last executing test programs: 19.904261611s ago: executing program 1 (id=1233): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') socket(0x25, 0x5, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffffc, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) 19.006990549s ago: executing program 1 (id=1237): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) ioperm(0x0, 0x2, 0x7e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), 0x0}, 0x20) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 18.896508933s ago: executing program 2 (id=1238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) 18.805612336s ago: executing program 1 (id=1239): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) unshare(0x28000600) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x40000000002) syz_emit_ethernet(0x8a, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x0, 0x8, 0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_open_dev$rtc(&(0x7f0000000180), 0xc62, 0x80080) ioctl$RTC_ALM_SET(r3, 0x40247007, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000015280), 0x101, 0x0) geteuid() openat$urandom(0xffffffffffffff9c, 0x0, 0x206441, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000240)) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DISCONNECT(r1, 0xab08) connect$rxrpc(r0, 0x0, 0x0) 18.448558347s ago: executing program 3 (id=1241): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0a070910"], 0xd) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x1) 18.448331024s ago: executing program 3 (id=1242): ioperm(0x284, 0x7f, 0xe3) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x1ad72f7) 18.431450931s ago: executing program 3 (id=1244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x607b, 0x0, 0x4, 0x288}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r4, 0x1ad72f7) accept4$netrom(r4, 0x0, 0x0, 0x80800) 17.95650672s ago: executing program 2 (id=1245): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x81802, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f0005040000000000"], 0x114}], 0x1}, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000300)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, r1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50, 0x0, r3, {0x7, 0x29, 0xfffffffe, 0x0, 0x21, 0x0, 0x4, 0x8}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2000, 0x7, r4, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17.856734762s ago: executing program 2 (id=1246): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x1d, 0x2, 0x6) gettid() timer_create(0x0, 0x0, 0x0) close(r2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 17.696674036s ago: executing program 2 (id=1247): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) socket(0x1, 0x801, 0x78) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r2, &(0x7f0000000500), 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f00000005c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f000001f840)=[{&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb", 0xe}, {0x0}], 0x2}}], 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0) 17.613811664s ago: executing program 1 (id=1248): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) preadv(r1, &(0x7f0000000b00), 0x0, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) unshare(0x22020600) sendto$inet6(r0, &(0x7f0000000300)="f51d1352d711b7917b012dd3cc1ce21afa2135c24a24a148ece1a4bffa65eded602f9423283225f45e2ca3c687a1d9cac38b6f9e1b2265", 0x37, 0x24004800, &(0x7f0000000080)={0xa, 0x4e21, 0x9, @remote, 0x5}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={0x3, 0xf}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) 17.526556692s ago: executing program 3 (id=1249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioperm(0x0, 0xf1, 0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x9c}}, 0x0) 17.377694774s ago: executing program 0 (id=1250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) close_range(r2, r3, 0x0) 17.026700918s ago: executing program 0 (id=1251): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="2ce9", 0x2}, {0x0}], 0x2, 0x0, 0x0, 0x4000}, 0xc841) sendto$unix(r1, &(0x7f0000000600)="c569ed3f1f207e37a41670461cb991bde9a6888571c4cf752fefd3607634e97c95c0ce2253a7d9322c7e510fe3eae9a6737a04e5253e90a4eb00b56b6f5498211454d0547d5708a19372841a3f00000000a44c9b922880a532", 0x59, 0x0, 0x0, 0x0) 16.936838594s ago: executing program 0 (id=1252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060108000000000000000001faff0912000300686173683a6e65742c706f7274000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d3080006"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 16.936618313s ago: executing program 0 (id=1253): r0 = getpid() mkdir(&(0x7f0000000100)='./control\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$pid(0x3, r0, 0x6000) 16.613230412s ago: executing program 3 (id=1254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udplite(0xa, 0x2, 0x88) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') read$FUSE(r3, 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x6, 0x18902404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) 16.456628131s ago: executing program 2 (id=1255): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@mpls_newroute={0x144, 0x18, 0x10, 0x70bd28, 0x25dfdbfe, {0x1c, 0x80, 0x0, 0xf6, 0x0, 0x4, 0x0, 0x0, 0x800}, [@RTA_DST={0x8, 0x1, {0xe, 0x0, 0x1}}, @RTA_NEWDST={0x84, 0x13, [{0x3}, {0x9}, {0x7, 0x0, 0x1}, {0x9}, {0x400}, {}, {0xe8}, {0x2}, {0x5, 0x0, 0x1}, {0x75e}, {0x0, 0x0, 0x1}, {0x3}, {0x2, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0xffff9, 0x0, 0x1}, {0x9}, {0x1, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x19c}, {0x9}, {0x7, 0x0, 0x1}, {0x400}, {0xac08b}, {0x1f1c, 0x0, 0x1}, {0x1}, {0x8}, {0x2, 0x0, 0x1}, {0x401, 0x0, 0x1}, {0xff}, {0x8, 0x0, 0x1}, {0x40000}, {0x3ff}]}, @RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_OIF={0x8}, @RTA_NEWDST={0x84, 0x13, [{0x2, 0x0, 0x1}, {0xf8001, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0x36, 0x0, 0x1}, {0x2159}, {}, {0xd}, {0x6, 0x0, 0x1}, {0x717, 0x0, 0x1}, {0x5}, {0x8, 0x0, 0x1}, {0x800}, {0x800}, {0x6, 0x0, 0x1}, {0x95c1, 0x0, 0x1}, {0x9}, {0x92, 0x0, 0x1}, {0x100}, {0x9}, {0x7ff}, {0x8, 0x0, 0x1}, {0xfffff, 0x0, 0x1}, {0xfff}, {0x2, 0x0, 0x1}, {0x1}, {0x401, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3d8, 0x0, 0x1}, {0x8}, {0x4, 0x0, 0x1}, {0x1, 0x0, 0x1}]}]}, 0x144}}, 0x0) getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) socket(0x1e, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 16.256893782s ago: executing program 1 (id=1256): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x240080c1) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'hsr0\x00'}}, 0x1e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000001dc0), 0x213, 0x0) 16.146841298s ago: executing program 2 (id=1257): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 15.976639952s ago: executing program 0 (id=1258): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 15.610874031s ago: executing program 1 (id=1259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 15.610488227s ago: executing program 0 (id=1260): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) 15.61032873s ago: executing program 3 (id=1261): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) 1.095438677s ago: executing program 32 (id=1257): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 86.327196ms ago: executing program 33 (id=1260): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) 40.462487ms ago: executing program 34 (id=1259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 0s ago: executing program 35 (id=1261): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) kernel console output (not intermixed with test programs): 7017] netlink_rcv_skb+0x347/0x440 [ 101.137648][ T7017] ? __pfx_genl_rcv_msg+0x10/0x10 [ 101.137660][ T7017] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 101.137677][ T7017] ? __pfx_down_read+0x10/0x10 [ 101.137690][ T7017] ? netlink_deliver_tap+0x1ae/0xd30 [ 101.137701][ T7017] genl_rcv+0x28/0x40 [ 101.137710][ T7017] netlink_unicast+0x53a/0x7f0 [ 101.137722][ T7017] ? __pfx_netlink_unicast+0x10/0x10 [ 101.137735][ T7017] netlink_sendmsg+0x8d1/0xdd0 [ 101.137747][ T7017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.137758][ T7017] ? __import_iovec+0x1c8/0x660 [ 101.137775][ T7017] ____sys_sendmsg+0xa95/0xc70 [ 101.137788][ T7017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.137799][ T7017] ? get_compat_msghdr+0x11a/0x170 [ 101.137820][ T7017] ___sys_sendmsg+0x134/0x1d0 [ 101.137830][ T7017] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.137854][ T7017] __sys_sendmsg+0x16d/0x220 [ 101.137863][ T7017] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.137878][ T7017] ? rcu_is_watching+0x12/0xc0 [ 101.137889][ T7017] __do_fast_syscall_32+0x73/0x120 [ 101.137901][ T7017] do_fast_syscall_32+0x32/0x80 [ 101.137913][ T7017] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.137925][ T7017] RIP: 0023:0xf7fb4579 [ 101.137932][ T7017] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 101.137941][ T7017] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 101.137951][ T7017] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 101.137957][ T7017] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.137962][ T7017] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.137967][ T7017] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 101.137972][ T7017] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.137984][ T7017] [ 101.250269][ T7015] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.286480][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 101.321362][ T7015] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.337286][ T7028] fuse: Unknown parameter 'ro00000' [ 101.381448][ T7015] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.470009][ T7015] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.477038][ T7015] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.483785][ T7015] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.489989][ T7015] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.316482][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 102.341986][ T7053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.268'. [ 102.377824][ T7048] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.680621][ T7048] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.752821][ T7048] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.809943][ T7048] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.919335][ T40] audit: type=1326 audit(1745826350.570:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7063 comm="syz.1.273" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 102.931052][ T7048] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.939378][ T7048] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.947693][ T7048] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.956023][ T7048] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.357177][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 103.683151][ T7077] syz.3.276: vmalloc error: size 4096, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 103.690020][ T7077] CPU: 3 UID: 0 PID: 7077 Comm: syz.3.276 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 103.690040][ T7077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.690050][ T7077] Call Trace: [ 103.690056][ T7077] [ 103.690062][ T7077] dump_stack_lvl+0x16c/0x1f0 [ 103.690086][ T7077] warn_alloc+0x248/0x3a0 [ 103.690106][ T7077] ? __pfx_warn_alloc+0x10/0x10 [ 103.690124][ T7077] ? alloc_pages_mpol+0x25a/0x550 [ 103.690144][ T7077] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 103.690164][ T7077] ? trace_kmalloc+0x2b/0xd0 [ 103.690192][ T7077] __vmalloc_node_range_noprof+0x12d2/0x1540 [ 103.690226][ T7077] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 103.690248][ T7077] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 103.690277][ T7077] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 103.690292][ T7077] vmalloc_user_noprof+0x6b/0x90 [ 103.690314][ T7077] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 103.690329][ T7077] vb2_vmalloc_alloc+0x135/0x3f0 [ 103.690344][ T7077] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 103.690368][ T7077] __vb2_queue_alloc+0x8c6/0x1280 [ 103.690405][ T7077] vb2_core_reqbufs+0xa90/0xfe0 [ 103.690444][ T7077] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 103.690481][ T7077] __vb2_init_fileio+0x3f1/0x1100 [ 103.690503][ T7077] ? __mutex_lock+0x1ca/0xb90 [ 103.690524][ T7077] ? vb2_fop_read+0xe6/0x3e0 [ 103.690547][ T7077] __vb2_perform_fileio+0x9c2/0x1660 [ 103.690568][ T7077] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 103.690583][ T7077] ? get_pid_task+0xfc/0x250 [ 103.690629][ T7077] vb2_fop_read+0x215/0x3e0 [ 103.690656][ T7077] v4l2_read+0x226/0x360 [ 103.690674][ T7077] ? __pfx_v4l2_read+0x10/0x10 [ 103.690692][ T7077] vfs_read+0x1de/0xc70 [ 103.690712][ T7077] ? __pfx_vfs_read+0x10/0x10 [ 103.690724][ T7077] ? find_held_lock+0x2b/0x80 [ 103.690739][ T7077] ? __fget_files+0x204/0x3c0 [ 103.690766][ T7077] ? __fget_files+0x20e/0x3c0 [ 103.690787][ T7077] ? __fget_files+0x150/0x3c0 [ 103.690816][ T7077] ksys_pread64+0x16e/0x1a0 [ 103.690832][ T7077] ? __pfx_ksys_pread64+0x10/0x10 [ 103.690849][ T7077] ? rcu_is_watching+0x12/0xc0 [ 103.690867][ T7077] __do_fast_syscall_32+0x73/0x120 [ 103.690889][ T7077] do_fast_syscall_32+0x32/0x80 [ 103.690907][ T7077] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.690927][ T7077] RIP: 0023:0xf711e579 [ 103.690940][ T7077] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 103.690954][ T7077] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 00000000000000b4 [ 103.690969][ T7077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 103.690978][ T7077] RDX: 000000000000002e RSI: 0000000000000081 RDI: 0000000000000000 [ 103.690987][ T7077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.690995][ T7077] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 103.691004][ T7077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.691025][ T7077] [ 103.691072][ T7077] Mem-Info: [ 103.800498][ T7077] active_anon:9375 inactive_anon:0 isolated_anon:0 [ 103.800498][ T7077] active_file:11470 inactive_file:38185 isolated_file:0 [ 103.800498][ T7077] unevictable:1768 dirty:729 writeback:0 [ 103.800498][ T7077] slab_reclaimable:9914 slab_unreclaimable:55879 [ 103.800498][ T7077] mapped:29001 shmem:5929 pagetables:811 [ 103.800498][ T7077] sec_pagetables:297 bounce:0 [ 103.800498][ T7077] kernel_misc_reclaimable:0 [ 103.800498][ T7077] free:50123 free_pcp:2457 free_cma:0 [ 103.814444][ T7077] Node 0 active_anon:2972kB inactive_anon:0kB active_file:564kB inactive_file:10836kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5060kB dirty:0kB writeback:0kB shmem:4240kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9208kB pagetables:812kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB [ 103.834805][ T7077] Node 1 active_anon:30728kB inactive_anon:0kB active_file:45316kB inactive_file:141904kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98144kB dirty:2916kB writeback:0kB shmem:15776kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2832kB pagetables:2432kB sec_pagetables:80kB all_unreclaimable? no Balloon:0kB [ 103.845013][ T7077] Node 0 DMA free:2940kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:144kB local_pcp:96kB free_cma:0kB [ 103.855404][ T7077] lowmem_reserve[]: 0 293 293 293 293 [ 103.857810][ T7077] Node 0 DMA32 free:24804kB boost:6144kB min:19592kB low:22952kB high:26312kB reserved_highatomic:4096KB active_anon:2972kB inactive_anon:0kB active_file:564kB inactive_file:10832kB unevictable:3536kB writepending:0kB present:1032196kB managed:300272kB mlocked:0kB bounce:0kB free_pcp:736kB local_pcp:88kB free_cma:0kB [ 103.871057][ T7077] lowmem_reserve[]: 0 0 0 0 0 [ 103.873350][ T7077] Node 1 DMA32 free:171524kB boost:0kB min:47148kB low:58932kB high:70716kB reserved_highatomic:0KB active_anon:30428kB inactive_anon:0kB active_file:45316kB inactive_file:141904kB unevictable:3536kB writepending:2916kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:15120kB local_pcp:1776kB free_cma:0kB [ 103.874973][ T7083] FAULT_INJECTION: forcing a failure. [ 103.874973][ T7083] name failslab, interval 1, probability 0, space 0, times 0 [ 103.883200][ T7077] lowmem_reserve[]: 0 0 0 0 0 [ 103.888184][ T7083] CPU: 0 UID: 0 PID: 7083 Comm: