last executing test programs: 4.612253048s ago: executing program 1 (id=6606): syz_usb_connect$midi(0x6, 0x2b, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 2.346140211s ago: executing program 3 (id=6628): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f00000001c0)={0x10, 0x2}) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000300)={{0x84, @dev={0xac, 0x14, 0x14, 0x1b}, 0x4e21, 0x3, 'wrr\x00', 0x3b, 0x9, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000002180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) flock(r7, 0xe) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r9, r10, 0x25, 0x2, @val=@perf_event={0x429}}, 0x18) close_range(r7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="10000000530400082bbd9200"], 0x20000}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) 1.825322668s ago: executing program 0 (id=6634): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x401}}}]}, 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xa, 0x2, {0x2, 0x3ff}}}]}, 0x3c}}, 0x0) 1.52979568s ago: executing program 1 (id=6635): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x1}, {0x0, 0xd1}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x0, 0x3}, {0x0, 0x0, 0x9}, {}, {}, {0x4}, {0x20}, {}, {}, {0x3}, {}, {}, {}, {}, {0x16}, {}, {0x0, 0x1a, 0x40}]}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000080)) 1.518573859s ago: executing program 1 (id=6636): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x2}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000500)="88", 0x1}], 0x1}, 0x0) write$P9_RSETATTR(r1, &(0x7f00000001c0)={0x7, 0x1b, 0x2}, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}}}, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0x4, @empty, 0x6}}, 0x0, 0x9, 0xffff1896, 0x104, 0x25, 0x7fff, 0x9}, 0x9c) 1.482964495s ago: executing program 0 (id=6637): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) recvmmsg(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x3328}], 0x1, 0x0, 0x0, 0x0) close(r0) 1.436641241s ago: executing program 3 (id=6638): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)="d80000001a0081044e81f782db4cb904021d08004f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81017f5b5cef443dc3ed0bffece0b42a9ecbee5de6ccd40dd6e4", 0xd8}], 0x1}, 0x0) r5 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x44000160) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r6 = dup(0xffffffffffffffff) inotify_rm_watch(r6, r5) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000040)) r7 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$netlink(0x10, 0x3, 0x13) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfffffd9d) 596.093094ms ago: executing program 0 (id=6641): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) readlink(&(0x7f0000002000)='./file0/file3\x00', &(0x7f00000021c0)=""/151, 0x97) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f000000ae80)={0x50, 0x0, r1, {0x7, 0x2d, 0x3, 0x10020, 0x40, 0x3ff, 0x8, 0x9, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0xa, {0x3, 0x4, 0x45, 0x1, 0x44e, 0xc, {0x4, 0xc, 0xb, 0x1, 0x4, 0x7, 0x9, 0x7fffffff, 0x0, 0xa000, 0x4, r2, 0x0, 0x0, 0x8b29}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000004800)='./file0/file3\x00', 0x100, 0x0) 595.946787ms ago: executing program 1 (id=6642): ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack_expect\x00') ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) sendmsg$AUDIT_MAKE_EQUIV(r0, 0x0, 0x8080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2a, 0x401000, 0x1, 0x3, 0x2000000, 0x1, 0x3000000}}) 555.959222ms ago: executing program 2 (id=6643): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000001000)={0x1, 0x0, [{0x808}]}) 496.045721ms ago: executing program 1 (id=6644): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x4004884}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r2, 0x1, 0x8, 0x6, @remote}, 0x14) 494.666948ms ago: executing program 3 (id=6645): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000340)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000090, 0x0, 0x20}]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1}) 476.909553ms ago: executing program 0 (id=6646): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f00000001c0)={0x10, 0x2}) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000300)={{0x84, @dev={0xac, 0x14, 0x14, 0x1b}, 0x4e21, 0x3, 'wrr\x00', 0x3b, 0x9, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000002180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) flock(r7, 0xe) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r9, r10, 0x25, 0x2, @val=@perf_event={0x429}}, 0x18) close_range(r7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="10000000530400082bbd9200"], 0x20000}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) 430.436268ms ago: executing program 2 (id=6647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x100000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 381.546125ms ago: executing program 1 (id=6648): mknodat$null(0xffffffffffffff9c, 0x0, 0x2, 0x103) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x81) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 355.979288ms ago: executing program 2 (id=6649): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$bt_hci(r0, 0x11a, 0x5, 0x0, &(0x7f0000000040)=0x7ccd4176) 348.665183ms ago: executing program 3 (id=6650): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000140)='./file0/../file0/../file0\x00') 294.421301ms ago: executing program 2 (id=6651): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, 0x0) 255.942856ms ago: executing program 0 (id=6652): shmctl$IPC_STAT(0x0, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0xc0}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001400010000"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 223.12561ms ago: executing program 3 (id=6653): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x16, 0x14, "fee8a2ab78fc979fd1e00d96f72000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af0000000000000000002900", "2809e8db65b5598948224a0010000000000000bdb22d0000b420a1cb84ddb875d72c9f01177d3d458dd4992861ac00", "f422741b13103e52f400003fe2000000000000000000000000000000002000", [0x8, 0x2000000000001]}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000540)="489ab1aabb2ff7e98c0d098e41a3b37a5abd17cdd9ee79c08137fcada4466f061ad14d270e3fd2b6c6c5a55e3a9991c2a5e23984610fe4c3ee1f8e888a38e78e15d9b49d76e4df00cfc42caebb01577a32eaea73437e6c", 0xd62) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 220.904311ms ago: executing program 2 (id=6654): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 152.02251ms ago: executing program 0 (id=6655): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/ffs.usb0\x00') 44.434697ms ago: executing program 3 (id=6656): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(0x0, 0x108242, 0x78e22799f4a46fa9) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='fi', 0x2) 0s ago: executing program 2 (id=6657): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, 0x1c) kernel console output (not intermixed with test programs): 00/0x190 [ 1558.580162][T25910] warn_alloc.cold+0x94/0xa8 [ 1558.580177][T25910] ? __pfx_warn_alloc+0x10/0x10 [ 1558.580198][T25910] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1558.580219][T25910] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1558.580236][T25910] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 1558.580252][T25910] ? __lock_acquire+0x49f/0x1a40 [ 1558.580278][T25910] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1558.580295][T25910] ? find_held_lock+0x2b/0x80 [ 1558.580309][T25910] ? __free_frozen_pages+0x747/0x1090 [ 1558.580328][T25910] ? __free_frozen_pages+0x747/0x1090 [ 1558.580347][T25910] ? do_raw_spin_unlock+0x145/0x1e0 [ 1558.580360][T25910] ? _raw_spin_unlock+0x28/0x50 [ 1558.580374][T25910] ? irqentry_exit+0x24d/0xa00 [ 1558.580396][T25910] __folio_alloc_noprof+0x13/0x260 [ 1558.580409][T25910] alloc_migration_target+0x1d7/0x6d0 [ 1558.580430][T25910] migrate_pages_batch+0x5dc/0x45c0 [ 1558.580448][T25910] ? __cgroup_account_cputime+0x60/0x130 [ 1558.580469][T25910] ? __pfx_alloc_migration_target+0x10/0x10 [ 1558.580490][T25910] ? migrate_pages_sync+0x12c/0x880 [ 1558.580507][T25910] ? migrate_pages_sync+0x588/0x880 [ 1558.580524][T25910] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1558.580545][T25910] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1558.580564][T25910] ? sched_clock_cpu+0x6c/0x570 [ 1558.580585][T25910] migrate_pages+0x1950/0x2850 [ 1558.580604][T25910] ? __lock_acquire+0x49f/0x1a40 [ 1558.580622][T25910] ? __pfx_alloc_migration_target+0x10/0x10 [ 1558.580642][T25910] ? __pfx_migrate_pages+0x10/0x10 [ 1558.580663][T25910] ? __lock_acquire+0x49f/0x1a40 [ 1558.580682][T25910] ? mtree_load+0x32d/0xa90 [ 1558.580700][T25910] move_pages_and_store_status+0xf1/0x230 [ 1558.580719][T25910] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 1558.580744][T25910] kernel_move_pages+0xc89/0x14a0 [ 1558.580766][T25910] ? __pfx_kernel_move_pages+0x10/0x10 [ 1558.580794][T25910] ? find_held_lock+0x2b/0x80 [ 1558.580807][T25910] ? trace_syscall_enter+0xd9/0x110 [ 1558.580821][T25910] ? trace_syscall_enter+0xd9/0x110 [ 1558.580834][T25910] __ia32_sys_move_pages+0xdd/0x1b0 [ 1558.580852][T25910] ? trace_syscall_enter+0xe3/0x110 [ 1558.580869][T25910] __do_fast_syscall_32+0xe7/0x970 [ 1558.580888][T25910] do_fast_syscall_32+0x32/0x70 [ 1558.580904][T25910] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1558.580920][T25910] RIP: 0023:0xf702efec [ 1558.580935][T25910] Code: Unable to access opcode bytes at 0xf702efc2. [ 1558.580941][T25910] RSP: 002b:00000000f4fb850c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 1558.580953][T25910] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 1558.580960][T25910] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 1558.580967][T25910] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1558.580973][T25910] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1558.580980][T25910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1558.580994][T25910] [ 1558.581051][T25910] Mem-Info: [ 1558.690698][T25910] active_anon:13356 inactive_anon:8733 isolated_anon:1 [ 1558.690698][T25910] active_file:5074 inactive_file:11971 isolated_file:0 [ 1558.690698][T25910] unevictable:768 dirty:318 writeback:0 [ 1558.690698][T25910] slab_reclaimable:7008 slab_unreclaimable:72011 [ 1558.690698][T25910] mapped:23532 shmem:17676 pagetables:1534 [ 1558.690698][T25910] sec_pagetables:332 bounce:0 [ 1558.690698][T25910] kernel_misc_reclaimable:0 [ 1558.690698][T25910] free:43653 free_pcp:1294 free_cma:0 [ 1558.705235][T25910] Node 0 active_anon:48kB inactive_anon:108kB active_file:0kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7296kB pagetables:1112kB sec_pagetables:1104kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1558.719126][T25910] Node 1 active_anon:53884kB inactive_anon:34804kB active_file:20304kB inactive_file:47924kB unevictable:1536kB isolated(anon):4kB isolated(file):0kB mapped:94128kB dirty:1272kB writeback:0kB shmem:69168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9360kB pagetables:5016kB sec_pagetables:228kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1558.730746][T25910] Node 0 DMA free:2564kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:36kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1558.741160][T25910] lowmem_reserve[]: 0 280 280 280 280 [ 1558.743590][T25910] Node 0 DMA32 free:33640kB boost:28728kB min:41496kB low:44688kB high:47880kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:108kB active_file:0kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:3168kB present:1032196kB managed:286916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1558.753865][T25910] lowmem_reserve[]: 0 0 0 0 0 [ 1558.755525][T25910] Node 1 DMA32 free:135960kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54284kB inactive_anon:34804kB active_file:20304kB inactive_file:48124kB unevictable:1536kB writepending:1272kB zspages:9976kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:6292kB local_pcp:2952kB free_cma:0kB [ 1558.767301][T25910] lowmem_reserve[]: 0 0 0 0 0 [ 1558.775581][T25910] Node 0 DMA: 141*4kB (UM) 4*8kB (UM) 7*16kB (UM) 8*32kB (UM) 5*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2564kB [ 1558.782278][T25910] Node 0 DMA32: 656*4kB (UME) 253*8kB (UME) 134*16kB (UME) 251*32kB (UME) 68*64kB (UME) 27*128kB (UME) 5*256kB (M) 5*512kB (M) 3*1024kB (M) 2*2048kB (UM) 0*4096kB = 33640kB [ 1558.791792][T25910] Node 1 DMA32: 170*4kB (UME) 1805*8kB (UME) 741*16kB (UME) 314*32kB (UME) 194*64kB (UME) 91*128kB (UME) 60*256kB (UME) 29*512kB (UM) 25*1024kB (UM) 8*2048kB (UM) 0*4096kB = 133280kB [ 1558.804471][T25910] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1558.812965][ T42] audit: type=1800 audit(1785977736.739:2384): pid=25906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4315" name="blocks" dev="configfs" ino=87635 res=0 errno=0 [ 1558.825432][ T42] audit: type=1800 audit(1785977736.739:2385): pid=25906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4315" name="start_block" dev="configfs" ino=87636 res=0 errno=0 [ 1558.839768][T25910] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1558.849299][ T42] audit: type=1800 audit(1785977736.749:2386): pid=25906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4315" name="dev" dev="configfs" ino=87637 res=0 errno=0 [ 1558.856181][T25910] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1558.859672][T25910] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1558.862845][T25910] 35335 total pagecache pages [ 1558.864531][T25910] 1252 pages in swap cache [ 1558.866196][T25910] Free swap = 24kB [ 1558.867749][T25910] Total swap = 124996kB [ 1558.869376][T25910] 524155 pages RAM [ 1558.870847][T25910] 0 pages HighMem/MovableOnly [ 1558.872575][T25910] 211533 pages reserved [ 1558.874515][T25910] 0 pages cma reserved [ 1559.708060][T25933] netlink: 'syz.0.4320': attribute type 1 has an invalid length. [ 1559.749956][T25933] bond7: entered promiscuous mode [ 1559.762956][T25933] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1559.771124][T25942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4320'. [ 1559.775081][T25942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4320'. [ 1559.852023][T25933] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4320'. [ 1559.924658][T25942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4320'. [ 1559.949027][T25944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4323'. [ 1559.998472][T25942] bond7: (slave bridge4): making interface the new active one [ 1560.004630][T25942] bridge4: entered promiscuous mode [ 1560.010942][T25942] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 1564.035093][T26032] lo speed is unknown, defaulting to 1000 [ 1565.011934][T26032] wg2 speed is unknown, defaulting to 1000 [ 1566.949536][T26068] netlink: 'syz.2.4352': attribute type 33 has an invalid length. [ 1566.952596][T26068] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4352'. [ 1566.957151][T26068] `: renamed from team0 [ 1567.384068][T26093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4356'. [ 1567.388525][T26093] IPv6: Can't replace route, no match found [ 1568.821309][T26139] netlink: 'syz.1.4365': attribute type 2 has an invalid length. [ 1568.826096][T26139] netlink: 'syz.1.4365': attribute type 2 has an invalid length. [ 1570.284382][T26183] netlink: 'syz.0.4379': attribute type 39 has an invalid length. [ 1571.948310][T26241] lo speed is unknown, defaulting to 1000 [ 1572.513899][T26241] wg2 speed is unknown, defaulting to 1000 [ 1573.206595][T26263] ip6_vti0: entered allmulticast mode [ 1573.266213][T26263] ip6_vti0: left allmulticast mode [ 1574.296772][T26291] netlink: 'syz.3.4409': attribute type 12 has an invalid length. [ 1575.596537][ T42] audit: type=1800 