last executing test programs: 5.109845468s ago: executing program 1 (id=1434): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x48, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) io_uring_setup(0xfc2, &(0x7f0000000c40)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() setrlimit(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1f00, 0x12) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e95494", 0xe}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[], 0x60}], 0x1, 0x8001) 4.210447389s ago: executing program 1 (id=1435): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1b8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigaction(0x40, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x24}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x60000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0x541b, &(0x7f00000000c0)={0xffffffffffffffff}) close_range(r9, 0xffffffffffffffff, 0x0) 3.896902419s ago: executing program 1 (id=1436): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$l2tp(0x2, 0x2, 0x73) r1 = syz_io_uring_setup(0x110, &(0x7f00000004c0)={0x0, 0x2b7a, 0x400, 0x0, 0x4}, &(0x7f0000000240)=0x0, &(0x7f0000000800)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x264}) unshare(0x22020600) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.209673724s ago: executing program 2 (id=1438): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x7fffffff, 0x0, 0x0, 0xffffffff, 0x0, "ff3f66fa733f1b33e356d25b90c98fe587b88a"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f7ffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x24, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x22000000}, 0x4040080) set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYBLOB, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000e5bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.070497518s ago: executing program 2 (id=1439): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001439) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000000c0)=0x2050a0c) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x2000000b) read(r4, 0x0, 0x0) close(r4) close(r3) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r8, 0x0, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x40, r11, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9a03}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x40}}, 0x20) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x120) r13 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r13, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 3.002549633s ago: executing program 1 (id=1440): sched_setaffinity(0x0, 0x30, &(0x7f00000002c0)=0x10002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2062) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x208040, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r1) 2.151228489s ago: executing program 2 (id=1444): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x82) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0xc01, 0x3, 0x1230, 0x10e8, 0x5002004a, 0xa, 0x10e8, 0x0, 0x1208, 0x3c8, 0x3c8, 0x1208, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @loopback, 0x0, 0x0, 'syzkaller0\x00', 'syzkaller0\x00'}, 0x60, 0x10a0, 0x10e8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv6=@private0, 'wg2\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x1290) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000003440), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) 2.149740852s ago: executing program 2 (id=1445): gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000340)="0429ce1ac2e508918c5c6fd560382b0c837508da0fcd68a14793e7f624380c", &(0x7f00000004c0)="77416b576a366863188d674a7ca81f4dd9f4f45e002aeddaa891e1cdf4980d57f94a725e2b27f62ff542b362674c564ba7c2fd76d4c12ee4fa3d2be5d11036be7e759d0f3eef4e6772a08089ccb610dd8122cdbe288662f241ac2d8096d840dd3999d6c5499b59"}}, &(0x7f0000bbdffc)) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) bind$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async, rerun: 64) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x400a00, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x100, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000240009000000000000000e0006"], 0x14}}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140643000000000e000a001000000086419820dd61", 0x2e}], 0x1}, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0xab, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0x1) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d60390170f74f9ef4"], 0xd8) (async) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.989759414s ago: executing program 3 (id=1448): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$l2tp(0x2, 0x2, 0x73) r1 = syz_io_uring_setup(0x110, &(0x7f00000004c0)={0x0, 0x2b7a, 0x400, 0x0, 0x4}, &(0x7f0000000240)=0x0, &(0x7f0000000800)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x264}) unshare(0x22020600) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.98964529s ago: executing program 2 (id=1449): r0 = gettid() rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x800000, 0x5, 0x7}) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x0, 0x1}, 0x10, 0x1, 0x0, 0x0, "f283314681040daac27e6736cee3124e498d1401e18e89954d3730189bdea3ad784fed698ffc96f75a3f79edd9a1ab7394a1133eee8152e05ad9f83bea8ab369"}, 0x48}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) 1.900438627s ago: executing program 2 (id=1450): sched_setaffinity(0x0, 0x30, &(0x7f00000002c0)=0x10002) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="13100000160091ef"], 0xfe33) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'lo\x00', 0x1}) recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2062) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x208040, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r2) socket$can_j1939(0x1d, 0x2, 0x7) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 1.279586513s ago: executing program 0 (id=1454): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x4000085) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2000000000000376, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet6_sctp(0xa, 0x5, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) 879.628921ms ago: executing program 3 (id=1455): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000ffff000000007200ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}}, 0x0) (async) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) (async) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000000)=0xb2, 0x4) (async, rerun: 32) recvmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0x94}}], 0x1, 0x2000, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) 879.461464ms ago: executing program 3 (id=1456): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x21b1800, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000100)) 810.070771ms ago: executing program 3 (id=1457): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f00000004c0)='./file1\x00', 0x2000, 0x1) (async, rerun: 32) chdir(&(0x7f0000000140)='./bus\x00') (async, rerun: 32) r5 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000180)=""/173, 0xad) (async, rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xe50}, {0x0}, {0x0, 0x12c}, {0x0}], 0x4}, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x80047453, 0xffffffffffffffff) (async) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0xfffffffd, 0x34ad, 0x6, 0x32cc, 0x15, "120b46904d7a4f8d19d9f4c5443d06c575b9cb"}) 809.931435ms ago: executing program 3 (id=1458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000002c0000c401"]) 730.44365ms ago: executing program 3 (id=1459): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000008600d86b63aef6e7d62813f442b5e6314366c5a13304ab984033722e6ba6eea8f25fc979e1afa7861775a07c1a0cc02fdf4d79f46db2faeb8ed6e63a452bc726e1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='hfs\x00', 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = io_uring_setup(0x104, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffd, 0x2f0}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0xa, 0x0, 0x1) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={0x0, 0x0, 0x100000}, 0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r5 = open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 408.061968ms ago: executing program 0 (id=1460): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x48, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) io_uring_setup(0xfc2, &(0x7f0000000c40)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() setrlimit(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000840)=0x2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e95494", 0xe}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[], 0x60}], 0x1, 0x8001) 233.676021ms ago: executing program 0 (id=1461): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x1a, 0x4, 0x2) sendmmsg$inet(r1, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}], 0x2, 0x0) r2 = socket(0x29, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYBLOB="470d00005c000000e5ff0a0000000c0001800800030000000000"], 0x20}, 0x1, 0x0, 0x0, 0xc050}, 0x2) syz_emit_ethernet(0x68, &(0x7f0000000180)=ANY=[@ANYBLOB="87eeb16d722dbbbbbbbbbbbb81000900884700000500000000000000000000000000000252caf273892fbcebb8b8f21197719c299285d6750723f5a7f97dc40ada0b7c210f196aa93347b46f99d39698c659638539f1d255a2ca35c372ff13e8fd4f66a530527021d3d194"], 0x0) connect$bt_sco(r2, &(0x7f0000000000), 0x8) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x6, 0x1}]}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000140)=0x6, 0x4) iopl(0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000080), 0x0) r5 = socket$unix(0x1, 0x1, 0x0) close(r5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='net/ip_vs_stats_percpu\x00') read$FUSE(r6, &(0x7f00000082c0)={0x2020}, 0x2020) read$FUSE(r6, &(0x7f000000a300)={0x2020}, 0x204c) read$FUSE(r6, &(0x7f00000103c0)={0x2020}, 0x2020) read$FUSE(r6, &(0x7f0000005900)={0x2020}, 0x2020) preadv2(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/185, 0xb9}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000012400)={0x2020}, 0x2020) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x76, &(0x7f0000000140)=@assoc_value={r8}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r8, 0x77c9, 0x5}, &(0x7f0000000040)=0xc) write(r0, &(0x7f0000000240)="2600000011003f20000000bf8a9d719797efcee3130000000d39036892f3f77156c2aea30a4b", 0x26) 233.497393ms ago: executing program 1 (id=1462): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x7fffffff, 0x0, 0x0, 0xffffffff, 0x0, "ff3f66fa733f1b33e356d25b90c98fe587b88a"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f7ffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x24, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x22000000}, 0x4040080) set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYBLOB, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000fff8bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 93.83761ms ago: executing program 1 (id=1463): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f00000001c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) set_mempolicy(0x2002, 0x0, 0x9) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000640)={{}, 0x0, 0x0, @inherit={0x0, 0x0}, @name="fb41d0bccf751a0046c50e2c9d5552e4e556499e39cacaf9f03a1a9467e9b51ccb457ef7ce9abc7fe03af496ff80bb548428563d69d839869323b9fa1108daea698ceba38a1bd7680ffeee4f104da9dcfdf21f51feecfb505161309ffe71772da089dad4e773734455322d7ee92d3c9b08de4d49dc2db3e0721c4259b9cfde2634b85a447cc0199eb9dad7c70482e1591d2e92f0ce7d522703d29d0244114e4643557bd58b8c7b4db792b0d830fb80677f4938bb722da1624ee444eec7dc100efa7a4f9357346a2945fb56815b27378a4095feb395e45c9c2f6fe7c082ea8e4b7cd66106469bf166c721acb4c1369c2ab3aecdc4fa2e85b382f9350e28bf059c2d8c42982d176c72066a5be9cde486e805cdd19c368a7de425fc347fecbe09ad1aa668158290f0fb406b84ec2d9059954c658bf755be9fa196efdac11b40879f66b4a1a72550657a652c99ed108e39468113cb2ae00d43771aaf99c7c72a2014fe394ae10251d82365f8eb73571bf0c1d443b1cf76b7319e18e2fbcf21e8099d9e47709c580d6e25ec39f9ded643855fb9e16eea85e74263898510248d06fef434fe2890b29e0a68aa2071c4d89b74b5a66fe252824923e4b1eb544e42735f52f0ac1889a1bee6abb0013a89f88096e9a67f1e7491e8af0ccbf930bf9992fac3eb188ce38f57fa995f5b486e25005b1d527400bcbe73fe19ddcd1e48a1e587e81207912a054a0359a19927baf13c49c529f2e06b3a1fa2d7d427e5292d517b647656283384923bcaa8081194252f1aebfeaba627350c61b2802b4c9010f5eb3f7071b2ae51eac7524412c184bfa55b4bf97afe34e32aa9c10aefa0a3fcd9db348752d09b9ffb0e8a3c29dc361d1a0f066a47d883accd4bc95e7f8d525c0d37bc06523a806a333711d80d79fb50dc3c8dc5f485da7592930148a6330be6b02deeeca484f8065c50516278d5217136e3fce6534f277dadef5bc9dbc070354fc9143e8044cac5f68e7917de6a3e7c7f0e68303df6f4b7549e58c8f25af459d6a6caa201c49a34aa8769e7a2c035417aeb18f17e085a61e27efd6bfd5e8d7f74479e73cd4a8b493ac1b6ac8ea54f44214d06324bc30457a7ac523ee688ee97024b433f788538a0a548e7d22aa9405165dbbbfa7509bd18e02e6a398fc8937eb47b97c160b2edc3277229d32de00ec7ac1f9fee3d35adddd69d4a4c7920e943c44288d83b122b4c509db02c66d86e8782c1e10259ee06251cdf338670a8c8f526c729add35d5b149cc88b34e36cbbe3b6a38421924a8f3e09d4ce00b3cf943bd77ca342679cab2adb0df82ee294439a1ff6af02b7cf65064ad36a01fb409c4b924ae1363035527855d15454b54f178b26119d58f04fba81f695a75c12ae8b26851cacb0a1d94e0125798b91c1d03137df3660ac10ec4982770d11eff8c74d3c406e1f17190ebaf96b4a281eddc23629f429ee0e561fccd56c1e72a200dce8c2a3733db34ad564c23e525c53786f816f2debf2c35ded162150b214e103ea42d24b28c7d48658991412798ec682feee94dad1cd0bc11c7060c1404ff6f27581f44e9532a780683bf7e02f3ee4733412268d8a6b7ab9a74c4aee2772d8119006bf03e738382a8d729860e6873b9704cef81011c6d553fa9367764f49b781737cb0cff613f5d4419b7a065b19e0c1378e3a9623751d409c7fd6d49c18e8ce85901d76547d01d2526f6014d41094de325db75a98b5290eb4e120c31e2fd4e208ab25c3e217f09270baedb9076eb4d50efe686313e2a1357b4ee19527c231c5cdb7e165ce22053009f3a5d2c86f8ac41938841f3c557366418c68e8c71404de4df886f209676e5220e4c363e536500d3e5967d00ca47aaa3f8cb960961a4fad6dc95816f88df387f822c1a8b99ab7a2392bbcbe641945dde1b97b9310e58c240f7e62dc79449a554d65ab2178ecdd9b41b9a34155c77d6a84bfe2a3326e256d62cb1471d1c9e400f147f293d6fa9c8152e16b9abfe1ad42e8a552c7cb2017042b838373a7d3268740bebbd99f2276978f3b28d06fe5512b821e711750a79301ab7b537c1efbb12f6be8cf7385c97ec13d0d12de5756d7efd9778b40485a813da628837f844588876ac97ee84f5313409eeb62c84804aa3a22aec3c1870821836a49d6e407554a3de1a529ee8e55a4c50967d7d814d0dad4960f3d793dca6bca6164cbce017286a8b9b9e13a3d1cc953f6d91e978f6158be0ca2db580a4249fe9965df847dbc4554f840b133ec28dc20dfa5a88f76a49ee0d07b99cebaa9927ef0756b2bde7b335498da24c6bb2ec34e5b38738bca879aba2222d2ca941aecba84035d177f081252cf47fd350086e694eed1f8ff639527d1171297a5a8b7fe87c4252d9361936805dcfdb8cc5692a216f2bf5e5440b39543f8a17ffb299515eb188489bd021665b96679fea156341ac713d209dde799b4587cb6d7f6e55ddb0ec7fc10fa179081646271d872c884f1860b9e3895465999831bd13fcd3106d486bc4fba59db3dd9ebd69cb41eda68c95912a4dff95a2496e6bdb77ac60676242a5626dd2b5616a32d43f6241189d1a89d2818bf64842b813b8ad97dff6a11fed2ff1b9d01af7ff4c878fa5be2c6bf1757fd01c8f2661ef2c0a3dad6d8f61deda9d7c00a76b27bd5a8d3764e623e446dabb77495a88151e274e001c3ecdac00d1147e12a7cf339d9ba9fe586b800e4282b14ebd46abbfab251de89a894504f33545d47e7f18d571c20f3d8bb513f5f5937b381e491ada77149bf5790c9b2e3b7b295549bd798db09e2a9a3c3f8e8073156a5bcc6de858080ea79481d310f7ba27c922843daa6cb99a5a06f4aadf082df2ef03397cfdcc4d26909b539a493df881c098e12e0686ce1da41d6abdff0a79e64c1e51f293e2d695b0a47b405c66d6975d46521fef50b5401cf8c2aff9085386137690535822d067ca4cf366c6b0a0e4ec5ab9744aa0cb2eb0509c2cc537d529dbd62e3e50559ba16773cbbe2eae84382a0d3e6d048b05cd366cdc8642e9be3f711ae981f468c506bb810ef8b2caa0fce108243971a08fa9c2ec23b0108a41403ea6579badd4bf7e65d7a3e91fa49e3c190f36f5126014fab9290bc94bd2c7013f906d65d962c37ed9b8da775fad1dd49ad1fadc20de0fb0924e41e4cf7753212ea08df665f33952b057c6e5713d5c2b55a03d345e797d25031777e1eb7f610904e8b28a76fcd9db1b83814f264ef09a3531dc6f96344caae66c2818f3635f67adc67e35293feb0da7bc1d2d5740693b7e84ba32240a3e6d0d408e80b3ae1357d47dd420897a964d1b8a683105c6b94005e48631cc5049168ee7d42fef05d901aedfe41dd9d4390cdbd45d7f4d327040eec78bbbf23de4590b32c5b964ab441552780cc41f4de97198be093cfdb52c53a1defdaee36eab99362dc22785dd54837e7d0e6c7c29b448575abc2a5130776141e8766283ad11370e0b85d045012a0e0c359e5d67019c1f2866869b3b2abd647d3047c88d96bd40b63e9efe6ba687d94bd42c72e14f055dc0ae8d0f90c048779f31585d29f38ee34118c346e3c3b00d6a12e6d8e409ae8b1d9d90bce6eeb4a6ed8357cb5fe8cee9089738a5352bd26bc2437ae74a0d48e8906f78b3473ede88bcf783f7c2d9ce0597e3fb9badca65c3973ae2a29a2c18e6019f23af887dc5ec7a68bb8e9d4314f0540025374933c998433f6173fe0986d9b1d2722d5de797a9aa9ffdeaa4a7f1dd2a36824c79c718cc6f40ca2f9ed8c3a4fd868312104b42a16ba487ec14d49e066a6b5df245413b3fda323245d1b3c665e6298488d836b230de37f1490d47586498e3778152365a43476026d6c82f4e88bac9c9a47ed949441b3a9292d87ccec28bf4ecc974e96a2e8f66c23c31529d78c1c53751c90c9368d1700dae1370f8c849e46e9d89d210871de6dcf621e971f4bae4f1d2fb71ffc91c9117f94908f467a42966ec8fbdefe4374ae9312e23679891d30e985252f07d3dbd1fabc559cddb26d254383a9a500d294aede9eafc3c8e6d5ec96cd909e5bb63d46f412c07511bfd79710f1ee986cac52ce3228b771e2083e55f5b8639cdfeda1faef7a84aa46d45d9fb7580bd5f356028c5272a8fb599993763e99ce2f287411982ee39dd45c0e58c1736b02393272f4fd51166bb21a980d29c63c8fe8131245063fea61ada455dca49739eb1386110c255db2d46443438e652b4c3c277490ac31c2904bc8859cb70733e5fc2ee9bbc180ea1e0b1ee67708531ea8e913d0c0d7d05a59adcfbc39693eccd2f1d8011e5dfec89c7d7b94012f60ecfcdf133527f9459609343107ff030b546e4158ffbfeaafe7efad5181cce3ab492074d225d247f0376c7eb742dd730d16a3eda2c4c516a2000eacaa79e89b3d1e5087301ef4e819817dd79df8d9720a5ad3089175fde4aad534aca926eb99e3657edd380645e1cf8331b4a5026c7bc8a8477689590424506e904f12344dcbe8d32a46f360c2ce4108800e8954d7d94d301b3f2a699b233bc1d1a42b34760192b9fb476101d8fdace62548bbb75b9b619d5978296c47085d462082cf48c27cfe7a76b265ad2f11ebcfa731f237e7acb32dc7bdc8ed689c4f2baf1d85175e04e82938992645a30340413867eb858c2de87772bb9d1173e3fc2d7696142d1fd2b1cc4f3e15e6e59d718f9c1203c42339a8750f618448ab2966b218fe1dbdb49c9e534102d699b36914dc6ebc9a7a401baf4397b616ba1b3e6bb34c9656445e31e929a76d242fdcc5f084371e382e172e8416bb7190a2fd61b87c9f14f6e8a6298f3912f205223e0e643e65c3f323698107ac605cdb7c7bf375e266682e2e209c654dcd777d5d35d61f0cc32d2cc5a2720f6b7dcf46c6f571ace0b743d76f2ac4701ac0b99be1a6e2174e8146b6ea0b0d1184a793b40d54a630d49d972ac3f5b0901901f658160e41f8d8cacbc9a3a5613457854ba6bcafbc635d78a28b8ccb5dea4cfbf7e63dff00ca32c9847994702078542c72cb9839a15557adea828492b6f424075bcfaf577922e68f233a6909c46aebb762c526f20afa2463015547538865f4b236d614f4ddecf7fde084b974bccf845070eb925a335432e88da312829439572dab86d691ec99c5611b528fad9dfdbb1a7f6e428dda8e8d01b2b23a5e781a81f6cfa7b79c42f7c1b0d11cf6ecb27efe7b6af2c50dedf554ecb745c00614ca27203282adc46c2ae1611daa0ba22db3083b703b4274d8d62eb86ea61560df905ff3aeee3bae0ef22ab7553bb0e1351e4323522f98c651b84bfa2a6da184ef739061e09af9ee23296189429a963ebe59d8908b4f5c3b5eb08827ddff176f8d355f9d79ac688af1c4e36c01f76365198e068c266182603bc29cd6f4b8f09502d9739c8d73a496e6877b9f68a1de20f3544d9d30c716b8b5c042695e6cfde5083ee09d1d10f438ddd9a25656383cf406b62db27b243eb044099c1482f8e3bd5de5071d77b68f969b758c9ad412303f6b0bac13cbbcfab98e1a0f5b754972625f694cfa2f6553dfff692a9f0577d67307ee2ae37a1753e003f410c0cd8ed1928b06bf005203a52e21ca6411863185dbb65861de36ed9eeb30207777b761093d8b575b755fa01708645c0e4cf19dbd43e5f64cd18350eb9c668b923fad3ee2da716e313528746da62a901d0fee4ed6228b9bd3ec3d5d"}) r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000001640)=ANY=[], 0x1a3) write$binfmt_misc(r1, &(0x7f0000000000), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000000000000e4ffffff", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}}) 88.910626ms ago: executing program 0 (id=1464): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000010004b0400000000000000007b000000", @ANYRES32=r2, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800080088a8ffff0500070007"], 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYRESOCT=r0, @ANYBLOB="010300000100fddbdf2526"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0xc0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000003c0)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280), 0x3, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000640)=[0x4010], &(0x7f0000000300)=[r7], &(0x7f0000000340), 0x0, 0xca}) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x100000}], 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000010004b0400000000000000007b000000", @ANYRES32=r2, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800080088a8ffff0500070007"], 0x4c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYRESOCT=r0, @ANYBLOB="010300000100fddbdf2526"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0xc0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000003c0)={&(0x7f0000000100)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280), 0x3, r6}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000640)=[0x4010], &(0x7f0000000300)=[r7], &(0x7f0000000340), 0x0, 0xca}) (async) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x100000}], 0x2) (async) 311.803µs ago: executing program 0 (id=1465): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x21b1800, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000100)) 0s ago: executing program 0 (id=1466): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$l2tp(0x2, 0x2, 0x73) r1 = syz_io_uring_setup(0x110, &(0x7f00000004c0)={0x0, 0x2b7a, 0x400, 0x0, 0x4}, &(0x7f0000000240)=0x0, &(0x7f0000000800)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00', 0x264}) unshare(0x22020600) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ][ T6471] random: crng reseeded on system resumption [ 90.810598][ T6471] syzkaller0: entered promiscuous mode [ 90.812068][ T6471] syzkaller0: entered allmulticast mode [ 92.477100][ T6475] netlink: 1928 bytes leftover after parsing attributes in process `syz.2.255'. [ 92.631704][ T6505] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.601976][ T6522] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.633236][ T6527] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 93.641275][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.643939][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.813094][ T6538] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.221884][ T6554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.532465][ T25] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 95.619580][ T6576] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.287'. [ 95.623234][ T6576] sysfs: cannot create duplicate filename '/class/ieee80211/ !' [ 95.625265][ T6576] CPU: 3 UID: 0 PID: 6576 Comm: syz.0.287 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 95.627940][ T6576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.630662][ T6576] Call Trace: [ 95.631553][ T6576] [ 95.632331][ T6576] dump_stack_lvl+0x16c/0x1f0 [ 95.633790][ T6576] sysfs_warn_dup+0x7f/0xa0 [ 95.634949][ T6576] sysfs_do_create_link_sd+0x124/0x140 [ 95.636350][ T6576] sysfs_create_link+0x61/0xc0 [ 95.637597][ T6576] device_add+0x62e/0x1a70 [ 95.638762][ T6576] ? __pfx_device_add+0x10/0x10 [ 95.640088][ T6576] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 95.641658][ T6576] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 95.643140][ T6576] wiphy_register+0x20d7/0x2d30 [ 95.644674][ T6576] ? __pfx_wiphy_register+0x10/0x10 [ 95.646136][ T6576] ieee80211_register_hw+0x2959/0x3fb0 [ 95.647601][ T6576] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 95.649119][ T6576] ? rcu_is_watching+0x12/0xc0 [ 95.650388][ T6576] ? trace_hrtimer_init+0x19d/0x220 [ 95.651761][ T6576] ? __hrtimer_init+0x106/0x2c0 [ 95.653052][ T6576] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 95.654876][ T6576] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 95.657175][ T6576] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 95.659056][ T6576] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 95.660583][ T6576] hwsim_new_radio_nl+0xb42/0x12b0 [ 95.661897][ T6576] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 95.663317][ T6576] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 95.665398][ T6576] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 95.667345][ T6576] genl_family_rcv_msg_doit+0x202/0x2f0 [ 95.668810][ T6576] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 95.670443][ T6576] ? bpf_lsm_capable+0x9/0x10 [ 95.671731][ T6576] ? security_capable+0x7e/0x260 [ 95.673055][ T6576] ? ns_capable+0xd7/0x110 [ 95.674239][ T6576] genl_rcv_msg+0x565/0x800 [ 95.675447][ T6576] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.676980][ T6576] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 95.678475][ T6576] netlink_rcv_skb+0x165/0x410 [ 95.679807][ T6576] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.681166][ T6576] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 95.682631][ T6576] ? down_read+0xc9/0x330 [ 95.683842][ T6576] ? __pfx_down_read+0x10/0x10 [ 95.685107][ T6576] ? netlink_deliver_tap+0x1ae/0xcf0 [ 95.686506][ T6576] genl_rcv+0x28/0x40 [ 95.687761][ T6576] netlink_unicast+0x53c/0x7f0 [ 95.689144][ T6576] ? __pfx_netlink_unicast+0x10/0x10 [ 95.690592][ T6576] ? const_folio_flags.constprop.0+0x56/0x150 [ 95.692793][ T6576] ? __phys_addr_symbol+0x30/0x80 [ 95.694396][ T6576] ? __check_object_size+0x488/0x710 [ 95.695818][ T6576] netlink_sendmsg+0x8b8/0xd70 [ 95.697150][ T6576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.698482][ T6576] ? lock_acquire+0x2f/0xb0 [ 95.699726][ T6576] ____sys_sendmsg+0x9ae/0xb40 [ 95.700996][ T6576] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.702423][ T6576] ? get_compat_msghdr+0x11b/0x170 [ 95.703874][ T6576] ? __pfx___lock_acquire+0x10/0x10 [ 95.705283][ T6576] ___sys_sendmsg+0x135/0x1e0 [ 95.706541][ T6576] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.708074][ T6576] ? lock_acquire+0x2f/0xb0 [ 95.709333][ T6576] ? __fget_files+0x40/0x3f0 [ 95.710564][ T6576] ? fdget+0x176/0x210 [ 95.711613][ T6576] __sys_sendmsg+0x117/0x1f0 [ 95.712798][ T6576] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.714109][ T6576] ? __ia32_sys_futex_time32+0x1da/0x460 [ 95.715671][ T6576] __do_fast_syscall_32+0x73/0x120 [ 95.716935][ T6576] do_fast_syscall_32+0x32/0x80 [ 95.718286][ T6576] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.720588][ T6576] RIP: 0023:0xf7f25579 [ 95.721665][ T6576] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 95.726905][ T6576] RSP: 002b:00000000f56a656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 95.729059][ T6576] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000000 [ 95.731286][ T6576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.733868][ T6576] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.736637][ T6576] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 95.739165][ T6576] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.741880][ T6576] [ 95.751624][ T25] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 95.757176][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.765779][ T25] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 95.768740][ T25] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 95.770790][ T25] usb 6-1: Manufacturer: syz [ 95.791973][ T25] usb 6-1: config 0 descriptor?? [ 95.843763][ T6580] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.852464][ T25] rc_core: IR keymap rc-hauppauge not found [ 95.854055][ T25] Registered IR keymap rc-empty [ 95.855590][ T25] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 95.858513][ T25] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input7 [ 96.010293][ T6574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.013559][ T6574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.074828][ T6585] random: crng reseeded on system resumption [ 96.138698][ T6585] syzkaller0: entered promiscuous mode [ 96.140623][ T6585] syzkaller0: entered allmulticast mode [ 96.159684][ C2] igorplugusb 6-1:0.0: Error: urb status = -32 [ 96.166542][ T6574] batman_adv: batadv0: Adding interface: wlan1 [ 96.168644][ T6574] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.181583][ T6574] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 97.440001][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'. [ 97.442966][ T63] usb 6-1: USB disconnect, device number 6 [ 97.444416][ T6595] batman_adv: batadv0: Removing interface: team0 [ 97.450365][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.461686][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.464706][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.466685][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.468856][ T6595] batman_adv: batadv0: Removing interface: wlan1 [ 97.694753][ T6602] : entered promiscuous mode [ 98.099294][ T6620] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.212730][ T6625] random: crng reseeded on system resumption [ 98.217868][ T6627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.302'. [ 98.271588][ T6625] syzkaller0: entered promiscuous mode [ 98.277116][ T6625] syzkaller0: entered allmulticast mode [ 98.312004][ T6630] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.303'. [ 99.576406][ T6630] sysfs: cannot create duplicate filename '/class/ieee80211/ !' [ 99.579026][ T6630] CPU: 3 UID: 0 PID: 6630 Comm: syz.3.303 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 99.582603][ T6630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.586176][ T6630] Call Trace: [ 99.587322][ T6630] [ 99.588351][ T6630] dump_stack_lvl+0x16c/0x1f0 [ 99.589966][ T6630] sysfs_warn_dup+0x7f/0xa0 [ 99.591522][ T6630] sysfs_do_create_link_sd+0x124/0x140 [ 99.593372][ T6630] sysfs_create_link+0x61/0xc0 [ 99.595012][ T6630] device_add+0x62e/0x1a70 [ 99.596563][ T6630] ? __pfx_device_add+0x10/0x10 [ 99.598229][ T6630] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.600272][ T6630] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 99.602331][ T6630] wiphy_register+0x20d7/0x2d30 [ 99.604016][ T6630] ? __pfx_wiphy_register+0x10/0x10 [ 99.605780][ T6630] ieee80211_register_hw+0x2959/0x3fb0 [ 99.607558][ T6630] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 99.609357][ T6630] ? rcu_is_watching+0x12/0xc0 [ 99.611007][ T6630] ? trace_hrtimer_init+0x19d/0x220 [ 99.612526][ T6630] ? __hrtimer_init+0x106/0x2c0 [ 99.613809][ T6630] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 99.615302][ T6630] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 99.616903][ T6630] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 99.618613][ T6630] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 99.620028][ T6630] hwsim_new_radio_nl+0xb42/0x12b0 [ 99.621372][ T6630] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 99.622824][ T6630] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 99.624778][ T6630] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 99.626691][ T6630] genl_family_rcv_msg_doit+0x202/0x2f0 [ 99.628142][ T6630] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 99.629734][ T6630] ? bpf_lsm_capable+0x9/0x10 [ 99.630966][ T6630] ? security_capable+0x7e/0x260 [ 99.632271][ T6630] ? ns_capable+0xd7/0x110 [ 99.633484][ T6630] genl_rcv_msg+0x565/0x800 [ 99.634678][ T6630] ? __pfx_genl_rcv_msg+0x10/0x10 [ 99.636006][ T6630] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 99.637452][ T6630] netlink_rcv_skb+0x165/0x410 [ 99.638711][ T6630] ? __pfx_genl_rcv_msg+0x10/0x10 [ 99.640046][ T6630] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 99.641430][ T6630] ? down_read+0xc9/0x330 [ 99.642566][ T6630] ? __pfx_down_read+0x10/0x10 [ 99.643832][ T6630] ? netlink_deliver_tap+0x1ae/0xcf0 [ 99.645209][ T6630] genl_rcv+0x28/0x40 [ 99.646262][ T6630] netlink_unicast+0x53c/0x7f0 [ 99.647527][ T6630] ? __pfx_netlink_unicast+0x10/0x10 [ 99.648861][ T6630] ? const_folio_flags.constprop.0+0x56/0x150 [ 99.650453][ T6630] ? __phys_addr_symbol+0x30/0x80 [ 99.651784][ T6630] ? __check_object_size+0x488/0x710 [ 99.653162][ T6630] netlink_sendmsg+0x8b8/0xd70 [ 99.654361][ T6630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.655714][ T6630] ? lock_acquire+0x2f/0xb0 [ 99.656877][ T6630] ____sys_sendmsg+0x9ae/0xb40 [ 99.658118][ T6630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.659522][ T6630] ? get_compat_msghdr+0x11b/0x170 [ 99.660857][ T6630] ? __pfx___lock_acquire+0x10/0x10 [ 99.662205][ T6630] ___sys_sendmsg+0x135/0x1e0 [ 99.663472][ T6630] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.664823][ T6630] ? lock_acquire+0x2f/0xb0 [ 99.666010][ T6630] ? __fget_files+0x40/0x3f0 [ 99.667218][ T6630] ? fdget+0x176/0x210 [ 99.668292][ T6630] __sys_sendmsg+0x117/0x1f0 [ 99.669502][ T6630] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.670830][ T6630] ? __ia32_sys_futex_time32+0x1da/0x460 [ 99.672302][ T6630] __do_fast_syscall_32+0x73/0x120 [ 99.673639][ T6630] do_fast_syscall_32+0x32/0x80 [ 99.674911][ T6630] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 99.676560][ T6630] RIP: 0023:0xf7f73579 [ 99.677625][ T6630] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 99.682552][ T6630] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 99.684704][ T6630] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000000 [ 99.686747][ T6630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.688789][ T6630] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.690780][ T6630] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 99.692825][ T6630] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.694880][ T6630] [ 99.740476][ T6649] FAULT_INJECTION: forcing a failure. [ 99.740476][ T6649] name failslab, interval 1, probability 0, space 0, times 1 [ 99.743948][ T6649] CPU: 1 UID: 0 PID: 6649 Comm: syz.3.308 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 99.746765][ T6649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.749688][ T6649] Call Trace: [ 99.750603][ T6649] [ 99.751392][ T6649] dump_stack_lvl+0x16c/0x1f0 [ 99.752792][ T6649] should_fail_ex+0x497/0x5b0 [ 99.754028][ T6649] should_failslab+0xc2/0x120 [ 99.755295][ T6649] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 99.757210][ T6649] ? skb_clone+0x190/0x3f0 [ 99.758867][ T6649] skb_clone+0x190/0x3f0 [ 99.760109][ T6649] netlink_deliver_tap+0xb26/0xcf0 [ 99.761519][ T6649] netlink_unicast+0x5e1/0x7f0 [ 99.762807][ T6649] ? __pfx_netlink_unicast+0x10/0x10 [ 99.764234][ T6649] ? __phys_addr_symbol+0x30/0x80 [ 99.765780][ T6649] ? __check_object_size+0x488/0x710 [ 99.767283][ T6649] netlink_sendmsg+0x8b8/0xd70 [ 99.768596][ T6649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.770004][ T6649] ? trace_lock_acquire+0x14a/0x1d0 [ 99.771359][ T6649] sock_write_iter+0x4fe/0x5b0 [ 99.772699][ T6649] ? __pfx_sock_write_iter+0x10/0x10 [ 99.774118][ T6649] do_iter_readv_writev+0x532/0x7f0 [ 99.775560][ T6649] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 99.777113][ T6649] ? bpf_lsm_file_permission+0x9/0x10 [ 99.778558][ T6649] ? security_file_permission+0x71/0x210 [ 99.780064][ T6649] vfs_writev+0x363/0xdd0 [ 99.781231][ T6649] ? find_held_lock+0x2d/0x110 [ 99.782546][ T6649] ? __pfx_vfs_writev+0x10/0x10 [ 99.783956][ T6649] ? find_held_lock+0x2d/0x110 [ 99.785239][ T6649] ? __pfx_lock_release+0x10/0x10 [ 99.786659][ T6649] ? trace_lock_acquire+0x14a/0x1d0 [ 99.788075][ T6649] ? __fget_files+0x244/0x3f0 [ 99.789351][ T6649] ? do_writev+0x289/0x370 [ 99.790559][ T6649] do_writev+0x289/0x370 [ 99.791740][ T6649] ? __pfx_do_writev+0x10/0x10 [ 99.793061][ T6649] __do_fast_syscall_32+0x73/0x120 [ 99.794441][ T6649] do_fast_syscall_32+0x32/0x80 [ 99.795784][ T6649] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 99.797502][ T6649] RIP: 0023:0xf7f73579 [ 99.798602][ T6649] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 99.803735][ T6649] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000092 [ 99.806120][ T6649] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000140 [ 99.808876][ T6649] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.811517][ T6649] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.813562][ T6649] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 99.815630][ T6649] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.817679][ T6649] [ 99.931222][ T6661] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.997409][ T6662] syzkaller0: entered promiscuous mode [ 99.998969][ T6662] syzkaller0: entered allmulticast mode [ 100.009401][ T40] kauditd_printk_skb: 486 callbacks suppressed [ 100.009410][ T40] audit: type=1326 audit(1729697041.635:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.1.315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 100.017842][ T40] audit: type=1326 audit(1729697041.645:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.1.315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 100.025018][ T40] audit: type=1326 audit(1729697041.645:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.1.315" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 100.030563][ T40] audit: type=1326 audit(1729697041.645:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.1.315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 100.036725][ T40] audit: type=1326 audit(1729697041.645:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.1.315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 100.045635][ T40] audit: type=1326 audit(1729697041.655:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.1.315" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 100.052003][ T40] audit: type=1326 audit(1729697041.655:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.1.315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 100.057806][ T40] audit: type=1326 audit(1729697041.655:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.1.315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 100.063584][ T40] audit: type=1326 audit(1729697041.655:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.1.315" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 100.069113][ T40] audit: type=1326 audit(1729697041.655:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6663 comm="syz.1.315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 100.119903][ T6669] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.317'. [ 100.822646][ T6677] FAULT_INJECTION: forcing a failure. [ 100.822646][ T6677] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.826810][ T6677] CPU: 1 UID: 0 PID: 6677 Comm: syz.3.319 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 100.829593][ T6677] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.832427][ T6677] Call Trace: [ 100.833335][ T6677] [ 100.834126][ T6677] dump_stack_lvl+0x16c/0x1f0 [ 100.835383][ T6677] should_fail_ex+0x497/0x5b0 [ 100.836670][ T6677] _copy_to_user+0x30/0xc0 [ 100.837848][ T6677] simple_read_from_buffer+0xd0/0x160 [ 100.839291][ T6677] proc_fail_nth_read+0x198/0x270 [ 100.840649][ T6677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.842105][ T6677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.843687][ T6677] vfs_read+0x1ce/0xbd0 [ 100.844806][ T6677] ? __fget_files+0x23a/0x3f0 [ 100.846059][ T6677] ? fdget_pos+0x24c/0x360 [ 100.847254][ T6677] ? __pfx_lock_release+0x10/0x10 [ 100.848621][ T6677] ? trace_lock_acquire+0x14a/0x1d0 [ 100.850216][ T6677] ? __pfx_vfs_read+0x10/0x10 [ 100.851492][ T6677] ? __pfx___mutex_lock+0x10/0x10 [ 100.852833][ T6677] ? __fget_files+0x244/0x3f0 [ 100.854084][ T6677] ksys_read+0x12f/0x260 [ 100.855211][ T6677] ? __pfx_ksys_read+0x10/0x10 [ 100.856605][ T6677] __do_fast_syscall_32+0x73/0x120 [ 100.857965][ T6677] do_fast_syscall_32+0x32/0x80 [ 100.859273][ T6677] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.860923][ T6677] RIP: 0023:0xf7f73579 [ 100.862004][ T6677] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 100.867078][ T6677] RSP: 002b:00000000f56f65a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 100.869253][ T6677] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f56f6620 [ 100.871309][ T6677] RDX: 000000000000000f RSI: 00000000f73fbff4 RDI: 0000000000000000 [ 100.873399][ T6677] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 100.875487][ T6677] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 100.877540][ T6677] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.879645][ T6677] [ 101.688015][ T6669] sysfs: cannot create duplicate filename '/class/ieee80211/ !' [ 101.690861][ T6669] CPU: 2 UID: 0 PID: 6669 Comm: syz.1.317 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 101.694312][ T6669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.697134][ T6669] Call Trace: [ 101.698024][ T6669] [ 101.698814][ T6669] dump_stack_lvl+0x16c/0x1f0 [ 101.700096][ T6669] sysfs_warn_dup+0x7f/0xa0 [ 101.701302][ T6669] sysfs_do_create_link_sd+0x124/0x140 [ 101.702710][ T6669] sysfs_create_link+0x61/0xc0 [ 101.703962][ T6669] device_add+0x62e/0x1a70 [ 101.705127][ T6669] ? __pfx_device_add+0x10/0x10 [ 101.706421][ T6669] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 101.708039][ T6669] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 101.709719][ T6669] wiphy_register+0x20d7/0x2d30 [ 101.711053][ T6669] ? __pfx_wiphy_register+0x10/0x10 [ 101.712458][ T6669] ieee80211_register_hw+0x2959/0x3fb0 [ 101.713898][ T6669] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 101.715440][ T6669] ? rcu_is_watching+0x12/0xc0 [ 101.716729][ T6669] ? trace_hrtimer_init+0x19d/0x220 [ 101.718097][ T6669] ? __hrtimer_init+0x106/0x2c0 [ 101.719415][ T6669] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 101.720887][ T6669] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 101.722476][ T6669] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 101.724205][ T6669] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 101.725597][ T6669] hwsim_new_radio_nl+0xb42/0x12b0 [ 101.726949][ T6669] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 101.728412][ T6669] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 101.730339][ T6669] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 101.732277][ T6669] genl_family_rcv_msg_doit+0x202/0x2f0 [ 101.733991][ T6669] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 101.735566][ T6669] ? bpf_lsm_capable+0x9/0x10 [ 101.736751][ T6669] ? security_capable+0x7e/0x260 [ 101.738003][ T6669] ? ns_capable+0xd7/0x110 [ 101.739175][ T6669] genl_rcv_msg+0x565/0x800 [ 101.740336][ T6669] ? __pfx_genl_rcv_msg+0x10/0x10 [ 101.741664][ T6669] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 101.743112][ T6669] netlink_rcv_skb+0x165/0x410 [ 101.744367][ T6669] ? __pfx_genl_rcv_msg+0x10/0x10 [ 101.745689][ T6669] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 101.747112][ T6669] ? down_read+0xc9/0x330 [ 101.748605][ T6669] ? __pfx_down_read+0x10/0x10 [ 101.750167][ T6669] ? netlink_deliver_tap+0x1ae/0xcf0 [ 101.751572][ T6669] genl_rcv+0x28/0x40 [ 101.752624][ T6669] netlink_unicast+0x53c/0x7f0 [ 101.753881][ T6669] ? __pfx_netlink_unicast+0x10/0x10 [ 101.755265][ T6669] ? const_folio_flags.constprop.0+0x56/0x150 [ 101.756869][ T6669] ? __phys_addr_symbol+0x30/0x80 [ 101.758185][ T6669] ? __check_object_size+0x488/0x710 [ 101.759862][ T6669] netlink_sendmsg+0x8b8/0xd70 [ 101.761353][ T6669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.762718][ T6669] ? lock_acquire+0x2f/0xb0 [ 101.763900][ T6669] ____sys_sendmsg+0x9ae/0xb40 [ 101.765387][ T6669] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.767110][ T6669] ? get_compat_msghdr+0x11b/0x170 [ 101.768707][ T6669] ? __pfx___lock_acquire+0x10/0x10 [ 101.770085][ T6669] ___sys_sendmsg+0x135/0x1e0 [ 101.771331][ T6669] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.772748][ T6669] ? lock_acquire+0x2f/0xb0 [ 101.774281][ T6669] ? __fget_files+0x40/0x3f0 [ 101.775872][ T6669] ? fdget+0x176/0x210 [ 101.777137][ T6669] __sys_sendmsg+0x117/0x1f0 [ 101.778364][ T6669] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.779778][ T6669] ? __ia32_sys_futex_time32+0x1da/0x460 [ 101.781262][ T6669] __do_fast_syscall_32+0x73/0x120 [ 101.782607][ T6669] do_fast_syscall_32+0x32/0x80 [ 101.783906][ T6669] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.785566][ T6669] RIP: 0023:0xf73be579 [ 101.786643][ T6669] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 101.791350][ T6669] RSP: 002b:00000000f56a656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 101.793382][ T6669] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 101.795488][ T6669] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.797457][ T6669] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.799347][ T6669] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 101.801289][ T6669] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.803212][ T6669] [ 102.047696][ T6695] fuse: Unknown parameter 'd' [ 102.576207][ T6702] random: crng reseeded on system resumption [ 102.629818][ T6702] syzkaller0: entered promiscuous mode [ 102.631481][ T6702] syzkaller0: entered allmulticast mode [ 102.739020][ T6692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.072548][ T830] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 103.224006][ T830] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 103.226897][ T830] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 103.229708][ T830] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 103.233752][ T830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.240587][ T6706] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 103.250782][ T830] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.479694][ T6710] loop9: detected capacity change from 0 to 7 [ 103.491321][ T6710] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 103.493019][ T6710] loop9: partition table partially beyond EOD, truncated [ 103.494929][ T6710] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 103.524397][ T5330] udevd[5330]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 104.151638][ T6720] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.333'. [ 104.164096][ T6720] sysfs: cannot create duplicate filename '/class/ieee80211/ !' [ 104.175625][ T6720] CPU: 0 UID: 0 PID: 6720 Comm: syz.1.333 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 104.178416][ T6720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.181345][ T6720] Call Trace: [ 104.182237][ T6720] [ 104.183051][ T6720] dump_stack_lvl+0x16c/0x1f0 [ 104.184313][ T6720] sysfs_warn_dup+0x7f/0xa0 [ 104.185519][ T6720] sysfs_do_create_link_sd+0x124/0x140 [ 104.186957][ T6720] sysfs_create_link+0x61/0xc0 [ 104.188236][ T6720] device_add+0x62e/0x1a70 [ 104.189428][ T6720] ? __pfx_device_add+0x10/0x10 [ 104.190733][ T6720] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 104.192478][ T6720] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 104.194064][ T6720] wiphy_register+0x20d7/0x2d30 [ 104.195353][ T6720] ? __pfx_wiphy_register+0x10/0x10 [ 104.196792][ T6720] ieee80211_register_hw+0x2959/0x3fb0 [ 104.198215][ T6720] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 104.199765][ T6720] ? rcu_is_watching+0x12/0xc0 [ 104.201024][ T6720] ? trace_hrtimer_init+0x19d/0x220 [ 104.202362][ T6720] ? __hrtimer_init+0x106/0x2c0 [ 104.203652][ T6720] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 104.205174][ T6720] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 104.206788][ T6720] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 104.208507][ T6720] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 104.209897][ T6720] hwsim_new_radio_nl+0xb42/0x12b0 [ 104.211239][ T6720] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 104.212698][ T6720] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 104.214614][ T6720] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 104.216733][ T6720] genl_family_rcv_msg_doit+0x202/0x2f0 [ 104.218204][ T6720] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 104.219906][ T6720] ? bpf_lsm_capable+0x9/0x10 [ 104.221170][ T6720] ? security_capable+0x7e/0x260 [ 104.222503][ T6720] ? ns_capable+0xd7/0x110 [ 104.223723][ T6720] genl_rcv_msg+0x565/0x800 [ 104.224958][ T6720] ? __pfx_genl_rcv_msg+0x10/0x10 [ 104.226320][ T6720] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 104.227841][ T6720] netlink_rcv_skb+0x165/0x410 [ 104.229129][ T6720] ? __pfx_genl_rcv_msg+0x10/0x10 [ 104.230478][ T6720] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 104.231914][ T6720] ? down_read+0xc9/0x330 [ 104.233080][ T6720] ? __pfx_down_read+0x10/0x10 [ 104.234362][ T6720] ? netlink_deliver_tap+0x1ae/0xcf0 [ 104.235837][ T6720] genl_rcv+0x28/0x40 [ 104.236889][ T6720] netlink_unicast+0x53c/0x7f0 [ 104.238142][ T6720] ? __pfx_netlink_unicast+0x10/0x10 [ 104.239539][ T6720] ? const_folio_flags.constprop.0+0x56/0x150 [ 104.241110][ T6720] ? __phys_addr_symbol+0x30/0x80 [ 104.242418][ T6720] ? __check_object_size+0x488/0x710 [ 104.243792][ T6720] netlink_sendmsg+0x8b8/0xd70 [ 104.245036][ T6720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.246463][ T6720] ? lock_acquire+0x2f/0xb0 [ 104.247658][ T6720] ____sys_sendmsg+0x9ae/0xb40 [ 104.248912][ T6720] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.250290][ T6720] ? get_compat_msghdr+0x11b/0x170 [ 104.251633][ T6720] ? __pfx___lock_acquire+0x10/0x10 [ 104.252989][ T6720] ___sys_sendmsg+0x135/0x1e0 [ 104.254221][ T6720] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.255664][ T6720] ? lock_acquire+0x2f/0xb0 [ 104.257337][ T6720] ? __fget_files+0x40/0x3f0 [ 104.259056][ T6720] ? fdget+0x176/0x210 [ 104.260177][ T6720] __sys_sendmsg+0x117/0x1f0 [ 104.261378][ T6720] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.262703][ T6720] ? __ia32_sys_futex_time32+0x1da/0x460 [ 104.264171][ T6720] __do_fast_syscall_32+0x73/0x120 [ 104.265513][ T6720] do_fast_syscall_32+0x32/0x80 [ 104.266785][ T6720] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.268438][ T6720] RIP: 0023:0xf73be579 [ 104.269511][ T6720] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 104.274435][ T6720] RSP: 002b:00000000f56a656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 104.276951][ T6720] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000000 [ 104.279655][ T6720] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.281746][ T6720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.283788][ T6720] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 104.285822][ T6720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.287983][ T6720] [ 104.478206][ T6732] random: crng reseeded on system resumption [ 104.604506][ T25] usb 7-1: USB disconnect, device number 5 [ 105.255292][ T6742] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 105.259398][ T6742] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 105.292690][ T6737] loop9: detected capacity change from 0 to 7 [ 105.294870][ T6737] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 105.298658][ T6737] loop9: partition table partially beyond EOD, truncated [ 105.303692][ T6737] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 105.319551][ T5330] udevd[5330]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 105.425727][ T6751] netlink: 'syz.3.343': attribute type 7 has an invalid length. [ 105.469540][ T6754] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.344'. [ 105.476825][ T6754] sysfs: cannot create duplicate filename '/class/ieee80211/ !' [ 105.482461][ T6754] CPU: 3 UID: 0 PID: 6754 Comm: syz.3.344 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 105.485251][ T6754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.488900][ T6754] Call Trace: [ 105.489789][ T6754] [ 105.490569][ T6754] dump_stack_lvl+0x16c/0x1f0 [ 105.491838][ T6754] sysfs_warn_dup+0x7f/0xa0 [ 105.493216][ T6754] sysfs_do_create_link_sd+0x124/0x140 [ 105.494696][ T6754] sysfs_create_link+0x61/0xc0 [ 105.496059][ T6754] device_add+0x62e/0x1a70 [ 105.497254][ T6754] ? __pfx_device_add+0x10/0x10 [ 105.498548][ T6754] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 105.500127][ T6754] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 105.501709][ T6754] wiphy_register+0x20d7/0x2d30 [ 105.503021][ T6754] ? __pfx_wiphy_register+0x10/0x10 [ 105.504419][ T6754] ieee80211_register_hw+0x2959/0x3fb0 [ 105.506034][ T6754] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 105.507692][ T6754] ? rcu_is_watching+0x12/0xc0 [ 105.508958][ T6754] ? trace_hrtimer_init+0x19d/0x220 [ 105.510321][ T6754] ? __hrtimer_init+0x106/0x2c0 [ 105.511601][ T6754] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 105.513101][ T6754] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 105.514699][ T6754] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 105.516463][ T6754] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 105.517845][ T6754] hwsim_new_radio_nl+0xb42/0x12b0 [ 105.519273][ T6754] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 105.520746][ T6754] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 105.522679][ T6754] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 105.524619][ T6754] genl_family_rcv_msg_doit+0x202/0x2f0 [ 105.526096][ T6754] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 105.527704][ T6754] ? bpf_lsm_capable+0x9/0x10 [ 105.528944][ T6754] ? security_capable+0x7e/0x260 [ 105.530252][ T6754] ? ns_capable+0xd7/0x110 [ 105.531477][ T6754] genl_rcv_msg+0x565/0x800 [ 105.532688][ T6754] ? __pfx_genl_rcv_msg+0x10/0x10 [ 105.534024][ T6754] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 105.535516][ T6754] netlink_rcv_skb+0x165/0x410 [ 105.536781][ T6754] ? __pfx_genl_rcv_msg+0x10/0x10 [ 105.538104][ T6754] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 105.539530][ T6754] ? down_read+0xc9/0x330 [ 105.540677][ T6754] ? __pfx_down_read+0x10/0x10 [ 105.541945][ T6754] ? netlink_deliver_tap+0x1ae/0xcf0 [ 105.543339][ T6754] genl_rcv+0x28/0x40 [ 105.544420][ T6754] netlink_unicast+0x53c/0x7f0 [ 105.545725][ T6754] ? __pfx_netlink_unicast+0x10/0x10 [ 105.547115][ T6754] ? const_folio_flags.constprop.0+0x56/0x150 [ 105.548713][ T6754] ? __phys_addr_symbol+0x30/0x80 [ 105.550036][ T6754] ? __check_object_size+0x488/0x710 [ 105.551432][ T6754] netlink_sendmsg+0x8b8/0xd70 [ 105.552699][ T6754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.554092][ T6754] ? lock_acquire+0x2f/0xb0 [ 105.555300][ T6754] ____sys_sendmsg+0x9ae/0xb40 [ 105.556623][ T6754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.558014][ T6754] ? get_compat_msghdr+0x11b/0x170 [ 105.559386][ T6754] ? __pfx___lock_acquire+0x10/0x10 [ 105.560763][ T6754] ___sys_sendmsg+0x135/0x1e0 [ 105.562017][ T6754] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.563400][ T6754] ? lock_acquire+0x2f/0xb0 [ 105.564607][ T6754] ? __fget_files+0x40/0x3f0 [ 105.565837][ T6754] ? fdget+0x176/0x210 [ 105.566920][ T6754] __sys_sendmsg+0x117/0x1f0 [ 105.568148][ T6754] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.569483][ T6754] ? __ia32_sys_futex_time32+0x1da/0x460 [ 105.570939][ T6754] __do_fast_syscall_32+0x73/0x120 [ 105.572297][ T6754] do_fast_syscall_32+0x32/0x80 [ 105.573589][ T6754] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.575242][ T6754] RIP: 0023:0xf7f73579 [ 105.576321][ T6754] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 105.581320][ T6754] RSP: 002b:00000000f56f656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 105.583501][ T6754] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 105.585570][ T6754] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.587647][ T6754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.589709][ T6754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.591778][ T6754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.593946][ T6754] [ 105.730196][ T6767] netlink: 'syz.2.350': attribute type 2 has an invalid length. [ 105.732257][ T6767] netlink: 'syz.2.350': attribute type 11 has an invalid length. [ 105.734403][ T6767] netlink: 132 bytes leftover after parsing attributes in process `syz.2.350'. [ 105.923684][ T6773] loop9: detected capacity change from 0 to 7 [ 105.925797][ T6773] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 105.927336][ T6773] loop9: partition table partially beyond EOD, truncated [ 105.929733][ T6773] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 105.945815][ T5330] udevd[5330]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 105.989163][ T6776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.352'. [ 106.054324][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 106.084272][ T6794] random: crng reseeded on system resumption [ 106.206378][ T6794] syzkaller0: entered promiscuous mode [ 106.207997][ T6794] syzkaller0: entered allmulticast mode [ 106.242451][ T9] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 106.245253][ T9] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 106.247850][ T9] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 106.250821][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.274340][ T6770] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 106.279536][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 106.569091][ T6813] netlink: 5048 bytes leftover after parsing attributes in process `syz.0.361'. [ 106.572182][ T6813] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 106.779199][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 106.779210][ T40] audit: type=1326 audit(1729697048.405:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.0.362" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x0 [ 107.348122][ T9] usb 8-1: USB disconnect, device number 4 [ 107.482991][ T6807] sch_fq: defrate 0 ignored. [ 108.561816][ T6841] loop9: detected capacity change from 0 to 7 [ 108.564757][ T6841] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 108.566255][ T6841] loop9: partition table partially beyond EOD, truncated [ 108.568234][ T6841] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 108.800574][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'. [ 109.135170][ T6875] hub 2-0:1.0: USB hub found [ 109.140462][ T6875] hub 2-0:1.0: 2 ports detected [ 109.504906][ T6877] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.382'. [ 109.509459][ T6877] sysfs: cannot create duplicate filename '/class/ieee80211/ !' [ 109.511516][ T6877] CPU: 2 UID: 0 PID: 6877 Comm: syz.0.382 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 109.514251][ T6877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.516997][ T6877] Call Trace: [ 109.517878][ T6877] [ 109.518654][ T6877] dump_stack_lvl+0x16c/0x1f0 [ 109.519925][ T6877] sysfs_warn_dup+0x7f/0xa0 [ 109.521133][ T6877] sysfs_do_create_link_sd+0x124/0x140 [ 109.522579][ T6877] sysfs_create_link+0x61/0xc0 [ 109.523844][ T6877] device_add+0x62e/0x1a70 [ 109.525040][ T6877] ? __pfx_device_add+0x10/0x10 [ 109.526354][ T6877] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.527910][ T6877] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 109.529488][ T6877] wiphy_register+0x20d7/0x2d30 [ 109.530768][ T6877] ? __pfx_wiphy_register+0x10/0x10 [ 109.532182][ T6877] ieee80211_register_hw+0x2959/0x3fb0 [ 109.533613][ T6877] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 109.535131][ T6877] ? rcu_is_watching+0x12/0xc0 [ 109.536426][ T6877] ? trace_hrtimer_init+0x19d/0x220 [ 109.537784][ T6877] ? __hrtimer_init+0x106/0x2c0 [ 109.539060][ T6877] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 109.540579][ T6877] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 109.542168][ T6877] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 109.543899][ T6877] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 109.545264][ T6877] hwsim_new_radio_nl+0xb42/0x12b0 [ 109.546605][ T6877] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 109.548087][ T6877] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 109.550007][ T6877] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 109.551960][ T6877] genl_family_rcv_msg_doit+0x202/0x2f0 [ 109.553427][ T6877] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 109.555030][ T6877] ? bpf_lsm_capable+0x9/0x10 [ 109.556292][ T6877] ? security_capable+0x7e/0x260 [ 109.557599][ T6877] ? ns_capable+0xd7/0x110 [ 109.558766][ T6877] genl_rcv_msg+0x565/0x800 [ 109.559972][ T6877] ? __pfx_genl_rcv_msg+0x10/0x10 [ 109.561317][ T6877] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 109.562794][ T6877] netlink_rcv_skb+0x165/0x410 [ 109.564044][ T6877] ? __pfx_genl_rcv_msg+0x10/0x10 [ 109.565349][ T6877] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 109.566716][ T6877] ? down_read+0xc9/0x330 [ 109.567858][ T6877] ? __pfx_down_read+0x10/0x10 [ 109.569113][ T6877] ? netlink_deliver_tap+0x1ae/0xcf0 [ 109.570502][ T6877] genl_rcv+0x28/0x40 [ 109.571547][ T6877] netlink_unicast+0x53c/0x7f0 [ 109.572799][ T6877] ? __pfx_netlink_unicast+0x10/0x10 [ 109.574178][ T6877] ? const_folio_flags.constprop.0+0x56/0x150 [ 109.575768][ T6877] ? __phys_addr_symbol+0x30/0x80 [ 109.577076][ T6877] ? __check_object_size+0x488/0x710 [ 109.578463][ T6877] netlink_sendmsg+0x8b8/0xd70 [ 109.579731][ T6877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.581090][ T6877] ? lock_acquire+0x2f/0xb0 [ 109.582275][ T6877] ____sys_sendmsg+0x9ae/0xb40 [ 109.583556][ T6877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.584921][ T6877] ? get_compat_msghdr+0x11b/0x170 [ 109.586250][ T6877] ? __pfx___lock_acquire+0x10/0x10 [ 109.587681][ T6877] ___sys_sendmsg+0x135/0x1e0 [ 109.588928][ T6877] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.590299][ T6877] ? lock_acquire+0x2f/0xb0 [ 109.591563][ T6877] ? __fget_files+0x40/0x3f0 [ 109.592776][ T6877] ? fdget+0x176/0x210 [ 109.593847][ T6877] __sys_sendmsg+0x117/0x1f0 [ 109.595049][ T6877] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.596400][ T6877] ? __ia32_sys_futex_time32+0x1da/0x460 [ 109.597882][ T6877] __do_fast_syscall_32+0x73/0x120 [ 109.599275][ T6877] do_fast_syscall_32+0x32/0x80 [ 109.600528][ T6877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.602186][ T6877] RIP: 0023:0xf7f25579 [ 109.603263][ T6877] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 109.608451][ T6877] RSP: 002b:00000000f56a656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 109.610624][ T6877] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000000 [ 109.612790][ T6877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.614941][ T6877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.617156][ T6877] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 109.619273][ T6877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.621421][ T6877] [ 109.746117][ T6868] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 109.748647][ T6868] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 109.762998][ T6868] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 109.767789][ T6868] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 109.769422][ T6868] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 109.774255][ T6868] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 109.776925][ T6868] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.778525][ T6868] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 109.788154][ T6868] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 109.875704][ T6886] random: crng reseeded on system resumption [ 109.918492][ T6886] syzkaller0: entered promiscuous mode [ 109.920025][ T6886] syzkaller0: entered allmulticast mode [ 111.135374][ T5348] Bluetooth: hci0: command 0x0c20 tx timeout [ 111.477828][ T6891] batadv0: entered promiscuous mode [ 111.481055][ T6891] batadv_slave_0: entered promiscuous mode [ 111.484145][ T6891] batadv_slave_0: left promiscuous mode [ 111.486086][ T6891] batadv0: left promiscuous mode [ 111.772983][ T5348] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.862590][ T5348] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.020196][ T6931] FAULT_INJECTION: forcing a failure. [ 112.020196][ T6931] name failslab, interval 1, probability 0, space 0, times 0 [ 112.024897][ T6931] CPU: 3 UID: 0 PID: 6931 Comm: syz.0.400 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 112.027671][ T6931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.030333][ T6931] Call Trace: [ 112.031212][ T6931] [ 112.031998][ T6931] dump_stack_lvl+0x16c/0x1f0 [ 112.033255][ T6931] should_fail_ex+0x497/0x5b0 [ 112.034555][ T6931] ? fs_reclaim_acquire+0xae/0x150 [ 112.035914][ T6931] should_failslab+0xc2/0x120 [ 112.037207][ T6931] kmem_cache_alloc_node_noprof+0x71/0x310 [ 112.038725][ T6931] ? __alloc_skb+0x2b3/0x380 [ 112.039974][ T6931] __alloc_skb+0x2b3/0x380 [ 112.041154][ T6931] ? __pfx___alloc_skb+0x10/0x10 [ 112.042458][ T6931] ? lock_acquire+0x2f/0xb0 [ 112.043677][ T6931] netlink_alloc_large_skb+0x69/0x130 [ 112.045086][ T6931] netlink_sendmsg+0x689/0xd70 [ 112.046352][ T6931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.047747][ T6931] ? trace_lock_acquire+0x14a/0x1d0 [ 112.049113][ T6931] sock_write_iter+0x4fe/0x5b0 [ 112.050384][ T6931] ? __pfx_sock_write_iter+0x10/0x10 [ 112.051789][ T6931] do_iter_readv_writev+0x532/0x7f0 [ 112.053119][ T6931] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 112.054620][ T6931] ? bpf_lsm_file_permission+0x9/0x10 [ 112.056034][ T6931] ? security_file_permission+0x71/0x210 [ 112.057507][ T6931] vfs_writev+0x363/0xdd0 [ 112.058642][ T6931] ? find_held_lock+0x2d/0x110 [ 112.059926][ T6931] ? __pfx_vfs_writev+0x10/0x10 [ 112.061210][ T6931] ? find_held_lock+0x2d/0x110 [ 112.062474][ T6931] ? __pfx_lock_release+0x10/0x10 [ 112.063806][ T6931] ? trace_lock_acquire+0x14a/0x1d0 [ 112.065176][ T6931] ? __fget_files+0x244/0x3f0 [ 112.066423][ T6931] ? do_writev+0x289/0x370 [ 112.067607][ T6931] do_writev+0x289/0x370 [ 112.068740][ T6931] ? __pfx_do_writev+0x10/0x10 [ 112.070025][ T6931] __do_fast_syscall_32+0x73/0x120 [ 112.071531][ T6931] do_fast_syscall_32+0x32/0x80 [ 112.072976][ T6931] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.074690][ T6931] RIP: 0023:0xf7f25579 [ 112.075792][ T6931] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 112.080839][ T6931] RSP: 002b:00000000f56a656c EFLAGS: 00000296 ORIG_RAX: 0000000000000092 [ 112.083025][ T6931] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 112.085129][ T6931] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.087209][ T6931] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.089289][ T6931] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 112.091367][ T6931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.093461][ T6931] [ 112.250894][ T6936] pim6reg: entered allmulticast mode [ 112.492442][ T5382] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 112.642629][ T5382] usb 5-1: Using ep0 maxpacket: 8 [ 112.645536][ T5382] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.648251][ T5382] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 112.650553][ T5382] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 112.653790][ T5382] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 112.656729][ T5382] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 112.659133][ T5382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.665467][ T5382] hub 5-1:1.0: bad descriptor, ignoring hub [ 112.667068][ T5382] hub 5-1:1.0: probe with driver hub failed with error -5 [ 112.670371][ T5382] cdc_wdm 5-1:1.0: skipping garbage [ 112.671755][ T5382] cdc_wdm 5-1:1.0: skipping garbage [ 112.675068][ T5382] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 112.676655][ T5382] cdc_wdm 5-1:1.0: Unknown control protocol [ 112.790357][ T6950] macvlan0: entered allmulticast mode [ 112.792443][ T6950] veth1_vlan: entered allmulticast mode [ 112.796325][ T6950] pim6reg: entered allmulticast mode [ 112.801402][ T6950] veth1_vlan: left allmulticast mode [ 112.810470][ T6950] macvlan0 (unregistering): left allmulticast mode [ 112.968677][ T6953] random: crng reseeded on system resumption [ 113.132719][ T6959] netlink: 'syz.1.407': attribute type 10 has an invalid length. [ 113.135772][ T6959] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.407'. [ 113.213062][ T5348] Bluetooth: hci0: command 0x0c20 tx timeout [ 113.427545][ T6965] tipc: Started in network mode [ 113.429023][ T6965] tipc: Node identity ac1414aa, cluster identity 4711 [ 113.431310][ T6965] tipc: Enabled bearer , priority 10 [ 113.863320][ T5348] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.932414][ T5348] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.095652][ T6973] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 114.378976][ T6980] netlink: 'syz.3.414': attribute type 21 has an invalid length. [ 114.381135][ T6980] netlink: 'syz.3.414': attribute type 1 has an invalid length. [ 114.384371][ T6980] netlink: 100 bytes leftover after parsing attributes in process `syz.3.414'. [ 114.393823][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.414'. [ 114.397043][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.414'. [ 114.400250][ T6980] netlink: 28 bytes leftover after parsing attributes in process `syz.3.414'. [ 114.438864][ T6984] input: syz1 as /devices/virtual/input/input8 [ 114.446512][ T6986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.497007][ T6990] netlink: 256 bytes leftover after parsing attributes in process `syz.3.419'. [ 114.553660][ T5382] tipc: Node number set to 2886997162 [ 115.060648][ T6998] random: crng reseeded on system resumption [ 115.193144][ T25] usb 5-1: USB disconnect, device number 3 [ 115.300002][ T5348] Bluetooth: hci0: command 0x0c20 tx timeout [ 115.882901][ T7007] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.932508][ T5348] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.012466][ T5348] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.202684][ T7013] FAULT_INJECTION: forcing a failure. [ 116.202684][ T7013] name failslab, interval 1, probability 0, space 0, times 0 [ 116.205948][ T7013] CPU: 2 UID: 0 PID: 7013 Comm: syz.0.426 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 116.208679][ T7013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.211467][ T7013] Call Trace: [ 116.212344][ T7013] [ 116.213126][ T7013] dump_stack_lvl+0x16c/0x1f0 [ 116.214365][ T7013] should_fail_ex+0x497/0x5b0 [ 116.215615][ T7013] ? fs_reclaim_acquire+0xae/0x150 [ 116.216955][ T7013] should_failslab+0xc2/0x120 [ 116.218196][ T7013] __kmalloc_node_noprof+0xd1/0x440 [ 116.219576][ T7013] ? load_msg+0x43/0x470 [ 116.220689][ T7013] load_msg+0x43/0x470 [ 116.221767][ T7013] do_msgsnd+0x1a8/0x1750 [ 116.223066][ T7013] ? find_held_lock+0x2d/0x110 [ 116.224364][ T7013] ? __pfx_do_msgsnd+0x10/0x10 [ 116.225597][ T7013] ? lock_acquire+0x2f/0xb0 [ 116.226778][ T7013] ? __might_fault+0xe3/0x190 [ 116.228011][ T7013] ? __ia32_compat_sys_msgsnd+0xe6/0x130 [ 116.229459][ T7013] __ia32_compat_sys_msgsnd+0xe6/0x130 [ 116.230877][ T7013] __do_fast_syscall_32+0x73/0x120 [ 116.232218][ T7013] do_fast_syscall_32+0x32/0x80 [ 116.233501][ T7013] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.235145][ T7013] RIP: 0023:0xf7f25579 [ 116.236225][ T7013] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 116.241126][ T7013] RSP: 002b:00000000f56a656c EFLAGS: 00000296 ORIG_RAX: 0000000000000190 [ 116.243277][ T7013] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000000 [ 116.245284][ T7013] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.245292][ T7013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.245298][ T7013] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 116.251448][ T7013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.253484][ T7013] [ 116.772916][ T40] audit: type=1326 audit(1729697058.395:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.3.429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 116.779623][ T40] audit: type=1326 audit(1729697058.395:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.3.429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 116.785838][ T40] audit: type=1326 audit(1729697058.395:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.3.429" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 116.795867][ T40] audit: type=1326 audit(1729697058.395:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.3.429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 116.801493][ T40] audit: type=1326 audit(1729697058.395:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.3.429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 116.822410][ T40] audit: type=1326 audit(1729697058.395:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.3.429" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 116.828149][ T40] audit: type=1326 audit(1729697058.395:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.3.429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 116.842453][ T40] audit: type=1326 audit(1729697058.395:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.3.429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 116.848803][ T40] audit: type=1326 audit(1729697058.395:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.3.429" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 116.854511][ T40] audit: type=1326 audit(1729697058.395:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.3.429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 116.904195][ T7036] FAULT_INJECTION: forcing a failure. [ 116.904195][ T7036] name failslab, interval 1, probability 0, space 0, times 0 [ 116.907675][ T7036] CPU: 3 UID: 0 PID: 7036 Comm: syz.0.433 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 116.910388][ T7036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.913183][ T7036] Call Trace: [ 116.914062][ T7036] [ 116.914840][ T7036] dump_stack_lvl+0x16c/0x1f0 [ 116.916097][ T7036] should_fail_ex+0x497/0x5b0 [ 116.917346][ T7036] should_failslab+0xc2/0x120 [ 116.918579][ T7036] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 116.920020][ T7036] ? dev_queue_xmit_nit+0x43/0xba0 [ 116.921363][ T7036] ? skb_clone+0x190/0x3f0 [ 116.922540][ T7036] skb_clone+0x190/0x3f0 [ 116.923667][ T7036] dev_queue_xmit_nit+0x38f/0xba0 [ 116.924992][ T7036] dev_hard_start_xmit+0x56/0x790 [ 116.926318][ T7036] ? __dev_queue_xmit+0x252/0x4350 [ 116.927664][ T7036] __dev_queue_xmit+0x7c7/0x4350 [ 116.928966][ T7036] ? __pfx___dev_queue_xmit+0x10/0x10 [ 116.930379][ T7036] ? rcu_is_watching+0x12/0xc0 [ 116.931643][ T7036] ? __copy_skb_header+0x2e8/0x5b0 [ 116.932989][ T7036] ? __skb_clone+0x570/0x760 [ 116.934444][ T7036] netlink_deliver_tap+0xa8a/0xcf0 [ 116.935788][ T7036] netlink_unicast+0x5e1/0x7f0 [ 116.937043][ T7036] ? __pfx_netlink_unicast+0x10/0x10 [ 116.938422][ T7036] ? __phys_addr_symbol+0x30/0x80 [ 116.939747][ T7036] ? __check_object_size+0x488/0x710 [ 116.941130][ T7036] netlink_sendmsg+0x8b8/0xd70 [ 116.942386][ T7036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.943739][ T7036] ? trace_lock_acquire+0x14a/0x1d0 [ 116.945109][ T7036] sock_write_iter+0x4fe/0x5b0 [ 116.946369][ T7036] ? __pfx_sock_write_iter+0x10/0x10 [ 116.947768][ T7036] do_iter_readv_writev+0x532/0x7f0 [ 116.949132][ T7036] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 116.950620][ T7036] ? bpf_lsm_file_permission+0x9/0x10 [ 116.951984][ T7036] ? security_file_permission+0x71/0x210 [ 116.953460][ T7036] vfs_writev+0x363/0xdd0 [ 116.954591][ T7036] ? find_held_lock+0x2d/0x110 [ 116.955856][ T7036] ? __pfx_vfs_writev+0x10/0x10 [ 116.957138][ T7036] ? find_held_lock+0x2d/0x110 [ 116.958400][ T7036] ? __pfx_lock_release+0x10/0x10 [ 116.959738][ T7036] ? trace_lock_acquire+0x14a/0x1d0 [ 116.961103][ T7036] ? __fget_files+0x244/0x3f0 [ 116.962344][ T7036] ? do_writev+0x289/0x370 [ 116.963528][ T7036] do_writev+0x289/0x370 [ 116.964643][ T7036] ? __pfx_do_writev+0x10/0x10 [ 116.965903][ T7036] __do_fast_syscall_32+0x73/0x120 [ 116.967285][ T7036] do_fast_syscall_32+0x32/0x80 [ 116.968570][ T7036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.970220][ T7036] RIP: 0023:0xf7f25579 [ 116.971299][ T7036] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 116.976248][ T7036] RSP: 002b:00000000f56a656c EFLAGS: 00000296 ORIG_RAX: 0000000000000092 [ 116.978405][ T7036] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 116.980488][ T7036] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.982542][ T7036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.984596][ T7036] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 116.986640][ T7036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.988703][ T7036] [ 116.989988][ T7036] netlink: 'syz.0.433': attribute type 4 has an invalid length. [ 117.188018][ T7041] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.190408][ T7041] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.194339][ T7041] bridge0: entered allmulticast mode [ 117.452367][ T7050] loop9: detected capacity change from 0 to 7 [ 117.454389][ T7050] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 117.456035][ T7050] loop9: partition table partially beyond EOD, truncated [ 117.458383][ T7050] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 118.125059][ T7052] FAULT_INJECTION: forcing a failure. [ 118.125059][ T7052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.128539][ T7052] CPU: 3 UID: 0 PID: 7052 Comm: syz.0.436 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 118.131302][ T7052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.134122][ T7052] Call Trace: [ 118.135016][ T7052] [ 118.135809][ T7052] dump_stack_lvl+0x16c/0x1f0 [ 118.137073][ T7052] should_fail_ex+0x497/0x5b0 [ 118.138327][ T7052] _copy_from_user+0x30/0xf0 [ 118.139581][ T7052] load_msg+0x1a1/0x470 [ 118.140686][ T7052] do_msgsnd+0x1a8/0x1750 [ 118.141838][ T7052] ? find_held_lock+0x2d/0x110 [ 118.143109][ T7052] ? __pfx_do_msgsnd+0x10/0x10 [ 118.144386][ T7052] ? lock_acquire+0x2f/0xb0 [ 118.145592][ T7052] ? __might_fault+0xe3/0x190 [ 118.146841][ T7052] ? __ia32_compat_sys_msgsnd+0xe6/0x130 [ 118.148328][ T7052] __ia32_compat_sys_msgsnd+0xe6/0x130 [ 118.149772][ T7052] __do_fast_syscall_32+0x73/0x120 [ 118.151138][ T7052] do_fast_syscall_32+0x32/0x80 [ 118.152430][ T7052] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.154098][ T7052] RIP: 0023:0xf7f25579 [ 118.155178][ T7052] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 118.160128][ T7052] RSP: 002b:00000000f56a656c EFLAGS: 00000296 ORIG_RAX: 0000000000000190 [ 118.162319][ T7052] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000000 [ 118.164406][ T7052] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.166480][ T7052] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.168563][ T7052] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 118.170650][ T7052] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.172747][ T7052] [ 118.194289][ T7058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.293037][ T7062] random: crng reseeded on system resumption [ 119.095114][ T7078] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.084474][ T7092] FAULT_INJECTION: forcing a failure. [ 120.084474][ T7092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.088941][ T7092] CPU: 3 UID: 0 PID: 7092 Comm: syz.2.448 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 120.092501][ T7092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.096110][ T7092] Call Trace: [ 120.097246][ T7092] [ 120.098258][ T7092] dump_stack_lvl+0x16c/0x1f0 [ 120.099909][ T7092] should_fail_ex+0x497/0x5b0 [ 120.101523][ T7092] _copy_to_user+0x30/0xc0 [ 120.103057][ T7092] simple_read_from_buffer+0xd0/0x160 [ 120.104991][ T7092] proc_fail_nth_read+0x198/0x270 [ 120.106729][ T7092] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.108767][ T7092] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.110727][ T7092] vfs_read+0x1ce/0xbd0 [ 120.112161][ T7092] ? __fget_files+0x23a/0x3f0 [ 120.113756][ T7092] ? fdget_pos+0x24c/0x360 [ 120.115291][ T7092] ? __pfx_lock_release+0x10/0x10 [ 120.117011][ T7092] ? trace_lock_acquire+0x14a/0x1d0 [ 120.118786][ T7092] ? __pfx_vfs_read+0x10/0x10 [ 120.120415][ T7092] ? __pfx___mutex_lock+0x10/0x10 [ 120.122141][ T7092] ? __fget_files+0x244/0x3f0 [ 120.123748][ T7092] ksys_read+0x12f/0x260 [ 120.125195][ T7092] ? __pfx_ksys_read+0x10/0x10 [ 120.126839][ T7092] __do_fast_syscall_32+0x73/0x120 [ 120.128601][ T7092] do_fast_syscall_32+0x32/0x80 [ 120.130264][ T7092] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.132414][ T7092] RIP: 0023:0xf7fd5579 [ 120.133805][ T7092] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 120.140314][ T7092] RSP: 002b:00000000f57565a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 120.143113][ T7092] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5756620 [ 120.145890][ T7092] RDX: 000000000000000f RSI: 00000000f745bff4 RDI: 0000000000000000 [ 120.148548][ T7092] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 120.151306][ T7092] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 120.153971][ T7092] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.156674][ T7092] [ 120.587474][ T7114] qnx4: no qnx4 filesystem (no root dir). [ 120.613492][ T7104] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.616177][ T7104] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.618826][ T7104] bridge0: entered allmulticast mode [ 122.093555][ T40] kauditd_printk_skb: 111 callbacks suppressed [ 122.093567][ T40] audit: type=1326 audit(2000000003.559:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.3.459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 122.102362][ T40] audit: type=1326 audit(2000000003.559:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.3.459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 122.108255][ T40] audit: type=1326 audit(2000000003.559:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.3.459" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 122.114339][ T40] audit: type=1326 audit(2000000003.559:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.3.459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 122.120350][ T40] audit: type=1326 audit(2000000003.559:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.3.459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 122.126096][ T40] audit: type=1326 audit(2000000003.569:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.3.459" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 122.131605][ T40] audit: type=1326 audit(2000000003.569:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.3.459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 122.137926][ T40] audit: type=1326 audit(2000000003.569:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.3.459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 122.143769][ T40] audit: type=1326 audit(2000000003.569:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.3.459" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 122.149262][ T40] audit: type=1326 audit(2000000003.569:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.3.459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 122.296678][ T7137] random: crng reseeded on system resumption [ 122.324005][ T7139] fuse: Unknown parameter 'group_id700000000000000000000' [ 122.353889][ T63] libceph: connect (1)[c::]:6789 error -101 [ 122.355734][ T63] libceph: mon0 (1)[c::]:6789 connect error [ 122.450410][ T7139] ceph: No mds server is up or the cluster is laggy [ 122.777759][ T7169] block device autoloading is deprecated and will be removed. [ 123.260671][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 123.552276][ T7198] netlink: 'syz.1.479': attribute type 4 has an invalid length. [ 123.648159][ T7202] libceph: resolve '. [ 123.648159][ T7202] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 123.648159][ T7202] ' (ret=-3): failed [ 123.655752][ T7201] No control pipe specified [ 123.667894][ T7201] syz_tun: entered promiscuous mode [ 123.859325][ T7207] syzkaller0: entered allmulticast mode [ 125.025265][ T7222] loop9: detected capacity change from 0 to 7 [ 125.027359][ T7222] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 125.028797][ T7222] loop9: partition table partially beyond EOD, truncated [ 125.030712][ T7222] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 125.038089][ T7234] netlink: 'syz.2.490': attribute type 4 has an invalid length. [ 125.076152][ T7236] netlink: 4108 bytes leftover after parsing attributes in process `syz.2.491'. [ 125.080880][ T7236] netlink: 'syz.2.491': attribute type 4 has an invalid length. [ 125.134870][ T5348] Bluetooth: hci1: unexpected event for opcode 0x200c [ 125.268470][ T7250] random: crng reseeded on system resumption [ 125.392864][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 125.400733][ T7258] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 125.405595][ T7258] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 125.570412][ T7259] loop9: detected capacity change from 0 to 7 [ 125.573458][ T7259] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 125.574942][ T7259] loop9: partition table partially beyond EOD, truncated [ 125.577312][ T7259] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 125.637717][ T5330] udevd[5330]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 126.112968][ T7271] sch_tbf: burst 2304 is lower than device lo mtu (65550) ! [ 126.158203][ T7273] bridge0: port 3(team0) entered disabled state [ 126.159992][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.161979][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.165103][ T7273] bridge0: left promiscuous mode [ 126.234619][ T7273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.240632][ T7273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.300233][ T7273] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.302787][ T7273] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.305199][ T7273] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.307817][ T7273] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.458281][ T7284] syzkaller0: entered promiscuous mode [ 126.460187][ T7284] syzkaller0: entered allmulticast mode [ 127.208532][ T7296] loop9: detected capacity change from 0 to 7 [ 127.214862][ T7296] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 127.216683][ T7296] loop9: partition table partially beyond EOD, truncated [ 127.219609][ T7296] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 127.239718][ T5330] udevd[5330]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 127.304717][ T7301] openvswitch: netlink: EtherType 0 is less than min 600 [ 127.715859][ T7316] No control pipe specified [ 128.105593][ T7303] netlink: 'syz.2.513': attribute type 4 has an invalid length. [ 129.223610][ T7328] loop9: detected capacity change from 0 to 7 [ 129.225932][ T7328] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 129.227279][ T7328] loop9: partition table partially beyond EOD, truncated [ 129.229088][ T7328] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 129.239324][ T5330] udevd[5330]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 129.310937][ T7341] netlink: 'syz.0.523': attribute type 10 has an invalid length. [ 129.314726][ T7341] netlink: 40 bytes leftover after parsing attributes in process `syz.0.523'. [ 129.319823][ T7341] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 129.322394][ T7341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.489381][ T7366] netlink: 56 bytes leftover after parsing attributes in process `syz.2.528'. [ 129.520190][ T40] kauditd_printk_skb: 274 callbacks suppressed [ 129.520199][ T40] audit: type=1326 audit(2000000010.979:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.3.529" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x0 [ 129.724284][ T7374] mmap: syz.1.530 (7374) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 129.902684][ T7376] loop9: detected capacity change from 0 to 7 [ 129.906444][ T7376] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 129.907857][ T7376] loop9: partition table partially beyond EOD, truncated [ 129.910026][ T7376] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 129.928591][ T5330] udevd[5330]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 130.093203][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.532'. [ 130.104413][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.532'. [ 130.107243][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.532'. [ 130.109741][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.532'. [ 130.112391][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.532'. [ 130.115061][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.532'. [ 130.117497][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.532'. [ 130.119859][ T7380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.532'. [ 130.141943][ T7381] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 130.148182][ T7381] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 130.221485][ T7381] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 130.226137][ T7381] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 130.295102][ T7381] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 130.298136][ T7381] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 130.374711][ T7381] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 130.377546][ T7381] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 130.446125][ T7381] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 130.449001][ T7381] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 130.492454][ T5348] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.515427][ T7381] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 130.518277][ T7381] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 130.570358][ T7387] IPv6: addrconf: prefix option has invalid lifetime [ 130.575736][ T7381] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 130.578765][ T7381] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 130.647381][ T7381] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 130.651104][ T7381] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 130.705387][ T7381] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 130.708389][ T7381] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 130.775435][ T7381] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 130.778407][ T7381] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 130.856995][ T7381] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 130.859980][ T7381] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 130.900451][ T7400] random: crng reseeded on system resumption [ 130.971988][ T7400] syzkaller0: entered promiscuous mode [ 130.975903][ T7400] syzkaller0: entered allmulticast mode [ 132.096008][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.098378][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.277654][ T7419] netlink: 'syz.1.543': attribute type 4 has an invalid length. [ 132.348995][ T7428] openvswitch: netlink: Missing key (keys=20040, expected=80) [ 132.356389][ T7428] netlink: 'syz.1.546': attribute type 4 has an invalid length. [ 132.389896][ T7430] Bluetooth: MGMT ver 1.23 [ 132.856762][ T7433] netlink: 'syz.2.548': attribute type 10 has an invalid length. [ 133.302425][ T40] audit: type=1326 audit(2000000014.749:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.554" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 133.310174][ T40] audit: type=1326 audit(2000000014.749:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.554" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 133.317958][ T40] audit: type=1326 audit(2000000014.749:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.554" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 133.325874][ T40] audit: type=1326 audit(2000000014.749:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.554" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 133.333693][ T40] audit: type=1326 audit(2000000014.749:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.554" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 133.341387][ T40] audit: type=1326 audit(2000000014.759:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.554" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 133.349885][ T40] audit: type=1326 audit(2000000014.759:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.554" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 133.356511][ T40] audit: type=1326 audit(2000000014.759:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.554" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 133.361961][ T40] audit: type=1326 audit(2000000014.759:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.2.554" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 133.740840][ T7458] netlink: 'syz.1.556': attribute type 4 has an invalid length. [ 133.851548][ T7463] random: crng reseeded on system resumption [ 134.033655][ T7463] syzkaller0: entered promiscuous mode [ 134.035144][ T7463] syzkaller0: entered allmulticast mode [ 134.462855][ T62] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 134.613695][ T62] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.616648][ T62] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.619233][ T62] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 134.621811][ T62] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.626861][ T62] usb 8-1: config 0 descriptor?? [ 134.983908][ T7476] binder: BINDER_SET_CONTEXT_MGR already set [ 134.987522][ T7476] binder: 7475:7476 ioctl 4018620d 20000100 returned -16 [ 135.076534][ T62] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 135.093263][ T62] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0926:3333.000A/input/input9 [ 135.182505][ T62] keytouch 0003:0926:3333.000A: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 135.302171][ T980] usb 8-1: USB disconnect, device number 5 [ 136.021596][ T7496] __nla_validate_parse: 26 callbacks suppressed [ 136.021608][ T7496] netlink: 40 bytes leftover after parsing attributes in process `syz.0.567'. [ 136.083588][ T7501] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 136.231617][ T7498] loop9: detected capacity change from 0 to 7 [ 136.241357][ T7498] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 136.244922][ T7498] loop9: partition table partially beyond EOD, truncated [ 136.248026][ T7498] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 136.259864][ T5330] udevd[5330]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 137.203694][ T7525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.576'. [ 137.460756][ T7532] overlayfs: workdir and upperdir must be separate subtrees [ 138.687443][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 139.218304][ T7580] netlink: 'syz.0.593': attribute type 4 has an invalid length. [ 139.252370][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 139.252381][ T40] audit: type=1326 audit(2000000020.709:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.0.594" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 139.259972][ T40] audit: type=1326 audit(2000000020.709:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.0.594" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 139.265273][ T7586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.266395][ T40] audit: type=1326 audit(2000000020.709:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.0.594" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 139.273564][ T40] audit: type=1326 audit(2000000020.709:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.0.594" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 139.274659][ T7586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.279988][ T40] audit: type=1326 audit(2000000020.709:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.0.594" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 139.287490][ T40] audit: type=1326 audit(2000000020.709:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.0.594" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 139.293568][ T40] audit: type=1326 audit(2000000020.709:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.0.594" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 139.299121][ T40] audit: type=1326 audit(2000000020.709:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.0.594" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 139.307291][ T40] audit: type=1326 audit(2000000020.709:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.0.594" exe="/syz-executor" sig=0 arch=40000003 syscall=368 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 139.315548][ T40] audit: type=1326 audit(2000000020.709:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.0.594" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 139.370504][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.597'. [ 139.379225][ T7589] input: syz0 as /devices/virtual/input/input10 [ 139.484518][ T7586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.488020][ T7586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.502386][ T62] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 139.524116][ T7606] QAT: failed to copy from user cfg_data. [ 139.632454][ T62] usb 7-1: device descriptor read/64, error -71 [ 139.912421][ T62] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 139.962491][ T63] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 140.042407][ T62] usb 7-1: device descriptor read/64, error -71 [ 140.122381][ T63] usb 6-1: Using ep0 maxpacket: 8 [ 140.127897][ T63] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 140.132889][ T63] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.135343][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 140.137683][ T63] usb 6-1: SerialNumber: syz [ 140.152739][ T62] usb usb7-port1: attempt power cycle [ 140.152736][ T63] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 140.502599][ T62] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 140.523446][ T62] usb 7-1: device descriptor read/8, error -71 [ 140.553629][ T7606] raw-gadget.3 gadget.1: fail, usb_ep_set_halt returned -11 [ 140.555958][ T5382] usb 6-1: USB disconnect, device number 7 [ 140.613670][ T7622] netlink: 'syz.3.606': attribute type 4 has an invalid length. [ 140.643587][ T5348] Bluetooth: hci1: unexpected event for opcode 0x201c [ 140.772422][ T62] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 140.793113][ T62] usb 7-1: device descriptor read/8, error -71 [ 140.902544][ T62] usb usb7-port1: unable to enumerate USB device [ 141.096208][ T7634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.610'. [ 142.988727][ T7675] xt_CT: No such helper "syz0" [ 143.937273][ T7693] vivid-001: disconnect [ 143.951819][ T7692] vivid-001: reconnect [ 144.136768][ T7699] random: crng reseeded on system resumption [ 144.157461][ T7699] syzkaller0: entered promiscuous mode [ 144.158964][ T7699] syzkaller0: entered allmulticast mode [ 144.600931][ T7712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.633'. [ 144.603559][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.633'. [ 145.201202][ T40] kauditd_printk_skb: 159 callbacks suppressed [ 145.201427][ T40] audit: type=1326 audit(2000000026.659:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.3.634" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 145.217971][ T40] audit: type=1326 audit(2000000026.659:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.3.634" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 145.226150][ T40] audit: type=1326 audit(2000000026.659:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.3.634" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 145.234098][ T40] audit: type=1326 audit(2000000026.659:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.3.634" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 145.239668][ T40] audit: type=1326 audit(2000000026.659:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.3.634" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 145.247144][ T40] audit: type=1326 audit(2000000026.659:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.3.634" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 145.254627][ T40] audit: type=1326 audit(2000000026.659:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.3.634" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 145.260769][ T40] audit: type=1326 audit(2000000026.659:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.3.634" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 145.268217][ T40] audit: type=1326 audit(2000000026.659:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.3.634" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 145.275694][ T40] audit: type=1326 audit(2000000026.659:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.3.634" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 145.280694][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'. [ 145.352017][ T7721] random: crng reseeded on system resumption [ 145.893386][ T7708] netlink: 'syz.2.632': attribute type 4 has an invalid length. [ 146.170389][ T7732] netlink: 36 bytes leftover after parsing attributes in process `syz.1.639'. [ 146.852712][ T7739] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 147.066026][ T7752] random: crng reseeded on system resumption [ 147.095304][ T7752] syzkaller0: entered promiscuous mode [ 147.096967][ T7752] syzkaller0: entered allmulticast mode [ 148.789709][ T7778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.652'. [ 149.451821][ T7794] FAULT_INJECTION: forcing a failure. [ 149.451821][ T7794] name failslab, interval 1, probability 0, space 0, times 0 [ 149.455520][ T7794] CPU: 0 UID: 0 PID: 7794 Comm: syz.0.654 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 149.458255][ T7794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.461055][ T7794] Call Trace: [ 149.461934][ T7794] [ 149.462989][ T7794] dump_stack_lvl+0x16c/0x1f0 [ 149.464569][ T7794] should_fail_ex+0x497/0x5b0 [ 149.466005][ T7794] ? fs_reclaim_acquire+0xae/0x150 [ 149.467772][ T7794] should_failslab+0xc2/0x120 [ 149.469298][ T7794] __kmalloc_noprof+0xcb/0x410 [ 149.470788][ T7794] ? __pfx_dmabuffs_dname+0x10/0x10 [ 149.472249][ T7794] tomoyo_encode2+0x100/0x3e0 [ 149.473526][ T7794] tomoyo_realpath_from_path+0x1a7/0x710 [ 149.475012][ T7794] ? tomoyo_path_number_perm+0x232/0x5b0 [ 149.476494][ T7794] tomoyo_path_number_perm+0x245/0x5b0 [ 149.477928][ T7794] ? tomoyo_path_number_perm+0x232/0x5b0 [ 149.479419][ T7794] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 149.481010][ T7794] ? trace_lock_acquire+0x14a/0x1d0 [ 149.482377][ T7794] ? lock_acquire+0x2f/0xb0 [ 149.483612][ T7794] ? __fget_files+0x40/0x3f0 [ 149.484833][ T7794] ? __fget_files+0x244/0x3f0 [ 149.486062][ T7794] security_file_ioctl_compat+0x9b/0x240 [ 149.487560][ T7794] __do_compat_sys_ioctl+0x52/0x2b0 [ 149.488926][ T7794] __do_fast_syscall_32+0x73/0x120 [ 149.490303][ T7794] do_fast_syscall_32+0x32/0x80 [ 149.491594][ T7794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.493258][ T7794] RIP: 0023:0xf7f25579 [ 149.494331][ T7794] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 149.499288][ T7794] RSP: 002b:00000000f568556c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 149.501455][ T7794] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000c0086202 [ 149.503516][ T7794] RDX: 0000000020000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.505588][ T7794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.507657][ T7794] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 149.509712][ T7794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.511784][ T7794] [ 149.512872][ T7794] ERROR: Out of memory at tomoyo_realpath_from_path. [ 150.620478][ T7809] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 150.659120][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 150.659259][ T40] audit: type=1326 audit(2000000032.119:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.3.661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 150.673419][ T40] audit: type=1326 audit(2000000032.129:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.3.661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 150.679084][ T40] audit: type=1326 audit(2000000032.129:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.3.661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 150.684746][ T40] audit: type=1326 audit(2000000032.129:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.3.661" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 150.690486][ T40] audit: type=1326 audit(2000000032.139:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.3.661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 150.696116][ T40] audit: type=1326 audit(2000000032.139:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7812 comm="syz.3.661" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 150.701812][ T40] audit: type=1326 audit(2000000032.139:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.3.661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 150.707559][ T40] audit: type=1326 audit(2000000032.139:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.3.661" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 150.713134][ T40] audit: type=1326 audit(2000000032.139:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.3.661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 150.718619][ T40] audit: type=1326 audit(2000000032.139:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7810 comm="syz.3.661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 150.890102][ T7823] netlink: 'syz.2.665': attribute type 5 has an invalid length. [ 150.994147][ T7832] random: crng reseeded on system resumption [ 151.006014][ T7828] loop9: detected capacity change from 0 to 7 [ 151.008615][ T7828] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 151.010194][ T7828] loop9: partition table partially beyond EOD, truncated [ 151.012888][ T7828] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 151.031429][ T5330] udevd[5330]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 151.278274][ T7839] syzkaller0: entered promiscuous mode [ 151.280476][ T7839] syzkaller0: entered allmulticast mode [ 152.160161][ T7855] input: syz0 as /devices/virtual/input/input11 [ 152.870229][ T7850] netlink: 'syz.1.672': attribute type 4 has an invalid length. [ 153.146746][ T7862] delete_channel: no stack [ 153.302107][ T7873] netlink: 'syz.2.679': attribute type 21 has an invalid length. [ 153.669206][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 154.721265][ T7894] FAULT_INJECTION: forcing a failure. [ 154.721265][ T7894] name failslab, interval 1, probability 0, space 0, times 0 [ 154.724751][ T7894] CPU: 2 UID: 0 PID: 7894 Comm: syz.3.684 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 154.727373][ T7894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.729980][ T7894] Call Trace: [ 154.730827][ T7894] [ 154.731673][ T7894] dump_stack_lvl+0x16c/0x1f0 [ 154.732902][ T7894] should_fail_ex+0x497/0x5b0 [ 154.734087][ T7894] ? __kmalloc_cache_noprof+0x58/0x310 [ 154.735522][ T7894] should_failslab+0xc2/0x120 [ 154.736737][ T7894] __kmalloc_cache_noprof+0x6b/0x310 [ 154.738084][ T7894] ? sync_file_alloc+0x3c/0x160 [ 154.739359][ T7894] sync_file_alloc+0x3c/0x160 [ 154.740597][ T7894] sync_file_create+0x17/0xf0 [ 154.741924][ T7894] dma_buf_ioctl+0x2ba/0x8d0 [ 154.743137][ T7894] ? __pfx_dma_buf_ioctl+0x10/0x10 [ 154.744424][ T7894] ? __fget_files+0x244/0x3f0 [ 154.745611][ T7894] ? __pfx_dma_buf_ioctl+0x10/0x10 [ 154.746966][ T7894] compat_ptr_ioctl+0x6b/0xa0 [ 154.748199][ T7894] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 154.749591][ T7894] __do_compat_sys_ioctl+0x259/0x2b0 [ 154.750913][ T7894] __do_fast_syscall_32+0x73/0x120 [ 154.752198][ T7894] do_fast_syscall_32+0x32/0x80 [ 154.753438][ T7894] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 154.755020][ T7894] RIP: 0023:0xf7f73579 [ 154.756025][ T7894] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 154.761003][ T7894] RSP: 002b:00000000f56d556c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 154.763523][ T7894] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000c0086202 [ 154.766258][ T7894] RDX: 0000000020000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.769392][ T7894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 154.771312][ T7894] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 154.773278][ T7894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 154.775220][ T7894] [ 155.439501][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'. [ 155.557501][ T7906] random: crng reseeded on system resumption [ 155.692527][ T5348] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 155.692557][ T5345] Bluetooth: hci4: command 0x1003 tx timeout [ 156.203059][ T7912] netlink: 'syz.2.689': attribute type 4 has an invalid length. [ 156.378809][ T7914] bridge_slave_0: left allmulticast mode [ 156.380366][ T7914] bridge_slave_0: left promiscuous mode [ 156.381947][ T7914] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.387619][ T7914] bridge_slave_1: left allmulticast mode [ 156.389223][ T7914] bridge_slave_1: left promiscuous mode [ 156.390809][ T7914] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.395594][ T7914] bond0: (slave bond_slave_0): Releasing backup interface [ 156.400036][ T7914] bond0: (slave bond_slave_1): Releasing backup interface [ 156.544700][ T7914] team0: Port device team_slave_0 removed [ 156.657272][ T7914] team0: Port device team_slave_1 removed [ 157.031584][ T40] kauditd_printk_skb: 146 callbacks suppressed [ 157.031594][ T40] audit: type=1326 audit(2000000038.489:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.0.690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 157.042498][ T40] audit: type=1326 audit(2000000038.499:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.0.690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 157.047964][ T40] audit: type=1326 audit(2000000038.499:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.0.690" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 157.054850][ T40] audit: type=1326 audit(2000000038.499:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.0.690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 157.062798][ T40] audit: type=1326 audit(2000000038.499:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.0.690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 157.067961][ T40] audit: type=1326 audit(2000000038.499:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.0.690" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 157.075013][ T40] audit: type=1326 audit(2000000038.499:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.0.690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 157.080232][ T40] audit: type=1326 audit(2000000038.499:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.0.690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 157.085936][ T40] audit: type=1326 audit(2000000038.499:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.0.690" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 157.091251][ T40] audit: type=1326 audit(2000000038.499:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7918 comm="syz.0.690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 157.325876][ T7925] loop9: detected capacity change from 0 to 7 [ 157.327815][ T7925] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 157.329269][ T7925] loop9: partition table partially beyond EOD, truncated [ 157.331180][ T7925] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 158.157343][ T7935] Process accounting resumed [ 159.260984][ T7957] loop9: detected capacity change from 0 to 7 [ 159.263105][ T7957] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 159.264582][ T7957] loop9: partition table partially beyond EOD, truncated [ 159.267176][ T7957] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 159.276536][ T5330] udevd[5330]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 159.739862][ T7970] binder: 7969:7970 ioctl 4018620d 0 returned -22 [ 159.774010][ T7978] random: crng reseeded on system resumption [ 161.277429][ T63] IPVS: starting estimator thread 0... [ 161.280890][ T7991] tipc: Started in network mode [ 161.282496][ T7991] tipc: Node identity ac1414aa, cluster identity 4711 [ 161.285014][ T7991] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 161.287180][ T7991] tipc: Enabled bearer , priority 10 [ 161.372711][ T7992] IPVS: using max 33 ests per chain, 79200 per kthread [ 161.385683][ T7989] block nbd0: shutting down sockets [ 161.422441][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 161.562418][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 161.656071][ T8003] loop9: detected capacity change from 0 to 7 [ 161.658244][ T8003] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 161.660380][ T8003] loop9: partition table partially beyond EOD, truncated [ 161.663388][ T8003] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 161.674897][ T5330] udevd[5330]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 161.702379][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 161.852364][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 161.992359][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 162.122380][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 162.262431][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 162.414089][ T63] tipc: Node number set to 2886997162 [ 162.552441][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 162.587182][ T8020] random: crng reseeded on system resumption [ 162.622441][ T62] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 162.774309][ T62] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 162.776607][ T62] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.779339][ T62] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 162.783716][ T62] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 162.786075][ T62] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 162.788240][ T62] usb 8-1: Product: syz [ 162.789355][ T62] usb 8-1: Manufacturer: syz [ 162.822468][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 163.003390][ T8017] 9pnet_fd: Insufficient options for proto=fd [ 163.058539][ T8017] vcan0 speed is unknown, defaulting to 1000 [ 163.062249][ T8017] vcan0 speed is unknown, defaulting to 1000 [ 163.064448][ T8017] vcan0 speed is unknown, defaulting to 1000 [ 163.119319][ T8017] infiniband syz1: set active [ 163.121787][ T830] vcan0 speed is unknown, defaulting to 1000 [ 163.122450][ T8017] infiniband syz1: added vcan0 [ 163.143288][ T8017] RDS/IB: syz1: added [ 163.145426][ T8017] smc: adding ib device syz1 with port count 1 [ 163.147817][ T8017] smc: ib device syz1 port 1 has pnetid [ 163.152708][ T830] vcan0 speed is unknown, defaulting to 1000 [ 163.155651][ T8017] vcan0 speed is unknown, defaulting to 1000 [ 163.209215][ T8017] vcan0 speed is unknown, defaulting to 1000 [ 163.246490][ T8017] vcan0 speed is unknown, defaulting to 1000 [ 163.295416][ T8017] vcan0 speed is unknown, defaulting to 1000 [ 163.354285][ T62] usb 8-1: USB disconnect, device number 6 [ 163.621393][ T8026] vivid-007: disconnect [ 163.674323][ T5348] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.679263][ T5348] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.682105][ T5348] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.698466][ T5348] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.701827][ T5348] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 163.703971][ T5348] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.723009][ T8027] vcan0 speed is unknown, defaulting to 1000 [ 163.811224][ T8027] chnl_net:caif_netlink_parms(): no params data found [ 163.896522][ T5345] Bluetooth: hci3: ACL packet for unknown connection handle 4005 [ 163.899826][ T5345] Bluetooth: hci3: ACL packet for unknown connection handle 4005 [ 163.914049][ T8027] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.916067][ T8027] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.918096][ T8027] bridge_slave_0: entered allmulticast mode [ 163.920164][ T8027] bridge_slave_0: entered promiscuous mode [ 163.923898][ T8027] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.926091][ T8027] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.928725][ T8027] bridge_slave_1: entered allmulticast mode [ 163.931747][ T8027] bridge_slave_1: entered promiscuous mode [ 163.966218][ T8027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.969950][ T8027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.000501][ T8027] team0: Port device team_slave_0 added [ 164.005978][ T8027] team0: Port device team_slave_1 added [ 164.028876][ T8027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.030701][ T8027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.038950][ T8027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.042965][ T8027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.044782][ T8027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.051799][ T8027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.077309][ T8027] hsr_slave_0: entered promiscuous mode [ 164.079674][ T8027] hsr_slave_1: entered promiscuous mode [ 164.081930][ T8027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.085595][ T8027] Cannot create hsr debugfs directory [ 164.160629][ T8027] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.165870][ T8045] loop9: detected capacity change from 0 to 7 [ 164.167821][ T8045] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 164.169273][ T8045] loop9: partition table partially beyond EOD, truncated [ 164.171296][ T8045] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 164.187728][ T5330] udevd[5330]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 164.239915][ T8027] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.339566][ T8027] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.418073][ T8027] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.454249][ T8025] vivid-007: reconnect [ 164.583638][ T8027] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 164.587103][ T8027] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 164.591015][ T8027] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 164.604011][ T8027] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 164.617845][ T8027] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.620064][ T8027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.622013][ T8027] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.623914][ T8027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.657498][ T8027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.666412][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.670640][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.690730][ T8027] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.701331][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.703296][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.708369][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.710400][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.716739][ T8063] random: crng reseeded on system resumption [ 164.806817][ T8027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.833277][ T8027] veth0_vlan: entered promiscuous mode [ 164.837356][ T8027] veth1_vlan: entered promiscuous mode [ 164.851505][ T8027] veth0_macvtap: entered promiscuous mode [ 164.855124][ T8027] veth1_macvtap: entered promiscuous mode [ 164.861858][ T8027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.870426][ T8027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.874367][ T8027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.878029][ T8027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.882710][ T8027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.888178][ T8027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.891342][ T8027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.894615][ T8027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.898355][ T8027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.904237][ T8027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.908211][ T8027] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.910708][ T8027] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.913157][ T8027] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.915447][ T8027] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.168154][ T6145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.172237][ T6145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.186265][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.188402][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.350694][ T8080] ucma_write: process 493 (syz.3.729) changed security contexts after opening file descriptor, this is not allowed. [ 165.632455][ T8083] FAULT_INJECTION: forcing a failure. [ 165.632455][ T8083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.635994][ T8083] CPU: 0 UID: 0 PID: 8083 Comm: syz.3.730 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 165.639554][ T8083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.642477][ T8083] Call Trace: [ 165.643388][ T8083] [ 165.644179][ T8083] dump_stack_lvl+0x16c/0x1f0 [ 165.645460][ T8083] should_fail_ex+0x497/0x5b0 [ 165.646705][ T8083] _copy_to_user+0x30/0xc0 [ 165.647924][ T8083] dma_buf_ioctl+0x2f7/0x8d0 [ 165.649141][ T8083] ? __pfx_dma_buf_ioctl+0x10/0x10 [ 165.650492][ T8083] ? __fget_files+0x244/0x3f0 [ 165.651739][ T8083] ? __pfx_dma_buf_ioctl+0x10/0x10 [ 165.653083][ T8083] compat_ptr_ioctl+0x6b/0xa0 [ 165.654338][ T8083] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 165.655769][ T8083] __do_compat_sys_ioctl+0x259/0x2b0 [ 165.657207][ T8083] __do_fast_syscall_32+0x73/0x120 [ 165.658543][ T8083] do_fast_syscall_32+0x32/0x80 [ 165.659866][ T8083] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.661515][ T8083] RIP: 0023:0xf7f73579 [ 165.662584][ T8083] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 165.668915][ T8083] RSP: 002b:00000000f56d556c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 165.671693][ T8083] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000c0086202 [ 165.673736][ T8083] RDX: 0000000020000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.675800][ T8083] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.678141][ T8083] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 165.680294][ T8083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.682408][ T8083] [ 165.772479][ T5345] Bluetooth: hci4: command tx timeout [ 166.321003][ T8087] loop9: detected capacity change from 0 to 7 [ 166.323504][ T8087] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 166.325144][ T8087] loop9: partition table partially beyond EOD, truncated [ 166.327696][ T8087] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 166.446249][ T8092] delete_channel: no stack [ 166.502363][ C1] net_ratelimit: 3 callbacks suppressed [ 166.502375][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 166.571363][ T8092] vcan0 speed is unknown, defaulting to 1000 [ 166.835611][ T8102] binder: 8096:8102 ioctl c0046209 0 returned -22 [ 167.221932][ T8090] delete_channel: no stack [ 167.532925][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 167.852508][ T5345] Bluetooth: hci4: command tx timeout [ 168.459087][ T40] kauditd_printk_skb: 75 callbacks suppressed [ 168.459097][ T40] audit: type=1326 audit(2000000049.919:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.3.742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 168.475293][ T40] audit: type=1326 audit(2000000049.929:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.3.742" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 168.481561][ T40] audit: type=1326 audit(2000000049.929:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.3.742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 168.487396][ T40] audit: type=1326 audit(2000000049.929:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.3.742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 168.493019][ T40] audit: type=1326 audit(2000000049.929:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.3.742" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 168.500180][ T40] audit: type=1326 audit(2000000049.929:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.3.742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 168.506486][ T40] audit: type=1326 audit(2000000049.929:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.3.742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 168.512064][ T40] audit: type=1326 audit(2000000049.929:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.3.742" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 