syz.2.279 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 103.888206][ T7083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.888215][ T7083] Call Trace: [ 103.888220][ T7083] [ 103.888227][ T7083] dump_stack_lvl+0x16c/0x1f0 [ 103.888251][ T7083] should_fail_ex+0x512/0x640 [ 103.888273][ T7083] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 103.888301][ T7083] should_failslab+0xc2/0x120 [ 103.888321][ T7083] __kmalloc_cache_noprof+0x6a/0x3e0 [ 103.888344][ T7083] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.888363][ T7083] ? lockdep_hardirqs_on+0x7c/0x110 [ 103.888380][ T7083] ? __request_module+0x2ad/0x690 [ 103.888406][ T7083] __request_module+0x2ad/0x690 [ 103.888429][ T7083] ? __pfx___request_module+0x10/0x10 [ 103.888450][ T7083] ? aa_get_newest_label+0x375/0x680 [ 103.888477][ T7083] ? __pfx_aa_get_newest_label+0x10/0x10 [ 103.888501][ T7083] ? apparmor_capable+0x114/0x1d0 [ 103.888520][ T7083] ? dev_load+0x1c0/0x240 [ 103.888547][ T7083] dev_load+0x221/0x240 [ 103.888570][ T7083] dev_ioctl+0x19c/0x1060 [ 103.888597][ T7083] sock_ioctl+0x5b3/0x6b0 [ 103.888620][ T7083] ? __pfx_sock_ioctl+0x10/0x10 [ 103.888655][ T7083] compat_sock_ioctl+0x58b/0x730 [ 103.888679][ T7083] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 103.888706][ T7083] ? __fget_files+0x20e/0x3c0 [ 103.888728][ T7083] ? fput+0x60/0xf0 [ 103.888750][ T7083] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 103.888769][ T7083] __ia32_compat_sys_ioctl+0x24c/0x360 [ 103.888794][ T7083] __do_fast_syscall_32+0x73/0x120 [ 103.888815][ T7083] do_fast_syscall_32+0x32/0x80 [ 103.888835][ T7083] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.888855][ T7083] RIP: 0023:0xf7f16579 [ 103.888868][ T7083] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 103.888882][ T7083] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 103.888897][ T7083] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f3 [ 103.888908][ T7083] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.888917][ T7083] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.888927][ T7083] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 103.888936][ T7083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.888956][ T7083] [ 103.951404][ T24] hid-generic 0005:07C0:0009.0003: unknown main item tag 0x0 [ 103.953259][ T7077] Node 0 [ 103.958251][ T24] hid-generic 0005:07C0:0009.0003: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 103.959131][ T7077] DMA: 27*4kB (UM) 6*8kB (UM) 36*16kB (UM) 29*32kB (UM) 2*64kB (U) 1*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2940kB [ 103.981465][ T7077] Node 0 DMA32: 309*4kB (UH) 180*8kB (UMEH) 51*16kB (UMEH) 140*32kB (UMEH) 85*64kB (UMEH) 25*128kB (UMEH) 14*256kB (UME) 7*512kB (UME) 1*1024kB (M) 0*2048kB 0*4096kB = 24804kB [ 103.987375][ T7077] Node 1 DMA32: 78*4kB (UM) 4*8kB (ME) 82*16kB (UME) 11*32kB (UME) 293*64kB (UME) 31*128kB (UME) 21*256kB (UME) 15*512kB (UME) 3*1024kB (ME) 2*2048kB (M) 30*4096kB (UM) = 167832kB [ 103.993109][ T7077] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 103.996037][ T7077] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.001902][ T7077] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.004754][ T7077] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.009049][ T7077] 57809 total pagecache pages [ 104.011013][ T7077] 0 pages in swap cache [ 104.015585][ T7077] Free swap = 124996kB [ 104.018556][ T7077] Total swap = 124996kB [ 104.019923][ T7077] 524155 pages RAM [ 104.021226][ T7077] 0 pages HighMem/MovableOnly [ 104.022914][ T7077] 208176 pages reserved [ 104.024265][ T7077] 0 pages cma reserved [ 104.132073][ T7100] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.222583][ T7100] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.328867][ T7100] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.406582][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 104.419868][ T7100] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.559801][ T7100] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.567358][ T7100] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.574096][ T7100] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.580861][ T7100] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.819265][ T40] audit: type=1326 audit(1745826352.470:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7109 comm="syz.2.285" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x0 [ 105.436641][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 105.472456][ T7132] FAULT_INJECTION: forcing a failure. [ 105.472456][ T7132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.476793][ T7132] CPU: 0 UID: 0 PID: 7132 Comm: syz.1.290 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 105.476806][ T7132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.476823][ T7132] Call Trace: [ 105.476839][ T7132] [ 105.476843][ T7132] dump_stack_lvl+0x16c/0x1f0 [ 105.476859][ T7132] should_fail_ex+0x512/0x640 [ 105.476875][ T7132] _copy_to_user+0x32/0xd0 [ 105.476890][ T7132] rng_dev_read+0x1ea/0x810 [ 105.476904][ T7132] ? __pfx_virtio_read+0x10/0x10 [ 105.476917][ T7132] ? __pfx_rng_dev_read+0x10/0x10 [ 105.476931][ T7132] ? bpf_lsm_file_permission+0x9/0x10 [ 105.476946][ T7132] ? security_file_permission+0x71/0x210 [ 105.476959][ T7132] ? rw_verify_area+0xcf/0x680 [ 105.476972][ T7132] ? __pfx_rng_dev_read+0x10/0x10 [ 105.476984][ T7132] vfs_readv+0x6bc/0x8a0 [ 105.476997][ T7132] ? get_pid_task+0x106/0x250 [ 105.477013][ T7132] ? __pfx_vfs_readv+0x10/0x10 [ 105.477027][ T7132] ? find_held_lock+0x2b/0x80 [ 105.477044][ T7132] ? __fget_files+0x20e/0x3c0 [ 105.477061][ T7132] ? do_preadv+0x1af/0x270 [ 105.477074][ T7132] do_preadv+0x1af/0x270 [ 105.477088][ T7132] ? __pfx_do_preadv+0x10/0x10 [ 105.477102][ T7132] ? rcu_is_watching+0x12/0xc0 [ 105.477113][ T7132] __do_fast_syscall_32+0x73/0x120 [ 105.477126][ T7132] do_fast_syscall_32+0x32/0x80 [ 105.477138][ T7132] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.477150][ T7132] RIP: 0023:0xf709e579 [ 105.477157][ T7132] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 105.477167][ T7132] RSP: 002b:00000000f506d55c EFLAGS: 00000296 ORIG_RAX: 000000000000014d [ 105.477176][ T7132] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800005c0 [ 105.477182][ T7132] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 0000000000000000 [ 105.477187][ T7132] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.477192][ T7132] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 105.477213][ T7132] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.477225][ T7132] [ 105.686824][ T7136] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.459828][ T7147] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.476658][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 106.529274][ T7147] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.591068][ T7147] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.690717][ T7147] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.129490][ T40] audit: type=1326 audit(1745826354.780:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7165 comm="syz.1.299" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 107.526518][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 108.226521][ T6209] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 108.396561][ T6209] usb 7-1: Using ep0 maxpacket: 16 [ 108.399699][ T6209] usb 7-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 108.403532][ T6209] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 108.406536][ T6209] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.416870][ T6209] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:26.0/input/input9 [ 108.566758][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 108.613395][ T7179] FAULT_INJECTION: forcing a failure. [ 108.613395][ T7179] name failslab, interval 1, probability 0, space 0, times 0 [ 108.617594][ T7179] CPU: 0 UID: 0 PID: 7179 Comm: syz.2.303 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 108.617610][ T7179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.617624][ T7179] Call Trace: [ 108.617628][ T7179] [ 108.617632][ T7179] dump_stack_lvl+0x16c/0x1f0 [ 108.617648][ T7179] should_fail_ex+0x512/0x640 [ 108.617661][ T7179] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 108.617674][ T7179] should_failslab+0xc2/0x120 [ 108.617685][ T7179] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 108.617696][ T7179] ? __kernfs_new_node+0xd2/0x8a0 [ 108.617713][ T7179] __kernfs_new_node+0xd2/0x8a0 [ 108.617727][ T7179] ? __pfx_idr_alloc_u32+0x10/0x10 [ 108.617738][ T7179] ? __pfx___kernfs_new_node+0x10/0x10 [ 108.617756][ T7179] ? find_held_lock+0x2b/0x80 [ 108.617765][ T7179] ? kernfs_root+0xee/0x2a0 [ 108.617782][ T7179] kernfs_new_node+0x13c/0x1e0 [ 108.617794][ T7179] __kernfs_create_file+0x53/0x350 [ 108.617808][ T7179] sysfs_add_file_mode_ns+0x207/0x3c0 [ 108.617825][ T7179] internal_create_group+0x578/0xf30 [ 108.617844][ T7179] ? __pfx_internal_create_group+0x10/0x10 [ 108.617861][ T7179] ? kernfs_create_link+0x1bd/0x240 [ 108.617875][ T7179] internal_create_groups+0x9d/0x150 [ 108.617885][ T7179] device_add+0x731/0x1a70 [ 108.617899][ T7179] ? __pfx_device_add+0x10/0x10 [ 108.617911][ T7179] ? rcu_is_watching+0x12/0xc0 [ 108.617920][ T7179] ? lockdep_init_map_type+0x5c/0x280 [ 108.617935][ T7179] input_register_device+0x7e8/0x1130 [ 108.617947][ T7179] ? input_ff_create+0x256/0x350 [ 108.617962][ T7179] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 108.617978][ T7179] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 108.617995][ T7179] ? find_held_lock+0x2b/0x80 [ 108.618003][ T7179] ? hook_file_ioctl_common+0x145/0x410 [ 108.618017][ T7179] ? fput+0x60/0xf0 [ 108.618028][ T7179] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 108.618041][ T7179] ? __pfx_uinput_compat_ioctl+0x10/0x10 [ 108.618056][ T7179] __ia32_compat_sys_ioctl+0x24c/0x360 [ 108.618071][ T7179] __do_fast_syscall_32+0x73/0x120 [ 108.618084][ T7179] do_fast_syscall_32+0x32/0x80 [ 108.618096][ T7179] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.618108][ T7179] RIP: 0023:0xf7f16579 [ 108.618116][ T7179] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 108.618125][ T7179] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 108.618134][ T7179] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005501 [ 108.618140][ T7179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.618146][ T7179] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.618151][ T7179] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 108.618156][ T7179] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.618167][ T7179] [ 108.849501][ T7147] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.856197][ T7147] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.862821][ T7147] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.870822][ T7147] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.326480][ T5982] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.477262][ T5982] usb 5-1: Using ep0 maxpacket: 8 [ 109.480259][ T5982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.483618][ T5982] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 109.486683][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.492151][ T5982] usb 5-1: config 0 descriptor?? [ 109.596641][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 109.729718][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'. [ 109.960877][ T7267] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.021784][ T7267] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.119765][ T7267] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.169795][ T7267] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.636514][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 110.871475][ T5335] bcm5974 7-1:26.0: could not read from device [ 110.880718][ T5335] bcm5974 7-1:26.0: could not read from device [ 110.885264][ T6209] usb 7-1: USB disconnect, device number 6 [ 110.887855][ T5335] bcm5974 7-1:26.0: could not read from device [ 110.897481][ T7291] netlink: 24 bytes leftover after parsing attributes in process `syz.2.321'. [ 110.969556][ T7296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.052158][ T7298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.090173][ T7303] FAULT_INJECTION: forcing a failure. [ 111.090173][ T7303] name failslab, interval 1, probability 0, space 0, times 0 [ 111.094793][ T7303] CPU: 0 UID: 0 PID: 7303 Comm: syz.2.325 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 111.094807][ T7303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.094812][ T7303] Call Trace: [ 111.094816][ T7303] [ 111.094820][ T7303] dump_stack_lvl+0x16c/0x1f0 [ 111.094835][ T7303] should_fail_ex+0x512/0x640 [ 111.094848][ T7303] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 111.094861][ T7303] should_failslab+0xc2/0x120 [ 111.094873][ T7303] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 111.094896][ T7303] ? __mutex_lock+0x1ca/0xb90 [ 111.094907][ T7303] ? __alloc_skb+0x2b2/0x380 [ 111.094925][ T7303] __alloc_skb+0x2b2/0x380 [ 111.094939][ T7303] ? __pfx___alloc_skb+0x10/0x10 [ 111.094959][ T7303] mgmt_cmd_status+0x42/0x510 [ 111.094974][ T7303] cancel_pair_device+0x3ba/0x460 [ 111.094988][ T7303] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 111.095003][ T7303] hci_sock_sendmsg+0x151f/0x25e0 [ 111.095019][ T7303] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 111.095036][ T7303] sock_write_iter+0x4fc/0x5b0 [ 111.095048][ T7303] ? __pfx_sock_write_iter+0x10/0x10 [ 111.095065][ T7303] ? bpf_lsm_file_permission+0x9/0x10 [ 111.095080][ T7303] ? security_file_permission+0x71/0x210 [ 111.095093][ T7303] ? rw_verify_area+0xcf/0x680 [ 111.095108][ T7303] vfs_write+0x5ba/0x1180 [ 111.095117][ T7303] ? __pfx_sock_write_iter+0x10/0x10 [ 111.095129][ T7303] ? __pfx_vfs_write+0x10/0x10 [ 111.095137][ T7303] ? find_held_lock+0x2b/0x80 [ 111.095155][ T7303] ksys_write+0x205/0x240 [ 111.095163][ T7303] ? __pfx_ksys_write+0x10/0x10 [ 111.095173][ T7303] ? rcu_is_watching+0x12/0xc0 [ 111.095183][ T7303] __do_fast_syscall_32+0x73/0x120 [ 111.095196][ T7303] do_fast_syscall_32+0x32/0x80 [ 111.095208][ T7303] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.095220][ T7303] RIP: 0023:0xf7f16579 [ 111.095228][ T7303] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 111.095237][ T7303] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 111.095247][ T7303] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 111.095252][ T7303] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 111.095258][ T7303] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.095263][ T7303] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 111.095268][ T7303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.095292][ T7303] [ 111.178501][ T7306] fuse: Bad value for 'fd' [ 111.206965][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'. [ 111.220142][ T7308] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 111.222702][ T7308] macvtap1: entered promiscuous mode [ 111.225746][ T7308] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 111.676627][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 111.950429][ T5982] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 111.954719][ T5982] usb 5-1: USB disconnect, device number 3 [ 112.716535][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 112.998723][ T7339] fuse: Bad value for 'fd' [ 113.023486][ T7267] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.030798][ T7267] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.037752][ T7267] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.043809][ T7267] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.049682][ T7342] FAULT_INJECTION: forcing a failure. [ 113.049682][ T7342] name failslab, interval 1, probability 0, space 0, times 0 [ 113.053560][ T7342] CPU: 0 UID: 0 PID: 7342 Comm: syz.1.336 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 113.053572][ T7342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 113.053578][ T7342] Call Trace: [ 113.053582][ T7342] [ 113.053585][ T7342] dump_stack_lvl+0x16c/0x1f0 [ 113.053601][ T7342] should_fail_ex+0x512/0x640 [ 113.053614][ T7342] ? __kmalloc_noprof+0xbf/0x510 [ 113.053626][ T7342] ? sock_kmalloc+0x111/0x170 [ 113.053637][ T7342] should_failslab+0xc2/0x120 [ 113.053649][ T7342] __kmalloc_noprof+0xd2/0x510 [ 113.053658][ T7342] ? do_raw_spin_lock+0x12c/0x2b0 [ 113.053675][ T7342] sock_kmalloc+0x111/0x170 [ 113.053687][ T7342] af_alg_alloc_areq+0xbc/0x2e0 [ 113.053702][ T7342] skcipher_recvmsg+0x32b/0x1030 [ 113.053714][ T7342] ? __fget_files+0x204/0x3c0 [ 113.053729][ T7342] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 113.053747][ T7342] sock_recvmsg+0x1f6/0x250 [ 113.053759][ T7342] __sys_recvfrom+0x203/0x310 [ 113.053774][ T7342] ? __pfx___sys_recvfrom+0x10/0x10 [ 113.053787][ T7342] ? __lock_acquire+0xaa4/0x1ba0 [ 113.053813][ T7342] __ia32_compat_sys_socketcall+0x3c6/0x770 [ 113.053824][ T7342] ? __fget_files+0x20e/0x3c0 [ 113.053837][ T7342] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 113.053849][ T7342] ? fput+0x70/0xf0 [ 113.053863][ T7342] ? rcu_is_watching+0x12/0xc0 [ 113.053873][ T7342] __do_fast_syscall_32+0x73/0x120 [ 113.053886][ T7342] do_fast_syscall_32+0x32/0x80 [ 113.053898][ T7342] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.053909][ T7342] RIP: 0023:0xf709e579 [ 113.053917][ T7342] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 113.053926][ T7342] RSP: 002b:00000000f508d440 EFLAGS: 00000293 ORIG_RAX: 0000000000000066 [ 113.053935][ T7342] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f508d45c [ 113.053940][ T7342] RDX: 0000000000000000 RSI: 00000000f508d560 RDI: 00000000f7402ff4 [ 113.053946][ T7342] RBP: 00000000f508d560 R08: 0000000000000000 R09: 0000000000000000 [ 113.053951][ T7342] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 113.053956][ T7342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.053967][ T7342] [ 113.421431][ T7372] FAULT_INJECTION: forcing a failure. [ 113.421431][ T7372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.439093][ T7372] CPU: 1 UID: 0 PID: 7372 Comm: syz.1.342 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 113.439117][ T7372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 113.439127][ T7372] Call Trace: [ 113.439133][ T7372] [ 113.439140][ T7372] dump_stack_lvl+0x16c/0x1f0 [ 113.439165][ T7372] should_fail_ex+0x512/0x640 [ 113.439191][ T7372] _copy_from_user+0x2e/0xd0 [ 113.439216][ T7372] hidp_sock_compat_ioctl+0x2f0/0x4e0 [ 113.439238][ T7372] ? __pfx_hidp_sock_compat_ioctl+0x10/0x10 [ 113.439258][ T7372] ? kasan_quarantine_put+0x10a/0x240 [ 113.439274][ T7372] ? lockdep_hardirqs_on+0x7c/0x110 [ 113.439307][ T7372] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 113.439344][ T7372] ? __pfx_hidp_sock_compat_ioctl+0x10/0x10 [ 113.439365][ T7372] compat_sock_ioctl+0x173/0x730 [ 113.439390][ T7372] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 113.439416][ T7372] ? __fget_files+0x20e/0x3c0 [ 113.439439][ T7372] ? fput+0x60/0xf0 [ 113.439463][ T7372] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 113.439482][ T7372] __ia32_compat_sys_ioctl+0x24c/0x360 [ 113.439508][ T7372] __do_fast_syscall_32+0x73/0x120 [ 113.439530][ T7372] do_fast_syscall_32+0x32/0x80 [ 113.439549][ T7372] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.439569][ T7372] RIP: 0023:0xf709e579 [ 113.439587][ T7372] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 113.439602][ T7372] RSP: 002b:00000000f508e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 113.439617][ T7372] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000400448c8 [ 113.439627][ T7372] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.439636][ T7372] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.439645][ T7372] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 113.439653][ T7372] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.439674][ T7372] [ 113.714788][ T7385] netfs: Couldn't get user pages (rc=-14) [ 113.756660][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 114.796559][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 115.836616][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 116.887209][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 116.981746][ T7465] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 117.714264][ T7476] overlayfs: missing 'lowerdir' [ 117.916834][ C2] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 118.241073][ T7494] fuse: Unknown parameter 'grou00000000000000000000' [ 118.575672][ T7504] netfs: Couldn't get user pages (rc=-14) [ 118.956575][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 119.230225][ T7524] fuse: Unknown parameter 'group_i00000000000000000000' [ 119.320602][ T7526] netfs: Couldn't get user pages (rc=-14) [ 119.453113][ T40] audit: type=1326 audit(1745826367.100:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7531 comm="syz.1.387" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 119.701499][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'. [ 119.996500][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 120.136278][ T7551] fuse: Unknown parameter 'group_i00000000000000000000' [ 120.173680][ T7553] netfs: Couldn't get user pages (rc=-14) [ 121.046545][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 121.414542][ T7578] netfs: Couldn't get user pages (rc=-14) [ 121.515018][ T40] audit: type=1326 audit(1745826369.160:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.2.405" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x0 [ 122.076535][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 122.391700][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 122.999711][ T7615] fuse: Unknown parameter 'group_id00000000000000000000' [ 123.114674][ T40] audit: type=1326 audit(1745826370.760:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7618 comm="syz.1.417" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 123.122479][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 123.526676][ T6006] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 123.676522][ T6006] usb 7-1: Using ep0 maxpacket: 16 [ 123.679602][ T6006] usb 7-1: too many configurations: 100, using maximum allowed: 8 [ 123.685871][ T6006] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 123.688969][ T6006] usb 7-1: can't read configurations, error -61 [ 123.829568][ T6006] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 123.976899][ T6006] usb 7-1: Using ep0 maxpacket: 16 [ 123.981473][ T6006] usb 7-1: too many configurations: 100, using maximum allowed: 8 [ 123.985975][ T6006] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 123.989435][ T6006] usb 7-1: can't read configurations, error -61 [ 123.992039][ T6006] usb usb7-port1: attempt power cycle [ 124.156486][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 124.336592][ T6006] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 124.356900][ T6006] usb 7-1: Using ep0 maxpacket: 16 [ 124.359015][ T6006] usb 7-1: too many configurations: 100, using maximum allowed: 8 [ 124.362696][ T6006] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 124.365069][ T6006] usb 7-1: can't read configurations, error -61 [ 124.536771][ T6006] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 124.556969][ T6006] usb 7-1: Using ep0 maxpacket: 16 [ 124.559206][ T6006] usb 7-1: too many configurations: 100, using maximum allowed: 8 [ 124.563134][ T6006] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 124.565377][ T6006] usb 7-1: can't read configurations, error -61 [ 124.567587][ T6006] usb usb7-port1: unable to enumerate USB device [ 124.618246][ T7646] fuse: Unknown parameter 'group_id00000000000000000000' [ 125.196541][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 126.246551][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 126.329947][ T7670] netfs: Couldn't get user pages (rc=-14) [ 126.936034][ T7693] fuse: Bad value for 'user_id' [ 126.937679][ T7693] fuse: Bad value for 'user_id' [ 127.161421][ T7715] netfs: Couldn't get user pages (rc=-14) [ 127.276462][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 127.878265][ T7726] fuse: Bad value for 'user_id' [ 127.880062][ T7726] fuse: Bad value for 'user_id' [ 128.316500][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 128.400182][ T7739] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 128.426721][ T7745] netfs: Couldn't get user pages (rc=-14) [ 129.356441][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 129.555008][ T40] audit: type=1326 audit(1745826377.200:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.1.462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 129.561438][ T40] audit: type=1326 audit(1745826377.200:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.1.462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 129.567845][ T40] audit: type=1326 audit(1745826377.210:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.1.462" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 129.574276][ T40] audit: type=1326 audit(1745826377.210:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.1.462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 129.580634][ T40] audit: type=1326 audit(1745826377.210:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.1.462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 129.588014][ T40] audit: type=1326 audit(1745826377.210:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.1.462" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 129.652588][ T40] audit: type=1326 audit(1745826377.300:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.1.462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 129.659616][ T40] audit: type=1326 audit(1745826377.300:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.1.462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 129.667039][ T40] audit: type=1326 audit(1745826377.320:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.1.462" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 129.673275][ T40] audit: type=1326 audit(1745826377.320:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.1.462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 129.765405][ T7778] netfs: Couldn't get user pages (rc=-14) [ 130.396449][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 131.436458][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 131.944084][ T7837] trusted_key: encrypted_key: insufficient parameters specified [ 132.248029][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.250315][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.476525][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 132.536518][ T7848] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 133.055452][ T7863] program syz.0.493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.072839][ T7863] ptrace attach of "/syz-executor exec"[7864] was attempted by "/syz-executor exec"[7863] [ 133.526437][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 134.339103][ T7909] Bluetooth: MGMT ver 1.23 [ 134.556495][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 135.596512][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 135.653449][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 135.653459][ T40] audit: type=1326 audit(1745826383.300:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.3.523" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x0 [ 135.724558][ T7951] netfs: Couldn't get user pages (rc=-14) [ 135.868786][ T40] audit: type=1326 audit(1745826383.520:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7961 comm="syz.1.528" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 135.942852][ T7962] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 136.636794][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 137.216683][ T5955] Bluetooth: hci3: command 0x0405 tx timeout [ 137.300769][ T7992] fuse: Invalid rootmode [ 137.589370][ T40] audit: type=1326 audit(1745826385.240:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.2.541" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x0 [ 137.676525][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 137.906514][ T8015] random: crng reseeded on system resumption [ 138.550893][ T8020] fuse: Invalid rootmode [ 138.726470][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 138.977240][ T40] audit: type=1326 audit(1745826386.630:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.0.553" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x0 [ 139.143244][ T8051] fuse: Invalid rootmode [ 139.756493][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 140.111379][ T8071] netlink: 'syz.3.562': attribute type 5 has an invalid length. [ 140.628769][ T40] audit: type=1326 audit(1745826388.280:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.3.568" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x0 [ 140.796548][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 141.836508][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 142.686991][ T40] audit: type=1326 audit(1745826390.340:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8130 comm="syz.3.582" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x0 [ 142.790385][ T8137] input: syz1 as /devices/virtual/input/input12 [ 142.876497][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 143.520055][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.592'. [ 143.540160][ T8163] random: crng reseeded on system resumption [ 143.681168][ T8165] FAULT_INJECTION: forcing a failure. [ 143.681168][ T8165] name failslab, interval 1, probability 0, space 0, times 0 [ 143.686277][ T8165] CPU: 1 UID: 0 PID: 8165 Comm: syz.0.591 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 143.686301][ T8165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.686309][ T8165] Call Trace: [ 143.686313][ T8165] [ 143.686321][ T8165] dump_stack_lvl+0x16c/0x1f0 [ 143.686337][ T8165] should_fail_ex+0x512/0x640 [ 143.686353][ T8165] should_failslab+0xc2/0x120 [ 143.686365][ T8165] __kmalloc_cache_noprof+0x6a/0x3e0 [ 143.686393][ T8165] ? vhost_iotlb_add_range_ctx+0xf0/0xa80 [ 143.686409][ T8165] vhost_iotlb_add_range_ctx+0xf0/0xa80 [ 143.686423][ T8165] ? kasan_save_track+0x14/0x30 [ 143.686434][ T8165] vhost_iotlb_add_range_ctx+0x846/0xa80 [ 143.686447][ T8165] ? __kasan_kmalloc+0xaa/0xb0 [ 143.686459][ T8165] vhost_dev_ioctl+0x370/0xdc0 [ 143.686470][ T8165] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 143.686485][ T8165] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 143.686496][ T8165] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 143.686514][ T8165] vhost_net_ioctl+0x7c3/0x1710 [ 143.686526][ T8165] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 143.686538][ T8165] ? hook_file_ioctl_common+0x145/0x410 [ 143.686551][ T8165] ? __fget_files+0x20e/0x3c0 [ 143.686565][ T8165] ? fput+0x60/0xf0 [ 143.686577][ T8165] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 143.686587][ T8165] compat_ptr_ioctl+0x6b/0xa0 [ 143.686599][ T8165] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 143.686611][ T8165] __ia32_compat_sys_ioctl+0x24c/0x360 [ 143.686626][ T8165] __do_fast_syscall_32+0x73/0x120 [ 143.686639][ T8165] do_fast_syscall_32+0x32/0x80 [ 143.686651][ T8165] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.686663][ T8165] RIP: 0023:0xf7fb4579 [ 143.686671][ T8165] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 143.686680][ T8165] RSP: 002b:00000000f509455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 143.686690][ T8165] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004008af03 [ 143.686696][ T8165] RDX: 0000000080000400 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.686702][ T8165] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.686707][ T8165] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 143.686713][ T8165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.686724][ T8165] [ 143.759669][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.916461][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 143.942399][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 144.956476][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 145.229667][ T40] audit: type=1326 audit(1745826392.880:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.0.600" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x0 [ 145.996583][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 146.480226][ T8210] overlay: Unknown parameter '//file0' [ 146.652714][ T8216] wg1: entered promiscuous mode [ 146.654709][ T8216] wg1: entered allmulticast mode [ 146.913559][ T5952] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 146.922319][ T5952] Bluetooth: hci0: Injecting HCI hardware error event [ 146.926220][ T5952] Bluetooth: hci0: hardware error 0x00 [ 147.036456][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 148.086515][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 