.015886][ T6945] hsr2: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.066273][ T6948] hsr_slave_0: left promiscuous mode [ 111.069413][ T6948] hsr_slave_1: left promiscuous mode [ 111.300184][ T6951] overlayfs: missing 'workdir' [ 112.288999][ T39] audit: type=1326 audit(1727724820.587:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.2.498" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 112.811472][ T6971] netlink: 44 bytes leftover after parsing attributes in process `syz.3.502'. [ 112.814863][ T6971] netlink: 59 bytes leftover after parsing attributes in process `syz.3.502'. [ 112.835772][ T6971] dvmrp0: entered allmulticast mode [ 113.202804][ T6979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.505'. [ 113.224819][ T6979] 8021q: adding VLAN 0 to HW filter on device bond4 [ 113.291640][ T6986] capability: warning: `syz.2.508' uses deprecated v2 capabilities in a way that may be insecure [ 113.348693][ T6986] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.351132][ T6986] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.353374][ T6986] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.355603][ T6986] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.357850][ T6986] geneve2: entered promiscuous mode [ 113.359608][ T6986] geneve2: entered allmulticast mode [ 113.370000][ T6986] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.372314][ T6986] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.374578][ T6986] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.377074][ T6986] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.414331][ T6990] sctp: [Deprecated]: syz.1.510 (pid 6990) Use of int in maxseg socket option. [ 113.414331][ T6990] Use struct sctp_assoc_value instead [ 113.647046][ T39] audit: type=1326 audit(1727725077.946:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6995 comm="syz.2.511" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 113.740565][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 113.743562][ T7000] netlink: 20 bytes leftover after parsing attributes in process `syz.2.512'. [ 114.313964][ T39] audit: type=1326 audit(1727725078.616:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.1.520" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x0 [ 114.338715][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 114.346169][ T7029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.522'. [ 114.777781][ T7045] binder: 7039:7045 ioctl c0306201 20000680 returned -14 [ 115.127040][ T7052] netlink: 'syz.3.529': attribute type 178 has an invalid length. [ 115.244298][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'. [ 117.608725][ T7094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.542'. [ 117.612043][ T7094] netlink: 'syz.1.542': attribute type 7 has an invalid length. [ 117.614682][ T7094] netlink: 'syz.1.542': attribute type 8 has an invalid length. [ 117.617446][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'. [ 118.965895][ T7132] netlink: 36 bytes leftover after parsing attributes in process `syz.1.554'. [ 119.001786][ T7134] Cannot find set identified by id 0 to match [ 119.015345][ T7136] netlink: 28 bytes leftover after parsing attributes in process `syz.2.556'. [ 119.018686][ T7136] netlink: 'syz.2.556': attribute type 7 has an invalid length. [ 119.021884][ T7136] netlink: 'syz.2.556': attribute type 8 has an invalid length. [ 119.024544][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.556'. [ 119.379144][ T7148] overlayfs: missing 'lowerdir' [ 120.034903][ T7156] syz.1.563: vmalloc error: size 2005603840, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 120.044252][ T7156] CPU: 2 UID: 0 PID: 7156 Comm: syz.1.563 Not tainted 6.12.0-rc1-syzkaller #0 [ 120.047501][ T7156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.051402][ T7156] Call Trace: [ 120.052647][ T7156] [ 120.053750][ T7156] dump_stack_lvl+0x16c/0x1f0 [ 120.055652][ T7156] warn_alloc+0x24d/0x3a0 [ 120.057297][ T7156] ? __pfx_warn_alloc+0x10/0x10 [ 120.059123][ T7156] ? __pfx___lock_acquire+0x10/0x10 [ 120.061040][ T7156] ? get_ctrl+0x394/0x4f0 [ 120.062686][ T7156] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 120.064802][ T7156] __vmalloc_node_range_noprof+0x11a7/0x15a0 [ 120.067007][ T7156] ? __mutex_trylock_common+0xea/0x250 [ 120.069049][ T7156] ? __pfx___mutex_trylock_common+0x10/0x10 [ 120.071619][ T7156] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 120.073892][ T7156] ? rcu_is_watching+0x12/0xc0 [ 120.075675][ T7156] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 120.078007][ T7156] ? rcu_is_watching+0x12/0xc0 [ 120.079785][ T7156] ? rcu_is_watching+0x12/0xc0 [ 120.081556][ T7156] ? trace_kmalloc+0x2d/0xe0 [ 120.083329][ T7156] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 120.085453][ T7156] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 120.087734][ T7156] __kvmalloc_node_noprof+0x14f/0x1a0 [ 120.089759][ T7156] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 120.091993][ T7156] __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 120.094196][ T7156] vivid_update_format_cap+0x127b/0x2530 [ 120.096269][ T7156] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 120.098506][ T7156] ? v4l2_match_dv_timings+0x1df/0x1010 [ 120.100562][ T7156] vivid_vid_cap_s_dv_timings+0xc0f/0xfb0 [ 120.102648][ T7156] vidioc_s_dv_timings+0xa5/0xc0 [ 120.104498][ T7156] ? v4l_stub_s_dv_timings+0x1b/0x60 [ 120.106460][ T7156] __video_do_ioctl+0xaf0/0xf00 [ 120.108265][ T7156] ? __pfx___video_do_ioctl+0x10/0x10 [ 120.110289][ T7156] video_usercopy+0x426/0x1500 [ 120.112049][ T7156] ? __pfx___video_do_ioctl+0x10/0x10 [ 120.114018][ T7156] ? __pfx_video_usercopy+0x10/0x10 [ 120.115954][ T7156] v4l2_ioctl+0x1ba/0x250 [ 120.117572][ T7156] v4l2_compat_ioctl32+0x214/0x2c0 [ 120.119471][ T7156] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 120.121538][ T7156] __do_compat_sys_ioctl+0x259/0x2b0 [ 120.123505][ T7156] __do_fast_syscall_32+0x73/0x120 [ 120.125415][ T7156] do_fast_syscall_32+0x32/0x80 [ 120.127219][ T7156] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.129558][ T7156] RIP: 0023:0xf746e579 [ 120.131059][ T7156] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 120.138009][ T7156] RSP: 002b:00000000f575656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 120.141020][ T7156] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0845657 [ 120.143921][ T7156] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.146803][ T7156] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.149651][ T7156] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 120.152515][ T7156] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.155399][ T7156] [ 120.175608][ T7156] Mem-Info: [ 120.176934][ T7156] active_anon:3598 inactive_anon:56 isolated_anon:0 [ 120.176934][ T7156] active_file:3703 inactive_file:34217 isolated_file:0 [ 120.176934][ T7156] unevictable:771 dirty:576 writeback:0 [ 120.176934][ T7156] slab_reclaimable:4752 slab_unreclaimable:51236 [ 120.176934][ T7156] mapped:17569 shmem:892 pagetables:678 [ 120.176934][ T7156] sec_pagetables:319 bounce:0 [ 120.176934][ T7156] kernel_misc_reclaimable:0 [ 120.176934][ T7156] free:99488 free_pcp:2418 free_cma:0 [ 120.195119][ T7156] Node 0 active_anon:0kB inactive_anon:168kB active_file:0kB inactive_file:40kB unevictable:1548kB isolated(anon):0kB isolated(file):0kB mapped:8644kB dirty:20kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9628kB pagetables:1820kB sec_pagetables:1204kB all_unreclaimable? no [ 120.206745][ T7156] Node 1 active_anon:14248kB inactive_anon:208kB active_file:14812kB inactive_file:136828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:61632kB dirty:2284kB writeback:0kB shmem:2032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:1564kB pagetables:892kB sec_pagetables:72kB all_unreclaimable? no [ 120.218696][ T7156] Node 0 DMA free:924kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:92kB local_pcp:4kB free_cma:0kB [ 120.228589][ T7156] lowmem_reserve[]: 0 273 0 0 0 [ 120.230897][ T7156] Node 0 DMA32 free:21036kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:0kB inactive_anon:244kB active_file:0kB inactive_file:40kB unevictable:1548kB writepending:20kB present:1032196kB managed:306284kB mlocked:12kB bounce:0kB free_pcp:1412kB local_pcp:340kB free_cma:0kB [ 120.242888][ T7156] lowmem_reserve[]: 0 0 0 0 0 [ 120.244773][ T7156] Node 1 DMA32 free:375960kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:14180kB inactive_anon:208kB active_file:14812kB inactive_file:136828kB unevictable:1536kB writepending:2300kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:8416kB local_pcp:844kB free_cma:0kB [ 120.255257][ T7156] lowmem_reserve[]: 0 0 0 0 0 [ 120.256666][ T7156] Node 0 DMA: 14*4kB (U) 1*8kB (U) 0*16kB 28*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 960kB [ 120.260346][ T7156] Node 0 DMA32: 104*4kB (UMEH) 75*8kB (UMH) 55*16kB (UMEH) 69*32kB (UMEH) 48*64kB (UMH) 35*128kB (UMEH) 6*256kB (UME) 8*512kB (UM) 2*1024kB (ME) 1*2048kB (M) 0*4096kB = 21384kB [ 120.265072][ T7156] Node 1 DMA32: 150*4kB (UME) 76*8kB (UM) 46*16kB (UM) 144*32kB (UME) 136*64kB (UME) 112*128kB (UME) 47*256kB (UME) 19*512kB (UME) 15*1024kB (UME) 13*2048kB (ME) 69*4096kB (UM) = 375960kB [ 120.270415][ T7156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.273898][ T7156] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.277412][ T7156] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.283297][ T7156] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.286851][ T7156] 39705 total pagecache pages [ 120.288715][ T7156] 890 pages in swap cache [ 120.290820][ T7156] Free swap = 110160kB [ 120.292457][ T7156] Total swap = 124996kB [ 120.293991][ T7156] 524155 pages RAM [ 120.295397][ T7156] 0 pages HighMem/MovableOnly [ 120.297090][ T7156] 206681 pages reserved [ 120.298591][ T7156] 0 pages cma reserved [ 120.328221][ T7162] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 120.332765][ T7162] syzkaller0: entered promiscuous mode [ 120.334231][ T7162] syzkaller0: entered allmulticast mode [ 120.663501][ T5408] libceph: connect (1)[c::]:6789 error -101 [ 120.676021][ T7168] ceph: No mds server is up or the cluster is laggy [ 120.687087][ T5408] libceph: mon0 (1)[c::]:6789 connect error [ 122.178731][ T7202] binder: 7201:7202 ioctl c0306201 20000080 returned -22 [ 122.613963][ T7207] netlink: 52 bytes leftover after parsing attributes in process `syz.1.579'. [ 122.617273][ T7207] tipc: Invalid UDP bearer configuration [ 122.617308][ T7207] tipc: Enabling of bearer rejected, failed to enable media [ 122.628895][ T7207] veth0_to_team: entered promiscuous mode [ 122.631093][ T7207] veth0_to_team: entered allmulticast mode [ 123.038502][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'. [ 123.041788][ T7219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.584'. [ 123.619682][ T7234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.588'. [ 123.622473][ T7234] netlink: 'syz.0.588': attribute type 7 has an invalid length. [ 123.625139][ T7234] netlink: 'syz.0.588': attribute type 8 has an invalid length. [ 123.627748][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.588'. [ 123.886708][ T39] audit: type=1326 audit(1727725088.186:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.590" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f3f579 code=0x0 [ 123.939125][ T5665] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 124.069233][ T5665] usb 6-1: device descriptor read/64, error -71 [ 124.087474][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 124.090645][ T7249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.593'. [ 124.226692][ T7253] ERROR: device name not specified. [ 124.235806][ T7253] binder: 7252:7253 ioctl c018620c 200005c0 returned -1 [ 124.242754][ T7253] Bluetooth: MGMT ver 1.23 [ 124.332437][ T5665] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 124.469051][ T5665] usb 6-1: device descriptor read/64, error -71 [ 124.591096][ T5665] usb usb6-port1: attempt power cycle [ 124.969006][ T5665] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 124.995554][ T5665] usb 6-1: device descriptor read/8, error -71 [ 125.210812][ T39] audit: type=1326 audit(1727725089.516:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.3.601" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f4f579 code=0x0 [ 125.239313][ T5665] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 125.259473][ T5665] usb 6-1: device descriptor read/8, error -71 [ 125.369453][ T5665] usb usb6-port1: unable to enumerate USB device [ 125.394117][ T7276] binder: BINDER_SET_CONTEXT_MGR already set [ 125.396495][ T7276] binder: 7275:7276 ioctl 4018620d 200002c0 returned -16 [ 125.999463][ T7294] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 126.002599][ T7294] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 126.316398][ T39] audit: type=1326 audit(1727725090.616:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7296 comm="syz.0.608" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f3f579 code=0x0 [ 126.893326][ T7303] netlink: 'syz.1.609': attribute type 4 has an invalid length. [ 126.922306][ T7303] netlink: 'syz.1.609': attribute type 4 has an invalid length. [ 127.084266][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'. [ 127.086693][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'. [ 128.330888][ T7331] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 128.391470][ T7331] netlink: 900 bytes leftover after parsing attributes in process `syz.0.617'. [ 129.266515][ T39] audit: type=1326 audit(1727725349.573:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7335 comm="syz.2.619" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 129.822104][ T7355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.624'. [ 129.851688][ T7355] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.982116][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 129.984145][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 129.986270][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 129.988244][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 129.993763][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 129.996655][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 