last executing test programs: 7.295750693s ago: executing program 3 (id=1608): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc}) syz_emit_ethernet(0x52, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd604dd308001c0600fc010000000800000000000000000001fe8000000000000000000000000000aa4e234001", @ANYRES32=0x41424344, @ANYBLOB], 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 6.343847634s ago: executing program 0 (id=1612): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffd, 0x1]}, 0x8) read(r4, &(0x7f0000000cc0)=""/384, 0x180) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x20) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0xfffffffc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000845, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x3) socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) close_range(r2, 0xffffffffffffffff, 0x0) 6.22582159s ago: executing program 3 (id=1615): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x20, 0x4004, @fd=r1, 0x6, 0x0, 0x0, 0x9, 0x1, {0x2}}) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 5.964548222s ago: executing program 0 (id=1616): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0xec) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt(r0, 0x10d, 0xe, &(0x7f00001c9fff)="03", 0x1) 5.18550119s ago: executing program 3 (id=1618): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r3, &(0x7f0000000740), 0xffffffffffffffbc) fcntl$addseals(r3, 0x409, 0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r5) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4458c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_rxfh={0x46, 0xa, 0x10001, 0x7fffffff, 0x6, "2fd397", 0xfffffffb, [0xd, 0x6, 0x5, 0x7, 0x8, 0xbfa, 0xa1d7, 0x4, 0xfffffff8]}}) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x50, 0x1, 0x4, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0xe}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9}, @NFULA_CFG_MODE={0xa}]}, 0x50}}, 0x4000000) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 4.781727568s ago: executing program 3 (id=1620): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_io_uring_setup(0x7540, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000200)=0x0) r5 = syz_io_uring_setup(0x34ef, &(0x7f0000000400)={0x0, 0x0, 0x1}, &(0x7f00000003c0)=0x0, &(0x7f0000001480)) syz_io_uring_submit(r6, r4, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r5, 0x0, 0x0}) io_uring_enter(r3, 0x2003, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x1, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, 0x0, 0x0, 0x0) 4.438620161s ago: executing program 2 (id=1621): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setgroups(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000020000000000000000000000000000782c2958f0b1c8b05658768ce9d0dd695757d8b6bc4b94248ebb6df26ff6ca8718579e810f4ed2ad7a45f9c12faa78b24594f879"]) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554", 0x1e) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0xae4d, 0x0, 0x0, 0x3], [0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x400, 0x0, 0xed0, 0x4000000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) 3.795684503s ago: executing program 3 (id=1624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x11, 0x1, 0x0, "8eb8a828e93b07f1dd06da7a41bfeac48048beb159fbba176fb1de26098c68d9"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x0, 0x0}) fsopen(&(0x7f0000000040)='afs\x00', 0x0) mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 3.400034221s ago: executing program 2 (id=1626): ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)=0x401) socket(0x25, 0xa, 0x10000000000002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000004c0)={r1, @in={{0x2, 0xfffe, @empty}}, 0x6, 0x7f7e}, 0x90) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) dup(0xffffffffffffffff) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r4, 0x20000005) connect$inet6(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3.362848239s ago: executing program 2 (id=1627): openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x189001, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$tipc(0x1e, 0x2, 0x0) r1 = dup(r0) socket$inet6_udp(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4, @remote, 0xa}, 0x20) r2 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f00000000c0)=[{r2, 0x100}], 0x1, 0xf41) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_uring_enter(r1, 0x24be, 0x950, 0x20, &(0x7f0000000080)={[0x4]}, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.28003952s ago: executing program 2 (id=1628): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x2005}, 0x0) 3.219919843s ago: executing program 2 (id=1629): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x33}, {0x6, 0x0, 0x8, 0x0, 0x40000000, 0x0, 0x3, 0xf}, {0x0, 0x0, 0x1, 0x40000000000004}, 0x2002, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20000000, 0x2b}, 0xa, @in=@rand_addr=0x64010101, 0x3509, 0x4, 0x2, 0xb7}}, 0xe4) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 2.849265603s ago: executing program 3 (id=1631): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7b6e, 0x0, 0xc, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x6, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x22, 0x0, 0x0, @empty}}}}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) lchown(&(0x7f00000000c0)='.\x00', 0x0, 0xee00) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) setresuid(0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) socket$inet(0x2, 0x3, 0x1) fsync(0xffffffffffffffff) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x20, 0x458, 0x500f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x62, 0x50, 0x4, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0xe39}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb, 0x4, 0xb0}}}}}]}}]}}, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.846816996s ago: executing program 0 (id=1632): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0) r3 = socket(0x200000100000011, 0x3, 0x3) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f00000002c0)={'wg0\x00', {0x2, 0x4e24, @broadcast}}) clock_gettime(0x2, &(0x7f0000000040)) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805c}, 0x4000000) 2.089948925s ago: executing program 1 (id=1635): r0 = io_uring_setup(0x6281, &(0x7f0000000080)={0x0, 0x0, 0x2, 0xfffffffc, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141381) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/48, 0x30, 0x0, &(0x7f0000000300)=""/58, 0x3a}, &(0x7f0000000380)=0x40) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$SIOCSIFHWADDR(r3, 0x4004743c, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000007a000000b7000000000000009500000000009400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x9, 0x200}}, './file0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'geneve1\x00', 0x100}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) 1.889723161s ago: executing program 0 (id=1636): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc}) syz_emit_ethernet(0x52, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd604dd308001c0600fc010000000800000000000000000001fe8000000000000000000000000000aa4e234001", @ANYRES32=0x41424344, @ANYBLOB], 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 1.480077444s ago: executing program 1 (id=1637): r0 = socket(0x8000000010, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x118, &(0x7f0000000100)={0x0, 0x2, 0x10, 0xfffffffc, 0x3a6}, &(0x7f0000000000), 0x0) r4 = socket(0x10, 0x80003, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 984.674147ms ago: executing program 0 (id=1638): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000000)={0x2005, 0x0, 0xffffffffffffff70}, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}]) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) get_robust_list(r3, &(0x7f0000000580)=&(0x7f0000000540)={&(0x7f0000000480)={&(0x7f0000000440)}, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)}}, &(0x7f00000005c0)=0xc) 341.716325ms ago: executing program 1 (id=1639): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, 0x0, &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) pipe(&(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0xea37, 0x0, 0x0, 0x0) 259.884822ms ago: executing program 1 (id=1641): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=""/53}, {&(0x7f0000000240)=""/8}, {&(0x7f00000004c0)=""/191}, {&(0x7f0000000800)=""/124}, {&(0x7f00000007c0)=""/51}, {&(0x7f0000000600)=""/179}, {&(0x7f00000006c0)=""/67}, {&(0x7f0000000740)=""/45}]}}, {{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000340), 0x1, &(0x7f0000000380)=""/78, 0x4e}, 0x3}], 0x2c, 0x36000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="a78700000000000000000b"], 0x14}}, 0x0) 149.975653ms ago: executing program 2 (id=1642): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc}) syz_emit_ethernet(0x52, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd604dd308001c0600fc010000000800000000000000000001fe8000000000000000000000000000aa4e234001", @ANYRES32=0x41424344, @ANYBLOB], 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 59.248988ms ago: executing program 0 (id=1643): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=""/53}, {&(0x7f0000000240)=""/8}, {&(0x7f00000004c0)=""/191}, {&(0x7f0000000800)=""/124}, {&(0x7f00000007c0)=""/51}, {&(0x7f0000000600)=""/179}, {&(0x7f00000006c0)=""/67}, {&(0x7f0000000740)=""/45}]}}, {{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000340), 0x1, &(0x7f0000000380)=""/78, 0x4e}, 0x3}], 0x2c, 0x36000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="a78700000000000000000b"], 0x14}}, 0x0) 0s ago: executing program 1 (id=1651): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000000)={0x2005, 0x0, 0xffffffffffffff70}, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}]) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) get_robust_list(r3, &(0x7f0000000580)=&(0x7f0000000540)={&(0x7f0000000480)={&(0x7f0000000440)}, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)}}, &(0x7f00000005c0)=0xc) kernel console output (not intermixed with test programs): g VLANs will be blocked as long as it is part of bond. [ 116.078036][ T39] audit: type=1804 audit(1739405058.761:8): pid=7534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.428" name="/newroot/98/file1" dev="fuse" ino=1 res=1 errno=0 [ 116.088372][ T39] audit: type=1800 audit(1739405058.761:9): pid=7534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.428" name="/" dev="fuse" ino=1 res=0 errno=0 [ 116.538697][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'. [ 116.547698][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'. [ 116.945636][ T7547] cgroup: fork rejected by pids controller in /syz1 [ 117.173855][ T7586] 7 speed is unknown, defaulting to 1000 [ 119.719870][ T39] audit: type=1326 audit(1739405062.421:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7619 comm="syz.0.445" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x0 [ 120.079861][ T7631] netlink: 'syz.3.448': attribute type 39 has an invalid length. [ 120.085077][ T7631] veth0_macvtap: left promiscuous mode [ 120.349345][ T5986] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 120.510760][ T5986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 120.517097][ T5986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 120.519953][ T5986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 120.524694][ T5986] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 120.527837][ T5986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.530281][ T5986] usb 6-1: Product: syz [ 120.531773][ T5986] usb 6-1: Manufacturer: syz [ 120.533230][ T5986] usb 6-1: SerialNumber: syz [ 120.536747][ T5986] usb 6-1: config 0 descriptor?? [ 120.764449][ T5986] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 120.964250][ T5986] usb 6-1: USB disconnect, device number 2 [ 122.788109][ T3223] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 122.949502][ T3223] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.953625][ T3223] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.064956][ T7687] 7 speed is unknown, defaulting to 1000 [ 123.255603][ T3223] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.261065][ T3223] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.264781][ T3223] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.271290][ T3223] usb 6-1: config 0 descriptor?? [ 123.483561][ T7690] 7 speed is unknown, defaulting to 1000 [ 123.690175][ T3223] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 123.699927][ T3223] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 125.012689][ C0] plantronics 0003:047F:FFFF.0006: usb_submit_urb(ctrl) failed: -1 [ 125.156682][ T72] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 125.297144][ T72] usb 6-1: device descriptor read/64, error -32 [ 125.556659][ T72] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 125.696731][ T72] usb 6-1: device descriptor read/64, error -32 [ 125.946594][ T72] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 125.966804][ T72] usb 6-1: device descriptor read/8, error -32 [ 127.038457][ T5986] usb 6-1: USB disconnect, device number 3 [ 129.661121][ T7815] netlink: 'syz.2.485': attribute type 9 has an invalid length. [ 129.909673][ T7825] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.410473][ T7843] random: crng reseeded on system resumption [ 131.480546][ T7843] 7 speed is unknown, defaulting to 1000 [ 131.833731][ T7851] tipc: Started in network mode [ 131.835661][ T7851] tipc: Node identity 7f000001, cluster identity 4711 [ 131.839216][ T7851] tipc: Enabled bearer , priority 10 [ 132.439831][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.848273][ T72] tipc: Node number set to 2130706433 [ 134.335873][ T7881] netlink: 'syz.3.502': attribute type 27 has an invalid length. [ 134.397826][ T7881] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.400211][ T7881] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.510155][ T7881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.525926][ T7881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.625337][ T7881] batman_adv: batadv0: Interface deactivated: geneve2 [ 134.631833][ T7881] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.635284][ T7881] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.638830][ T7881] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.642160][ T7881] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.646195][ T7881] geneve2: left promiscuous mode [ 134.648694][ T7881] geneve2: left allmulticast mode [ 134.706259][ T7882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.708885][ T7882] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.717506][ T7882] net_ratelimit: 5 callbacks suppressed [ 134.717512][ T7882] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.992995][ T7908] netlink: 80 bytes leftover after parsing attributes in process `syz.2.508'. [ 136.109370][ T65] Bluetooth: hci3: command 0x0405 tx timeout [ 136.464705][ T7916] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.504530][ T7917] netlink: 'syz.3.509': attribute type 9 has an invalid length. [ 139.323617][ T5946] Bluetooth: hci3: unexpected event for opcode 0x080d [ 139.807981][ T7955] tipc: Resetting bearer [ 139.833761][ T72] 7 speed is unknown, defaulting to 1000 [ 139.837573][ T72] 7 speed is unknown, defaulting to 1000 [ 140.077305][ T7966] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.223994][ T7981] Cannot find del_set index 320 as target [ 141.285420][ T7986] netlink: 'syz.1.527': attribute type 9 has an invalid length. [ 141.735306][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'. [ 142.104141][ T8012] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.489301][ T8019] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.489799][ T8018] vlan3: entered promiscuous mode [ 142.493561][ T8018] vlan3: entered allmulticast mode [ 142.495239][ T8018] hsr_slave_1: entered allmulticast mode [ 142.568212][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.538'. [ 142.691560][ T8020] hsr_slave_1 (unregistering): left allmulticast mode [ 142.714550][ T8020] hsr_slave_1 (unregistering): left promiscuous mode [ 143.388442][ T5946] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 143.391592][ T5946] Bluetooth: hci3: Injecting HCI hardware error event [ 143.395932][ T5946] Bluetooth: hci3: hardware