148.874040][ T40] audit: type=1326 audit(1745826396.520:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8277 comm="syz.0.623" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x0 [ 148.893668][ T8280] fuse: Unknown parameter 'user_i00000000000000000000' [ 148.956636][ T5952] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 149.116480][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 149.894208][ T8315] fuse: Unknown parameter 'user_id00000000000000000000' [ 150.156467][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 150.353945][ T40] audit: type=1326 audit(1745826398.000:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8328 comm="syz.1.638" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 150.600194][ T8333] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 150.700426][ T8341] fuse: Unknown parameter 'user_id00000000000000000000' [ 150.894843][ T8343] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 151.196557][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 151.556521][ T6209] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 151.717739][ T6209] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 151.721129][ T8368] fuse: Unknown parameter 'grou00000000000000000000' [ 151.733192][ T6209] usb 6-1: config 0 has no interface number 0 [ 151.745519][ T8370] fuse: Unknown parameter 'user_id00000000000000000000' [ 151.759744][ T6209] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 151.764162][ T6209] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 151.767683][ T6209] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 151.770708][ T6209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.775687][ T6209] usb 6-1: config 0 descriptor?? [ 151.778261][ T8360] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 151.790245][ T8366] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 151.792852][ T8373] netfs: Couldn't get user pages (rc=-14) [ 151.813611][ T6209] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 151.998024][ T24] usb 6-1: USB disconnect, device number 6 [ 152.236568][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 152.280456][ T40] audit: type=1326 audit(1745826399.930:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8379 comm="syz.2.656" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x0 [ 152.644436][ T8392] fuse: Unknown parameter 'grou00000000000000000000' [ 152.775575][ T40] audit: type=1800 audit(1745826400.420:93): pid=8397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.661" name="bus" dev="9p" ino=35913972 res=0 errno=0 [ 153.240414][ T8403] 9pnet_virtio: no channels available for device syz [ 153.276670][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 153.349668][ T8405] netlink: 60 bytes leftover after parsing attributes in process `syz.2.664'. [ 153.478811][ T8401] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 153.666528][ T34] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 153.735182][ T8411] netfs: Couldn't get user pages (rc=-14) [ 153.822107][ T8415] fuse: Unknown parameter 'grou00000000000000000000' [ 153.836792][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 153.845461][ T34] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.851382][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.856261][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.860571][ T34] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.865908][ T34] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.869908][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.016549][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 154.126505][ T34] usb 7-1: GET_CAPABILITIES returned 0 [ 154.128351][ T34] usbtmc 7-1:16.0: can't read capabilities [ 154.196446][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 154.207399][ T29] usb 8-1: config 32 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.211019][ T29] usb 8-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.214734][ T29] usb 8-1: config 32 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 154.219979][ T29] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 154.222864][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.326678][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 154.334713][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 154.340348][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 154.344129][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 154.347247][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 154.350417][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 154.359169][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 154.361983][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 154.365259][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 154.370396][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 154.373977][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 154.379898][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 154.383674][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 154.387419][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 154.391120][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 154.397062][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 154.400070][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 154.407387][ T34] usb 7-1: USB disconnect, device number 11 [ 154.840866][ T8429] netfs: Couldn't get user pages (rc=-14) [ 154.850558][ T29] usbhid 8-1:32.0: can't add hid device: -71 [ 154.852545][ T29] usbhid 8-1:32.0: probe with driver usbhid failed with error -71 [ 154.855967][ T29] usb 8-1: USB disconnect, device number 5 [ 155.222573][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.675'. [ 155.356506][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 155.399196][ T8447] fuse: Unknown parameter 'group_i00000000000000000000' [ 155.410127][ T8442] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 155.740974][ T8457] netfs: Couldn't get user pages (rc=-14) [ 156.396471][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 156.823712][ T40] audit: type=1326 audit(1745826404.470:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.2.687" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x0 [ 157.146845][ T8481] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 157.308097][ T8488] fuse: Unknown parameter '0x0000000000000004' [ 157.436536][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 157.439778][ T8496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.694'. [ 157.626547][ T6006] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 157.778433][ T6006] usb 6-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.781626][ T6006] usb 6-1: config 0 interface 0 has no altsetting 0 [ 157.783701][ T6006] usb 6-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 157.786727][ T6006] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.792273][ T6006] usb 6-1: config 0 descriptor?? [ 158.001362][ T8494] Bluetooth: hci0: too big key_count value 16384 [ 158.093281][ T6006] usbhid 6-1:0.0: can't add hid device: -71 [ 158.095247][ T6006] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 158.099193][ T6006] usb 6-1: USB disconnect, device number 7 [ 158.250069][ T8508] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 158.476467][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 158.916489][ T6209] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 159.068853][ T6209] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 159.072269][ T6209] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 159.077418][ T6209] usb 7-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 159.080607][ T6209] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.083841][ T6209] usb 7-1: Product: syz [ 159.085586][ T6209] usb 7-1: Manufacturer: syz [ 159.087833][ T6209] usb 7-1: SerialNumber: syz [ 159.091683][ T6209] usb 7-1: config 0 descriptor?? [ 159.280427][ T40] audit: type=1326 audit(1745826406.930:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8529 comm="syz.3.704" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x0 [ 159.302121][ T6209] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input14 [ 159.516459][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 159.568655][ T8536] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 159.681310][ T8539] fuse: Bad value for 'fd' [ 160.159558][ T8541] netfs: Couldn't get user pages (rc=-14) [ 160.287750][ T8546] netlink: 'syz.3.709': attribute type 10 has an invalid length. [ 160.291068][ T8546] syz_tun: entered promiscuous mode [ 160.295705][ T8546] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 160.556461][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 161.596493][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 161.597516][ T5952] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.598003][ T8519] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 161.602317][ T8519] Bluetooth: hci1: Opcode 0x0406 failed: -110 [ 161.662547][ T8519] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 161.667972][ T8519] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.669982][ T8519] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.672889][ T8519] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.676656][ T8519] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.679000][ T8519] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 161.681663][ T8519] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 161.694051][ T6006] usb 7-1: USB disconnect, device number 12 [ 161.741663][ T8561] FAULT_INJECTION: forcing a failure. [ 161.741663][ T8561] name failslab, interval 1, probability 0, space 0, times 0 [ 161.745557][ T8561] CPU: 2 UID: 0 PID: 8561 Comm: syz.0.712 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 161.745571][ T8561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.745577][ T8561] Call Trace: [ 161.745581][ T8561] [ 161.745585][ T8561] dump_stack_lvl+0x16c/0x1f0 [ 161.745601][ T8561] should_fail_ex+0x512/0x640 [ 161.745617][ T8561] should_failslab+0xc2/0x120 [ 161.745629][ T8561] __kmalloc_cache_noprof+0x6a/0x3e0 [ 161.745646][ T8561] ? __sctp_v6_cmp_addr+0x206/0x530 [ 161.745659][ T8561] ? sctp_add_bind_addr+0xae/0x3f0 [ 161.745672][ T8561] sctp_add_bind_addr+0xae/0x3f0 [ 161.745684][ T8561] sctp_copy_local_addr_list+0x39d/0x5a0 [ 161.745700][ T8561] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 161.745715][ T8561] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 161.745731][ T8561] ? sctp_bind_addr_copy+0xe0/0x530 [ 161.745741][ T8561] sctp_bind_addr_copy+0xe0/0x530 [ 161.745768][ T8561] sctp_connect_new_asoc+0x1d7/0x790 [ 161.745785][ T8561] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 161.745803][ T8561] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 161.745820][ T8561] sctp_sendmsg+0x15f9/0x1ee0 [ 161.745839][ T8561] ? __pfx_sctp_sendmsg+0x10/0x10 [ 161.745860][ T8561] ? __might_fault+0xe3/0x190 [ 161.745872][ T8561] ? __pfx_aa_sk_perm+0x10/0x10 [ 161.745885][ T8561] ? __pfx_sctp_sendmsg+0x10/0x10 [ 161.745901][ T8561] inet_sendmsg+0x119/0x140 [ 161.745913][ T8561] __sys_sendto+0x431/0x510 [ 161.745929][ T8561] ? __pfx___sys_sendto+0x10/0x10 [ 161.745953][ T8561] ? arch_syscall_is_vdso_sigreturn+0x1bd/0x230 [ 161.745970][ T8561] ? syscall_user_dispatch+0x78/0x140 [ 161.745986][ T8561] __ia32_sys_sendto+0xdd/0x1b0 [ 161.746000][ T8561] ? syscall_trace_enter+0x5e/0x260 [ 161.746014][ T8561] __do_fast_syscall_32+0x73/0x120 [ 161.746028][ T8561] do_fast_syscall_32+0x32/0x80 [ 161.746039][ T8561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.746052][ T8561] RIP: 0023:0xf7fb4579 [ 161.746060][ T8561] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 161.746069][ T8561] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 161.746079][ T8561] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 161.746085][ T8561] RDX: 0000000000000001 RSI: 0000000024004000 RDI: 0000000080000100 [ 161.746090][ T8561] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 161.746096][ T8561] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 161.746101][ T8561] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.746113][ T8561] [ 161.777597][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 161.834861][ T8566] netfs: Couldn't get user pages (rc=-14) [ 161.892896][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 162.526342][ T8581] netlink: 52 bytes leftover after parsing attributes in process `syz.1.719'. [ 162.531576][ T8581] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.534913][ T8581] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.636574][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 162.743346][ T8584] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 163.686534][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 163.689251][ T67] Bluetooth: hci1: command 0x0c1a tx timeout [ 163.691334][ T5952] Bluetooth: hci3: command 0x0405 tx timeout [ 163.694320][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.897266][ T8608] fuse: Unknown parameter 'group_id00000000000000000000' [ 164.216215][ T8620] FAULT_INJECTION: forcing a failure. [ 164.216215][ T8620] name failslab, interval 1, probability 0, space 0, times 0 [ 164.220571][ T8620] CPU: 2 UID: 0 PID: 8620 Comm: syz.0.731 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 164.220585][ T8620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.220591][ T8620] Call Trace: [ 164.220596][ T8620] [ 164.220599][ T8620] dump_stack_lvl+0x16c/0x1f0 [ 164.220616][ T8620] should_fail_ex+0x512/0x640 [ 164.220629][ T8620] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 164.220642][ T8620] should_failslab+0xc2/0x120 [ 164.220654][ T8620] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 164.220715][ T8620] ? kasan_save_stack+0x42/0x60 [ 164.220724][ T8620] ? kasan_save_stack+0x33/0x60 [ 164.220733][ T8620] ? kasan_save_track+0x14/0x30 [ 164.220742][ T8620] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 164.220754][ T8620] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 164.220764][ T8620] ? path_lookupat+0x17e/0x780 [ 164.220780][ T8620] idr_get_free+0x528/0xa30 [ 164.220795][ T8620] idr_alloc_u32+0x190/0x2f0 [ 164.220807][ T8620] ? __pfx_idr_alloc_u32+0x10/0x10 [ 164.220822][ T8620] idr_alloc_cyclic+0x10b/0x230 [ 164.220834][ T8620] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 164.220844][ T8620] ? lockdep_init_map_type+0x5c/0x280 [ 164.220858][ T8620] ? __rwlock_init+0x37/0x150 [ 164.220873][ T8620] afs_lookup_cell+0xe68/0x1680 [ 164.220889][ T8620] ? __pfx_afs_lookup_cell+0x10/0x10 [ 164.220901][ T8620] ? find_held_lock+0x2b/0x80 [ 164.220910][ T8620] ? net_generic+0xea/0x2a0 [ 164.220930][ T8620] afs_dynroot_lookup+0x2e2/0xa90 [ 164.220940][ T8620] ? __d_lookup_rcu+0x4a3/0x4c0 [ 164.220953][ T8620] ? __pfx_afs_dynroot_lookup+0x10/0x10 [ 164.220964][ T8620] ? lockdep_init_map_type+0x5c/0x280 [ 164.220977][ T8620] ? lockdep_init_map_type+0x5c/0x280 [ 164.220992][ T8620] __lookup_slow+0x24e/0x460 [ 164.221004][ T8620] ? __pfx___lookup_slow+0x10/0x10 [ 164.221018][ T8620] ? __SetPageMovable+0x2a0/0x4a0 [ 164.221035][ T8620] ? __SetPageMovable+0x2a0/0x4a0 [ 164.221049][ T8620] ? d_lookup+0xe7/0x190 [ 164.221063][ T8620] lookup_one_unlocked+0x140/0x160 [ 164.221076][ T8620] ? __pfx_lookup_one_unlocked+0x10/0x10 [ 164.221092][ T8620] ovl_lookup_single+0x1fe/0xfb0 [ 164.221109][ T8620] ? __pfx_ovl_lookup_single+0x10/0x10 [ 164.221127][ T8620] ovl_lookup_layer+0x3d4/0x480 [ 164.221143][ T8620] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 164.221156][ T8620] ? __kmalloc_noprof+0x242/0x510 [ 164.221169][ T8620] ovl_lookup+0x1417/0x2270 [ 164.221190][ T8620] ? __pfx_ovl_lookup+0x10/0x10 [ 164.221204][ T8620] ? d_alloc_parallel+0x6ae/0x12e0 [ 164.221218][ T8620] ? mark_lock+0x32d/0x610 [ 164.221232][ T8620] ? __pfx_d_alloc_parallel+0x10/0x10 [ 164.221248][ T8620] ? lockdep_init_map_type+0x5c/0x280 [ 164.221265][ T8620] __lookup_slow+0x24e/0x460 [ 164.221283][ T8620] ? __pfx___lookup_slow+0x10/0x10 [ 164.221317][ T8620] ? lookup_fast+0x156/0x610 [ 164.221342][ T8620] walk_component+0x353/0x5b0 [ 164.221358][ T8620] path_lookupat+0x17e/0x780 [ 164.221375][ T8620] path_openat+0x1758/0x2d40 [ 164.221383][ T8620] ? __ia32_compat_sys_openat+0x16d/0x210 [ 164.221396][ T8620] ? __do_fast_syscall_32+0x73/0x120 [ 164.221407][ T8620] ? do_fast_syscall_32+0x32/0x80 [ 164.221418][ T8620] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.221435][ T8620] ? __pfx_path_openat+0x10/0x10 [ 164.221448][ T8620] do_filp_open+0x20b/0x470 [ 164.221457][ T8620] ? __pfx_do_filp_open+0x10/0x10 [ 164.221476][ T8620] ? alloc_fd+0x471/0x7d0 [ 164.221494][ T8620] do_sys_openat2+0x11b/0x1d0 [ 164.221506][ T8620] ? __pfx_do_sys_openat2+0x10/0x10 [ 164.221520][ T8620] ? __fget_files+0x20e/0x3c0 [ 164.221537][ T8620] __ia32_compat_sys_openat+0x16d/0x210 [ 164.221550][ T8620] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 164.221563][ T8620] ? ksys_write+0x1b9/0x240 [ 164.221572][ T8620] ? rcu_is_watching+0x12/0xc0 [ 164.221582][ T8620] ? rcu_is_watching+0x12/0xc0 [ 164.221592][ T8620] __do_fast_syscall_32+0x73/0x120 [ 164.221605][ T8620] do_fast_syscall_32+0x32/0x80 [ 164.221617][ T8620] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.221628][ T8620] RIP: 0023:0xf7fb4579 [ 164.221636][ T8620] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 164.221646][ T8620] RSP: 002b:00000000f50b555c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 164.221655][ T8620] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000080000040 [ 164.221661][ T8620] RDX: 0000000000200002 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.221667][ T8620] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 164.221672][ T8620] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 164.221677][ T8620] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 164.221690][ T8620] [ 164.726449][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 164.900372][ T8623] fuse: Unknown parameter 'fd0x0000000000000004' [ 164.996727][ T40] audit: type=1326 audit(1745826412.640:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.1.736" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 165.756489][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 165.758895][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.761197][ T5955] Bluetooth: hci3: command 0x0405 tx timeout [ 165.763791][ T5952] Bluetooth: hci1: command 0x0c1a tx timeout [ 166.210299][ T8657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.742'. [ 166.213150][ T8657] netlink: 20 bytes leftover after parsing attributes in process `syz.2.742'. [ 166.221445][ T8657] geneve0: entered allmulticast mode [ 166.237165][ T6209] IPVS: starting estimator thread 0... [ 166.240379][ T8657] netlink: 'syz.2.742': attribute type 1 has an invalid length. [ 166.242904][ T8657] netlink: 224 bytes leftover after parsing attributes in process `syz.2.742'. [ 166.336519][ T8666] IPVS: using max 48 ests per chain, 115200 per kthread [ 166.361977][ T8669] fuse: Unknown parameter 'fd0x0000000000000004' [ 166.682776][ T1186] IPVS: stop unused estimator thread 0... [ 166.796510][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 166.983203][ T40] audit: type=1326 audit(1745826414.630:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8678 comm="syz.3.747" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x0 [ 167.347165][ T8682] fuse: Bad value for 'user_id' [ 167.348732][ T8682] fuse: Bad value for 'user_id' [ 167.383457][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'. [ 167.836504][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 167.839004][ T5952] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.840932][ T5952] Bluetooth: hci3: command 0x0405 tx timeout [ 168.532265][ T8694] [U] .ú [ 168.608925][ T8707] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 168.782024][ T8714] fuse: Bad value for 'user_id' [ 168.783715][ T8714] fuse: Bad value for 'user_id' [ 168.886565][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 169.331240][ T8721] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 169.898045][ T8730] netfs: Couldn't get user pages (rc=-14) [ 169.916510][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 170.956504][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 171.008103][ T8755] fuse: Bad value for 'fd' [ 171.197768][ T8761] netfs: Couldn't get user pages (rc=-14) [ 171.252883][ T40] audit: type=1326 audit(1745826418.900:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8762 comm="syz.1.773" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 172.006472][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 172.673515][ T8799] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 172.964941][ T8804] fuse: Bad value for 'fd' [ 172.979026][ T40] audit: type=1326 audit(1745826420.630:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.3.787" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x0 [ 173.046469][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 173.855184][ T8829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.794'. [ 173.861053][ T8829] autofs4:pid:8829:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 173.966749][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 173.971762][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 173.997179][ T8835] netlink: 'syz.3.797': attribute type 10 has an invalid length. [ 174.075254][ T8840] overlayfs: failed to resolve './file1': -2 [ 174.086543][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 174.226839][ T8841] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 174.905143][ T40] audit: type=1326 audit(1745826422.550:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8848 comm="syz.3.802" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x0 [ 175.056797][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'. [ 175.069236][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'. [ 175.074768][ T8857] netlink: 'syz.1.804': attribute type 10 has an invalid length. [ 175.126561][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 175.664633][ T8872] fuse: Bad value for 'fd' [ 175.932737][ T8884] bpf: Bad value for 'gid' [ 175.936346][ T40] audit: type=1804 audit(1745826423.580:101): pid=8884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.812" name="/newroot/202/file0" dev="tmpfs" ino=1121 res=1 errno=0 [ 176.156540][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 176.661339][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.818'. [ 176.667683][ T8903] IPVS: Error joining to the multicast group [ 176.681341][ T40] audit: type=1326 audit(1745826424.330:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8904 comm="syz.3.819" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x0 [ 176.717164][ T8907] fuse: Invalid rootmode [ 177.079448][ T8915] FAULT_INJECTION: forcing a failure. [ 177.079448][ T8915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.084463][ T8915] CPU: 2 UID: 0 PID: 8915 Comm: syz.0.823 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 177.084481][ T8915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 177.084490][ T8915] Call Trace: [ 177.084495][ T8915] [ 177.084501][ T8915] dump_stack_lvl+0x16c/0x1f0 [ 177.084520][ T8915] should_fail_ex+0x512/0x640 [ 177.084557][ T8915] _copy_to_user+0x32/0xd0 [ 177.084581][ T8915] simple_read_from_buffer+0xcb/0x170 [ 177.084601][ T8915] proc_fail_nth_read+0x197/0x270 [ 177.084621][ T8915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.084640][ T8915] ? rw_verify_area+0xcf/0x680 [ 177.084659][ T8915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 177.084677][ T8915] vfs_read+0x1de/0xc70 [ 177.084692][ T8915] ? __pfx___mutex_lock+0x10/0x10 [ 177.084708][ T8915] ? __pfx_vfs_read+0x10/0x10 [ 177.084726][ T8915] ? __fget_files+0x20e/0x3c0 [ 177.084753][ T8915] ksys_read+0x12a/0x240 [ 177.084765][ T8915] ? __pfx_ksys_read+0x10/0x10 [ 177.084779][ T8915] ? rcu_is_watching+0x12/0xc0 [ 177.084795][ T8915] __do_fast_syscall_32+0x73/0x120 [ 177.084819][ T8915] do_fast_syscall_32+0x32/0x80 [ 177.084835][ T8915] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.084851][ T8915] RIP: 0023:0xf7fb4579 [ 177.084861][ T8915] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 177.084874][ T8915] RSP: 002b:00000000f50d6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 177.084886][ T8915] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50d6620 [ 177.084895][ T8915] RDX: 000000000000000f RSI: 00000000f7442ff4 RDI: 0000000000000000 [ 177.084902][ T8915] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 177.084910][ T8915] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 177.084917][ T8915] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.084936][ T8915] [ 177.157290][ C2] hpet: Lost 4 RTC interrupts [ 177.195873][ T8918] netlink: 44 bytes leftover after parsing attributes in process `syz.0.824'. [ 177.199735][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 177.771351][ T8935] FAULT_INJECTION: forcing a failure. [ 177.771351][ T8935] name failslab, interval 1, probability 0, space 0, times 0 [ 177.775380][ T8935] CPU: 2 UID: 0 PID: 8935 Comm: syz.0.828 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 177.775393][ T8935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 177.775400][ T8935] Call Trace: [ 177.775403][ T8935] [ 177.775407][ T8935] dump_stack_lvl+0x16c/0x1f0 [ 177.775423][ T8935] should_fail_ex+0x512/0x640 [ 177.775437][ T8935] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 177.775454][ T8935] should_failslab+0xc2/0x120 [ 177.775467][ T8935] __kmalloc_cache_noprof+0x6a/0x3e0 [ 177.775481][ T8935] ? lockdep_hardirqs_on+0x7c/0x110 [ 177.775493][ T8935] ? alloc_fs_context+0x57/0x9c0 [ 177.775504][ T8935] alloc_fs_context+0x57/0x9c0 [ 177.775516][ T8935] __ia32_sys_fsopen+0xef/0x240 [ 177.775528][ T8935] __do_fast_syscall_32+0x73/0x120 [ 177.775540][ T8935] do_fast_syscall_32+0x32/0x80 [ 177.775552][ T8935] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.775565][ T8935] RIP: 0023:0xf7fb4579 [ 177.775573][ T8935] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 177.775582][ T8935] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 00000000000001ae [ 177.775592][ T8935] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000000000000 [ 177.775598][ T8935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.775604][ T8935] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.775609][ T8935] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 177.775614][ T8935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.775626][ T8935] [ 177.837773][ C2] hpet: Lost 2 RTC interrupts [ 177.888123][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 177.944787][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 178.114595][ T8949] program syz.1.832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.246562][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 178.269120][ T6006] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 178.687889][ T6006] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 178.691303][ T6006] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 178.694398][ T6006] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 178.697802][ T6006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.704074][ T8946] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 178.707978][ T6006] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 179.001527][ T34] usb 7-1: USB disconnect, device number 13 [ 179.276625][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 180.326597][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 181.356469][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 182.390412][ C2] hpet: Lost 1 RTC interrupts [ 182.396456][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 183.124732][ T9075] tmpfs: Bad value for 'mpol' [ 183.447735][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 184.476508][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 184.483632][ T9085] fuse: Bad value for 'rootmode' [ 184.566522][ T5952] Bluetooth: hci3: command 0x0405 tx timeout [ 185.526455][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 185.956717][ T24] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 185.991540][ T9146] fuse: Unknown parameter 'use00000000000000000000' [ 186.106565][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 186.110771][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.113921][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.117174][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.120710][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.125307][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 186.131832][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.350919][ T9139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.354820][ T9139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.406055][ T9139] lo: entered promiscuous mode [ 186.408788][ T9139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.416758][ C2] hpet: Lost 2 RTC interrupts [ 186.429186][ T24] usb 8-1: usb_control_msg returned -71 [ 186.430961][ T24] usbtmc 8-1:16.0: can't read capabilities [ 186.459371][ T24] usb 8-1: USB disconnect, device number 6 [ 186.544687][ T9159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 186.556478][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 186.582607][ T9162] netlink: 'syz.1.876': attribute type 4 has an invalid length. [ 186.591331][ T9162] netlink: 'syz.1.876': attribute type 4 has an invalid length. [ 186.621661][ T9149] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 186.632790][ T9164] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 187.596440][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 187.882840][ T40] audit: type=1326 audit(1745826435.530:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9233 comm="syz.0.884" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x0 [ 188.646472][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 189.284605][ T9273] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 189.676503][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 190.487234][ T9317] @: renamed from vlan0 (while UP) [ 190.542062][ T40] audit: type=1326 audit(1745826438.190:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9320 comm="syz.0.896" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x0 [ 190.716483][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 191.390838][ T9366] netlink: 'syz.1.901': attribute type 1 has an invalid length. [ 191.756488][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 192.796508][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 193.659503][ T9407] FAULT_INJECTION: forcing a failure. [ 193.659503][ T9407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.663599][ T9407] CPU: 2 UID: 0 PID: 9407 Comm: syz.0.912 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 193.663612][ T9407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 193.663618][ T9407] Call Trace: [ 193.663622][ T9407] [ 193.663626][ T9407] dump_stack_lvl+0x16c/0x1f0 [ 193.663642][ T9407] should_fail_ex+0x512/0x640 [ 193.663658][ T9407] _copy_to_user+0x32/0xd0 [ 193.663673][ T9407] simple_read_from_buffer+0xcb/0x170 [ 193.663688][ T9407] proc_fail_nth_read+0x197/0x270 [ 193.663703][ T9407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 193.663717][ T9407] ? rw_verify_area+0xcf/0x680 [ 193.663730][ T9407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 193.663744][ T9407] vfs_read+0x1de/0xc70 [ 193.663754][ T9407] ? __pfx___mutex_lock+0x10/0x10 [ 193.663766][ T9407] ? __pfx_vfs_read+0x10/0x10 [ 193.663779][ T9407] ? __fget_files+0x20e/0x3c0 [ 193.663797][ T9407] ksys_read+0x12a/0x240 [ 193.663805][ T9407] ? __pfx_ksys_read+0x10/0x10 [ 193.663815][ T9407] ? rcu_is_watching+0x12/0xc0 [ 193.663826][ T9407] __do_fast_syscall_32+0x73/0x120 [ 193.663839][ T9407] do_fast_syscall_32+0x32/0x80 [ 193.663851][ T9407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 193.663864][ T9407] RIP: 0023:0xf7fb4579 [ 193.663871][ T9407] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 193.663881][ T9407] RSP: 002b:00000000f50d6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 193.663895][ T9407] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50d6620 [ 193.663901][ T9407] RDX: 000000000000000f RSI: 00000000f7442ff4 RDI: 0000000000000000 [ 193.663906][ T9407] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 193.663911][ T9407] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 193.663917][ T9407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 193.663929][ T9407] [ 193.742189][ C2] hpet: Lost 4 RTC interrupts [ 193.746730][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.846446][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 194.571700][ T9425] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 194.886448][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 195.174051][ T9484] netlink: 