129.999273][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.001736][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.004232][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.007036][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.009745][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.012225][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.014739][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.017329][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.019577][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.021541][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.023515][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.025457][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.027884][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.029898][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.031842][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.033759][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.035726][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.038329][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.040420][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.042340][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.044303][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.046261][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.048846][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.051172][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.053152][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.055082][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.056998][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.059375][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.061249][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.063098][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.065049][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.066959][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.068908][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.071059][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.073061][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.075005][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.076979][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.078979][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.080909][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.082969][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.084897][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.086757][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.088723][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.090741][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.092696][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.094749][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.096707][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.098564][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.100564][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.102517][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.104551][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.106594][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.108581][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.110626][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.112617][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.115130][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.117787][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.120322][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.122232][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.124174][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.126123][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.128188][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.130266][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.132223][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.134151][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.136104][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.138077][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.140135][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.142046][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.144005][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.145948][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.147922][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.150024][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.152096][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.154087][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.156037][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.157975][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.160033][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.161875][ T7367] syz.2.628: attempt to access beyond end of device [ 130.161875][ T7367] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 130.161978][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.167686][ T7367] SQUASHFS error: Failed to read block 0x0: -5 [ 130.168792][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.171759][ T7367] unable to read squashfs_super_block [ 130.173275][ T5408] hid-generic 0005:0400:654A.0005: unknown main item tag 0x0 [ 130.179134][ T5408] hid-generic 0005:0400:654A.0005: hidraw1: BLUETOOTH HID vc8.60 Device [syz0] on syz0 [ 130.367336][ T7374] netlink: 1680 bytes leftover after parsing attributes in process `syz.2.631'. [ 130.399801][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.632'. [ 130.446803][ T7378] wireguard0: entered promiscuous mode [ 130.448541][ T7378] wireguard0: entered allmulticast mode [ 130.751880][ T7387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.636'. [ 131.175771][ T7399] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 131.202117][ T39] audit: type=1800 audit(1727725351.513:90): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.639" name="bus" dev="overlay" ino=778 res=0 errno=0 [ 131.650089][ T7408] netlink: 'syz.1.640': attribute type 4 has an invalid length. [ 131.718853][ T7411] Cannot find set identified by id 0 to match [ 131.719379][ T7408] netlink: 'syz.1.640': attribute type 4 has an invalid length. [ 132.055559][ T7419] binder: BINDER_SET_CONTEXT_MGR already set [ 132.057393][ T7419] binder: 7414:7419 ioctl 4018620d 200002c0 returned -16 [ 132.149806][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.151495][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.276880][ T7436] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 132.933509][ T7459] FAULT_INJECTION: forcing a failure. [ 132.933509][ T7459] name failslab, interval 1, probability 0, space 0, times 0 [ 132.936783][ T7459] CPU: 3 UID: 0 PID: 7459 Comm: syz.2.660 Not tainted 6.12.0-rc1-syzkaller #0 [ 132.939105][ T7459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.941919][ T7459] Call Trace: [ 132.942826][ T7459] [ 132.943630][ T7459] dump_stack_lvl+0x16c/0x1f0 [ 132.944890][ T7459] should_fail_ex+0x497/0x5b0 [ 132.946229][ T7459] ? fs_reclaim_acquire+0xae/0x160 [ 132.947593][ T7459] should_failslab+0xc2/0x120 [ 132.948854][ T7459] __kmalloc_noprof+0xcb/0x410 [ 132.950135][ T7459] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 132.951634][ T7459] tomoyo_realpath_from_path+0xbf/0x710 [ 132.953167][ T7459] ? tomoyo_path_number_perm+0x232/0x5b0 [ 132.955118][ T7459] tomoyo_path_number_perm+0x245/0x5b0 [ 132.956762][ T7459] ? tomoyo_path_number_perm+0x232/0x5b0 [ 132.958353][ T7459] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 132.960550][ T7459] ? trace_lock_acquire+0x14a/0x1d0 [ 132.962274][ T7459] ? lock_acquire+0x2f/0xb0 [ 132.963481][ T7459] ? __fget_files+0x40/0x3f0 [ 132.964664][ T7459] ? __fget_files+0x244/0x3f0 [ 132.965907][ T7459] security_file_ioctl_compat+0x9b/0x240 [ 132.967408][ T7459] __do_compat_sys_ioctl+0x52/0x2b0 [ 132.968782][ T7459] __do_fast_syscall_32+0x73/0x120 [ 132.970137][ T7459] do_fast_syscall_32+0x32/0x80 [ 132.971432][ T7459] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.973100][ T7459] RIP: 0023:0xf73fe579 [ 132.974185][ T7459] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 132.979222][ T7459] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 132.981393][ T7459] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008004e500 [ 132.983476][ T7459] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 132.985538][ T7459] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.987610][ T7459] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 132.989798][ T7459] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.991885][ T7459] [ 132.993533][ T7459] ERROR: Out of memory at tomoyo_realpath_from_path. [ 133.049133][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 133.052398][ T7457] netlink: 32 bytes leftover after parsing attributes in process `syz.0.657'. [ 133.055397][ T7465] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 133.253087][ T7484] FAULT_INJECTION: forcing a failure. [ 133.253087][ T7484] name failslab, interval 1, probability 0, space 0, times 0 [ 133.257645][ T7484] CPU: 0 UID: 0 PID: 7484 Comm: syz.0.671 Not tainted 6.12.0-rc1-syzkaller #0 [ 133.260819][ T7484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.264473][ T7484] Call Trace: [ 133.265497][ T7484] [ 133.266406][ T7484] dump_stack_lvl+0x16c/0x1f0 [ 133.267879][ T7484] should_fail_ex+0x497/0x5b0 [ 133.269328][ T7484] ? fs_reclaim_acquire+0xae/0x160 [ 133.270898][ T7484] should_failslab+0xc2/0x120 [ 133.272383][ T7484] __kmalloc_noprof+0xcb/0x410 [ 133.273801][ T7484] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 133.275605][ T7484] tomoyo_realpath_from_path+0xbf/0x710 [ 133.277300][ T7484] ? tomoyo_path_number_perm+0x232/0x5b0 [ 133.279028][ T7484] tomoyo_path_number_perm+0x245/0x5b0 [ 133.280706][ T7484] ? tomoyo_path_number_perm+0x232/0x5b0 [ 133.282439][ T7484] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 133.284301][ T7484] ? trace_lock_acquire+0x14a/0x1d0 [ 133.285904][ T7484] ? lock_acquire+0x2f/0xb0 [ 133.287315][ T7484] ? __fget_files+0x40/0x3f0 [ 133.288738][ T7484] ? __fget_files+0x244/0x3f0 [ 133.290200][ T7484] security_file_ioctl_compat+0x9b/0x240 [ 133.291999][ T7484] __do_compat_sys_ioctl+0x52/0x2b0 [ 133.293597][ T7484] __do_fast_syscall_32+0x73/0x120 [ 133.295186][ T7484] do_fast_syscall_32+0x32/0x80 [ 133.296620][ T7484] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 133.298562][ T7484] RIP: 0023:0xf7f3f579 [ 133.299821][ T7484] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 133.305632][ T7484] RSP: 002b:00000000f56c656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 133.308166][ T7484] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000408c5333 [ 133.310552][ T7484] RDX: 0000000020000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 133.312954][ T7484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 133.315268][ T7484] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 133.317655][ T7484] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 133.320073][ T7484] [ 133.324566][ T7484] ERROR: Out of memory at tomoyo_realpath_from_path. [ 133.349969][ T7482] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.373957][ T39] audit: type=1326 audit(1727725353.683:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7481 comm="syz.1.670" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 133.382775][ T39] audit: type=1326 audit(1727725353.683:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7481 comm="syz.1.670" exe="/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 133.396565][ T7487] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 133.399550][ T39] audit: type=1326 audit(1727725353.683:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7481 comm="syz.1.670" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 133.407008][ T39] audit: type=1326 audit(1727725353.683:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7481 comm="syz.1.670" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 133.414635][ T39] audit: type=1326 audit(1727725353.693:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7481 comm="syz.1.670" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 133.422956][ T7482] autofs4:pid:7482:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 133.427782][ T7489] netlink: 'syz.0.672': attribute type 1 has an invalid length. [ 133.430352][ T39] audit: type=1326 audit(1727725353.703:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7481 comm="syz.1.670" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 133.438071][ T7489] netlink: 88156 bytes leftover after parsing attributes in process `syz.0.672'. [ 133.443891][ T39] audit: type=1326 audit(1727725353.733:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7481 comm="syz.1.670" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 133.453561][ T39] audit: type=1326 audit(1727725353.733:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7481 comm="syz.1.670" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 133.753055][ T7502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.965183][ T7512] ======================================================= [ 133.965183][ T7512] WARNING: The mand mount option has been deprecated and [ 133.965183][ T7512] and is ignored by this kernel. Remove the mand [ 133.965183][ T7512] option from the mount to silence this warning. [ 133.965183][ T7512] ======================================================= [ 133.977621][ T7512] ./bus: Can't lookup blockdev [ 133.997848][ T7513] netlink: 16 bytes leftover after parsing attributes in process `syz.3.680'. [ 134.013520][ T7515] Cannot find set identified by id 0 to match [ 134.194578][ T5389] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz1 [ 134.682833][ T7547] netlink: 'syz.2.692': attribute type 5 has an invalid length. [ 134.817120][ T7551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.693'. [ 135.155640][ T7565] vxcan1: entered allmulticast mode [ 135.185037][ T39] kauditd_printk_skb: 20 callbacks suppressed [ 135.185055][ T39] audit: type=1326 audit(1727725611.492:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7562 comm="syz.2.697" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 135.675484][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.701'. [ 135.702827][ T7581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.888859][ T7589] netlink: 40 bytes leftover after parsing attributes in process `syz.3.704'. [ 137.024749][ T7615] netlink: 'syz.3.712': attribute type 4 has an invalid length. [ 137.091116][ T7615] netlink: 'syz.3.712': attribute type 4 has an invalid length. [ 137.751040][ T7623] FAULT_INJECTION: forcing a failure. [ 137.751040][ T7623] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 137.754839][ T7623] CPU: 0 UID: 0 PID: 7623 Comm: syz.2.717 Not tainted 6.12.0-rc1-syzkaller #0 [ 137.757254][ T7623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.760035][ T7623] Call Trace: [ 137.760911][ T7623] [ 137.761830][ T7623] dump_stack_lvl+0x16c/0x1f0 [ 137.763093][ T7623] should_fail_ex+0x497/0x5b0 [ 137.764362][ T7623] _copy_from_user+0x30/0xf0 [ 137.765574][ T7623] get_compat_msghdr+0xa8/0x170 [ 137.766893][ T7623] ? __pfx_get_compat_msghdr+0x10/0x10 [ 137.768313][ T7623] ? __pfx___lock_acquire+0x10/0x10 [ 137.769668][ T7623] ___sys_sendmsg+0x1b0/0x1e0 [ 137.770920][ T7623] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.772303][ T7623] ? lock_acquire+0x2f/0xb0 [ 137.773507][ T7623] ? __fget_files+0x40/0x3f0 [ 137.774740][ T7623] ? __pfx___might_resched+0x10/0x10 [ 137.776123][ T7623] ? fdget+0x176/0x210 [ 137.777191][ T7623] __sys_sendmmsg+0x2a5/0x450 [ 137.778426][ T7623] ? __pfx___sys_sendmmsg+0x10/0x10 [ 137.779811][ T7623] ? vfs_write+0x14d/0x1140 [ 137.781008][ T7623] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 137.782568][ T7623] ? fput+0x30/0x390 [ 137.783613][ T7623] ? ksys_write+0x1ad/0x260 [ 137.784792][ T7623] ? __pfx_ksys_write+0x10/0x10 [ 137.786066][ T7623] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 137.787531][ T7623] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 