audit(1785977753.519:2387): pid=26310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4411" name="bus" dev="ramfs" ino=87922 res=0 errno=0 [ 1577.422193][T26361] lo speed is unknown, defaulting to 1000 [ 1578.850649][T26361] wg2 speed is unknown, defaulting to 1000 [ 1579.116526][T26400] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4439'. [ 1579.120083][T26400] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4439'. [ 1580.437370][T26436] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1580.473106][T26438] Cannot find add_set index 3 as target [ 1581.480516][T26443] netlink: 4836 bytes leftover after parsing attributes in process `syz.3.4453'. [ 1581.955057][T26459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4458'. [ 1583.262849][T26492] overlayfs: missing 'lowerdir' [ 1584.033325][T26510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4473'. [ 1584.039482][T26510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4473'. [ 1585.432720][T26562] lo speed is unknown, defaulting to 1000 [ 1585.688479][T26572] MPI: mpi too large (107144 bits) [ 1586.395156][T26562] wg2 speed is unknown, defaulting to 1000 [ 1586.419591][T26595] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4501'. [ 1588.534003][T26643] lo speed is unknown, defaulting to 1000 [ 1588.639333][T26648] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4514'. [ 1589.043229][T26643] wg2 speed is unknown, defaulting to 1000 [ 1590.864706][T26604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4502'. [ 1591.284012][T26697] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4526'. [ 1591.771762][T26722] batadv0: left promiscuous mode [ 1591.902370][T26722] gretap3: left allmulticast mode [ 1592.446575][T26674] Bluetooth: hci3: command 0x0406 tx timeout [ 1593.265069][T26778] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4553'. [ 1594.240981][T26814] tipc: Enabling of bearer rejected, failed to enable media [ 1594.521982][T26674] Bluetooth: hci3: command 0x0406 tx timeout [ 1594.800744][T26831] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4571'. [ 1596.266707][T14849] usb 8-1: new low-speed USB device number 37 using dummy_hcd [ 1596.448594][T14849] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1596.452191][T14849] usb 8-1: config 0 has no interface number 0 [ 1596.454903][T14849] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1596.459651][T14849] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1596.467196][T14849] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1596.471090][T14849] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.477942][T14849] usb 8-1: config 0 descriptor?? [ 1596.483864][T26873] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1596.496039][T14849] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1596.596869][T26674] Bluetooth: hci3: command 0x0406 tx timeout [ 1596.703100][T14849] usb 8-1: USB disconnect, device number 37 [ 1597.540794][T26936] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4604'. [ 1598.676661][ T5750] Bluetooth: hci3: command 0x0406 tx timeout [ 1598.960826][T26971] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4614'. [ 1599.633660][ T5750] Bluetooth: hci1: unexpected subevent 0x03 length: 30 > 9 [ 1600.600656][T27017] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4628'. [ 1601.339479][T27037] netlink: 'syz.3.4635': attribute type 1 has an invalid length. [ 1602.253758][T27059] bond7: left promiscuous mode [ 1602.256527][T27059] bridge4: left promiscuous mode [ 1602.871209][T27072] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 1604.214665][T27087] lo speed is unknown, defaulting to 1000 [ 1604.516671][T22995] usb 8-1: new full-speed USB device number 38 using dummy_hcd [ 1604.598752][T27113] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4660'. [ 1604.602014][T27113] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4660'. [ 1604.679851][T22995] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.685637][T27087] wg2 speed is unknown, defaulting to 1000 [ 1604.685850][T22995] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1604.695355][T22995] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1604.700767][T22995] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.704532][T27119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4662'. [ 1604.713688][T27119] IPv6: NLM_F_CREATE should be specified when creating new route [ 1604.717377][T27119] IPv6: Can't replace route, no match found [ 1604.722719][T22995] usb 8-1: config 0 descriptor?? [ 1604.732506][T22995] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1604.746909][T22995] dvb-usb: bulk message failed: -22 (3/0) [ 1604.767360][T22995] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1604.771476][T22995] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1604.773650][T22995] usb 8-1: media controller created [ 1604.780444][T22995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1604.802176][T22995] dvb-usb: bulk message failed: -22 (6/0) [ 1604.808500][T22995] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1604.817240][T22995] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input30 [ 1604.831612][T22995] dvb-usb: schedule remote query interval to 150 msecs. [ 1604.838914][T22995] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1604.957436][T27105] dvb-usb: bulk message failed: -22 (4/0) [ 1604.975820][T22995] usb 8-1: USB disconnect, device number 38 [ 1605.032132][T22995] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1605.070352][T27127] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4664'. [ 1606.919103][T27168] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4677'. [ 1607.483408][ T42] audit: type=1804 audit(1785977785.409:2388): pid=27184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4682" name="bus" dev="ramfs" ino=92663 res=1 errno=0 [ 1607.501838][ T42] audit: type=1804 audit(1785977785.409:2389): pid=27184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4682" name="bus" dev="ramfs" ino=92663 res=1 errno=0 [ 1607.765670][T27199] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1610.830432][T27236] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4697'. [ 1611.953754][T27268] netlink: 'syz.1.4713': attribute type 12 has an invalid length. [ 1612.000513][ T5750] Bluetooth: hci3: unexpected cc 0x0c05 length: 4 > 1 [ 1612.002837][ T5750] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 1612.037733][ T5750] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1614.071364][ T42] audit: type=1800 audit(1785977791.999:2390): pid=27319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4721" name="bus" dev="ramfs" ino=90937 res=0 errno=0 [ 1614.536280][T27355] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4741'. [ 1615.917668][T27409] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4759'. [ 1616.347470][T27420] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1618.349024][T27461] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4779'. [ 1618.500371][T27474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4782'. [ 1618.505636][T27474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4782'. [ 1618.969957][T22995] libceph: connect (1)[c::]:6789 error -99 [ 1618.972281][T22995] libceph: mon0 (1)[c::]:6789 connect error [ 1619.014617][T27490] ceph: No mds server is up or the cluster is laggy [ 1619.057804][T27493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1619.086308][ T5750] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1619.157309][T27493] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1619.163014][T27493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1619.174830][T27493] veth0_vlan: left promiscuous mode [ 1619.179176][T27493] veth0_vlan: entered promiscuous mode [ 1619.184953][T27493] veth1_vlan: entered promiscuous mode [ 1619.195127][T27493] veth1_macvtap: left promiscuous mode [ 1619.198963][T27493] veth0_macvtap: left promiscuous mode [ 1619.202780][T27493] veth0_macvtap: entered promiscuous mode [ 1619.206736][T27493] veth1_macvtap: entered promiscuous mode [ 1619.230132][T27493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1619.237117][T27493] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1619.241856][T27493] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1619.246489][T27493] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1619.253060][T27493] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1619.258284][T27493] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1619.262719][T27493] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 1619.267502][T27493] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 1619.272135][T27493] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 1619.278074][T27493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1619.284301][T27493] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1619.293016][T27493] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1619.301693][T27493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1619.304401][T27493] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1619.308806][T27493] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1619.313802][T27493] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1619.338198][T27493] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1619.341324][T27493] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1619.344343][T27493] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1619.347466][T27493] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1619.387294][T23121] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1619.390220][T23121] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.392886][T23121] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1619.410961][T23121] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.437328][T23170] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1619.445283][T23170] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.479684][T22384] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1619.491216][T22384] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.569291][T27501] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4788'. [ 1619.651249][T27507] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4792'. [ 1620.134986][T27513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4793'. [ 1620.416677][T22674] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1620.590166][T22674] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1620.598220][T22674] usb 8-1: no configurations [ 1620.600155][T22674] usb 8-1: can't read configurations, error -22 [ 1620.771873][T27531] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4798'. [ 1621.366785][T27550] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4802'. [ 1621.385372][T27551] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4804'. [ 1622.851265][T27588] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4813'. [ 1622.974053][T27592] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4815'. [ 1623.424677][T27600] webusb: landingPage URL 8 bytes too long for given URL scheme [ 1623.689319][T27604] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4817'. [ 1624.943911][T27644] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4829'. [ 1625.690164][T27671] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4836'. [ 1630.100532][T27886] file system registered [ 1630.114435][T27886] unloading [ 1630.149244][T27884] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4868'. [ 1631.429673][T27927] veth1_vlan: left promiscuous mode [ 1631.826573][T23170] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1631.831684][T23170] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.835721][T23170] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1631.839908][T23170] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.850740][T23170] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1631.857458][T23170] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.862759][T23170] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1631.865381][T23170] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.885512][T27962] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4898'. [ 1633.254909][T28027] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4913'. [ 1633.436984][T28036] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4914'. [ 1633.518178][ T5750] Bluetooth: Wrong link type (-71) [ 1634.013159][T28051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1634.355535][T28065] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4926'. [ 1634.386674][T24363] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1634.538539][T24363] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1634.543308][T24363] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1634.547810][T24363] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1634.552926][T24363] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1634.557298][T24363] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.563655][T24363] usb 8-1: config 0 descriptor?? [ 1634.991623][T24363] hid_parser_main: 22 callbacks suppressed [ 1634.991648][T24363] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1634.998324][T24363] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1635.000797][T24363] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1635.003762][T24363] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1635.007038][T24363] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1635.009821][T24363] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1635.012470][T24363] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1635.015243][T24363] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1635.018362][T24363] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1635.021920][T24363] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1635.069574][T24363] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1635.261227][T24363] usb 8-1: USB disconnect, device number 41 [ 1635.577147][T28090] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4934'. [ 1635.867317][T28106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4941'. [ 1635.884380][T28102] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4937'. [ 1637.598328][T28169] program syz.3.4966 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1640.017832][T28266] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5004'. [ 1640.058018][T28268] lo speed is unknown, defaulting to 1000 [ 1640.228479][T28268] wg2 speed is unknown, defaulting to 1000 [ 1640.691739][ T5750] Bluetooth: hci3: unexpected subevent 0x03 length: 30 > 9 [ 1641.796614][T24363] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1641.948443][T24363] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1641.952045][T24363] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1641.955125][T24363] usb 8-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1641.959305][T24363] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1641.963496][T28332] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5026'. [ 1641.964497][T24363] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1641.971574][T24363] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1641.975450][T24363] usb 8-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1641.979317][T24363] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1641.986245][T24363] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1641.989344][T24363] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.991920][T24363] usb 8-1: Product: syz [ 1641.993234][T24363] usb 8-1: Manufacturer: syz [ 1641.994748][T24363] usb 8-1: SerialNumber: syz [ 1642.014974][T24363] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 1642.024930][T24363] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1642.031072][T24363] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1642.222356][T28319] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 