error 0x00 [ 144.802222][ T8060] xt_CT: You must specify a L4 protocol and not use inversions on it [ 145.466653][ T5946] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 146.381575][ T8082] 7 speed is unknown, defaulting to 1000 [ 146.562514][ T39] audit: type=1326 audit(1739405089.251:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.0.554" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7fc00000 [ 146.715735][ T5798] libceph: connect (1)[c::]:6789 error -101 [ 146.717630][ T5798] libceph: mon0 (1)[c::]:6789 connect error [ 146.834822][ T8085] 7 speed is unknown, defaulting to 1000 [ 146.894196][ T8092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.551'. [ 146.907905][ T8087] ceph: No mds server is up or the cluster is laggy [ 148.378240][ T8114] sctp: [Deprecated]: syz.0.562 (pid 8114) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.378240][ T8114] Use struct sctp_sack_info instead [ 148.659768][ T5798] hid-generic 0000:0003:0000.0007: unknown main item tag 0x0 [ 148.662128][ T5798] hid-generic 0000:0003:0000.0007: unknown main item tag 0x0 [ 148.672564][ T5798] hid-generic 0000:0003:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz1 [ 149.828326][ T8135] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.362063][ T8149] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.436645][ T8151] 7 speed is unknown, defaulting to 1000 [ 150.531196][ T8153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.568'. [ 151.065295][ T8157] Cannot find del_set index 320 as target [ 152.590709][ T8182] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.698252][ T8193] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.731637][ T8194] netlink: 80 bytes leftover after parsing attributes in process `syz.3.577'. [ 155.338472][ T8217] netlink: 36 bytes leftover after parsing attributes in process `syz.0.588'. [ 155.341626][ T8217] netlink: 16 bytes leftover after parsing attributes in process `syz.0.588'. [ 155.344463][ T8217] netlink: 36 bytes leftover after parsing attributes in process `syz.0.588'. [ 155.347882][ T8217] netlink: 36 bytes leftover after parsing attributes in process `syz.0.588'. [ 155.762581][ T8219] 7 speed is unknown, defaulting to 1000 [ 155.843736][ T8223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.584'. [ 155.938883][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.587'. [ 157.171224][ T8251] 7 speed is unknown, defaulting to 1000 [ 159.184374][ T8290] ISOFS: Unable to identify CD-ROM format. [ 159.548929][ T8304] netlink: 'syz.3.609': attribute type 10 has an invalid length. [ 159.555535][ T8304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.561102][ T8304] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 160.742387][ T8330] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.923073][ T8351] netlink: 80 bytes leftover after parsing attributes in process `syz.0.621'. [ 162.729573][ T8360] netlink: 'syz.2.625': attribute type 10 has an invalid length. [ 162.737650][ T8360] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 163.050923][ T8372] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.803573][ T8384] 9pnet_virtio: no channels available for device syz [ 164.188952][ T8397] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.538035][ T8402] random: crng reseeded on system resumption [ 165.029506][ T8413] bond0: (slave batadv0): Releasing backup interface [ 165.039546][ T8413] bridge_slave_0: left allmulticast mode [ 165.041522][ T8413] bridge_slave_0: left promiscuous mode [ 165.043600][ T8413] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.051869][ T8413] bridge_slave_1: left allmulticast mode [ 165.054250][ T8413] bridge_slave_1: left promiscuous mode [ 165.056082][ T8413] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.064806][ T8413] bond0: (slave bond_slave_0): Releasing backup interface [ 165.068504][ T8413] bond0: (slave bond_slave_1): Releasing backup interface [ 165.076280][ T8413] team0: Port device team_slave_0 removed [ 165.084043][ T8413] team0: Port device team_slave_1 removed [ 165.086111][ T8413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.090606][ T8413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.093862][ T8413] batman_adv: batadv0: Removing interface: geneve2 [ 165.097364][ T8414] batman_adv: batadv0: Adding interface: dummy0 [ 165.099933][ T8414] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.110787][ T8414] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 165.331240][ T8418] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.607276][ T8431] netlink: 80 bytes leftover after parsing attributes in process `syz.2.644'. [ 165.835355][ T8435] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.724889][ T8442] 7 speed is unknown, defaulting to 1000 [ 166.737943][ T8444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.646'. [ 167.672114][ T8449] netlink: 48 bytes leftover after parsing attributes in process `syz.1.648'. [ 167.779520][ T8453] netlink: 80 bytes leftover after parsing attributes in process `syz.2.651'. [ 169.413687][ T8462] random: crng reseeded on system resumption [ 170.361671][ T5946] Bluetooth: hci1: command 0x0406 tx timeout [ 170.363470][ T5958] Bluetooth: hci2: command 0x0406 tx timeout [ 170.528166][ T8474] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.597886][ T8476] netlink: 'syz.1.657': attribute type 10 has an invalid length. [ 170.601404][ T8476] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 171.788768][ T8503] netlink: 80 bytes leftover after parsing attributes in process `syz.1.664'. [ 171.843544][ T8504] 9pnet_fd: Insufficient options for proto=fd [ 172.204167][ T8511] 7 speed is unknown, defaulting to 1000 [ 172.327799][ T8515] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.912367][ T8524] ISOFS: Unable to identify CD-ROM format. [ 173.551546][ T8541] netlink: 80 bytes leftover after parsing attributes in process `syz.2.677'. [ 173.659644][ T8545] netlink: 80 bytes leftover after parsing attributes in process `syz.1.678'. [ 174.001461][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.680'. [ 174.168356][ T8552] netlink: 'syz.3.681': attribute type 10 has an invalid length. [ 174.173602][ T8552] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 174.353704][ T8556] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.522629][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.684'. [ 174.526036][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.684'. [ 175.355507][ T8568] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 175.536764][ T8579] team0: No ports can be present during mode change [ 175.616918][ T8579] vlan0: entered promiscuous mode [ 175.886538][ T8582] 7 speed is unknown, defaulting to 1000 [ 176.567953][ T8590] netlink: 80 bytes leftover after parsing attributes in process `syz.2.692'. [ 176.756338][ T8599] netlink: 80 bytes leftover after parsing attributes in process `syz.1.693'. [ 176.774515][ T8600] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.949522][ T8603] netlink: 137456 bytes leftover after parsing attributes in process `syz.3.695'. [ 176.953387][ T8603] netlink: zone id is out of range [ 176.966579][ T8603] netlink: zone id is out of range [ 176.968103][ T8603] netlink: zone id is out of range [ 176.969545][ T8603] netlink: zone id is out of range [ 176.971443][ T8603] netlink: zone id is out of range [ 176.973417][ T8603] netlink: zone id is out of range [ 176.975442][ T8603] netlink: zone id is out of range [ 176.986764][ T8603] netlink: zone id is out of range [ 176.996693][ T8603] netlink: zone id is out of range [ 176.998525][ T8603] netlink: zone id is out of range [ 177.008583][ T8603] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 177.011051][ T8603] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 177.848336][ T8621] ptrace attach of "/syz-executor exec"[5955] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x0 [ 178.614809][ T8617] 7 speed is unknown, defaulting to 1000 [ 178.770678][ T8632] netlink: 80 bytes leftover after parsing attributes in process `syz.2.704'. [ 178.861791][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 179.014268][ T8643] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.031064][ T8642] netlink: 80 bytes leftover after parsing attributes in process `syz.1.706'. [ 179.060488][ T8644] netlink: 80 bytes leftover after parsing attributes in process `syz.3.707'. [ 180.065840][ T8659] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.178586][ T8660] ISOFS: Unable to identify CD-ROM format. [ 180.836318][ T8664] netlink: 'syz.0.712': attribute type 10 has an invalid length. [ 180.842630][ T8664] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 180.984104][ T8675] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.295123][ T8681] netlink: 80 bytes leftover after parsing attributes in process `syz.0.717'. [ 181.804405][ T8677] can0: slcan on pts0. [ 181.877913][ T8677] can0 (unregistered): slcan off pts0. [ 181.930929][ T8689] netlink: 80 bytes leftover after parsing attributes in process `syz.3.721'. [ 181.937165][ T8688] netlink: 80 bytes leftover after parsing attributes in process `syz.2.718'. [ 182.318053][ T8695] random: crng reseeded on system resumption [ 182.386444][ T8695] 7 speed is unknown, defaulting to 1000 [ 183.031845][ T8701] 9pnet_fd: Insufficient options for proto=fd [ 183.154953][ T8704] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.755658][ T8713] overlayfs: failed to clone upperpath [ 183.804711][ T8714] ISOFS: Unable to identify CD-ROM format. [ 184.581690][ T8727] team0: No ports can be present during mode change [ 184.585411][ T8727] vlan0: entered promiscuous mode [ 184.634496][ T8728] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.785975][ T8732] netlink: 80 bytes leftover after parsing attributes in process `syz.2.731'. [ 185.051308][ T8734] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 185.053798][ T8734] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 185.066140][ T8734] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 185.073405][ T8734] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 185.075897][ T8734] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 185.209384][ T8745] bond0: (slave bond_slave_0): Releasing backup interface [ 185.215130][ T8745] bond0: (slave bond_slave_1): Releasing backup interface [ 185.225044][ T8745] team0: Port device team_slave_0 removed [ 185.227458][ T8745] team0: Port device team_slave_1 removed [ 185.229279][ T8745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.231822][ T8745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.234805][ T8745] bond0: (slave wlan1): Releasing backup interface [ 185.266031][ T8745] batman_adv: batadv0: Adding interface: dummy0 [ 185.267935][ T8745] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.274755][ T8745] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 185.331520][ T8747] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.915531][ T8777] 7 speed is unknown, defaulting to 1000 [ 187.066685][ T5954] Bluetooth: hci1: command 0x0406 tx timeout [ 187.146664][ T5954] Bluetooth: hci2: command 0x0406 tx timeout [ 187.295804][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'. [ 187.513566][ T8783] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.719065][ T8794] netlink: 80 bytes leftover after parsing attributes in process `syz.2.752'. [ 187.815314][ T8795] input: syz0 as /devices/virtual/input/input6 [ 187.826647][ T5986] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 187.979440][ T5986] usb 8-1: Using ep0 maxpacket: 32 [ 187.985969][ T5986] usb 8-1: config 0 has no interfaces? [ 187.988307][ T5986] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 187.991517][ T5986] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.012478][ T5986] usb 8-1: config 0 descriptor?? [ 188.273271][ T8789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.277134][ T8789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.314843][ T25] usb 8-1: USB disconnect, device number 6 [ 188.998511][ T8816] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 189.129808][ T8819] batman_adv: batadv0: Removing interface: dummy0 [ 189.143098][ T8819] team0: Mode changed to "activebackup" [ 189.146654][ T5954] Bluetooth: hci1: command 0x0406 tx timeout [ 189.150756][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 189.234074][ T5954] Bluetooth: hci2: command 0x0406 tx timeout [ 189.535980][ T8822] batman_adv: batadv0: Adding interface: dummy0 [ 189.537931][ T8822] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.546354][ T8822] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 189.782090][ T8826] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.206710][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 190.266586][ T5985] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 190.366523][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 190.373387][ T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 190.376250][ T9] usb 6-1: config 0 has no interface number 0 [ 190.378455][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 190.381917][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 190.385534][ T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 190.389019][ T9] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 190.393085][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 190.395843][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.408015][ T9] usb 6-1: config 0 descriptor?? [ 190.416061][ T9] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 190.437216][ T5985] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 190.442001][ T5985] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.451633][ T5985] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.455137][ T5985] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.461148][ T5985] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.464520][ T5985] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.468010][ T5985] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.473008][ T5985] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.475529][ T5985] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.479610][ T5985] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.487514][ T5985] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.490447][ T5985] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.494128][ T5985] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.499653][ T5985] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.504046][ T5985] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.507670][ T5985] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.511179][ T5985] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.514122][ T5985] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.517351][ T5985] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.521166][ T5985] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.524227][ T5985] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.527394][ T5985] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.531102][ T5985] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.535060][ T5985] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.536831][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'. [ 190.539418][ T5985] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.548191][ T8840] netlink: 'syz.2.768': attribute type 10 has an invalid length. [ 190.552744][ T5985] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 190.553959][ T8840] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 190.556886][ T5985] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 190.563469][ T5985] usb 5-1: Product: syz [ 190.565367][ T5985] usb 5-1: Manufacturer: syz [ 190.567613][ T5985] usb 5-1: SerialNumber: syz [ 190.567823][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'. [ 190.572936][ T8840] bridge_slave_1: left allmulticast mode [ 190.574739][ T5985] usb 5-1: config 0 descriptor?? [ 190.575107][ T8840] bridge_slave_1: left promiscuous mode [ 190.581634][ T8840] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.584843][ T8840] bridge_slave_0: left allmulticast mode [ 190.587713][ T8840] bridge_slave_0: left promiscuous mode [ 190.589950][ T8840] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.592425][ T5985] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 [ 190.609943][ T8840] bond0: (slave