137.789245][ T7623] __do_fast_syscall_32+0x73/0x120 [ 137.790586][ T7623] do_fast_syscall_32+0x32/0x80 [ 137.791875][ T7623] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.793524][ T7623] RIP: 0023:0xf73fe579 [ 137.794597][ T7623] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 137.799603][ T7623] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 137.802006][ T7623] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200001c0 [ 137.804072][ T7623] RDX: 0000000000000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.806124][ T7623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.808161][ T7623] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 137.810198][ T7623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.812243][ T7623] [ 137.841689][ T7626] binder: 7624:7626 ioctl c0306201 20000680 returned -14 [ 138.054864][ T7640] input: syz1 as /devices/virtual/input/input6 [ 139.296212][ T7663] netlink: 36 bytes leftover after parsing attributes in process `syz.0.729'. [ 139.426301][ T7665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.730'. [ 139.429958][ T7665] netlink: 'syz.0.730': attribute type 7 has an invalid length. [ 139.432970][ T7665] netlink: 'syz.0.730': attribute type 8 has an invalid length. [ 139.436396][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.730'. [ 139.557073][ T7667] fuse: Unknown parameter 'Fé´0x0000000000000003' [ 139.823881][ T39] audit: type=1326 audit(1727725616.132:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7670 comm="syz.0.733" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f3f579 code=0x0 [ 141.394572][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.743'. [ 141.419558][ T7711] 8021q: adding VLAN 0 to HW filter on device bond5 [ 141.722718][ T39] audit: type=1326 audit(1727725618.032:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7717 comm="syz.2.746" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 141.741661][ T7721] syzkaller0: entered promiscuous mode [ 141.743177][ T7721] syzkaller0: entered allmulticast mode [ 142.719083][ T5408] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 142.870773][ T5408] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.876342][ T5408] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 142.881483][ T5408] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 142.884042][ T5408] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.887472][ T5408] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.891447][ T5408] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.910775][ T5408] usb 7-1: config 0 descriptor?? [ 142.998659][ T7727] netlink: 40 bytes leftover after parsing attributes in process `syz.1.749'. [ 143.291392][ T7752] netlink: 720 bytes leftover after parsing attributes in process `syz.1.756'. [ 143.320235][ T7730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.750'. [ 143.322641][ T7730] netlink: 'syz.2.750': attribute type 5 has an invalid length. [ 143.327312][ T5408] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 143.331342][ T5408] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 143.344867][ T5408] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 143.482212][ T39] audit: type=1326 audit(1727725619.782:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7754 comm="syz.0.758" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f3f579 code=0x0 [ 143.596621][ T8] usb 7-1: USB disconnect, device number 3 [ 144.194498][ T7768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.761'. [ 144.415424][ T7778] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.370607][ T7792] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 145.374881][ T7792] cramfs: wrong magic [ 145.532683][ T39] audit: type=1326 audit(1727725621.842:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7793 comm="syz.3.770" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f4f579 code=0x0 [ 145.998672][ T7804] netlink: 40 bytes leftover after parsing attributes in process `syz.1.772'. [ 146.048532][ T7806] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 146.064461][ T7807] CIFS mount error: No usable UNC path provided in device string! [ 146.064461][ T7807] [ 146.070670][ T7807] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 146.078733][ T7806] CIFS mount error: No usable UNC path provided in device string! [ 146.078733][ T7806] [ 146.086556][ T7806] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 146.378826][ T7819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.777'. [ 146.382202][ T7819] netlink: 'syz.2.777': attribute type 7 has an invalid length. [ 146.384530][ T7819] netlink: 'syz.2.777': attribute type 8 has an invalid length. [ 146.386861][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 147.321640][ T7825] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 147.324556][ T7825] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 148.300569][ T7852] netlink: 1680 bytes leftover after parsing attributes in process `syz.1.787'. [ 148.326900][ T7854] netlink: 216 bytes leftover after parsing attributes in process `syz.3.788'. [ 148.374497][ T7858] netlink: 820 bytes leftover after parsing attributes in process `syz.3.790'. [ 148.629793][ T7860] netlink: 'syz.3.791': attribute type 5 has an invalid length. [ 148.630553][ T7862] netlink: 'syz.0.792': attribute type 27 has an invalid length. [ 148.683559][ T7862] vxcan1: left allmulticast mode [ 148.763735][ T7865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.767682][ T7865] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.771700][ T7865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.748547][ T7881] netlink: 'syz.3.799': attribute type 4 has an invalid length. [ 149.787202][ T7881] netlink: 'syz.3.799': attribute type 4 has an invalid length. [ 150.160653][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.801'. [ 150.181161][ T7890] team_slave_1: entered allmulticast mode [ 151.503522][ T7904] fuse: Bad value for 'group_id' [ 151.511453][ T7904] fuse: Bad value for 'group_id' [ 151.715264][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'. [ 151.717516][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'. [ 152.456738][ T7922] netlink: 1680 bytes leftover after parsing attributes in process `syz.0.810'. [ 152.995435][ T7941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.815'. [ 153.017424][ T7941] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.929098][ T7954] netlink: 720 bytes leftover after parsing attributes in process `syz.3.819'. [ 154.091093][ T7958] 9pnet_fd: Insufficient options for proto=fd [ 154.531103][ T7960] trusted_key: encrypted_key: insufficient parameters specified [ 154.617904][ T7965] netlink: 44 bytes leftover after parsing attributes in process `syz.2.822'. [ 154.620901][ T7965] netlink: 43 bytes leftover after parsing attributes in process `syz.2.822'. [ 154.623423][ T7965] netlink: 'syz.2.822': attribute type 5 has an invalid length. [ 154.625555][ T7965] netlink: 43 bytes leftover after parsing attributes in process `syz.2.822'. [ 155.024782][ T7977] random: crng reseeded on system resumption [ 155.481347][ T7983] 9pnet_fd: Insufficient options for proto=fd [ 155.991983][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'. [ 155.995096][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'. [ 156.114827][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.832'. [ 156.314375][ T8006] netlink: 'syz.3.833': attribute type 4 has an invalid length. [ 156.375595][ T8006] netlink: 'syz.3.833': attribute type 4 has an invalid length. [ 157.229498][ T5408] IPVS: starting estimator thread 0... [ 157.339168][ T8017] IPVS: using max 35 ests per chain, 84000 per kthread [ 158.076812][ T39] audit: type=1326 audit(1727725634.382:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8024 comm="syz.3.838" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f4f579 code=0x0 [ 158.104662][ T8029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.839'. [ 158.118578][ T8029] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.126275][ T8032] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 58431 (only 8 groups) [ 158.822130][ T8050] random: crng reseeded on system resumption [ 160.532014][ T8085] can0: slcan on ttyS3. [ 160.762025][ T8097] netlink: 'syz.2.859': attribute type 27 has an invalid length. [ 160.999247][ T8099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.001962][ T8099] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.007897][ T8099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.353477][ T8105] capability: warning: `syz.1.861' uses 32-bit capabilities (legacy support in use) [ 163.246042][ T8150] netlink: 36 bytes leftover after parsing attributes in process `syz.1.874'. [ 163.354745][ T8158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.878'. [ 163.357738][ T8158] netlink: 'syz.1.878': attribute type 7 has an invalid length. [ 163.361150][ T8158] netlink: 'syz.1.878': attribute type 8 has an invalid length. [ 163.363733][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.878'. [ 163.524252][ T8165] binder: BINDER_SET_CONTEXT_MGR already set [ 163.526378][ T8165] binder: 8164:8165 ioctl 4018620d 200002c0 returned -16 [ 163.639477][ T8085] can0 (unregistered): slcan off ttyS3. [ 163.754157][ T8184] wireguard0: entered promiscuous mode [ 163.756270][ T8184] wireguard0: entered allmulticast mode [ 163.890150][ T8141] No control pipe specified [ 164.237947][ T8215] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.894'. [ 164.277462][ T8215] Bluetooth: MGMT ver 1.23 [ 164.533529][ T39] audit: type=1326 audit(1727725896.842:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8220 comm="syz.0.897" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f3f579 code=0x0 [ 165.157310][ T8235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.902'. [ 165.159695][ T8235] netlink: 'syz.1.902': attribute type 7 has an invalid length. [ 165.161645][ T8235] netlink: 'syz.1.902': attribute type 8 has an invalid length. [ 165.163621][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.902'. [ 165.268373][ T8237] netlink: 36 bytes leftover after parsing attributes in process `syz.0.903'. [ 165.532117][ T8244] mkiss: ax0: crc mode is auto. [ 165.773925][ T8248] mkiss: ax0: crc mode is auto. [ 167.442888][ T8268] trusted_key: encrypted_key: insufficient parameters specified [ 168.432114][ T8289] all: renamed from bridge_slave_0 [ 168.800529][ T8311] netlink: 'syz.1.927': attribute type 27 has an invalid length. [ 168.885317][ T8311] veth0_to_team: left promiscuous mode [ 168.887010][ T8311] veth0_to_team: left allmulticast mode [ 168.892182][ T8311] team_slave_1: left allmulticast mode [ 169.057413][ T8311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.069974][ T8311] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.111047][ T8311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.316364][ T39] audit: type=1326 audit(1727725901.622:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.0.930" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f3f579 code=0x0 [ 169.401823][ T8331] netlink: 216 bytes leftover after parsing attributes in process `syz.3.932'. [ 169.611290][ T8338] netlink: 36 bytes leftover after parsing attributes in process `syz.3.935'. [ 169.613627][ T8338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.935'. [ 169.619122][ T8338] netlink: 36 bytes leftover after parsing attributes in process `syz.3.935'. [ 169.626166][ T8338] netlink: 36 bytes leftover after parsing attributes in process `syz.3.935'. [ 169.687889][ T8339] binder: 8337:8339 ioctl c0306201 20000680 returned -14 [ 169.729658][ T8341] Cannot find set identified by id 0 to match [ 170.132977][ T8351] binder: 8350:8351 ioctl 8008f512 20000140 returned -22 [ 170.136640][ T8351] binder: BINDER_SET_CONTEXT_MGR already set [ 170.138272][ T8351] binder: 8350:8351 ioctl 4018620d 200002c0 returned -16 [ 170.969049][ T5665] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 171.130216][ T5665] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.133046][ T5665] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.135619][ T5665] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.139539][ T5665] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.141913][ T5665] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.144877][ T5665] usb 7-1: config 0 descriptor?? [ 171.557995][ T5665] usbhid 7-1:0.0: can't add hid device: -71 [ 171.562414][ T5665] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 171.566110][ T5665] usb 7-1: USB disconnect, device number 4 [ 171.571901][ T8368] netlink: 720 bytes leftover after parsing attributes in process `syz.1.946'. [ 171.983809][ T8391] netlink: 720 bytes leftover after parsing attributes in process `syz.0.954'. [ 172.155691][ T8395] netlink: 'syz.0.955': attribute type 4 has an invalid length. [ 172.342519][ T8396] netlink: 'syz.0.955': attribute type 4 has an invalid length. [ 172.524796][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.960'. [ 172.528007][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.960'. [ 172.681282][ T8415] netlink: 216 bytes leftover after parsing attributes in process `syz.2.962'. [ 173.026030][ T39] audit: type=1326 audit(1727726161.326:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.3.970" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f4f579 code=0x0 [ 173.635975][ T8456] Cannot find set identified by id 0 to match [ 173.708508][ T8458] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.710602][ T8458] IPv6: NLM_F_CREATE should be set when creating new route [ 173.716395][ T8458] netlink: 'syz.2.974': attribute type 27 has an invalid length. [ 173.959567][ T8462] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 173.961844][ T8462] cramfs: wrong magic [ 175.085641][ T8465] __nla_validate_parse: 2 callbacks suppressed [ 175.087056][ T8465] netlink: 80 bytes leftover after parsing attributes in process `syz.2.977'. [ 176.004181][ T8501] netlink: 720 bytes leftover after parsing attributes in process `syz.1.987'. [ 176.062219][ T8503] wireguard0: entered promiscuous mode [ 176.064386][ T8503] wireguard0: entered allmulticast mode [ 176.940081][ T8529] netlink: 'syz.0.997': attribute type 27 has an invalid length. [ 177.159130][ T8531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.164297][ T8531] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.187943][ T8531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.326982][ T8535] Cannot find set identified by id 0 to match [ 177.471983][ T8540] netlink: 'syz.1.1001': attribute type 27 has an invalid length. [ 177.717096][ T8540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.721024][ T8540] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.724256][ T8540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.875882][ T8547] FAULT_INJECTION: forcing a failure. [ 177.875882][ T8547] name failslab, interval 1, probability 0, space 0, times 0 [ 177.879558][ T8547] CPU: 3 UID: 0 PID: 8547 Comm: syz.1.1002 Not tainted 6.12.0-rc1-syzkaller #0 [ 177.881877][ T8547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 177.884683][ T8547] Call Trace: [ 177.885562][ T8547] [ 177.886357][ T8547] dump_stack_lvl+0x16c/0x1f0 [ 177.887732][ T8547] should_fail_ex+0x497/0x5b0 [ 177.889025][ T8547] ? fs_reclaim_acquire+0xae/0x160 [ 177.890328][ T8547] should_failslab+0xc2/0x120 [ 177.891530][ T8547] __kmalloc_noprof+0xcb/0x410 [ 177.892780][ T8547] ? __pfx_lock_release+0x10/0x10 [ 177.894080][ T8547] tomoyo_encode2+0x100/0x3e0 [ 177.895289][ T8547] ? bpf_ksym_find+0x124/0x1c0 [ 177.896545][ T8547] tomoyo_encode+0x2c/0x40 [ 177.897778][ T8547] tomoyo_mount_acl+0x145/0x880 [ 177.899053][ T8547] ? hlock_class+0x4e/0x130 [ 177.900228][ T8547] ? __lock_acquire+0x163e/0x3ce0 [ 177.901863][ T8547] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 177.903476][ T8547] ? __pfx___lock_acquire+0x10/0x10 [ 177.904921][ T8547] ? stack_trace_save+0x95/0xd0 [ 177.906240][ T8547] ? trace_lock_acquire+0x14a/0x1d0 [ 177.907607][ T8547] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.909811][ T8547] ? tomoyo_mount_permission+0x146/0x410 [ 177.911708][ T8547] ? lock_acquire+0x2f/0xb0 [ 177.913240][ T8547] ? tomoyo_mount_permission+0x146/0x410 [ 177.915131][ T8547] tomoyo_mount_permission+0x16b/0x410 [ 177.916957][ T8547] ? tomoyo_mount_permission+0x146/0x410 [ 177.918860][ T8547] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 177.920877][ T8547] ? get_current_fs_domain+0x188/0x1f0 [ 177.922732][ T8547] security_sb_mount+0x9b/0x260 [ 177.924380][ T8547] path_mount+0x129/0x1f10 [ 177.925888][ T8547] ? kmem_cache_free+0x152/0x4b0 [ 177.927509][ T8547] ? __pfx_path_mount+0x10/0x10 [ 177.928785][ T8547] ? putname+0x12e/0x170 [ 177.929899][ T8547] __ia32_sys_mount+0x292/0x310 [ 177.931182][ T8547] ? __pfx___ia32_sys_mount+0x10/0x10 [ 177.932576][ T8547] __do_fast_syscall_32+0x73/0x120 [ 177.933910][ T8547] do_fast_syscall_32+0x32/0x80 [ 177.935201][ T8547] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.936846][ T8547] RIP: 0023:0xf746e579 [ 177.937931][ T8547] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 177.942908][ T8547] RSP: 002b:00000000f573556c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 177.945061][ T8547] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000200000c0 [ 177.947116][ T8547] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000020000900 [ 177.949394][ T8547] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.951540][ T8547] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 177.953571][ T8547] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.955623][ T8547] [ 178.723886][ T8561] netlink: 'syz.2.1006': attribute type 4 has an invalid length. [ 178.742664][ T8561] netlink: 'syz.2.1006': attribute type 4 has an invalid length. [ 179.669590][ T39] audit: type=1326 audit(1727726167.976:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.2.1009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 179.679065][ T39] audit: type=1326 audit(1727726167.976:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.2.1009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 179.684610][ T39] audit: type=1326 audit(1727726167.976:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.2.1009" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 179.691035][ T39] audit: type=1326 audit(1727726167.976:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.2.1009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 179.696583][ T39] audit: type=1326 audit(1727726167.986:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.2.1009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 179.702506][ T39] audit: type=1326 audit(1727726167.986:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.2.1009" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 179.707992][ T39] audit: type=1326 audit(1727726167.996:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.2.1009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 179.711690][ T8571] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 179.714146][ T39] audit: type=1326 audit(1727726167.996:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.2.1009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 179.716794][ T8571] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 179.724095][ T39] audit: type=1326 audit(1727726167.996:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.2.1009" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 179.751480][ T39] audit: type=1326 audit(1727726167.996:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.2.1009" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 179.838094][ T8577] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1011'. [ 179.842062][ T8577] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1011'. [ 179.846785][ T8579] input: syz0 as /devices/virtual/input/input9 [ 179.954721][ T8588] netlink: 'syz.3.1014': attribute type 4 has an invalid length. [ 179.997548][ T8588] netlink: 'syz.3.1014': attribute type 4 has an invalid length. [ 180.783528][ T8611] netlink: 1680 bytes leftover after parsing attributes in process `syz.3.1023'. [ 180.801331][ T8614] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1024'. [ 180.864629][ T8625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1029'. [ 180.867007][ T8625] netlink: 'syz.3.1029': attribute type 7 has an invalid length. [ 180.873652][ T8625] netlink: 'syz.3.1029': attribute type 8 has an invalid length. [ 180.875725][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'. [ 181.074044][ T8635] random: crng reseeded on system resumption [ 181.291524][ T8639] sp0: Synchronizing with TNC [ 182.464030][ T8658] ip6gretap0: entered promiscuous mode [ 182.465954][ T8658] batadv_slave_0: entered promiscuous mode [ 182.467906][ T8658] debugfs: Directory 'hsr2' with parent 'hsr' already present! [ 182.471134][ T8658] Cannot create hsr debugfs directory [ 182.537659][ T8664] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 182.563187][ T8668] netlink: 'syz.2.1040': attribute type 49 has an invalid length. [ 182.567966][ T8666] evm: overlay not supported [ 185.126341][ T8716] overlay: Unknown parameter 'audit' [ 185.450163][ T8725] block nbd0: shutting down sockets [ 185.963579][ T8755] random: crng reseeded on system resumption [ 186.076269][ T8773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1073'. [ 186.091180][ T8773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.174746][ T8781] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1075'. [ 186.903000][ T8799] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1081'. [ 187.017316][ T8803] netlink: 720 bytes leftover after parsing attributes in process `syz.2.1083'. [ 187.039868][ T8805] Cannot find set identified by id 0 to match [ 187.205428][ T39] kauditd_printk_skb: 53 callbacks suppressed [ 187.205440][ T39] audit: type=1326 audit(1727726431.503:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.2.1087" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 187.854180][ T8821] Mount JFS Failure: -22 [ 187.947316][ T8829] netlink: 1680 bytes leftover after parsing attributes in process `syz.0.1093'. [ 187.962868][ T8831] netlink: 720 bytes leftover after parsing attributes in process `syz.2.1094'. [ 188.129250][ T5665] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 188.292057][ T5665] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 188.294174][ T5665] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 188.296906][ T5665] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 188.299669][ T5665] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 188.302619][ T5665] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 188.307405][ T5665] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 188.309510][ T5665] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 188.312223][ T5665] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 188.315052][ T5665] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 188.318641][ T5665] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 188.323211][ T5665] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 188.325429][ T5665] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 188.328108][ T5665] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 188.330820][ T5665] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 188.333902][ T5665] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 188.341836][ T5665] usb 6-1: string descriptor 0 read error: -22 [ 188.343985][ T5665] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 188.346364][ T5665] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.389146][ T5665] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 188.586267][ T5665] usb 6-1: USB disconnect, device number 10 [ 191.018160][ T39] audit: type=1326 audit(1727726435.313:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8880 comm="syz.3.1108" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f4f579 code=0x0 [ 191.855619][ T8897] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 191.857932][ T8897] cramfs: wrong magic [ 191.917575][ T8899] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1114'. [ 193.102235][ T39] audit: type=1326 audit(1727726437.403:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8922 comm="syz.3.1121" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f4f579 code=0x0 [ 193.397406][ T8934] netlink: 'syz.1.1123': attribute type 27 has an invalid length. [ 193.601031][ T8942] random: crng reseeded on system resumption [ 193.610274][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.612665][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.675888][ T8935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.696096][ T8935] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.703803][ T8935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.293409][ T39] audit: type=1326 audit(1727726439.593:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8978 comm="syz.2.1137" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 195.374127][ T39] audit: type=1804 audit(1727726439.673:195): pid=8983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1138" name="/newroot/235/file0/file0" dev="9p" ino=36574465 res=1 errno=0 [ 195.402837][ T8987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1139'. [ 195.418346][ T8987] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.490125][ T8990] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1140'. [ 195.581851][ T8992] random: crng reseeded on system resumption [ 195.986856][ T8998] Cannot find set identified by id 0 to match [ 196.002928][ T9000] netlink: 1680 bytes leftover after parsing attributes in process `syz.3.1144'. [ 197.028900][ T39] audit: type=1326 audit(1727726441.323:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.0.1153" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f3f579 code=0x0 [ 198.292348][ T9057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1161'. [ 198.295254][ T9057] netlink: 'syz.1.1161': attribute type 7 has an invalid length. [ 198.307867][ T9057] netlink: 'syz.1.1161': attribute type 8 has an invalid length. [ 198.310906][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1161'. [ 198.531943][ T9078] binder: 9063:9078 ioctl c0306201 20000680 returned -14 [ 198.538203][ T9079] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1170'. [ 198.574163][ T9081] Cannot find set identified by id 0 to match [ 199.457629][ T9109] wireguard0: entered promiscuous mode [ 199.461029][ T9109] wireguard0: entered allmulticast mode [ 199.759634][ T9117] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1181'. [ 201.528278][ T9145] random: crng reseeded on system resumption [ 202.171171][ T9147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.174055][ T9147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.176847][ T9147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.183929][ T9147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.224023][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1190'. [ 202.229776][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1190'. [ 202.338252][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 202.343710][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 203.585432][ T9171] ebtables: wrong size: *len 80, entries_size 144, replsz 144 [ 204.341514][ T9180] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 204.520622][ T9184] random: crng reseeded on system resumption [ 205.606235][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 205.770248][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 205.772717][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 205.775105][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 205.781459][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 205.784024][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 205.786543][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 205.791886][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 205.794886][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 205.797462][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 205.991554][ T9213] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 9213 comm: syz.1.1213) [ 205.995077][ T39] audit: type=1800 audit(1727726450.293:197): pid=9213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1213" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=22895 res=0 errno=0 [ 206.129913][ T9217] xt_socket: unknown flags 0x4 [ 206.137198][ T9217] netfs: Couldn't get user pages (rc=-14) [ 209.517196][ T39] audit: type=1326 audit(1727726453.813:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.1.1231" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x0 [ 210.932623][ T9320] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 210.934849][ T9320] cramfs: wrong magic [ 211.035305][ T9324] input: syz0 as /devices/virtual/input/input10 [ 211.133597][ T9326] wireguard0: entered promiscuous mode [ 211.135159][ T9326] wireguard0: entered allmulticast mode [ 211.329192][ T9329] wireguard0: entered promiscuous mode [ 211.331141][ T9329] wireguard0: entered allmulticast mode [ 211.699080][ T9347] netlink: 'syz.1.1250': attribute type 27 has an invalid length. [ 211.834293][ T9350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.837779][ T9350] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.842573][ T9350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.132764][ T9408] __nla_validate_parse: 56 callbacks suppressed [ 213.132784][ T9408] netlink: 1680 bytes leftover after parsing attributes in process `syz.1.1266'. [ 214.027592][ T9419] usb usb8: usbfs: process 9419 (syz.2.1268) did not claim interface 0 before use [ 214.293652][ T9431] random: crng reseeded on system resumption [ 214.433319][ T5665] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 214.505424][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1276'. [ 214.508161][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1276'. [ 214.580817][ T5665] usb 6-1: config 0 has no interfaces? [ 214.582915][ T5665] usb 6-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca [ 214.586170][ T5665] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.600973][ T5665] usb 6-1: config 0 descriptor?? [ 214.816207][ T5665] usb 6-1: USB disconnect, device number 11 [ 214.856541][ T9456] netlink: 1680 