1642.227616][T24363] usb 8-1: USB disconnect, device number 42 [ 1642.268360][T24363] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1642.296485][T24363] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1642.311420][T24363] ti_usb_3410_5052 8-1:2.0: device disconnected [ 1642.389219][T28341] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1643.835920][T28372] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5039'. [ 1644.377025][T28395] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5043'. [ 1645.813400][T28460] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5066'. [ 1645.949037][T28465] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5067'. [ 1647.164446][T28504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5084'. [ 1647.306997][T28514] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5085'. [ 1647.730172][T28527] netlink: 'syz.2.5094': attribute type 12 has an invalid length. [ 1648.370204][T28555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5105'. [ 1649.062416][T28595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5120'. [ 1649.740025][T28616] netlink: 'syz.1.5127': attribute type 2 has an invalid length. [ 1650.711236][T28643] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5136'. [ 1651.834749][ T5750] Bluetooth: hci3: Malformed LE Event: 0x1d [ 1652.133673][T28705] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5158'. [ 1653.125892][T28726] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5171'. [ 1653.195191][T28733] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5172'. [ 1655.213714][T22995] libceph: connect (1)[c::]:6789 error -99 [ 1655.237295][T22995] libceph: mon0 (1)[c::]:6789 connect error [ 1655.268537][T28809] ceph: No mds server is up or the cluster is laggy [ 1655.332776][T28812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1655.341225][T28812] 8021q: adding VLAN 0 to HW filter on device team0 [ 1655.358687][T28812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1655.459722][T28812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1655.463806][T28812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1655.471919][T28812] veth1_vlan: left promiscuous mode [ 1655.475014][T28812] veth0_vlan: left promiscuous mode [ 1655.478835][T28812] veth0_vlan: entered promiscuous mode [ 1655.482727][T28812] veth1_vlan: entered promiscuous mode [ 1655.527368][T28812] veth1_macvtap: left promiscuous mode [ 1655.530571][T28812] veth0_macvtap: left promiscuous mode [ 1655.533761][T28812] veth0_macvtap: entered promiscuous mode [ 1655.537144][T28812] veth1_macvtap: entered promiscuous mode [ 1655.550045][T28812] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1655.554438][T28812] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1655.558625][T28812] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1655.562796][T28812] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1655.566852][T28812] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1655.570948][T28812] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 1655.575185][T28812] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 1655.579954][T28812] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 1655.584362][T28812] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 1655.601542][T28812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1655.605400][T28812] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1655.609816][T28812] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1655.614910][T28812] batman_adv: batadv0: Interface activated: gretap2 [ 1655.623195][T28812] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1655.628304][T28812] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1655.632801][T28812] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1655.637842][T28812] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1655.682907][T23511] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1655.686278][T23511] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1655.728026][T14849] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1655.731219][T23511] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1655.742211][T23511] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1655.747455][T23511] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 43387 - 0 [ 1655.755477][T23511] netdevsim netdevsim1 eth1: set [1, 3] type 2 family 0 port 256 - 0 [ 1655.777293][T23511] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1655.780437][T23511] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1655.783517][T23511] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 43387 - 0 [ 1655.786975][T23511] netdevsim netdevsim1 eth2: set [1, 3] type 2 family 0 port 256 - 0 [ 1655.791751][T23511] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1655.816656][T23511] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1655.820160][T23511] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 43387 - 0 [ 1655.823473][T23511] netdevsim netdevsim1 eth3: set [1, 3] type 2 family 0 port 256 - 0 [ 1655.826978][T23511] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1655.832108][T23511] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1655.835826][T14849] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1655.846650][T23511] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 43387 - 0 [ 1655.852278][T23511] netdevsim netdevsim1 eth0: set [1, 3] type 2 family 0 port 256 - 0 [ 1656.447875][T14849] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1656.675262][T28852] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5212'. [ 1657.216821][ T42] audit: type=1800 audit(1785977835.149:2391): pid=28862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5218" name="blocks" dev="configfs" ino=96375 res=0 errno=0 [ 1657.433165][T28870] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5222'. [ 1659.042800][T28916] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5236'. [ 1659.396681][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1660.854358][T28950] syz.3.5247 invoked oom-killer: gfp_mask=0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 1660.860451][T28950] CPU: 3 UID: 0 PID: 28950 Comm: syz.3.5247 Tainted: G L syzkaller #0 PREEMPT(full) [ 1660.860484][T28950] Tainted: [L]=SOFTLOCKUP [ 1660.860491][T28950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1660.860511][T28950] Call Trace: [ 1660.860520][T28950] [ 1660.860530][T28950] dump_stack_lvl+0x100/0x190 [ 1660.860569][T28950] dump_header+0xfb/0x606 [ 1660.860595][T28950] oom_kill_process.cold+0xd/0x330 [ 1660.860620][T28950] out_of_memory+0x1256/0x14f0 [ 1660.860677][T28950] ? __pfx_out_of_memory+0x10/0x10 [ 1660.860715][T28950] __alloc_frozen_pages_noprof+0x24c2/0x2dc0 [ 1660.860759][T28950] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1660.860786][T28950] ? is_bpf_text_address+0x8a/0x1a0 [ 1660.860828][T28950] ? bpf_ksym_find+0x124/0x1c0 [ 1660.860858][T28950] ? __lock_acquire+0x49f/0x1a40 [ 1660.860897][T28950] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1660.860938][T28950] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 1660.860966][T28950] ? policy_nodemask+0xed/0x4f0 [ 1660.860999][T28950] alloc_pages_mpol+0x1fb/0x540 [ 1660.861028][T28950] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1660.861064][T28950] folio_alloc_mpol_noprof+0x36/0x260 [ 1660.861098][T28950] vma_alloc_folio_noprof+0xed/0x1d0 [ 1660.861118][T28950] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1660.861159][T28950] do_anonymous_page+0xb2b/0x2080 [ 1660.861182][T28950] ? rcu_read_unlock+0x2d/0xb0 [ 1660.861210][T28950] __handle_mm_fault+0x1d2c/0x2a00 [ 1660.861236][T28950] ? mt_find+0x45e/0x8e0 [ 1660.861274][T28950] ? __pfx___handle_mm_fault+0x10/0x10 [ 1660.861292][T28950] ? __pfx_mt_find+0x10/0x10 [ 1660.861336][T28950] ? find_vma+0xbf/0x140 [ 1660.861361][T28950] ? __pfx_find_vma+0x10/0x10 [ 1660.861389][T28950] handle_mm_fault+0x37b/0xa30 [ 1660.861415][T28950] do_user_addr_fault+0x74c/0x12f0 [ 1660.861462][T28950] exc_page_fault+0x6f/0xd0 [ 1660.861488][T28950] asm_exc_page_fault+0x26/0x30 [ 1660.861512][T28950] RIP: 0010:_copy_to_iter+0x4c0/0x1720 [ 1660.861561][T28950] Code: 00 e8 44 cf f0 fc 48 8b 74 24 18 48 8b 44 24 08 4c 8d 24 06 89 de 4c 89 e7 e8 dc 64 60 fd 0f 01 cb 48 89 d9 4c 89 f7 4c 89 e6 a4 0f 1f 00 49 89 cc 0f 01 ca 48 89 d8 48 29 c8 48 01 44 24 08 [ 1660.861579][T28950] RSP: 0018:ffffc900048079e0 EFLAGS: 00050246 [ 1660.861598][T28950] RAX: 0000000000000001 RBX: 0000000000000076 RCX: 0000000000000076 [ 1660.861611][T28950] RDX: 0000000000000001 RSI: ffff888043db0003 RDI: 0000000080001c00 [ 1660.861623][T28950] RBP: ffffc90004807be8 R08: 0000000000000000 R09: ffffed10087b600f [ 1660.861635][T28950] R10: ffff888043db0078 R11: 0000000000000000 R12: ffff888043db0003 [ 1660.861647][T28950] R13: 0000000000000000 R14: 0000000080001c00 R15: 0000000000000076 [ 1660.861680][T28950] ? __pfx__copy_to_iter+0x10/0x10 [ 1660.861730][T28950] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 1660.861786][T28950] seq_read_iter+0x691/0x1270 [ 1660.861828][T28950] seq_read+0x344/0x4d0 [ 1660.861857][T28950] ? __pfx_seq_read+0x10/0x10 [ 1660.861885][T28950] ? __pfx___might_resched+0x10/0x10 [ 1660.861931][T28950] ? rw_verify_area+0xce/0x6d0 [ 1660.861962][T28950] ? __pfx_seq_read+0x10/0x10 [ 1660.861993][T28950] vfs_read+0x1e4/0xb40 [ 1660.862015][T28950] ? __pfx_vfs_read+0x10/0x10 [ 1660.862032][T28950] ? find_held_lock+0x2b/0x80 [ 1660.862056][T28950] ? __fget_files+0x215/0x3d0 [ 1660.862075][T28950] ? __fget_files+0x215/0x3d0 [ 1660.862099][T28950] ? __fget_files+0x21f/0x3d0 [ 1660.862126][T28950] ksys_pread64+0x161/0x1a0 [ 1660.862146][T28950] ? __pfx_ksys_pread64+0x10/0x10 [ 1660.862165][T28950] ? trace_syscall_enter+0xd9/0x110 [ 1660.862195][T28950] __do_fast_syscall_32+0xe7/0x970 [ 1660.862223][T28950] ? lockdep_hardirqs_on+0x78/0x100 [ 1660.862251][T28950] do_fast_syscall_32+0x32/0x70 [ 1660.862279][T28950] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1660.862304][T28950] RIP: 0023:0xf7f28fec [ 1660.862330][T28950] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 1660.862339][T28950] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 00000000000000b4 [ 1660.862356][T28950] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001c00 [ 1660.862368][T28950] RDX: 000000000000100c RSI: 0000000000000003 RDI: 0000000000000000 [ 1660.862379][T28950] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1660.862390][T28950] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1660.862401][T28950] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1660.862430][T28950] [ 1660.865410][T28950] Mem-Info: [ 1661.024755][T28950] active_anon:11343 inactive_anon:14703 isolated_anon:0 [ 1661.024755][T28950] active_file:2202 inactive_file:11196 isolated_file:0 [ 1661.024755][T28950] unevictable:784 dirty:86 writeback:0 [ 1661.024755][T28950] slab_reclaimable:6975 slab_unreclaimable:74047 [ 1661.024755][T28950] mapped:22243 shmem:21792 pagetables:1780 [ 1661.024755][T28950] sec_pagetables:345 bounce:0 [ 1661.024755][T28950] kernel_misc_reclaimable:0 [ 1661.024755][T28950] free:40286 free_pcp:0 free_cma:0 [ 1661.055117][T28950] Node 0 active_anon:48kB inactive_anon:108kB active_file:0kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7264kB pagetables:1112kB sec_pagetables:1104kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1661.069980][T28950] Node 0 DMA free:2584kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:36kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1661.089364][T28950] lowmem_reserve[]: 0 280 280 280 280 [ 1661.092259][T28950] Node 0 DMA32 free:34492kB boost:28728kB min:41496kB low:44688kB high:47880kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:108kB active_file:0kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:3168kB present:1032196kB managed:286916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1661.108357][T28950] lowmem_reserve[]: 0 0 0 0 0 [ 1661.117681][T28950] Node 0 DMA: 142*4kB (UM) 6*8kB (UM) 7*16kB (UM) 8*32kB (UM) 5*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2584kB [ 1661.124681][T28950] Node 0 DMA32: 669*4kB (UME) 270*8kB (UME) 136*16kB (UME) 257*32kB (UME) 73*64kB (UME) 28*128kB (UME) 5*256kB (M) 5*512kB (M) 3*1024kB (M) 2*2048kB (UM) 0*4096kB = 34500kB [ 1661.132191][T28950] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1661.136188][T28950] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1661.140240][T28950] 35498 total pagecache pages [ 1661.142597][T28950] 1318 pages in swap cache [ 1661.146538][T28950] Free swap = 24kB [ 1661.148369][T28950] Total swap = 124996kB [ 1661.150255][T28950] 524155 pages RAM [ 1661.151986][T28950] 0 pages HighMem/MovableOnly [ 1661.154115][T28950] 211533 pages reserved [ 1661.156110][T28950] 0 pages cma reserved [ 1661.159202][T28950] Unreclaimable slab info: [ 1661.161803][T28957] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5249'. [ 1661.170441][T28950] Name Used Total [ 1661.173397][T28950] bio-184 20KB 24KB [ 1661.176121][T28950] pid_3 30KB 55KB [ 1661.179510][T28950] pid_2 94KB 141KB [ 1661.182656][T28950] bio-464 17KB 31KB [ 1661.185271][T28950] bio-528 19KB 31KB [ 1661.188058][T28950] bio-544 19KB 31KB [ 1661.190653][T28950] bio-552 19KB 31KB [ 1661.193899][T28950] afs_inode_cache 90KB 126KB [ 1661.197173][T28950] zswap_entry 803KB 845KB [ 1661.199705][T28950] AF_VSOCK 65KB 183KB [ 1661.202236][T28950] sw_flow_stats 22KB 28KB [ 1661.204759][T28950] sw_flow 65KB 91KB [ 1661.207495][T28950] batadv_tt_change_cache 12KB 32KB [ 1661.210318][T28950] batadv_tl_cache 45KB 56KB [ 1661.215361][T28950] ceph_osd_request 22KB 159KB [ 1661.218096][T28950] ceph_msg 15KB 46KB [ 1661.220784][T28950] IEEE-802.15.4-MAC 42KB 93KB [ 1661.223497][T28950] IEEE-802.15.4-RAW 64KB 126KB [ 1661.226911][T28950] p9_req_t 14KB 55KB [ 1661.229550][T28950] INET6_SMC 35KB 58KB [ 1661.232241][T28950] INET_SMC 121KB 250KB [ 1661.234892][T28950] SMC6 40KB 187KB [ 1661.248714][T28950] SMC 71KB 187KB [ 1661.252392][T28950] TIPC 43KB 215KB [ 1661.255137][T28950] rds_tcp_connection 21KB 31KB [ 1661.257988][T28950] RDS 35KB 123KB [ 1661.260624][T28950] rds_connection 35KB 62KB [ 1661.263163][T28950] SCTPv6 57KB 240KB [ 1661.265843][T28950] SCTP 39KB 183KB [ 1661.270187][T28950] sctp_chunk 47KB 93KB [ 1661.272931][T28950] sctp_bind_bucket 11KB 28KB [ 1661.275504][T28950] PNPIPE 47KB 154KB [ 1661.278265][T28950] PHONET 30KB 63KB [ 1661.280945][T28950] L2TP/IPv6 31KB 127KB [ 1661.283548][T28950] L2TP/IP 35KB 94KB [ 1661.286187][T28950] KCM 52KB 155KB [ 1661.289478][T28950] kcm_mux 62KB 126KB [ 1661.294836][T28950] RXRPC 66KB 224KB [ 1661.298505][T28950] rxrpc_call_jar 146KB 255KB [ 1661.301114][T28950] can_receiver 13KB 35KB [ 1661.303812][T28950] net_bridge_fdb_entry 38KB 47KB [ 1661.306720][T28950] nf-frags 27KB 39KB [ 1661.309435][T28950] xfrm6_tunnel_spi 21KB 24KB [ 1661.312124][T28950] MPTCPv6 57KB 223KB [ 1661.314810][T28950] ip6-frags 25KB 47KB [ 1661.318440][T28950] fib6_node 50KB 64KB [ 1661.321178][T28950] ip6_dst_cache 112KB 195KB [ 1661.323900][T28950] mfc6_cache 12KB 16KB [ 1661.326704][T28950] PINGv6 70KB 123KB [ 1661.329432][T28950] RAWv6 146KB 216KB [ 1661.332138][T28950] UDPv6 144KB 220KB [ 1661.334769][T28950] tw_sock_TCPv6 29KB 47KB [ 1661.338299][T28950] request_sock_TCPv6 32KB 46KB [ 1661.341011][T28950] TCPv6 286KB 364KB [ 1661.343605][T28950] ip_vs_conn 57KB 80KB [ 1661.346136][T28950] nf_conncount_rb 13KB 15KB [ 1661.348860][T28950] nf_conncount_tuple 26KB 43KB [ 1661.351398][T28950] nf_conntrack 28KB 55KB [ 1661.354056][T28950] wg_peer 118KB 118KB [ 1661.357039][T28950] allowedips_node 24KB 31KB [ 1661.359469][T28950] t10_alua_tg_pt_gp_cache 14KB 16KB [ 1661.362086][T28950] t10_alua_lu_gp_cache 8KB 15KB [ 1661.364775][T28950] scsi_sense_cache 60KB 60KB [ 1661.367487][T28950] virtio_scsi_cmd 