last executing test programs: 1m3.910790321s ago: executing program 2 (id=584): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x700}, 0x10}, 0x1, 0x7}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r6 = socket$kcm(0x10, 0x2, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x14, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xa}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) 1m3.779924021s ago: executing program 2 (id=585): close(0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\x1a\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x18) symlinkat(0x0, r2, &(0x7f0000000140)='./file0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="0000008fea983d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000001800"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m3.090405391s ago: executing program 2 (id=588): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x4, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x10, 0x0, 0xf2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x414902, 0x80) mount(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x0, 0x0) listen(r6, 0x80000001) 1m2.210633267s ago: executing program 2 (id=596): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9000000}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m2.210370513s ago: executing program 2 (id=597): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, 0x140c, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x80c0) 1m2.208215669s ago: executing program 2 (id=598): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x800000, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1) syz_emit_ethernet(0x48, &(0x7f0000000480)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3a, 0x0, 0x0, 0xfc, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @private=0xa010100, {0x7, 0x4, 0x1, 0x6, 0x400, 0x66, 0x5, 0xeb, 0x11, 0x1ff, @multicast1, @rand_addr=0x64010100, {[@lsrr={0x83, 0x3, 0xc8}, @timestamp_prespec={0x44, 0x4, 0xc7}]}}, "ac17"}}}}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b000100"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r1, 0x0, 0x0, 0x1ff, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x11, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) clock_gettime(0x0, 0x0) utimes(&(0x7f0000001e80)='./file0\x00', &(0x7f0000000280)={{0x77359400}}) r8 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x2) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) openat$pidfd(0xffffff9c, &(0x7f0000000080), 0x428001, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000ffd000/0x2000)=nil) 46.911887367s ago: executing program 32 (id=598): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x800000, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x1) syz_emit_ethernet(0x48, &(0x7f0000000480)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3a, 0x0, 0x0, 0xfc, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @private=0xa010100, {0x7, 0x4, 0x1, 0x6, 0x400, 0x66, 0x5, 0xeb, 0x11, 0x1ff, @multicast1, @rand_addr=0x64010100, {[@lsrr={0x83, 0x3, 0xc8}, @timestamp_prespec={0x44, 0x4, 0xc7}]}}, "ac17"}}}}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b000100"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r1, 0x0, 0x0, 0x1ff, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x11, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) clock_gettime(0x0, 0x0) utimes(&(0x7f0000001e80)='./file0\x00', &(0x7f0000000280)={{0x77359400}}) r8 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x2) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) openat$pidfd(0xffffff9c, &(0x7f0000000080), 0x428001, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f0000ffd000/0x2000)=nil) 3.979915352s ago: executing program 0 (id=1014): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="0100000000000007000001"], 0x90}}, 0x0) 3.979502833s ago: executing program 0 (id=1015): syz_emit_ethernet(0x3e, &(0x7f0000001100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x1c, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @rand_addr=0x64010101}}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xb0, 0x1, 0xa, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x8, 0x7, 0x80000001}}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)={[&(0x7f00000002c0)='\x00', &(0x7f0000000300)='\\/#!+#\x00', &(0x7f0000000340)='\xff\xff\xff\xff\xff\xff']}, &(0x7f0000000500)={[&(0x7f00000003c0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000400)='@+&+\')*\x00', &(0x7f0000000440)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000480)='syztnl1\x00', &(0x7f00000004c0)='syztnl2\x00']}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@remote, @in6=@private1, 0x4e24, 0x401, 0x4e21, 0x100, 0xa, 0x0, 0x20, 0x6c, r1, r2}, {0xfffffffffffffffe, 0x80000001, 0x2, 0x1, 0x9, 0x6, 0x12b, 0x7f}, {0x4, 0x8, 0x401, 0x7ff}, 0x2, 0x6e6bb2, 0x2, 0x0, 0x3, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x4d6, 0xff}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x3504, 0x1, 0x1, 0xf9, 0x5, 0xe, 0x6}}, 0xe4) 3.97921186s ago: executing program 0 (id=1016): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x200000) fcntl$getflags(r0, 0x3) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="4ede00"}) ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) mlock(&(0x7f0000646000/0x3000)=nil, 0x3000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f25, 0x4, 0x2, 0x401, 0x1, 0xcc5, 0xfff, 0x5c95239c, 0x5, 0x3ff, 0x802, 0x1600, 0x51, 0x1, 0x8009, 0x5, 0x9, 0x3, 0x8, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffbfff5, 0xffffeadb, 0xa, 0x7fff, 0x8c, 0x3, 0x8000000, 0xdffffffd]}) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000004000000040000000200010000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000001880"], 0x48) 3.14528459s ago: executing program 4 (id=1020): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x8ea341) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000412fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) 2.858037398s ago: executing program 1 (id=1022): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000180)={0xb, 0x77, 0x2, 0x1}, 0xb) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r2, 0x5f, &(0x7f0000000900)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)='P', 0x1}]) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r3 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r3, 0x16) r4 = socket(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00', @ANYRES64=r4], 0x40}}, 0x0) 2.782894876s ago: executing program 0 (id=1023): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f00000005c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, 0x0) read(r1, &(0x7f0000000200)=""/129, 0x81) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xd, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, &(0x7f0000000580)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f1f}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0xb0}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.639373698s ago: executing program 3 (id=1025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000050000000000000013000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002"], 0x104}}, 0x0) 2.638984758s ago: executing program 3 (id=1026): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x101, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x0) keyctl$describe(0x6, r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000240), 0x1, 0x0, 0x7e}, 0x80000000}], 0x1, 0x40008073, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES8=r3], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r5, &(0x7f0000000000), 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="100a06000908010014001a80100004800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) 2.418343933s ago: executing program 1 (id=1027): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0xe6) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000780)={'tunl0\x00', 0x0, 0x8000, 0x8, 0x0, 0x0, {{0x1a, 0x4, 0x0, 0x1, 0x68, 0x65, 0x2, 0x67, 0x29, 0x0, @multicast1, @empty, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp_prespec={0x44, 0x4c, 0x5d, 0x3, 0x7, [{@rand_addr=0x64010100, 0x2}, {@multicast2, 0x59b}, {@private=0xa010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4}, {@rand_addr=0x64010101, 0xe}, {@local, 0x1c659c71}, {@multicast1, 0x401}, {@multicast2, 0x2}, {@loopback, 0xc}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000040)=0xc) syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000080086dd6000cd0400343a00fe8000000000000000000000000000aaff0200000000000000000000000000010400907893033a0000000060c12c0000002b040000000002000000000000000000000100000000000000000000ffffac1414bbc76bd8be400b2ab7659947026ea6945c41df5eaf435718b670d53151f5fc255d26f4fde4fbbb038f4666a5a64dd7328887fa8249d2a1a01322e2a67c64c52bcc6da71193f4bf70f81d50c85d03b15a9523060dd237"], 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r6, 0x1, 0x7, 0x0, &(0x7f0000000080)) setsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0) getrandom(&(0x7f0000000580)=""/286, 0x11e, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = creat(&(0x7f0000000380)='./cgroup\x00', 0x0) write$cgroup_int(r7, &(0x7f0000000540), 0xfffffdd8) ioctl$DRM_IOCTL_AGP_BIND(r7, 0x40086436, &(0x7f0000000040)={0x0, 0x4}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) 2.069887026s ago: executing program 4 (id=1028): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2", 0x2}], 0x1, 0x0) tee(r0, 0xffffffffffffffff, 0x8f5, 0x100000000000000) write(r2, 0x0, 0x0) 2.069331484s ago: executing program 4 (id=1029): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) close_range(0xffffffffffffffff, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) open$dir(&(0x7f0000000000)='./file0\x00', 0x400481, 0x110) r2 = eventfd2(0x200, 0x401) r3 = syz_io_uring_setup(0x41c6, &(0x7f0000000040)={0x0, 0xcd61, 0x10, 0x3, 0x22a}, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000140)={0x9, 0x6, 0x1, 0x0, 0x0, [{{r3}, 0xb19}]}) inotify_init() r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000180)=0x300020, 0x4) r5 = syz_open_dev$mouse(&(0x7f00000001c0), 0xffff, 0x42) connect$rose(r5, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x3fa, 0x1, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2408c000}, 0x40040) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r6, 0x80, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20004001) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r5) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1d0, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb036}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1a99}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc953}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x578}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ce}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x26}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @local, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x840}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40040}, 0x8880) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r7, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}}, 0x20004000) syz_io_uring_setup(0x7c5, &(0x7f0000000880)={0x0, 0x415, 0x80, 0x3, 0x224, 0x0, r2}, &(0x7f0000000900), &(0x7f0000000940)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000980)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r9 = open$dir(&(0x7f00000009c0)='./file0\x00', 0x4000, 0x100) ioctl$BTRFS_IOC_QUOTA_RESCAN(r9, 0x4040942c, &(0x7f0000000a00)={0x0, 0x6, [0xa09, 0x5, 0x8000000000000001, 0x8, 0x3, 0xf800000000000000]}) openat$adsp1(0xffffff9c, &(0x7f0000000a40), 0x101880, 0x0) sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r7, 0x8, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x20000810) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000000b80)=0x5, 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000bc0)={0x0, 0x80000001, 0x5, 0x2d4a}, &(0x7f0000000c00)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000c40)={r10, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0xff}, 0x88) r11 = pidfd_getfd(r5, r0, 0x0) connect$unix(r11, &(0x7f0000000d00)=@file={0x0, './file0\x00'}, 0x6e) 2.009877013s ago: executing program 4 (id=1030): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240), 0x0) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={0xc9}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d0000f0ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 1.320965565s ago: executing program 0 (id=1031): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc04c5609, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000140)={0x0, 0xd649, 0x80, 0x0, 0x4000d3}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000000c0)=0x3, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x54, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.202703412s ago: executing program 3 (id=1032): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$isdn(0x22, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x1, 0x1462, 0x42, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x8, 0x20, 0x80000000, 0xa8}}) sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000006a0001002bbd7000ffdbdf250a000000000000000800010001000000080001000100000008000a0001000000080001000000000008000a000200000008000a000100000008000500", @ANYRES32=r3, @ANYBLOB="08000100000078000800010000020000"], 0x60}, 0x1, 0x0, 0x0, 0x24008010}, 0x20000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace$poke(0xf, 0x0, 0x0, 0x4) r7 = inotify_init1(0x0) inotify_add_watch(r7, 0x0, 0x400) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x48) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x8, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70200000300000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec80000ec00120c00014006040400090404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.102989028s ago: executing program 1 (id=1033): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000100), &(0x7f0000000180)=0x4) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x180884c, 0x0) write$tun(r5, &(0x7f0000000200)={@val={0x0, 0x88be}, @void, @llc={@snap={0xab, 0x1, "8836", "3a6d91", 0x8809}}}, 0xd) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f00000002c0)="fca8d2d2aa05c352facce8eb7586e3256c00", 0x0, 