bytes leftover after parsing attributes in process `syz.2.1280'. [ 215.394519][ T9463] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 215.397004][ T9463] cramfs: wrong magic [ 215.744359][ T9474] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 216.981567][ T9499] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1295'. [ 217.044558][ T9505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1296'. [ 217.048383][ T9505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1296'. [ 217.103528][ T9507] netlink: 'syz.2.1297': attribute type 1 has an invalid length. [ 217.680916][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1299'. [ 217.687226][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1299'. [ 217.769905][ T9522] netlink: 1680 bytes leftover after parsing attributes in process `syz.0.1301'. [ 218.012727][ T39] audit: type=1326 audit(1727726974.317:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.0.1304" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f3f579 code=0x0 [ 218.398535][ T9537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1307'. [ 218.403947][ T9537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1307'. [ 218.648365][ T9545] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 219.792665][ T1099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.801473][ T39] audit: type=1326 audit(1727726976.067:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9566 comm="syz.0.1318" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f3f579 code=0x0 [ 219.874011][ T1099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.957746][ T1099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.014277][ T4793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.018645][ T4793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.023899][ T4793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.029154][ T4793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.033181][ T4793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 220.036400][ T4793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.049336][ T5348] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.052143][ T5348] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.054934][ T5348] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.057862][ T5348] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.075389][ T5348] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 220.078232][ T5348] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.085908][ T1099] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.119031][ T9576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1323'. [ 220.121575][ T9576] netlink: 'syz.3.1323': attribute type 7 has an invalid length. [ 220.124158][ T9576] netlink: 'syz.3.1323': attribute type 8 has an invalid length. [ 220.126332][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1323'. [ 220.197284][ T9573] chnl_net:caif_netlink_parms(): no params data found [ 220.240186][ T1099] bridge_slave_1: left allmulticast mode [ 220.242674][ T1099] bridge_slave_1: left promiscuous mode [ 220.246073][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.255282][ T1099] bridge_slave_0: left allmulticast mode [ 220.256790][ T1099] bridge_slave_0: left promiscuous mode [ 220.259137][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.301442][ T1099] ip6gretap0 (unregistering): left promiscuous mode [ 220.361376][ T1099] gretap0 (unregistering): left promiscuous mode [ 220.883811][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.889223][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.910778][ T1099] bond0 (unregistering): Released all slaves [ 221.020781][ T1099] bond1 (unregistering): Released all slaves [ 221.276381][ T1099] bond2 (unregistering): Released all slaves [ 221.430257][ T1099] bond3 (unregistering): Released all slaves [ 221.549351][ T1099] bond4 (unregistering): Released all slaves [ 221.614070][ T1099] bond5 (unregistering): Released all slaves [ 221.619364][ T1099] bond6 (unregistering): Released all slaves [ 221.643184][ T9588] netlink: 'syz.3.1326': attribute type 4 has an invalid length. [ 221.653272][ T9589] netlink: 'syz.3.1326': attribute type 4 has an invalid length. [ 221.764402][ T9573] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.766468][ T9573] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.768423][ T9573] bridge_slave_0: entered allmulticast mode [ 221.820545][ T9573] bridge_slave_0: entered promiscuous mode [ 221.823343][ T9573] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.825220][ T9573] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.849372][ T9573] bridge_slave_1: entered allmulticast mode [ 221.851488][ T9573] bridge_slave_1: entered promiscuous mode [ 221.921125][ T9573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.924713][ T9573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.015434][ T9573] team0: Port device team_slave_0 added [ 222.020357][ T9573] team0: Port device team_slave_1 added [ 222.085245][ T9573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.098638][ T9573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.115957][ T9573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.135032][ T9573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.140214][ T9573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.150777][ T9573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.153028][ T5348] Bluetooth: hci3: command tx timeout [ 222.156053][ T9628] FAULT_INJECTION: forcing a failure. [ 222.156053][ T9628] name failslab, interval 1, probability 0, space 0, times 0 [ 222.156086][ T9628] CPU: 2 UID: 0 PID: 9628 Comm: syz.3.1332 Not tainted 6.12.0-rc1-syzkaller #0 [ 222.156098][ T9628] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 222.164599][ T9628] Call Trace: [ 222.165486][ T9628] [ 222.166270][ T9628] dump_stack_lvl+0x16c/0x1f0 [ 222.167538][ T9628] should_fail_ex+0x497/0x5b0 [ 222.168783][ T9628] ? fs_reclaim_acquire+0xae/0x160 [ 222.170170][ T9628] should_failslab+0xc2/0x120 [ 222.171423][ T9628] __kmalloc_noprof+0xcb/0x410 [ 222.172684][ T9628] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 222.174257][ T9628] tomoyo_realpath_from_path+0xbf/0x710 [ 222.175732][ T9628] ? tomoyo_path_number_perm+0x232/0x5b0 [ 222.177223][ T9628] tomoyo_path_number_perm+0x245/0x5b0 [ 222.178675][ T9628] ? tomoyo_path_number_perm+0x232/0x5b0 [ 222.180233][ T9628] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 222.181819][ T9628] ? trace_lock_acquire+0x14a/0x1d0 [ 222.183224][ T9628] ? lock_acquire+0x2f/0xb0 [ 222.184433][ T9628] ? __fget_files+0x40/0x3f0 [ 222.185688][ T9628] ? __fget_files+0x244/0x3f0 [ 222.187077][ T9628] security_file_ioctl_compat+0x9b/0x240 [ 222.188555][ T9628] __do_compat_sys_ioctl+0x52/0x2b0 [ 222.189917][ T9628] __do_fast_syscall_32+0x73/0x120 [ 222.191274][ T9628] do_fast_syscall_32+0x32/0x80 [ 222.192565][ T9628] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.194226][ T9628] RIP: 0023:0xf7f4f579 [ 222.195310][ T9628] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 222.200293][ T9628] RSP: 002b:00000000f56d656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 222.202522][ T9628] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000008914 [ 222.204574][ T9628] RDX: 0000000020002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.206639][ T9628] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.208626][ T9628] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 222.210648][ T9628] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.212636][ T9628] [ 222.213460][ C2] vkms_vblank_simulate: vblank timer overrun [ 222.215328][ T1099] batadv_slave_0: left promiscuous mode [ 222.232170][ T9628] ERROR: Out of memory at tomoyo_realpath_from_path. [ 222.236847][ T1099] batadv_slave_1: left promiscuous mode [ 222.257533][ T1099] hsr_slave_0: left promiscuous mode [ 222.268181][ T1099] hsr_slave_1: left promiscuous mode [ 222.280017][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.294101][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.778807][ T39] audit: type=1326 audit(1727726979.077:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9641 comm="syz.0.1334" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f3f579 code=0x0 [ 223.044397][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 223.123371][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 223.583047][ T9647] usb usb8: usbfs: process 9647 (syz.0.1335) did not claim interface 0 before use [ 223.718838][ T9638] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1333'. [ 223.765798][ T9651] random: crng reseeded on system resumption [ 223.838753][ T9573] hsr_slave_0: entered promiscuous mode [ 223.851662][ T9573] hsr_slave_1: entered promiscuous mode [ 224.079929][ T1099] IPVS: stop unused estimator thread 0... [ 224.230634][ T5348] Bluetooth: hci3: command tx timeout [ 224.476227][ T9573] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 224.483646][ T9573] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 224.486876][ T9573] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 224.497586][ T9573] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 224.633583][ T9573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.639778][ T9573] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.652569][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.654489][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.679853][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.681693][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.832818][ T9573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.863432][ T9573] veth0_vlan: entered promiscuous mode [ 224.880485][ T9573] veth1_vlan: entered promiscuous mode [ 224.903582][ T9573] veth0_macvtap: entered promiscuous mode [ 224.906944][ T9573] veth1_macvtap: entered promiscuous mode [ 224.921922][ T9573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.925458][ T9573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.931701][ T9573] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.933995][ T9573] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.936252][ T9573] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.938547][ T9573] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.003141][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.005231][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.021326][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.023415][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.556125][ T5665] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 225.558095][ T5665] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 225.560205][ T5665] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 225.562248][ T5665] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 225.564203][ T5665] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 225.566092][ T5665] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 225.567998][ T5665] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 225.570111][ T5665] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 225.572037][ T5665] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 225.578897][ T5665] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 225.581076][ T5665] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 225.583097][ T5665] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 225.585075][ T5665] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 225.587056][ T5665] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 225.597828][ T5665] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 225.602187][ T5665] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 225.604195][ T5665] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 225.606168][ T5665] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 225.608151][ T5665] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 225.618462][ T5665] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 225.628248][ T5665] hid-generic 0000:1000000:0000.0008: unknown main item tag 0x0 [ 225.637095][ T5665] hid-generic 0000:1000000:0000.0008: hidraw1: HID v0.00 Device [syz0] on syz1 [ 225.935680][ T9742] program syz.2.1349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.939806][ T9742] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1349'. [ 225.944211][ T9742] gretap0: entered promiscuous mode [ 225.948601][ T9742] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1349'. [ 225.951772][ T9742] 0ªX¹¦D: renamed from gretap0 [ 225.953973][ T9742] 0ªX¹¦D: left promiscuous mode [ 225.955299][ T9742] 0ªX¹¦D: entered allmulticast mode [ 225.957308][ T9742] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 225.958123][ T9744] usb usb8: usbfs: process 9744 (syz.3.1347) did not claim interface 0 before use [ 226.074239][ T9747] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1350'. [ 226.078893][ T9747] 9pnet: Found fid 0 not clunked [ 226.192013][ T9754] FAULT_INJECTION: forcing a failure. [ 226.192013][ T9754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.197291][ T9754] CPU: 0 UID: 0 PID: 9754 Comm: syz.2.1352 Not tainted 6.12.0-rc1-syzkaller #0 [ 226.200556][ T9754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 226.204486][ T9754] Call Trace: [ 226.205734][ T9754] [ 226.206839][ T9754] dump_stack_lvl+0x16c/0x1f0 [ 226.208610][ T9754] should_fail_ex+0x497/0x5b0 [ 226.210405][ T9754] _copy_to_iter+0x48b/0x13e0 [ 226.212119][ T9754] ? __pfx__copy_to_iter+0x10/0x10 [ 226.214027][ T9754] ? __virt_addr_valid+0x1a4/0x590 [ 226.215943][ T9754] ? __virt_addr_valid+0x5e/0x590 [ 226.217372][ T9754] ? __phys_addr_symbol+0x30/0x80 [ 226.218699][ T9754] ? __check_object_size+0x488/0x710 [ 226.220077][ T9754] seq_read_iter+0xd00/0x12b0 [ 226.221316][ T9754] seq_read+0x39f/0x4e0 [ 226.222435][ T9754] ? __pfx_seq_read+0x10/0x10 [ 226.223668][ T9754] ? __lock_acquire+0xbdd/0x3ce0 [ 226.224921][ T9754] full_proxy_read+0x127/0x1a0 [ 226.226332][ T9754] ? __pfx_full_proxy_read+0x10/0x10 [ 226.228283][ T9754] vfs_read+0x1ce/0xbd0 [ 226.229840][ T9754] ? __fget_files+0x23a/0x3f0 [ 226.231588][ T9754] ? fdget_pos+0x24c/0x360 [ 226.233243][ T9754] ? __pfx_lock_release+0x10/0x10 [ 226.235106][ T9754] ? trace_lock_acquire+0x14a/0x1d0 [ 226.236774][ T9754] ? __pfx_vfs_read+0x10/0x10 [ 226.237997][ T9754] ? __pfx___mutex_lock+0x10/0x10 [ 226.239319][ T9754] ? __fget_files+0x244/0x3f0 [ 226.240548][ T9754] ksys_read+0x12f/0x260 [ 226.241651][ T9754] ? __pfx_ksys_read+0x10/0x10 [ 226.242900][ T9754] __do_fast_syscall_32+0x73/0x120 [ 226.244236][ T9754] do_fast_syscall_32+0x32/0x80 [ 226.245507][ T9754] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.247642][ T9754] RIP: 0023:0xf7f63579 [ 226.249165][ T9754] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 226.256122][ T9754] RSP: 002b:00000000f56e656c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 226.259330][ T9754] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000002000c600 [ 226.262102][ T9754] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 226.264846][ T9754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 226.267619][ T9754] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 