bridge0): Releasing backup interface [ 191.226717][ T5954] Bluetooth: hci1: command 0x0406 tx timeout [ 192.931972][ T5986] usb 5-1: USB disconnect, device number 4 [ 192.935099][ T5986] yurex 5-1:0.0: USB YUREX #1 now disconnected [ 192.956622][ T58] usb 6-1: USB disconnect, device number 4 [ 192.961728][ T58] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 193.269523][ T8862] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 193.868259][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.106135][ T8872] 7 speed is unknown, defaulting to 1000 [ 194.261967][ T8877] 7 speed is unknown, defaulting to 1000 [ 194.648987][ T8880] ISOFS: Unable to identify CD-ROM format. [ 196.746159][ T8910] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 197.302137][ T58] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 197.728432][ T58] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.731576][ T58] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 197.734217][ T58] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 197.736940][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.741721][ T58] usb 8-1: config 0 descriptor?? [ 197.747002][ T58] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 197.749407][ T58] dvb-usb: bulk message failed: -22 (3/0) [ 197.759831][ T58] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 197.763610][ T58] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 197.768754][ T58] usb 8-1: media controller created [ 197.774130][ T58] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.787519][ T58] dvb-usb: bulk message failed: -22 (6/0) [ 197.790602][ T58] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 197.797965][ T58] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input7 [ 197.813119][ T58] dvb-usb: schedule remote query interval to 150 msecs. [ 197.818541][ T58] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 198.151552][ T58] dvb-usb: bulk message failed: -22 (1/0) [ 198.153538][ T58] dvb-usb: error while querying for an remote control event. [ 198.268250][ T9] usb 8-1: USB disconnect, device number 7 [ 198.301832][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 199.368652][ T8967] 7 speed is unknown, defaulting to 1000 [ 199.384301][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 199.538189][ T9] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 199.545192][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 199.550412][ T9] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 199.554015][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.560901][ T9] usb 8-1: Product: syz [ 199.562729][ T9] usb 8-1: Manufacturer: syz [ 199.564580][ T9] usb 8-1: SerialNumber: syz [ 199.620871][ T9] usb 8-1: config 0 descriptor?? [ 199.632780][ T9] usb 8-1: selecting invalid altsetting 0 [ 199.832231][ T5986] usb 8-1: USB disconnect, device number 8 [ 199.840637][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 199.850115][ T8953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.799'. [ 199.868706][ T8953] ip6gretap0: entered promiscuous mode [ 199.880436][ T39] audit: type=1326 audit(1739405142.571:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="syz.3.799" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x0 [ 201.307101][ T8993] ptrace attach of "/syz-executor exec"[5947] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x0 [ 201.398417][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'. [ 201.448301][ T8995] macvtap1: entered promiscuous mode [ 201.450212][ T8995] bond0: entered promiscuous mode [ 201.451873][ T8995] bond_slave_0: entered promiscuous mode [ 201.453867][ T8995] bond_slave_1: entered promiscuous mode [ 201.456133][ T8995] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 201.469598][ T8995] macvtap1: entered allmulticast mode [ 201.471135][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'. [ 201.471342][ T8995] bond0: entered allmulticast mode [ 201.476623][ T8995] bond_slave_0: entered allmulticast mode [ 201.479639][ T8995] bond_slave_1: entered allmulticast mode [ 201.484300][ T8995] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 201.495331][ T8995] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 201.508662][ T8997] bond0: left allmulticast mode [ 201.510116][ T8997] bond_slave_0: left allmulticast mode [ 201.511592][ T8997] bond_slave_1: left allmulticast mode [ 201.513075][ T8997] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 201.514919][ T8997] bond0: left promiscuous mode [ 201.516247][ T8997] bond_slave_0: left promiscuous mode [ 201.519313][ T8997] bond_slave_1: left promiscuous mode [ 201.520841][ T8997] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 202.265957][ T9004] kvm: pic: level sensitive irq not supported [ 202.267907][ T9004] kvm: pic: level sensitive irq not supported [ 202.275867][ T9004] kvm: pic: non byte write [ 202.523495][ T9022] netlink: 80 bytes leftover after parsing attributes in process `syz.2.816'. [ 203.162950][ T9026] bond0: (slave bond_slave_0): Releasing backup interface [ 203.172098][ T9026] bond0: (slave bond_slave_1): Releasing backup interface [ 203.185317][ T9026] team0: Port device team_slave_0 removed [ 203.188378][ T9026] team0: Port device team_slave_1 removed [ 203.190426][ T9026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.196414][ T9026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.204193][ T9026] bond0: (slave wlan1): Releasing backup interface [ 203.292195][ T9027] batman_adv: batadv0: Adding interface: dummy0 [ 203.294828][ T9027] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.305119][ T9027] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 203.644148][ T9030] 7 speed is unknown, defaulting to 1000 [ 205.124769][ T9055] 7 speed is unknown, defaulting to 1000 [ 207.441448][ T9095] 7 speed is unknown, defaulting to 1000 [ 207.516344][ T9101] random: crng reseeded on system resumption [ 207.882527][ T9101] 7 speed is unknown, defaulting to 1000 [ 207.893513][ T9103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.839'. [ 208.003949][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.839'. [ 209.983958][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'. [ 209.993507][ T9141] batadv1: entered promiscuous mode [ 209.995476][ T9141] batadv1: entered allmulticast mode [ 211.087665][ T9157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.092427][ T9157] batman_adv: batadv0: Interface activated: dummy0 [ 211.095561][ T9157] net_ratelimit: 2095 callbacks suppressed [ 211.095567][ T9157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.175098][ T9160] random: crng reseeded on system resumption [ 211.221798][ T9160] 7 speed is unknown, defaulting to 1000 [ 211.461245][ T5986] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 211.608219][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 211.611476][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 211.614599][ T5986] usb 5-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 211.617804][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.624446][ T5986] usb 5-1: config 0 descriptor?? [ 211.629813][ T9151] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 211.985460][ T9151] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 211.988528][ T9151] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 211.990568][ T9151] tipc: Enabled bearer , priority 10 [ 211.997453][ T5986] usbhid 5-1:0.0: can't add hid device: -71 [ 212.006654][ T5986] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 212.014220][ T5986] usb 5-1: USB disconnect, device number 5 [ 212.067931][ T9173] xt_CT: You must specify a L4 protocol and not use inversions on it [ 212.116705][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 212.119071][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 212.319552][ T9174] 7 speed is unknown, defaulting to 1000 [ 212.387206][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 212.390136][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 212.836709][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 212.838870][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 212.926675][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 213.748700][ T9201] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 214.142149][ T9213] 7 speed is unknown, defaulting to 1000 [ 214.931666][ T9230] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.217905][ T9235] tipc: Resetting bearer [ 215.997002][ T9248] netlink: 80 bytes leftover after parsing attributes in process `syz.2.872'. [ 216.168523][ T9256] 7 speed is unknown, defaulting to 1000 [ 216.986628][ C0] net_ratelimit: 13 callbacks suppressed [ 216.986652][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 216.990325][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 217.066676][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 217.070080][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 217.625754][ T9275] xt_CT: You must specify a L4 protocol and not use inversions on it [ 217.656671][ T5985] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 217.807221][ T5985] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 217.810746][ T5985] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.813845][ T5985] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.817805][ T5985] usb 6-1: config 0 interface 0 has no altsetting 0 [ 217.823110][ T5985] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.825527][ T5985] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.828972][ T5985] usb 6-1: config 0 interface 0 has no altsetting 0 [ 217.832034][ T5985] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.834896][ T5985] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.840553][ T5985] usb 6-1: config 0 interface 0 has no altsetting 0 [ 217.843378][ T5985] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.846251][ T5985] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.849790][ T5985] usb 6-1: config 0 interface 0 has no altsetting 0 [ 217.852484][ T5985] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.855209][ T5985] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.860319][ T5985] usb 6-1: config 0 interface 0 has no altsetting 0 [ 217.863061][ T5985] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.865796][ T5985] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.869205][ T5985] usb 6-1: config 0 interface 0 has no altsetting 0 [ 217.872651][ T5985] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.875548][ T5985] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.880537][ T5985] usb 6-1: config 0 interface 0 has no altsetting 0 [ 217.883603][ T5985] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.886239][ T5985] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.889639][ T5985] usb 6-1: config 0 interface 0 has no altsetting 0 [ 217.892986][ T5985] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 217.895437][ T5985] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 217.900167][ T5985] usb 6-1: Product: syz [ 217.901650][ T5985] usb 6-1: Manufacturer: syz [ 217.903452][ T5985] usb 6-1: SerialNumber: syz [ 217.979539][ T5985] usb 6-1: config 0 descriptor?? [ 218.026708][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 218.029274][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 218.047861][ T5985] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 218.106591][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 218.109085][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 218.118694][ T5985] libceph: connect (1)[c::]:6789 error -101 [ 218.125134][ T5985] libceph: mon0 (1)[c::]:6789 connect error [ 218.209959][ T9281] ceph: No mds server is up or the cluster is laggy [ 219.066666][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 219.069227][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 219.548572][ T9310] 7 speed is unknown, defaulting to 1000 [ 220.278950][ C0] usb 6-1: yurex_control_callback - control failed: -2 [ 220.687952][ T9323] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.318094][ T25] usb 6-1: USB disconnect, device number 5 [ 221.321352][ T25] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 221.548037][ T9333] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.629127][ T9335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.895'. [ 221.655486][ T9335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.895'. [ 222.011337][ T9345] netlink: 80 bytes leftover after parsing attributes in process `syz.0.896'. [ 222.186858][ C0] net_ratelimit: 10 callbacks suppressed [ 222.186873][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 222.190558][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 222.276676][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 222.279367][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 222.519721][ T9354] 7 speed is unknown, defaulting to 1000 [ 223.236731][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 223.238844][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 223.316613][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 223.318674][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 223.563223][ T9370] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.266725][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 224.269376][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 224.462416][ T9377] cgroup: Bad value for 'name' [ 225.037092][ T9388] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.920954][ T9396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.926656][ T9396] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.934112][ T9396] tipc: Resetting bearer [ 225.936034][ T9396] tipc: Resetting bearer [ 225.961924][ T9400] netlink: 80 bytes leftover after parsing attributes in process `syz.1.908'. [ 226.015846][ T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 226.018418][ T9396] batman_adv: batadv0: Interface activated: dummy0 [ 226.026875][ T5986] 7 speed is unknown, defaulting to 1000 [ 226.029394][ T5986] 7 speed is unknown, defaulting to 1000 [ 226.377998][ T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 226.464502][ T9407] 7 speed is unknown, defaulting to 1000 [ 227.386613][ C0] net_ratelimit: 11 callbacks suppressed [ 227.386628][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 227.390915][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 227.466595][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 227.468778][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 227.866769][ T7719] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 228.426789][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 228.429435][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 228.516609][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 228.518970][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 228.906959][ T7748] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 228.910076][ T7748] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 229.467569][ T5986] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 229.476704][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 229.478919][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 229.780163][ T9455] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 230.815880][ T9469] loop6: detected capacity change from 0 to 524287999 [ 230.840745][ T9469] ntfs3(nullb0): Primary boot signature is not NTFS. [ 230.844114][ T9469] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 231.054655][ T9476] 7 speed is unknown, defaulting to 1000 [ 231.181389][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'. [ 231.185178][ T9480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.927'. [ 231.646572][ T5798] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 231.808286][ T5798] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 231.812080][ T5798] usb 6-1: config 0 interface 0 has no altsetting 0 [ 231.819721][ T5798] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 231.823134][ T5798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.826272][ T5798] usb 6-1: Product: syz [ 231.828033][ T5798] usb 6-1: Manufacturer: syz [ 231.829859][ T5798] usb 6-1: SerialNumber: syz [ 231.833296][ T5798] usb 6-1: config 0 descriptor?? [ 231.845732][ T5798] usb 6-1: selecting invalid altsetting 0 [ 232.064925][ T1321] usb 6-1: USB disconnect, device number 6 [ 232.074658][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 