168.519682][ T40] audit: type=1326 audit(2000000049.929:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.3.742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 168.525413][ T40] audit: type=1326 audit(2000000049.929:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8125 comm="syz.3.742" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 168.572397][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 168.599752][ T8128] FAULT_INJECTION: forcing a failure. [ 168.599752][ T8128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.603321][ T8128] CPU: 1 UID: 0 PID: 8128 Comm: syz.2.740 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 168.606057][ T8128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 168.609152][ T8128] Call Trace: [ 168.610043][ T8128] [ 168.610842][ T8128] dump_stack_lvl+0x16c/0x1f0 [ 168.612103][ T8128] should_fail_ex+0x497/0x5b0 [ 168.613405][ T8128] _copy_to_user+0x30/0xc0 [ 168.614624][ T8128] simple_read_from_buffer+0xd0/0x160 [ 168.616039][ T8128] proc_fail_nth_read+0x198/0x270 [ 168.617361][ T8128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.618850][ T8128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.620300][ T8128] vfs_read+0x1ce/0xbd0 [ 168.621367][ T8128] ? __fget_files+0x23a/0x3f0 [ 168.622612][ T8128] ? fdget_pos+0x24c/0x360 [ 168.623795][ T8128] ? __pfx_lock_release+0x10/0x10 [ 168.625126][ T8128] ? trace_lock_acquire+0x14a/0x1d0 [ 168.626486][ T8128] ? __pfx_vfs_read+0x10/0x10 [ 168.627757][ T8128] ? __pfx___mutex_lock+0x10/0x10 [ 168.629125][ T8128] ? __fget_files+0x244/0x3f0 [ 168.630494][ T8128] ksys_read+0x12f/0x260 [ 168.631626][ T8128] ? __pfx_ksys_read+0x10/0x10 [ 168.632897][ T8128] __do_fast_syscall_32+0x73/0x120 [ 168.634254][ T8128] do_fast_syscall_32+0x32/0x80 [ 168.635548][ T8128] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 168.637235][ T8128] RIP: 0023:0xf7fd5579 [ 168.638334][ T8128] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 168.643418][ T8128] RSP: 002b:00000000f57355a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 168.645603][ T8128] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f5735620 [ 168.647670][ T8128] RDX: 000000000000000f RSI: 00000000f745bff4 RDI: 0000000000000000 [ 168.649721][ T8128] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 168.651980][ T8128] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 168.654064][ T8128] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.656265][ T8128] [ 168.818871][ T8141] random: crng reseeded on system resumption [ 169.104591][ T8151] netlink: 'syz.1.749': attribute type 3 has an invalid length. [ 169.131548][ T8152] syzkaller0: entered promiscuous mode [ 169.134973][ T8152] syzkaller0: entered allmulticast mode [ 169.622356][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 169.934451][ T5345] Bluetooth: hci4: command tx timeout [ 170.662398][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 171.282885][ T8183] loop9: detected capacity change from 0 to 7 [ 171.285981][ T8183] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 171.289480][ T8183] loop9: partition table partially beyond EOD, truncated [ 171.291788][ T8183] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 171.316830][ T5330] udevd[5330]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 171.702366][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 172.012415][ T5345] Bluetooth: hci4: command tx timeout [ 172.093551][ T8197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.762'. [ 172.406661][ T8205] VFS: could not find a valid V7 on nullb0. [ 172.409966][ T8207] VFS: could not find a valid V7 on nullb0. [ 172.537470][ T8213] loop9: detected capacity change from 0 to 7 [ 172.539420][ T8213] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 172.540822][ T8213] loop9: partition table partially beyond EOD, truncated [ 172.543186][ T8213] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 172.556231][ T5330] udevd[5330]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 172.742345][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 172.802397][ T5405] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 172.967527][ T8232] fuse: Unknown parameter 'groupid' [ 172.972682][ T5405] usb 5-1: Using ep0 maxpacket: 32 [ 172.976190][ T5405] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.979103][ T5405] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.981934][ T5405] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 172.983454][ T8232] netlink: 'syz.3.773': attribute type 4 has an invalid length. [ 172.985448][ T5405] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 172.989830][ T5405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.993044][ T5405] usb 5-1: config 0 descriptor?? [ 173.154268][ T8235] random: crng reseeded on system resumption [ 173.408998][ T5405] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.000B/input/input12 [ 173.487234][ T5405] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5011.000B/input/input13 [ 173.509663][ T5405] kye 0003:0458:5011.000B: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 173.614226][ T40] kauditd_printk_skb: 159 callbacks suppressed [ 173.614237][ T40] audit: type=1326 audit(2000000055.079:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8255 comm="syz.2.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 173.621660][ T40] audit: type=1326 audit(2000000055.079:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8255 comm="syz.2.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 173.629502][ T40] audit: type=1326 audit(2000000055.079:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8255 comm="syz.2.779" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 173.635418][ T40] audit: type=1326 audit(2000000055.079:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8255 comm="syz.2.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 173.640970][ T40] audit: type=1326 audit(2000000055.079:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8255 comm="syz.2.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 173.647073][ T40] audit: type=1326 audit(2000000055.079:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8255 comm="syz.2.779" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 173.652768][ T40] audit: type=1326 audit(2000000055.079:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8255 comm="syz.2.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 173.658977][ T40] audit: type=1326 audit(2000000055.079:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8255 comm="syz.2.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 173.664662][ T40] audit: type=1326 audit(2000000055.079:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8255 comm="syz.2.779" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 173.670231][ T40] audit: type=1326 audit(2000000055.079:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8255 comm="syz.2.779" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 173.715561][ T8260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.719004][ T8260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.772391][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 174.289528][ T8262] loop9: detected capacity change from 0 to 7 [ 174.291503][ T8262] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 174.293058][ T8262] loop9: partition table partially beyond EOD, truncated [ 174.295008][ T8262] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 174.306727][ T5330] udevd[5330]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 174.345731][ T8265] syz.1.782[8265] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.345782][ T8265] syz.1.782[8265] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.352468][ T8265] syz.1.782[8265] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.374201][ T8267] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 174.379887][ T8267] overlayfs: fs on './file1' does not support file handles, falling back to xino=off. [ 174.545812][ C3] kye 0003:0458:5011.000B: usb_submit_urb(ctrl) failed: -1 [ 174.822379][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 175.220639][ T8282] vlan2: entered promiscuous mode [ 175.565351][ T8293] syzkaller0: entered promiscuous mode [ 175.566893][ T8293] syzkaller0: entered allmulticast mode [ 175.633146][ T8298] random: crng reseeded on system resumption [ 175.643788][ T8292] loop9: detected capacity change from 0 to 7 [ 175.647937][ T8292] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 175.650061][ T8292] loop9: partition table partially beyond EOD, truncated [ 175.653993][ T8292] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 175.682250][ T5330] udevd[5330]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 175.698891][ T25] usb 5-1: USB disconnect, device number 4 [ 175.781062][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.792'. [ 175.800778][ T8302] can: request_module (can-proto-0) failed. [ 175.852390][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 176.843835][ T12] tipc: Subscription rejected, illegal request [ 176.892378][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 177.942398][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 178.113283][ T8329] loop9: detected capacity change from 0 to 7 [ 178.116186][ T8329] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 178.117728][ T8329] loop9: partition table partially beyond EOD, truncated [ 178.122512][ T8329] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 178.129545][ T8345] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 178.131522][ T8345] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 178.135269][ T8345] vhci_hcd vhci_hcd.0: Device attached [ 178.287103][ T8346] vhci_hcd: connection closed [ 178.302661][ T64] vhci_hcd: stop threads [ 178.306987][ T64] vhci_hcd: release socket [ 178.309524][ T64] vhci_hcd: disconnect device [ 178.342591][ T4442] vhci_hcd: vhci_device speed not set [ 178.520705][ T8358] random: crng reseeded on system resumption [ 178.578817][ T8358] syzkaller0: entered promiscuous mode [ 178.580309][ T8358] syzkaller0: entered allmulticast mode [ 178.972464][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 179.528137][ T8378] hfs: can't find a HFS filesystem on dev nullb0 [ 179.624582][ T5348] Bluetooth: hci4: command 0x0405 tx timeout [ 180.012379][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 180.071207][ T40] kauditd_printk_skb: 147 callbacks suppressed [ 180.071218][ T40] audit: type=1326 audit(2000000061.529:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.0.814" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 180.083495][ T40] audit: type=1326 audit(2000000061.529:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.0.814" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f255a7 code=0x7ffc0000 [ 180.088929][ T40] audit: type=1326 audit(2000000061.529:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.0.814" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 180.095261][ T40] audit: type=1326 audit(2000000061.529:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.0.814" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f255a7 code=0x7ffc0000 [ 180.100633][ T40] audit: type=1326 audit(2000000061.529:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.0.814" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 180.106299][ T40] audit: type=1326 audit(2000000061.529:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.0.814" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f255a7 code=0x7ffc0000 [ 180.111726][ T40] audit: type=1326 audit(2000000061.529:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.0.814" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 180.117234][ T40] audit: type=1326 audit(2000000061.529:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.0.814" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f255a7 code=0x7ffc0000 [ 180.123227][ T40] audit: type=1326 audit(2000000061.529:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.0.814" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 180.128788][ T40] audit: type=1326 audit(2000000061.529:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.0.814" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f255a7 code=0x7ffc0000 [ 180.476025][ T8386] netlink: 6 bytes leftover after parsing attributes in process `syz.1.815'. [ 180.489576][ T8389] netlink: 'syz.2.816': attribute type 10 has an invalid length. [ 180.494101][ T8389] syz_tun: entered promiscuous mode [ 180.495799][ T8390] vivid-000: ================= START STATUS ================= [ 180.499029][ T8390] vivid-000: Test Pattern: 75% Colorbar [ 180.503744][ T8389] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 180.503836][ T8390] vivid-000: Fill Percentage of Frame: 100 [ 180.508329][ T8390] vivid-000: Horizontal Movement: No Movement [ 180.510084][ T8390] vivid-000: Vertical Movement: No Movement [ 180.512628][ T8390] vivid-000: OSD Text Mode: All [ 180.514003][ T8390] vivid-000: Show Border: false [ 180.515601][ T8390] vivid-000: Show Square: false [ 180.516956][ T8390] vivid-000: Sensor Flipped Horizontally: false [ 180.518608][ T8390] vivid-000: Sensor Flipped Vertically: false [ 180.520216][ T8390] vivid-000: Insert SAV Code in Image: false [ 180.524940][ T8390] vivid-000: Insert EAV Code in Image: false [ 180.526490][ T8390] vivid-000: Insert Video Guard Band: false [ 180.528134][ T8390] vivid-000: Reduced Framerate: false [ 180.529652][ T8390] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 180.531679][ T8390] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 180.534617][ T8390] vivid-000: Enable Capture Cropping: true grabbed [ 180.536495][ T8390] vivid-000: Enable Capture Composing: true grabbed [ 180.538403][ T8390] vivid-000: Enable Capture Scaler: true grabbed [ 180.540146][ T8390] vivid-000: Timestamp Source: End of Frame [ 180.541749][ T8390] vivid-000: Colorspace: sRGB [ 180.544648][ T8390] vivid-000: Transfer Function: Default [ 180.546142][ T8390] vivid-000: Y'CbCr Encoding: Default [ 180.549846][ T8390] vivid-000: HSV Encoding: Hue 0-179 [ 180.552094][ T8390] vivid-000: Quantization: Default [ 180.553622][ T8390] vivid-000: Apply Alpha To Red Only: false [ 180.555204][ T8390] vivid-000: Standard Aspect Ratio: 4x3 [ 180.556644][ T8390] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 180.558757][ T8390] vivid-000: DV Timings: 640x480p59 inactive [ 180.560346][ T8390] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 180.564258][ T8390] vivid-000: Maximum EDID Blocks: 2 [ 180.566420][ T8390] vivid-000: Limited RGB Range (16-235): false [ 180.568265][ T8390] vivid-000: Rx RGB Quantization Range: Automatic [ 180.570066][ T8390] vivid-000: Power Present: 0x00000001 [ 180.571569][ T8390] tpg source WxH: 320x180 (Y'CbCr) [ 180.573135][ T8390] tpg field: 1 [ 180.574049][ T8390] tpg crop: 320x180@0x0 [ 180.576259][ T8390] tpg compose: 320x180@0x0 [ 180.577513][ T8390] tpg colorspace: 8 [ 180.578866][ T8390] tpg transfer function: 0/2 [ 180.585142][ T8390] tpg Y'CbCr encoding: 0/1 [ 180.586330][ T8390] tpg quantization: 0/2 [ 180.587424][ T8390] tpg RGB range: 0/2 [ 180.588485][ T8390] vivid-000: ================== END STATUS ================== [ 181.053317][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 181.482503][ T8405] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.485203][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.511897][ T8405] sp0: Synchronizing with TNC [ 181.511953][ T8410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.824'. [ 181.515367][ T8405] trusted_key: encrypted_key: keylen parameter is missing [ 181.613676][ T8416] nbd: must specify an index to disconnect [ 181.769047][ T8426] ALSA: mixer_oss: invalid index -1404626105 [ 182.092392][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 182.572508][ T8432] block nbd3: Device being setup by another task [ 182.718726][ T8442] random: crng reseeded on system resumption [ 182.748222][ T8439] syzkaller0: entered promiscuous mode [ 182.749689][ T8439] syzkaller0: entered allmulticast mode [ 182.836142][ T8442] syzkaller0: entered promiscuous mode [ 182.837608][ T8442] syzkaller0: entered allmulticast mode [ 183.142398][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 183.320793][ T8431] block nbd3: shutting down sockets [ 183.383477][ T8450] netlink: 'syz.3.834': attribute type 9 has an invalid length. [ 183.387521][ T8450] netlink: 69104 bytes leftover after parsing attributes in process `syz.3.834'. [ 184.174896][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 185.222384][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 185.283344][ T40] kauditd_printk_skb: 6195 callbacks suppressed [ 185.283361][ T40] audit: type=1326 audit(2000000066.739:8508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.3.839" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 185.293671][ T40] audit: type=1326 audit(2000000066.739:8509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.3.839" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 185.301048][ T40] audit: type=1326 audit(2000000066.739:8510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.3.839" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 185.315439][ T40] audit: type=1326 audit(2000000066.739:8511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.3.839" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 185.323164][ T40] audit: type=1326 audit(2000000066.739:8512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.3.839" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 185.330616][ T40] audit: type=1326 audit(2000000066.739:8513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.3.839" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 185.337875][ T40] audit: type=1326 audit(2000000066.739:8514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.3.839" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 185.347056][ T40] audit: type=1326 audit(2000000066.739:8515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.3.839" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 185.366581][ T40] audit: type=1326 audit(2000000066.739:8516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.3.839" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 185.371984][ T40] audit: type=1326 audit(2000000066.739:8517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.3.839" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 185.609229][ T8475] loop9: detected capacity change from 0 to 7 [ 185.611286][ T8475] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 185.612931][ T8475] loop9: partition table partially beyond EOD, truncated [ 185.617290][ T8475] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 185.721835][ T8480] input: syz0 as /devices/virtual/input/input14 [ 186.252439][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 186.745752][ T8506] can0: slcan on ptm0. [ 186.814375][ T8505] can0 (unregistered): slcan off ptm0. [ 186.888475][ T8512] netlink: 44 bytes leftover after parsing attributes in process `syz.3.852'. [ 186.943938][ T8508] syzkaller0: entered promiscuous mode [ 186.945592][ T8508] syzkaller0: entered allmulticast mode [ 187.302390][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 188.003496][ T5345] Bluetooth: hci1: unexpected event for opcode 0x203c [ 188.302385][ T56] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 188.332509][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 188.432497][ T56] usb 5-1: device descriptor read/64, error -71 [ 188.672455][ T56] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 188.812401][ T56] usb 5-1: device descriptor read/64, error -71 [ 188.876159][ T8530] netlink: 'syz.2.856': attribute type 10 has an invalid length. [ 188.923844][ T56] usb usb5-port1: attempt power cycle [ 189.282655][ T56] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 189.302958][ T56] usb 5-1: device descriptor read/8, error -71 [ 189.382477][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 189.772457][ T30] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 189.862535][ T56] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 189.883047][ T56] usb 5-1: device descriptor read/8, error -71 [ 189.924762][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.927888][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.930735][ T30] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 189.934444][ T30] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 189.936922][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.940794][ T30] usb 6-1: config 0 descriptor?? [ 189.992704][ T56] usb usb5-port1: unable to enumerate USB device [ 190.271591][ T8554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.864'. [ 190.274473][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.274581][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.276505][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.278301][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.280526][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.282354][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.284226][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.286200][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.288167][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.289942][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.291807][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.293651][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.295433][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.297200][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.298979][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.300734][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.302699][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.304852][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.306932][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.308887][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.311096][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.313263][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.315429][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.317607][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.319826][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.322031][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.324395][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.326394][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.328310][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.330188][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.332582][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.334730][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.336888][ T8556] trusted_key: encrypted_key: key user:syz not found [ 190.346286][ T30] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 190.352138][ T30] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 190.354909][ T30] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 190.357330][ T30] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 190.359752][ T30] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 190.362254][ T30] plantronics 0003:047F:FFFF.000C: item fetching failed at offset 14/15 [ 190.365140][ T30] plantronics 0003:047F:FFFF.000C: parse failed [ 190.366788][ T30] plantronics 0003:047F:FFFF.000C: probe with driver plantronics failed with error -22 [ 190.412489][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 190.477614][ T8558] loop9: detected capacity change from 0 to 7 [ 190.480042][ T8558] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 190.481906][ T8558] loop9: partition table partially beyond EOD, truncated [ 190.483923][ T8558] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 190.545926][ T9] usb 6-1: USB disconnect, device number 8 [ 190.550169][ T8546] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.452472][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 191.795378][ T8577] input: syz0 as /devices/virtual/input/input15 [ 192.008527][ T8580] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 192.246838][ T8565] vcan0 speed is unknown, defaulting to 1000 [ 192.286902][ T8588] syzkaller0: entered promiscuous mode [ 192.288489][ T8588] syzkaller0: entered allmulticast mode [ 192.492455][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 193.532455][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 193.534383][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.537300][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.612838][ T8602] loop9: detected capacity change from 0 to 7 [ 193.616303][ T8602] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 193.618264][ T8602] loop9: partition table partially beyond EOD, truncated [ 193.624808][ T8602] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 193.907834][ T40] kauditd_printk_skb: 113 callbacks suppressed [ 193.907858][ T40] audit: type=1326 audit(2000000075.369:8631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8604 comm="syz.1.876" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 193.915441][ T40] audit: type=1326 audit(2000000075.379:8632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8604 comm="syz.1.876" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 193.921042][ T40] audit: type=1326 audit(2000000075.379:8633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8604 comm="syz.1.876" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 193.928258][ T40] audit: type=1326 audit(2000000075.379:8634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8604 comm="syz.1.876" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 193.934408][ T40] audit: type=1326 audit(2000000075.379:8635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8604 comm="syz.1.876" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 193.940485][ T40] audit: type=1326 audit(2000000075.379:8636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8604 comm="syz.1.876" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 193.947928][ T40] audit: type=1326 audit(2000000075.379:8637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8604 comm="syz.1.876" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 193.961178][ T40] audit: type=1326 audit(2000000075.389:8638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8604 comm="syz.1.876" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 193.967033][ T40] audit: type=1326 audit(2000000075.389:8639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8604 comm="syz.1.876" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 193.973524][ T40] audit: type=1326 audit(2000000075.389:8640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8604 comm="syz.1.876" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 194.572594][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 195.509545][ T8627] loop9: detected capacity change from 0 to 7 [ 195.511558][ T8627] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 195.513088][ T8627] loop9: partition table partially beyond EOD, truncated [ 195.514997][ T8627] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 195.572610][ T8631] syzkaller0: entered promiscuous mode [ 195.574191][ T8631] syzkaller0: entered allmulticast mode [ 195.622454][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 196.656868][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 196.744830][ T5348] Bluetooth: hci4: command 0x0405 tx timeout [ 196.878948][ T8652] netlink: 32 bytes leftover after parsing attributes in process `syz.2.888'. [ 197.035015][ T8635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'. [ 197.198712][ T8641] syzkaller0: entered promiscuous mode [ 197.200408][ T8641] syzkaller0: entered allmulticast mode [ 197.205334][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.888'. [ 197.460078][ T8667] loop9: detected capacity change from 0 to 7 [ 197.480861][ T8667] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 197.486409][ T8667] loop9: partition table partially beyond EOD, truncated [ 197.504492][ T8667] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 197.692442][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 198.605457][ T8679] sctp: [Deprecated]: syz.1.896 (pid 8679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.605457][ T8679] Use struct sctp_sack_info instead [ 198.610847][ T8680] sctp: [Deprecated]: syz.1.896 (pid 8680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.610847][ T8680] Use struct sctp_sack_info instead [ 198.734086][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 199.232107][ T8689] netlink: 180 bytes leftover after parsing attributes in process `syz.2.898'. [ 199.610029][ T40] kauditd_printk_skb: 85 callbacks suppressed [ 199.610078][ T40] audit: type=1326 audit(2000000081.069:8726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8693 comm="syz.2.899" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 199.621279][ T40] audit: type=1326 audit(2000000081.069:8727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8693 comm="syz.2.899" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 199.629401][ T40] audit: type=1326 audit(2000000081.079:8728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8693 comm="syz.2.899" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 199.653804][ T40] audit: type=1326 audit(2000000081.079:8729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8693 comm="syz.2.899" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 199.661804][ T40] audit: type=1326 audit(2000000081.079:8730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8693 comm="syz.2.899" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 199.672145][ T40] audit: type=1326 audit(2000000081.089:8731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8693 comm="syz.2.899" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 199.678260][ T40] audit: type=1326 audit(2000000081.089:8732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8693 comm="syz.2.899" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 199.685687][ T40] audit: type=1326 audit(2000000081.089:8733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8693 comm="syz.2.899" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 199.782393][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 199.803361][ T40] audit: type=1326 audit(2000000081.089:8734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8693 comm="syz.2.899" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 199.809464][ T40] audit: type=1326 audit(2000000081.089:8735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8693 comm="syz.2.899" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 199.823069][ T8700] loop9: detected capacity change from 0 to 7 [ 199.825033][ T8700] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 199.826426][ T8700] loop9: partition table partially beyond EOD, truncated [ 199.828284][ T8700] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 199.923920][ T8708] overlayfs: missing 'lowerdir' [ 199.959052][ T8701] netlink: set zone limit has 4 unknown bytes [ 200.056967][ T8718] netlink: 'syz.3.905': attribute type 10 has an invalid length. [ 200.061679][ T8718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.064993][ T8718] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 200.362961][ T8731] syzkaller0: entered promiscuous mode [ 200.364462][ T8731] syzkaller0: entered allmulticast mode [ 200.544323][ T25] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 200.616562][ T8736] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 200.624063][ T8736] syz.1.911: attempt to access beyond end of device [ 200.624063][ T8736] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 200.722786][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 200.725360][ T25] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 200.729104][ T25] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 200.731959][ T25] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 200.740174][ T25] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 200.743808][ T25] usb 8-1: config 0 interface 0 has no altsetting 0 [ 200.747242][ T25] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 200.749623][ T25] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 200.752102][ T25] usb 8-1: Product: syz [ 200.753630][ T25] usb 8-1: Manufacturer: syz [ 200.754883][ T25] usb 8-1: SerialNumber: syz [ 200.757741][ T25] usb 8-1: config 0 descriptor?? [ 200.760193][ T25] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 200.764426][ T25] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 200.773355][ T8740] loop9: detected capacity change from 0 to 7 [ 200.776798][ T8740] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 200.778264][ T8740] loop9: partition table partially beyond EOD, truncated [ 200.780180][ T8740] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 200.812517][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 200.968335][ T4442] usb 8-1: USB disconnect, device number 7 [ 200.974089][ T4442] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 201.852660][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 201.897958][ T8757] vcan0 speed is unknown, defaulting to 1000 [ 202.025338][ T8767] netlink: 'syz.1.919': attribute type 1 has an invalid length. [ 202.650380][ T8780] netlink: 80 bytes leftover after parsing attributes in process `syz.2.923'. [ 202.653960][ T8781] netlink: 80 bytes leftover after parsing attributes in process `syz.2.923'. [ 202.892401][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 202.917177][ T8786] loop9: detected capacity change from 0 to 7 [ 202.940547][ T8786] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 202.943035][ T8786] loop9: partition table partially beyond EOD, truncated [ 202.945236][ T8786] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 203.081226][ T8794] overlayfs: missing 'lowerdir' [ 203.096417][ T8796] netlink: 456 bytes leftover after parsing attributes in process `syz.2.928'. [ 203.332413][ T25] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 203.484710][ T25] usb 7-1: not running at top speed; connect to a high speed hub [ 203.487852][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.490963][ T25] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1040, setting to 64 [ 203.495955][ T25] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.498423][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.506584][ T25] usb 7-1: Product: 祩 [ 203.507747][ T25] usb 7-1: Manufacturer: 胏࿴頙Ʞ鿹앝━浸㧰倚闏仚ꄨ핋苐頫Ꟶ燡銈迵뀊橋헔㈋㘓덲엕끢ᨗ炭䛷/ᛌ⣙碌ྫᨂ㱻爒뷵踇Ờޝ⹳겦ᱩḓ௼揋觔챵没墢᳤ⵀ뷠䖎꯰눹벋ⷜꂡ䣺撣뻄⥘勇⫭⨮沃濶蘂ࢌ浜뛖吱悎噋⵿ೞ㮌毕優錧Ⲝᑝ䕫飘〹傘핼䥌쿤錔瘹ඌ륢 [ 203.517277][ T25] usb 7-1: SerialNumber: 黺꼅ᅍ✱쑑쭟鱺묥鴮肃艾屒ધ맱᥺⿖縕鋹৬ǟ㠃ߺ囋믲썛셉냥竁䆪珹觥脎䆣⌙㫓꓂⨂᳷漊鸧덏ㅇ텴鰷䞁᭸捅휫玖ȶ掏扼帉扤漰啜࡙࿰ꏪ䇲ቫ绁햔뤀セ웏ߣ઀霖䰝Lj툌趯譧땊늇ꅲ潾꣄홒帹䄏綶䷵⩩๵嬹馔⸹㞾霣脺䇘ཎ嘺똜팊ꌫ彚㸽魸캃ᄉ檢 [ 203.530139][ T8805] FAULT_INJECTION: forcing a failure. [ 203.530139][ T8805] name failslab, interval 1, probability 0, space 0, times 0 [ 203.535343][ T8805] CPU: 3 UID: 0 PID: 8805 Comm: syz.3.931 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 203.539130][ T8805] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 203.541936][ T8805] Call Trace: [ 203.542836][ T8805] [ 203.543645][ T8805] dump_stack_lvl+0x16c/0x1f0 [ 203.544896][ T8805] should_fail_ex+0x497/0x5b0 [ 203.546150][ T8805] ? fs_reclaim_acquire+0xae/0x150 [ 203.547513][ T8805] should_failslab+0xc2/0x120 [ 203.548839][ T8805] kmem_cache_alloc_node_noprof+0x71/0x310 [ 203.550532][ T8805] ? __alloc_skb+0x2b3/0x380 [ 203.551736][ T8805] __alloc_skb+0x2b3/0x380 [ 203.552922][ T8805] ? __pfx___alloc_skb+0x10/0x10 [ 203.554235][ T8805] ? rcu_watching_snap_stopped_since+0xf0/0x110 [ 203.555899][ T8805] ? trace_kmem_cache_alloc+0x2d/0xe0 [ 203.557314][ T8805] ? kmem_cache_alloc_noprof+0x174/0x2f0 [ 203.558820][ T8805] ? audit_log_start+0x2bc/0x7e0 [ 203.560125][ T8805] audit_log_start+0x2e1/0x7e0 [ 203.561385][ T8805] ? __pfx_audit_log_start+0x10/0x10 [ 203.562777][ T8805] ? kmem_cache_free+0x152/0x4b0 [ 203.564085][ T8805] ? lockdep_hardirqs_on+0x7c/0x110 [ 203.565454][ T8805] ? audit_log_end+0x14a/0x2b0 [ 203.566721][ T8805] ? migrate_enable+0x1ef/0x260 [ 203.568002][ T8805] ? __pfx_migrate_enable+0x10/0x10 [ 203.569364][ T8805] ? audit_log_end+0x14a/0x2b0 [ 203.570630][ T8805] audit_seccomp+0x61/0x280 [ 203.571823][ T8805] __seccomp_filter+0x816/0xf40 [ 203.573094][ T8805] ? __pfx___seccomp_filter+0x10/0x10 [ 203.574495][ T8805] ? fput+0x30/0x390 [ 203.575536][ T8805] ? ksys_write+0x1ad/0x260 [ 203.576735][ T8805] __secure_computing+0x26c/0x3f0 [ 203.578053][ T8805] syscall_trace_enter+0x8b/0x240 [ 203.579403][ T8805] __do_fast_syscall_32+0xc2/0x120 [ 203.580750][ T8805] do_fast_syscall_32+0x32/0x80 [ 203.582037][ T8805] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.583694][ T8805] RIP: 0023:0xf7f73579 [ 203.584776][ T8805] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 203.590753][ T8805] RSP: 002b:00000000f56f65a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 203.593459][ T8805] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f56f6620 [ 203.595716][ T8805] RDX: 000000000000000f RSI: 00000000f73fbff4 RDI: 0000000000000000 [ 203.597950][ T8805] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 203.600368][ T8805] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 203.602808][ T8805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.605139][ T8805] [ 203.932424][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 204.029336][ T25] cdc_ncm 7-1:1.0: bind() failure [ 204.032872][ T25] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 204.034744][ T25] cdc_ncm 7-1:1.1: bind() failure [ 204.037253][ T25] usb 7-1: USB disconnect, device number 10 [ 204.305991][ T8819] [U] [ 204.307165][ T8819] [U] [ 204.307963][ T8819] [U] ћT$GYSRըї<]3Tѿ\J( [ 204.311073][ T8819] [U] [ 204.311952][ T8819] [U] CW* 9JQ#ESWCV1! GPX [ 204.314159][ T8819] [U] N%9C_NʅBC$4( [ 204.316905][ T8819] [U] H Q؛TORI#ıTNBS_RЬƫ:؀ɦTȯ 0ÏWڙ_[HN% [ 204.319478][ T8819] [U] Ϡ4RЛ<)6JG؃K^R\ [ 204.321051][ T8819] [U] 7R:J37 [ 204.322921][ T8819] [U] YP<ԅUH3 ư-̤\PQBX!Q6SO'}[P5O>D֎YJ>|H0=ԷTXZY֦ʢĚ4IǢ5AZ~ZA~K^TGSJI:OD!M2KWR>ƈΗKC?X8H*@QEۻU .J9ȓ~{`'R)-Ǭ=5֝JLY CB;+LP,FNY%3P&)][ȋ4Lö!J> [ 204.330410][ T8819] [U] .”C֯EJJ@KJ605RXUTTO&XO֕\&N%Y176`IW [ 204.333761][ T8819] [U] M<@NKJ(6))VLR [ 204.336919][ T8819] [U] >YG Z?`OMX؍Ӈ"9+DE{Ō$~BYDUME!XݛAAU}J£2N%MBQ [ 204.339776][ T8819] [U] WVW@HZ=(EJ~OS@BH:"!JIUJ=)ΎU GԖ=Y=KADR:=SAX X [ 204.344151][ T8819] [U] BIޙE}ET@3( V{κ~UK+{3T$ƻ.N[8Sʇ""ʔ̺]RG5 [ 204.347032][ T8819] [U] V{ըVNB>DMTQT [ 204.348708][ T8819] [U] G*|9ٺņ [ 204.349824][ T8819] [U] GMIUE! Tό*ߐ8A7I5-|6LK [ 204.351614][ T8819] [U] NūD  S}RBYWIOQ&O,P],7͛UI [ 204.355745][ T8819] [U] $LU2F_3+|NWµZEǗP1W~N(O͝8D SCDʮF65ZGRް{TK"@ :5}GBDѸ\K [ 204.359205][ T8819] [U] = 8S [ 204.360424][ T8819] [U] [ ?6 [ 204.361331][ T8819] [U] [GӘ~R [ 204.362373][ T8819] [U] J 6;X [ 204.363486][ T8819] [U] A [ 204.364399][ T8819] [U] ;`3JBO0E[ [ 204.365800][ T8819] [U] A75M[C [ 204.367057][ T8819] [U] 8D [ 204.368288][ T8819] [U] GO*K_OBؠQ_"ƹ [ 204.389685][ T8819] [U]  @%ċU<ۚ{G [ 204.391014][ T8819] [U] NSGHD [ 204.391886][ T8819] [U] ^ [ 204.393219][ T8819] [U] XMؑ7TQ0 [ 204.397430][ T8818] [U] 0ޮɜVWՔ؊OLSZ 0|S [ 204.487504][ T8822] random: crng reseeded on system resumption [ 204.515646][ T8822] syzkaller0: entered promiscuous mode [ 204.517101][ T8822] syzkaller0: entered allmulticast mode [ 204.752856][ T8829] loop9: detected capacity change from 0 to 7 [ 204.760687][ T8829] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 204.762583][ T8829] loop9: partition table partially beyond EOD, truncated [ 204.765445][ T8829] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 204.972370][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 205.002592][ T8836] Cannot find add_set index 3 as target [ 205.839198][ T40] kauditd_printk_skb: 157 callbacks suppressed [ 205.839210][ T40] audit: type=1326 audit(2000000087.299:8891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8840 comm="syz.0.940" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 205.847229][ T40] audit: type=1326 audit(2000000087.299:8892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8840 comm="syz.0.940" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 205.853680][ T40] audit: type=1326 audit(2000000087.319:8893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8840 comm="syz.0.940" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 205.859351][ T40] audit: type=1326 audit(2000000087.319:8894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8840 comm="syz.0.940" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 205.865576][ T40] audit: type=1326 audit(2000000087.319:8895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8840 comm="syz.0.940" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 205.871495][ T40] audit: type=1326 audit(2000000087.339:8896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8840 comm="syz.0.940" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 205.877417][ T40] audit: type=1326 audit(2000000087.339:8897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8840 comm="syz.0.940" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 205.888388][ T8841] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 205.890341][ T8841] audit: out of memory in audit_log_start [ 205.892864][ T40] audit: type=1326 audit(2000000087.339:8898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8840 comm="syz.0.940" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 205.930480][ T8843] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 205.932638][ T8843] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 205.936022][ T8843] Error parsing options; rc = [-22] [ 206.015850][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 206.682570][ T5405] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 206.822493][ T5405] usb 8-1: device descriptor read/64, error -71 [ 207.052386][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 207.062437][ T5405] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 207.192461][ T5405] usb 8-1: device descriptor read/64, error -71 [ 207.302585][ T5405] usb usb8-port1: attempt power cycle [ 207.746947][ T5405] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 207.763300][ T5405] usb 8-1: device descriptor read/8, error -71 [ 208.092409][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 208.092848][ T8885] tls_set_device_offload_rx: netdev not found [ 208.204979][ T8888] syzkaller0: entered promiscuous mode [ 208.206603][ T8888] syzkaller0: entered allmulticast mode [ 208.262531][ T5405] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 208.293190][ T5405] usb 8-1: device descriptor read/8, error -71 [ 208.407268][ T5405] usb usb8-port1: unable to enumerate USB device [ 208.682809][ T8899] random: crng reseeded on system resumption [ 209.142439][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 209.485740][ T8892] syzkaller0: entered promiscuous mode [ 209.487602][ T8892] syzkaller0: entered allmulticast mode [ 210.092244][ T8913] FAULT_INJECTION: forcing a failure. [ 210.092244][ T8913] name failslab, interval 1, probability 0, space 0, times 0 [ 210.095896][ T8913] CPU: 3 UID: 0 PID: 8913 Comm: syz.2.959 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 210.098774][ T8913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 210.102573][ T8913] Call Trace: [ 210.103764][ T8913] [ 210.104806][ T8913] dump_stack_lvl+0x16c/0x1f0 [ 210.106056][ T8913] should_fail_ex+0x497/0x5b0 [ 210.107312][ T8913] should_failslab+0xc2/0x120 [ 210.108540][ T8913] __kmalloc_noprof+0xcb/0x410 [ 210.109796][ T8913] aa_label_asxprint+0x75/0x140 [ 210.111075][ T8913] apparmor_secid_to_secctx+0xb1/0x180 [ 210.112517][ T8913] security_secid_to_secctx+0x9c/0x290 [ 210.113930][ T8913] audit_log_task_context+0xf5/0x170 [ 210.115301][ T8913] ? __pfx_audit_log_task_context+0x10/0x10 [ 210.116780][ T8913] ? from_kuid+0x89/0xd0 [ 210.117829][ T8913] ? __pfx_audit_log_start+0x10/0x10 [ 210.119173][ T8913] audit_log_task+0x1d0/0x300 [ 210.120379][ T8913] ? __pfx_audit_log_task+0x10/0x10 [ 210.121683][ T8913] ? migrate_enable+0x1ef/0x260 [ 210.123067][ T8913] ? __pfx_migrate_enable+0x10/0x10 [ 210.124415][ T8913] ? audit_log_end+0x14a/0x2b0 [ 210.125638][ T8913] audit_seccomp+0x7a/0x280 [ 210.126773][ T8913] __seccomp_filter+0x816/0xf40 [ 210.127979][ T8913] ? __pfx___seccomp_filter+0x10/0x10 [ 210.129319][ T8913] ? fput+0x30/0x390 [ 210.130321][ T8913] ? ksys_write+0x1ad/0x260 [ 210.131491][ T8913] __secure_computing+0x26c/0x3f0 [ 210.132857][ T8913] syscall_trace_enter+0x8b/0x240 [ 210.134167][ T8913] __do_fast_syscall_32+0xc2/0x120 [ 210.135499][ T8913] do_fast_syscall_32+0x32/0x80 [ 210.136768][ T8913] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.138415][ T8913] RIP: 0023:0xf7fd5579 [ 210.139476][ T8913] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 210.144441][ T8913] RSP: 002b:00000000f57565a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 210.146568][ T8913] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f5756620 [ 210.148592][ T8913] RDX: 000000000000000f RSI: 00000000f745bff4 RDI: 0000000000000000 [ 210.150612][ T8913] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 210.152677][ T8913] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 210.154720][ T8913] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.156773][ T8913] [ 210.176743][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 210.331368][ T8916] loop9: detected capacity change from 0 to 7 [ 210.339509][ T8916] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 210.346633][ T8916] loop9: partition table partially beyond EOD, truncated [ 210.355200][ T8916] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 210.536073][ T8927] autofs: Unknown parameter './file1' [ 210.829700][ T8922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.962'. [ 210.939148][ T8909] delete_channel: no stack [ 210.957776][ T8934] tipc: Started in network mode [ 210.959442][ T8934] tipc: Node identity ffffffff, cluster identity 4711 [ 210.961586][ T8934] tipc: Node number set to 4294967295 [ 211.031322][ T8937] syzkaller0: entered promiscuous mode [ 211.032811][ T8937] syzkaller0: entered allmulticast mode [ 211.222469][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 211.452371][ T40] kauditd_printk_skb: 196 callbacks suppressed [ 211.452381][ T40] audit: type=1326 audit(2000000092.909:9092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 211.463486][ T40] audit: type=1326 audit(2000000092.919:9093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 211.472593][ T40] audit: type=1326 audit(2000000092.919:9094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 211.480005][ T40] audit: type=1326 audit(2000000092.919:9095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 211.490105][ T40] audit: type=1326 audit(2000000092.919:9096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 211.496193][ T40] audit: type=1326 audit(2000000092.919:9097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 211.501665][ T40] audit: type=1326 audit(2000000092.919:9098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 211.507215][ T40] audit: type=1326 audit(2000000092.919:9099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 211.512810][ T40] audit: type=1326 audit(2000000092.919:9100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 211.518365][ T40] audit: type=1326 audit(2000000092.919:9101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.1.968" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 211.636311][ T8946] loop9: detected capacity change from 0 to 7 [ 211.638225][ T8946] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 211.639661][ T8946] loop9: partition table partially beyond EOD, truncated [ 211.641505][ T8946] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 211.707078][ T8952] random: crng reseeded on system resumption [ 212.255278][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 212.862895][ T8966] syzkaller0: entered promiscuous mode [ 212.864174][ T8966] syzkaller0: entered allmulticast mode [ 213.302412][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 214.332384][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 214.865154][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.976'. [ 214.869039][ T8971] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 214.956205][ T8982] syzkaller0: entered promiscuous mode [ 214.959953][ T8982] syzkaller0: entered allmulticast mode [ 215.372424][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 216.344226][ T9002] loop9: detected capacity change from 0 to 7 [ 216.346257][ T9002] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 216.348139][ T9002] loop9: partition table partially beyond EOD, truncated [ 216.350630][ T9002] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 216.412410][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 216.533538][ T40] kauditd_printk_skb: 69 callbacks suppressed [ 216.533548][ T40] audit: type=1326 audit(2000000097.999:9171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9011 comm="syz.1.985" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 216.542379][ T40] audit: type=1326 audit(2000000097.999:9172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9011 comm="syz.1.985" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 216.578344][ T9013] syzkaller0: entered promiscuous mode [ 216.579645][ T9013] syzkaller0: entered allmulticast mode [ 216.588131][ T40] audit: type=1326 audit(2000000097.999:9173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9011 comm="syz.1.985" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 216.622548][ T40] audit: type=1326 audit(2000000098.049:9174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9011 comm="syz.1.985" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 216.632748][ T40] audit: type=1326 audit(2000000098.049:9175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9011 comm="syz.1.985" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 216.638787][ T40] audit: type=1326 audit(2000000098.049:9176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9011 comm="syz.1.985" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 216.652421][ T40] audit: type=1326 audit(2000000098.049:9177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9011 comm="syz.1.985" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 216.662473][ T40] audit: type=1326 audit(2000000098.049:9178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9011 comm="syz.1.985" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 216.670266][ T40] audit: type=1326 audit(2000000098.069:9179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9011 comm="syz.1.985" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 216.677388][ T40] audit: type=1326 audit(2000000098.069:9180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9011 comm="syz.1.985" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 217.462424][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 217.734834][ T9032] random: crng reseeded on system resumption [ 218.502395][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 218.537394][ T9033] syzkaller0: entered promiscuous mode [ 218.539127][ T9033] syzkaller0: entered allmulticast mode [ 218.542279][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.990'. [ 219.467852][ T9051] loop9: detected capacity change from 0 to 7 [ 219.470038][ T9051] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 219.471546][ T9051] loop9: partition table partially beyond EOD, truncated [ 219.477504][ T9051] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 219.542415][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 220.582377][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 221.598536][ T40] kauditd_printk_skb: 61 callbacks suppressed [ 221.598548][ T40] audit: type=1326 audit(2000000103.059:9242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.2.1001" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 221.606584][ T40] audit: type=1326 audit(2000000103.059:9243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.2.1001" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 221.613208][ T40] audit: type=1326 audit(2000000103.059:9244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.2.1001" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 221.619588][ T40] audit: type=1326 audit(2000000103.059:9245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.2.1001" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 221.622404][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 221.625245][ T40] audit: type=1326 audit(2000000103.059:9246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.2.1001" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 221.633026][ T40] audit: type=1326 audit(2000000103.059:9247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.2.1001" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 221.638903][ T40] audit: type=1326 audit(2000000103.059:9248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.2.1001" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 221.661770][ T40] audit: type=1326 audit(2000000103.119:9249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.2.1001" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 221.668044][ T40] audit: type=1326 audit(2000000103.119:9250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.2.1001" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 221.676842][ T40] audit: type=1326 audit(2000000103.139:9251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9077 comm="syz.2.1001" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd5579 code=0x7ffc0000 [ 222.339530][ T9090] syzkaller0: entered promiscuous mode [ 222.341025][ T9090] syzkaller0: entered allmulticast mode [ 222.422092][ T9097] fuse: Unknown parameter 'group_id700000000000000000000' [ 222.474185][ T25] libceph: connect (1)[c::]:6789 error -101 [ 222.476080][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 222.576728][ T9097] ceph: No mds server is up or the cluster is laggy [ 222.654640][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 222.861026][ T9110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1006'. [ 223.692389][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 224.732412][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 224.850420][ T9137] netlink: 'syz.2.1012': attribute type 9 has an invalid length. [ 224.854979][ T9137] netlink: 134672 bytes leftover after parsing attributes in process `syz.2.1012'. [ 224.859763][ T9137] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 225.016622][ T9146] loop9: detected capacity change from 0 to 7 [ 225.019546][ T9146] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 225.021477][ T9146] loop9: partition table partially beyond EOD, truncated [ 225.024070][ T9146] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 225.166909][ T9154] random: crng reseeded on system resumption [ 225.330113][ T9154] syzkaller0: entered promiscuous mode [ 225.332016][ T9154] syzkaller0: entered allmulticast mode [ 225.782364][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 225.931060][ T9172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1019'. [ 226.594959][ T9174] tipc: Started in network mode [ 226.596774][ T9174] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 226.599433][ T9174] tipc: New replicast peer: 0000:0000:0000:0000:0000:0001:0000:0000 [ 226.602138][ T9174] tipc: Enabled bearer , priority 10 [ 226.812538][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 226.834012][ T9184] loop9: detected capacity change from 0 to 7 [ 226.836682][ T9184] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 226.838536][ T9184] loop9: partition table partially beyond EOD, truncated [ 226.841047][ T9184] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 227.509110][ T9223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1045'. [ 227.551047][ T9220] loop9: detected capacity change from 0 to 7 [ 227.553142][ T9220] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 227.554641][ T9220] loop9: partition table partially beyond EOD, truncated [ 227.556568][ T9220] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 227.612543][ T25] tipc: Node number set to 1 [ 227.771538][ T9232] loop9: detected capacity change from 0 to 7 [ 227.788586][ T9232] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 227.790521][ T9232] loop9: partition table partially beyond EOD, truncated [ 227.793180][ T9232] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 227.793587][ T9242] random: crng reseeded on system resumption [ 227.852383][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 228.704332][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 228.704342][ T40] audit: type=1326 audit(2000000110.169:9257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9258 comm="syz.0.1042" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 228.714647][ T40] audit: type=1326 audit(2000000110.179:9258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9258 comm="syz.0.1042" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 228.722220][ T40] audit: type=1326 audit(2000000110.179:9259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9258 comm="syz.0.1042" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 228.734668][ T40] audit: type=1326 audit(2000000110.179:9260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9258 comm="syz.0.1042" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 228.751264][ T40] audit: type=1326 audit(2000000110.179:9261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9258 comm="syz.0.1042" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 228.757223][ T9259] overlay: Unknown parameter '/' [ 228.759284][ T40] audit: type=1326 audit(2000000110.179:9262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9258 comm="syz.0.1042" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 228.765399][ T40] audit: type=1326 audit(2000000110.179:9263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9258 comm="syz.0.1042" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 228.771209][ T40] audit: type=1326 audit(2000000110.199:9264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9258 comm="syz.0.1042" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 228.776918][ T40] audit: type=1326 audit(2000000110.199:9265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9258 comm="syz.0.1042" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 228.782833][ T40] audit: type=1326 audit(2000000110.199:9266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9258 comm="syz.0.1042" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000 [ 228.902361][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 228.940000][ T5382] libceph: connect (1)[c::]:6789 error -101 [ 228.941760][ T5382] libceph: mon0 (1)[c::]:6789 connect error [ 228.945225][ T5382] libceph: connect (1)[c::]:6789 error -101 [ 228.947332][ T5382] libceph: mon0 (1)[c::]:6789 connect error [ 229.104104][ T9275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1049'. [ 229.215150][ T5382] libceph: connect (1)[c::]:6789 error -101 [ 229.216939][ T5382] libceph: mon0 (1)[c::]:6789 connect error [ 229.258996][ T9275] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 229.260703][ T9275] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 229.263598][ T9275] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 229.265412][ T9275] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 229.267595][ T9275] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 229.304528][ T63] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 229.452406][ T63] usb 5-1: device descriptor read/64, error -71 [ 229.702409][ T63] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 229.735039][ T5382] libceph: connect (1)[c::]:6789 error -101 [ 229.736670][ T5382] libceph: mon0 (1)[c::]:6789 connect error [ 229.842444][ T63] usb 5-1: device descriptor read/64, error -71 [ 229.932376][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 229.953119][ T63] usb usb5-port1: attempt power cycle [ 230.322413][ T63] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 230.342853][ T63] usb 5-1: device descriptor read/8, error -71 [ 230.571408][ T9305] vivid-007: disconnect [ 230.602419][ T63] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 230.622982][ T63] usb 5-1: device descriptor read/8, error -71 [ 230.692435][ T25] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 230.743536][ T63] usb usb5-port1: unable to enumerate USB device [ 230.852471][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 230.856531][ T25] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 230.858789][ T25] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.861372][ T25] usb 8-1: config 0 has no interface number 0 [ 230.863050][ T25] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 230.865827][ T25] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 230.868337][ T25] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.871653][ T25] usb 8-1: config 0 interface 52 has no altsetting 0 [ 230.876111][ T25] usb 8-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 230.878470][ T25] usb 8-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 230.880580][ T25] usb 8-1: Product: syz [ 230.881672][ T25] usb 8-1: SerialNumber: syz [ 230.884050][ T25] usb 8-1: config 0 descriptor?? [ 230.972377][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 231.134886][ T9] libceph: connect (1)[c::]:6789 error -101 [ 231.138507][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 231.190823][ T25] usb 8-1: Can not set alternate setting to 1, error: -71 [ 231.193543][ T25] synaptics_usb 8-1:0.52: probe with driver synaptics_usb failed with error -71 [ 231.197455][ T25] usb 8-1: USB disconnect, device number 12 [ 231.212468][ T5345] Bluetooth: hci3: command 0x0c1a tx timeout [ 231.256117][ T9304] vivid-007: reconnect [ 231.292526][ T5345] Bluetooth: hci4: command 0x0405 tx timeout [ 231.292534][ T5348] Bluetooth: hci1: command 0x0c1a tx timeout [ 231.336559][ T9322] random: crng