226.270332][ T9754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.273083][ T9754] [ 226.320929][ T5348] Bluetooth: hci3: command tx timeout [ 226.536279][ T9771] netlink: 'syz.2.1360': attribute type 27 has an invalid length. [ 226.543957][ T9771] 0ªX¹¦D: left allmulticast mode [ 226.561361][ T9771] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.563404][ T9771] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.672485][ T9771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.679725][ T9771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.742358][ T9771] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.744808][ T9771] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.747080][ T9771] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.750448][ T9771] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.784058][ T9773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.786288][ T9773] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.788566][ T9777] netlink: 1680 bytes leftover after parsing attributes in process `syz.3.1362'. [ 226.793345][ T9773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.046339][ T9792] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 228.390350][ T5348] Bluetooth: hci3: command tx timeout [ 228.596086][ T9794] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 228.617472][ T9796] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1368'. [ 228.691977][ T9800] wireguard0: entered promiscuous mode [ 228.694414][ T9800] wireguard0: entered allmulticast mode [ 228.750359][ T9806] usb usb8: usbfs: process 9806 (syz.3.1370) did not claim interface 0 before use [ 229.016871][ T9812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.823153][ T9832] netlink: 'syz.3.1377': attribute type 1 has an invalid length. [ 229.825282][ T9832] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1377'. [ 229.869788][ T9836] random: crng reseeded on system resumption [ 229.992889][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1385'. [ 229.995985][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1385'. [ 230.438048][ T39] audit: type=1326 audit(1727727498.741:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9852 comm="syz.2.1387" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x0 [ 231.109030][ T4793] Bluetooth: hci3: command 0x0405 tx timeout [ 231.407838][ T9867] Cannot find set identified by id 0 to match [ 231.489372][ T9869] overlayfs: missing 'lowerdir' [ 231.508213][ T9869] overlay: ./file0 is not a directory [ 231.975935][ T5389] IPVS: starting estimator thread 0... [ 231.986018][ T9880] tipc: Started in network mode [ 231.987788][ T9880] tipc: Node identity ac1414aa, cluster identity 4711 [ 232.006500][ T9880] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 232.015295][ T9880] tipc: Enabled bearer , priority 10 [ 232.070789][ T9881] IPVS: using max 35 ests per chain, 84000 per kthread [ 232.127534][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1400'. [ 232.132747][ T9890] netlink: 'syz.3.1400': attribute type 10 has an invalid length. [ 232.145732][ T9890] team0: Port device wlan1 added [ 232.150340][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 232.152960][ T39] audit: type=1804 audit(1727727500.461:203): pid=9890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1400" name="/newroot/299/file0/bus" dev="ramfs" ino=27281 res=1 errno=0 [ 232.265630][ T39] audit: type=1800 audit(1727727500.571:204): pid=9890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1400" name="bus" dev="ramfs" ino=27281 res=0 errno=0 [ 232.298981][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 232.398071][ T9915] netlink: 1680 bytes leftover after parsing attributes in process `syz.2.1410'. [ 232.429056][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 232.429597][ T9917] netlink: 'syz.1.1411': attribute type 27 has an invalid length. [ 232.511976][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1413'. [ 232.531731][ T9919] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.569137][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 232.622504][ T9922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.625211][ T9922] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.631650][ T9922] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.709129][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 232.820935][ T9934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1415'. [ 232.849084][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 232.871084][ T9934] syz.1.1415: attempt to access beyond end of device [ 232.871084][ T9934] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 232.876494][ T9934] XFS (nbd1): SB validate failed with error -5. [ 232.988995][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 233.130576][ T5665] tipc: Node number set to 2886997162 [ 233.268989][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 233.346956][ T9968] ERROR: device name not specified. [ 233.589080][ T4793] Bluetooth: hci3: command 0x0405 tx timeout [ 233.973608][ T9988] netlink: 'syz.1.1432': attribute type 4 has an invalid length. [ 234.079750][ T9989] netlink: 'syz.1.1432': attribute type 4 has an invalid length. [ 234.818371][T10007] usb usb8: usbfs: process 10007 (syz.0.1439) did not claim interface 0 before use [ 235.808577][T10025] netlink: 'syz.0.1446': attribute type 4 has an invalid length. [ 235.825357][T10025] netlink: 'syz.0.1446': attribute type 4 has an invalid length. [ 236.120335][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1447'. [ 236.131252][T10027] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.170220][T10030] xt_connbytes: Forcing CT accounting to be enabled [ 236.588689][T10041] usb usb8: usbfs: process 10041 (syz.0.1452) did not claim interface 0 before use [ 236.682526][T10045] wireguard0: entered promiscuous mode [ 236.684066][T10045] wireguard0: entered allmulticast mode [ 237.189127][ C2] net_ratelimit: 4 callbacks suppressed [ 237.189147][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 238.229083][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 239.252060][T10093] tmpfs: Bad value for 'mpol' [ 239.269013][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 239.593668][T10101] netlink: 'syz.0.1468': attribute type 4 has an invalid length. [ 239.604540][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1469'. [ 239.607891][T10100] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1469'. [ 239.622830][T10101] netlink: 'syz.0.1468': attribute type 4 has an invalid length. [ 239.831782][T10100] ieee802154 phy0 wpan0: encryption failed: -22 [ 240.309185][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 240.332435][T10116] netlink: 'syz.1.1473': attribute type 27 has an invalid length. [ 240.477052][T10117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.480481][T10117] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.485088][T10117] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.169585][ T39] audit: type=1326 audit(1727727509.481:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.3.1482" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f4f579 code=0x0 [ 241.349059][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 242.100712][T10168] syz.3.1487: attempt to access beyond end of device [ 242.100712][T10168] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 242.107043][T10168] syz.3.1487: attempt to access beyond end of device [ 242.107043][T10168] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 242.116387][T10168] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 242.121185][T10168] syz.3.1487: attempt to access beyond end of device [ 242.121185][T10168] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 242.126875][T10168] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 242.131467][T10168] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 242.134541][T10168] UDF-fs: Scanning with blocksize 512 failed [ 242.140444][T10168] syz.3.1487: attempt to access beyond end of device [ 242.140444][T10168] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 242.147330][T10168] syz.3.1487: attempt to access beyond end of device [ 242.147330][T10168] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 242.152504][T10168] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 242.160255][T10168] syz.3.1487: attempt to access beyond end of device [ 242.160255][T10168] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 242.164943][T10168] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 242.168384][T10168] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 242.171854][T10168] UDF-fs: Scanning with blocksize 1024 failed [ 242.174474][T10168] syz.3.1487: attempt to access beyond end of device [ 242.174474][T10168] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 242.181425][T10168] syz.3.1487: attempt to access beyond end of device [ 242.181425][T10168] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 242.186034][T10168] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 242.191900][T10168] syz.3.1487: attempt to access beyond end of device [ 242.191900][T10168] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 242.197310][T10168] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 242.201142][T10168] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 242.204888][T10168] UDF-fs: Scanning with blocksize 2048 failed [ 242.208110][T10168] syz.3.1487: attempt to access beyond end of device [ 242.208110][T10168] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 242.218546][T10168] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 242.222200][T10168] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 242.225144][T10168] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 242.227861][T10168] UDF-fs: Scanning with blocksize 4096 failed [ 242.231757][T10168] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 242.399117][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 243.026541][T10179] usb usb8: usbfs: process 10179 (syz.1.1490) did not claim interface 0 before use [ 243.289925][T10185] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1492'. [ 243.429017][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 244.478998][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 244.627635][ T39] audit: type=1326 audit(1727727512.931:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10206 comm="syz.3.1499" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f4f579 code=0x0 [ 244.998629][T10214] random: crng reseeded on system resumption [ 245.097160][T10221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1504'. [ 245.105887][T10221] 8021q: adding VLAN 0 to HW filter on device bond3 [ 245.518991][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 245.573311][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1508'. [ 245.634585][T10245] random: crng reseeded on system resumption [ 245.773850][T10241] team0 (unregistering): Port device team_slave_0 removed [ 245.795594][T10241] team0 (unregistering): Port device team_slave_1 removed [ 245.843511][T10241] team0 (unregistering): Port device wlan1 removed [ 245.976249][T10248] fuseblk: Unknown parameter '½' [ 246.113166][T10254] usb usb8: usbfs: process 10254 (syz.3.1513) did not claim interface 0 before use [ 246.221355][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1515'. [ 246.225138][T10259] xt_hashlimit: max too large, truncated to 1048576 [ 246.227479][T10259] xt_hashlimit: overflow, try lower: 0/0 [ 246.266044][T10261] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1516'. [ 246.281147][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1517'. [ 246.347730][T10267] random: crng reseeded on system resumption [ 246.549110][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 246.557628][T10277] usb usb8: usbfs: process 10277 (syz.2.1522) did not claim interface 0 before use [ 246.655555][T10279] wireguard0: entered promiscuous mode [ 246.662921][T10279] wireguard0: entered allmulticast mode [ 247.464393][T10290] netlink: 1680 bytes leftover after parsing attributes in process `syz.2.1527'. [ 247.589035][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 248.155685][T10308] netlink: 'syz.0.1531': attribute type 4 has an invalid length. [ 248.172705][T10308] netlink: 'syz.0.1531': attribute type 4 has an invalid length. [ 248.629262][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 248.964536][T10321] overlayfs: unescaped trailing colons in lowerdir mount option. [ 249.020268][ T39] audit: type=1326 audit(1727728029.329:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10323 comm="syz.1.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 249.026374][ T39] audit: type=1326 audit(1727728029.329:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10323 comm="syz.1.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 249.036667][ T39] audit: type=1326 audit(1727728029.329:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10323 comm="syz.1.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 249.050756][ T39] audit: type=1326 audit(1727728029.329:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10323 comm="syz.1.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 249.056542][ T39] audit: type=1326 audit(1727728029.329:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10323 comm="syz.1.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 249.065531][ T39] audit: type=1326 audit(1727728029.329:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10323 comm="syz.1.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 249.089888][ T39] audit: type=1326 audit(1727728029.329:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10323 comm="syz.1.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 249.089917][ T39] audit: type=1326 audit(1727728029.329:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10323 comm="syz.1.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 249.089934][ T39] audit: type=1326 audit(1727728029.329:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10323 comm="syz.1.