232.077950][ T9488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.929'. [ 232.084117][ T9488] ip6gretap0: entered promiscuous mode [ 232.102507][ T39] audit: type=1326 audit(1739929974.800:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9487 comm="syz.1.929" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x0 [ 232.586771][ C0] net_ratelimit: 10 callbacks suppressed [ 232.586792][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 232.591930][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 232.666733][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 232.668874][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 232.810896][ T9504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.814677][ T9504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.986675][ C3] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 233.636707][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 233.639691][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 233.706618][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 233.708918][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 233.738430][ T9514] netlink: 80 bytes leftover after parsing attributes in process `syz.3.938'. [ 234.666804][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 234.668815][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 235.440761][ T9537] Cannot find set identified by id 0 to match [ 237.570439][ T9572] netlink: 80 bytes leftover after parsing attributes in process `syz.0.952'. [ 237.796788][ C0] net_ratelimit: 10 callbacks suppressed [ 237.796803][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 237.801344][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 237.866698][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 237.869578][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 238.718076][ T9593] netlink: 80 bytes leftover after parsing attributes in process `syz.0.956'. [ 238.826601][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 238.828738][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 238.906607][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 238.908630][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 239.767617][ T9615] 7 speed is unknown, defaulting to 1000 [ 239.876636][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 239.878670][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 239.944006][ T9618] netlink: 168 bytes leftover after parsing attributes in process `syz.1.962'. [ 240.626271][ T9630] netlink: 80 bytes leftover after parsing attributes in process `syz.2.965'. [ 240.847591][ T9634] netlink: 'syz.1.966': attribute type 10 has an invalid length. [ 240.866081][ T9634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.877394][ T9634] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 241.236651][ C3] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 241.389160][ T9641] netlink: 80 bytes leftover after parsing attributes in process `syz.3.967'. [ 241.807719][ T9654] netlink: 80 bytes leftover after parsing attributes in process `syz.2.970'. [ 242.996624][ C0] net_ratelimit: 10 callbacks suppressed [ 242.996647][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 243.000570][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 243.066703][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 243.069925][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 243.318199][ T9670] 7 speed is unknown, defaulting to 1000 [ 244.026676][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 244.028800][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 244.106595][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 244.108604][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 244.154900][ T9684] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.694543][ T9692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.697362][ T9692] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.700843][ T9692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.888808][ T9697] netlink: 80 bytes leftover after parsing attributes in process `syz.2.981'. [ 245.076696][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 246.697736][ T9722] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.890179][ T9738] netlink: 80 bytes leftover after parsing attributes in process `syz.0.992'. [ 247.939887][ T9734] /dev/sr0: Can't open blockdev [ 248.196665][ C0] net_ratelimit: 11 callbacks suppressed [ 248.196692][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 248.202143][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 248.266768][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 248.269552][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 249.198112][ T9774] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.226621][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 249.228731][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 249.306682][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 249.309741][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 249.867942][ T9786] tipc: Resetting bearer [ 249.873414][ T9786] batman_adv: batadv0: Interface deactivated: dummy0 [ 250.023685][ T5986] 7 speed is unknown, defaulting to 1000 [ 250.026235][ T5986] 7 speed is unknown, defaulting to 1000 [ 250.266627][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 250.268648][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 251.093532][ T9802] 7 speed is unknown, defaulting to 1000 [ 251.912950][ T9812] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1009'. [ 252.729340][ T9819] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.386673][ C0] net_ratelimit: 11 callbacks suppressed [ 253.386695][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 253.391931][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 253.466625][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 253.468673][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 253.786313][ T9838] 7 speed is unknown, defaulting to 1000 [ 254.242754][ T9846] netlink: 'syz.1.1016': attribute type 10 has an invalid length. [ 254.255598][ T9846] bond0: (slave batadv0): Releasing backup interface [ 254.426674][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 254.428792][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 254.506721][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 254.509503][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 254.648184][ T9850] 7 speed is unknown, defaulting to 1000 [ 255.321200][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.466647][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 255.469603][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 255.501702][ T9867] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.711735][ T9911] netlink: 'syz.0.1032': attribute type 4 has an invalid length. [ 258.188731][ T9922] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1034'. [ 258.666795][ C2] net_ratelimit: 10 callbacks suppressed [ 258.666818][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 258.671799][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 259.302490][ T9939] batman_adv: batadv0: Interface deactivated: dummy0 [ 259.305158][ T9939] batman_adv: batadv0: Removing interface: dummy0 [ 259.706648][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 259.709538][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 260.404615][ T9950] 7 speed is unknown, defaulting to 1000 [ 260.746764][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 260.748993][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 261.198367][ T9972] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1046'. [ 261.786669][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 261.789628][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 261.956739][ T9981] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1050'. [ 262.826700][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 262.829555][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 262.921497][ T9995] 7 speed is unknown, defaulting to 1000 [ 263.871449][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 263.873551][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 264.906637][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 264.909418][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 265.320487][T10041] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1060'. [ 265.396193][T10043] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1061'. [ 265.946604][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 265.948709][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 265.970907][T10045] Set syz1 is full, maxelem 65536 reached [ 266.432134][ T5954] block nbd0: Receive control failed (result -32) [ 266.432134][ T65] block nbd0: Receive control failed (result -32) [ 266.582460][T10057] block nbd0: shutting down sockets [ 266.986631][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 266.988765][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 268.026782][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 269.066704][ C2] net_ratelimit: 1 callbacks suppressed [ 269.066723][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 269.071554][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 269.630519][ T72] IPVS: starting estimator thread 0... [ 269.716619][T10071] IPVS: using max 38 ests per chain, 91200 per kthread [ 269.739553][T10080] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1070'. [ 269.785748][T10078] ip6gretap0: left promiscuous mode [ 270.106780][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 270.109664][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 270.643685][T10087] 7 speed is unknown, defaulting to 1000 [ 270.837924][T10099] netlink: 'syz.2.1072': attribute type 10 has an invalid length. [ 270.941827][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'. [ 271.001541][T10103] 7 speed is unknown, defaulting to 1000 [ 271.156658][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 271.159082][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 272.186653][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 272.188740][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 272.370111][T10116] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1079'. [ 272.769912][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'. [ 272.777875][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'. [ 272.781124][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'. [ 273.164581][T10129] ip6gretap0: left promiscuous mode [ 273.226665][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 273.228759][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 273.643529][T10136] 7 speed is unknown, defaulting to 1000 [ 274.266623][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 274.268678][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 274.695698][T10155] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1091'. [ 275.133490][T10165] 7 speed is unknown, defaulting to 1000 [ 275.236870][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1095'. [ 275.306672][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 275.308896][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 275.774742][T10175] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.778287][T10175] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.780942][T10175] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.783640][T10175] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.817118][T10175] team0: Port device vxlan0 added [ 275.837872][T10177] 7 speed is unknown, defaulting to 1000 [ 276.073910][T10183] 7 speed is unknown, defaulting to 1000 [ 276.346668][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 276.349503][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 277.386702][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 277.389533][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 277.402115][T10223] 7 speed is unknown, defaulting to 1000 [ 277.803294][T10236] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1106'. [ 277.963393][T10241] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1107'. [ 278.117951][T10243] 7 speed is unknown, defaulting to 1000 [ 278.268098][T10248] 7 speed is unknown, defaulting to 1000 [ 278.426686][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 278.429600][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 278.480041][ T39] audit: type=1800 audit(1739930021.180:14): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.1112" name="/newroot/252/bus" dev="tmpfs" ino=1340 res=0 errno=0 [ 279.010122][T10265] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1114'. [ 279.307811][T10268] block device autoloading is deprecated and will be removed. [ 279.311707][T10268] syz.0.1115: attempt to access beyond end of device [ 279.311707][T10268] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 279.466708][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 279.469136][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 280.093354][T10285] 7 speed is unknown, defaulting to 1000 [ 280.516618][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 280.519563][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 280.596589][T10292] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1121'. [ 280.642751][T10293] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1122'. [ 281.240985][T10301] 7 speed is unknown, defaulting to 1000 [ 281.383670][T10306] netlink: 'syz.2.1126': attribute type 1 has an invalid length. [ 281.411687][T10306] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 281.423081][ T7711] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 281.423557][T10306] 8021q: adding VLAN 0 to HW filter on device bond2 [ 281.442073][T10306] veth3: entered promiscuous mode [ 281.445230][T10306] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 281.541407][ T7724] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 281.546645][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 281.548720][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 282.098997][T10323] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآD' [ 282.102146][T10323] CPU: 1 UID: 0 PID: 10323 Comm: syz.0.1128 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 282.102171][T10323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 282.102179][T10323] Call Trace: [ 282.102216][T10323] [ 282.102222][T10323] dump_stack_lvl+0x16c/0x1f0 [ 282.102305][T10323] sysfs_warn_dup+0x7f/0xa0 [ 282.102347][T10323] sysfs_do_create_link_sd+0x124/0x140 [ 282.102366][T10323] sysfs_create_link+0x61/0xc0 [ 282.102383][T10323] device_add+0x62e/0x1a70 [ 282.102426][T10323] ? __pfx_device_add+0x10/0x10 [ 282.102441][T10323] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 282.102480][T10323] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 282.102522][T10323] wiphy_register+0x1c7a/0x2860 [ 282.102537][T10323] ? netdev_run_todo+0x877/0x1320 [ 282.102578][T10323] ? __pfx_wiphy_register+0x10/0x10 [ 282.102602][T10323] ieee80211_register_hw+0x23ff/0x3ff0 [ 282.102640][T10323] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 282.102655][T10323] ? trace_hrtimer_init+0x1c/0x230 [ 282.102693][T10323] ? rcu_is_watching+0x12/0xc0 [ 282.102731][T10323] ? trace_hrtimer_init+0x1a6/0x230 [ 282.102751][T10323] ? __hrtimer_init+0x106/0x2c0 [ 282.102766][T10323] mac80211_hwsim_new_radio+0x2c47/0x56d0 [ 282.102818][T10323] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 282.102838][T10323] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 282.102859][T10323] hwsim_new_radio_nl+0xb42/0x12b0 [ 282.102879][T10323] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 282.102902][T10323] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 282.102943][T10323] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 282.102965][T10323] genl_family_rcv_msg_doit+0x202/0x2f0 [ 282.102984][T10323] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 282.103004][T10323] ? trace_cap_capable+0x1a2/0x210 [ 282.103046][T10323] ? bpf_lsm_capable+0x9/0x10 [ 282.103079][T10323] ? security_capable+0x7e/0x260 [ 282.103096][T10323] ? ns_capable+0xd7/0x110 [ 282.103133][T10323] genl_rcv_msg+0x565/0x800 [ 282.103146][T10323] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.103157][T10323] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 282.103177][T10323] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.103190][T10323] netlink_rcv_skb+0x165/0x410 [ 282.103206][T10323] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.103219][T10323] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 282.103242][T10323] ? down_read+0xc9/0x330 [ 282.103273][T10323] ? __pfx_down_read+0x10/0x10 [ 282.103285][T10323] ? netlink_deliver_tap+0x1ae/0xca0 [ 282.103304][T10323] genl_rcv+0x28/0x40 [ 282.103320][T10323] netlink_unicast+0x53c/0x7f0 [ 282.103338][T10323] ? __pfx_netlink_unicast+0x10/0x10 [ 282.103355][T10323] ? __phys_addr_symbol+0x49/0x80 [ 282.103392][T10323] ? __phys_addr_symbol+0x30/0x80 [ 282.103410][T10323] ? __check_object_size+0x488/0x710 [ 282.103449][T10323] netlink_sendmsg+0x8b8/0xd70 [ 282.103468][T10323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.103490][T10323] ____sys_sendmsg+0x9ae/0xb40 [ 282.103509][T10323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.103523][T10323] ? get_compat_msghdr+0x11b/0x170 [ 282.103568][T10323] ___sys_sendmsg+0x135/0x1e0 [ 282.103582][T10323] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.103600][T10323] ? __pfx_lock_release+0x10/0x10 [ 282.103632][T10323] ? trace_lock_acquire+0x14e/0x1f0 [ 282.103650][T10323] ? __fget_files+0x206/0x3a0 [ 282.103685][T10323] __sys_sendmsg+0x16e/0x220 [ 282.103697][T10323] ? __pfx___sys_sendmsg+0x10/0x10 [ 282.103709][T10323] ? __ia32_sys_futex_time32+0x1da/0x460 [ 282.103733][T10323] __do_fast_syscall_32+0x73/0x120 [ 282.103751][T10323] do_fast_syscall_32+0x32/0x80 [ 282.103763][T10323] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.103782][T10323] RIP: 0023:0xf742e579 [ 282.103792][T10323] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 282.103804][T10323] RSP: 002b:00000000f507455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 282.103834][T10323] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 282.103841][T10323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.103847][T10323] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 282.103854][T10323] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 282.103860][T10323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 282.103874][T10323] [ 282.586616][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 282.588691][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 282.975390][T10339] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1133'. [ 283.337127][T10362] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1135'. [ 283.866712][ T39] audit: type=1800 audit(1739930026.540:15): pid=10368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.1137" name="/newroot/321/bus" dev="tmpfs" ino=1694 res=0 errno=0 [ 284.666616][ C2] net_ratelimit: 2 callbacks suppressed [ 284.666631][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 284.670414][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 285.706673][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 285.709604][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 285.799425][T10400] 7 speed is unknown, defaulting to 1000 [ 286.267257][T10407] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1145'. [ 286.756675][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 286.759436][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 287.236183][T10429] 7 speed is unknown, defaulting to 1000 [ 287.519926][T10441] 7 speed is unknown, defaulting to 1000 [ 287.564999][T10443] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1153'. [ 287.571675][T10444] serio: Serial port ptm0 [ 287.630956][T10444] netlink: 'syz.3.1155': attribute type 10 has an invalid length. [ 287.711369][T10444] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 287.786661][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 287.789587][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 288.826607][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 288.828784][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 289.568771][T10482] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.866643][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 289.868684][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 289.971437][T10494] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1163'. [ 290.530810][T10500] 7 speed is unknown, defaulting to 1000 [ 290.577481][T10502] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1166'. [ 290.873838][T10513] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1170'. [ 290.906722][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 290.909629][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 291.803384][T10529] 7 speed is unknown, defaulting to 1000 [ 291.812839][T10525] xt_CT: You must specify a L4 protocol and not use inversions on it [ 291.862418][T10531] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1177'. [ 291.865013][T10531] netlink: 'syz.0.1177': attribute type 1 has an invalid length. [ 291.946681][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 291.949540][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 291.961280][T10541] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1178'. [ 292.009305][T10540] 7 speed is unknown, defaulting to 1000 [ 292.312846][T10548] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1181'. [ 292.986588][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 292.988657][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 293.426334][T10562] 7 speed is unknown, defaulting to 1000 [ 293.963244][T10570] 7 speed is unknown, defaulting to 1000 [ 294.026686][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 294.028740][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 295.031740][T10579] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1190'. [ 295.066674][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 295.068548][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 295.301976][T10583] xt_CT: You must specify a L4 protocol and not use inversions on it [ 295.501680][T10587] 7 speed is unknown, defaulting to 1000 [ 296.106624][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 296.108773][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 296.721820][T10606] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1197'. [ 296.898437][T10615] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1198'. [ 296.929781][T10616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.156705][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 297.159393][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 297.485816][T10622] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1202'. [ 297.656240][T10625] 7 speed is unknown, defaulting to 1000 [ 298.186666][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 298.189660][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 298.669041][T10638] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1207'. [ 298.709345][T10640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1208'. [ 299.226601][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 299.228702][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 299.365520][T10652] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1211'. [ 299.652103][T10658] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.727815][T10662] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1213'. [ 299.997455][T10668] xt_CT: You must specify a L4 protocol and not use inversions on it [ 300.062013][T10670] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1216'. [ 300.276682][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 300.278770][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 300.948934][T10680] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1220'. [ 301.316631][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 301.318696][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 301.900959][T10699] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1233'. [ 302.279039][T10705] xt_CT: You must specify a L4 protocol and not use inversions on it [ 302.346622][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 302.348665][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 302.564699][T10709] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1227'. [ 302.747789][T10712] 7 speed is unknown, defaulting to 1000 [ 302.912871][T10716] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.266814][T10721] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1230'. [ 303.386698][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 303.389430][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 304.426815][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 304.429732][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 305.476774][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 305.479420][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 305.755802][T10750] bond2: entered promiscuous mode [ 305.758694][T10750] bond2: entered allmulticast mode [ 305.761767][T10750] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.362647][T10763] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1242'. [ 306.506683][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 306.509668][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 306.511942][T10769] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1243'. [ 306.944851][T10775] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1246'. [ 307.140855][T10777] overlayfs: failed to clone upperpath [ 307.546669][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 307.549601][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 307.707459][T10787] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1249'. [ 307.953855][T10795] xt_CT: You must specify a L4 protocol and not use inversions on it [ 308.586640][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 308.589261][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 309.626627][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 309.628680][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 310.676717][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 310.679519][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 311.048686][T10839] xt_CT: You must specify a L4 protocol and not use inversions on it [ 311.378216][T10843] 7 speed is unknown, defaulting to 1000 [ 311.706611][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 311.708693][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 311.723184][T10850] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1264'. [ 311.915338][T10855] xt_CT: No such helper "syz1" [ 312.654352][T10864] 7 speed is unknown, defaulting to 1000 [ 312.746720][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 312.749457][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 313.767852][T10874] overlayfs: failed to clone upperpath [ 313.786637][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 313.789527][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 314.219282][T10878] netlink: zone id is out of range [ 314.221422][T10878] netlink: zone id is out of range [ 315.587091][T10900] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1278'. [ 315.877100][ C2] net_ratelimit: 5 callbacks suppressed [ 315.877117][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 315.881150][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 316.750971][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.916650][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 316.919412][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 316.968919][T10922] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.055510][T10922] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.152918][T10922] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.284685][T10922] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.399585][T10922] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.405526][T10922] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.412533][T10922] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.419161][T10922] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.704238][T10931] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1286'. [ 317.781198][T10934] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1287'. [ 317.946612][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 317.949001][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 318.617825][T10940] IPVS: Error connecting to the multicast addr [ 318.986720][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 318.988865][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 320.026777][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 320.029661][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 320.203855][T10968] ipvlan1: entered allmulticast mode [ 320.205414][T10968] veth0_vlan: entered allmulticast mode [ 320.950059][T10976] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1298'. [ 321.066738][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 321.068940][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 321.547261][T10983] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1300'. [ 321.551479][T10983] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1300'. [ 322.056902][T10991] 7 speed is unknown, defaulting to 1000 [ 322.116723][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 322.119484][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 323.146749][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 323.148866][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 323.476334][T11020] netlink: 187320 bytes leftover after parsing attributes in process `syz.2.1310'. [ 323.485225][T11020] netlink: zone id is out of range [ 323.486841][T11020] netlink: zone id is out of range [ 323.488273][T11020] netlink: zone id is out of range [ 323.489730][T11020] netlink: zone id is out of range [ 326.266716][ C2] net_ratelimit: 4 callbacks suppressed [ 326.266731][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 326.270711][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 327.306687][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 327.308788][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 327.535750][T11071] 7 speed is unknown, defaulting to 1000 [ 328.356686][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 328.359419][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 329.386728][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 329.389476][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 330.426648][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 330.428816][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 331.062446][T11124] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1336'. [ 331.072170][T11123] 7 speed is unknown, defaulting to 1000 [ 331.466648][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 331.469576][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 332.506734][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 332.509506][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 333.402148][T11165] 7 speed is unknown, defaulting to 1000 [ 333.546677][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 333.549342][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 334.153084][T11156] lo: entered promiscuous mode [ 334.157134][T11156] tunl0: entered promiscuous mode [ 334.160139][T11156] gre0: entered promiscuous mode [ 334.165001][T11156] gretap0: entered promiscuous mode [ 334.178883][T11156] erspan0: entered promiscuous mode [ 334.181255][T11156] ip_vti0: entered promiscuous mode [ 334.183512][T11156] ip6_vti0: entered promiscuous mode [ 334.185808][T11156] sit0: entered promiscuous mode [ 334.193079][T11156] ip6tnl0: entered promiscuous mode [ 334.196316][T11156] ip6gre0: entered promiscuous mode [ 334.202699][T11156] ip6gretap0: entered promiscuous mode [ 334.207564][T11156] vcan0: entered promiscuous mode [ 334.210842][T11156] bond0: entered promiscuous mode [ 334.213291][T11156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.217457][T11156] dummy0: entered promiscuous mode [ 334.220717][T11156] nlmon0: entered promiscuous mode [ 334.225202][T11156] caif0: entered promiscuous mode [ 334.227704][T11156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.587427][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 334.590753][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 334.984824][T11193] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1350'. [ 335.626658][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 