21KB 24KB [ 1661.370115][T28950] bio-136 46KB 76KB [ 1661.372640][T28950] io_kiocb 5KB 46KB [ 1661.375302][T28950] bio-264 31KB 39KB [ 1661.378044][T28950] mqueue_inode_cache 60KB 216KB [ 1661.380791][T28950] bio-272 10KB 15KB [ 1661.383422][T28950] f2fs_bio_post_read_ctx 30KB 31KB [ 1661.386382][T28950] jfs_mp 14KB 15KB [ 1661.389198][T28950] fuse_request 10KB 39KB [ 1661.391873][T28950] jffs2_inode_cache 10KB 12KB [ 1661.394512][T28950] jffs2_node_frag 10KB 15KB [ 1661.397944][T28950] jffs2_refblock 13KB 46KB [ 1661.400700][T28950] jffs2_raw_inode 20KB 28KB [ 1661.403438][T28950] jffs2_raw_dirent 7KB 8KB [ 1661.406166][T28950] jffs2_full_dnode 7KB 15KB [ 1661.408892][T28950] cifs_small_rq 28KB 32KB [ 1661.411052][T28950] cifs_request 67KB 67KB [ 1661.413077][T28950] cifs_mpx_ids 8KB 15KB [ 1661.414901][T28950] cifs_io_subrequest 42KB 47KB [ 1661.416999][T28950] cifs_io_request 105KB 111KB [ 1661.419175][T28950] nfs_commit_data 24KB 31KB [ 1661.421193][T28950] nfs_write_data 38KB 63KB [ 1661.423201][T28950] ecryptfs_sb_cache 29KB 47KB [ 1661.425370][T28950] jbd2_inode 16KB 19KB [ 1661.427419][T28950] ext4_system_zone 1KB 3KB [ 1661.429531][T28950] ext4_io_end_vec 7KB 15KB [ 1661.431564][T28950] kioctx 34KB 159KB [ 1661.433571][T28950] aio_kiocb 16KB 46KB [ 1661.435594][T28950] fanotify_path_event 11KB 15KB [ 1661.437990][T28950] fanotify_mark 45KB 46KB [ 1661.440631][T28950] dnotify_mark 44KB 46KB [ 1661.443543][T28950] dnotify_struct 10KB 15KB [ 1661.445856][T28950] fasync_cache 33KB 47KB [ 1661.448565][T28950] userfaultfd_ctx_cache 30KB 94KB [ 1661.451285][T28950] zspage 235KB 255KB [ 1661.453560][T28950] zs_handle 286KB 320KB [ 1661.455585][T28950] pid_namespace 47KB 92KB [ 1661.457861][T28950] kvm_gmem_inode_cache 15KB 30KB [ 1661.460665][T28950] kvm_vcpu 41KB 187KB [ 1661.463360][T28950] kvm_mmu_page_header 14KB 34KB [ 1661.465532][T28950] pte_list_desc 11KB 27KB [ 1661.468037][T28950] x86_emulator 46KB 191KB [ 1661.470050][T28950] rpc_buffers 76KB 127KB [ 1661.472059][T28950] rpc_tasks 31KB 54KB [ 1661.474073][T28950] UNIX-STREAM 85KB 223KB [ 1661.476086][T28950] UNIX 144KB 350KB [ 1661.478797][T28950] ip4-frags 15KB 55KB [ 1661.480844][T28950] mfc_cache 6KB 8KB [ 1661.482861][T28950] MPTCP 73KB 183KB [ 1661.484882][T28950] request_sock_subflow_v4 12KB 15KB [ 1661.487125][T28950] tcp_bind2_bucket 15KB 28KB [ 1661.489207][T28950] tcp_bind_bucket 24KB 28KB [ 1661.491207][T28950] inet_peer 27KB 32KB [ 1661.493210][T28950] xfrm_dst 24KB 63KB [ 1661.495236][T28950] xfrm_state 10KB 255KB [ 1661.497220][T28950] ip_fib_trie 22KB 32KB [ 1661.499398][T28950] ip_fib_alias 53KB 67KB [ 1661.501440][T28950] rtable 45KB 108KB [ 1661.503443][T28950] PING 47KB 126KB [ 1661.505530][T28950] RAW 91KB 255KB [ 1661.508228][T28950] UDP 131KB 286KB [ 1661.510919][T28950] tw_sock_TCP 34KB 63KB [ 1661.513947][T28950] request_sock_TCP 30KB 46KB [ 1661.516542][T28950] TCP 546KB 672KB [ 1661.519126][T28950] fs_bio_integrity 7KB 8KB [ 1661.521857][T28950] hugetlbfs_inode_cache 43KB 156KB [ 1661.566924][T28950] fscache_cookie_jar 30KB 54KB [ 1661.569570][T28950] netfs_subrequest 45KB 78KB [ 1661.571839][T28950] netfs_request 151KB 207KB [ 1661.574187][T28950] bio-288 31KB 31KB [ 1661.576996][T28950] ep_head 2KB 23KB [ 1661.579538][T28950] eventpoll_pwq 8KB 27KB [ 1661.582057][T28950] eventpoll_epi 29KB 47KB [ 1661.584506][T28950] inotify_inode_mark 42KB 54KB [ 1661.586912][T28950] bpf_fs_inode_cache 38KB 62KB [ 1661.589317][T28950] sgpool-128 38KB 208KB [ 1661.591738][T28950] sgpool-64 48KB 223KB [ 1661.594094][T28950] sgpool-32 30KB 157KB [ 1661.596649][T28950] sgpool-16 32KB 125KB [ 1661.599162][T28950] sgpool-8 31KB 70KB [ 1661.601620][T28950] bio_crypt_ctx 9KB 11KB [ 1661.604148][T28950] bio_integrity_data 7KB 8KB [ 1661.606831][T28950] request_queue 181KB 211KB [ 1661.609325][T28950] blkdev_ioc 23KB 55KB [ 1661.611634][T28950] bio-200 82KB 117KB [ 1661.614069][T28950] biovec-max 862KB 952KB [ 1661.616800][T28950] biovec-128 19KB 95KB [ 1661.619309][T28950] biovec-64 27KB 252KB [ 1661.621574][T28950] biovec-16 21KB 93KB [ 1661.623579][T28950] mm_slot 5KB 23KB [ 1661.626130][T28950] ksm_mm_slot 13KB 16KB [ 1661.629116][T28950] ksm_rmap_item 1KB 15KB [ 1661.635106][T28950] user_namespace 28KB 92KB [ 1661.637581][T28950] uid_cache 27KB 54KB [ 1661.640288][T28950] iommu_iova_magazine 891KB 1071KB [ 1661.642952][T28950] iommu_iova 260KB 268KB [ 1661.645539][T28950] dmaengine-unmap-256 26KB 30KB [ 1661.648816][T28950] dmaengine-unmap-128 14KB 30KB [ 1661.651370][T28950] dmaengine-unmap-16 7KB 8KB [ 1661.653595][T28950] dmaengine-unmap-2 3KB 4KB [ 1661.655520][T28950] QIPCRTR 18KB 31KB [ 1661.657995][T28950] audit_buffer 15KB 46KB [ 1661.660013][T28950] skbuff_ext_cache 12KB 24KB [ 1661.661957][T28950] skbuff_small_head 1681KB 2022KB [ 1661.663869][T28950] skbuff_fclone_cache 181KB 265KB [ 1661.665859][T28950] skbuff_head_cache 1027KB 1062KB [ 1661.668390][T28950] configfs_dir_cache 74KB 80KB [ 1661.670432][T28950] file_lease_cache 13KB 63KB [ 1661.672353][T28950] file_lock_cache 10KB 63KB [ 1661.674193][T28950] file_lock_ctx 35KB 47KB [ 1661.676136][T28950] fsnotify_inode_mark_connector 32KB 51KB [ 1661.678688][T28950] fsnotify_mark_connector 6KB 7KB [ 1661.681176][T28950] posix_timers_cache 49KB 72KB [ 1661.683175][T28950] taskstats 78KB 127KB [ 1661.685105][T28950] mem_cgroup_per_node 90KB 123KB [ 1661.691744][T28950] mem_cgroup 123KB 154KB [ 1661.693687][T28950] proc_dir_entry 646KB 757KB [ 1661.696578][T28950] pde_opener 3KB 15KB [ 1661.698673][T28950] seq_file 29KB 63KB [ 1661.700605][T28950] sigqueue 17KB 39KB [ 1661.702753][T28950] shmem_inode_cache 7625KB 7884KB [ 1661.704932][T28950] kernfs_iattrs_cache 25KB 31KB [ 1661.707228][T28950] kernfs_node_cache 39560KB 39588KB [ 1661.709183][T28950] mnt_cache 80KB 110KB [ 1661.711100][T28950] bfilp 42KB 63KB [ 1661.713143][T28950] filp 615KB 700KB [ 1661.715287][T28950] names_cache 585KB 636KB [ 1661.718111][T28950] net_namespace 88KB 264KB [ 1661.720707][T28950] ima_iint_cache 24KB 63KB [ 1661.723082][T28950] lsm_inode_cache 1476KB 1838KB [ 1661.725062][T28950] lsm_file_cache 250KB 288KB [ 1661.727093][T28950] key_jar 45KB 86KB [ 1661.729562][T28950] uts_namespace 56KB 123KB [ 1661.732104][T28950] nsproxy 14KB 35KB [ 1661.734129][T28950] vm_area_struct 1545KB 1648KB [ 1661.736109][T28950] fs_cache 49KB 76KB [ 1661.738530][T28950] files_cache 178KB 270KB [ 1661.740656][T28950] task_exec_state 14KB 36KB [ 1661.742657][T28950] signal_cache 1092KB 2064KB [ 1661.745355][T28950] sighand_cache 1389KB 2254KB [ 1661.748103][T28950] task_struct 6090KB 6285KB [ 1661.750611][T28950] cred 187KB 348KB [ 1661.753195][T28950] anon_vma_chain 380KB 437KB [ 1661.755743][T28950] anon_vma 459KB 535KB [ 1661.758426][T28950] pid 178KB 382KB [ 1661.760821][T28950] Acpi-Operand 198KB 324KB [ 1661.763176][T28950] Acpi-ParseExt 30KB 43KB [ 1661.765212][T28950] Acpi-Parse 16KB 19KB [ 1661.767745][T28950] Acpi-State 16KB 35KB [ 1661.770195][T28950] Acpi-Namespace 31KB 44KB [ 1661.772679][T28950] shared_policy_node 14KB 16KB [ 1661.775199][T28950] numa_policy 12KB 24KB [ 1661.778860][T28950] perf_event 52KB 93KB [ 1661.781505][T28950] trace_event_file 577KB 580KB [ 1661.784155][T28950] ftrace_event_field 1118KB 1122KB [ 1661.786883][T28950] pool_workqueue 2258KB 2320KB [ 1661.789433][T28950] task_group 27KB 96KB [ 1661.791996][T28950] maple_node 1519KB 1804KB [ 1661.795878][T28950] mm_struct 471KB 637KB [ 1661.798414][T28950] vmap_area 971KB 1318KB [ 1661.805251][T28950] debug_objects_cache 2736KB 15086KB [ 1661.810045][T28950] page->ptl 230KB 275KB [ 1661.812517][T28950] kmalloc-cg-8k 2848KB 3040KB [ 1661.818143][T28950] kmalloc-cg-4k 14608KB 14912KB [ 1661.821072][T28950] kmalloc-cg-2k 9616KB 9920KB [ 1661.822778][T28950] kmalloc-cg-1k 2902KB 3072KB [ 1661.825704][T28950] kmalloc-cg-512 1094KB 1248KB [ 1661.827788][T28950] kmalloc-cg-256 461KB 488KB [ 1661.830012][T28950] kmalloc-cg-128 234KB 252KB [ 1661.832109][T28950] kmalloc-cg-64 84KB 116KB [ 1661.834764][T28950] kmalloc-cg-32 59KB 176KB [ 1661.836944][T28950] kmalloc-cg-16 8KB 28KB [ 1661.839394][T28950] kmalloc-cg-8 21KB 48KB [ 1661.843943][T28950] kmalloc-cg-192 75KB 104KB [ 1661.846843][T28950] kmalloc-cg-96 67KB 88KB [ 1661.850580][T28950] kmalloc-8k 6688KB 6880KB [ 1661.853011][T28950] kmalloc-4k 23992KB 24640KB [ 1661.855362][T28950] kmalloc-2k 14744KB 15744KB [ 1661.858314][T28950] kmalloc-1k 6838KB 8128KB [ 1661.860235][T28950] kmalloc-512 13585KB 14400KB [ 1661.862363][T28950] kmalloc-256 7546KB 9176KB [ 1661.864395][T28950] kmalloc-128 3401KB 5396KB [ 1661.866857][T28950] kmalloc-64 3246KB 3984KB [ 1661.869109][T28950] kmalloc-32 3002KB 3240KB [ 1661.870987][T28950] kmalloc-16 517KB 1084KB [ 1661.872848][T28950] kmalloc-8 2008KB 2172KB [ 1661.874775][T28950] kmalloc-192 1748KB 1840KB [ 1661.882747][T28950] kmalloc-96 1724KB 1812KB [ 1661.884638][T28950] kmem_cache_node 215KB 220KB [ 1661.887109][T28950] kmem_cache 179KB 234KB [ 1661.889077][T28950] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=syz3,mems_allowed=0-1,global_oom,task_memcg=/syz3,task=syz.3.5247,pid=28950,uid=0 [ 1661.897283][T28950] Out of memory (oom_kill_allocating_task): Killed process 28950 (syz.3.5247) total-vm:104072kB, anon-rss:528kB, file-rss:22824kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 1661.952384][ T5750] Bluetooth: hci1: connection err: -111 [ 1662.016881][ T5750] Bluetooth: hci1: ACL packet for unknown connection handle 42 [ 1662.538168][T28991] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5261'. [ 1663.584496][T29005] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5272'. [ 1666.676638][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1667.624853][T29121] syzkaller1: entered promiscuous mode [ 1667.627689][T29121] syzkaller1: entered allmulticast mode [ 1668.246552][T14849] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1668.397373][T14849] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 1668.409478][T14849] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1668.413483][T14849] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1668.416688][T29156] lo speed is unknown, defaulting to 1000 [ 1668.417833][T14849] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1668.423590][T14849] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1668.428499][T14849] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1668.433192][T14849] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1668.437341][T14849] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1668.440471][T14849] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1668.444850][T14849] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1668.450482][T14849] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1668.456574][T14849] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1668.462053][T14849] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1668.468812][T14849] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1668.474398][T14849] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1668.478783][T14849] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1668.484167][T14849] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1668.487240][T14849] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1668.493454][T14849] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1668.499109][T14849] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1668.502548][T14849] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1668.508084][T14849] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1668.513466][T14849] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1668.517116][T14849] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1668.522767][T14849] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1668.527871][T14849] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1668.530881][T14849] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1668.534151][T14849] usb 8-1: Product: syz [ 1668.535529][T14849] usb 8-1: Manufacturer: syz [ 1668.538949][T14849] usb 8-1: SerialNumber: syz [ 1668.545108][T14849] usb 8-1: config 0 descriptor?? [ 1668.554762][T14849] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 1668.564758][T29157] lo speed is unknown, defaulting to 1000 [ 1668.568211][T29156] wg2 speed is unknown, defaulting to 1000 [ 1668.821402][T29157] wg2 speed is unknown, defaulting to 1000 [ 1669.823770][T29184] lo speed is unknown, defaulting to 1000 [ 1670.270405][T29184] wg2 speed is unknown, defaulting to 1000 [ 1670.916913][ C0] usb 8-1: yurex_control_callback - control failed: -2 [ 1670.919882][ C0] usb 8-1: yurex_control_callback - control failed: -32 [ 1670.926651][T14849] usb 8-1: USB disconnect, device number 43 [ 1670.950896][T14849] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 1671.515298][T29231] syzkaller1: entered promiscuous mode [ 1671.522775][T29231] syzkaller1: entered allmulticast mode [ 1671.536440][T29227] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5336'. [ 1673.417042][ T42] audit: type=1800 audit(1785977851.339:2392): pid=29310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5372" name="nullb0" dev="tmpfs" ino=1528 res=0 errno=0 [ 1673.475488][T29316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5374'. [ 1673.480398][T29316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5374'. [ 1673.483978][T29316] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5374'. [ 1673.487438][T29316] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5374'. [ 1673.563671][T29325] fuse: fd is not a fuse device [ 1673.977658][T29342] fuse: fd is not a fuse device [ 1675.576575][T22995] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1675.753278][T22995] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1675.763224][T22995] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1675.771305][T22995] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1675.786553][T22995] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1675.796699][T22995] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.813619][T22995] usb 8-1: config 0 descriptor?? [ 1676.235557][T22995] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 1676.261124][T22995] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1676.514414][T19503] usb 8-1: USB disconnect, device number 44 [ 1678.744741][T29532] pim6reg1: entered promiscuous mode [ 1678.746730][T29532] pim6reg1: entered allmulticast mode [ 1678.985406][ T42] audit: type=1326 audit(1785977856.909:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29543 comm="syz.1.5456" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 1678.998300][ T42] audit: type=1326 audit(1785977856.909:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29543 comm="syz.1.5456" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 1679.012230][ T42] audit: type=1326 audit(1785977856.909:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29543 comm="syz.1.5456" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 1679.036116][ T42] audit: type=1326 audit(1785977856.909:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29543 comm="syz.1.5456" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 1679.051987][ T42] audit: type=1326 audit(1785977856.919:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29543 comm="syz.1.5456" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 1679.060722][ T42] audit: type=1326 audit(1785977856.919:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29543 comm="syz.1.5456" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 1679.070442][ T42] audit: type=1326 audit(1785977856.919:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29543 comm="syz.1.5456" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 1679.145184][ T42] audit: type=1326 audit(1785977856.919:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29543 comm="syz.1.5456" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 