0xffffffffffffffc2) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000004000004cb011180c708605d8a0c9549f671af21be3edd7313f3b3cefa172a8aae2f295cc72b60b269000000"], 0x1310}, 0x1, 0x0, 0x600000, 0x20000004}, 0x84) 849.801063ms ago: executing program 4 (id=1034): openat$tun(0xffffffffffffff9c, 0x0, 0x4082c1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000700fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 849.433571ms ago: executing program 0 (id=1035): r0 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pselect6(0x40, &(0x7f0000000080)={0xfd, 0x9, 0x19, 0xa, 0xffffffffffffff01, 0xb, 0x7, 0x3}, 0x0, &(0x7f0000000100)={0x9, 0x1000000000000077, 0xbdb, 0xfffffffffffffffe, 0x7, 0x4, 0x5, 0x1}, 0x0, 0x0) 800.027316ms ago: executing program 4 (id=1036): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x4, 0x3, 0x5}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, 0x0, &(0x7f0000000100)=r0}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x10, 0x0, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000240)=[0x40, 0x8], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x414902, 0x80) mount(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) listen(0xffffffffffffffff, 0x80000001) 429.484147ms ago: executing program 3 (id=1037): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2", 0x2}], 0x1, 0x0) tee(r0, 0xffffffffffffffff, 0x8f5, 0x100000000000000) write(r2, 0x0, 0x0) 230.044387ms ago: executing program 3 (id=1038): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000104000000e4ff0000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) 229.641947ms ago: executing program 3 (id=1039): r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x2103, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000340)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd60", 0x13}, {&(0x7f0000000200)="b700000006000000000000f1dd0fccd5de", 0x11}, {&(0x7f0000000540)="37a8a6c41ef711513a5554633f6ecf2512425af281e4", 0x16}], 0x3) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)) r3 = syz_open_dev$dri(&(0x7f0000000200), 0x2, 0x60a80) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000280)={0x0}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@getlink={0x30, 0x12, 0x2fa9ccd93d5c0297, 0x70bd28, 0x0, {0x7}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f00000002c0)={r4}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0086426, &(0x7f0000000380)={0x3, &(0x7f0000000300)=[{}, {}, {}]}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0286429, &(0x7f0000000440)={r6, 0x5, &(0x7f0000000340)=[0x4, 0x6, 0x0, 0x6, 0xfffffffe], 0x0, 0x22, 0x0, 0xfffffbff, &(0x7f00000003c0), &(0x7f0000000400)=[0xffff, 0x7fff]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0286429, &(0x7f00000001c0)={r6, 0x1, &(0x7f0000000080)=[0x3e6e], &(0x7f0000000100)=[0x8001], 0x0, 0x1, 0x7, &(0x7f0000000140)=[0x4], &(0x7f0000000180)=[0x80, 0x9, 0xa]}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5802000000000000000000000000000000000000cb29ced8797253c8e36ac4c06517220bc9d49792822ac310d52ad5aab0388225ff841a247f4b7e4606f19990afcb3c", @ANYRES32=0x0, @ANYBLOB="0918000000000000300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb0800040000000002"], 0x58}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) 158.920513ms ago: executing program 1 (id=1040): r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_open_procfs(r0, &(0x7f00000003c0)='net/netlink\x00') mkdir(0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x66}}}}, 0x104) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_team\x00', 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, 0x0, 0x0, 0x10000, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x4, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x5) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x118, 0x4) ptrace$pokeuser(0x6, r5, 0x102, 0x5ffffffd) r6 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r6, 0x402, 0x8000003d) fcntl$setown(r6, 0x8, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xdc1802, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6000000}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1.80922ms ago: executing program 1 (id=1041): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004000000cb011180c708605d8a0c9549f671af21be3edd7313f3b3cefa172a8aae2f295cc72b60b269"], 0x1310}, 0x1, 0x0, 0xe4ffffff, 0x20000004}, 0x84) 0s ago: executing program 1 (id=1042): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f3f000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008015}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2020, 0x0) ioctl$USBDEVFS_IOCTL(r9, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r9, 0x80045505, &(0x7f0000000000)=0x1) kernel console output (not intermixed with test programs): _hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 98.772406][ T7212] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.775540][ T7212] vhci_hcd vhci_hcd.0: Device attached [ 98.776046][ T7217] ufs: You didn't specify the type of your ufs filesystem [ 98.776046][ T7217] [ 98.776046][ T7217] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 98.776046][ T7217] [ 98.776046][ T7217] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 98.787795][ T7217] ufs: ufstype=old is supported read-only [ 98.790123][ T7217] syz.2.295: attempt to access beyond end of device [ 98.790123][ T7217] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 98.834686][ T7215] vhci_hcd: connection closed [ 98.834854][ T1179] vhci_hcd: stop threads [ 98.837883][ T1179] vhci_hcd: release socket [ 98.839286][ T1179] vhci_hcd: disconnect device [ 99.192822][ T7224] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 99.674151][ T7237] ufs: You didn't specify the type of your ufs filesystem [ 99.674151][ T7237] [ 99.674151][ T7237] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 99.674151][ T7237] [ 99.674151][ T7237] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 99.684101][ T7237] ufs: ufstype=old is supported read-only [ 99.686169][ T7237] syz.2.302: attempt to access beyond end of device [ 99.686169][ T7237] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 100.495226][ T7243] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 100.559006][ T7240] wireguard0: entered promiscuous mode [ 100.564381][ T7240] wireguard0: entered allmulticast mode [ 101.017420][ T7265] ufs: You didn't specify the type of your ufs filesystem [ 101.017420][ T7265] [ 101.017420][ T7265] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 101.017420][ T7265] [ 101.017420][ T7265] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 101.027338][ T7265] ufs: ufstype=old is supported read-only [ 101.029848][ T7265] syz.1.309: attempt to access beyond end of device [ 101.029848][ T7265] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 101.445825][ T7274] netlink: 4860 bytes leftover after parsing attributes in process `syz.3.310'. [ 101.751153][ T7291] ufs: You didn't specify the type of your ufs filesystem [ 101.751153][ T7291] [ 101.751153][ T7291] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 101.751153][ T7291] [ 101.751153][ T7291] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 101.761038][ T7291] ufs: ufstype=old is supported read-only [ 101.763165][ T7291] syz.2.313: attempt to access beyond end of device [ 101.763165][ T7291] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 102.072375][ T7297] FAULT_INJECTION: forcing a failure. [ 102.072375][ T7297] name failslab, interval 1, probability 0, space 0, times 0 [ 102.076462][ T7297] CPU: 0 UID: 0 PID: 7297 Comm: syz.3.317 Not tainted syzkaller #0 PREEMPT(full) [ 102.076487][ T7297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.076493][ T7297] Call Trace: [ 102.076498][ T7297] [ 102.076502][ T7297] dump_stack_lvl+0x16c/0x1f0 [ 102.076536][ T7297] should_fail_ex+0x512/0x640 [ 102.076555][ T7297] should_failslab+0xc2/0x120 [ 102.076569][ T7297] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 102.076582][ T7297] ? getname_flags.part.0+0x4c/0x550 [ 102.076598][ T7297] getname_flags.part.0+0x4c/0x550 [ 102.076613][ T7297] ? __pfx_ksys_write+0x10/0x10 [ 102.076625][ T7297] getname_flags+0x93/0xf0 [ 102.076635][ T7297] __ia32_sys_symlinkat+0x79/0xc0 [ 102.076648][ T7297] __do_fast_syscall_32+0x7c/0x3a0 [ 102.076677][ T7297] do_fast_syscall_32+0x32/0x80 [ 102.076690][ T7297] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 102.076703][ T7297] RIP: 0023:0xf7fa4579 [ 102.076712][ T7297] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 102.076721][ T7297] RSP: 002b:00000000f54a555c EFLAGS: 00000296 ORIG_RAX: 0000000000000130 [ 102.076736][ T7297] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 000000000000000b [ 102.076742][ T7297] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.076748][ T7297] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.076753][ T7297] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 102.076759][ T7297] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.076767][ T7297] [ 102.315274][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.318'. [ 102.326682][ T7299] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.335192][ T7299] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.337543][ T7299] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 102.341318][ T7299] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 102.759317][ T7295] delete_channel: no stack [ 102.985191][ T7318] ufs: You didn't specify the type of your ufs filesystem [ 102.985191][ T7318] [ 102.985191][ T7318] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 102.985191][ T7318] [ 102.985191][ T7318] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 102.994833][ T7318] ufs: ufstype=old is supported read-only [ 102.996808][ T7318] syz.3.322: attempt to access beyond end of device [ 102.996808][ T7318] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 103.187674][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'. [ 103.191184][ T7322] netlink: 'syz.1.324': attribute type 20 has an invalid length. [ 103.194124][ T7322] netlink: 'syz.1.324': attribute type 21 has an invalid length. [ 103.404920][ T7329] : entered promiscuous mode [ 103.411839][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'. [ 103.808496][ T7335] ufs: You didn't specify the type of your ufs filesystem [ 103.808496][ T7335] [ 103.808496][ T7335] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 103.808496][ T7335] [ 103.808496][ T7335] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 103.817885][ T7335] ufs: ufstype=old is supported read-only [ 103.819991][ T7335] syz.2.327: attempt to access beyond end of device [ 103.819991][ T7335] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 104.023929][ T34] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 104.174209][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 104.177690][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.181646][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.185977][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.190009][ T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.195895][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.200060][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.407657][ T34] usb 8-1: usb_control_msg returned -32 [ 104.409447][ T34] usbtmc 8-1:16.0: can't read capabilities [ 105.373155][ T7367] ufs: You didn't specify the type of your ufs filesystem [ 105.373155][ T7367] [ 105.373155][ T7367] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 105.373155][ T7367] [ 105.373155][ T7367] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 105.382831][ T7367] ufs: ufstype=old is supported read-only [ 105.385097][ T7367] syz.1.336: attempt to access beyond end of device [ 105.385097][ T7367] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 105.469671][ T7344] delete_channel: no stack [ 105.715882][ T7379] ufs: You didn't specify the type of your ufs filesystem [ 105.715882][ T7379] [ 105.715882][ T7379] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 105.715882][ T7379] [ 105.715882][ T7379] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 105.725218][ T7379] ufs: ufstype=old is supported read-only [ 105.727244][ T7379] syz.2.339: attempt to access beyond end of device [ 105.727244][ T7379] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 105.846335][ T7381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.340'. [ 105.935239][ T7386] binder: 7385:7386 ioctl c0306201 80000440 returned -14 [ 105.954584][ T7388] input: syz0 as /devices/virtual/input/input10 [ 106.015801][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 106.084878][ T7404] ip6tnl1: entered promiscuous mode [ 106.086727][ T7404] ip6tnl1: entered allmulticast mode [ 106.089494][ T7404] team0: Device ip6tnl1 is of different type [ 106.609147][ T7414] netlink: 100 bytes leftover after parsing attributes in process `syz.0.348'. [ 106.625525][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'. [ 106.756311][ T24] usb 8-1: USB disconnect, device number 2 [ 107.149583][ T7433] ufs: You didn't specify the type of your ufs filesystem [ 107.149583][ T7433] [ 107.149583][ T7433] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 107.149583][ T7433] [ 107.149583][ T7433] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 107.159687][ T7433] ufs: ufstype=old is supported read-only [ 107.161871][ T7433] syz.1.351: attempt to access beyond end of device [ 107.161871][ T7433] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 107.867124][ T7457] ufs: You didn't specify the type of your ufs filesystem [ 107.867124][ T7457] [ 107.867124][ T7457] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 107.867124][ T7457] [ 107.867124][ T7457] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 107.876847][ T7457] ufs: ufstype=old is supported read-only [ 107.878845][ T7457] syz.3.357: attempt to access beyond end of device [ 107.878845][ T7457] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 108.143654][ T34] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 108.323624][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 108.329466][ T34] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.332572][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.335982][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.339265][ T34] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.343259][ T34] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.346296][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.521796][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'. [ 108.562276][ T34] usb 7-1: usb_control_msg returned -32 [ 108.564731][ T34] usbtmc 7-1:16.0: can't read capabilities [ 108.680730][ T7469] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 108.744325][ T7471] sd 0:0:0:0: PR command failed: 1026 [ 108.746329][ T7471] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 108.748769][ T7471] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 108.788821][ T7478] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.369822][ T7488] netlink: 20 bytes leftover after parsing attributes in process `syz.0.366'. [ 109.440596][ T6075] udevd[6075]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 109.448116][ T6122] udevd[6122]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 109.659048][ T7496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.368'. [ 109.733636][ T7501] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.818426][ T7501] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.859494][ T7501] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.951117][ T7511] ufs: You didn't specify the type of your ufs filesystem [ 109.951117][ T7511] [ 109.951117][ T7511] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 109.951117][ T7511] [ 109.951117][ T7511] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 109.960432][ T7511] ufs: ufstype=old is supported read-only [ 109.962468][ T7511] syz.3.370: attempt to access beyond end of device [ 109.962468][ T7511] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 109.977414][ T7501] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.081397][ T1179] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.088340][ T1179] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.093782][ T1179] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.100667][ T1179] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.407058][ T7518] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 110.407058][ T7518] program syz.0.373 not setting count and/or reply_len properly [ 110.414671][ T7518] netlink: 3 bytes leftover after parsing attributes in process `syz.0.373'. [ 110.419238][ T7518] batadv1: entered allmulticast mode [ 110.465867][ T7519] input: syz1 as /devices/virtual/input/input11 [ 110.564843][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'. [ 110.568812][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'. [ 110.789396][ T24] usb 7-1: USB disconnect, device number 2 [ 111.057531][ T7548] wireguard0: entered promiscuous mode [ 111.059301][ T7548] wireguard0: entered allmulticast mode [ 111.158414][ T7553] ufs: You didn't specify the type of your ufs filesystem [ 111.158414][ T7553] [ 111.158414][ T7553] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 111.158414][ T7553] [ 111.158414][ T7553] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 111.167696][ T7553] ufs: ufstype=old is supported read-only [ 111.169575][ T7553] syz.0.384: attempt to access beyond end of device [ 111.169575][ T7553] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 111.934185][ T7572] ufs: You didn't specify the type of your ufs filesystem [ 111.934185][ T7572] [ 111.934185][ T7572] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 111.934185][ T7572] [ 111.934185][ T7572] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 111.944853][ T7572] ufs: ufstype=old is supported read-only [ 111.946913][ T7572] syz.3.386: attempt to access beyond end of device [ 111.946913][ T7572] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 112.403612][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 112.567710][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 112.571119][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.576399][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.581877][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.586573][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.592010][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.596473][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.814277][ T24] usb 7-1: usb_control_msg returned -32 [ 112.816019][ T24] usbtmc 7-1:16.0: can't read capabilities [ 112.969492][ T7593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.395'. [ 112.975037][ T7593] loop6: detected capacity change from 0 to 63 [ 112.980401][ T6122] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.983073][ T6122] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.986767][ T6122] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.989316][ T6122] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.992680][ T7593] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.995935][ T7593] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.999121][ T7593] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.002760][ T7593] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.006471][ T7593] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.008864][ T7593] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.672821][ T7604] ufs: You didn't specify the type of your ufs filesystem [ 113.672821][ T7604] [ 113.672821][ T7604] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 113.672821][ T7604] [ 113.672821][ T7604] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 113.685096][ T7604] ufs: ufstype=old is supported read-only [ 113.687815][ T7604] syz.3.396: attempt to access beyond end of device [ 113.687815][ T7604] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 114.084278][ T7615] ufs: You didn't specify the type of your ufs filesystem [ 114.084278][ T7615] [ 114.084278][ T7615] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 114.084278][ T7615] [ 114.084278][ T7615] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 114.094333][ T7615] ufs: ufstype=old is supported read-only [ 114.096639][ T7615] syz.0.400: attempt to access beyond end of device [ 114.096639][ T7615] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 115.117975][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 115.121664][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 115.139837][ T9] usb 7-1: USB disconnect, device number 3 [ 116.863751][ T7662] ufs: You didn't specify the type of your ufs filesystem [ 116.863751][ T7662] [ 116.863751][ T7662] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 116.863751][ T7662] [ 116.863751][ T7662] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 116.873360][ T7662] ufs: ufstype=old is supported read-only [ 116.875321][ T7662] syz.0.412: attempt to access beyond end of device [ 116.875321][ T7662] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 116.918443][ T7663] ufs: You didn't specify the type of your ufs filesystem [ 116.918443][ T7663] [ 116.918443][ T7663] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 116.918443][ T7663] [ 116.918443][ T7663] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 116.928987][ T7663] ufs: ufstype=old is supported read-only [ 116.929692][ T7655] delete_channel: no stack [ 116.931121][ T7663] syz.3.413: attempt to access beyond end of device [ 116.931121][ T7663] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 117.674311][ T34] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 117.700112][ T7676] ufs: You didn't specify the type of your ufs filesystem [ 117.700112][ T7676] [ 117.700112][ T7676] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 117.700112][ T7676] [ 117.700112][ T7676] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 117.710840][ T7676] ufs: ufstype=old is supported read-only [ 117.713684][ T7676] syz.3.416: attempt to access beyond end of device [ 117.713684][ T7676] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 117.823629][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 117.828036][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.832458][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.836804][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.840209][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.844525][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.847864][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.068382][ T34] usb 5-1: usb_control_msg returned -32 [ 118.070801][ T34] usbtmc 5-1:16.0: can't read capabilities [ 118.078895][ T34] usb 5-1: USB disconnect, device number 7 [ 118.671115][ T7679] delete_channel: no stack [ 118.875870][ T7697] ufs: You didn't specify the type of your ufs filesystem [ 118.875870][ T7697] [ 118.875870][ T7697] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 118.875870][ T7697] [ 118.875870][ T7697] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 118.887172][ T7697] ufs: ufstype=old is supported read-only [ 118.889121][ T7697] syz.0.420: attempt to access beyond end of device [ 118.889121][ T7697] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 119.342809][ T7708] random: crng reseeded on system resumption [ 119.375909][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.424'. [ 119.380491][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.424'. [ 119.391786][ T7709] netlink: 4860 bytes leftover after parsing attributes in process `syz.1.422'. [ 119.442075][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 119.447009][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 120.381715][ T7726] ufs: You didn't specify the type of your ufs filesystem [ 120.381715][ T7726] [ 120.381715][ T7726] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 120.381715][ T7726] [ 120.381715][ T7726] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 120.393865][ T7726] ufs: ufstype=old is supported read-only [ 120.396528][ T7726] syz.2.427: attempt to access beyond end of device [ 120.396528][ T7726] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 120.913579][ T6025] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 121.074197][ T6025] usb 5-1: Using ep0 maxpacket: 8 [ 121.078144][ T6025] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.082585][ T6025] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.088398][ T6025] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.092693][ T6025] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.100842][ T6025] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.104536][ T6025] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.293071][ T7734] lo speed is unknown, defaulting to 1000 [ 121.295228][ T7734] lo speed is unknown, defaulting to 1000 [ 121.298105][ T7734] lo speed is unknown, defaulting to 1000 [ 121.309310][ T7734] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 121.324043][ T7734] lo speed is unknown, defaulting to 1000 [ 121.326766][ T6025] usb 5-1: usb_control_msg returned -32 [ 121.328553][ T6025] usbtmc 5-1:16.0: can't read capabilities [ 121.334816][ T7734] lo speed is unknown, defaulting to 1000 [ 121.338625][ T7734] lo speed is unknown, defaulting to 1000 [ 121.342460][ T6025] usb 5-1: USB disconnect, device number 8 [ 121.348923][ T7734] lo speed is unknown, defaulting to 1000 [ 121.717413][ T7742] tmpfs: Unknown parameter 'nr_i•½*¶‰Š¡»>Ûc[0{754-ypn_@]ÀGdß–y?5¨«“€k§µ [ 121.717413][ T7742] ‚T åi­”®¸EÉ‘ Þþæ–Ø„ÕJ;3òÚ•' [ 122.026816][ T7746] input: syz0 as /devices/virtual/input/input12 [ 122.164396][ T7754] ip6tnl1: entered promiscuous mode [ 122.166220][ T7754] ip6tnl1: entered allmulticast mode [ 122.168321][ T7754] team0: Device ip6tnl1 is of different type [ 122.688993][ T7766] ufs: You didn't specify the type of your ufs filesystem [ 122.688993][ T7766] [ 122.688993][ T7766] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 122.688993][ T7766] [ 122.688993][ T7766] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 122.698490][ T7766] ufs: ufstype=old is supported read-only [ 122.700651][ T7766] syz.2.444: attempt to access beyond end of device [ 122.700651][ T7766] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 123.275151][ T7771] netlink: 100 bytes leftover after parsing attributes in process `syz.1.436'. [ 123.289044][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'. [ 123.400471][ T7779] netlink: 124 bytes leftover after parsing attributes in process `syz.3.439'. [ 123.736553][ T7784] wireguard0: entered promiscuous mode [ 123.738840][ T7784] wireguard0: entered allmulticast mode [ 124.423531][ T840] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 124.603541][ T840] usb 6-1: Using ep0 maxpacket: 8 [ 124.608747][ T840] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.608908][ T840] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.609165][ T840] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.609200][ T840] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.609424][ T840] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.609507][ T840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.760896][ T7805] siw: device registration error -23 [ 124.958194][ T840] usb 6-1: usb_control_msg returned -32 [ 124.970857][ T840] usbtmc 6-1:16.0: can't read capabilities [ 125.030815][ T840] usb 6-1: USB disconnect, device number 6 [ 125.333584][ T841] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 125.483515][ T841] usb 7-1: Using ep0 maxpacket: 8 [ 125.487441][ T841] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.490472][ T841] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 125.507604][ T7815] ufs: You didn't specify the type of your ufs filesystem [ 125.507604][ T7815] [ 125.507604][ T7815] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 125.507604][ T7815] [ 125.507604][ T7815] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 125.517056][ T7815] ufs: ufstype=old is supported read-only [ 125.519047][ T7815] syz.3.446: attempt to access beyond end of device [ 125.519047][ T7815] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 125.539745][ T841] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.542855][ T841] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.546994][ T841] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 125.549889][ T841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.892279][ T7821] ufs: You didn't specify the type of your ufs filesystem [ 125.892279][ T7821] [ 125.892279][ T7821] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 125.892279][ T7821] [ 125.892279][ T7821] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 125.902888][ T7821] ufs: ufstype=old is supported read-only [ 125.905143][ T7821] syz.1.447: attempt to access beyond end of device [ 125.905143][ T7821] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 125.934808][ T841] usb 7-1: usb_control_msg returned -32 [ 125.936861][ T841] usbtmc 7-1:16.0: can't read capabilities [ 126.153533][ T7806] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 126.158673][ T24] usb 7-1: USB disconnect, device number 4 [ 126.205017][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 127.225178][ T7842] ufs: You didn't specify the type of your ufs filesystem [ 127.225178][ T7842] [ 127.225178][ T7842] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 127.225178][ T7842] [ 127.225178][ T7842] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 127.236981][ T7842] ufs: ufstype=old is supported read-only [ 127.241456][ T7842] syz.2.461: attempt to access beyond end of device [ 127.241456][ T7842] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 127.315906][ T7828] delete_channel: no stack [ 127.554194][ T7832] netlink: 4860 bytes leftover after parsing attributes in process `syz.1.452'. [ 128.049728][ T7851] ufs: You didn't specify the type of your ufs filesystem [ 128.049728][ T7851] [ 128.049728][ T7851] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 128.049728][ T7851] [ 128.049728][ T7851] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 128.059657][ T7851] ufs: ufstype=old is supported read-only [ 128.061705][ T7851] syz.0.455: attempt to access beyond end of device [ 128.061705][ T7851] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 128.315521][ T7860] ufs: You didn't specify the type of your ufs filesystem [ 128.315521][ T7860] [ 128.315521][ T7860] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 128.315521][ T7860] [ 128.315521][ T7860] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 128.324986][ T7860] ufs: ufstype=old is supported read-only [ 128.327185][ T7860] syz.1.456: attempt to access beyond end of device [ 128.327185][ T7860] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 128.383726][ T840] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 128.544306][ T840] usb 7-1: Using ep0 maxpacket: 8 [ 128.547393][ T840] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.550371][ T840] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.553257][ T840] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.556299][ T840] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.560176][ T840] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 128.562820][ T840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.650667][ T7864] ufs: You didn't specify the type of your ufs filesystem [ 128.650667][ T7864] [ 128.650667][ T7864] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 128.650667][ T7864] [ 128.650667][ T7864] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 128.660373][ T7864] ufs: ufstype=old is supported read-only [ 128.662434][ T7864] syz.0.458: attempt to access beyond end of device [ 128.662434][ T7864] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 128.777989][ T840] usb 7-1: usb_control_msg returned -32 [ 128.779647][ T840] usbtmc 7-1:16.0: can't read capabilities [ 128.782648][ T840] usb 7-1: USB disconnect, device number 5 [ 129.861388][ T7885] tmpfs: Unknown parameter 'nr_i•½*¶‰Š¡»>Ûc[0{754-ypn_@]ÀGdß–y?5¨«“€k§µ [ 129.861388][ T7885] ‚T åi­”®¸EÉ‘ Þþæ–Ø„ÕJ;3òÚ•' [ 130.383796][ T7897] ufs: You didn't specify the type of your ufs filesystem [ 130.383796][ T7897] [ 130.383796][ T7897] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 130.383796][ T7897] [ 130.383796][ T7897] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 130.393405][ T7897] ufs: ufstype=old is supported read-only [ 130.395622][ T7897] syz.0.466: attempt to access beyond end of device [ 130.395622][ T7897] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 130.667931][ T7905] lo speed is unknown, defaulting to 1000 [ 130.786852][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'. [ 130.790296][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'. [ 130.955587][ T7915] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 131.091096][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'. [ 131.323629][ T841] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 131.413596][ T29] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 131.483567][ T841] usb 8-1: Using ep0 maxpacket: 8 [ 131.486806][ T841] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.489915][ T841] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.497041][ T841] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.500299][ T841] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.505044][ T841] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.508855][ T841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.573545][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 131.578097][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.582120][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.585443][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.588557][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.592677][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 131.596175][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.726962][ T841] usb 8-1: usb_control_msg returned -32 [ 131.729429][ T841] usbtmc 8-1:16.0: can't read capabilities [ 131.742283][ T841] usb 8-1: USB disconnect, device number 3 [ 131.832564][ T29] usb 5-1: usb_control_msg returned -32 [ 131.834631][ T29] usbtmc 5-1:16.0: can't read capabilities [ 131.871413][ T7930] ufs: You didn't specify the type of your ufs filesystem [ 131.871413][ T7930] [ 131.871413][ T7930] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 131.871413][ T7930] [ 131.871413][ T7930] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 131.880920][ T7930] ufs: ufstype=old is supported read-only [ 131.882972][ T7930] syz.2.475: attempt to access beyond end of device [ 131.882972][ T7930] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 132.185072][ T7923] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 132.192214][ T841] usb 5-1: USB disconnect, device number 9 [ 132.365825][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.368501][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.172473][ T7954] netlink: 'syz.0.480': attribute type 33 has an invalid length. [ 133.187775][ T7954] netlink: 152 bytes leftover after parsing attributes in process `syz.0.480'. [ 133.202466][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 133.283307][ T7935] netlink: 'syz.3.476': attribute type 10 has an invalid length. [ 133.297876][ T7935] netlink: 'syz.3.476': attribute type 10 has an invalid length. [ 133.308098][ T7935] netlink: 2 bytes leftover after parsing attributes in process `syz.3.476'. [ 133.434651][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.483'. [ 133.472092][ T7966] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.483'. [ 133.552355][ T7964] Driver unsupported XDP return value 0 on prog (id 70) dev N/A, expect packet loss! [ 133.893607][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 134.043555][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 134.046467][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.049648][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.052814][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.056321][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.061481][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.064888][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.240132][ T7984] netlink: 36 bytes leftover after parsing attributes in process `syz.0.488'. [ 134.278897][ T24] usb 7-1: usb_control_msg returned -32 [ 134.280734][ T24] usbtmc 7-1:16.0: can't read capabilities [ 134.288265][ T24] usb 7-1: USB disconnect, device number 6 [ 134.542687][ T7995] ufs: You didn't specify the type of your ufs filesystem [ 134.542687][ T7995] [ 134.542687][ T7995] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 134.542687][ T7995] [ 134.542687][ T7995] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 134.553715][ T7995] ufs: ufstype=old is supported read-only [ 134.555795][ T7995] syz.1.491: attempt to access beyond end of device [ 134.555795][ T7995] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 134.891906][ T8004] trusted_key: syz.3.492 sent an empty control message without MSG_MORE. [ 135.133681][ T24] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 135.283589][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 135.287339][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 135.290526][ T24] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 135.294611][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.298550][ T24] usb 8-1: config 0 descriptor?? [ 135.353216][ T8018] ufs: You didn't specify the type of your ufs filesystem [ 135.353216][ T8018] [ 135.353216][ T8018] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 135.353216][ T8018] [ 135.353216][ T8018] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 135.362540][ T8018] ufs: ufstype=old is supported read-only [ 135.364791][ T8018] syz.0.496: attempt to access beyond end of device [ 135.364791][ T8018] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 135.421996][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.497'. [ 135.719347][ T24] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 135.731209][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.499'. [ 135.734783][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.499'. [ 135.894692][ T8025] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 136.127599][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.500'. [ 137.226685][ T8059] ufs: You didn't specify the type of your ufs filesystem [ 137.226685][ T8059] [ 137.226685][ T8059] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 137.226685][ T8059] [ 137.226685][ T8059] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 137.236705][ T8059] ufs: ufstype=old is supported read-only [ 137.238875][ T8059] syz.1.508: attempt to access beyond end of device [ 137.238875][ T8059] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 137.431730][ T8065] lo speed is unknown, defaulting to 1000 [ 137.746177][ T29] usb 8-1: USB disconnect, device number 4 [ 137.770686][ T8079] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 138.055498][ T8090] openvswitch: : Dropping previously announced user features [ 138.693799][ T8099] input: syz0 as /devices/virtual/input/input13 [ 138.942792][ T8105] ip6tnl1: entered promiscuous mode [ 138.950082][ T8105] ip6tnl1: entered allmulticast mode [ 138.966271][ T8105] team0: Device ip6tnl1 is of different type [ 139.280351][ T8113] __nla_validate_parse: 7 callbacks suppressed [ 139.280393][ T8113] netlink: 100 bytes leftover after parsing attributes in process `syz.3.518'. [ 139.290555][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'. [ 139.493015][ T8115] : entered promiscuous mode [ 139.717837][ T8126] lo speed is unknown, defaulting to 1000 [ 139.720432][ T8126] lo speed is unknown, defaulting to 1000 [ 139.722739][ T8126] lo speed is unknown, defaulting to 1000 [ 139.789207][ T8126] infiniband sz1: set active [ 139.790791][ T841] lo speed is unknown, defaulting to 1000 [ 139.792648][ T8126] infiniband sz1: added lo [ 139.803606][ T8126] RDS/IB: sz1: added [ 139.805775][ T8126] smc: adding ib device sz1 with port count 1 [ 139.807768][ T8126] smc: ib device sz1 port 1 has pnetid [ 139.809676][ T841] lo speed is unknown, defaulting to 1000 [ 139.811784][ T8126] lo speed is unknown, defaulting to 1000 [ 139.853832][ T8126] lo speed is unknown, defaulting to 1000 [ 139.898828][ T8126] lo speed is unknown, defaulting to 1000 [ 139.943848][ T8126] lo speed is unknown, defaulting to 1000 [ 141.673548][ T841] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 141.833603][ T841] usb 5-1: Using ep0 maxpacket: 8 [ 141.837259][ T841] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.843633][ T841] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 141.847292][ T841] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 141.850384][ T841] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.854586][ T841] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 141.857434][ T841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.980400][ T8163] sd 0:0:0:0: PR command failed: 1026 [ 141.982137][ T8163] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 141.984491][ T8163] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 142.066107][ T841] usb 5-1: usb_control_msg returned -32 [ 142.067863][ T841] usbtmc 5-1:16.0: can't read capabilities [ 142.120271][ T8170] netlink: 'syz.3.533': attribute type 33 has an invalid length. [ 142.123753][ T8170] netlink: 152 bytes leftover after parsing attributes in process `syz.3.533'. [ 142.128004][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.533'. [ 142.886870][ T8193] netlink: 'syz.1.538': attribute type 1 has an invalid length. [ 142.889881][ T8193] netlink: 224 bytes leftover after parsing attributes in process `syz.1.538'. [ 142.987471][ T8202] netlink: 36 bytes leftover after parsing attributes in process `syz.1.539'. [ 143.064364][ T8205] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 143.313625][ T8211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.543'. [ 143.316868][ T8212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.543'. [ 143.924101][ T8220] ufs: You didn't specify the type of your ufs filesystem [ 143.924101][ T8220] [ 143.924101][ T8220] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 143.924101][ T8220] [ 143.924101][ T8220] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 143.933984][ T8220] ufs: ufstype=old is supported read-only [ 143.936212][ T8220] syz.3.544: attempt to access beyond end of device [ 143.936212][ T8220] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 144.425793][ T840] usb 5-1: USB disconnect, device number 10 [ 144.457502][ T8223] ufs: You didn't specify the type of your ufs filesystem [ 144.457502][ T8223] [ 144.457502][ T8223] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 144.457502][ T8223] [ 144.457502][ T8223] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 144.465532][ T8231] ufs: You didn't specify the type of your ufs filesystem [ 144.465532][ T8231] [ 144.465532][ T8231] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 144.465532][ T8231] [ 144.465532][ T8231] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 144.467023][ T8223] ufs: ufstype=old is supported read-only [ 144.476345][ T8231] ufs: ufstype=old is supported read-only [ 144.478295][ T8223] syz.1.545: attempt to access beyond end of device [ 144.478295][ T8223] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 144.480229][ T8231] syz.2.546: attempt to access beyond end of device [ 144.480229][ T8231] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 145.578670][ T40] audit: type=1800 audit(1755866068.244:2): pid=8252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.550" name="bus" dev="overlay" ino=789 res=0 errno=0 [ 146.205068][ T8256] netlink: 100 bytes leftover after parsing attributes in process `syz.0.549'. [ 146.210524][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.549'. [ 146.338529][ T8261] sd 0:0:0:0: PR command failed: 1026 [ 146.340964][ T8261] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 146.348848][ T8261] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 146.666448][ T8282] ufs: You didn't specify the type of your ufs filesystem [ 146.666448][ T8282] [ 146.666448][ T8282] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 146.666448][ T8282] [ 146.666448][ T8282] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 146.678085][ T8282] ufs: ufstype=old is supported read-only [ 146.680147][ T8282] syz.3.556: attempt to access beyond end of device [ 146.680147][ T8282] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 146.760808][ T8266] netlink: 20 bytes leftover after parsing attributes in process `syz.2.554'. [ 147.019711][ T8284] netlink: 4860 bytes leftover after parsing attributes in process `syz.1.559'. [ 147.604111][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 147.664327][ T8297] rdma_rxe: rxe_newlink: failed to add lo [ 148.060708][ T8316] netlink: 'syz.0.564': attribute type 1 has an invalid length. [ 148.063998][ T8316] netlink: 224 bytes leftover after parsing attributes in process `syz.0.564'. [ 148.093218][ T8315] netlink: 'syz.1.565': attribute type 27 has an invalid length. [ 148.112574][ T8315] team0: left promiscuous mode [ 148.114368][ T8315] team_slave_0: left promiscuous mode [ 148.116380][ T8315] team_slave_1: left promiscuous mode [ 148.132506][ T8315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.137025][ T8315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.156559][ T8315] dummy0: left promiscuous mode [ 148.159957][ T840] lo speed is unknown, defaulting to 1000 [ 148.176028][ T8318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.179819][ T8318] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.185000][ T8318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.191302][ T87] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.195009][ T87] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.198480][ T87] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.198520][ T29] lo speed is unknown, defaulting to 1000 [ 148.201396][ T87] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.678572][ T8337] ufs: You didn't specify the type of your ufs filesystem [ 148.678572][ T8337] [ 148.678572][ T8337] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 148.678572][ T8337] [ 148.678572][ T8337] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 148.688142][ T8337] ufs: ufstype=old is supported read-only [ 148.690148][ T8337] syz.0.569: attempt to access beyond end of device [ 148.690148][ T8337] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 148.740372][ T8334] netlink: 100 bytes leftover after parsing attributes in process `syz.1.566'. [ 148.774076][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.566'. [ 149.060688][ T8343] ufs: You didn't specify the type of your ufs filesystem [ 149.060688][ T8343] [ 149.060688][ T8343] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 149.060688][ T8343] [ 149.060688][ T8343] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 149.070190][ T8343] ufs: ufstype=old is supported read-only [ 149.072258][ T8343] syz.2.570: attempt to access beyond end of device [ 149.072258][ T8343] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 149.209460][ T8345] input: syz0 as /devices/virtual/input/input14 [ 149.327756][ T8348] ip6tnl1: entered promiscuous mode [ 149.329538][ T8348] ip6tnl1: entered allmulticast mode [ 149.331680][ T8348] team0: Device ip6tnl1 is of different type [ 149.487617][ T8358] netlink: 'syz.1.576': attribute type 10 has an invalid length. [ 149.511920][ T8360] netlink: 'syz.0.578': attribute type 27 has an invalid length. [ 149.526556][ T840] lo speed is unknown, defaulting to 1000 [ 149.528450][ T840] sz1: Port: 1 Link DOWN [ 149.529930][ T840] lo speed is unknown, defaulting to 1000 [ 149.563721][ T8360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.566373][ T8360] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.569282][ T8360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.574544][ T840] lo speed is unknown, defaulting to 1000 [ 149.576475][ T840] sz1: Port: 1 Link ACTIVE [ 149.578085][ T840] lo speed is unknown, defaulting to 1000 [ 149.636625][ T8364] openvswitch: : Dropping previously announced user features [ 150.686226][ T8385] ufs: You didn't specify the type of your ufs filesystem [ 150.686226][ T8385] [ 150.686226][ T8385] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 150.686226][ T8385] [ 150.686226][ T8385] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 150.696053][ T8385] ufs: ufstype=old is supported read-only [ 150.698348][ T8385] syz.3.582: attempt to access beyond end of device [ 150.698348][ T8385] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 150.818558][ T8390] netlink: 'syz.2.584': attribute type 33 has an invalid length. [ 150.821052][ T8390] netlink: 152 bytes leftover after parsing attributes in process `syz.2.584'. [ 150.824912][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.584'. [ 150.835053][ T8390] macvlan2 (unregistering): left allmulticast mode [ 150.837488][ T8390] macvlan2 (unregistering): left promiscuous mode [ 150.840842][ T8390] bridge0: port 3(macvlan2) entered disabled state [ 151.541377][ T8407] ufs: You didn't specify the type of your ufs filesystem [ 151.541377][ T8407] [ 151.541377][ T8407] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 151.541377][ T8407] [ 151.541377][ T8407] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 151.551694][ T8407] ufs: ufstype=old is supported read-only [ 151.553841][ T8407] syz.0.595: attempt to access beyond end of device [ 151.553841][ T8407] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 151.798406][ T8414] ufs: You didn't specify the type of your ufs filesystem [ 151.798406][ T8414] [ 151.798406][ T8414] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 151.798406][ T8414] [ 151.798406][ T8414] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 151.810265][ T8414] ufs: ufstype=old is supported read-only [ 151.812630][ T8414] syz.2.588: attempt to access beyond end of device [ 151.812630][ T8414] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 152.100935][ T8427] netlink: 100 bytes leftover after parsing attributes in process `syz.1.589'. [ 152.109952][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'. [ 152.355289][ T8438] overlay: ./file0 is not a directory [ 152.714332][ T5980] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 152.793588][ T6061] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 152.963555][ T6061] usb 7-1: Using ep0 maxpacket: 32 [ 152.972720][ T8455] openvswitch: : Dropping previously announced user features [ 152.984462][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 152.989195][ T6061] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.992777][ T6061] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 152.996829][ T6061] usb 7-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 152.999679][ T6061] usb 7-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 153.002182][ T6061] usb 7-1: Product: syz [ 153.003714][ T6061] usb 7-1: Manufacturer: syz [ 153.006124][ T6061] usb 7-1: config 0 descriptor?? [ 153.211595][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'. [ 153.333629][ T8464] ufs: You didn't specify the type of your ufs filesystem [ 153.333629][ T8464] [ 153.333629][ T8464] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 153.333629][ T8464] [ 153.333629][ T8464] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 153.344459][ T8464] ufs: ufstype=old is supported read-only [ 153.353590][ T8464] syz.0.602: attempt to access beyond end of device [ 153.353590][ T8464] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 153.471698][ T8465] ufs: You didn't specify the type of your ufs filesystem [ 153.471698][ T8465] [ 153.471698][ T8465] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 153.471698][ T8465] [ 153.471698][ T8465] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 153.481089][ T8465] ufs: ufstype=old is supported read-only [ 153.482960][ T8465] syz.3.604: attempt to access beyond end of device [ 153.482960][ T8465] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 154.258953][ T8486] wireguard0: entered promiscuous mode [ 154.260969][ T8486] wireguard0: entered allmulticast mode [ 155.662172][ T8513] ufs: You didn't specify the type of your ufs filesystem [ 155.662172][ T8513] [ 155.662172][ T8513] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 155.662172][ T8513] [ 155.662172][ T8513] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 155.673096][ T8513] ufs: ufstype=old is supported read-only [ 155.675625][ T8513] syz.1.614: attempt to access beyond end of device [ 155.675625][ T8513] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 155.871604][ T8515] netlink: 'syz.0.615': attribute type 33 has an invalid length. [ 155.874557][ T8515] netlink: 152 bytes leftover after parsing attributes in process `syz.0.615'. [ 155.878060][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 156.128083][ T8522] ufs: You didn't specify the type of your ufs filesystem [ 156.128083][ T8522] [ 156.128083][ T8522] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 156.128083][ T8522] [ 156.128083][ T8522] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 156.137543][ T8522] ufs: ufstype=old is supported read-only [ 156.139636][ T8522] syz.0.616: attempt to access beyond end of device [ 156.139636][ T8522] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 156.515582][ T8530] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 156.971786][ T8538] lo speed is unknown, defaulting to 1000 [ 156.974106][ T8538] lo speed is unknown, defaulting to 1000 [ 157.449716][ T8547] loop6: detected capacity change from 0 to 2098 [ 157.504585][ T8549] ufs: You didn't specify the type of your ufs filesystem [ 157.504585][ T8549] [ 157.504585][ T8549] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 157.504585][ T8549] [ 157.504585][ T8549] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 157.515458][ T8549] ufs: ufstype=old is supported read-only [ 157.518012][ T8549] syz.3.622: attempt to access beyond end of device [ 157.518012][ T8549] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 157.892889][ T8554] netlink: 'syz.0.625': attribute type 27 has an invalid length. [ 157.908382][ T881] lo speed is unknown, defaulting to 1000 [ 157.910385][ T881] sz1: Port: 1 Link DOWN [ 157.911936][ T881] lo speed is unknown, defaulting to 1000 [ 157.949739][ T8554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.952944][ T8554] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.957728][ T8554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.964022][ T6061] lo speed is unknown, defaulting to 1000 [ 157.968025][ T6061] sz1: Port: 1 Link ACTIVE [ 157.972191][ T6061] lo speed is unknown, defaulting to 1000 [ 158.027292][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 158.031612][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.627'. [ 158.217204][ T8565] netlink: 'syz.3.630': attribute type 15 has an invalid length. [ 158.235068][ T8566] ufs: You didn't specify the type of your ufs filesystem [ 158.235068][ T8566] [ 158.235068][ T8566] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 158.235068][ T8566] [ 158.235068][ T8566] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 158.245223][ T8566] ufs: ufstype=old is supported read-only [ 158.247350][ T8566] syz.0.628: attempt to access beyond end of device [ 158.247350][ T8566] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 158.382641][ T8569] netlink: 'syz.1.631': attribute type 6 has an invalid length. [ 158.385277][ T8569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.631'. [ 158.807210][ T8575] netlink: 100 bytes leftover after parsing attributes in process `syz.1.632'. [ 158.810660][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'. [ 159.507068][ T8590] can0: slcan on pty22. [ 159.554085][ T8589] can0 (unregistered): slcan off pty22. [ 159.572811][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'. [ 159.576929][ T8592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.637'. [ 159.620369][ T8594] netlink: 'syz.1.638': attribute type 33 has an invalid length. [ 159.622953][ T8594] netlink: 152 bytes leftover after parsing attributes in process `syz.1.638'. [ 159.627629][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.638'. [ 160.223771][ T8612] netlink: 'syz.0.642': attribute type 10 has an invalid length. [ 160.227797][ T8612] batman_adv: batadv0: Adding interface: team0 [ 160.227805][ T8612] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.227820][ T8612] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 160.228529][ T8612] netlink: 'syz.0.642': attribute type 10 has an invalid length. [ 160.254854][ T8612] netlink: 2 bytes leftover after parsing attributes in process `syz.0.642'. [ 160.254940][ T8612] team0: entered promiscuous mode [ 160.254954][ T8612] team_slave_0: entered promiscuous mode [ 160.255074][ T8612] team_slave_1: entered promiscuous mode [ 160.255535][ T8612] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.285016][ T8612] batman_adv: batadv0: Interface activated: team0 [ 160.285087][ T8612] batman_adv: batadv0: Interface deactivated: team0 [ 160.290532][ T8612] batman_adv: batadv0: Removing interface: team0 [ 161.688466][ T8672] FAULT_INJECTION: forcing a failure. [ 161.688466][ T8672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.692715][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.1.651 Not tainted syzkaller #0 PREEMPT(full) [ 161.692730][ T8672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.692736][ T8672] Call Trace: [ 161.692740][ T8672] [ 161.692744][ T8672] dump_stack_lvl+0x16c/0x1f0 [ 161.692788][ T8672] should_fail_ex+0x512/0x640 [ 161.692808][ T8672] _copy_from_user+0x2e/0xd0 [ 161.692823][ T8672] get_old_timespec32+0x82/0x130 [ 161.692837][ T8672] ? __pfx_get_old_timespec32+0x10/0x10 [ 161.692849][ T8672] ? arch_do_signal_or_restart+0x211/0x790 [ 161.692862][ T8672] ? __fget_files+0x20e/0x3c0 [ 161.692873][ T8672] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 161.692887][ T8672] __ia32_compat_sys_ppoll_time32+0x17a/0x2c0 [ 161.692900][ T8672] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 161.692911][ T8672] ? ksys_write+0x1ac/0x250 [ 161.692923][ T8672] ? rcu_is_watching+0x12/0xc0 [ 161.692934][ T8672] __do_fast_syscall_32+0x7c/0x3a0 [ 161.692948][ T8672] do_fast_syscall_32+0x32/0x80 [ 161.692961][ T8672] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.692974][ T8672] RIP: 0023:0xf70be579 [ 161.692982][ T8672] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 161.692992][ T8672] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000135 [ 161.693007][ T8672] RAX: ffffffffffffffda RBX: 0000000080002040 RCX: 0000000000000000 [ 161.693014][ T8672] RDX: 0000000080002080 RSI: 00000000800020c0 RDI: 0000000000000008 [ 161.693020][ T8672] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.693025][ T8672] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 161.693031][ T8672] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.693040][ T8672] [ 162.946143][ T8697] netlink: 'syz.0.660': attribute type 27 has an invalid length. [ 162.985833][ T8697] team0: left promiscuous mode [ 162.987589][ T8697] team_slave_0: left promiscuous mode [ 162.989390][ T8697] team_slave_1: left promiscuous mode [ 162.993034][ T6061] lo speed is unknown, defaulting to 1000 [ 162.996847][ T6061] sz1: Port: 1 Link DOWN [ 163.007258][ T8697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.010049][ T8697] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.013083][ T8697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.018121][ T24] lo speed is unknown, defaulting to 1000 [ 163.019905][ T24] sz1: Port: 1 Link ACTIVE [ 163.019944][ T6061] lo speed is unknown, defaulting to 1000 [ 163.079160][ T8703] random: crng reseeded on system resumption [ 164.203663][ T5980] Bluetooth: hci3: unexpected event for opcode 0x0a33 [ 164.492742][ T8727] ufs: You didn't specify the type of your ufs filesystem [ 164.492742][ T8727] [ 164.492742][ T8727] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 164.492742][ T8727] [ 164.492742][ T8727] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 164.504395][ T8727] ufs: ufstype=old is supported read-only [ 164.507320][ T8727] syz.0.666: attempt to access beyond end of device [ 164.507320][ T8727] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 164.865623][ T40] audit: type=1326 audit(1755866087.554:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.1.669" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 164.872948][ T40] audit: type=1326 audit(1755866087.554:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.1.669" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 164.882116][ T40] audit: type=1326 audit(1755866087.554:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.1.669" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 164.893989][ T40] audit: type=1326 audit(1755866087.554:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.1.669" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 164.902588][ T40] audit: type=1326 audit(1755866087.554:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.1.669" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 164.910564][ T40] audit: type=1326 audit(1755866087.554:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.1.669" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 164.919125][ T40] audit: type=1326 audit(1755866087.554:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.1.669" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 164.928199][ T40] audit: type=1326 audit(1755866087.554:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.1.669" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 164.936486][ T40] audit: type=1326 audit(1755866087.554:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.1.669" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 164.945414][ T40] audit: type=1326 audit(1755866087.554:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.1.669" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 165.181281][ T8748] delete_channel: no stack [ 165.187486][ T8748] __nla_validate_parse: 2 callbacks suppressed [ 165.187495][ T8748] netlink: 112 bytes leftover after parsing attributes in process `syz.0.672'. [ 165.665456][ T8756] ufs: You didn't specify the type of your ufs filesystem [ 165.665456][ T8756] [ 165.665456][ T8756] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 165.665456][ T8756] [ 165.665456][ T8756] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 165.675111][ T8756] ufs: ufstype=old is supported read-only [ 165.677227][ T8756] syz.3.673: attempt to access beyond end of device [ 165.677227][ T8756] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 166.054861][ T8747] delete_channel: no stack [ 166.205819][ T8766] input: syz0 as /devices/virtual/input/input15 [ 166.532211][ T8772] ip6tnl1: entered promiscuous mode [ 166.539091][ T8772] ip6tnl1: entered allmulticast mode [ 166.541264][ T8772] team0: Device ip6tnl1 is of different type [ 166.644368][ T8774] openvswitch: : Dropping previously announced user features [ 166.653851][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.677'. [ 167.189604][ T8781] ufs: You didn't specify the type of your ufs filesystem [ 167.189604][ T8781] [ 167.189604][ T8781] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 167.189604][ T8781] [ 167.189604][ T8781] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 167.199035][ T8781] ufs: ufstype=old is supported read-only [ 167.201061][ T8781] syz.1.678: attempt to access beyond end of device [ 167.201061][ T8781] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 167.303654][ T34] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 167.433603][ T34] usb 5-1: device descriptor read/64, error -71 [ 167.602008][ T8788] ufs: You didn't specify the type of your ufs filesystem [ 167.602008][ T8788] [ 167.602008][ T8788] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 167.602008][ T8788] [ 167.602008][ T8788] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 167.611607][ T8788] ufs: ufstype=old is supported read-only [ 167.613787][ T8788] syz.3.680: attempt to access beyond end of device [ 167.613787][ T8788] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 167.773612][ T34] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 167.914218][ T34] usb 5-1: device descriptor read/64, error -71 [ 167.914769][ T5976] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.919335][ T5976] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.922588][ T5976] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.926186][ T5976] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.929525][ T5976] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.942112][ T8793] lo speed is unknown, defaulting to 1000 [ 167.944384][ T8793] lo speed is unknown, defaulting to 1000 [ 168.023942][ T34] usb usb5-port1: attempt power cycle [ 168.039259][ T8793] chnl_net:caif_netlink_parms(): no params data found [ 168.092333][ T8793] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.097995][ T8793] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.100494][ T8793] bridge_slave_0: entered allmulticast mode [ 168.130484][ T8793] bridge_slave_0: entered promiscuous mode [ 168.133414][ T8793] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.141104][ T8793] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.143792][ T8793] bridge_slave_1: entered allmulticast mode [ 168.146130][ T8793] bridge_slave_1: entered promiscuous mode [ 168.169243][ T8793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.174260][ T8793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.192407][ T8793] team0: Port device team_slave_0 added [ 168.195398][ T8793] team0: Port device team_slave_1 added [ 168.211386][ T8793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.214271][ T8793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.222303][ T8793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.230047][ T8793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.232960][ T8793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.244876][ T8793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.254231][ T8809] /dev/nullb0: Can't open blockdev [ 168.273583][ T8793] hsr_slave_0: entered promiscuous mode [ 168.276189][ T8793] hsr_slave_1: entered promiscuous mode [ 168.278844][ T8793] debugfs: 'hsr0' already exists in 'hsr' [ 168.280986][ T8793] Cannot create hsr debugfs directory [ 168.293583][ T63] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 168.296197][ T63] Bluetooth: hci3: Injecting HCI hardware error event [ 168.339210][ T8793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 168.342846][ T8793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 168.347368][ T8793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 168.351152][ T8793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 168.364925][ T8793] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.367218][ T8793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.369559][ T8793] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.371819][ T8793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.383527][ T34] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 168.392264][ T8793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.397998][ T96] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.400886][ T96] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.408273][ T8793] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.414326][ T34] usb 5-1: device descriptor read/8, error -71 [ 168.415999][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.418592][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.435916][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.438181][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.558255][ T8793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.627610][ T8809] netlink: 4860 bytes leftover after parsing attributes in process `syz.3.685'. [ 168.650825][ T8793] veth0_vlan: entered promiscuous mode [ 168.653531][ T34] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 168.658892][ T8793] veth1_vlan: entered promiscuous mode [ 168.668966][ T8793] veth0_macvtap: entered promiscuous mode [ 168.673414][ T8793] veth1_macvtap: entered promiscuous mode [ 168.679975][ T8793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.685964][ T8793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.689062][ T34] usb 5-1: device descriptor read/8, error -71 [ 168.692102][ T1179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.695121][ T1179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.698214][ T1179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.701239][ T1179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.724937][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.727509][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.737330][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.740056][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.793807][ T34] usb usb5-port1: unable to enumerate USB device [ 169.196256][ T8839] ptrace attach of "/syz-executor exec"[5978] was attempted by ""[8839] [ 169.566057][ T8832] delete_channel: no stack [ 169.631244][ T8855] netlink: 'syz.3.690': attribute type 10 has an invalid length. [ 169.635448][ T8855] netlink: 'syz.3.690': attribute type 10 has an invalid length. [ 169.638407][ T8855] netlink: 2 bytes leftover after parsing attributes in process `syz.3.690'. [ 169.963775][ T63] Bluetooth: hci4: command tx timeout [ 170.283767][ T63] Bluetooth: hci3: command 0x0405 tx timeout [ 170.284953][ T5975] Bluetooth: hci0: command 0x0406 tx timeout [ 170.286052][ T63] Bluetooth: hci2: command 0x0406 tx timeout [ 170.287926][ T5975] Bluetooth: hci1: command 0x0406 tx timeout [ 170.290041][ T5980] Bluetooth: hci3: hardware error 0x00 [ 170.372168][ T8886] netlink: set zone limit has 4 unknown bytes [ 170.624162][ T8892] ufs: You didn't specify the type of your ufs filesystem [ 170.624162][ T8892] [ 170.624162][ T8892] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 170.624162][ T8892] [ 170.624162][ T8892] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 170.633846][ T8892] ufs: ufstype=old is supported read-only [ 170.635882][ T8892] syz.3.701: attempt to access beyond end of device [ 170.635882][ T8892] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 171.211289][ T8895] delete_channel: no stack [ 171.363560][ T841] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 171.493569][ T841] usb 6-1: device descriptor read/64, error -71 [ 171.733550][ T841] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 171.863547][ T841] usb 6-1: device descriptor read/64, error -71 [ 171.973636][ T841] usb usb6-port1: attempt power cycle [ 172.043595][ T5337] Bluetooth: hci4: command tx timeout [ 172.224251][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.711'. [ 172.343551][ T841] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 172.363672][ T5980] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 172.364002][ T841] usb 6-1: device descriptor read/8, error -71 [ 172.620600][ T8940] ufs: You didn't specify the type of your ufs filesystem [ 172.620600][ T8940] [ 172.620600][ T8940] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 172.620600][ T8940] [ 172.620600][ T8940] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 172.630173][ T8940] ufs: ufstype=old is supported read-only [ 172.632290][ T8940] syz.4.715: attempt to access beyond