336.512555][T11209] syz.1.1355: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 336.517415][T11209] CPU: 0 UID: 0 PID: 11209 Comm: syz.1.1355 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 336.517430][T11209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 336.517438][T11209] Call Trace: [ 336.517476][T11209] [ 336.517482][T11209] dump_stack_lvl+0x16c/0x1f0 [ 336.517611][T11209] warn_alloc+0x24d/0x3a0 [ 336.517651][T11209] ? __pfx_warn_alloc+0x10/0x10 [ 336.517663][T11209] ? __pfx_stack_trace_save+0x10/0x10 [ 336.517705][T11209] ? kasan_save_stack+0x42/0x60 [ 336.517718][T11209] ? kasan_save_stack+0x33/0x60 [ 336.517729][T11209] ? kasan_save_track+0x14/0x30 [ 336.517741][T11209] ? __kasan_kmalloc+0xaa/0xb0 [ 336.517751][T11209] ? xskq_create+0x52/0x1d0 [ 336.517787][T11209] ? do_sock_setsockopt+0x222/0x480 [ 336.517822][T11209] ? __sys_setsockopt+0x1a0/0x230 [ 336.517833][T11209] ? __ia32_sys_setsockopt+0xbc/0x160 [ 336.517848][T11209] __vmalloc_node_range_noprof+0x10dc/0x1530 [ 336.517866][T11209] ? xskq_create+0xfb/0x1d0 [ 336.517883][T11209] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 336.517899][T11209] ? xskq_create+0xfb/0x1d0 [ 336.517915][T11209] vmalloc_user_noprof+0x6b/0x90 [ 336.517927][T11209] ? xskq_create+0xfb/0x1d0 [ 336.517941][T11209] xskq_create+0xfb/0x1d0 [ 336.517954][T11209] xsk_setsockopt+0x869/0xac0 [ 336.517967][T11209] ? __pfx_xsk_setsockopt+0x10/0x10 [ 336.517981][T11209] ? find_held_lock+0x2d/0x110 [ 336.518021][T11209] ? __pfx_xsk_setsockopt+0x10/0x10 [ 336.518035][T11209] do_sock_setsockopt+0x222/0x480 [ 336.518048][T11209] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 336.518064][T11209] ? lock_acquire+0x2f/0xb0 [ 336.518084][T11209] __sys_setsockopt+0x1a0/0x230 [ 336.518098][T11209] __ia32_sys_setsockopt+0xbc/0x160 [ 336.518108][T11209] ? lockdep_hardirqs_on+0x7c/0x110 [ 336.518145][T11209] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 336.518163][T11209] __do_fast_syscall_32+0x73/0x120 [ 336.518175][T11209] do_fast_syscall_32+0x32/0x80 [ 336.518187][T11209] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 336.518207][T11209] RIP: 0023:0xf7f46579 [ 336.518217][T11209] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 336.518227][T11209] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 336.518258][T11209] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 336.518265][T11209] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 336.518280][T11209] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 336.518287][T11209] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 336.518294][T11209] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.518308][T11209] [ 336.518313][T11209] Mem-Info: [ 336.598198][T11209] active_anon:12616 inactive_anon:2967 isolated_anon:0 [ 336.598198][T11209] active_file:6295 inactive_file:22385 isolated_file:0 [ 336.598198][T11209] unevictable:1768 dirty:3088 writeback:0 [ 336.598198][T11209] slab_reclaimable:8464 slab_unreclaimable:62060 [ 336.598198][T11209] mapped:28800 shmem:11963 pagetables:803 [ 336.598198][T11209] sec_pagetables:316 bounce:0 [ 336.598198][T11209] kernel_misc_reclaimable:0 [ 336.598198][T11209] free:40132 free_pcp:9780 free_cma:0 [ 336.610993][T11209] Node 0 active_anon:2404kB inactive_anon:44kB active_file:284kB inactive_file:776kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:3140kB dirty:4kB writeback:0kB shmem:5664kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9564kB pagetables:816kB sec_pagetables:1152kB all_unreclaimable? yes [ 336.620068][T11209] Node 1 active_anon:48060kB inactive_anon:11824kB active_file:24896kB inactive_file:88764kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:111560kB dirty:12348kB writeback:0kB shmem:42188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:4040kB pagetables:2396kB sec_pagetables:112kB all_unreclaimable? no [ 336.629297][T11209] Node 0 DMA free:2288kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 336.637145][T11209] lowmem_reserve[]: 0 297 0 0 0 [ 336.638600][T11209] Node 0 DMA32 free:20624kB boost:2048kB min:15720kB low:19136kB high:22552kB reserved_highatomic:4096KB active_anon:2404kB inactive_anon:44kB active_file:284kB inactive_file:776kB unevictable:3536kB writepending:4kB present:1032196kB managed:305040kB mlocked:0kB bounce:0kB free_pcp:4708kB local_pcp:144kB free_cma:0kB [ 336.647027][T11209] lowmem_reserve[]: 0 0 0 0 0 [ 336.648432][T11209] Node 1 DMA32 free:140660kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:48060kB inactive_anon:11824kB active_file:24896kB inactive_file:88764kB unevictable:3536kB writepending:12348kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:30880kB local_pcp:19788kB free_cma:0kB [ 336.657088][T11209] lowmem_reserve[]: 0 0 0 0 0 [ 336.658475][T11209] Node 0 DMA: 66*4kB (U) 33*8kB (U) 10*16kB (U) 18*32kB (U) 4*64kB (U) 4*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2288kB [ 336.662574][T11209] Node 0 DMA32: 86*4kB (UMH) 30*8kB (MH) 59*16kB (UMH) 112*32kB (UMH) 43*64kB (UMEH) 8*128kB (UMEH) 6*256kB (UM) 4*512kB (UM) 6*1024kB (UM) 1*2048kB (M) 0*4096kB = 20664kB [ 336.667683][T11209] Node 1 DMA32: 1*4kB (E) 2*8kB (ME) 184*16kB (UME) 390*32kB (UM) 332*64kB (UM) 99*128kB (UM) 96*256kB (UME) 52*512kB (UME) 29*1024kB (UM) 3*2048kB (ME) 1*4096kB (M) = 140500kB [ 336.672723][T11209] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 336.675383][T11209] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 336.676678][ C2] net_ratelimit: 1 callbacks suppressed [ 336.676689][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 336.678368][T11209] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 336.679989][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 336.681877][T11209] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 336.689362][T11209] 40798 total pagecache pages [ 336.690763][T11209] 96 pages in swap cache [ 336.692023][T11209] Free swap = 120600kB [ 336.693242][T11209] Total swap = 124996kB [ 336.694449][T11209] 524155 pages RAM [ 336.695566][T11209] 0 pages HighMem/MovableOnly [ 336.697023][T11209] 206992 pages reserved [ 336.698235][T11209] 0 pages cma reserved [ 337.210928][T11232] 7 speed is unknown, defaulting to 1000 [ 337.706667][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 337.709407][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 337.960457][T11242] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1361'. [ 338.000179][T11246] netlink: 'syz.1.1362': attribute type 2 has an invalid length. [ 338.002227][T11246] netlink: 119 bytes leftover after parsing attributes in process `syz.1.1362'. [ 338.017929][T11246] netlink: 'syz.1.1362': attribute type 8 has an invalid length. [ 338.019980][T11246] netlink: 163260 bytes leftover after parsing attributes in process `syz.1.1362'. [ 338.746652][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 338.749135][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 338.858462][T11260] tc_dump_action: action bad kind [ 339.143751][T11267] 7 speed is unknown, defaulting to 1000 [ 339.786745][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 339.788796][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 340.741658][T11281] 7 speed is unknown, defaulting to 1000 [ 340.836652][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 340.838803][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 341.773780][T11295] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1374'. [ 341.866651][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 341.869409][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 342.387236][T11305] 7 speed is unknown, defaulting to 1000 [ 342.754464][T11313] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1386'. [ 342.906659][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 342.911288][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 343.956684][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 343.959275][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 344.955919][T11338] 7 speed is unknown, defaulting to 1000 [ 344.986637][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 344.988689][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 346.026614][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 346.028715][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 347.066682][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 347.069555][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 347.439748][T11385] 7 speed is unknown, defaulting to 1000 [ 347.770873][T11397] libceph: resolve '400' (ret=-3): failed [ 347.777946][T11397] netlink: 'syz.3.1399': attribute type 10 has an invalid length. [ 348.116717][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 348.118783][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 349.156594][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 349.158678][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 349.493621][T11421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1404'. [ 349.496571][T11421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1404'. [ 349.524784][T11421] bridge0: port 1(vlan2) entered blocking state [ 349.686728][T11421] bridge0: port 1(vlan2) entered disabled state [ 349.689388][T11421] vlan2: entered allmulticast mode [ 349.692807][T11421] vlan2: left allmulticast mode [ 350.196685][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 350.198806][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 350.335215][T11433] 7 speed is unknown, defaulting to 1000 [ 351.236631][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 351.238669][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 352.266676][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 352.269708][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 352.787722][T11469] 7 speed is unknown, defaulting to 1000 [ 353.306714][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 353.309516][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 354.346626][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 354.348826][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 355.397192][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 355.400049][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 355.969312][T11519] 7 speed is unknown, defaulting to 1000 [ 356.436599][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 356.438638][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 357.466650][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 357.469309][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 358.267347][T11554] 7 speed is unknown, defaulting to 1000 [ 358.348246][T11558] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1440'. [ 358.506679][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 358.508905][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 359.546673][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 359.549013][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 360.586663][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 360.589351][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 361.493834][T11598] 7 speed is unknown, defaulting to 1000 [ 361.636635][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 361.639376][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 361.721063][T11605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1452'. [ 361.792507][T11605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.812365][T11607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.814920][T11607] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 361.822925][T11607] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 361.886556][ T65] Bluetooth: hci2: command 0x0406 tx timeout [ 361.898790][T11611] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1452'. [ 361.979221][T11612] 7 speed is unknown, defaulting to 1000 [ 362.666708][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 362.669194][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 363.303863][T11645] netlink: 'syz.3.1460': attribute type 9 has an invalid length. [ 363.339405][T11646] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1462'. [ 363.706707][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 363.709061][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 363.980848][T11651] 7 speed is unknown, defaulting to 1000 [ 364.746888][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 364.749471][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 365.786674][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 365.788910][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 366.826669][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 366.828843][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 367.027558][T11697] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1475'. [ 367.039268][T11698] tipc: Enabled bearer , priority 0 [ 367.866786][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 367.869200][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 368.906673][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 368.909788][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 369.199961][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1494'. [ 369.206310][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1494'. [ 369.322705][T11752] tipc: Started in network mode [ 369.324752][T11752] tipc: Node identity 080211000001, cluster identity 4711 [ 369.329909][T11752] tipc: Enabled bearer , priority 0 [ 369.946661][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 369.948848][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 370.329617][ T5798] tipc: Node number set to 134418688 [ 370.586654][T11784] random: crng reseeded on system resumption [ 370.787476][T11784] 7 speed is unknown, defaulting to 1000 [ 370.996647][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 370.999558][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 372.026764][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 372.029365][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 372.280878][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1497'. [ 372.285190][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1497'. [ 372.461369][T11809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1495'. [ 372.463899][T11809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1495'. [ 372.473001][T11809] bridge0: port 1(vlan2) entered blocking state [ 372.474858][T11809] bridge0: port 1(vlan2) entered disabled state [ 372.476774][T11809] vlan2: entered allmulticast mode [ 372.479023][T11809] vlan2: left allmulticast mode [ 373.066846][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 373.069169][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 373.340232][T11815] syz.0.1498: attempt to access beyond end of device [ 373.340232][T11815] nbd0: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 373.396742][T11815] XFS (nbd0): SB validate failed with error -5. [ 373.674811][T11830] 9pnet_fd: Insufficient options for proto=fd [ 373.691041][ T55] block nbd0: Attempted send on invalid socket [ 373.693272][ T55] I/O error, dev nbd0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 373.713660][T11830] netlink: 219 bytes leftover after parsing attributes in process `syz.1.1502'. [ 373.742622][T11832] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1500'. [ 374.106717][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 374.108807][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 375.146677][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 375.149602][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 375.923817][T11866] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.927246][T11866] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.930126][T11866] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.933007][T11866] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.935474][T11866] vxlan0: entered promiscuous mode [ 375.937077][T11866] vxlan0: entered allmulticast mode [ 375.944276][T11866] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.946708][T11866] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.949037][T11866] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.951334][T11866] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.186680][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 376.189711][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 376.554547][T11872] 