1679.160704][ T42] audit: type=1326 audit(1785977856.919:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29543 comm="syz.1.5456" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 1679.171456][ T42] audit: type=1326 audit(1785977856.919:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29543 comm="syz.1.5456" exe="/syz-executor" sig=0 arch=40000003 syscall=57 compat=1 ip=0xf702efec code=0x7ffc0000 [ 1680.547018][T29567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5466'. [ 1680.756572][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1681.159929][T27832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1681.167233][T27832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1682.287061][T22271] hid_parser_main: 28 callbacks suppressed [ 1682.287085][T22271] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1682.364431][T22271] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1682.493169][T29626] fido_id[29626]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1682.841937][T29638] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1683.259251][T29638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5492'. [ 1683.451023][T29657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5496'. [ 1683.862259][T29676] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1683.865029][T29676] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1683.870304][T29676] vhci_hcd vhci_hcd.0: Device attached [ 1683.891055][T24016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1683.897265][T24016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1684.047385][T22995] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1684.106676][T22995] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 1684.117181][T29687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5507'. [ 1684.452712][T29700] netlink: 'syz.0.5513': attribute type 12 has an invalid length. [ 1684.477622][T29676] erofs (device sr0): cannot find valid erofs superblock [ 1684.646025][T29680] vhci_hcd: connection reset by peer [ 1684.651641][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1684.654013][ T12] vhci_hcd vhci_hcd.3: release socket [ 1684.657642][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1684.790608][T29692] batman_adv: batadv0: Interface deactivated: gretap2 [ 1684.846595][T22384] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.850570][T22384] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1684.854141][T22384] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 43387 - 0 [ 1684.859249][T22384] netdevsim netdevsim1 eth0: unset [1, 3] type 2 family 0 port 256 - 0 [ 1684.896648][T22384] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.900124][T22384] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1684.903615][T22384] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 43387 - 0 [ 1684.910361][T22384] netdevsim netdevsim1 eth1: unset [1, 3] type 2 family 0 port 256 - 0 [ 1684.914527][T22384] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.919222][T22384] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1684.926723][T22384] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 43387 - 0 [ 1684.930163][T22384] netdevsim netdevsim1 eth2: unset [1, 3] type 2 family 0 port 256 - 0 [ 1684.933538][T22384] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.937338][T22384] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1684.940723][T22384] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 43387 - 0 [ 1684.943997][T22384] netdevsim netdevsim1 eth3: unset [1, 3] type 2 family 0 port 256 - 0 [ 1685.599782][T29720] fuse: fd is not a fuse device [ 1685.990428][T29727] syz.0.5520: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1685.995490][T29727] CPU: 1 UID: 0 PID: 29727 Comm: syz.0.5520 Tainted: G L syzkaller #0 PREEMPT(full) [ 1685.995512][T29727] Tainted: [L]=SOFTLOCKUP [ 1685.995518][T29727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1685.995526][T29727] Call Trace: [ 1685.995532][T29727] [ 1685.995568][T29727] dump_stack_lvl+0x100/0x190 [ 1685.995590][T29727] warn_alloc.cold+0x94/0xa8 [ 1685.995605][T29727] ? __pfx_warn_alloc+0x10/0x10 [ 1685.995625][T29727] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1685.995646][T29727] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1685.995665][T29727] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 1685.995681][T29727] ? __lock_acquire+0x49f/0x1a40 [ 1685.995708][T29727] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1685.995724][T29727] ? find_held_lock+0x2b/0x80 [ 1685.995738][T29727] ? __free_frozen_pages+0x747/0x1090 [ 1685.995756][T29727] ? __free_frozen_pages+0x747/0x1090 [ 1685.995775][T29727] ? do_raw_spin_unlock+0x145/0x1e0 [ 1685.995788][T29727] ? _raw_spin_unlock+0x28/0x50 [ 1685.995803][T29727] ? irqentry_exit+0x24d/0xa00 [ 1685.995825][T29727] __folio_alloc_noprof+0x13/0x260 [ 1685.995839][T29727] alloc_migration_target+0x1d7/0x6d0 [ 1685.995861][T29727] migrate_pages_batch+0x5dc/0x45c0 [ 1685.995885][T29727] ? __pfx_alloc_migration_target+0x10/0x10 [ 1685.995905][T29727] ? migrate_pages_sync+0x12c/0x880 [ 1685.995923][T29727] ? migrate_pages_sync+0x588/0x880 [ 1685.995943][T29727] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1685.995965][T29727] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1685.995991][T29727] migrate_pages+0x1950/0x2850 [ 1685.996012][T29727] ? __lock_acquire+0x49f/0x1a40 [ 1685.996032][T29727] ? __pfx_alloc_migration_target+0x10/0x10 [ 1685.996055][T29727] ? __pfx_migrate_pages+0x10/0x10 [ 1685.996077][T29727] ? __lock_acquire+0x49f/0x1a40 [ 1685.996099][T29727] ? mtree_load+0x32d/0xa90 [ 1685.996117][T29727] move_pages_and_store_status+0xf1/0x230 [ 1685.996137][T29727] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 1685.996161][T29727] kernel_move_pages+0xc89/0x14a0 [ 1685.996183][T29727] ? __pfx_kernel_move_pages+0x10/0x10 [ 1685.996208][T29727] ? find_held_lock+0x2b/0x80 [ 1685.996223][T29727] ? trace_syscall_enter+0xd9/0x110 [ 1685.996235][T29727] ? trace_syscall_enter+0xd9/0x110 [ 1685.996249][T29727] __ia32_sys_move_pages+0xdd/0x1b0 [ 1685.996267][T29727] ? trace_syscall_enter+0xe3/0x110 [ 1685.996279][T29727] __do_fast_syscall_32+0xe7/0x970 [ 1685.996297][T29727] do_fast_syscall_32+0x32/0x70 [ 1685.996314][T29727] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1685.996329][T29727] RIP: 0023:0xf70cefec [ 1685.996345][T29727] Code: Unable to access opcode bytes at 0xf70cefc2. [ 1685.996351][T29727] RSP: 002b:00000000f547b50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 1685.996363][T29727] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 1685.996370][T29727] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 1685.996376][T29727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1685.996383][T29727] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1685.996389][T29727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1685.996417][T29727] [ 1686.195146][T29727] Mem-Info: [ 1686.196675][T29727] active_anon:20598 inactive_anon:12570 isolated_anon:12 [ 1686.196675][T29727] active_file:683 inactive_file:18325 isolated_file:0 [ 1686.196675][T29727] unevictable:784 dirty:648 writeback:0 [ 1686.196675][T29727] slab_reclaimable:6995 slab_unreclaimable:73230 [ 1686.196675][T29727] mapped:22419 shmem:28916 pagetables:1783 [ 1686.196675][T29727] sec_pagetables:352 bounce:0 [ 1686.196675][T29727] kernel_misc_reclaimable:0 [ 1686.196675][T29727] free:23016 free_pcp:6032 free_cma:0 [ 1686.228314][T29727] Node 0 active_anon:48kB inactive_anon:108kB active_file:0kB inactive_file:3404kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7232kB pagetables:1112kB sec_pagetables:1104kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1686.269585][T29727] Node 1 active_anon:83620kB inactive_anon:55168kB active_file:1712kB inactive_file:64252kB unevictable:1600kB isolated(anon):48kB isolated(file):0kB mapped:89648kB dirty:2592kB writeback:0kB shmem:120228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9784kB pagetables:5920kB sec_pagetables:304kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1686.304317][T29727] Node 0 DMA free:2584kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:36kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1686.333950][T29727] lowmem_reserve[]: 0 280 280 280 280 [ 1686.336097][T29727] Node 0 DMA32 free:31248kB boost:28728kB min:41496kB low:44688kB high:47880kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:108kB active_file:0kB inactive_file:3404kB unevictable:1536kB writepending:0kB zspages:3168kB present:1032196kB managed:286916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1686.396745][T29727] lowmem_reserve[]: 0 0 0 0 0 [ 1686.398435][T29727] Node 1 DMA32 free:60092kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:98220kB inactive_anon:55168kB active_file:1712kB inactive_file:59552kB unevictable:1600kB writepending:2592kB zspages:9952kB present:1048432kB managed:948212kB mlocked:64kB bounce:0kB free_pcp:12328kB local_pcp:788kB free_cma:0kB [ 1686.423714][T29727] lowmem_reserve[]: 0 0 0 0 0 [ 1686.461473][T29727] Node 0 DMA: 142*4kB (UM) 6*8kB (UM) 7*16kB (UM) 8*32kB (UM) 5*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2584kB [ 1686.473454][T29727] Node 0 DMA32: 675*4kB (UME) 255*8kB (UME) 97*16kB (UE) 222*32kB (UME) 51*64kB (UME) 28*128kB (UME) 5*256kB (M) 5*512kB (M) 3*1024kB (M) 2*2048kB (UM) 0*4096kB = 31252kB [ 1686.491370][T29727] Node 1 DMA32: 921*4kB (UE) 776*8kB (UE) 144*16kB (UME) 180*32kB (UME) 80*64kB (UE) 64*128kB (UME) 53*256kB (UME) 15*512kB (UE) 3*1024kB (M) 6*2048kB (UM) 0*4096kB = 67876kB [ 1686.503859][T29727] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1686.569695][T29727] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1686.581930][T29727] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1686.611843][T29727] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1686.624783][T29727] 50592 total pagecache pages [ 1686.636769][T29727] 1318 pages in swap cache [ 1686.638520][T29727] Free swap = 24kB [ 1686.642465][T29727] Total swap = 124996kB [ 1686.645305][T29727] 524155 pages RAM [ 1686.654615][T29727] 0 pages HighMem/MovableOnly [ 1686.680881][T29727] 211533 pages reserved [ 1686.682287][T29727] 0 pages cma reserved [ 1687.073313][T29749] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5530'. [ 1687.465258][T29760] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1687.467367][T29760] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1687.470208][T29760] vhci_hcd vhci_hcd.0: Device attached [ 1687.524086][T29760] erofs (device sr0): cannot find valid erofs superblock [ 1687.872133][T29767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5536'. [ 1687.894872][T29767] bond4: Invalid ad_actor_system MAC address. [ 1687.897478][T29767] bond4: option ad_actor_system: invalid value (5) [ 1687.902578][T29767] bond4 (unregistering): Released all slaves [ 1688.112373][T29761] vhci_hcd: connection closed [ 1688.113785][T22384] vhci_hcd vhci_hcd.3: stop threads [ 1688.120889][T22384] vhci_hcd vhci_hcd.3: release socket [ 1688.125439][T22384] vhci_hcd vhci_hcd.3: disconnect device [ 1688.877690][T29792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5545'. [ 1689.226629][T22995] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1689.286490][T29807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5551'. [ 1689.747095][T29817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5554'. [ 1689.752670][T29817] IPv6: Can't replace route, no match found [ 1690.018257][T29820] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5562'. [ 1690.060787][T24058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1690.064777][T24058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1691.982248][T29868] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5565'. [ 1692.397197][T29888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5574'. [ 1692.467842][T29890] fuse: fd is not a fuse device [ 1692.748403][T29900] fuse: fd is not a fuse device [ 1693.022488][T20439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1693.029635][T20439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1693.786616][T29945] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5589'. [ 1694.137538][T29963] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5595'. [ 1695.094055][T29995] jffs2: notice: (29995) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1695.144705][T29996] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5605'. [ 1695.468508][T30010] tipc: Enabling of bearer rejected, failed to enable media [ 1696.785503][T30020] warn_alloc: 1 callbacks suppressed [ 1696.785524][T30020] syz.2.5612: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1696.816584][T30020] CPU: 3 UID: 0 PID: 30020 Comm: syz.2.5612 Tainted: G L syzkaller #0 PREEMPT(full) [ 1696.816619][T30020] Tainted: [L]=SOFTLOCKUP [ 1696.816631][T30020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1696.816643][T30020] Call Trace: [ 1696.816650][T30020] [ 1696.816660][T30020] dump_stack_lvl+0x100/0x190 [ 1696.816692][T30020] warn_alloc.cold+0x94/0xa8 [ 1696.816715][T30020] ? __pfx_warn_alloc+0x10/0x10 [ 1696.816745][T30020] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1696.816776][T30020] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1696.816805][T30020] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 1696.816833][T30020] ? __lock_acquire+0x49f/0x1a40 [ 1696.816869][T30020] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1696.816894][T30020] ? find_held_lock+0x2b/0x80 [ 1696.816914][T30020] ? __free_frozen_pages+0x747/0x1090 [ 1696.816942][T30020] ? __free_frozen_pages+0x747/0x1090 [ 1696.816971][T30020] ? do_raw_spin_unlock+0x145/0x1e0 [ 1696.816994][T30020] ? _raw_spin_unlock+0x28/0x50 [ 1696.817029][T30020] __folio_alloc_noprof+0x13/0x260 [ 1696.817051][T30020] alloc_migration_target+0x1d7/0x6d0 [ 1696.817081][T30020] migrate_pages_batch+0x5dc/0x45c0 [ 1696.817110][T30020] ? __pfx_alloc_migration_target+0x10/0x10 [ 1696.817141][T30020] ? migrate_pages_sync+0x12c/0x880 [ 1696.817167][T30020] ? migrate_pages_sync+0x588/0x880 [ 1696.817194][T30020] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1696.817225][T30020] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1696.817251][T30020] ? ktime_expiry_to_cycles+0xc0/0x2c0 [ 1696.817276][T30020] ? __lock_acquire+0x49f/0x1a40 [ 1696.817302][T30020] ? __css_rstat_updated+0x1ce/0x5a0 [ 1696.817331][T30020] migrate_pages+0x1950/0x2850 [ 1696.817361][T30020] ? __lock_acquire+0x49f/0x1a40 [ 1696.817396][T30020] ? __pfx_alloc_migration_target+0x10/0x10 [ 1696.817428][T30020] ? __pfx_migrate_pages+0x10/0x10 [ 1696.817462][T30020] ? __lock_acquire+0x49f/0x1a40 [ 1696.817493][T30020] ? mtree_load+0x32d/0xa90 [ 1696.817526][T30020] move_pages_and_store_status+0xf1/0x230 [ 1696.817555][T30020] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 1696.817593][T30020] kernel_move_pages+0xc89/0x14a0 [ 1696.817628][T30020] ? __pfx_kernel_move_pages+0x10/0x10 [ 1696.817664][T30020] ? find_held_lock+0x2b/0x80 [ 1696.817687][T30020] ? trace_syscall_enter+0xd9/0x110 [ 1696.817707][T30020] ? trace_syscall_enter+0xd9/0x110 [ 1696.817729][T30020] __ia32_sys_move_pages+0xdd/0x1b0 [ 1696.817759][T30020] ? trace_syscall_enter+0xe3/0x110 [ 1696.817778][T30020] __do_fast_syscall_32+0xe7/0x970 [ 1696.817807][T30020] do_fast_syscall_32+0x32/0x70 [ 1696.817832][T30020] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1696.817856][T30020] RIP: 0023:0xf7f28fec [ 1696.817881][T30020] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 1696.817889][T30020] RSP: 002b:00000000f4f8150c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 1696.817908][T30020] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 1696.817919][T30020] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 