'syz.3.921': attribute type 1 has an invalid length. [ 195.916478][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 196.966436][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 197.987091][ T9573] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 197.996484][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 198.408460][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.940'. [ 198.469219][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.940'. [ 199.035633][ T9629] netfs: Couldn't get user pages (rc=-14) [ 199.036566][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 199.272872][ T9642] FAULT_INJECTION: forcing a failure. [ 199.272872][ T9642] name failslab, interval 1, probability 0, space 0, times 0 [ 199.278879][ T9642] CPU: 0 UID: 0 PID: 9642 Comm: syz.3.946 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 199.278902][ T9642] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 199.278910][ T9642] Call Trace: [ 199.278913][ T9642] [ 199.278918][ T9642] dump_stack_lvl+0x16c/0x1f0 [ 199.278934][ T9642] should_fail_ex+0x512/0x640 [ 199.278949][ T9642] ? fs_reclaim_acquire+0xae/0x150 [ 199.278966][ T9642] ? tomoyo_encode2+0x100/0x3e0 [ 199.278980][ T9642] should_failslab+0xc2/0x120 [ 199.278992][ T9642] __kmalloc_noprof+0xd2/0x510 [ 199.279006][ T9642] tomoyo_encode2+0x100/0x3e0 [ 199.279021][ T9642] tomoyo_encode+0x29/0x50 [ 199.279034][ T9642] tomoyo_realpath_from_path+0x18f/0x6e0 [ 199.279055][ T9642] ? tomoyo_profile+0x47/0x60 [ 199.279080][ T9642] tomoyo_path_number_perm+0x245/0x580 [ 199.279097][ T9642] ? tomoyo_path_number_perm+0x237/0x580 [ 199.279116][ T9642] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 199.279155][ T9642] ? find_held_lock+0x2b/0x80 [ 199.279171][ T9642] ? hook_file_ioctl_common+0x145/0x410 [ 199.279188][ T9642] ? __fget_files+0x204/0x3c0 [ 199.279210][ T9642] ? __fget_files+0x20e/0x3c0 [ 199.279231][ T9642] ? fput+0x60/0xf0 [ 199.279254][ T9642] security_file_ioctl_compat+0x9b/0x240 [ 199.279275][ T9642] __ia32_compat_sys_ioctl+0xc3/0x360 [ 199.279295][ T9642] __do_fast_syscall_32+0x73/0x120 [ 199.279317][ T9642] do_fast_syscall_32+0x32/0x80 [ 199.279336][ T9642] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.279355][ T9642] RIP: 0023:0xf711e579 [ 199.279367][ T9642] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 199.279382][ T9642] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 199.279393][ T9642] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c028aa05 [ 199.279403][ T9642] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 199.279413][ T9642] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 199.279421][ T9642] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 199.279430][ T9642] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 199.279451][ T9642] [ 199.279467][ T9642] ERROR: Out of memory at tomoyo_realpath_from_path. [ 199.372509][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'. [ 199.376675][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'. [ 199.380277][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'. [ 199.383866][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'. [ 199.471449][ T40] audit: type=1326 audit(1745826447.120:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.1.950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 199.480401][ T40] audit: type=1326 audit(1745826447.120:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.1.950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 199.490660][ T40] audit: type=1326 audit(1745826447.120:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.1.950" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 199.498959][ T40] audit: type=1326 audit(1745826447.120:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.1.950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 199.505436][ T40] audit: type=1326 audit(1745826447.120:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.1.950" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 199.515256][ T40] audit: type=1326 audit(1745826447.130:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.1.950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 199.526350][ T40] audit: type=1326 audit(1745826447.130:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.1.950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 199.536587][ T40] audit: type=1326 audit(1745826447.140:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.1.950" exe="/syz-executor" sig=0 arch=40000003 syscall=13 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 199.546032][ T40] audit: type=1326 audit(1745826447.140:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.1.950" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 199.555343][ T40] audit: type=1326 audit(1745826447.140:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.1.950" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 200.086470][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 200.411681][ T9708] netfs: Couldn't get user pages (rc=-14) [ 200.465005][ T9709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.954'. [ 200.637941][ T9728] netlink: 36 bytes leftover after parsing attributes in process `syz.1.956'. [ 201.116493][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 201.135470][ T9744] FAULT_INJECTION: forcing a failure. [ 201.135470][ T9744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.140500][ T9744] CPU: 0 UID: 0 PID: 9744 Comm: syz.0.958 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 201.140533][ T9744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 201.140543][ T9744] Call Trace: [ 201.140549][ T9744] [ 201.140555][ T9744] dump_stack_lvl+0x16c/0x1f0 [ 201.140577][ T9744] should_fail_ex+0x512/0x640 [ 201.140601][ T9744] _copy_from_iter+0x2a4/0x15b0 [ 201.140625][ T9744] ? __alloc_skb+0x200/0x380 [ 201.140648][ T9744] ? __pfx__copy_from_iter+0x10/0x10 [ 201.140679][ T9744] netlink_sendmsg+0x829/0xdd0 [ 201.140699][ T9744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.140716][ T9744] ? __import_iovec+0x1c8/0x660 [ 201.140742][ T9744] ____sys_sendmsg+0xa95/0xc70 [ 201.140763][ T9744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.140780][ T9744] ? get_compat_msghdr+0x11a/0x170 [ 201.140811][ T9744] ___sys_sendmsg+0x134/0x1d0 [ 201.140827][ T9744] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.140869][ T9744] __sys_sendmsg+0x16d/0x220 [ 201.140888][ T9744] ? __pfx___sys_sendmsg+0x10/0x10 [ 201.140903][ T9744] ? native_tss_update_io_bitmap+0x3ca/0x720 [ 201.140927][ T9744] ? rcu_is_watching+0x12/0xc0 [ 201.140944][ T9744] __do_fast_syscall_32+0x73/0x120 [ 201.140964][ T9744] do_fast_syscall_32+0x32/0x80 [ 201.140982][ T9744] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.141000][ T9744] RIP: 0023:0xf7fb4579 [ 201.141012][ T9744] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 201.141026][ T9744] RSP: 002b:00000000f50b555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 201.141040][ T9744] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800001c0 [ 201.141049][ T9744] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.141058][ T9744] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.141066][ T9744] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 201.141075][ T9744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.141094][ T9744] [ 201.144391][ T9744] netlink: 36 bytes leftover after parsing attributes in process `syz.0.958'. [ 201.675317][ T9760] netlink: 168 bytes leftover after parsing attributes in process `syz.0.961'. [ 201.737109][ T9762] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 202.018249][ T9784] netfs: Couldn't get user pages (rc=-14) [ 202.166496][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 203.170804][ T9842] IPVS: Error joining to the multicast group [ 203.196452][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 203.288325][ T9847] netlink: 'syz.1.971': attribute type 1 has an invalid length. [ 203.369120][ T9849] netlink: 'syz.2.973': attribute type 4 has an invalid length. [ 203.378149][ T9849] netlink: 'syz.2.973': attribute type 4 has an invalid length. [ 203.419820][ T9852] netfs: Couldn't get user pages (rc=-14) [ 204.236477][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 204.338668][ T9865] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 205.286465][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 205.655191][ T9886] ptrace attach of "/syz-executor exec"[9888] was attempted by "/syz-executor exec"[9886] [ 206.316447][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 206.735461][ T9911] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 206.944951][ T9895] syz.1.987 (9895): drop_caches: 3 [ 207.356476][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 208.196486][ T836] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 208.406509][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 208.690936][ T9943] __nla_validate_parse: 3 callbacks suppressed [ 208.690948][ T9943] netlink: 224 bytes leftover after parsing attributes in process `syz.1.999'. [ 208.847542][ T9946] netfs: Couldn't get user pages (rc=-14) [ 208.866491][ T836] usb 7-1: Using ep0 maxpacket: 32 [ 208.870074][ T836] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 208.876938][ T836] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 208.879975][ T836] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 208.882481][ T836] usb 7-1: Product: syz [ 208.883816][ T836] usb 7-1: Manufacturer: syz [ 208.885317][ T836] usb 7-1: SerialNumber: syz [ 208.890321][ T836] usb 7-1: config 0 descriptor?? [ 208.892638][ T9938] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 209.100486][ T9938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.104833][ T9938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.431260][ T24] usb 7-1: USB disconnect, device number 14 [ 209.446448][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 209.950130][ T9960] @: renamed from vlan0 (while UP) [ 210.486461][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 211.516454][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 212.259564][T10037] FAULT_INJECTION: forcing a failure. [ 212.259564][T10037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.263920][T10037] CPU: 3 UID: 0 PID: 10037 Comm: syz.3.1011 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 212.263934][T10037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 212.263939][T10037] Call Trace: [ 212.263943][T10037] [ 212.263947][T10037] dump_stack_lvl+0x16c/0x1f0 [ 212.263963][T10037] should_fail_ex+0x512/0x640 [ 212.263979][T10037] _copy_from_user+0x2e/0xd0 [ 212.263993][T10037] memdup_user+0x6b/0xe0 [ 212.264007][T10037] strndup_user+0x78/0xe0 [ 212.264019][T10037] __ia32_sys_mount+0x137/0x310 [ 212.264030][T10037] ? __pfx___ia32_sys_mount+0x10/0x10 [ 212.264041][T10037] ? rcu_is_watching+0x12/0xc0 [ 212.264052][T10037] __do_fast_syscall_32+0x73/0x120 [ 212.264065][T10037] do_fast_syscall_32+0x32/0x80 [ 212.264077][T10037] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.264089][T10037] RIP: 0023:0xf711e579 [ 212.264097][T10037] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 212.264107][T10037] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 212.264116][T10037] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0 [ 212.264122][T10037] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000080000240 [ 212.264128][T10037] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 212.264133][T10037] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 212.264138][T10037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.264150][T10037] [ 212.388746][T10042] FAULT_INJECTION: forcing a failure. [ 212.388746][T10042] name failslab, interval 1, probability 0, space 0, times 0 [ 212.394011][T10042] CPU: 2 UID: 0 PID: 10042 Comm: syz.0.1013 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 212.394032][T10042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 212.394042][T10042] Call Trace: [ 212.394048][T10042] [ 212.394054][T10042] dump_stack_lvl+0x16c/0x1f0 [ 212.394078][T10042] should_fail_ex+0x512/0x640 [ 212.394100][T10042] ? __kvmalloc_node_noprof+0x122/0x600 [ 212.394120][T10042] should_failslab+0xc2/0x120 [ 212.394140][T10042] __kvmalloc_node_noprof+0x135/0x600 [ 212.394157][T10042] ? lockdep_init_map_type+0x5c/0x280 [ 212.394178][T10042] ? alloc_netdev_mqs+0xcf8/0x1570 [ 212.394200][T10042] ? alloc_netdev_mqs+0xcf8/0x1570 [ 212.394215][T10042] alloc_netdev_mqs+0xcf8/0x1570 [ 212.394237][T10042] rtnl_create_link+0xc10/0xfa0 [ 212.394258][T10042] rtnl_newlink+0xb69/0x2000 [ 212.394283][T10042] ? __pfx_rtnl_newlink+0x10/0x10 [ 212.394299][T10042] ? kernel_text_address+0x8d/0x100 [ 212.394327][T10042] ? arch_stack_walk+0xa6/0x100 [ 212.394361][T10042] ? rcu_is_watching+0x12/0xc0 [ 212.394376][T10042] ? trace_cap_capable+0x18d/0x200 [ 212.394398][T10042] ? find_held_lock+0x2b/0x80 [ 212.394411][T10042] ? __pfx_rtnl_newlink+0x10/0x10 [ 212.394426][T10042] ? __pfx_rtnl_newlink+0x10/0x10 [ 212.394440][T10042] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 212.394456][T10042] ? __pfx_rtnl_newlink+0x10/0x10 [ 212.394473][T10042] rtnetlink_rcv_msg+0x95b/0xe90 [ 212.394492][T10042] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 212.394526][T10042] netlink_rcv_skb+0x16a/0x440 [ 212.394544][T10042] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 212.394562][T10042] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 212.394595][T10042] ? netlink_deliver_tap+0x1ae/0xd30 [ 212.394616][T10042] netlink_unicast+0x53a/0x7f0 [ 212.394637][T10042] ? __pfx_netlink_unicast+0x10/0x10 [ 212.394662][T10042] netlink_sendmsg+0x8d1/0xdd0 [ 212.394684][T10042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.394703][T10042] ? __import_iovec+0x1c8/0x660 [ 212.394732][T10042] ____sys_sendmsg+0xa95/0xc70 [ 212.394755][T10042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.394773][T10042] ? get_compat_msghdr+0x11a/0x170 [ 212.394811][T10042] ___sys_sendmsg+0x134/0x1d0 [ 212.394829][T10042] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.394869][T10042] ? __pfx_vfs_write+0x10/0x10 [ 212.394885][T10042] ? do_sys_openat2+0x157/0x1d0 [ 212.394910][T10042] __sys_sendmsg+0x16d/0x220 [ 212.394926][T10042] ? __pfx___sys_sendmsg+0x10/0x10 [ 212.394950][T10042] ? rcu_is_watching+0x12/0xc0 [ 212.394968][T10042] ? rcu_is_watching+0x12/0xc0 [ 212.394986][T10042] __do_fast_syscall_32+0x73/0x120 [ 212.395004][T10042] do_fast_syscall_32+0x32/0x80 [ 212.395020][T10042] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 212.395044][T10042] RIP: 0023:0xf7fb4579 [ 212.395058][T10042] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 212.395074][T10042] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 212.395088][T10042] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 212.395097][T10042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 212.395107][T10042] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 212.395118][T10042] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 212.395127][T10042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.395149][T10042] [ 212.532153][ C2] hpet_rtc_timer_reinit: 33 callbacks suppressed [ 212.532168][ C2] hpet: Lost 8 RTC interrupts [ 212.556467][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 213.606443][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 214.636522][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 215.676508][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 216.198604][T10136] SET target dimension over the limit! [ 216.716468][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 216.980098][ T29] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 216.982508][ T29] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 216.984883][ T29] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 216.987316][ T29] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 216.990220][ T29] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 216.992936][ T29] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 216.995424][ T29] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 216.998243][ T29] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 217.000958][ T29] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 217.003248][ T29] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 217.005555][ T29] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 217.007903][ T29] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 217.010218][ T29] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 217.012529][ T29] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 217.014816][ T29] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 217.017143][ T29] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 217.023380][ T29] hid-generic FFF9:0000:0203.0004: hidraw1: HID v0.00 Device [syz0] on syz1 [ 217.756458][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 218.796461][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 219.836454][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 219.839378][ T34] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 219.996715][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 220.000919][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 220.005505][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 220.009889][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.013882][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.018549][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.021455][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.235563][ T34] usb 5-1: usb_control_msg returned -71 [ 220.237994][ T34] usbtmc 5-1:16.0: can't read capabilities [ 220.257838][ T34] usb 5-1: USB disconnect, device number 4 [ 220.886476][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 220.979068][ C2] hpet: Lost 1 RTC interrupts [ 221.638889][ T34] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 221.796944][ T34] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 221.800987][ T34] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.803761][ T34] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.811364][ T34] usb 8-1: config 0 interface 0 has no altsetting 0 [ 221.814757][ T34] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.818682][ T34] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.822280][ T34] usb 8-1: config 0 interface 0 has no altsetting 0 [ 221.825196][ T34] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.827885][ T34] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.831239][ T34] usb 8-1: config 0 interface 0 has no altsetting 0 [ 221.834746][ T34] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.837969][ T34] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.841431][ T34] usb 8-1: config 0 interface 0 has no altsetting 0 [ 221.844620][ T34] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.847436][ T34] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.850734][ T34] usb 8-1: config 0 interface 0 has no altsetting 0 [ 221.854009][ T34] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.856856][ T34] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.860167][ T34] usb 8-1: config 0 interface 0 has no altsetting 0 [ 221.863105][ T34] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.865862][ T34] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.869453][ T34] usb 8-1: config 0 interface 0 has no altsetting 0 [ 221.872323][ T34] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.875057][ T34] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.878467][ T34] usb 8-1: config 0 interface 0 has no altsetting 0 [ 221.882499][ T34] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 221.885644][ T34] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 221.888529][ T34] usb 8-1: Product: syz [ 221.889860][ T34] usb 8-1: Manufacturer: syz [ 221.891351][ T34] usb 8-1: SerialNumber: syz [ 221.896702][ T34] usb 8-1: config 0 descriptor?? [ 221.903565][ T34] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 221.926437][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 222.108385][ T24] usb 8-1: USB disconnect, device number 7 [ 222.112918][ T24] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 222.125222][T10296] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 222.829487][T10311] fuse: Bad value for 'user_id' [ 222.831067][T10311] fuse: Bad value for 'user_id' [ 222.966465][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 223.000878][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1070'. [ 223.061118][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1070'. [ 223.875334][ C2] hpet: Lost 1 RTC interrupts [ 224.006482][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 224.020667][T10352] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 225.036460][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 225.126788][T10399] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 226.076501][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 227.126486][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 227.293879][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1088'. [ 227.366159][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1088'. [ 227.826988][ T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 227.853860][T10476] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 227.979461][ T34] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 227.983307][ T34] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 227.986337][ T34] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 227.989710][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.994957][T10475] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 227.999111][ T34] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 228.156493][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 228.255638][ T34] usb 5-1: USB disconnect, device number 5 [ 229.206468][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 229.791119][T10532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1099'. [ 230.236453][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 230.866478][ T40] audit: type=1326 audit(1745859245.506:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10549 comm="syz.0.1105" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb4579 code=0x0 [ 231.086985][T10559] netlink: 'syz.2.1106': attribute type 1 has an invalid length. [ 231.102856][T10559] netlink: 784 bytes leftover after parsing attributes in process `syz.2.1106'. [ 231.276446][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 231.634009][T10571] random: crng reseeded on system resumption [ 231.652427][T10571] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 231.655471][T10571] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 232.326437][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 232.424612][T10576] netlink: 'syz.3.1113': attribute type 1 has an invalid length. [ 232.430116][T10576] netlink: 784 bytes leftover after parsing attributes in process `syz.3.1113'. [ 232.786583][ T6007] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 232.978129][ T6007] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 232.981613][ T6007] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 232.987088][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 232.991342][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 232.995406][ T6007] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.001141][ T6007] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.004834][ T6007] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.015340][ T6007] usb 6-1: config 0 descriptor?? [ 233.356613][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 233.509006][ T6007] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 233.511439][ T6007] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 233.514186][ T6007] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x7 [ 233.516712][ T6007] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 233.519162][ T6007] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 233.521470][ T6007] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 233.523751][ T6007] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 233.526155][ T6007] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 233.530067][ T6007] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 233.532380][ T6007] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 233.534696][ T6007] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 233.537699][ T6007] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 233.544823][ T6007] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 233.548380][ T6007] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 233.560907][ T6007] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 233.870004][ T24] usb 6-1: USB disconnect, device number 8 [ 234.396499][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 235.111132][T10653] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 235.436492][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 235.946548][ T6006] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 236.078579][ T6006] usb 7-1: device descriptor read/64, error -71 [ 236.316569][ T6006] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 236.446575][ T6006] usb 7-1: device descriptor read/64, error -71 [ 236.476740][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 236.557366][ T6006] usb usb7-port1: attempt power cycle [ 237.136744][ T6006] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 237.157035][ T6006] usb 7-1: device descriptor read/8, error -71 [ 237.416916][ T6006] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 237.447187][ T6006] usb 7-1: device descriptor read/8, error -71 [ 237.516464][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 237.531031][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'. [ 237.534933][T10761] IPVS: Error joining to the multicast group [ 237.673669][ T6006] usb usb7-port1: unable to enumerate USB device [ 238.428080][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1154'. [ 238.487611][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1154'. [ 238.556532][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 239.096571][ T6006] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 239.540770][ T6006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.544483][ T6006] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 239.547426][ T6006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.551117][ T6006] usb 7-1: config 0 descriptor?? [ 239.596458][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 239.970821][T10787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.974393][T10787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.984850][T10787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.988179][T10787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.309420][ T6006] usbhid 7-1:0.0: can't add hid device: -71 [ 240.311511][ T6006] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 240.315180][ T6006] usb 7-1: USB disconnect, device number 19 [ 240.636582][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 240.875755][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'. [ 240.933099][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'. [ 241.676511][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 242.726493][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 242.911862][T10901] netfs: Couldn't get user pages (rc=-14) [ 243.766445][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 244.796465][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 245.370806][T11011] netfs: Couldn't get user pages (rc=-14) [ 245.846444][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 246.077549][T11026] lo speed is unknown, defaulting to 1000 [ 246.079012][T11028] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 246.079568][T11026] lo speed is unknown, defaulting to 1000 [ 246.086449][T11026] lo speed is unknown, defaulting to 1000 [ 246.091065][T11026] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 246.097040][T11026] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 246.112845][T11026] lo speed is unknown, defaulting to 1000 [ 246.116931][T11026] lo speed is unknown, defaulting to 1000 [ 246.119255][T11026] lo speed is unknown, defaulting to 1000 [ 246.121780][T11026] lo speed is unknown, defaulting to 1000 [ 246.316215][T11015] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 246.371703][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'. [ 246.379291][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'. [ 246.594933][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1198'. [ 246.602787][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1198'. [ 246.605595][T11065] netlink: 'syz.2.1198': attribute type 13 has an invalid length. [ 246.608932][T11065] netlink: 'syz.2.1198': attribute type 14 has an invalid length. [ 246.643708][T11073] random: crng reseeded on system resumption [ 246.653303][T11073] Restarting kernel threads ... done. [ 246.701828][T11062] infiniband syz2: set down [ 246.704928][T11062] infiniband syz2: added ipvlan1 [ 246.740172][T11062] RDS/IB: syz2: added [ 246.741784][T11062] smc: adding ib device syz2 with port count 1 [ 246.743752][T11062] smc: ib device syz2 port 1 has pnetid [ 246.876541][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 247.124528][T11096] netfs: Couldn't get user pages (rc=-14) [ 247.926486][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 248.956497][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 249.996541][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 250.449630][T11163] /dev/nullb0: Can't open blockdev [ 251.036503][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 251.506479][ T6374] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 251.658386][ T6374] usb 8-1: config 0 has an invalid interface number: 29 but max is 0 [ 251.661783][ T6374] usb 8-1: config 0 has no interface number 0 [ 251.664252][ T6374] usb 8-1: config 0 interface 29 has no altsetting 0 [ 251.671274][ T6374] usb 8-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 251.675014][ T6374] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.678429][ T6374] usb 8-1: Product: syz [ 251.680155][ T6374] usb 8-1: Manufacturer: syz [ 251.682090][ T6374] usb 8-1: SerialNumber: syz [ 251.689111][ T6374] usb 8-1: config 0 descriptor?? [ 251.898381][ T6374] peak_usb 8-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 251.907788][ T6374] peak_usb 8-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 251.953021][T11197] ubi31: attaching mtd0 [ 251.958024][T11197] ubi31: scanning is finished [ 251.959957][T11197] ubi31: empty MTD device detected [ 252.009353][ T6374] peak_usb 8-1:0.29: probe with driver peak_usb failed with error -71 [ 252.015751][ T6374] usb 8-1: USB disconnect, device number 8 [ 252.069328][T11197] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 252.072511][T11197] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 252.075205][T11197] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 252.077659][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 252.081167][T11197] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 252.084256][T11197] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 252.088523][T11197] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 252.091881][T11197] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1116027946 [ 252.095895][T11197] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 252.101267][T11202] ubi31: background thread "ubi_bgt31d" started, PID 11202 [ 252.346487][T11210] block nbd1: NBD_DISCONNECT [ 252.350908][T11210] block nbd1: Send disconnect failed -22 [ 252.528923][ T5955] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 253.126461][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 253.409826][T11207] block nbd1: Disconnected due to user request. [ 253.412887][T11207] block nbd1: shutting down sockets [ 253.616479][ T34] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 253.779950][ T34] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.784046][ T34] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 253.796607][ T34] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 253.801393][ T34] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 64 [ 253.805834][ T34] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 253.826061][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.832494][T11234] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 253.837494][ T34] hub 7-1:1.0: bad descriptor, ignoring hub [ 253.840029][ T34] hub 7-1:1.0: probe with driver hub failed with error -5 [ 253.843516][ T34] cdc_wdm 7-1:1.0: skipping garbage [ 253.845512][ T34] cdc_wdm 7-1:1.0: skipping garbage [ 253.850580][ T34] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 254.156532][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 