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 249.089950][ T39] audit: type=1326 audit(1727728029.329:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10323 comm="syz.1.1536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 249.669100][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 249.829088][ T4793] Bluetooth: hci3: command 0x0405 tx timeout [ 249.856731][T10341] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1543'. [ 250.135344][T10353] No such timeout policy "syz1" [ 250.387864][T10367] random: crng reseeded on system resumption [ 250.709082][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 251.684818][T10383] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 251.749101][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 252.799088][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 253.512299][T10413] usb usb8: usbfs: process 10413 (syz.2.1565) did not claim interface 0 before use [ 253.829076][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 254.116603][T10434] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 254.119518][T10434] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 254.155159][T10434] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 254.274946][T10441] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 254.483733][T10468] random: crng reseeded on system resumption [ 254.678742][T10477] netlink: 1680 bytes leftover after parsing attributes in process `syz.2.1582'. [ 254.869031][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 255.030243][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.032486][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.617101][T10486] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 255.772353][T10490] usb usb8: usbfs: process 10490 (syz.1.1587) did not claim interface 0 before use [ 255.863979][T10496] netlink: 'syz.1.1590': attribute type 27 has an invalid length. [ 255.909067][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 256.004612][T10497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.008528][T10497] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.014941][T10497] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.149183][ T4793] Bluetooth: hci3: command 0x0405 tx timeout [ 256.507172][T10517] usb usb8: usbfs: process 10517 (syz.1.1596) did not claim interface 0 before use [ 256.608887][T10520] kAFS: unable to lookup cell 'nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch cpuid_fault ssbd ibrs ibpb stibp ibrs_enhanced tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm avx512f avx512dq rdseed adx smap avx512ifma clflushopt clwb avx512cd sha_ni avx512bw avx512vl xsaveopt xsavec xgetbv1 xsaves arat vnmi avx512vbmi umip avx512_vbmi2 gfni vaes vpclmulqdq avx512_vnni avx512_bitalg avx512_vpopcntdq rdpid fsrm md_clear arch_capabilities [ 256.608887][T10520] vmx flags ' [ 256.752860][T10522] netlink: 'syz.1.1598': attribute type 1 has an invalid length. [ 256.755362][T10522] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1598'. [ 256.838491][T10524] netlink: 'syz.1.1599': attribute type 8 has an invalid length. [ 256.949072][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 257.784897][T10542] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1604'. [ 257.789595][T10542] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1604'. [ 257.792888][T10542] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1604'. [ 257.802166][T10544] usb usb8: usbfs: process 10544 (syz.1.1605) did not claim interface 0 before use [ 257.939005][ T1836] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 257.999057][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 258.026681][T10558] binder: 10546:10558 ioctl 4018620d 0 returned -22 [ 258.099605][ T1836] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 258.103053][ T1836] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.105498][ T1836] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.108312][ T1836] usb 7-1: config 0 interface 0 has no altsetting 0 [ 258.111452][ T1836] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.113770][ T1836] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.116559][ T1836] usb 7-1: config 0 interface 0 has no altsetting 0 [ 258.123674][ T1836] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.126008][ T1836] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.128808][ T1836] usb 7-1: config 0 interface 0 has no altsetting 0 [ 258.132768][ T1836] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.135104][ T1836] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.137947][ T1836] usb 7-1: config 0 interface 0 has no altsetting 0 [ 258.140713][ T1836] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.143067][ T1836] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.145823][ T1836] usb 7-1: config 0 interface 0 has no altsetting 0 [ 258.148425][ T1836] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.151085][ T1836] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.153978][ T1836] usb 7-1: config 0 interface 0 has no altsetting 0 [ 258.169915][ T1836] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.173134][ T1836] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.176154][ T1836] usb 7-1: config 0 interface 0 has no altsetting 0 [ 258.178860][ T1836] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.182495][ T1836] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.186618][ T1836] usb 7-1: config 0 interface 0 has no altsetting 0 [ 258.200410][ T1836] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 258.202904][ T1836] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 258.205447][ T1836] usb 7-1: Product: syz [ 258.206560][ T1836] usb 7-1: Manufacturer: syz [ 258.207771][ T1836] usb 7-1: SerialNumber: syz [ 258.230453][ T4793] Bluetooth: hci3: command 0x0405 tx timeout [ 258.234486][ T1836] usb 7-1: config 0 descriptor?? [ 258.251215][ T1836] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 258.568275][ C3] usb 7-1: yurex_control_callback - control failed: -71 [ 258.568625][ T75] usb 7-1: USB disconnect, device number 5 [ 258.574697][ T75] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 259.038981][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 259.050889][T10568] netlink: 'syz.3.1611': attribute type 4 has an invalid length. [ 259.116476][T10568] netlink: 'syz.3.1611': attribute type 4 has an invalid length. [ 259.637570][T10577] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 260.069101][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 260.309022][ T4793] Bluetooth: hci3: command 0x0405 tx timeout [ 261.020066][T10612] netlink: 'syz.3.1623': attribute type 4 has an invalid length. [ 261.046780][T10614] netlink: 'syz.3.1623': attribute type 4 has an invalid length. [ 261.109101][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 261.233420][T10619] random: crng reseeded on system resumption [ 262.114343][ T39] kauditd_printk_skb: 16 callbacks suppressed [ 262.114356][ T39] audit: type=1326 audit(1727728298.421:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.3.1628" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f4f579 code=0x0 [ 262.149056][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 262.389343][ T4793] Bluetooth: hci3: command 0x0405 tx timeout [ 263.189001][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 263.378326][T10647] program syz.1.1632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.816301][T10668] netlink: 1680 bytes leftover after parsing attributes in process `syz.3.1637'. [ 263.928413][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1639'. [ 264.229016][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 264.469088][ T5348] Bluetooth: hci3: command 0x0405 tx timeout [ 264.585466][T10686] trusted_key: encrypted_key: insufficient parameters specified [ 265.279207][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 265.357217][T10687] kexec: Could not allocate control_code_buffer [ 266.309051][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 267.027412][T10724] could not allocate digest TFM handle sm3-generic [ 267.044184][T10731] random: crng reseeded on system resumption [ 267.119413][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1654'. [ 267.146972][T10739] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.299856][T10749] netlink: 'syz.0.1662': attribute type 27 has an invalid length. [ 267.359012][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 267.403379][ T39] audit: type=1326 audit(1727728303.711:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10750 comm="syz.2.1663" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x0 [ 267.539636][T10749] debugfs: Directory 'netdev:phy9-monitor' with parent 'phy9' already present! [ 267.607326][T10758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.610030][T10758] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.618789][T10758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.348449][T10778] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1669'. [ 268.353957][T10778] netlink: 'syz.2.1669': attribute type 7 has an invalid length. [ 268.356251][T10778] netlink: 'syz.2.1669': attribute type 8 has an invalid length. [ 268.361636][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1669'. [ 268.374211][T10778] 0ªX¹¦D: entered promiscuous mode [ 268.377576][T10778] batadv_slave_1: entered promiscuous mode [ 268.381817][T10778] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 268.383703][T10778] Cannot create hsr debugfs directory [ 268.385477][T10778] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.389247][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 268.569040][ T75] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 268.691380][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1671'. [ 268.709070][ T75] usb 6-1: device descriptor read/64, error -71 [ 268.711063][T10784] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1671'. [ 268.949039][ T75] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 269.099015][ T75] usb 6-1: device descriptor read/64, error -71 [ 269.210252][ T75] usb usb6-port1: attempt power cycle [ 269.232627][T10789] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.1673'. [ 269.439071][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 269.479141][T10800] tmpfs: Bad value for 'nr_inodes' [ 269.532041][T10804] netlink: 'syz.2.1679': attribute type 7 has an invalid length. [ 269.549043][ T75] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 269.569766][ T75] usb 6-1: device descriptor read/8, error -71 [ 269.593572][T10806] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 269.809292][ T75] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 269.829411][ T75] usb 6-1: device descriptor read/8, error -71 [ 269.856951][T10815] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1684'. [ 269.870428][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1684'. [ 269.881788][T10815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1684'. [ 269.916899][T10818] tmpfs: Unknown parameter 'usrquotaÿ' [ 269.939519][ T75] usb usb6-port1: unable to enumerate USB device [ 270.469131][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 270.832997][T10826] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 271.509061][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 271.640678][T10840] netlink: 'syz.3.1692': attribute type 27 has an invalid length. [ 271.640971][T10842] netlink: 1680 bytes leftover after parsing attributes in process `syz.1.1693'. [ 271.767326][T10847] netlink: 'syz.2.1694': attribute type 4 has an invalid length. [ 271.774641][T10846] netlink: 'syz.2.1694': attribute type 4 has an invalid length. [ 271.817550][T10849] wireguard0: entered promiscuous mode [ 271.819234][T10849] wireguard0: entered allmulticast mode [ 271.844822][T10840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.849319][T10840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.085641][T10855] @: renamed from vlan0 [ 272.549006][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 273.374133][T10879] netlink: 'syz.0.1705': attribute type 10 has an invalid length. [ 273.376812][T10879] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.1705'. [ 273.471012][T10884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1707'. [ 273.488039][T10884] 8021q: adding VLAN 0 to HW filter on device bond4 [ 273.599017][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 273.685643][T10898] ip6gretap0: entered promiscuous mode [ 273.689486][T10898] batadv_slave_0: entered promiscuous mode [ 273.692487][T10898] debugfs: Directory 'hsr2' with parent 'hsr' already present! [ 273.695140][T10898] Cannot create hsr debugfs directory [ 274.149994][T10909] fuse: Unknown parameter 'ˆdò¦Å’ Õ0x0000000000000003' [ 274.212806][T10911] netlink: 1680 bytes leftover after parsing attributes in process `syz.1.1717'. [ 274.432193][T10919] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 274.441014][T10920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1721'. [ 274.451065][T10920] netlink: 'syz.1.1721': attribute type 7 has an invalid length. [ 274.453982][T10920] netlink: 'syz.1.1721': attribute type 8 has an invalid length. [ 274.457064][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1721'. [ 274.639034][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 275.637538][T10919] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 275.669292][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 276.309165][ T4793] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 276.348184][T10943] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 276.709006][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 276.773386][T10957] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 276.782919][T10957] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 277.759022][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 277.808164][T10982] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1738'. [ 277.832394][T10987] hub 6-0:1.0: USB hub found [ 277.834798][T10987] hub 6-0:1.0: 1 port detected [ 277.860128][T10987] hub 6-0:1.0: USB hub found [ 277.862224][T10987] hub 6-0:1.0: 1 port detected [ 278.789005][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 278.863576][T11015] usb usb8: usbfs: process 11015 (syz.1.1747) did not claim interface 0 before use [ 278.914824][ T39] audit: type=1326 audit(1727728315.221:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11016 comm="syz.1.1748" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x0 [ 279.026159][T11020] usb usb8: usbfs: process 11020 (syz.3.1749) did not claim interface 0 before use [ 279.037854][T11019] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 279.113573][T11024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1751'. [ 279.131722][T11024] 8021q: adding VLAN 0 to HW filter on device bond3 [ 279.191027][T11027] wireguard0: entered promiscuous mode [ 279.193183][T11027] wireguard0: entered allmulticast mode [ 279.674311][T11036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1755'. [ 279.677572][T11036] netlink: 'syz.3.1755': attribute type 7 has an invalid length. [ 279.681579][T11036] netlink: 'syz.3.1755': attribute type 8 has an invalid length. [ 279.684389][T11036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1755'. [ 279.829003][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 280.185560][T11046] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xf7403 pfn:0x4b2d0 [ 280.189326][T11046] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 280.192073][T11046] raw: 04fff00000000000 ffffea00012cb5c8 ffffea00012cb688 0000000000000000 [ 280.195242][T11046] raw: 00000000000f7403 0000000000000000 00000000ffffffff 0000000000000000 [ 280.198406][T11046] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 280.203978][T11046] page_owner tracks the page as freed [ 280.206787][T11046] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 11044, tgid 11044 (syz.3.1759), ts 280127434754, free_ts 280144641797 [ 280.214012][T11046] post_alloc_hook+0x2d1/0x350 [ 280.216359][T11046] get_page_from_freelist+0x101e/0x3070 [ 280.218801][T11046] __alloc_pages_noprof+0x223/0x25c0 [ 280.221410][T11046] alloc_pages_mpol_noprof+0x2c9/0x610 [ 280.224807][T11046] folio_alloc_mpol_noprof+0x36/0xd0 [ 