reseeded on system resumption [ 231.583460][ T9334] syzkaller0: entered promiscuous mode [ 231.584954][ T9334] syzkaller0: entered allmulticast mode [ 231.933051][ T9266] ceph: No mds server is up or the cluster is laggy [ 232.012375][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 232.953949][ T9338] syzkaller0: entered promiscuous mode [ 232.956013][ T9338] syzkaller0: entered allmulticast mode [ 233.062399][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 233.382489][ T5348] Bluetooth: hci4: command 0x0405 tx timeout [ 234.092452][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 234.706923][ T9383] random: crng reseeded on system resumption [ 235.142397][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 235.372422][ T5348] Bluetooth: hci1: command 0x0c1a tx timeout [ 235.452413][ T5348] Bluetooth: hci4: command 0x0405 tx timeout [ 235.696600][ T9400] syzkaller0: entered promiscuous mode [ 235.698449][ T9400] syzkaller0: entered allmulticast mode [ 236.172411][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 236.772551][ T40] kauditd_printk_skb: 100 callbacks suppressed [ 236.772561][ T40] audit: type=1326 audit(2000000118.239:9367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.1.1085" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 236.785139][ T40] audit: type=1326 audit(2000000118.239:9368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.1.1085" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 236.791059][ T40] audit: type=1326 audit(2000000118.239:9369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.1.1085" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 236.796731][ T40] audit: type=1326 audit(2000000118.239:9370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.1.1085" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 236.802634][ T40] audit: type=1326 audit(2000000118.239:9371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.1.1085" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 236.808016][ T40] audit: type=1326 audit(2000000118.239:9372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.1.1085" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 236.813553][ T40] audit: type=1326 audit(2000000118.239:9373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.1.1085" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 236.819028][ T40] audit: type=1326 audit(2000000118.239:9374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.1.1085" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 236.824496][ T40] audit: type=1326 audit(2000000118.239:9375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.1.1085" exe="/syz-executor" sig=0 arch=40000003 syscall=368 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 236.829966][ T40] audit: type=1326 audit(2000000118.239:9376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9407 comm="syz.1.1085" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 237.222402][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 237.387572][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'. [ 237.389874][ T9417] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1086'. [ 238.209005][ T9433] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_0, syncid = 0, id = 0 [ 238.252405][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 238.930574][ T9440] syzkaller0: entered promiscuous mode [ 238.932125][ T9440] syzkaller0: entered allmulticast mode [ 239.292664][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 240.332382][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 240.375611][ T9454] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1099'. [ 240.404481][ T9452] loop9: detected capacity change from 0 to 7 [ 240.424022][ T9452] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 240.425445][ T9452] loop9: partition table partially beyond EOD, truncated [ 240.440581][ T9452] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 240.944392][ T9467] random: crng reseeded on system resumption [ 241.382404][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 241.775361][ T9475] overlayfs: workdir and upperdir must be separate subtrees [ 242.047037][ T9480] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1104'. [ 242.191024][ T9491] Process accounting resumed [ 242.412384][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 243.035820][ T40] kauditd_printk_skb: 73 callbacks suppressed [ 243.035831][ T40] audit: type=1804 audit(2000000124.499:9450): pid=9494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1107" name="/newroot/257/file0/file0" dev="9p" ino=36317147 res=1 errno=0 [ 243.044646][ T40] audit: type=1800 audit(2000000124.499:9451): pid=9494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1107" name="file0" dev="9p" ino=36317147 res=0 errno=0 [ 243.452365][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 244.512367][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 245.070712][ T9529] overlayfs: workdir and upperdir must be separate subtrees [ 245.308373][ T9540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1121'. [ 245.515077][ T9546] random: crng reseeded on system resumption [ 245.532453][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 245.540126][ T9546] syzkaller0: entered promiscuous mode [ 245.541598][ T9546] syzkaller0: entered allmulticast mode [ 245.549492][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 245.702414][ T9] usb 6-1: device descriptor read/64, error -71 [ 245.942489][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 246.072725][ T9] usb 6-1: device descriptor read/64, error -71 [ 246.193507][ T9] usb usb6-port1: attempt power cycle [ 246.555552][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 246.575777][ T9] usb 6-1: device descriptor read/8, error -71 [ 246.582387][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 246.812381][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 246.833182][ T9] usb 6-1: device descriptor read/8, error -71 [ 246.942876][ T9] usb usb6-port1: unable to enumerate USB device [ 247.612440][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 247.954369][ T9562] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_0, syncid = 0, id = 0 [ 248.652408][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 248.950187][ T40] audit: type=1326 audit(2000000130.409:9452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.3.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 248.959050][ T40] audit: type=1326 audit(2000000130.409:9453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.3.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 248.965611][ T40] audit: type=1326 audit(2000000130.409:9454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.3.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 248.971776][ T40] audit: type=1326 audit(2000000130.409:9455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.3.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 248.978247][ T40] audit: type=1326 audit(2000000130.409:9456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.3.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 248.983953][ T40] audit: type=1326 audit(2000000130.409:9457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.3.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 248.989647][ T40] audit: type=1326 audit(2000000130.409:9458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.3.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 248.995329][ T40] audit: type=1326 audit(2000000130.409:9459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.3.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 249.000586][ T40] audit: type=1326 audit(2000000130.409:9460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.3.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 249.006447][ T40] audit: type=1326 audit(2000000130.409:9461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9573 comm="syz.3.1129" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 249.692378][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 250.410582][ T9589] syzkaller0: entered promiscuous mode [ 250.422364][ T9589] syzkaller0: entered allmulticast mode [ 250.742347][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 251.367537][ T9598] loop9: detected capacity change from 0 to 7 [ 251.375733][ T9598] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 251.377710][ T9598] loop9: partition table partially beyond EOD, truncated [ 251.380316][ T9598] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 251.772370][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 252.043337][ T9609] input: syz1 as /devices/virtual/input/input18 [ 252.113682][ T9612] vivid-007: disconnect [ 252.117201][ T9608] vivid-007: reconnect [ 252.419395][ T9614] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.1141'. [ 252.736633][ T9596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1133'. [ 252.753575][ T9616] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1140'. [ 252.812395][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 253.144184][ T9640] loop9: detected capacity change from 0 to 7 [ 253.147164][ T9640] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 253.148707][ T9640] loop9: partition table partially beyond EOD, truncated [ 253.150880][ T9640] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 253.444028][ T9652] vivid-002: disconnect [ 253.465287][ T9651] vivid-002: reconnect [ 253.862432][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 253.959514][ T9662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1154'. [ 253.962075][ T9662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1154'. [ 253.978372][ T9663] random: crng reseeded on system resumption [ 254.009370][ T9663] syzkaller0: entered promiscuous mode [ 254.010853][ T9663] syzkaller0: entered allmulticast mode [ 254.321320][ T9670] tmpfs: Bad value for 'mpol' [ 254.902407][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 254.975625][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.977755][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.776638][ T9689] loop9: detected capacity change from 0 to 7 [ 255.778925][ T9689] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 255.780845][ T9689] loop9: partition table partially beyond EOD, truncated [ 255.785215][ T9689] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 255.846377][ T9694] vivid-003: disconnect [ 255.931741][ T9665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1155'. [ 255.932417][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 255.936715][ T9666] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 255.939931][ T9690] vivid-003: reconnect [ 256.089311][ T9700] vcan0 speed is unknown, defaulting to 1000 [ 256.215512][ T9701] vcan0 speed is unknown, defaulting to 1000 [ 256.370665][ T9713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1169'. [ 256.373135][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1169'. [ 256.387278][ T9714] random: crng reseeded on system resumption [ 256.676731][ T9715] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 256.972383][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 257.341267][ T9725] loop9: detected capacity change from 0 to 7 [ 257.348689][ T9725] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 257.350249][ T9725] loop9: partition table partially beyond EOD, truncated [ 257.353241][ T9725] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 257.691503][ T9742] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 258.022395][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 258.527103][ T9757] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 258.655058][ T9779] random: crng reseeded on system resumption [ 258.774995][ T9779] syzkaller0: entered promiscuous mode [ 258.775010][ T9779] syzkaller0: entered allmulticast mode [ 258.779240][ T9790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1183'. [ 258.779302][ T9790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1183'. [ 259.052410][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 259.072178][ T9794] loop9: detected capacity change from 0 to 7 [ 259.077361][ T9794] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 259.078853][ T9794] loop9: partition table partially beyond EOD, truncated [ 259.080791][ T9794] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 259.469783][ T9801] delete_channel: no stack [ 260.092380][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 260.264236][ T9798] delete_channel: no stack [ 261.142405][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 261.196547][ T9801] vcan0 speed is unknown, defaulting to 1000 [ 261.656793][ T9836] futex_wake_op: syz.2.1196 tries to shift op by 144; fix this program [ 261.664111][ T9836] loop2: detected capacity change from 0 to 16384 [ 261.666782][ T9837] random: crng reseeded on system resumption [ 261.811928][ T9840] ceph: No mds server is up or the cluster is laggy [ 262.061455][ T9856] syzkaller0: entered promiscuous mode [ 262.063039][ T9856] syzkaller0: entered allmulticast mode [ 262.173490][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 263.222380][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 263.992404][ T63] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 264.155121][ T63] usb 7-1: config 8 has an invalid interface number: 40 but max is 3 [ 264.157381][ T63] usb 7-1: config 8 has an invalid interface number: 20 but max is 3 [ 264.159552][ T63] usb 7-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 264.161901][ T63] usb 7-1: config 8 has an invalid interface number: 233 but max is 3 [ 264.164461][ T63] usb 7-1: config 8 has an invalid interface number: 250 but max is 3 [ 264.168787][ T63] usb 7-1: config 8 has 5 interfaces, different from the descriptor's value: 4 [ 264.173319][ T63] usb 7-1: config 8 has no interface number 0 [ 264.174999][ T63] usb 7-1: config 8 has no interface number 1 [ 264.176638][ T63] usb 7-1: config 8 has no interface number 3 [ 264.178551][ T63] usb 7-1: config 8 has no interface number 4 [ 264.180231][ T63] usb 7-1: config 8 interface 40 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 264.183112][ T63] usb 7-1: config 8 interface 40 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.185683][ T63] usb 7-1: config 8 interface 40 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 264.188557][ T63] usb 7-1: config 8 interface 40 altsetting 2 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 264.191411][ T63] usb 7-1: config 8 interface 40 altsetting 2 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 264.194294][ T63] usb 7-1: config 8 interface 40 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 264.197134][ T63] usb 7-1: config 8 interface 20 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 264.200580][ T63] usb 7-1: config 8 interface 2 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 264.203395][ T63] usb 7-1: config 8 interface 2 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 264.206240][ T63] usb 7-1: config 8 interface 2 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 11 [ 264.209629][ T63] usb 7-1: config 8 interface 233 altsetting 9 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 264.212614][ T63] usb 7-1: config 8 interface 233 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 264.215474][ T63] usb 7-1: config 8 interface 233 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 264.218356][ T63] usb 7-1: config 8 interface 233 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 264.221161][ T63] usb 7-1: config 8 interface 233 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 264.224027][ T63] usb 7-1: config 8 interface 233 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 264.227147][ T63] usb 7-1: config 8 interface 233 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 264.230029][ T63] usb 7-1: config 8 interface 233 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 264.232854][ T63] usb 7-1: config 8 interface 233 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 264.235660][ T63] usb 7-1: config 8 interface 233 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 264.242504][ T63] usb 7-1: config 8 interface 250 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 264.245281][ T63] usb 7-1: config 8 interface 40 has no altsetting 0 [ 264.247041][ T63] usb 7-1: config 8 interface 20 has no altsetting 0 [ 264.248802][ T63] usb 7-1: config 8 interface 233 has no altsetting 0 [ 264.250596][ T63] usb 7-1: config 8 interface 250 has no altsetting 0 [ 264.253840][ T63] usb 7-1: Dual-Role OTG device on HNP port [ 264.255683][ T63] usb 7-1: New USB device found, idVendor=04dd, idProduct=9050, bcdDevice=98.1b [ 264.258144][ T63] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.260508][ T63] usb 7-1: Product: syz [ 264.261603][ T63] usb 7-1: Manufacturer: syz [ 264.262892][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 264.264762][ T63] usb 7-1: SerialNumber: syz [ 264.268865][ T9879] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 264.510799][ T63] zaurus 7-1:8.40: skipping garbage [ 264.513344][ T63] usb 7-1: bad CDC descriptors [ 264.529434][ T63] usb 7-1: USB disconnect, device number 11 [ 264.644101][ T9911] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 264.647272][ T9908] loop9: detected capacity change from 0 to 7 [ 264.649176][ T9908] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 264.650604][ T9908] loop9: partition table partially beyond EOD, truncated [ 264.652715][ T9908] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 264.773194][ T9918] random: crng reseeded on system resumption [ 264.859925][ T9918] syzkaller0: entered promiscuous mode [ 264.861595][ T9918] syzkaller0: entered allmulticast mode [ 264.883070][ T9921] syzkaller0: entered promiscuous mode [ 264.884611][ T9921] syzkaller0: entered allmulticast mode [ 265.302395][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 266.334107][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 266.984245][ T9947] loop9: detected capacity change from 0 to 7 [ 266.990044][ T9947] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 266.991455][ T9947] loop9: partition table partially beyond EOD, truncated [ 266.993445][ T9947] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 267.372374][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 267.546798][ T9959] random: crng reseeded on system resumption [ 267.637789][ T9959] syzkaller0: entered promiscuous mode [ 267.639298][ T9959] syzkaller0: entered allmulticast mode [ 267.642379][ T56] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 267.799276][ T56] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 267.801444][ T56] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 267.803557][ T56] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 267.805834][ T56] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 267.808570][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 267.815612][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 267.818162][ T56] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 267.824942][ T56] usb 7-1: string descriptor 0 read error: -22 [ 267.827303][ T56] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 267.830755][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.840717][ T56] usb 7-1: config 0 descriptor?? [ 267.842991][ T56] hub 7-1:0.0: bad descriptor, ignoring hub [ 267.844538][ T56] hub 7-1:0.0: probe with driver hub failed with error -5 [ 267.856081][ T56] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input19 [ 268.137556][ T9954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.148286][ T9954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.422406][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 268.426145][ T35] usb 7-1: USB disconnect, device number 12 [ 269.165461][ T9983] Process accounting resumed [ 269.286066][ T9986] syzkaller0: entered promiscuous mode [ 269.288108][ T9986] syzkaller0: entered allmulticast mode [ 269.455407][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 270.502415][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 271.219596][ T9992] syzkaller0: entered promiscuous mode [ 271.221072][ T9992] syzkaller0: entered allmulticast mode [ 271.545627][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 272.576026][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 273.425200][T10001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1236'. [ 273.612363][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 274.247263][T10006] delete_channel: no stack [ 274.652429][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 275.028757][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'. [ 275.047825][T10018] vcan0 speed is unknown, defaulting to 1000 [ 275.692542][ C3] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 275.701534][T10024] Process accounting resumed [ 276.522625][T10029] syzkaller0: entered promiscuous mode [ 276.524523][T10029] syzkaller0: entered allmulticast mode [ 276.606343][ T5345] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.610395][ T5345] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.613138][ T5345] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.618775][ T5345] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.621082][ T5345] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.624323][ T5345] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.745299][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 277.775094][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 277.827548][T10032] vcan0 speed is unknown, defaulting to 1000 [ 277.933191][T10032] chnl_net:caif_netlink_parms(): no params data found [ 277.983574][T10032] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.985453][T10032] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.987358][T10032] bridge_slave_0: entered allmulticast mode [ 277.989451][T10032] bridge_slave_0: entered promiscuous mode [ 278.006134][T10032] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.008029][T10032] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.010020][T10032] bridge_slave_1: entered allmulticast mode [ 278.012645][T10032] bridge_slave_1: entered promiscuous mode [ 278.033132][T10032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.036787][T10032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.080174][T10032] team0: Port device team_slave_0 added [ 278.085589][T10032] team0: Port device team_slave_1 added [ 278.113836][T10032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.115706][T10032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.123298][T10032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.126830][T10032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.128640][T10032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.136021][T10032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.166383][T10032] hsr_slave_0: entered promiscuous mode [ 278.168648][T10032] hsr_slave_1: entered promiscuous mode [ 278.170634][T10032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.173207][T10032] Cannot create hsr debugfs directory [ 278.244536][ T64] team0: left allmulticast mode [ 278.246005][ T64] team_slave_0: left allmulticast mode [ 278.247884][ T64] team_slave_1: left allmulticast mode [ 278.249556][ T64] team0: left promiscuous mode [ 278.251044][ T64] team_slave_0: left promiscuous mode [ 278.253019][ T64] team_slave_1: left promiscuous mode [ 278.256022][ T64] bridge0: port 3(team0) entered disabled state [ 278.260088][ T64] bridge_slave_1: left allmulticast mode [ 278.261576][ T64] bridge_slave_1: left promiscuous mode [ 278.263309][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.268043][ T64] bridge_slave_0: left allmulticast mode [ 278.269661][ T64] bridge_slave_0: left promiscuous mode [ 278.271228][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.385716][ T64] dvmrp0 (unregistering): left allmulticast mode [ 278.538066][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.541244][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.544013][ T64] bond0 (unregistering): Released all slaves [ 278.548308][ T64] bond1 (unregistering): Released all slaves [ 278.608419][ T64] : left promiscuous mode [ 278.652586][ T5348] Bluetooth: hci0: command tx timeout [ 278.680465][ T64] tipc: Left network mode [ 278.693859][ T64] IPVS: stopping backup sync thread 9562 ... [ 278.812407][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 278.975533][ T64] hsr_slave_0: left promiscuous mode [ 278.977351][ T64] hsr_slave_1: left promiscuous mode [ 278.980337][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.982722][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.997509][ T64] pim6reg (unregistering): left allmulticast mode [ 279.637723][ T64] team0 (unregistering): Port device team_slave_1 removed [ 279.711000][ T64] team0 (unregistering): Port device team_slave_0 removed [ 279.852405][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 280.240102][T10032] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 280.243660][T10032] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 280.246507][T10032] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 280.249447][T10032] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 280.277075][T10032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.284025][T10032] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.288230][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.290124][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.294269][ T6153] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.296390][ T6153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.396243][T10032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.419080][T10032] veth0_vlan: entered promiscuous mode [ 280.427661][T10032] veth1_vlan: entered promiscuous mode [ 280.438250][T10032] veth0_macvtap: entered promiscuous mode [ 280.441632][T10032] veth1_macvtap: entered promiscuous mode [ 280.448604][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.452115][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.455488][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.458950][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.462229][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.466019][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.469929][T10032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.478809][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.482440][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.485690][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.489181][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.493185][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.496579][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.500022][T10032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.511182][T10032] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.514505][T10032] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.517493][T10032] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.520434][T10032] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.550152][ T6146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.552224][ T6146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.563968][ T6153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.566841][ T6153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.685820][T10051] random: crng reseeded on system resumption [ 280.719741][T10049] loop9: detected capacity change from 0 to 7 [ 280.721830][T10049] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 280.723401][T10049] loop9: partition table partially beyond EOD, truncated [ 280.725345][T10049] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 280.731281][ T5345] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.733238][ T5342] Bluetooth: hci0: command tx timeout [ 280.739040][ T5345] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.741679][ T5345] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.745596][ T5345] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.747899][ T5345] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 280.749991][ T5345] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.779136][T10054] vcan0 speed is unknown, defaulting to 1000 [ 280.852160][T10051] syzkaller0: entered promiscuous mode [ 280.854055][T10051] syzkaller0: entered allmulticast mode [ 282.212029][T10054] chnl_net:caif_netlink_parms(): no params data found [ 282.292660][T10054] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.294749][T10054] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.296825][T10054] bridge_slave_0: entered allmulticast mode [ 282.299186][T10054] bridge_slave_0: entered promiscuous mode [ 282.302960][T10054] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.304864][T10054] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.306762][T10054] bridge_slave_1: entered allmulticast mode [ 282.308721][T10054] bridge_slave_1: entered promiscuous mode [ 282.327537][T10054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.330951][T10054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.352148][T10054] team0: Port device team_slave_0 added [ 282.355003][T10054] team0: Port device team_slave_1 added [ 282.375683][T10054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.377585][T10054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.385876][T10054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.389538][T10054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.391400][T10054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.398174][T10054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.420295][T10054] hsr_slave_0: entered promiscuous mode [ 282.422228][T10054] hsr_slave_1: entered promiscuous mode [ 282.494390][T10054] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.587433][T10054] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.665748][T10054] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.743547][T10054] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.813464][ T5345] Bluetooth: hci0: command tx timeout [ 282.813536][ T5348] Bluetooth: hci1: command tx timeout [ 282.834301][T10054] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 282.837523][T10054] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 282.840408][T10054] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 282.851394][T10054] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 282.862386][T10054] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.864281][T10054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.866250][T10054] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.868093][T10054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.896374][T10054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.904880][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.907803][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.918951][T10054] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.927441][ T6153] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.929544][ T6153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.936282][ T6153] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.938213][ T6153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.951603][T10054] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 282.955980][T10054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.019110][T10054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.034762][T10054] veth0_vlan: entered promiscuous mode [ 283.040546][T10054] veth1_vlan: entered promiscuous mode [ 283.054299][T10054] veth0_macvtap: entered promiscuous mode [ 283.057543][T10054] veth1_macvtap: entered promiscuous mode [ 283.064792][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.067496][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.070019][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.074189][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.076688][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.079360][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.082191][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.085163][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.088573][T10054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.094198][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.096913][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.099452][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.102141][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.105290][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.107936][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.110409][T10054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.113187][T10054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.116560][T10054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.120652][T10054] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.124086][T10054] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.126658][T10054] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.128879][T10054] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.154771][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.158837][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.172220][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.174549][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.358223][T10080] loop9: detected capacity change from 0 to 7 [ 283.363502][T10080] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 283.364896][T10080] loop9: partition table partially beyond EOD, truncated [ 283.366740][T10080] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 283.370352][T10079] random: crng reseeded on system resumption [ 283.910315][T10079] syzkaller0: entered promiscuous mode [ 283.911896][T10079] syzkaller0: entered allmulticast mode [ 284.179531][T10094] Process accounting resumed [ 284.902388][ T5348] Bluetooth: hci1: command tx timeout [ 284.902449][ T5345] Bluetooth: hci0: command tx timeout [ 284.950744][T10090] delete_channel: no stack [ 285.966437][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'. [ 286.002974][T10117] vcan0 speed is unknown, defaulting to 1000 [ 286.972390][ T5345] Bluetooth: hci1: command tx timeout [ 287.182368][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 287.354025][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 287.357157][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.360382][ T9] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 287.364441][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 287.367165][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 287.369941][ T9] usb 5-1: Product: syz [ 287.371445][ T9] usb 5-1: Manufacturer: syz [ 287.580661][T10131] 9pnet_fd: Insufficient options for proto=fd [ 287.629573][T10131] rdma_rxe: rxe_newlink: failed to add vcan0 [ 287.633329][ T9] usb 5-1: USB disconnect, device number 13 [ 288.217502][T10143] loop9: detected capacity change from 0 to 7 [ 288.275002][T10143] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 288.276454][T10143] loop9: partition table partially beyond EOD, truncated [ 288.278362][T10143] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 288.421768][T10148] syzkaller0: entered promiscuous mode [ 288.432487][T10148] syzkaller0: entered allmulticast mode [ 289.062715][ T5345] Bluetooth: hci1: command tx timeout [ 290.272504][T10184] overlayfs: conflicting options: nfs_export=on,index=off [ 290.457088][T10191] xt_SECMARK: invalid mode: 0 [ 290.514836][T10189] loop9: detected capacity change from 0 to 7 [ 290.516752][T10189] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 290.518183][T10189] loop9: partition table partially beyond EOD, truncated [ 290.523748][T10189] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 290.622466][ T25] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 290.785723][ T25] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 290.924310][T10220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1292'. [ 291.081335][ T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.084049][ T25] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 291.091184][ T25] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 291.093672][ T25] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 291.095733][ T25] usb 7-1: Product: syz [ 291.096826][ T25] usb 7-1: Manufacturer: syz [ 291.172278][T10223] loop9: detected capacity change from 0 to 7 [ 291.175304][T10223] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 291.176791][T10223] loop9: partition table partially beyond EOD, truncated [ 291.178815][T10223] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 291.270618][T10226] program syz.0.1294 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.328209][T10187] 9pnet_fd: Insufficient options for proto=fd [ 291.383202][T10187] rdma_rxe: rxe_newlink: failed to add vcan0 [ 291.386526][ T25] usb 7-1: USB disconnect, device number 13 [ 291.431220][T10232] syzkaller0: entered promiscuous mode [ 291.432939][T10232] syzkaller0: entered allmulticast mode [ 291.558775][T10234] openvswitch: netlink: Actions may not be safe on all matching packets [ 292.039707][T10242] Driver unsupported XDP return value 0 on prog (id 151) dev N/A, expect packet loss! [ 292.794283][T10234] warning: `syz.1.1297' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 293.023546][T10252] loop9: detected capacity change from 0 to 7 [ 293.027568][T10252] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 293.028979][T10252] loop9: partition table partially beyond EOD, truncated [ 293.030835][T10252] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 293.267329][T10261] vcan0 speed is unknown, defaulting to 1000 [ 295.417670][T10291] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 295.535627][T10295] random: crng reseeded on system resumption [ 295.560889][T10292] syzkaller0: entered promiscuous mode [ 295.562595][T10292] syzkaller0: entered allmulticast mode [ 295.648745][T10295] syzkaller0: entered promiscuous mode [ 295.650479][T10295] syzkaller0: entered allmulticast mode [ 298.653754][T10311] random: crng reseeded on system resumption [ 298.695022][T10311] syzkaller0: entered promiscuous mode [ 298.697519][T10311] syzkaller0: entered allmulticast mode [ 301.508120][T10351] binder: 10342:10351 ioctl c0046209 0 returned -22 [ 301.889186][T10356] loop9: detected capacity change from 0 to 7 [ 301.892391][T10356] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 301.894306][T10356] loop9: partition table partially beyond EOD, truncated [ 301.896449][T10356] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 302.089052][T10364] syzkaller0: entered promiscuous mode [ 302.090493][T10364] syzkaller0: entered allmulticast mode [ 303.403642][T10387] random: crng reseeded on system resumption [ 304.096141][T10395] delete_channel: no stack [ 304.323259][T10395] vcan0 speed is unknown, defaulting to 1000 [ 304.804451][T10393] delete_channel: no stack [ 305.339733][T10415] loop9: detected capacity change from 0 to 7 [ 305.341558][T10415] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 305.347161][T10415] loop9: partition table partially beyond EOD, truncated [ 305.348958][T10415] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 305.409547][T10417] binder: 10412:10417 ioctl c0046209 0 returned -22 [ 305.608832][T10426] syzkaller0: entered promiscuous mode [ 305.610497][T10426] syzkaller0: entered allmulticast mode [ 307.052203][T10444] delete_channel: no stack [ 307.837733][T10441] delete_channel: no stack [ 308.103958][T10445] vcan0 speed is unknown, defaulting to 1000 [ 308.622128][T10471] random: crng reseeded on system resumption [ 308.751679][T10471] syzkaller0: entered promiscuous mode [ 308.753610][T10471] syzkaller0: entered allmulticast mode [ 311.179116][T10490] loop9: detected capacity change from 0 to 7 [ 311.181034][T10490] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 311.182735][T10490] loop9: partition table partially beyond EOD, truncated [ 311.184751][T10490] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 311.518335][T10497] binder: 10486:10497 ioctl c0046209 0 returned -22 [ 311.991655][T10505] delete_channel: no stack [ 312.047342][T10505] vcan0 speed is unknown, defaulting to 1000 [ 312.333189][T10513] random: crng reseeded on system resumption [ 312.462903][T10513] syzkaller0: entered promiscuous mode [ 312.466554][T10513] syzkaller0: entered allmulticast mode [ 312.774976][T10502] delete_channel: no stack [ 314.210785][T10533] fuse: Unknown parameter 'groupid' [ 314.234184][T10533] netlink: 'syz.1.1374': attribute type 4 has an invalid length. [ 316.423313][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.425009][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.634103][T10561] random: crng reseeded on system resumption [ 316.655822][T10561] syzkaller0: entered promiscuous mode [ 316.657298][T10561] syzkaller0: entered allmulticast mode [ 316.697923][ T40] kauditd_printk_skb: 80 callbacks suppressed [ 316.697934][ T40] audit: type=1326 audit(2000000198.159:9542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.1.1385" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 316.708616][T10565] fuse: Unknown parameter 'groupid' [ 316.710194][ T40] audit: type=1326 audit(2000000198.159:9543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.1.1385" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 316.715957][ T40] audit: type=1326 audit(2000000198.169:9544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.1.1385" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 316.721778][ T40] audit: type=1326 audit(2000000198.169:9545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.1.1385" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 316.728888][ T40] audit: type=1326 audit(2000000198.169:9546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.1.1385" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 316.734661][ T40] audit: type=1326 audit(2000000198.169:9547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.1.1385" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 316.740432][ T40] audit: type=1326 audit(2000000198.169:9548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.1.1385" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 316.746069][ T40] audit: type=1326 audit(2000000198.169:9549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.1.1385" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 316.751721][ T40] audit: type=1326 audit(2000000198.169:9550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.1.1385" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 316.757634][ T40] audit: type=1326 audit(2000000198.169:9551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10562 comm="syz.1.1385" exe="/syz-executor" sig=0 arch=40000003 syscall=368 compat=1 ip=0xf7f35579 code=0x7ffc0000 [ 316.912139][T10570] loop9: detected capacity change from 0 to 7 [ 316.914425][T10570] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 316.915838][T10570] loop9: partition table partially beyond EOD, truncated [ 316.917802][T10570] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 318.298777][T10565] netlink: 'syz.0.1384': attribute type 4 has an invalid length. [ 318.533996][T10576] syzkaller0: entered promiscuous mode [ 318.535554][T10576] syzkaller0: entered allmulticast mode [ 319.004166][T10603] trusted_key: syz.2.1395 sent an empty control message without MSG_MORE. [ 319.599481][T10616] loop9: detected capacity change from 0 to 7 [ 319.601423][T10616] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 319.602860][T10616] loop9: partition table partially beyond EOD, truncated [ 319.604775][T10616] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 320.788992][T10641] random: crng reseeded on system resumption [ 320.845458][T10643] 9pnet: Unknown protocol version 9p20\++} [ 320.846805][T10641] syzkaller0: entered promiscuous mode [ 320.847159][T10644] 9pnet: Unknown protocol version 9p20\++} [ 320.848525][T10641] syzkaller0: entered allmulticast mode [ 321.009298][T10651] loop9: detected capacity change from 0 to 7 [ 321.014993][T10651] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 321.016396][T10651] loop9: partition table partially beyond EOD, truncated [ 321.018242][T10651] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 323.222918][T10689] random: crng reseeded on system resumption [ 323.267233][T10689] syzkaller0: entered promiscuous mode [ 323.268728][T10689] syzkaller0: entered allmulticast mode [ 323.544417][ T35] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 323.752412][ T35] usb 7-1: Using ep0 maxpacket: 16 [ 323.755164][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.757999][ T35] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 323.761139][ T35] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 323.763446][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.766345][ T35] usb 7-1: config 0 descriptor?? [ 324.060507][ T35] usbhid 7-1:0.0: can't add hid device: -71 [ 324.062116][ T35] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 324.064788][ T35] usb 7-1: USB disconnect, device number 14 [ 324.372432][ T35] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 324.379241][T10705] loop9: detected capacity change from 0 to 7 [ 324.381323][T10705] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 324.382836][T10705] loop9: partition table partially beyond EOD, truncated [ 324.384767][T10705] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 324.533782][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 324.557941][ T35] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 324.564418][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.566520][ T35] usb 7-1: Product: syz [ 324.567615][ T35] usb 7-1: Manufacturer: syz [ 324.568811][ T35] usb 7-1: SerialNumber: syz [ 324.784613][ T35] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 324.983309][ T830] usb 7-1: USB disconnect, device number 15 [ 324.985658][ T830] usblp0: removed [ 325.327313][T10727] netlink: 'syz.3.1426': attribute type 25 has an invalid length. [ 325.510660][T10728] kernel profiling enabled (shift: 0) [ 326.429289][T10737] loop9: detected capacity change from 0 to 7 [ 326.431968][T10737] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 326.433973][T10737] loop9: partition table partially beyond EOD, truncated [ 326.436253][T10737] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 326.547799][T10740] syzkaller0: entered promiscuous mode [ 326.552518][T10740] syzkaller0: entered allmulticast mode [ 327.304963][T10754] random: crng reseeded on system resumption [ 328.414061][T10766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1435'. [ 328.435805][T10766] 9pnet_fd: Insufficient options for proto=fd [ 328.949501][T10749] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1432'. [ 328.955610][T10748] vcan0 speed is unknown, defaulting to 1000 [ 329.708828][T10783] loop9: detected capacity change from 0 to 7 [ 329.717680][T10783] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 329.719879][T10783] loop9: partition table partially beyond EOD, truncated [ 329.742769][T10783] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 330.364641][T10798] overlayfs: failed to resolve 'up': -2 [ 330.449080][T10801] netlink: 'syz.2.1445': attribute type 10 has an invalid length. [ 330.608673][T10817] random: crng reseeded on system resumption [ 330.654209][T10817] syzkaller0: entered promiscuous mode [ 330.655837][T10817] syzkaller0: entered allmulticast mode [ 331.128744][T10825] loop9: detected capacity change from 0 to 7 [ 331.135217][T10825] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 331.145281][T10825] loop9: partition table partially beyond EOD, truncated [ 331.147508][T10825] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 331.213727][T10828] binder: 10827:10828 ioctl c0306201 20000480 returned -22 [ 331.216223][T10829] binder: BINDER_SET_CONTEXT_MGR already set [ 331.222210][T10829] binder: 10827:10829 ioctl 4018620d 20000100 returned -16 [ 331.687733][T10844] overlayfs: failed to resolve './file0': -2 [ 332.327384][T10859] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1461'. [ 332.454844][T10864] netlink: 'syz.0.1464': attribute type 8 has an invalid length. [ 332.456856][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1464'. [ 332.463879][T10865] netlink: 'syz.0.1464': attribute type 8 has an invalid length. [ 332.466126][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1464'. [ 332.534116][T10862] loop9: detected capacity change from 0 to 7 [ 332.535909][T10862] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 332.537478][T10862] loop9: partition table partially beyond EOD, truncated [ 332.539521][T10862] loop9: p1 size 1139518251 extends beyond EOD, truncated Connection to localhost closed by remote host. [ 332.773137][T10819] bond0: (slave syz_tun): Releasing backup interface [ 333.048099][ T96] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.170090][ T96] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.236321][ T96] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.309382][ T96] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.432815][ T96] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.536368][ T96] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.597571][ T96] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.654221][ T96] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.738530][ T96] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.815605][ T96] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.884158][ T96] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.988289][ T96] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.094713][ T96] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.168916][ T96] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.247926][ T96] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.314127][ T96] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.434224][ T96] bridge_slave_1: left allmulticast mode [ 334.436252][ T96] bridge_slave_1: left promiscuous mode [ 334.437775][ T96] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.441472][ T96] bridge_slave_0: left allmulticast mode [ 334.443195][ T96] bridge_slave_0: left promiscuous mode [ 334.444679][ T96] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.447901][ T96] bridge_slave_1: left allmulticast mode [ 334.449400][ T96] bridge_slave_1: left promiscuous mode [ 334.450882][ T96] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.456350][ T96] bridge_slave_0: left allmulticast mode [ 334.457834][ T96] bridge_slave_0: left promiscuous mode [ 334.459259][ T96] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.462210][ T96] bridge_slave_1: left allmulticast mode [ 334.464374][ T96] bridge_slave_1: left promiscuous mode [ 334.465933][ T96] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.468535][ T96] bridge_slave_0: left allmulticast mode [ 334.469985][ T96] bridge_slave_0: left promiscuous mode [ 334.471411][ T96] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.424351][ T96] bond0 (unregistering): Released all slaves [ 335.506235][ T96] bond1 (unregistering): Released all slaves [ 335.584669][ T96] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.588537][ T96] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.592097][ T96] bond0 (unregistering): Released all slaves [ 335.682263][ T96] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.686699][ T96] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.691706][ T96] bond0 (unregistering): Released all slaves [ 335.777284][ T96] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.780709][ T96] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.785363][ T96] bond0 (unregistering): Released all slaves [ 335.789819][ T96] bond1 (unregistering): Released all slaves [ 335.794230][ T96] bond2 (unregistering): Released all slaves [ 335.927161][ T96] tipc: Disabling bearer [ 335.928890][ T96] tipc: Left network mode [ 335.942634][ T96] IPVS: stopping backup sync thread 9433 ... [ 336.805455][ T96] hsr_slave_0: left promiscuous mode [ 336.807864][ T96] hsr_slave_1: left promiscuous mode [ 336.821420][ T96] hsr_slave_0: left promiscuous mode [ 336.834501][ T96] hsr_slave_1: left promiscuous mode [ 336.836542][ T96] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.838511][ T96] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.841695][ T96] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.843783][ T96] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.847610][ T96] hsr_slave_0: left promiscuous mode [ 336.849363][ T96] hsr_slave_1: left promiscuous mode [ 336.851137][ T96] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.853111][ T96] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.855301][ T96] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.857244][ T96] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.860944][ T96] hsr_slave_0: left promiscuous mode [ 336.862890][ T96] hsr_slave_1: left promiscuous mode [ 336.864612][ T96] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.866546][ T96] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.868734][ T96] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.870659][ T96] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.956607][ T96] veth1_macvtap: left promiscuous mode [ 336.958102][ T96] veth0_macvtap: left promiscuous mode [ 336.959552][ T96] veth1_vlan: left promiscuous mode [ 336.960915][ T96] veth0_vlan: left promiscuous mode [ 336.963247][ T96] veth1_macvtap: left promiscuous mode [ 336.964672][ T96] veth0_macvtap: left promiscuous mode [ 336.966118][ T96] veth1_vlan: left promiscuous mode [ 336.967490][ T96] veth0_vlan: left promiscuous mode [ 336.969505][ T96] veth1_macvtap: left promiscuous mode [ 336.970929][ T96] veth0_macvtap: left promiscuous mode [ 336.972429][ T96] veth1_vlan: left promiscuous mode [ 336.973812][ T96] veth0_vlan: left promiscuous mode [ 336.975774][ T96] veth1_macvtap: left promiscuous mode [ 336.977224][ T96] veth0_macvtap: left promiscuous mode [ 336.978677][ T96] veth1_vlan: left promiscuous mode [ 336.980051][ T96] veth0_vlan: left promiscuous mode [ 338.944597][ T96] team0 (unregistering): Port device team_slave_1 removed [ 339.017808][ T96] team0 (unregistering): Port device team_slave_0 removed [ 340.142642][ T96] team0 (unregistering): Port device team_slave_1 removed [ 340.214729][ T96] team0 (unregistering): Port device team_slave_0 removed [ 341.336595][ T96] team0 (unregistering): Port device team_slave_1 removed [ 341.410521][ T96] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 15:23:48 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000046 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff8b4ccc20 RDI=ffffffff8bb12d60 RBP=0000000000000246 RSP=ffffc90006f0fa88 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff901ce60f R11=0000000000000000 R12=0000000000000000 R13=ffffffff8ddb7840 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b13a6ae RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa873cca6c0 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000062003 Opmask01=0000000000100000 Opmask02=000000000fffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8b61a1422baf040a 459c4f7312ee0317 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5acc9ce4cc277437 bff0a96bc4743cc1 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 98875e5a024a2f2e 8d3d4047cfc0f623 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a6f688f2e6fd6a4c d1c676af716a1628 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c3475015ba5facc3 c92c27b3e56e3056 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c8946c292d11123 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f78aa42957a9263c 79794024166fd422 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6461742100000000 78351ff9f3ce5216 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 58ea5f0d1ea2fd58 73f3391c937d97a3 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 59c501c4fb77a47d cb7bc686b3c2a02b ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50422064656e7761 7073203a73250050 5241006e65706f5f 667062203a732500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50420541404b5244 5556051f56000050 5241004b40554a5f 435547051f560000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000911 0000000000000000 306572673670692f 74656e2f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000 00306e6170772f74 656e2f307968702f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 1 CPU#1 RAX=0000000001acb63d RBX=0000000000000001 RCX=ffffffff8b139ef9 RDX=0000000000000000 RSI=ffffffff8b4cc960 RDI=ffffffff8bb12d60 RBP=ffffed10036ed910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed10056a7025 R10=ffff88802b53812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801b76c880 R14=ffffffff901ce608 R15=0000000000000000 RIP=ffffffff8b13b2df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056188bba5600 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000006000800 Opmask01=0000000000000000 Opmask02=000000000fffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 049db5ed0dd45858 d15154fbc52c7c72 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 807d067a2844e769 997ff8ef0cd475bb ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 958e109d9c3ddc41 77a89367baaf0e98 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 92822740fd799c50 7c8f0c30dfbad3ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8755b60ebd4bb79f 8bd337c6e5615af4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 297ed1de03055054 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 19053aeada790622 0a13fcc4a95cea65 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f55f3fa00000000 5bfddcb89dacebec ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9978205181455f7d 5c794a01aa5ac306 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d8c1f11af049654 628b618a803fc132 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7564203a00000004 0000000500000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5041051f56000051 404e464a53055140 4e46445000424b4c 41574452574a430a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000181 0000000000000000 326874652f74656e 2f306d6973766564 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000 00306e6170772f74 656e2f307968702f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 2 CPU#2 RAX=0000000000000007 RBX=ffffffff96950c08 RCX=ffffffff81696c0c RDX=0000000000000f74 RSI=0000000000000a3c RDI=0000000000000000 RBP=ffffffff93de0300 RSP=ffffc90000357d60 R8 =ffffffff933a9924 R9 =0000000000054819 R10=ffffffff96952fe7 R11=ffff88802b629418 R12=ffffffff9667c5d8 R13=0000000000054812 R14=0000000000054812 R15=dffffc0000000000 RIP=ffffffff81696aa4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056188bba6680 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004040003 Opmask01=0000000000000001 Opmask02=00000000ffff3f01 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d090f38c152bb278 cc95069cd8990400 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e87f1029dac53a31 799bf4e1b7688574 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6626bd169660e176 5847538408a30d3a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fb9064fd4f2cae41 5de24c15b1c7c82d ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000008c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ceb70000991c0000 00d0635500000007 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c81a0000d3050000 d8c000004f9d0000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b0c1000000000001 00d0540700000001 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00d06ef800000002 91cc000000d04c42 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d164691a458452d5 df4792a8572a4fe4 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f1142593a4f50175 40b548c8115d0980 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f73616572003663 6974617473006575 6575715f6c6f7274 6e6f63203a732500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a56444057001346 4c51445156004050 4050545f494a5751 4b4a46051f560000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000181 0000000000000000 326874652f74656e 2f306d6973766564 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000 00306e6170772f74 656e2f307968702f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2b313423342c ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=00000000005929e9 RBX=0000000000000003 RCX=ffffffff8b139ef9 RDX=0000000000000000 RSI=ffffffff8b4cc960 RDI=ffffffff8bb12d60 RBP=ffffed100376e488 RSP=ffffc90000497e08 R8 =0000000000000001 R9 =ffffed10056e7025 R10=ffff88802b73812b R11=0000000000000000 R12=0000000000000003 R13=ffff88801bb72440 R14=ffffffff901ce608 R15=0000000000000000 RIP=ffffffff8b13b2df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056188bba6680 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020040 Opmask01=0000000004000400 Opmask02=0000000000004008 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d164691a458452d5 df4792a8572a4fe4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f1142593a4f50175 40b548c8115d0980 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 598895f29177b19a 4bb6a700278f947c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f4463f3f866a708d f51b8b70d735e2e9 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000880 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a1057a2f246a0000 00d0382300000002 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ca3cbcf7522d0000 e34c00000b4c0000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bb79000000000001 00d02e65f21d0ec4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00d043b100000002 25800000a7c3395a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 80b8eaa977b63113 a1a6fecb204b7475 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fe682e661f188d8b 9441628a4f4a3808 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20696f2064000a21 2068636d6520204e 203a64206c000a66 20293031202c3164 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000