7 speed is unknown, defaulting to 1000 [ 376.631067][T11876] 7 speed is unknown, defaulting to 1000 [ 377.169068][T11886] random: crng reseeded on system resumption [ 377.226653][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 377.227270][T11886] 7 speed is unknown, defaulting to 1000 [ 377.228912][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 378.074697][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1516'. [ 378.189235][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.266606][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 378.268731][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 379.087353][T11905] syz.1.1518: page allocation failure: order:0, mode:0x10cc0(GFP_KERNEL|__GFP_NORETRY), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 379.091979][T11905] CPU: 1 UID: 0 PID: 11905 Comm: syz.1.1518 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 379.091994][T11905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 379.092001][T11905] Call Trace: [ 379.092006][T11905] [ 379.092010][T11905] dump_stack_lvl+0x16c/0x1f0 [ 379.092032][T11905] warn_alloc+0x24d/0x3a0 [ 379.092047][T11905] ? __pfx_warn_alloc+0x10/0x10 [ 379.092058][T11905] ? psi_memstall_leave+0x178/0x250 [ 379.092071][T11905] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 379.092085][T11905] ? psi_memstall_leave+0x17d/0x250 [ 379.092097][T11905] __alloc_frozen_pages_noprof+0xf2f/0x2470 [ 379.092115][T11905] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 379.092131][T11905] ? irqentry_exit+0x3b/0x90 [ 379.092147][T11905] ? lockdep_hardirqs_on+0x7c/0x110 [ 379.092163][T11905] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 379.092205][T11905] ? policy_nodemask+0xea/0x4e0 [ 379.092220][T11905] alloc_pages_mpol+0x1fc/0x540 [ 379.092232][T11905] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 379.092244][T11905] ? irqentry_exit+0x3b/0x90 [ 379.092258][T11905] ? lockdep_hardirqs_on+0x7c/0x110 [ 379.092275][T11905] alloc_pages_noprof+0x131/0x390 [ 379.092288][T11905] kimage_alloc_pages+0x75/0x300 [ 379.092326][T11905] kimage_alloc_control_pages+0x148/0x8e0 [ 379.092342][T11905] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 379.092360][T11905] do_kexec_load+0x387/0x8c0 [ 379.092374][T11905] ? __might_fault+0xe3/0x190 [ 379.092410][T11905] ? __pfx_do_kexec_load+0x10/0x10 [ 379.092423][T11905] ? __might_fault+0xe3/0x190 [ 379.092439][T11905] __do_compat_sys_kexec_load+0x2cf/0x330 [ 379.092455][T11905] ? __pfx___do_compat_sys_kexec_load+0x10/0x10 [ 379.092473][T11905] __do_fast_syscall_32+0x73/0x120 [ 379.092484][T11905] do_fast_syscall_32+0x32/0x80 [ 379.092494][T11905] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 379.092510][T11905] RIP: 0023:0xf7f46579 [ 379.092519][T11905] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 379.092529][T11905] RSP: 002b:00000000f502455c EFLAGS: 00000296 ORIG_RAX: 000000000000011b [ 379.092539][T11905] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000003 [ 379.092545][T11905] RDX: 0000000080001080 RSI: 00000000003e0000 RDI: 0000000000000000 [ 379.092551][T11905] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 379.092556][T11905] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 379.092562][T11905] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 379.092573][T11905] [ 379.092577][T11905] Mem-Info: [ 379.174597][T11905] active_anon:5244 inactive_anon:15045 isolated_anon:0 [ 379.174597][T11905] active_file:98 inactive_file:11897 isolated_file:0 [ 379.174597][T11905] unevictable:1787 dirty:265 writeback:0 [ 379.174597][T11905] slab_reclaimable:8140 slab_unreclaimable:60353 [ 379.174597][T11905] mapped:28647 shmem:17718 pagetables:824 [ 379.174597][T11905] sec_pagetables:317 bounce:0 [ 379.174597][T11905] kernel_misc_reclaimable:0 [ 379.174597][T11905] free:26254 free_pcp:1299 free_cma:0 [ 379.187971][T11905] Node 0 active_anon:9220kB inactive_anon:0kB active_file:0kB inactive_file:4028kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:9952kB dirty:0kB writeback:0kB shmem:12548kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9484kB pagetables:972kB sec_pagetables:1156kB all_unreclaimable? yes [ 379.196964][T11905] Node 1 active_anon:11756kB inactive_anon:60180kB active_file:1924kB inactive_file:40604kB unevictable:3612kB isolated(anon):0kB isolated(file):0kB mapped:104236kB dirty:1060kB writeback:0kB shmem:58324kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3644kB pagetables:2324kB sec_pagetables:112kB all_unreclaimable? no [ 379.206190][T11905] Node 0 DMA free:2396kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 379.216823][T11905] lowmem_reserve[]: 0 297 0 0 0 [ 379.218397][T11905] Node 0 DMA32 free:9236kB boost:4096kB min:17768kB low:21184kB high:24600kB reserved_highatomic:2048KB active_anon:11652kB inactive_anon:0kB active_file:0kB inactive_file:4028kB unevictable:3536kB writepending:0kB present:1032196kB managed:305040kB mlocked:0kB bounce:0kB free_pcp:4468kB local_pcp:384kB free_cma:0kB [ 379.226632][T11905] lowmem_reserve[]: 0 0 0 0 0 [ 379.228089][T11905] Node 1 DMA32 free:92400kB boost:34816kB min:81960kB low:93744kB high:105528kB reserved_highatomic:0KB active_anon:11856kB inactive_anon:60180kB active_file:2024kB inactive_file:40404kB unevictable:3612kB writepending:1060kB present:1048432kB managed:948252kB mlocked:76kB bounce:0kB free_pcp:2140kB local_pcp:68kB free_cma:0kB [ 379.236773][T11905] lowmem_reserve[]: 0 0 0 0 0 [ 379.238367][T11905] Node 0 DMA: 62*4kB (U) 37*8kB (U) 12*16kB (U) 22*32kB (U) 5*64kB (U) 5*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2400kB [ 379.242975][T11905] Node 0 DMA32: 7*4kB (E) 11*8kB (UEH) 83*16kB (UEH) 65*32kB (UE) 28*64kB (UEH) 8*128kB (UME) 1*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 7108kB [ 379.248187][T11905] Node 1 DMA32: 817*4kB (UME) 643*8kB (UME) 380*16kB (UME) 322*32kB (UME) 375*64kB (UME) 73*128kB (UME) 30*256kB (UME) 24*512kB (UME) 14*1024kB (UM) 0*2048kB 0*4096kB = 92444kB [ 379.257637][T11905] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 379.262484][T11905] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 379.267763][T11905] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 379.279131][T11905] Node 1 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 379.282236][T11905] 32101 total pagecache pages [ 379.289397][T11905] 110 pages in swap cache [ 379.290839][T11905] Free swap = 120272kB [ 379.292167][T11905] Total swap = 124996kB [ 379.293629][T11905] 524155 pages RAM [ 379.295219][T11905] 0 pages HighMem/MovableOnly [ 379.301256][T11905] 206992 pages reserved [ 379.302637][T11905] 0 pages cma reserved [ 379.316597][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 379.318700][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 379.902418][T11923] Invalid source name [ 379.903697][T11923] UBIFS error (pid: 11923): cannot open "./file0", error -22 [ 380.121535][T11928] 7 speed is unknown, defaulting to 1000 [ 380.251078][T11905] kexec: Could not allocate control_code_buffer [ 380.356729][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 380.359581][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 380.527829][T11935] IPVS: Error connecting to the multicast addr [ 381.328505][T11940] 7 speed is unknown, defaulting to 1000 [ 381.386607][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 381.388703][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 382.426640][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 382.429376][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 382.984160][T11970] netlink: 'syz.1.1534': attribute type 27 has an invalid length. [ 382.988387][T11970] lo: left promiscuous mode [ 382.990583][T11970] tunl0: left promiscuous mode [ 382.992549][T11970] gre0: left promiscuous mode [ 382.995798][T11970] gretap0: left promiscuous mode [ 382.999146][T11970] erspan0: left promiscuous mode [ 383.001567][T11970] ip_vti0: left promiscuous mode [ 383.004132][T11970] ip6_vti0: left promiscuous mode [ 383.007064][T11970] sit0: left promiscuous mode [ 383.007554][T11968] syz.3.1532: attempt to access beyond end of device [ 383.007554][T11968] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 383.010334][T11970] ip6tnl0: left promiscuous mode [ 383.014386][T11970] ip6gre0: left promiscuous mode [ 383.026705][T11970] ip6gretap0: left promiscuous mode [ 383.029239][T11970] vcan0: left promiscuous mode [ 383.376202][T11970] bond0: left promiscuous mode [ 383.380425][T11970] dummy0: left promiscuous mode [ 383.385822][T11970] nlmon0: left promiscuous mode [ 383.388013][T11970] caif0: left promiscuous mode [ 383.391481][T11970] vlan0: left promiscuous mode [ 383.394042][T11970] ipvlan1: left allmulticast mode [ 383.395514][T11970] veth0_vlan: left allmulticast mode [ 383.400120][T11970] bond2: left promiscuous mode [ 383.401676][T11970] bond2: left allmulticast mode [ 383.404363][T11968] XFS (nbd3): SB validate failed with error -5. [ 383.467201][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 383.470048][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 383.619242][T11989] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1536'. [ 384.516705][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 384.519744][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 385.546619][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 385.549213][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 385.863830][T12032] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1548'. [ 386.586598][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 386.588651][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 386.723480][T12047] netlink: 'syz.2.1551': attribute type 9 has an invalid length. [ 387.636599][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 387.638839][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 387.681970][T12056] 7 speed is unknown, defaulting to 1000 [ 388.666659][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 388.668839][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 388.799514][T12081] 7 speed is unknown, defaulting to 1000 [ 389.331953][T12089] netlink: 'syz.2.1562': attribute type 12 has an invalid length. [ 389.535103][T12093] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1563'. [ 389.706677][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 389.708704][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 389.810235][ T5954] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 389.977837][T12104] 7 speed is unknown, defaulting to 1000 [ 390.256649][T12109] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1567'. [ 390.756598][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 390.758666][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 391.030375][T12122] 7 speed is unknown, defaulting to 1000 [ 391.367380][T12135] 7 speed is unknown, defaulting to 1000 [ 391.431508][T12138] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1574'. [ 391.786817][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 391.788958][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 392.367212][T12155] 7 speed is unknown, defaulting to 1000 [ 392.434506][T12158] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1578'. [ 392.826636][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 392.829519][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 392.975260][T12163] 7 speed is unknown, defaulting to 1000 [ 393.123576][T12172] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1581'. [ 393.401087][T12179] 7 speed is unknown, defaulting to 1000 [ 393.767259][T12188] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1586'. [ 393.866640][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 393.868706][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 394.493893][T12191] 7 speed is unknown, defaulting to 1000 [ 394.583594][ T39] audit: type=1326 audit(1739930137.280:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12195 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 394.592357][ T39] audit: type=1326 audit(1739930137.280:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12195 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 394.601023][ T39] audit: type=1326 audit(1739930137.290:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12195 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 394.609755][ T39] audit: type=1326 audit(1739930137.290:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12195 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 394.615725][ T39] audit: type=1326 audit(1739930137.290:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12195 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 394.622219][ T39] audit: type=1326 audit(1739930137.290:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12195 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 394.630714][ T39] audit: type=1326 audit(1739930137.290:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12195 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 394.637036][ T39] audit: type=1326 audit(1739930137.290:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12195 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf745e5a7 code=0x7ffc0000 [ 394.643834][ T39] audit: type=1326 audit(1739930137.290:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12195 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 394.652281][ T39] audit: type=1326 audit(1739930137.290:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12195 comm="syz.2.1589" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf745e5a7 code=0x7ffc0000 [ 394.906674][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 394.908847][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 395.422172][T12209] random: crng reseeded on system resumption [ 395.534299][T12209] 7 speed is unknown, defaulting to 1000 [ 395.956717][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 395.958889][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 396.986791][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 396.989451][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 397.963901][T12252] tipc: Enabling of bearer rejected, already enabled [ 398.026894][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 398.029761][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 399.076604][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 399.078938][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 399.589950][T12281] netlink: 'syz.2.1611': attribute type 20 has an invalid length. [ 400.106678][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 400.109512][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 400.197921][T12294] 7 speed is unknown, defaulting to 1000 [ 400.236650][ T72] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 400.396647][ T72] usb 5-1: Using ep0 maxpacket: 8 [ 400.399825][ T72] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 400.403573][ T72] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 400.407449][ T72] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 400.411093][ T72] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 400.415630][ T72] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 400.419135][ T72] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.712305][T12305] 7 speed is unknown, defaulting to 1000 [ 400.970511][T12320] netlink: 'syz.3.1618': attribute type 4 has an invalid length. [ 401.146612][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 401.148659][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 401.522127][ T39] kauditd_printk_skb: 4203 callbacks suppressed [ 401.522145][ T39] audit: type=1326 audit(1739930144.220:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12328 comm="syz.2.1621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 401.533629][ T39] audit: type=1326 audit(1739930144.220:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12328 comm="syz.2.1621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 401.542832][ T39] audit: type=1326 audit(1739930144.230:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12328 comm="syz.2.1621" exe="/syz-executor" sig=0 arch=40000003 syscall=81 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 401.549573][ T39] audit: type=1326 audit(1739930144.230:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12328 comm="syz.2.1621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 401.555533][ T39] audit: type=1326 audit(1739930144.230:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12328 comm="syz.2.1621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 401.562635][ T39] audit: type=1326 audit(1739930144.230:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12328 comm="syz.2.1621" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 401.570116][ T39] audit: type=1326 audit(1739930144.230:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12328 comm="syz.2.1621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 401.576140][ T39] audit: type=1326 audit(1739930144.230:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12328 comm="syz.2.1621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 401.582608][ T39] audit: type=1326 audit(1739930144.230:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12328 comm="syz.2.1621" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 401.588745][ T39] audit: type=1326 audit(1739930144.230:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12328 comm="syz.2.1621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 401.862116][T12333] 7 speed is unknown, defaulting to 1000 [ 402.186646][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 402.188742][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 403.023363][ T72] usb 5-1: usb_control_msg returned -71 [ 403.025065][ T72] usbtmc 5-1:16.0: can't read capabilities [ 403.036397][ T72] usb 5-1: USB disconnect, device number 6 [ 403.236593][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 403.236674][ T5986] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 403.239157][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 403.386933][ T5986] usb 8-1: Using ep0 maxpacket: 8 [ 403.389687][ T5986] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 403.392093][ T5986] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 403.394884][ T5986] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 403.398177][ T5986] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 403.400989][ T5986] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.404590][ T5986] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 403.407246][ T5986] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.624547][ T5986] usb 8-1: usb_control_msg returned -32 [ 403.626182][ T5986] usbtmc 8-1:16.0: can't read capabilities [ 404.276702][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 404.279529][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 404.654111][T12382] netlink: 'syz.1.1637': attribute type 12 has an invalid length. [ 405.316588][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 405.318471][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 406.342189][ T5986] usb 8-1: USB disconnect, device number 9 [ 406.347126][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 406.350130][ C2] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 406.356947][T12376] page: refcount:3 mapcount:1 mapping:ffff88806e2dc4f0 index:0x0 pfn:0x56279 [ 406.361720][T12376] memcg:ffff88806a662000 [ 406.362925][T12376] aops:shmem_aops ino:57 [ 406.364160][T12376] flags: 0x4fff5000002002d(locked|referenced|uptodate|lru|swapbacked|node=1|zone=1|lastcpupid=0x7ff) [ 406.367081][T12376] raw: 04fff5000002002d ffffea0001cbbac8 ffffea0001547308 ffff88806e2dc4f0 [ 406.369929][T12376] raw: 0000000000000000 0000000000000000 0000000300000000 ffff88806a662000 [ 406.372939][T12376] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 406.375189][T12376] page_owner tracks the page as allocated [ 406.377926][T12376] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 12373, tgid 12357 (syz.3.1631), ts 403986061128, free_ts 403985851758 [ 406.382819][T12376] post_alloc_hook+0x181/0x1b0 [ 406.384163][T12376] get_page_from_freelist+0xfce/0x2f80 [ 406.385668][T12376] __alloc_frozen_pages_noprof+0x221/0x2470 [ 406.387310][T12376] alloc_pages_mpol+0x1fc/0x540 [ 406.388680][T12376] folio_alloc_mpol_noprof+0x36/0x2f0 [ 406.390194][T12376] shmem_alloc_folio+0x135/0x160 [ 406.391631][T12376] shmem_alloc_and_add_folio+0x48e/0xc10 [ 406.393193][T12376] shmem_get_folio_gfp+0x689/0x1530 [ 406.394648][T12376] shmem_fault+0x200/0xae0 [ 406.395913][T12376] __do_fault+0x10a/0x490 [ 406.397118][T12376] do_pte_missing+0xecf/0x3e10 [ 406.398440][T12376] __handle_mm_fault+0x1166/0x2c60 [ 406.399941][T12376] handle_mm_fault+0x3fa/0xaa0 [ 406.401282][T12376] __get_user_pages+0x773/0x36f0 [ 406.402663][T12376] populate_vma_page_range+0x27f/0x3a0 [ 406.404162][T12376] __mm_populate+0x1d6/0x380 [ 406.405447][T12376] page last free pid 12373 tgid 12357 stack trace: [ 406.407219][T12376] free_unref_folios+0xa7b/0x1500 [ 406.408644][T12376] folios_put_refs+0x587/0x7b0 [ 406.410045][T12376] free_pages_and_swap_cache+0x443/0x500 [ 406.411623][T12376] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 406.413288][T12376] tlb_finish_mmu+0x168/0x7b0 [ 406.414596][T12376] vms_clear_ptes+0x560/0x770 [ 406.415925][T12376] __mmap_region+0x4de/0x2760 [ 406.417240][T12376] mmap_region+0x1ab/0x3f0 [ 406.418483][T12376] do_mmap+0xd8d/0x11b0 [ 406.419655][T12376] vm_mmap_pgoff+0x203/0x3a0 [ 406.421105][T12376] ksys_mmap_pgoff+0x7d/0x5c0 [ 406.422955][T12376] __do_fast_syscall_32+0x73/0x120 [ 406.424782][T12376] do_fast_syscall_32+0x32/0x80 [ 406.426494][T12376] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 406.428942][T12376] ------------[ cut here ]------------ [ 406.431017][T12376] kernel BUG at mm/filemap.c:154! [ 406.432972][T12376] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 406.436450][T12376] CPU: 2 UID: 0 PID: 12376 Comm: syz.3.1631 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 406.441567][T12376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 406.445284][T12376] RIP: 0010:filemap_unaccount_folio+0xef/0x860 [ 406.447628][T12376] Code: b7 2b ca ff 4c 8d 6b 30 31 ff 89 ee e8 aa 26 ca ff 85 ed 7e 17 e8 a1 2b ca ff 48 c7 c6 a0 79 78 8b 48 89 df e8 d2 71 11 00 90 <0f> 0b e8 8a 2b ca ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 406.454343][T12376] RSP: 0018:ffffc90002faf3a0 EFLAGS: 00010093 [ 406.456603][T12376] RAX: 0000000000000000 RBX: ffffea0001589e40 RCX: ffffc90002faf248 [ 406.459634][T12376] RDX: ffff8880258ac880 RSI: ffffffff81eec2fe RDI: ffff8880258accc4 [ 406.462653][T12376] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20bfd42 [ 406.465596][T12376] R10: ffffffff905fea17 R11: 0000000000000003 R12: ffff88806e2dc4f0 [ 406.468835][T12376] R13: ffffea0001589e70 R14: 0000000000000000 R15: ffffc90002faf608 [ 406.471630][T12376] FS: 0000000000000000(0000) GS:ffff88802b600000(0000) knlGS:0000000000000000 [ 406.474229][T12376] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 406.476248][T12376] CR2: 000000000c2a04cb CR3: 000000004f792000 CR4: 0000000000352ef0 [ 406.478551][T12376] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 406.481019][T12376] DR3: 00000000fee0000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 406.483347][T12376] Call Trace: [ 406.484287][T12376] [ 406.485155][T12376] ? die+0x31/0x80 [ 406.486242][T12376] ? do_trap+0x232/0x430 [ 406.487433][T12376] ? filemap_unaccount_folio+0xef/0x860 [ 406.488967][T12376] ? filemap_unaccount_folio+0xef/0x860 [ 406.490584][T12376] ? do_error_trap+0xf4/0x230 [ 406.491949][T12376] ? filemap_unaccount_folio+0xef/0x860 [ 406.493427][T12376] ? handle_invalid_op+0x34/0x40 [ 406.495230][T12376] ? filemap_unaccount_folio+0xef/0x860 [ 406.496976][T12376] ? exc_invalid_op+0x2e/0x50 [ 406.498393][T12376] ? asm_exc_invalid_op+0x1a/0x20 [ 406.499882][T12376] ? filemap_unaccount_folio+0xee/0x860 [ 406.501484][T12376] ? filemap_unaccount_folio+0xef/0x860 [ 406.503169][T12376] filemap_remove_folio+0xf1/0x250 [ 406.504691][T12376] truncate_inode_folio+0x49/0x70 [ 406.506094][T12376] shmem_undo_range+0x36e/0x1170 [ 406.507487][T12376] ? __pfx_shmem_undo_range+0x10/0x10 [ 406.509004][T12376] ? __pfx___lock_acquire+0x10/0x10 [ 406.510494][T12376] ? mark_lock+0xb5/0xc60 [ 406.511779][T12376] ? hlock_class+0x4e/0x130 [ 406.513057][T12376] ? mark_lock+0xb5/0xc60 [ 406.514269][T12376] ? __pfx___lock_acquire+0x10/0x10 [ 406.515731][T12376] ? hlock_class+0x4e/0x130 [ 406.517006][T12376] ? percpu_counter_add_batch+0xb5/0x1e0 [ 406.518623][T12376] shmem_evict_inode+0x3a3/0xba0 [ 406.520066][T12376] ? find_held_lock+0x2d/0x110 [ 406.521447][T12376] ? __pfx_shmem_evict_inode+0x10/0x10 [ 406.522965][T12376] ? evict+0x3c8/0x960 [ 406.524172][T12376] ? __pfx_lock_release+0x10/0x10 [ 406.525576][T12376] ? lock_acquire+0x2f/0xb0 [ 406.526851][T12376] ? __pfx_shmem_evict_inode+0x10/0x10 [ 406.528369][T12376] evict+0x409/0x960 [ 406.529481][T12376] ? __pfx_evict+0x10/0x10 [ 406.530773][T12376] iput+0x52a/0x890 [ 406.532016][T12376] ? __pfx_generic_delete_inode+0x10/0x10 [ 406.533584][T12376] dentry_unlink_inode+0x29c/0x480 [ 406.535019][T12376] __dentry_kill+0x1d0/0x600 [ 406.536322][T12376] dput.part.0+0x4b1/0x9b0 [ 406.537565][T12376] dput+0x1f/0x30 [ 406.538590][T12376] __fput+0x51c/0xb70 [ 406.539725][T12376] task_work_run+0x14e/0x250 [ 406.541087][T12376] ? __pfx_task_work_run+0x10/0x10 [ 406.542555][T12376] ? do_raw_spin_unlock+0x172/0x230 [ 406.544016][T12376] do_exit+0xad8/0x2d70 [ 406.545210][T12376] ? get_signal+0x8f7/0x2610 [ 406.546511][T12376] ? __pfx_do_exit+0x10/0x10 [ 406.547834][T12376] ? do_raw_spin_lock+0x12d/0x2c0 [ 406.549246][T12376] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 406.550797][T12376] do_group_exit+0xd3/0x2a0 [ 406.552158][T12376] get_signal+0x2576/0x2610 [ 406.553422][T12376] ? __pfx_get_signal+0x10/0x10 [ 406.554830][T12376] ? __pfx_do_futex+0x10/0x10 [ 406.556138][T12376] arch_do_signal_or_restart+0x90/0x7e0 [ 406.557669][T12376] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 406.559381][T12376] ? rcu_is_watching+0x12/0xc0 [ 406.560758][T12376] syscall_exit_to_user_mode+0x150/0x2a0 [ 406.562315][T12376] __do_fast_syscall_32+0x80/0x120 [ 406.563703][T12376] do_fast_syscall_32+0x32/0x80 [ 406.565057][T12376] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 406.566978][T12376] RIP: 0023:0xf73ee579 [ 406.568234][T12376] Code: Unable to access opcode bytes at 0xf73ee54f. [ 406.570100][T12376] RSP: 002b:00000000f500160c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 406.572517][T12376] RAX: fffffffffffffe00 RBX: 00000000f74150a8 RCX: 0000000000000080 [ 406.574687][T12376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74150ac [ 406.576871][T12376] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 406.579110][T12376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.581374][T12376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 406.583560][T12376] [ 406.584446][T12376] Modules linked in: [ 406.585551][T12376] ---[ end trace 0000000000000000 ]--- [ 406.587057][T12376] RIP: 0010:filemap_unaccount_folio+0xef/0x860 [ 406.588771][T12376] Code: b7 2b ca ff 4c 8d 6b 30 31 ff 89 ee e8 aa 26 ca ff 85 ed 7e 17 e8 a1 2b ca ff 48 c7 c6 a0 79 78 8b 48 89 df e8 d2 71 11 00 90 <0f> 0b e8 8a 2b ca ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 406.594055][T12376] RSP: 0018:ffffc90002faf3a0 EFLAGS: 00010093 [ 406.595775][T12376] RAX: 0000000000000000 RBX: ffffea0001589e40 RCX: ffffc90002faf248 [ 406.597941][T12376] RDX: ffff8880258ac880 RSI: ffffffff81eec2fe RDI: ffff8880258accc4 [ 406.600174][T12376] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20bfd42 [ 406.602369][T12376] R10: ffffffff905fea17 R11: 0000000000000003 R12: ffff88806e2dc4f0 [ 406.604566][T12376] R13: ffffea0001589e70 R14: 0000000000000000 R15: ffffc90002faf608 [ 406.606730][T12376] FS: 0000000000000000(0000) GS:ffff88802b600000(0000) knlGS:0000000000000000 [ 406.609366][T12376] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 406.611322][T12376] CR2: 000000000c2a04cb CR3: 000000004f792000 CR4: 0000000000352ef0 [ 406.613537][T12376] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 406.615731][T12376] DR3: 00000000fee0000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 406.617971][T12376] Kernel panic - not syncing: Fatal exception [ 407.681240][T12376] Shutting down cpus with NMI [ 407.683351][T12376] Kernel Offset: disabled [ 407.684581][T12376] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:09:09 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff90601d14 RCX=ffffffff81943612 RDX=1ffff110056a5150 RSI=ffffffff8bd2d660 RDI=ffffffff81943612 RBP=ffff88802b528a80 RSP=ffffc9000309f540 R8 =0000000000000000 R9 =fffffbfff20bfd42 R10=ffffffff905fea17 R11=ffff88802b53f618 R12=0000000000000004 R13=0000000000000004 R14=dffffc0000000000 R15=ffffffff8e0a8f80 RIP=ffffffff8192e7f3 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2e7677 CR3=0000000077440000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000fee0000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000fff Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 faccb72e9be9cb95 cd0b369404907b17 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9b702d9e28823678 477a9327f15c9911 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c97b480651aa423a 1813fe8646b5f1a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 108e26f248c4e3fb 3000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c200000000000000 0000000000000001 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001020304050607 08090a0b0c0d0e0f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cda419f600000000 0000021700000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8f5b0caf95e29f52 b5318c05dc429ce1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a69b7d80b612c0f 36fd52ff68568ecc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 45a611187c950d8b ecb7d19d15bb3f62 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ba23f9e118554f10 566d2717e10842a2 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cda419f600000000 0000021700000008 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8779fc74e77d77ee c37ed04c7b3ddee3 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d51d6d828f7c7c0 5462ca4bb8d51bd6 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a69b7d80b612c0f 36fd52ff68568ecc ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c200000000000000 0000000000000001 c200000000000000 0000000000000001 info registers vcpu 1 CPU#1 RAX=0000000000080000 RBX=ffff888071f95380 RCX=ffffc9000c001000 RDX=0000000000080000 RSI=ffffffff8922d240 RDI=ffff888071f95380 RBP=0000000000000246 RSP=ffffc90002fff6f8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff888071f95368 R13=0000000000000000 R14=ffff888071f95368 R15=ffffc90002fff898 RIP=ffffffff8b493abb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000ae8 CR3=000000004f792000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85388475 RDI=ffffffff9aad4e20 RBP=ffffffff9aad4de0 RSP=ffffc90002faece0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7973203a6d6d6f43 R12=0000000000000000 R13=000000000000002e R14=ffffffff9aad4de0 R15=0000000000000000 RIP=ffffffff8538849f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2a04cb CR3=000000004f792000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000fee0000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffff88804ef32a50 RCX=ffffffff81f25856 RDX=1ffff11009de654f RSI=ffffffff81fb6da0 RDI=ffff88804ef32a78 RBP=ffff88804ef32c70 RSP=ffffc900005f8ac0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=ffffc900005f8ff8 R12=00000000ffffffff R13=0000000000000001 R14=ffffffffffffffff R15=0000000000000000 RIP=ffffffff81fb6db9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055fbf0527f38 CR3=000000004f792000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000000c400 Opmask01=0000000000000000 Opmask02=000000000000ffdf Opmask03=0800002008080010 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fbf0511330 000055fbf0519a70 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e9f372d953606b27 7373268ddc8395d1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312d382f38627375 2f332e6463685f79 6d6d75642f6d726f 6674616c702f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000312d 382f386273752f33 2e6463685f796d6d 75642f6d726f6674 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000004d 4554535953425553 0000000000000021 0000000000302e36 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000004d 4554535953425553 0000000000000021 6439300030326c6c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a263b383a3a263a 383a3a26493b3a3a 26483b3a3a264b3b 3a0a00307f617930 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000