280.227793][T11046] vma_alloc_folio_noprof+0xee/0x1b0 [ 280.232666][T11046] do_wp_page+0x10d1/0x4930 [ 280.236151][T11046] __handle_mm_fault+0x1a93/0x2a10 [ 280.239911][T11046] handle_mm_fault+0x3fa/0xaa0 [ 280.241794][T11046] do_user_addr_fault+0x60d/0x13f0 [ 280.245843][T11046] exc_page_fault+0x5c/0xc0 [ 280.247688][T11046] asm_exc_page_fault+0x26/0x30 [ 280.252432][T11046] page last free pid 11045 tgid 11044 stack trace: [ 280.255077][T11046] free_unref_folios+0x956/0x1310 [ 280.257071][T11046] folios_put_refs+0x551/0x750 [ 280.259240][T11046] free_pages_and_swap_cache+0x36d/0x510 [ 280.261575][T11046] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 280.264822][T11046] tlb_finish_mmu+0x168/0x7b0 [ 280.266672][T11046] exit_mmap+0x3df/0xb30 [ 280.268686][T11046] __mmput+0x12a/0x480 [ 280.272643][T11046] mmput+0x62/0x70 [ 280.274249][T11046] do_exit+0x9bf/0x2d70 [ 280.276123][T11046] do_group_exit+0xd3/0x2a0 [ 280.278180][T11046] get_signal+0x2658/0x26d0 [ 280.280829][T11046] arch_do_signal_or_restart+0x90/0x7e0 [ 280.282949][T11046] syscall_exit_to_user_mode+0x150/0x2a0 [ 280.285081][T11046] __do_fast_syscall_32+0x80/0x120 [ 280.287050][T11046] do_fast_syscall_32+0x32/0x80 [ 280.288894][T11046] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.297392][T11046] ------------[ cut here ]------------ [ 280.299504][T11046] kernel BUG at include/linux/mm.h:1444! [ 280.301989][T11046] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 280.305479][T11046] CPU: 0 UID: 0 PID: 11046 Comm: syz.0.1758 Not tainted 6.12.0-rc1-syzkaller #0 [ 280.309263][T11046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 280.312970][T11046] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 280.315377][T11046] Code: b0 8b 48 89 df e8 90 25 4b fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 e0 76 05 fd 48 c7 c6 60 c6 b0 8b 4c 89 e7 e8 71 25 4b fd 90 <0f> 0b e8 c9 76 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 280.321889][T11046] RSP: 0018:ffffc90023e16010 EFLAGS: 00010287 [ 280.323949][T11046] RAX: 0000000000027a12 RBX: 0000000000000001 RCX: ffffc90003c12000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 280.326742][T11046] RDX: 0000000000040000 RSI: ffffffff8487389f RDI: ffff88802131a884 [ 280.329528][T11046] RBP: ffffea00012cb434 R08: 0000000000000001 R09: fffffbfff2d315c7 [ 280.332354][T11046] R10: ffffffff9698ae3f R11: ffff88802b428a40 R12: ffffea00012cb400 [ 280.335076][T11046] R13: ffff888000293c00 R14: 0000000000001000 R15: 0000000000001000 [ 280.337952][T11046] FS: 0000000000000000(0000) GS:ffff88802b400000(0063) knlGS:00000000f56a5b40 [ 280.340947][T11046] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 280.343214][T11046] CR2: 00000000f7416108 CR3: 00000000686dc000 CR4: 0000000000352ef0 [ 280.345981][T11046] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 280.348619][T11046] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 280.351306][T11046] Call Trace: [ 280.352452][T11046] [ 280.353480][T11046] ? die+0x31/0x80 [ 280.354793][T11046] ? do_trap+0x232/0x430 [ 280.356325][T11046] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 280.358428][T11046] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 280.360485][T11046] ? do_error_trap+0xf4/0x230 [ 280.362139][T11046] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 280.364203][T11046] ? handle_invalid_op+0x34/0x40 [ 280.365994][T11046] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 280.368043][T11046] ? exc_invalid_op+0x2e/0x50 [ 280.369670][T11046] ? asm_exc_invalid_op+0x1a/0x20 [ 280.371431][T11046] ? __iov_iter_get_pages_alloc+0x1d0f/0x2230 [ 280.373507][T11046] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 280.375618][T11046] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 280.377759][T11046] ? __pfx_mark_lock+0x10/0x10 [ 280.379448][T11046] ? delete_node+0x207/0x8e0 [ 280.381052][T11046] iov_iter_get_pages_alloc2+0x53/0xf0 [ 280.382932][T11046] p9_get_mapped_pages.part.0.constprop.0+0x4ca/0x7d0 [ 280.385257][T11046] ? p9pdu_vwritef+0x368/0x21d0 [ 280.386980][T11046] ? __pfx_p9_get_mapped_pages.part.0.constprop.0+0x10/0x10 [ 280.389468][T11046] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 280.391237][T11046] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 280.392994][T11046] ? p9_tag_alloc+0x4cc/0x870 [ 280.394622][T11046] ? reacquire_held_locks+0x464/0x4c0 [ 280.396552][T11046] p9_virtio_zc_request+0x991/0x1460 [ 280.398484][T11046] ? p9pdu_writef+0xc4/0x100 [ 280.400249][T11046] ? __pfx_p9pdu_writef+0x10/0x10 [ 280.401987][T11046] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 280.403730][T11046] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 280.405676][T11046] ? rcu_is_watching+0x12/0xc0 [ 280.407356][T11046] ? trace_9p_protocol_dump+0x192/0x220 [ 280.409209][T11046] ? rcu_is_watching+0x12/0xc0 [ 280.410834][T11046] ? p9_client_prepare_req+0x111/0x4d0 [ 280.412686][T11046] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 280.414652][T11046] ? hlock_class+0x4e/0x130 [ 280.416270][T11046] ? mark_lock+0xb5/0xc60 [ 280.417799][T11046] p9_client_zc_rpc.constprop.0+0x29a/0x880 [ 280.419851][T11046] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 280.422043][T11046] ? __pfx_mark_lock+0x10/0x10 [ 280.423690][T11046] ? lock_acquire.part.0+0x11b/0x380 [ 280.425509][T11046] ? hlock_class+0x4e/0x130 [ 280.427086][T11046] ? __lock_acquire+0x163e/0x3ce0 [ 280.428798][T11046] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 280.430736][T11046] p9_client_read_once+0x443/0x820 [ 280.432492][T11046] ? __pfx_p9_client_read_once+0x10/0x10 [ 280.434406][T11046] ? lockdep_hardirqs_on+0x7c/0x110 [ 280.436283][T11046] p9_client_read+0x13f/0x1b0 [ 280.437914][T11046] v9fs_issue_read+0x115/0x310 [ 280.439610][T11046] ? __pfx_v9fs_issue_read+0x10/0x10 [ 280.441485][T11046] ? __local_bh_enable_ip+0xa4/0x120 [ 280.443241][T11046] netfs_read_to_pagecache+0x5c9/0x9a0 [ 280.445104][T11046] netfs_readahead+0x7fa/0xaa0 [ 280.446729][T11046] ? __pfx_netfs_readahead+0x10/0x10 [ 280.448505][T11046] read_pages+0x1a8/0xd80 [ 280.449970][T11046] ? __folio_batch_add_and_move+0x689/0xc60 [ 280.451970][T11046] ? __folio_batch_add_and_move+0x612/0xc60 [ 280.453952][T11046] ? __pfx_read_pages+0x10/0x10 [ 280.455683][T11046] ? find_held_lock+0x2d/0x110 [ 280.457339][T11046] page_cache_ra_unbounded+0x3c0/0x6c0 [ 280.459216][T11046] page_cache_ra_order+0x7d9/0xc90 [ 280.460968][T11046] page_cache_async_ra+0x5cb/0x820 [ 280.462753][T11046] filemap_get_pages+0x367/0x1be0 [ 280.464475][T11046] ? __pfx_filemap_get_pages+0x10/0x10 [ 280.466347][T11046] ? __pfx___might_resched+0x10/0x10 [ 280.468113][T11046] filemap_read+0x3a9/0xd00 [ 280.469659][T11046] ? __pfx___lock_acquire+0x10/0x10 [ 280.471412][T11046] ? __pfx_filemap_read+0x10/0x10 [ 280.473131][T11046] ? __pfx___up_read+0x10/0x10 [ 280.474752][T11046] ? irqentry_exit+0x3b/0x90 [ 280.476413][T11046] ? lockdep_hardirqs_on+0x7c/0x110 [ 280.478203][T11046] netfs_buffered_read_iter+0x117/0x190 [ 280.480117][T11046] netfs_file_read_iter+0x10f/0x190 [ 280.482020][T11046] v9fs_file_read_iter+0x9b/0x100 [ 280.483849][T11046] __kernel_read+0x3f1/0xb50 [ 280.485488][T11046] ? __pfx___kernel_read+0x10/0x10 [ 280.487259][T11046] ? kernel_fpu_begin_mask+0x168/0x270 [ 280.489226][T11046] integrity_kernel_read+0x7f/0xb0 [ 280.491154][T11046] ? __pfx_integrity_kernel_read+0x10/0x10 [ 280.493290][T11046] ? _sha256_update+0x93/0x220 [ 280.495061][T11046] ? __pfx_sha256_ni_transform+0x10/0x10 [ 280.497043][T11046] ? kasan_save_track+0x14/0x30 [ 280.498828][T11046] ima_calc_file_hash_tfm+0x2c9/0x3e0 [ 280.500787][T11046] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 280.502956][T11046] ? generic_fillattr+0x663/0x8c0 [ 280.504750][T11046] ? ima_alloc_tfm+0x21d/0x2d0 [ 280.506444][T11046] ima_calc_file_hash+0x1ba/0x490 [ 280.508323][T11046] ima_collect_measurement+0x8a7/0xa10 [ 280.510194][T11046] ? __pfx_ima_collect_measurement+0x10/0x10 [ 280.512241][T11046] ? lock_acquire.part.0+0x155/0x380 [ 280.514227][T11046] ? rcu_is_watching+0x12/0xc0 [ 280.516000][T11046] ? trace_contention_end+0xea/0x140 [ 280.517915][T11046] ? is_bad_inode+0xd/0x40 [ 280.519569][T11046] ? xattr_resolve_name+0x27b/0x3f0 [ 280.521543][T11046] ? vfs_getxattr_alloc+0xf1/0x340 [ 280.523473][T11046] ? ima_get_hash_algo+0x27d/0x410 [ 280.525349][T11046] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 280.527371][T11046] ? process_measurement+0x1271/0x2370 [ 280.529339][T11046] process_measurement+0x1271/0x2370 [ 280.531370][T11046] ? __pfx_process_measurement+0x10/0x10 [ 280.533319][T11046] ? find_held_lock+0x2d/0x110 [ 280.534962][T11046] ? v9fs_open_fid_add+0x102/0x190 [ 280.536745][T11046] ? __pfx_lock_release+0x10/0x10 [ 280.538463][T11046] ? do_raw_spin_lock+0x12d/0x2c0 [ 280.539972][T11046] ? __pfx_v9fs_file_open+0x10/0x10 [ 280.541340][T11046] ? bpf_lsm_file_open+0x9/0x10 [ 280.542627][T11046] ? inode_to_bdi+0x9e/0x160 [ 280.543794][T11046] ima_file_check+0xc1/0x110 [ 280.545019][T11046] ? __pfx_ima_file_check+0x10/0x10 [ 280.546381][T11046] ? inode_permission+0xdd/0x5f0 [ 280.547682][T11046] security_file_post_open+0x8e/0x210 [ 280.549090][T11046] path_openat+0x1419/0x2d60 [ 280.550310][T11046] ? __pfx_path_openat+0x10/0x10 [ 280.551605][T11046] ? __pfx___lock_acquire+0x10/0x10 [ 280.552970][T11046] do_filp_open+0x1dc/0x430 [ 280.554166][T11046] ? __pfx_do_filp_open+0x10/0x10 [ 280.555481][T11046] ? find_held_lock+0x2d/0x110 [ 280.556751][T11046] ? _raw_spin_unlock+0x28/0x50 [ 280.558109][T11046] ? alloc_fd+0x2d7/0x6c0 [ 280.559290][T11046] do_sys_openat2+0x17a/0x1e0 [ 280.560606][T11046] ? __pfx_do_sys_openat2+0x10/0x10 [ 280.561912][T11046] __ia32_compat_sys_openat+0x16e/0x210 [ 280.563405][T11046] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 280.565452][T11046] __do_fast_syscall_32+0x73/0x120 [ 280.567222][T11046] do_fast_syscall_32+0x32/0x80 [ 280.568872][T11046] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.570897][T11046] RIP: 0023:0xf7f3f579 [ 280.571990][T11046] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 280.577358][T11046] RSP: 002b:00000000f56a556c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 280.579525][T11046] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000280 [ 280.581577][T11046] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000 [ 280.583623][T11046] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 280.585722][T11046] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 280.587780][T11046] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 280.589844][T11046] [ 280.590658][T11046] Modules linked in: [ 280.591877][T11046] ---[ end trace 0000000000000000 ]--- [ 280.639393][T11046] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 280.641191][T11046] Code: b0 8b 48 89 df e8 90 25 4b fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 e0 76 05 fd 48 c7 c6 60 c6 b0 8b 4c 89 e7 e8 71 25 4b fd 90 <0f> 0b e8 c9 76 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 280.646221][T11046] RSP: 0018:ffffc90023e16010 EFLAGS: 00010287 [ 280.647808][T11046] RAX: 0000000000027a12 RBX: 0000000000000001 RCX: ffffc90003c12000 [ 280.650175][T11046] RDX: 0000000000040000 RSI: ffffffff8487389f RDI: ffff88802131a884 [ 280.652246][T11046] RBP: ffffea00012cb434 R08: 0000000000000001 R09: fffffbfff2d315c7 [ 280.654314][T11046] R10: ffffffff9698ae3f R11: ffff88802b428a40 R12: ffffea00012cb400 [ 280.656378][T11046] R13: ffff888000293c00 R14: 0000000000001000 R15: 0000000000001000 [ 280.658438][T11046] FS: 0000000000000000(0000) GS:ffff88802b700000(0063) knlGS:00000000f56a5b40 [ 280.660857][T11046] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 280.662609][T11046] CR2: 0000000020fd4000 CR3: 00000000686dc000 CR4: 0000000000352ef0 [ 280.664677][T11046] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 280.666744][T11046] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 280.668793][T11046] Kernel panic - not syncing: Fatal exception [ 280.670939][T11046] Kernel Offset: disabled [ 280.672073][T11046] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:02:20 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85035855 RDI=ffffffff9a63a260 RBP=ffffffff9a63a220 RSP=ffffc90023e15978 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=0000000000000020 R14=ffffffff850357f0 R15=0000000000000000 RIP=ffffffff8503587f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7416108 CR3=00000000686dc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000005 RCX=ffffffff848ee19e RDX=ffff888022c00000 RSI=0000000000000008 RDI=0000000000000001 RBP=ffffc900030cf538 RSP=ffffc900030cf398 R8 =0000000000000001 R9 =0000000000000008 R10=0000000000000008 R11=00000000000a2012 R12=0000000000000008 R13=ffffc900030cf478 R14=ffff88805d147758 R15=ffffc900030cf540 RIP=ffffffff818caf70 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f832b696d00 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055c1af9a3000 CR3=0000000044ddc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=ac977cacac977cac ac977cacac977cac ac977cacac977cac ac977cacac977cac ac977cacac977cac ac977cacac977cac ac977cacac977cac ac977cacac977cac ZMM22=6f13725f6f13725f 6f13725f6f13725f 6f13725f6f13725f 6f13725f6f13725f 6f13725f6f13725f 6f13725f6f13725f 6f13725f6f13725f 6f13725f6f13725f ZMM23=dcd5ba16dcd5ba16 dcd5ba16dcd5ba16 dcd5ba16dcd5ba16 dcd5ba16dcd5ba16 dcd5ba16dcd5ba16 dcd5ba16dcd5ba16 dcd5ba16dcd5ba16 dcd5ba16dcd5ba16 ZMM24=4326eb434326eb43 4326eb434326eb43 4326eb434326eb43 4326eb434326eb43 4326eb434326eb43 4326eb434326eb43 4326eb434326eb43 4326eb434326eb43 ZMM25=93811e6493811e64 93811e6493811e64 93811e6493811e64 93811e6493811e64 93811e6493811e64 93811e6493811e64 93811e6493811e64 93811e6493811e64 ZMM26=364f88fa364f88fa 364f88fa364f88fa 364f88fa364f88fa 364f88fa364f88fa 364f88fa364f88fa 364f88fa364f88fa 364f88fa364f88fa 364f88fa364f88fa ZMM27=021275cc021275cc 021275cc021275cc 021275cc021275cc 021275cc021275cc 021275cc021275cc 021275cc021275cc 021275cc021275cc 021275cc021275cc ZMM28=000001b0000001af 000001ae000001ad 000001ac000001ab 000001aa000001a9 000001a8000001a7 000001a6000001a5 000001a4000001a3 000001a2000001a1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9013000090130000 9013000090130000 9013000090130000 9013000090130000 9013000090130000 9013000090130000 9013000090130000 9013000090130000 info registers vcpu 2 CPU#2 EAX=00000000 EBX=00000000 ECX=f7f3f579 EDX=ff938b94 ESI=ff938b8c EDI=ff938b94 EBP=00000000 ESP=ff938b64 EIP=f7f3f57a EFL=00000293 [--S-A-C] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 57b8a440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 00091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f52a6e90 CR3=00000000434e2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000013800000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000040000 RBX=ffff88802b4467c0 RCX=ffffc90003611000 RDX=0000000000040000 RSI=ffffffff81809cc6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9002853f2c0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed1005688cf9 R13=0000000000000001 R14=ffff88802b4467c8 R15=ffff88802b740100 RIP=ffffffff81809cc8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020fd4000 CR3=00000000686dc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000