254.157356][ T9] usb 7-1: USB disconnect, device number 20 [ 254.861951][T11264] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 254.864122][T11264] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 254.867019][T11264] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 254.869540][T11264] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 254.873712][T11264] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 254.876255][T11264] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 255.119542][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.139126][T11274] syzkaller0: entered promiscuous mode [ 255.140852][T11274] syzkaller0: entered allmulticast mode [ 255.152269][T11276] overlayfs: missing 'lowerdir' [ 256.236463][ C3] net_ratelimit: 1057 callbacks suppressed [ 256.236481][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 257.276501][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 258.326470][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 259.356494][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 260.396491][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 261.436462][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 261.526531][ T71] sched: DL replenish lagged too much [ 262.476460][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 263.516502][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 264.556495][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 265.606454][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 266.646482][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 267.676507][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 268.716462][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 269.766490][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 270.103463][ T5952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.107529][ T5952] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.110269][ T5952] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.114306][ T5952] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.118595][ T5952] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.796575][ C3] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 271.096535][ T1416] ================================================================== [ 271.099034][ T1416] BUG: KASAN: slab-use-after-free in tty_write_room+0x7d/0x90 [ 271.101333][ T1416] Read of size 8 at addr ffff88804f9ee020 by task aoe_tx0/1416 [ 271.105484][ T1416] [ 271.106892][ T1416] CPU: 0 UID: 0 PID: 1416 Comm: aoe_tx0 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 271.106914][ T1416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 271.106923][ T1416] Call Trace: [ 271.106929][ T1416] [ 271.106935][ T1416] dump_stack_lvl+0x116/0x1f0 [ 271.106958][ T1416] print_report+0xc3/0x670 [ 271.106984][ T1416] ? __virt_addr_valid+0x5e/0x590 [ 271.107005][ T1416] ? __phys_addr+0xc6/0x150 [ 271.107022][ T1416] ? tty_write_room+0x7d/0x90 [ 271.107044][ T1416] kasan_report+0xe0/0x110 [ 271.107063][ T1416] ? tty_write_room+0x7d/0x90 [ 271.107088][ T1416] tty_write_room+0x7d/0x90 [ 271.107109][ T1416] handle_tx+0x14f/0x630 [ 271.107126][ T1416] dev_hard_start_xmit+0x93/0x740 [ 271.107149][ T1416] __dev_queue_xmit+0x7eb/0x43e0 [ 271.107174][ T1416] ? rcu_is_watching+0x12/0xc0 [ 271.107190][ T1416] ? irqentry_exit+0x3b/0x90 [ 271.107207][ T1416] ? __pfx___dev_queue_xmit+0x10/0x10 [ 271.107229][ T1416] ? __lock_acquire+0xaa4/0x1ba0 [ 271.107251][ T1416] ? __lock_acquire+0xaa4/0x1ba0 [ 271.107273][ T1416] ? do_raw_spin_lock+0x12c/0x2b0 [ 271.107297][ T1416] ? rcu_is_watching+0x12/0xc0 [ 271.107314][ T1416] tx+0xcc/0x190 [ 271.107332][ T1416] ? __pfx_tx+0x10/0x10 [ 271.107346][ T1416] kthread+0x1e1/0x3e0 [ 271.107371][ T1416] ? find_held_lock+0x2b/0x80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 271.107383][ T1416] ? __pfx_kthread+0x10/0x10 [ 271.107406][ T1416] ? __pfx_default_wake_function+0x10/0x10 [ 271.107423][ T1416] ? lockdep_hardirqs_on+0x7c/0x110 [ 271.107442][ T1416] ? __kthread_parkme+0x19e/0x250 [ 271.107462][ T1416] ? __pfx_kthread+0x10/0x10 [ 271.107482][ T1416] kthread+0x3c2/0x780 [ 271.107504][ T1416] ? __pfx_kthread+0x10/0x10 [ 271.107524][ T1416] ? __pfx_kthread+0x10/0x10 [ 271.107545][ T1416] ? __pfx_kthread+0x10/0x10 [ 271.107563][ T1416] ? __pfx_kthread+0x10/0x10 [ 271.107582][ T1416] ? rcu_is_watching+0x12/0xc0 [ 271.107597][ T1416] ? __pfx_kthread+0x10/0x10 [ 271.107618][ T1416] ret_from_fork+0x45/0x80 [ 271.107641][ T1416] ? __pfx_kthread+0x10/0x10 [ 271.107660][ T1416] ret_from_fork_asm+0x1a/0x30 [ 271.107709][ T1416] [ 271.107717][ T1416] [ 271.186529][ T1416] Allocated by task 7346: [ 271.186883][T11283] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 271.188347][ T1416] kasan_save_stack+0x33/0x60 [ 271.188359][T11283] ,cpuset= [ 271.192984][T11283] / [ 271.194956][ T1416] kasan_save_track+0x14/0x30 [ 271.196349][T11283] ,mems_allowed=0-1 [ 271.197440][ T1416] __kasan_kmalloc+0xaa/0xb0 [ 271.197460][ T1416] alloc_tty_struct+0x96/0x8c0 [ 271.197480][ T1416] tty_init_dev.part.0+0x1e/0x500 [ 271.197496][ T1416] tty_open+0xa50/0xf90 [ 271.197512][ T1416] chrdev_open+0x231/0x6a0 [ 271.210623][ T1416] do_dentry_open+0x741/0x1c10 [ 271.212662][ T1416] vfs_open+0x82/0x3f0 [ 271.214480][ T1416] path_openat+0x1e5e/0x2d40 [ 271.216475][ T1416] do_filp_open+0x20b/0x470 [ 271.218415][ T1416] do_sys_openat2+0x11b/0x1d0 [ 271.220363][ T1416] __ia32_compat_sys_openat+0x16d/0x210 [ 271.222574][ T1416] __do_fast_syscall_32+0x73/0x120 [ 271.224803][ T1416] do_fast_syscall_32+0x32/0x80 [ 271.226877][ T1416] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 271.229498][ T1416] [ 271.230551][ T1416] Freed by task 6006: [ 271.232315][ T1416] kasan_save_stack+0x33/0x60 [ 271.234381][ T1416] kasan_save_track+0x14/0x30 [ 271.236395][ T1416] kasan_save_free_info+0x3b/0x60 [ 271.238533][ T1416] __kasan_slab_free+0x51/0x70 [ 271.240200][ T1416] kfree+0x2b6/0x4d0 [ 271.241887][ T1416] process_one_work+0x9cc/0x1b70 [ 271.244044][ T1416] worker_thread+0x6c8/0xf10 [ 271.246107][ T1416] kthread+0x3c2/0x780 [ 271.247874][ T1416] ret_from_fork+0x45/0x80 [ 271.249819][ T1416] ret_from_fork_asm+0x1a/0x30 [ 271.251904][ T1416] [ 271.252944][ T1416] Last potentially related work creation: [ 271.255350][ T1416] kasan_save_stack+0x33/0x60 [ 271.257385][ T1416] kasan_record_aux_stack+0xb8/0xd0 [ 271.259620][ T1416] insert_work+0x36/0x230 [ 271.261557][ T1416] __queue_work+0x97e/0x10f0 [ 271.263540][ T1416] queue_work_on+0x1a4/0x1f0 [ 271.265536][ T1416] release_tty+0x4de/0x5d0 [ 271.267456][ T1416] tty_release_struct+0xb7/0xe0 [ 271.269529][ T1416] tty_release+0xe2d/0x1430 [ 271.271477][ T1416] __fput+0x3ff/0xb70 [ 271.273191][ T1416] task_work_run+0x14d/0x240 [ 271.275164][ T1416] do_exit+0xafb/0x2c30 [ 271.277033][ T1416] do_group_exit+0xd3/0x2a0 [ 271.278990][ T1416] get_signal+0x2673/0x26d0 [ 271.280907][ T1416] arch_do_signal_or_restart+0x8f/0x7a0 [ 271.283237][ T1416] syscall_exit_to_user_mode+0x150/0x2a0 [ 271.285622][ T1416] __do_fast_syscall_32+0x80/0x120 [ 271.287791][ T1416] do_fast_syscall_32+0x32/0x80 [ 271.289857][ T1416] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 271.292565][ T1416] [ 271.293599][ T1416] The buggy address belongs to the object at ffff88804f9ee000 [ 271.293599][ T1416] which belongs to the cache kmalloc-cg-2k of size 2048 [ 271.299045][ T1416] The buggy address is located 32 bytes inside of [ 271.299045][ T1416] freed 2048-byte region [ffff88804f9ee000, ffff88804f9ee800) [ 271.304481][ T1416] [ 271.305524][ T1416] The buggy address belongs to the physical page: [ 271.308254][ T1416] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804f9ea000 pfn:0x4f9e8 [ 271.312355][ T1416] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 271.315861][ T1416] memcg:ffff88804f011301 [ 271.317653][ T1416] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 271.321205][ T1416] page_type: f5(slab) [ 271.322926][ T1416] raw: 04fff00000000240 ffff88801b44c140 ffff888040402708 ffffea0001b2c610 [ 271.326504][ T1416] raw: ffff88804f9ea000 0000000000080004 00000000f5000000 ffff88804f011301 [ 271.330057][ T1416] head: 04fff00000000240 ffff88801b44c140 ffff888040402708 ffffea0001b2c610 [ 271.333648][ T1416] head: ffff88804f9ea000 0000000000080004 00000000f5000000 ffff88804f011301 [ 271.337247][ T1416] head: 04fff00000000003 ffffea00013e7a01 00000000ffffffff 00000000ffffffff [ 271.340874][ T1416] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 271.344433][ T1416] page dumped because: kasan: bad access detected [ 271.347133][ T1416] page_owner tracks the page as allocated [ 271.349426][ T1416] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5939, tgid 5939 (syz-executor), ts 47958322383, free_ts 47950508159 [ 271.358219][ T1416] post_alloc_hook+0x181/0x1b0 [ 271.360258][ T1416] get_page_from_freelist+0x135c/0x3920 [ 271.362555][ T1416] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 271.365022][ T1416] alloc_pages_mpol+0x1fb/0x550 [ 271.367055][ T1416] new_slab+0x244/0x340 [ 271.368657][ T1416] ___slab_alloc+0xd9c/0x1940 [ 271.370675][ T1416] __slab_alloc.constprop.0+0x56/0xb0 [ 271.372927][ T1416] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 271.375611][ T1416] kmemdup_noprof+0x29/0x60 [ 271.377566][ T1416] __devinet_sysctl_register+0xbc/0x360 [ 271.379890][ T1416] devinet_sysctl_register+0x17b/0x200 [ 271.382185][ T1416] inetdev_event+0x1638/0x18a0 [ 271.384225][ T1416] notifier_call_chain+0xb9/0x410 [ 271.386406][ T1416] call_netdevice_notifiers_info+0xbe/0x140 [ 271.388789][ T1416] netif_change_name+0x554/0x920 [ 271.390811][ T1416] do_setlink.constprop.0+0x33fe/0x44b0 [ 271.393133][ T1416] page last free pid 5350 tgid 5350 stack trace: [ 271.395767][ T1416] __free_frozen_pages+0x69d/0xff0 [ 271.397918][ T1416] __put_partials+0x16d/0x1c0 [ 271.399941][ T1416] qlist_free_all+0x4e/0x120 [ 271.401409][ T1416] kasan_quarantine_reduce+0x195/0x1e0 [ 271.403082][ T1416] __kasan_slab_alloc+0x69/0x90 [ 271.404594][ T1416] __kmalloc_noprof+0x1d4/0x510 [ 271.406116][ T1416] tomoyo_realpath_from_path+0xc2/0x6e0 [ 271.407862][ T1416] tomoyo_path_perm+0x274/0x460 [ 271.409365][ T1416] security_inode_getattr+0x116/0x290 [ 271.411005][ T1416] vfs_fstat+0x4b/0xd0 [ 271.412293][ T1416] vfs_fstatat+0xbc/0xf0 [ 271.413614][ T1416] __do_sys_newfstatat+0xa1/0x130 [ 271.415178][ T1416] do_syscall_64+0xcd/0x230 [ 271.416657][ T1416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.418480][ T1416] [ 271.419240][ T1416] Memory state around the buggy address: [ 271.420974][ T1416] ffff88804f9edf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 271.423419][ T1416] ffff88804f9edf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 271.425879][ T1416] >ffff88804f9ee000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 271.428352][ T1416] ^ [ 271.429961][ T1416] ffff88804f9ee080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 271.432433][ T1416] ffff88804f9ee100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 271.434871][ T1416] ================================================================== [ 271.437412][ T1416] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 271.439759][ T1416] CPU: 0 UID: 0 PID: 1416 Comm: aoe_tx0 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 271.442813][ T1416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 271.446091][ T1416] Call Trace: [ 271.447172][ T1416] [ 271.448131][ T1416] dump_stack_lvl+0x3d/0x1f0 [ 271.449569][ T1416] panic+0x71c/0x800 [ 271.450774][ T1416] ? __pfx_panic+0x10/0x10 [ 271.452172][ T1416] ? mark_held_locks+0x49/0x80 [ 271.453660][ T1416] ? tty_write_room+0x7d/0x90 [ 271.455127][ T1416] ? check_panic_on_warn+0x1f/0xb0 [ 271.456758][ T1416] ? tty_write_room+0x7d/0x90 [ 271.458217][ T1416] check_panic_on_warn+0xab/0xb0 [ 271.459764][ T1416] end_report+0x107/0x170 [ 271.461114][ T1416] kasan_report+0xee/0x110 [ 271.462498][ T1416] ? tty_write_room+0x7d/0x90 [ 271.463984][ T1416] tty_write_room+0x7d/0x90 [ 271.465410][ T1416] handle_tx+0x14f/0x630 [ 271.466956][ T1416] dev_hard_start_xmit+0x93/0x740 [ 271.468536][ T1416] __dev_queue_xmit+0x7eb/0x43e0 [ 271.470081][ T1416] ? rcu_is_watching+0x12/0xc0 [ 271.471710][ T1416] ? irqentry_exit+0x3b/0x90 [ 271.473184][ T1416] ? __pfx___dev_queue_xmit+0x10/0x10 [ 271.474868][ T1416] ? __lock_acquire+0xaa4/0x1ba0 [ 271.476450][ T1416] ? __lock_acquire+0xaa4/0x1ba0 [ 271.478013][ T1416] ? do_raw_spin_lock+0x12c/0x2b0 [ 271.479604][ T1416] ? rcu_is_watching+0x12/0xc0 [ 271.481133][ T1416] tx+0xcc/0x190 [ 271.482263][ T1416] ? __pfx_tx+0x10/0x10 [ 271.483561][ T1416] kthread+0x1e1/0x3e0 [ 271.484863][ T1416] ? find_held_lock+0x2b/0x80 [ 271.486344][ T1416] ? __pfx_kthread+0x10/0x10 [ 271.487829][ T1416] ? __pfx_default_wake_function+0x10/0x10 [ 271.489632][ T1416] ? lockdep_hardirqs_on+0x7c/0x110 [ 271.491244][ T1416] ? __kthread_parkme+0x19e/0x250 [ 271.492813][ T1416] ? __pfx_kthread+0x10/0x10 [ 271.494287][ T1416] kthread+0x3c2/0x780 [ 271.495573][ T1416] ? __pfx_kthread+0x10/0x10 [ 271.497058][ T1416] ? __pfx_kthread+0x10/0x10 [ 271.498502][ T1416] ? __pfx_kthread+0x10/0x10 [ 271.499960][ T1416] ? __pfx_kthread+0x10/0x10 [ 271.501407][ T1416] ? rcu_is_watching+0x12/0xc0 [ 271.502902][ T1416] ? __pfx_kthread+0x10/0x10 [ 271.504364][ T1416] ret_from_fork+0x45/0x80 [ 271.505773][ T1416] ? __pfx_kthread+0x10/0x10 [ 271.507242][ T1416] ret_from_fork_asm+0x1a/0x30 [ 271.508749][ T1416] [ 271.510539][ T1416] Kernel Offset: disabled [ 271.511903][ T1416] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:48:38 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854bf5f5 RDI=ffffffff9addcb80 RBP=ffffffff9addcb40 RSP=ffffc9000771f440 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9addcb40 R15=ffffffff854bf590 RIP=ffffffff854bf61f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977ef000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005700a4c0 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000eec589 RBX=0000000000000001 RCX=ffffffff8b68c3e9 RDX=0000000000000000 RSI=ffffffff8dbd98cb RDI=ffffffff8bf46720 RBP=ffffed1003b55488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed10056665bd R10=ffff88802b332deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801daaa440 R14=ffffffff90850e10 R15=0000000000000000 RIP=ffffffff8b68ac7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978ef000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008001c000 CR3=00000000762ad000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bf1fcc031c3ac3dc 896450f6712604a6 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f7c03cece9eb07b d003d2eefdad7aee ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 85a681753280f917 f2516d88f5688dd1 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 75c303032295dbbf 07e4f7f4745a67ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001780 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b74a0100593e5e00 00009ba33d85c62b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 40942400967ff500 268bc200a3a4be22 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b5eaca0000009ba2 00009ba200000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 86df87b200009bb7 aa9ad87600009ba0 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1243ba63745577c4 4c3b18148f124280 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8b05c4d8f716dbe7 88e64fc1cb4bfc87 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b241460 RCX=ffffffff81ae9c79 RDX=ffff888049c78000 RSI=ffffffff81ae9c53 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90020797710 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100564828d R13=0000000000000001 R14=dffffc0000000000 R15=ffff88802b43b180 RIP=ffffffff81ae9c55 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979ef000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73f4fe8 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000020210058 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=ffff888020108af0 RCX=00000000fffffffe RDX=0000000000000000 RSI=ffff888020108af0 RDI=ffff888020108af0 RBP=ffff888020108af0 RSP=ffffc90025657378 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000007 R13=0000000000000000 R14=ffff888020108000 R15=0000000000000000 RIP=ffffffff81973750 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097aef000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7405004 CR3=0000000056628000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000020210058 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000