1696.817929][T30020] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1696.817941][T30020] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1696.817951][T30020] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1696.817974][T30020] [ 1696.817982][T30020] Mem-Info: [ 1697.073381][T30055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5625'. [ 1697.081228][T30055] IPv6: Can't replace route, no match found [ 1697.892511][T30083] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5631'. [ 1698.563274][T30098] ci_hdrc ci_hdrc.0: error -EINVAL: invalid resource (null) [ 1698.579032][T30098] ci_hdrc ci_hdrc.0: probe with driver ci_hdrc failed with error -22 [ 1699.087526][T30020] active_anon:13012 inactive_anon:16108 isolated_anon:205 [ 1699.087526][T30020] active_file:1133 inactive_file:15898 isolated_file:0 [ 1699.087526][T30020] unevictable:580 dirty:431 writeback:0 [ 1699.087526][T30020] slab_reclaimable:7018 slab_unreclaimable:73549 [ 1699.087526][T30020] mapped:27395 shmem:24646 pagetables:2062 [ 1699.087526][T30020] sec_pagetables:352 bounce:0 [ 1699.087526][T30020] kernel_misc_reclaimable:0 [ 1699.087526][T30020] free:29716 free_pcp:4445 free_cma:0 [ 1699.130676][T30020] Node 0 active_anon:48kB inactive_anon:108kB active_file:0kB inactive_file:2700kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7264kB pagetables:1112kB sec_pagetables:1104kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1699.170928][T30020] Node 1 active_anon:52000kB inactive_anon:64324kB active_file:4532kB inactive_file:60892kB unevictable:1584kB isolated(anon):120kB isolated(file):0kB mapped:109552kB dirty:1724kB writeback:0kB shmem:97048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9780kB pagetables:7036kB sec_pagetables:304kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1699.194446][T30020] Node 0 DMA free:2584kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:36kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1699.216479][T30020] lowmem_reserve[]: 0 280 280 280 280 [ 1699.236327][T30020] Node 0 DMA32 free:31952kB boost:28728kB min:41496kB low:44688kB high:47880kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:108kB active_file:0kB inactive_file:2700kB unevictable:1536kB writepending:0kB zspages:3168kB present:1032196kB managed:286916kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1699.282154][T30020] lowmem_reserve[]: 0 0 0 0 0 [ 1699.283901][T30020] Node 1 DMA32 free:81360kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52100kB inactive_anon:64324kB active_file:4532kB inactive_file:60892kB unevictable:1584kB writepending:1724kB zspages:9952kB present:1048432kB managed:948212kB mlocked:64kB bounce:0kB free_pcp:23888kB local_pcp:3856kB free_cma:0kB [ 1699.410278][T30020] lowmem_reserve[]: 0 0 0 0 0 [ 1699.412171][T30020] Node 0 DMA: 142*4kB (UM) 6*8kB (UM) 7*16kB (UM) 8*32kB (UM) 5*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2584kB [ 1699.438322][T30020] Node 0 DMA32: 676*4kB (UME) 272*8kB (UME) 132*16kB (UME) 222*32kB (UME) 51*64kB (UME) 28*128kB (UME) 5*256kB (M) 5*512kB (M) 3*1024kB (M) 2*2048kB (UM) 0*4096kB = 31952kB [ 1699.465066][T30020] Node 1 DMA32: 2*4kB (ME) 575*8kB (UE) 211*16kB (UME) 55*32kB (UME) 103*64kB (UME) 69*128kB (UME) 65*256kB (UME) 30*512kB (UME) 15*1024kB (M) 4*2048kB (U) 0*4096kB = 80720kB [ 1699.478175][T30020] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1699.512788][T30020] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1699.572798][T30020] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1699.618137][T30020] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1699.682959][T30020] 41335 total pagecache pages [ 1699.684534][T30020] 1318 pages in swap cache [ 1699.755152][T30020] Free swap = 28kB [ 1699.756897][T30020] Total swap = 124996kB [ 1699.758208][T30020] 524155 pages RAM [ 1699.808419][T30020] 0 pages HighMem/MovableOnly [ 1699.810713][T30020] 211533 pages reserved [ 1699.843869][T30020] 0 pages cma reserved [ 1700.375018][T30159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5657'. [ 1701.152142][T30189] kvm: user requested TSC rate below hardware speed [ 1701.181669][T30189] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1701.260973][T30195] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1702.367369][T30230] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5679'. [ 1702.510852][T30236] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5680'. [ 1703.982944][T30267] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1704.007254][T30267] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1704.010398][T30267] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1704.013244][T30267] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1704.014193][T30260] process '/newroot/1519/file0' started with executable stack [ 1704.017364][T30267] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1704.029774][T30267] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 12307 usecs [ 1704.055719][T30267] pci 0000:00:01.0: Adding to iommu group 1 [ 1704.067195][T30267] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1704.069799][T30267] pci 0000:00:01.0: vgaarb: bridge control possible [ 1704.072272][T30267] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1704.084768][T30267] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 1704.092386][T30267] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1704.095515][T30267] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1704.098572][T30267] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 1704.101324][T30269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5693'. [ 1704.103488][T30267] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 1704.110154][T30267] pci 0000:00:04.0: enabling Extended Tags [ 1704.129637][T30267] pci 0000:00:04.0: Adding to iommu group 4 [ 1704.159264][T30267] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1704.168926][T30267] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 1704.176922][T30267] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 1704.181809][T30267] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1704.185501][T30267] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff]: assigned [ 1704.188860][T30267] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 1704.192703][T30267] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1704.195713][T30267] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 1704.199354][T30267] pci 0000:00:04.0: PCI bridge to [bus 01] [ 1704.201896][T30267] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 1704.206841][T30267] pci 0000:00:04.0: bridge window [mem 0x81100000-0x812fffff] [ 1704.211684][T30267] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 1704.224945][T30267] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1704.242008][T30267] [drm] Found bochs VGA, ID 0xb0c5. [ 1704.243922][T30267] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1704.428576][T30267] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1704.554468][T30267] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 1704.561826][T30267] pcieport 0000:00:04.0: enabling device (0000 -> 0003) [ 1704.631587][T30267] pcieport 0000:00:04.0: PME: Signaling with IRQ 25 [ 1704.644785][T30267] pcieport 0000:00:04.0: AER: enabled with IRQ 26 [ 1704.835909][T30291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5694'. [ 1705.028135][T30301] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5700'. [ 1705.255246][T30308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5707'. [ 1705.310331][T30310] input: syz1 as /devices/virtual/input/input32 [ 1705.523225][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 1705.523258][ T42] audit: type=1800 audit(1785977883.449:2412): pid=30325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5712" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 1706.820028][T30348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5719'. [ 1707.216000][T30372] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5725'. [ 1707.626617][T24363] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1707.776534][T24363] usb 8-1: Using ep0 maxpacket: 32 [ 1707.780945][T24363] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 1707.785326][T24363] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 1707.791406][T24363] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1707.795208][T24363] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.799221][T24363] usb 8-1: Product: syz [ 1707.801164][T24363] usb 8-1: Manufacturer: syz [ 1707.803227][T24363] usb 8-1: SerialNumber: syz [ 1707.813041][T30375] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1708.035059][T30375] netlink: 'syz.3.5728': attribute type 2 has an invalid length. [ 1708.038798][T30375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5728'. [ 1708.057458][T24363] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1708.062024][T24363] usb 8-1: MIDIStreaming interface descriptor not found [ 1708.100088][T24363] usb 8-1: USB disconnect, device number 45 [ 1708.149299][T30392] udevd[30392]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1708.510202][T30417] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5737'. [ 1708.666370][T30419] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5740'. [ 1708.933227][T30430] ehci-pci 0000:00:1d.7: remove, state 1 [ 1708.947968][T30430] usb usb1: USB disconnect, device number 1 [ 1708.952192][T30430] usb 1-1: USB disconnect, device number 2 [ 1709.204483][T30423] syz.2.5739: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1709.205290][T30430] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 1709.228457][T30423] CPU: 1 UID: 0 PID: 30423 Comm: syz.2.5739 Tainted: G L syzkaller #0 PREEMPT(full) [ 1709.228508][T30423] Tainted: [L]=SOFTLOCKUP [ 1709.228515][T30423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1709.228538][T30423] Call Trace: [ 1709.228553][T30423] [ 1709.228562][T30423] dump_stack_lvl+0x100/0x190 [ 1709.228655][T30423] warn_alloc.cold+0x94/0xa8 [ 1709.228683][T30423] ? __pfx_warn_alloc+0x10/0x10 [ 1709.228732][T30423] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1709.228767][T30423] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1709.228789][T30423] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 1709.228816][T30423] ? __lock_acquire+0x49f/0x1a40 [ 1709.228872][T30423] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1709.228894][T30423] ? find_held_lock+0x2b/0x80 [ 1709.228915][T30423] ? __free_frozen_pages+0x747/0x1090 [ 1709.228939][T30423] ? __free_frozen_pages+0x747/0x1090 [ 1709.228967][T30423] ? do_raw_spin_unlock+0x145/0x1e0 [ 1709.228986][T30423] ? _raw_spin_unlock+0x28/0x50 [ 1709.229008][T30423] ? __folio_put+0x1cf/0x5f0 [ 1709.229050][T30423] __folio_alloc_noprof+0x13/0x260 [ 1709.229071][T30423] alloc_migration_target+0x1d7/0x6d0 [ 1709.229105][T30423] migrate_pages_batch+0x5dc/0x45c0 [ 1709.229138][T30423] ? __pfx_alloc_migration_target+0x10/0x10 [ 1709.229168][T30423] ? migrate_pages_sync+0x12c/0x880 [ 1709.229193][T30423] ? migrate_pages_sync+0x588/0x880 [ 1709.229217][T30423] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1709.229245][T30423] ? trace_sched_exit_tp+0x120/0x160 [ 1709.229275][T30423] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1709.229298][T30423] ? __schedule+0x126e/0x6730 [ 1709.229321][T30423] ? __lock_acquire+0x49f/0x1a40 [ 1709.229345][T30423] ? __css_rstat_updated+0x1ce/0x5a0 [ 1709.229385][T30423] migrate_pages+0x1950/0x2850 [ 1709.229412][T30423] ? __lock_acquire+0x49f/0x1a40 [ 1709.229439][T30423] ? __pfx_alloc_migration_target+0x10/0x10 [ 1709.229470][T30423] ? __pfx_migrate_pages+0x10/0x10 [ 1709.229500][T30423] ? __lock_acquire+0x49f/0x1a40 [ 1709.229525][T30423] ? mtree_load+0x32d/0xa90 [ 1709.229554][T30423] move_pages_and_store_status+0xf1/0x230 [ 1709.229581][T30423] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 1709.229617][T30423] kernel_move_pages+0xc89/0x14a0 [ 1709.229653][T30423] ? __pfx_kernel_move_pages+0x10/0x10 [ 1709.229686][T30423] ? find_held_lock+0x2b/0x80 [ 1709.229706][T30423] ? trace_syscall_enter+0xd9/0x110 [ 1709.229738][T30423] ? trace_syscall_enter+0xd9/0x110 [ 1709.229764][T30423] __ia32_sys_move_pages+0xdd/0x1b0 [ 1709.229790][T30423] ? trace_syscall_enter+0xe3/0x110 [ 1709.229807][T30423] __do_fast_syscall_32+0xe7/0x970 [ 1709.229834][T30423] do_fast_syscall_32+0x32/0x70 [ 1709.229856][T30423] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1709.229877][T30423] RIP: 0023:0xf7f28fec [ 1709.229899][T30423] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 1709.229916][T30423] RSP: 002b:00000000f4f8150c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 1709.229933][T30423] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 1709.229944][T30423] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 1709.229953][T30423] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1709.229963][T30423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1709.229972][T30423] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1709.229994][T30423] [ 1709.230168][T30423] Mem-Info: [ 1709.389159][T30423] active_anon:12519 inactive_anon:16108 isolated_anon:23 [ 1709.389159][T30423] active_file:1133 inactive_file:17326 isolated_file:0 [ 1709.389159][T30423] unevictable:1784 dirty:521 writeback:0 [ 1709.389159][T30423] slab_reclaimable:7025 slab_unreclaimable:73343 [ 1709.389159][T30423] mapped:24021 shmem:23313 pagetables:1855 [ 1709.389159][T30423] sec_pagetables:353 bounce:0 [ 1709.389159][T30423] kernel_misc_reclaimable:0 [ 1709.389159][T30423] free:31867 free_pcp:276 free_cma:0 [ 1709.409030][T30423] Node 0 active_anon:48kB inactive_anon:108kB active_file:0kB inactive_file:2444kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7264kB pagetables:1112kB sec_pagetables:1104kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1709.436959][T30423] Node 1 active_anon:50228kB inactive_anon:64324kB active_file:4532kB inactive_file:66860kB unevictable:5600kB isolated(anon):92kB isolated(file):0kB mapped:96056kB dirty:2084kB writeback:0kB shmem:91716kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:6144kB kernel_stack:9884kB pagetables:6308kB sec_pagetables:308kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1709.468887][T30423] Node 0 DMA free:2584kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:36kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1709.490585][T30423] lowmem_reserve[]: 0 280 280 280 280 [ 1709.492384][T30423] Node 0 DMA32 free:32232kB boost:28728kB min:41496kB low:44688kB high:47880kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:108kB active_file:0kB inactive_file:2444kB unevictable:1536kB writepending:0kB zspages:3168kB present:1032196kB managed:286916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1709.526574][T30423] lowmem_reserve[]: 0 0 0 0 0 [ 1709.528161][T30423] Node 1 DMA32 free:90924kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:51028kB inactive_anon:64324kB active_file:4532kB inactive_file:66860kB unevictable:5600kB writepending:2084kB zspages:9952kB present:1048432kB managed:948212kB mlocked:64kB bounce:0kB free_pcp:2180kB local_pcp:332kB free_cma:0kB [ 1709.552106][T30423] lowmem_reserve[]: 0 0 0 0 0 [ 1709.553630][T30423] Node 0 DMA: 142*4kB (UM) 6*8kB (UM) 7*16kB (UM) 8*32kB (UM) 5*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2584kB [ 1709.659970][T30423] Node 0 DMA32: 679*4kB (UME) 273*8kB (UME) 137*16kB (UME) 229*32kB (UME) 51*64kB (UME) 28*128kB (UME) 5*256kB (M) 5*512kB (M) 3*1024kB (M) 2*2048kB (UM) 0*4096kB = 32276kB [ 1709.687144][T30423] Node 1 DMA32: 275*4kB (UME) 893*8kB (UME) 395*16kB (UME) 230*32kB (UME) 153*64kB (UME) 80*128kB (UME) 65*256kB (UME) 22*512kB (UME) 14*1024kB (M) 0*2048kB 0*4096kB = 84196kB [ 1709.730580][T30444] overlayfs: failed to clone lowerpath [ 1709.848910][T30423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1709.857385][T30423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1709.866255][T30423] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1709.882455][T30423] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1709.891714][T30423] 44928 total pagecache pages [ 1709.893285][T30423] 1324 pages in swap cache [ 1709.894758][T30423] Free swap = 60kB [ 1709.896050][T30423] Total swap = 124996kB [ 1709.897603][T30423] 524155 pages RAM [ 1709.898934][T30423] 0 pages HighMem/MovableOnly [ 1709.901493][T30423] 211533 pages reserved [ 1709.903217][T30423] 0 pages cma reserved [ 1710.573238][T30465] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5755'. [ 1710.747128][T30478] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5757'. [ 1710.845800][T30484] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5758'. [ 1710.866991][T30488] overlayfs: failed to clone lowerpath [ 1711.923555][T30507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5769'. [ 1712.024466][T30519] gretap0: Device is already in use. [ 1712.342250][T30540] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5777'. [ 1712.384977][T30539] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5776'. [ 1713.184050][T30550] LUN: removable file: (no medium) [ 1713.308262][T30556] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 1713.405315][T30552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5783'. [ 1713.648861][T30575] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5790'. [ 1713.685404][T30578] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5788'. [ 1714.470225][T30599] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5799'. [ 1714.584327][T30612] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 1716.166197][T30670] __nla_validate_parse: 3 callbacks suppressed [ 1716.166216][T30670] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5821'. [ 1716.460903][T30681] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5831'. [ 1717.195043][T30718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5836'. [ 1718.256305][T30737] overlayfs: failed to clone upperpath [ 1718.486193][T30744] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5843'. [ 1719.102516][ T42] audit: type=1800 audit(1785977897.019:2413): pid=30749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5854" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 1720.389056][T30811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5866'. [ 1720.862443][T30838] syzkaller1: entered promiscuous mode [ 1720.864290][T30838] syzkaller1: entered allmulticast mode [ 1721.219667][ T42] audit: type=1800 audit(1785977899.149:2414): pid=30869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5889" name="SYSV00000000" dev="tmpfs" ino=9 res=0 errno=0 [ 1721.407422][T30880] fuse: fd is not a fuse device [ 1723.116882][T30928] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5916'. [ 1723.581776][T30950] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1723.587151][T30950] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1723.596629][T30950] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1723.616298][T30950] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1724.283639][T30996] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5932'. [ 1725.093423][T31025] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5942'. [ 1725.636856][T26674] Bluetooth: hci3: command 0x0406 tx timeout [ 1725.636938][ T5750] Bluetooth: hci1: command 0x0406 tx timeout [ 1726.223604][T31067] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5959'. [ 1726.337912][T31069] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5960'. [ 1726.676522][T24363] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1726.848292][T24363] usb 8-1: Using ep0 maxpacket: 32 [ 1726.853829][T24363] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1726.861324][T24363] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1726.865814][T24363] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1726.869977][T24363] usb 8-1: Product: syz [ 1726.871943][T24363] usb 8-1: Manufacturer: syz [ 1726.874076][T24363] usb 8-1: SerialNumber: syz [ 1726.879772][T24363] usb 8-1: config 0 descriptor?? [ 1726.883843][T31073] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1726.890385][T24363] hub 8-1:0.0: bad descriptor, ignoring hub [ 1726.894153][T24363] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1727.064550][T31078] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5963'. [ 1727.425015][T31086] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5972'. [ 1727.716601][ T5750] Bluetooth: hci3: command 0x0406 tx timeout [ 1727.816686][T31073] usb 8-1: reset high-speed USB device number 46 using dummy_hcd [ 1727.995344][T31073] usb 8-1: device firmware changed [ 1728.005912][T24363] usb 8-1: USB disconnect, device number 46 [ 1728.196525][T24363] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1728.366937][T24363] usb 8-1: Using ep0 maxpacket: 32 [ 1728.371158][T24363] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1728.378552][T24363] usb 8-1: string descriptor 0 read error: -22 [ 1728.381197][T24363] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1728.384820][T24363] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1728.393076][T24363] usb 8-1: config 0 descriptor?? [ 1728.395864][T31080] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1728.400825][T24363] hub 8-1:0.0: bad descriptor, ignoring hub [ 1728.403429][T24363] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1728.729040][T24363] usb 8-1: USB disconnect, device number 47 [ 1728.987521][T31143] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5985'. [ 1729.592182][T31164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5990'. [ 1729.608272][T31164] bond8: Invalid ad_actor_system MAC address. [ 1729.610327][T31164] bond8: option ad_actor_system: invalid value (5) [ 1729.615372][T31164] bond8 (unregistering): Released all slaves [ 1729.776644][T22995] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1729.796565][ T5750] Bluetooth: hci3: command 0x0406 tx timeout [ 1729.948831][T22995] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1729.959782][T22995] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1729.964306][T22995] usb 8-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 1729.968835][T22995] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.977881][T22995] usb-storage 8-1:1.0: USB Mass Storage device detected [ 1729.995270][T22995] usb-storage 8-1:1.0: Quirks match for vid 0451 pid 5416: 2 [ 1729.999837][T22995] scsi host6: usb-storage 8-1:1.0 [ 1730.188507][T22995] usb 8-1: USB disconnect, device number 48 [ 1730.441794][T31202] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6005'. [ 1731.014552][T31211] fuse: fd is not a fuse device [ 1731.875930][T31232] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6019'. [ 1732.859150][T31272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6034'. [ 1733.532507][T31288] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6038'. [ 1733.671665][T31291] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6040'. [ 1734.934880][T31345] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6060'. [ 1735.845256][T31367] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6066'. [ 1736.779524][T31401] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1736.935682][T31408] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6076'. [ 1737.357160][T31425] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6082'. [ 1737.732670][T31443] fuse: fd is not a fuse device [ 1738.295043][T31463] (NULL device *): [drm] The number of CRTCs must be between 1 and 31 [ 1738.472380][T31478] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6097'. [ 1738.912118][T31498] lo speed is unknown, defaulting to 1000 [ 1739.051929][T31498] wg2 speed is unknown, defaulting to 1000 [ 1739.300816][T31513] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 40 [ 1739.862668][T31537] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6119'. [ 1740.767642][T31556] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1741.345471][T31591] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6138'. [ 1741.356726][T22271] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1741.561493][T22271] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1741.567837][T22271] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1741.572982][T22271] usb 8-1: can't read configurations, error -71 [ 1741.633330][T31605] overlayfs: failed to clone upperpath [ 1741.648276][T31605] overlayfs: failed to clone lowerpath [ 1741.951167][T31628] fuse: fd is not a fuse device [ 1742.036623][T31634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6154'. [ 1742.177496][T31643] netlink: 'syz.0.6158': attribute type 9 has an invalid length. [ 1742.180914][T31643] netlink: 19 bytes leftover after parsing attributes in process `syz.0.6158'. [ 1742.203457][ T5750] Bluetooth: hci1: unexpected event for opcode 0x2035 [ 1742.781894][T31694] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6177'. [ 1743.298116][T31709] 9p: Bad value for 'rfdno' [ 1744.019341][T31739] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1744.662148][T31761] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6201'. [ 1744.714395][T31764] netlink: 'syz.0.6203': attribute type 1 has an invalid length. [ 1744.735965][T31764] gretap2: entered allmulticast mode [ 1744.748112][T31764] bond8: (slave gretap2): making interface the new active one [ 1744.751125][T31764] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 1745.029321][T31778] overlayfs: failed to clone upperpath [ 1745.529470][T31800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6219'. [ 1745.833238][T31817] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6223'. [ 1746.215841][T31820] fuse: fd is not a fuse device [ 1746.800856][T31844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6236'. [ 1746.855851][T31846] netlink: 'syz.2.6237': attribute type 1 has an invalid length. [ 1746.879348][T31846] bond8: entered promiscuous mode [ 1746.882086][T31846] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1746.923638][T31846] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1746.929337][T31846] bond8: (slave ipip0): The slave device specified does not support setting the MAC address [ 1746.933537][T31846] bond8: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 1746.947038][T31846] bond8: (slave ipip0): making interface the new active one [ 1746.950867][T31846] ipip0: entered promiscuous mode [ 1746.954568][T31846] bond8: (slave ipip0): Enslaving as an active interface with an up link [ 1747.587969][T31865] overlayfs: failed to clone lowerpath [ 1747.615238][T31865] overlayfs: failed to clone lowerpath [ 1747.641767][T31871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6244'. [ 1748.936847][T22995] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1749.086483][T22995] usb 8-1: Using ep0 maxpacket: 32 [ 1749.097456][T22995] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1749.101682][T22995] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1749.110331][T22995] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1749.114070][T22995] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.126504][T22995] usb 8-1: Manufacturer: Ⰹ [ 1749.128145][T22995] usb 8-1: SerialNumber: syz [ 1749.351055][T22995] usb 8-1: USB disconnect, device number 51 [ 1749.649142][T31950] overlayfs: failed to clone upperpath [ 1749.905652][T31962] overlayfs: failed to clone upperpath [ 1750.044108][T31970] bridge0: port 1(wlan1) entered blocking state [ 1750.047012][T31970] bridge0: port 1(wlan1) entered disabled state [ 1750.054788][T31970] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 1750.060402][T31970] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 1750.173513][T31976] jffs2: notice: (31976) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1750.461958][T31993] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1750.464532][T31993] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1750.469210][T31993] vhci_hcd vhci_hcd.0: Device attached [ 1750.474302][T31995] vhci_hcd: connection closed [ 1750.476777][T22384] vhci_hcd vhci_hcd.3: stop threads [ 1750.483014][T22384] vhci_hcd vhci_hcd.3: release socket [ 1750.486561][T22384] vhci_hcd vhci_hcd.3: disconnect device [ 1750.646872][T32004] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6296'. [ 1751.246530][T14849] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1751.406636][T14849] usb 8-1: Using ep0 maxpacket: 8 [ 1751.415190][T14849] usb 8-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1751.421634][T14849] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1751.424175][T14849] usb 8-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 1751.427894][T14849] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.434432][T14849] usb 8-1: config 0 descriptor?? [ 1751.714815][ T5750] Bluetooth: hci3: unexpected event for opcode 0x202d [ 1751.841680][T14849] usbhid 8-1:0.0: can't add hid device: -71 [ 1751.845017][T14849] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1751.853998][T14849] usb 8-1: USB disconnect, device number 52 [ 1752.144245][T32066] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6318'. [ 1752.334735][T32073] netlink: 'syz.2.6323': attribute type 2 has an invalid length. [ 1752.643582][T32089] overlayfs: failed to resolve './cgroup': -2 [ 1752.646793][T24363] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1752.711552][T32090] lo speed is unknown, defaulting to 1000 [ 1752.798298][T24363] usb 8-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 1752.802356][T24363] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1752.808132][T24363] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1752.812152][T24363] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1752.815297][T24363] usb 8-1: Product: syz [ 1752.817217][T24363] usb 8-1: Manufacturer: syz [ 1752.818890][T24363] usb 8-1: SerialNumber: syz [ 1752.826892][T24363] usb 8-1: config 0 descriptor?? [ 1752.829133][T32078] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1752.838832][T24363] usb 8-1: selecting invalid altsetting 0 [ 1752.884125][T32090] wg2 speed is unknown, defaulting to 1000 [ 1752.958991][T32102] fuse: fd is not a fuse device [ 1753.052948][T24363] usb 8-1: USB disconnect, device number 53 [ 1753.094551][T32111] overlayfs: failed to clone upperpath [ 1753.222320][T32108] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6333'. [ 1754.053297][T32151] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6348'. [ 1754.181325][T32161] fuse: fd is not a fuse device [ 1754.263596][T32167] overlayfs: failed to clone upperpath [ 1754.370225][T32175] fuse: fd is not a fuse device [ 1754.486854][T32176] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6358'. [ 1754.612526][T32189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6363'. [ 1754.732970][T32195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6365'. [ 1754.737735][T32195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6365'. [ 1754.743764][T32195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6365'. [ 1754.748588][T32195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6365'. [ 1755.919580][T32228] 9p: Bad value for 'rfdno' [ 1756.936894][T32230] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6376'. [ 1757.480954][T32272] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6398'. [ 1757.826899][T32279] fuse: fd is not a fuse device [ 1758.276181][T32289] overlayfs: failed to clone upperpath [ 1758.348308][T32296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1758.425431][T32300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6404'. [ 1759.109823][T32309] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6408'. [ 1759.387539][T22995] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1759.536708][T22995] usb 8-1: Using ep0 maxpacket: 8 [ 1759.543415][T22995] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 1759.547200][T22995] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 1759.550430][T22995] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1759.553763][T22995] usb 8-1: config 250 has no interface number 0 [ 1759.555987][T22995] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1759.563195][T22995] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1759.569893][T22995] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1759.573573][T22995] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1759.578436][T22995] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1759.583819][T22995] usb 8-1: config 250 interface 228 has no altsetting 0 [ 1759.588862][T22995] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1759.592221][T22995] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1759.595297][T22995] usb 8-1: Product: syz [ 1759.597489][T22995] usb 8-1: SerialNumber: syz [ 1759.608166][T22995] hub 8-1:250.228: bad descriptor, ignoring hub [ 1759.612303][T22995] hub 8-1:250.228: probe with driver hub failed with error -5 [ 1759.747748][T32337] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6420'. [ 1759.814290][T22995] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 54 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1760.074996][T32359] overlayfs: failed to clone upperpath [ 1760.212552][T32365] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6430'. [ 1760.488886][T32382] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6431'. [ 1760.509964][T32313] usb 8-1: reset high-speed USB device number 54 using dummy_hcd [ 1761.306998][T22674] usb 8-1: USB disconnect, device number 54 [ 1761.318822][T22674] usblp0: removed [ 1761.566876][T32411] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6441'. [ 1761.643621][T32414] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6442'. [ 1762.416583][T32435] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6448'. [ 1762.769895][T32444] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6451'. [ 1763.144394][T32472] overlayfs: failed to clone upperpath [ 1763.349749][T32478] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6461'. [ 1763.520276][T32486] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6463'. [ 1763.524842][T32489] fuse: fd is not a fuse device [ 1765.601534][T32550] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6480'. [ 1765.707942][T32539] fuse: fd is not a fuse device [ 1766.449469][T32571] overlayfs: failed to clone upperpath [ 1767.140971][T32599] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6495'. [ 1767.699103][T32620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6505'. [ 1768.279531][T32634] fuse: fd is not a fuse device [ 1768.512346][T32647] fuse: fd is not a fuse device [ 1768.555781][T32649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6513'. [ 1768.853993][T32676] input: syz0 as /devices/virtual/input/input33 [ 1768.896950][T32665] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6517'. [ 1769.025265][T32682] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6527'. [ 1769.743515][T32702] overlayfs: failed to clone upperpath [ 1770.075901][T32708] fuse: fd is not a fuse device [ 1770.158769][T32714] cdns2-pci 0000:00:00.0: probe with driver cdns2-pci failed with error -22 [ 1770.298443][T32724] 9p: Bad value for 'rfdno' [ 1770.529551][T32742] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6550'. [ 1770.582005][T32745] overlayfs: failed to clone upperpath [ 1770.685884][T32753] overlayfs: failed to clone upperpath [ 1770.730798][T32755] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1771.150215][ T305] vp-vdpa 0000:00:03.0: PCI INT A: failed to register GSI [ 1771.152720][ T305] vp-vdpa 0000:00:03.0: probe with driver vp-vdpa failed with error -16 [ 1771.556293][ T320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6570'. [ 1771.647730][ T325] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1772.070697][ T344] fuse: fd is not a fuse device [ 1772.306507][T24363] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1772.459098][T24363] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1772.463774][T24363] usb 8-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1772.472529][T24363] usb 8-1: string descriptor 0 read error: -22 [ 1772.475380][T24363] usb 8-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1772.479474][T24363] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.632394][ T356] overlayfs: failed to clone upperpath [ 1772.862300][ T370] fuse: Bad value for 'fd' [ 1773.125985][ T385] fuse: fd is not a fuse device [ 1773.272876][ T397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6600'. [ 1773.319731][T22271] usb 8-1: USB disconnect, device number 55 [ 1773.771703][ T421] fuse: fd is not a fuse device [ 1773.824425][ T425] fuse: fd is not a fuse device [ 1773.938056][ T431] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6611'. [ 1774.731937][ T441] fuse: fd is not a fuse device [ 1775.099426][ T455] fuse: fd is not a fuse device [ 1775.229116][ T457] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1775.508100][ T460] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6624'. [ 1775.643258][ T470] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6627'. [ 1776.159998][ T482] fuse: fd is not a fuse device [ 1776.785690][ T501] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6638'. [ 1777.069844][ T505] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 1777.507738][ T514] fuse: fd is not a fuse device [ 1777.816631][ T537] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1777.859628][ T539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6652'. [ 1777.864661][ T539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6652'. [ 1777.870326][ T539] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6652'. [ 1777.874310][ T539] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6652'. [ 1777.910767][ T543] loop5: detected capacity change from 0 to 6 [ 1777.920789][ T543] loop5: [POWERTEC] p1 p2 p3 [ 1777.925716][ T543] loop5: p1 start 2738982409 is beyond EOD, truncated [ 1777.929566][ T543] loop5: p2 start 3318134482 is beyond EOD, truncated [ 1777.932699][ T543] loop5: p3 start 3832978868 is beyond EOD, truncated [ 1778.069598][ T551] [ 1778.070475][ T551] ====================================================== [ 1778.072625][ T42] audit: type=1800 audit(1785977955.989:2415): pid=551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6656" name="file" dev="configfs" ino=108453 res=0 errno=0 [ 1778.072660][ T551] WARNING: possible circular locking dependency detected [ 1778.082556][ T551] syzkaller #0 Tainted: G L [ 1778.084570][ T551] ------------------------------------------------------ [ 1778.086761][ T551] syz.3.6656/551 is trying to acquire lock: [ 1778.089043][ T551] ffff88802578c450 (sb_writers#5){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 1778.092043][ T551] [ 1778.092043][ T551] but task is already holding lock: [ 1778.094305][ T551] ffff888025d16920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 1778.097240][ T551] [ 1778.097240][ T551] which lock already depends on the new lock. [ 1778.097240][ T551] [ 1778.100414][ T551] [ 1778.100414][ T551] the existing dependency chain (in reverse order) is: [ 1778.103206][ T551] [ 1778.103206][ T551] -> #4 (&common->filesem){++++}-{4:4}: [ 1778.105633][ T551] lock_acquire+0x1b9/0x370 [ 1778.107308][ T551] down_read+0x99/0x4c0 [ 1778.108803][ T551] fsg_show_file+0x20/0x180 [ 1778.110407][ T551] configfs_read_iter+0x426/0x6f0 [ 1778.112221][ T551] __kernel_read+0x397/0xad0 [ 1778.113838][ T551] integrity_kernel_read+0x7e/0xb0 [ 1778.115660][ T551] ima_calc_file_hash_tfm+0x25e/0x350 [ 1778.117552][ T551] ima_calc_file_hash+0x1e3/0x380 [ 1778.119305][ T551] ima_collect_measurement+0x94f/0xb30 [ 1778.121199][ T551] process_measurement+0xdfe/0x2350 [ 1778.122987][ T551] ima_file_check+0xcc/0x120 [ 1778.124621][ T551] security_file_post_open+0xc4/0x210 [ 1778.126535][ T551] path_openat+0x985/0x4280 [ 1778.128230][ T551] do_file_open+0x20e/0x430 [ 1778.129809][ T551] do_sys_openat2+0x10f/0x1e0 [ 1778.131469][ T551] __ia32_compat_sys_openat+0x12d/0x210 [ 1778.133389][ T551] __do_fast_syscall_32+0xe7/0x970 [ 1778.135217][ T551] do_fast_syscall_32+0x32/0x70 [ 1778.137085][ T551] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1778.139906][ T551] [ 1778.139906][ T551] -> #3 (&p->frag_sem){++++}-{4:4}: [ 1778.142893][ T551] lock_acquire+0x1b9/0x370 [ 1778.144483][ T551] down_read+0x99/0x4c0 [ 1778.146201][ T551] configfs_write_iter+0x218/0x4e0 [ 1778.148297][ T551] vfs_write+0x6ac/0x1050 [ 1778.149829][ T551] ksys_write+0x12a/0x250 [ 1778.151486][ T551] __do_fast_syscall_32+0xe7/0x970 [ 1778.153292][ T551] do_fast_syscall_32+0x32/0x70 [ 1778.155153][ T551] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1778.157811][ T551] [ 1778.157811][ T551] -> #2 (&buffer->mutex){+.+.}-{4:4}: [ 1778.160278][ T551] lock_acquire+0x1b9/0x370 [ 1778.161844][ T551] __mutex_lock+0x1a4/0x1bd0 [ 1778.163480][ T551] configfs_read_iter+0x79/0x6f0 [ 1778.165229][ T551] __kernel_read+0x397/0xad0 [ 1778.166873][ T551] integrity_kernel_read+0x7e/0xb0 [ 1778.168661][ T551] ima_calc_file_hash_tfm+0x25e/0x350 [ 1778.170524][ T551] ima_calc_file_hash+0x1e3/0x380 [ 1778.172273][ T551] ima_collect_measurement+0x94f/0xb30 [ 1778.174161][ T551] process_measurement+0xdfe/0x2350 [ 1778.175999][ T551] ima_file_check+0xcc/0x120 [ 1778.177663][ T551] security_file_post_open+0xc4/0x210 [ 1778.179515][ T551] path_openat+0x985/0x4280 [ 1778.181110][ T551] do_file_open+0x20e/0x430 [ 1778.182684][ T551] do_sys_openat2+0x10f/0x1e0 [ 1778.184330][ T551] __ia32_compat_sys_openat+0x12d/0x210 [ 1778.186297][ T551] do_int80_emulation+0x14b/0x720 [ 1778.188063][ T551] asm_int80_emulation+0x1a/0x20 [ 1778.189708][ T551] [ 1778.189708][ T551] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 1778.192415][ T551] lock_acquire+0x1b9/0x370 [ 1778.194009][ T551] __mutex_lock+0x1a4/0x1bd0 [ 1778.195668][ T551] ima_file_truncate+0xe6/0x190 [ 1778.197328][ T551] security_file_truncate+0x11e/0x1e0 [ 1778.199183][ T551] path_openat+0x3584/0x4280 [ 1778.200797][ T551] do_file_open+0x20e/0x430 [ 1778.202387][ T551] do_sys_openat2+0x10f/0x1e0 [ 1778.204030][ T551] __ia32_compat_sys_openat+0x12d/0x210 [ 1778.205945][ T551] __do_fast_syscall_32+0xe7/0x970 [ 1778.207730][ T551] do_fast_syscall_32+0x32/0x70 [ 1778.209422][ T551] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1778.211577][ T551] [ 1778.211577][ T551] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 1778.213882][ T551] check_prev_add+0xeb/0xe60 [ 1778.215523][ T551] __lock_acquire+0x136c/0x1a40 [ 1778.217222][ T551] lock_acquire+0x1b9/0x370 [ 1778.218813][ T551] mnt_want_write+0x6f/0x410 [ 1778.220437][ T551] path_openat+0xad9/0x4280 [ 1778.222024][ T551] do_file_open+0x20e/0x430 [ 1778.223620][ T551] file_open_name+0x1c3/0x3e0 [ 1778.225276][ T551] filp_open+0x2e/0x50 [ 1778.226745][ T551] fsg_lun_open+0x6b/0x7b0 [ 1778.228333][ T551] fsg_store_file+0x1e7/0x450 [ 1778.229959][ T551] configfs_write_iter+0x302/0x4e0 [ 1778.231730][ T551] vfs_write+0x6ac/0x1050 [ 1778.233332][ T551] ksys_write+0x12a/0x250 [ 1778.234891][ T551] __do_fast_syscall_32+0xe7/0x970 [ 1778.236690][ T551] do_fast_syscall_32+0x32/0x70 [ 1778.238396][ T551] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1778.240519][ T551] [ 1778.240519][ T551] other info that might help us debug this: [ 1778.240519][ T551] [ 1778.243671][ T551] Chain exists of: [ 1778.243671][ T551] sb_writers#5 --> &p->frag_sem --> &common->filesem [ 1778.243671][ T551] [ 1778.247540][ T551] Possible unsafe locking scenario: [ 1778.247540][ T551] [ 1778.249889][ T551] CPU0 CPU1 [ 1778.251570][ T551] ---- ---- [ 1778.253243][ T551] lock(&common->filesem); [ 1778.254739][ T551] lock(&p->frag_sem); [ 1778.256839][ T551] lock(&common->filesem); [ 1778.259011][ T551] rlock(sb_writers#5); [ 1778.260361][ T551] [ 1778.260361][ T551] *** DEADLOCK *** [ 1778.260361][ T551] [ 1778.262858][ T551] 5 locks held by syz.3.6656/551: [ 1778.264450][ T551] #0: ffff8880139cb5f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1778.267304][ T551] #1: ffff888022184450 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1778.270098][ T551] #2: ffff888013fedc80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 1778.273113][ T551] #3: ffff888073e2bc70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 1778.276117][ T551] #4: ffff888025d16920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 1778.279093][ T551] [ 1778.279093][ T551] stack backtrace: [ 1778.280973][ T551] CPU: 0 UID: 0 PID: 551 Comm: syz.3.6656 Tainted: G L syzkaller #0 PREEMPT(full) [ 1778.280990][ T551] Tainted: [L]=SOFTLOCKUP [ 1778.280995][ T551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1778.281002][ T551] Call Trace: [ 1778.281009][ T551] [ 1778.281027][ T551] dump_stack_lvl+0x100/0x190 [ 1778.281045][ T551] print_circular_bug.cold+0x178/0x1c7 [ 1778.281064][ T551] check_noncircular+0x146/0x160 [ 1778.281081][ T551] ? __lock_acquire+0xd5b/0x1a40 [ 1778.281100][ T551] check_prev_add+0xeb/0xe60 [ 1778.281117][ T551] __lock_acquire+0x136c/0x1a40 [ 1778.281136][ T551] ? try_to_unlazy+0x296/0x910 [ 1778.281153][ T551] lock_acquire+0x1b9/0x370 [ 1778.281170][ T551] ? path_openat+0xad9/0x4280 [ 1778.281181][ T551] ? __pfx___might_resched+0x10/0x10 [ 1778.281201][ T551] mnt_want_write+0x6f/0x410 [ 1778.281217][ T551] ? path_openat+0xad9/0x4280 [ 1778.281228][ T551] path_openat+0xad9/0x4280 [ 1778.281241][ T551] ? __pfx_path_openat+0x10/0x10 [ 1778.281252][ T551] ? kasan_save_stack+0x3f/0x50 [ 1778.281268][ T551] ? kasan_save_stack+0x30/0x50 [ 1778.281281][ T551] ? kasan_save_track+0x14/0x30 [ 1778.281298][ T551] ? __kasan_slab_alloc+0x89/0x90 [ 1778.281312][ T551] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1778.281327][ T551] ? do_getname_kernel+0x5d/0x250 [ 1778.281339][ T551] ? filp_open+0x1d/0x50 [ 1778.281352][ T551] ? fsg_lun_open+0x6b/0x7b0 [ 1778.281367][ T551] do_file_open+0x20e/0x430 [ 1778.281379][ T551] ? __pfx_do_file_open+0x10/0x10 [ 1778.281395][ T551] ? rcu_is_watching+0x12/0xc0 [ 1778.281410][ T551] file_open_name+0x1c3/0x3e0 [ 1778.281425][ T551] ? __pfx_file_open_name+0x10/0x10 [ 1778.281439][ T551] ? do_getname_kernel+0x5d/0x250 [ 1778.281451][ T551] ? __asan_memcpy+0x3c/0x60 [ 1778.281463][ T551] ? do_getname_kernel+0x1be/0x250 [ 1778.281476][ T551] filp_open+0x2e/0x50 [ 1778.281490][ T551] fsg_lun_open+0x6b/0x7b0 [ 1778.281504][ T551] ? __pfx_down_read+0x10/0x10 [ 1778.281522][ T551] fsg_store_file+0x1e7/0x450 [ 1778.281538][ T551] configfs_write_iter+0x302/0x4e0 [ 1778.281549][ T551] vfs_write+0x6ac/0x1050 [ 1778.281559][ T551] ? __pfx_configfs_write_iter+0x10/0x10 [ 1778.281570][ T551] ? __pfx_vfs_write+0x10/0x10 [ 1778.281579][ T551] ? find_held_lock+0x2b/0x80 [ 1778.281596][ T551] ksys_write+0x12a/0x250 [ 1778.281606][ T551] ? __pfx_ksys_write+0x10/0x10 [ 1778.281615][ T551] ? trace_syscall_enter+0xd9/0x110 [ 1778.281629][ T551] __do_fast_syscall_32+0xe7/0x970 [ 1778.281648][ T551] do_fast_syscall_32+0x32/0x70 [ 1778.281664][ T551] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1778.281678][ T551] RIP: 0023:0xf7f28fec [ 1778.281694][ T551] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 1778.281699][ T551] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1778.281710][ T551] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 1778.281716][ T551] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1778.281723][ T551] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1778.281729][ T551] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1778.281736][ T551] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1778.281746][ T551] [ 1778.383093][ T551] mass_storage.0/lun.0: unable to open backing file: fi