end of device [ 172.632290][ T8940] loop9: rw=0, sector=16, nr_sectors = 2 limit=0 [ 172.640567][ T841] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 172.714293][ T841] usb 6-1: device descriptor read/8, error -71 [ 172.776940][ T8938] wireguard0: entered promiscuous mode [ 172.778717][ T8938] wireguard0: entered allmulticast mode [ 172.873725][ T841] usb usb6-port1: unable to enumerate USB device [ 173.339199][ T8945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.718'. [ 173.368468][ T8936] delete_channel: no stack [ 173.765558][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'. [ 173.993629][ T34] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 174.133645][ T5980] Bluetooth: hci4: command tx timeout [ 174.153562][ T34] usb 6-1: device descriptor read/64, error -71 [ 174.507605][ T8978] ufs: You didn't specify the type of your ufs filesystem [ 174.507605][ T8978] [ 174.507605][ T8978] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 174.507605][ T8978] [ 174.507605][ T8978] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 174.516956][ T8978] ufs: ufstype=old is supported read-only [ 174.519023][ T8978] syz.0.726: attempt to access beyond end of device [ 174.519023][ T8978] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 175.212118][ T8996] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 175.309284][ T9002] /dev/nullb0: Can't open blockdev [ 175.496171][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 175.693558][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 175.696596][ T24] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 175.743646][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 175.746475][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.857990][ T9008] netlink: 4860 bytes leftover after parsing attributes in process `syz.3.736'. [ 176.203586][ T5980] Bluetooth: hci4: command tx timeout [ 176.614202][ T9024] : entered promiscuous mode [ 176.635255][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.740'. [ 176.635608][ T9021] ufs: You didn't specify the type of your ufs filesystem [ 176.635608][ T9021] [ 176.635608][ T9021] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 176.635608][ T9021] [ 176.635608][ T9021] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 176.648634][ T9021] ufs: ufstype=old is supported read-only [ 176.650752][ T9021] syz.3.742: attempt to access beyond end of device [ 176.650752][ T9021] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 177.484973][ T9043] IPVS: Error connecting to the multicast addr [ 177.593920][ T9046] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 177.596007][ T9046] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 177.598753][ T9046] vhci_hcd vhci_hcd.0: Device attached [ 177.630951][ T9046] xt_limit: Overflow, try lower: 271964/0 [ 177.677637][ T9046] fuse: Bad value for 'fd' [ 177.758890][ T9053] ufs: You didn't specify the type of your ufs filesystem [ 177.758890][ T9053] [ 177.758890][ T9053] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 177.758890][ T9053] [ 177.758890][ T9053] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 177.768819][ T9053] ufs: ufstype=old is supported read-only [ 177.771432][ T9053] syz.3.749: attempt to access beyond end of device [ 177.771432][ T9053] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 177.863571][ T6025] usb 40-1: SetAddress Request (2) to port 0 [ 177.865501][ T6025] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 178.132857][ T9059] mmap: syz.4.751 (9059) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 178.191186][ T9048] vhci_hcd: connection reset by peer [ 178.194841][ T13] vhci_hcd: stop threads [ 178.196699][ T13] vhci_hcd: release socket [ 178.198774][ T13] vhci_hcd: disconnect device [ 178.255036][ T1473] usb 5-1: USB disconnect, device number 15 [ 178.560822][ T9065] netlink: 'syz.3.753': attribute type 27 has an invalid length. [ 178.666776][ T9065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.671412][ T9065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.017434][ T9076] gretap0: entered promiscuous mode [ 179.019301][ T9076] vlan2: entered promiscuous mode [ 179.608025][ T9087] netlink: 'syz.4.759': attribute type 10 has an invalid length. [ 179.638874][ T9087] batman_adv: batadv0: Adding interface: team0 [ 179.640869][ T9087] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.649500][ T9087] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 179.657329][ T9087] netlink: 'syz.4.759': attribute type 10 has an invalid length. [ 179.659986][ T9087] netlink: 2 bytes leftover after parsing attributes in process `syz.4.759'. [ 179.662824][ T9087] team0: entered promiscuous mode [ 179.664535][ T9087] team_slave_0: entered promiscuous mode [ 179.666624][ T9087] team_slave_1: entered promiscuous mode [ 179.669082][ T9087] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.671678][ T9087] batman_adv: batadv0: Interface activated: team0 [ 179.674143][ T9087] batman_adv: batadv0: Interface deactivated: team0 [ 179.676385][ T9087] batman_adv: batadv0: Removing interface: team0 [ 180.028807][ T9095] /dev/nullb0: Can't open blockdev [ 180.661046][ T9103] netlink: 'syz.1.764': attribute type 27 has an invalid length. [ 180.686184][ T841] lo speed is unknown, defaulting to 1000 [ 180.693535][ T841] syz2: Port: 1 Link DOWN [ 180.714277][ T9105] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 180.717005][ T9105] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 180.720594][ T9105] vhci_hcd vhci_hcd.0: Device attached [ 180.733820][ T9105] xt_limit: Overflow, try lower: 271964/0 [ 180.739624][ T9105] fuse: Bad value for 'fd' [ 181.007675][ T9106] vhci_hcd: connection closed [ 181.007813][ T1145] vhci_hcd: stop threads [ 181.012442][ T1145] vhci_hcd: release socket [ 181.013774][ T1145] vhci_hcd: disconnect device [ 181.027584][ T9103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.030433][ T9103] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.033363][ T9103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.039083][ T840] lo speed is unknown, defaulting to 1000 [ 181.041492][ T840] syz2: Port: 1 Link ACTIVE [ 181.067226][ T9111] lo speed is unknown, defaulting to 1000 [ 181.069131][ T9111] lo speed is unknown, defaulting to 1000 [ 181.071587][ T9111] lo speed is unknown, defaulting to 1000 [ 181.080909][ T9111] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 181.097572][ T9111] lo speed is unknown, defaulting to 1000 [ 181.100675][ T9111] lo speed is unknown, defaulting to 1000 [ 181.103791][ T9111] lo speed is unknown, defaulting to 1000 [ 181.106750][ T9111] lo speed is unknown, defaulting to 1000 [ 181.109768][ T9111] lo speed is unknown, defaulting to 1000 [ 181.125662][ T9111] netlink: 52 bytes leftover after parsing attributes in process `syz.3.765'. [ 181.132602][ T841] usb 46-1: enqueue for inactive port 0 [ 181.333402][ T9117] FAULT_INJECTION: forcing a failure. [ 181.333402][ T9117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.337739][ T9117] CPU: 3 UID: 0 PID: 9117 Comm: syz.1.767 Not tainted syzkaller #0 PREEMPT(full) [ 181.337766][ T9117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 181.337772][ T9117] Call Trace: [ 181.337776][ T9117] [ 181.337780][ T9117] dump_stack_lvl+0x16c/0x1f0 [ 181.337798][ T9117] should_fail_ex+0x512/0x640 [ 181.337813][ T9117] _copy_to_user+0x32/0xd0 [ 181.337823][ T9117] put_old_timespec32+0xb4/0x120 [ 181.337835][ T9117] ? __pfx_put_old_timespec32+0x10/0x10 [ 181.337848][ T9117] ? read_tsc+0x9/0x20 [ 181.337860][ T9117] ? ktime_get_ts64+0x256/0x400 [ 181.337871][ T9117] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 181.337887][ T9117] poll_select_finish+0x5c0/0x6b0 [ 181.337898][ T9117] ? __pfx_poll_select_finish+0x10/0x10 [ 181.337908][ T9117] ? _raw_spin_unlock_irq+0x2e/0x50 [ 181.337921][ T9117] __ia32_compat_sys_ppoll_time32+0x25a/0x2c0 [ 181.337934][ T9117] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 181.337946][ T9117] ? ksys_write+0x1ac/0x250 [ 181.337958][ T9117] ? __pfx_ksys_write+0x10/0x10 [ 181.337969][ T9117] ? rcu_is_watching+0x12/0xc0 [ 181.337980][ T9117] __do_fast_syscall_32+0x7c/0x3a0 [ 181.337994][ T9117] do_fast_syscall_32+0x32/0x80 [ 181.338007][ T9117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.338019][ T9117] RIP: 0023:0xf70be579 [ 181.338027][ T9117] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 181.338038][ T9117] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000135 [ 181.338048][ T9117] RAX: ffffffffffffffda RBX: 0000000080002040 RCX: 0000000000000000 [ 181.338055][ T9117] RDX: 0000000080002080 RSI: 00000000800020c0 RDI: 0000000000000008 [ 181.338061][ T9117] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.338067][ T9117] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 181.338073][ T9117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.338083][ T9117] [ 181.559791][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.769'. [ 181.564339][ T9123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.769'. [ 181.623892][ T841] usb usb46-port1: attempt power cycle [ 182.392457][ T9136] syz.1.772 (9136) used greatest stack depth: 20144 bytes left [ 182.624353][ T841] usb usb46-port1: unable to enumerate USB device [ 182.934351][ T6025] usb 40-1: device descriptor read/8, error -110 [ 182.968824][ T9150] ufs: You didn't specify the type of your ufs filesystem [ 182.968824][ T9150] [ 182.968824][ T9150] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 182.968824][ T9150] [ 182.968824][ T9150] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 182.979160][ T9150] ufs: ufstype=old is supported read-only [ 182.981514][ T9150] syz.3.775: attempt to access beyond end of device [ 182.981514][ T9150] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 183.259055][ T9155] wireguard0: entered promiscuous mode [ 183.261029][ T9155] wireguard0: entered allmulticast mode [ 183.414088][ T6025] usb usb40-port1: attempt power cycle [ 183.507658][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'. [ 183.542455][ T9165] /dev/nullb0: Can't open blockdev [ 183.577225][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.782'. [ 183.691446][ T9178] netlink: 60 bytes leftover after parsing attributes in process `syz.4.786'. [ 183.711148][ T9174] netlink: 'syz.3.785': attribute type 33 has an invalid length. [ 183.725651][ T9174] netlink: 152 bytes leftover after parsing attributes in process `syz.3.785'. [ 183.732320][ T9174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.785'. [ 183.743387][ T9181] netlink: 4860 bytes leftover after parsing attributes in process `syz.0.781'. [ 183.923243][ T9191] netlink: 'syz.3.789': attribute type 27 has an invalid length. [ 183.946242][ T29] lo speed is unknown, defaulting to 1000 [ 183.949325][ T29] syz0: Port: 1 Link DOWN [ 183.962962][ T9191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.967013][ T9191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.972123][ T29] lo speed is unknown, defaulting to 1000 [ 183.974475][ T6025] usb usb40-port1: unable to enumerate USB device [ 183.977678][ T29] syz0: Port: 1 Link ACTIVE [ 184.667317][ T9209] team0: left promiscuous mode [ 184.669380][ T9209] team_slave_0: left promiscuous mode [ 184.671731][ T9209] team_slave_1: left promiscuous mode [ 184.686302][ T9209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.880497][ T9203] syz.3.790 (9203) used greatest stack depth: 19464 bytes left [ 185.041362][ T9221] __nla_validate_parse: 1 callbacks suppressed [ 185.041374][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.797'. [ 185.058193][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.797'. [ 185.271595][ T9229] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 185.439211][ T9237] openvswitch: : Dropping previously announced user features [ 185.446309][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.802'. [ 185.740262][ T9244] »»»»»»¥úU9íæÜ: renamed from lo (while UP) [ 186.067099][ T9253] ufs: You didn't specify the type of your ufs filesystem [ 186.067099][ T9253] [ 186.067099][ T9253] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 186.067099][ T9253] [ 186.067099][ T9253] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 186.081491][ T9253] ufs: ufstype=old is supported read-only [ 186.084349][ T9253] syz.1.806: attempt to access beyond end of device [ 186.084349][ T9253] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 186.171354][ T9256] netlink: 'syz.3.808': attribute type 4 has an invalid length. [ 186.406082][ T9270] ufs: You didn't specify the type of your ufs filesystem [ 186.406082][ T9270] [ 186.406082][ T9270] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 186.406082][ T9270] [ 186.406082][ T9270] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 186.415775][ T9270] ufs: ufstype=old is supported read-only [ 186.417843][ T9270] syz.0.812: attempt to access beyond end of device [ 186.417843][ T9270] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 186.498371][ T9269] syzkaller1: entered promiscuous mode [ 186.500486][ T9269] syzkaller1: entered allmulticast mode [ 186.505279][ T9269] program syz.4.811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.553845][ T1111] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 186.556208][ T1111] ata1.00: irq_stat 0x40000000 [ 186.556507][ T9272] nfs: Unknown parameter 'ntext' [ 186.557737][ T1111] ata1.00: failed command: ZAC MANAGEMENT OUT [ 186.557746][ T1111] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 16 [ 186.557746][ T1111] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 186.557774][ T1111] ata1.00: status: { DRDY ERR } [ 186.567987][ T1111] ata1.00: error: { ABRT } [ 186.569428][ T1111] ata1.00: device reported invalid CHS sector 0 [ 186.651970][ T9271] openvswitch: : Dropping previously announced user features [ 187.100761][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 187.104226][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 187.262595][ T9284] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 187.447802][ T9297] netlink: 28 bytes leftover after parsing attributes in process `syz.4.821'. [ 187.450754][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.821'. [ 187.466565][ T9297] netlink: 'syz.4.821': attribute type 10 has an invalid length. [ 187.469963][ T9297] bridge0: port 3(team0) entered blocking state [ 187.472779][ T9297] bridge0: port 3(team0) entered disabled state [ 187.476100][ T9297] team0: entered allmulticast mode [ 187.478100][ T9297] team_slave_0: entered allmulticast mode [ 187.480438][ T9297] team_slave_1: entered allmulticast mode [ 187.485202][ T9297] team0: entered promiscuous mode [ 187.487532][ T9297] team_slave_0: entered promiscuous mode [ 187.490298][ T9297] team_slave_1: entered promiscuous mode [ 187.492953][ T9297] bridge0: port 3(team0) entered blocking state [ 187.495511][ T9297] bridge0: port 3(team0) entered forwarding state [ 188.059308][ T9305] ufs: You didn't specify the type of your ufs filesystem [ 188.059308][ T9305] [ 188.059308][ T9305] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 188.059308][ T9305] [ 188.059308][ T9305] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 188.071307][ T9305] ufs: ufstype=old is supported read-only [ 188.073636][ T9305] syz.4.822: attempt to access beyond end of device [ 188.073636][ T9305] loop9: rw=0, sector=16, nr_sectors = 2 limit=0 [ 188.224037][ T9303] netlink: 52 bytes leftover after parsing attributes in process `syz.1.823'. [ 188.579926][ T9314] netlink: set zone limit has 4 unknown bytes [ 188.877471][ T9323] netlink: 'syz.1.825': attribute type 10 has an invalid length. [ 188.881787][ T9323] batman_adv: batadv0: Adding interface: team0 [ 188.884102][ T9323] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.892597][ T9323] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 188.898911][ T9323] netlink: 'syz.1.825': attribute type 10 has an invalid length. [ 188.901482][ T9323] netlink: 2 bytes leftover after parsing attributes in process `syz.1.825'. [ 188.904819][ T9323] team0: entered promiscuous mode [ 188.906712][ T9323] team_slave_0: entered promiscuous mode [ 188.908950][ T9323] team_slave_1: entered promiscuous mode [ 188.911923][ T9323] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.914483][ T9323] batman_adv: batadv0: Interface activated: team0 [ 188.916777][ T9323] batman_adv: batadv0: Interface deactivated: team0 [ 188.918977][ T9323] batman_adv: batadv0: Removing interface: team0 [ 188.990588][ T9325] netlink: 124 bytes leftover after parsing attributes in process `syz.4.829'. [ 189.064043][ T9329] /dev/nullb0: Can't open blockdev [ 189.695514][ T9342] delete_channel: no stack [ 189.959795][ C3] ata1: illegal qc_active transition (00000000->00004000) [ 190.288892][ T1111] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 190.292224][ T1111] ata1.00: configured for UDMA/100 [ 190.787434][ T9361] siw: device registration error -23 [ 190.820098][ T9357] __nla_validate_parse: 2 callbacks suppressed [ 190.820114][ T9357] netlink: 52 bytes leftover after parsing attributes in process `syz.4.834'. [ 191.040208][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.844'. [ 191.073571][ T9376] hsr_slave_1 (unregistering): left promiscuous mode [ 191.479548][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.848'. [ 191.564644][ T9391] No source specified [ 192.043219][ T9398] netlink: 'syz.4.853': attribute type 27 has an invalid length. [ 192.106241][ T9398] bridge0: port 3(team0) entered disabled state [ 192.108265][ T9398] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.110515][ T9398] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.344280][ T9398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.348237][ T9398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.735154][ T9413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.737861][ T9413] bridge0: port 3(team0) entered blocking state [ 192.739901][ T9413] bridge0: port 3(team0) entered forwarding state [ 192.742063][ T9413] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.745889][ T9413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.752704][ T96] bridge0: port 3(team0) entered disabled state [ 192.755352][ T1179] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.758169][ T1179] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.762847][ T1179] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.766505][ T1179] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.812198][ T9430] netlink: 96 bytes leftover after parsing attributes in process `syz.1.863'. [ 192.816508][ T9430] netlink: 16 bytes leftover after parsing attributes in process `syz.1.863'. [ 192.844962][ T9433] netlink: 60 bytes leftover after parsing attributes in process `syz.1.864'. [ 192.848446][ T9433] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.851314][ T9433] IPv6: NLM_F_CREATE should be set when creating new route [ 192.869970][ T9434] netlink: 'syz.4.865': attribute type 1 has an invalid length. [ 192.872741][ T9434] netlink: 'syz.4.865': attribute type 1 has an invalid length. [ 193.107319][ T9432] delete_channel: no stack [ 193.250244][ T9453] siw: device registration error -23 [ 193.359931][ T9468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.875'. [ 193.394200][ T9472] gretap0: entered promiscuous mode [ 193.395926][ T9472] vlan0: entered promiscuous mode [ 193.406485][ T9466] openvswitch: : Dropping previously announced user features [ 193.560982][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.883'. [ 193.703630][ T9491] ufs: You didn't specify the type of your ufs filesystem [ 193.703630][ T9491] [ 193.703630][ T9491] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 193.703630][ T9491] [ 193.703630][ T9491] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 193.713578][ T9491] ufs: ufstype=old is supported read-only [ 193.715661][ T9491] syz.3.882: attempt to access beyond end of device [ 193.715661][ T9491] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 193.805940][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.808769][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.470568][ T40] kauditd_printk_skb: 70 callbacks suppressed [ 194.470581][ T40] audit: type=1326 audit(1755866117.154:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9508 comm="syz.4.889" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f64579 code=0x0 [ 195.373377][ T9518] netlink: set zone limit has 4 unknown bytes [ 195.473156][ T9527] netlink: 100 bytes leftover after parsing attributes in process `syz.0.887'. [ 195.477730][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.887'. [ 195.578335][ T9536] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 196.014060][ T9555] FAULT_INJECTION: forcing a failure. [ 196.014060][ T9555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.018189][ T9555] CPU: 1 UID: 0 PID: 9555 Comm: syz.1.901 Not tainted syzkaller #0 PREEMPT(full) [ 196.018218][ T9555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 196.018225][ T9555] Call Trace: [ 196.018229][ T9555] [ 196.018233][ T9555] dump_stack_lvl+0x16c/0x1f0 [ 196.018250][ T9555] should_fail_ex+0x512/0x640 [ 196.018266][ T9555] _copy_from_user+0x2e/0xd0 [ 196.018281][ T9555] get_compat_sigset+0x21/0x50 [ 196.018293][ T9555] set_compat_user_sigmask+0xa7/0x2a0 [ 196.018305][ T9555] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 196.018316][ T9555] ? poll_select_set_timeout+0xbb/0x150 [ 196.018327][ T9555] __ia32_compat_sys_ppoll_time32+0x1ce/0x2c0 [ 196.018341][ T9555] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 196.018352][ T9555] ? __pfx_ksys_write+0x10/0x10 [ 196.018366][ T9555] do_int80_emulation+0x104/0x460 [ 196.018380][ T9555] asm_int80_emulation+0x1a/0x20 [ 196.018391][ T9555] RIP: 0023:0xf70be579 [ 196.018399][ T9555] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 196.018409][ T9555] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000135 [ 196.018419][ T9555] RAX: ffffffffffffffda RBX: 0000000080002040 RCX: 0000000000000000 [ 196.018426][ T9555] RDX: 0000000080002080 RSI: 00000000800020c0 RDI: 0000000000000008 [ 196.018432][ T9555] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 196.018437][ T9555] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 196.018443][ T9555] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 196.018453][ T9555] [ 196.281660][ T9568] vlan2: entered promiscuous mode [ 196.283346][ T9568] bridge0: entered promiscuous mode [ 196.577015][ T9572] netlink: 60 bytes leftover after parsing attributes in process `syz.1.906'. [ 196.580550][ T9572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.723574][ T1473] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 196.853555][ T1473] usb 9-1: device descriptor read/64, error -71 [ 197.103572][ T1473] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 197.233571][ T1473] usb 9-1: device descriptor read/64, error -71 [ 197.329904][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 197.343732][ T1473] usb usb9-port1: attempt power cycle [ 197.473072][ T9591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.912'. [ 197.477012][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.912'. [ 197.608594][ T9596] netlink: 'syz.1.914': attribute type 33 has an invalid length. [ 197.611133][ T9596] netlink: 152 bytes leftover after parsing attributes in process `syz.1.914'. [ 197.614819][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.914'. [ 197.683585][ T1473] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 197.704264][ T1473] usb 9-1: device descriptor read/8, error -71 [ 197.870940][ T9606] wireguard0: entered promiscuous mode [ 197.873321][ T9606] wireguard0: entered allmulticast mode [ 198.143560][ T1473] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 198.164007][ T1473] usb 9-1: device descriptor read/8, error -71 [ 198.273725][ T1473] usb usb9-port1: unable to enumerate USB device [ 198.460845][ T9613] ufs: You didn't specify the type of your ufs filesystem [ 198.460845][ T9613] [ 198.460845][ T9613] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 198.460845][ T9613] [ 198.460845][ T9613] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 198.470722][ T9613] ufs: ufstype=old is supported read-only [ 198.472903][ T9613] syz.0.917: attempt to access beyond end of device [ 198.472903][ T9613] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 199.184777][ T9631] tipc: Started in network mode [ 199.186438][ T9631] tipc: Node identity 0a09b6ffd68a, cluster identity 4711 [ 199.188761][ T9631] tipc: Enabled bearer , priority 0 [ 199.191217][ T9632] syzkaller0: entered promiscuous mode [ 199.192919][ T9632] syzkaller0: entered allmulticast mode [ 199.196273][ T9631] tipc: Enabling of bearer rejected, already enabled [ 199.207590][ T9632] tipc: Resetting bearer [ 199.211892][ T9632] tipc: Disabling bearer [ 199.311252][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.925'. [ 199.314434][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.925'. [ 199.472897][ T9644] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 199.494818][ T9654] input: syz0 as /devices/virtual/input/input16 [ 199.519770][ T9656] netlink: 60 bytes leftover after parsing attributes in process `syz.3.930'. [ 199.522599][ T9656] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.525100][ T9656] IPv6: NLM_F_CREATE should be set when creating new route [ 199.653328][ T9660] ufs: You didn't specify the type of your ufs filesystem [ 199.653328][ T9660] [ 199.653328][ T9660] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 199.653328][ T9660] [ 199.653328][ T9660] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 199.662663][ T9660] ufs: ufstype=old is supported read-only [ 199.664801][ T9660] syz.1.926: attempt to access beyond end of device [ 199.664801][ T9660] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 199.949626][ T9655] delete_channel: no stack [ 199.965523][ T9663] ip6tnl1: entered promiscuous mode [ 199.970005][ T9663] ip6tnl1: entered allmulticast mode [ 199.975567][ T9663] team0: Device ip6tnl1 is of different type [ 200.227477][ T9671] ufs: You didn't specify the type of your ufs filesystem [ 200.227477][ T9671] [ 200.227477][ T9671] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 200.227477][ T9671] [ 200.227477][ T9671] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 200.237042][ T9671] ufs: ufstype=old is supported read-only [ 200.238894][ T9671] syz.3.931: attempt to access beyond end of device [ 200.238894][ T9671] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 200.582871][ T9672] delete_channel: no stack [ 200.853636][ T881] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 200.860197][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 200.880878][ T9691] /dev/nullb0: Can't open blockdev [ 201.013562][ T881] usb 6-1: Using ep0 maxpacket: 8 [ 201.017400][ T881] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 201.020929][ T881] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.024927][ T881] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 201.028972][ T881] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 201.034936][ T881] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 201.038808][ T881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.088357][ T881] usbtmc 6-1:16.0: bulk endpoints not found [ 201.127043][ T9699] openvswitch: : Dropping previously announced user features [ 201.330481][ T9702] ufs: You didn't specify the type of your ufs filesystem [ 201.330481][ T9702] [ 201.330481][ T9702] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 201.330481][ T9702] [ 201.330481][ T9702] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 201.339859][ T9702] ufs: ufstype=old is supported read-only [ 201.342242][ T9702] syz.4.941: attempt to access beyond end of device [ 201.342242][ T9702] loop9: rw=0, sector=16, nr_sectors = 2 limit=0 [ 202.050867][ T9724] __nla_validate_parse: 4 callbacks suppressed [ 202.050878][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.947'. [ 202.058197][ T9722] openvswitch: : Dropping previously announced user features [ 202.738558][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.951'. [ 202.742497][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.951'. [ 202.905705][ T9743] netlink: set zone limit has 4 unknown bytes [ 202.907364][ T9741] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 203.271626][ T9748] ufs: You didn't specify the type of your ufs filesystem [ 203.271626][ T9748] [ 203.271626][ T9748] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 203.271626][ T9748] [ 203.271626][ T9748] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 203.280586][ T9748] ufs: ufstype=old is supported read-only [ 203.282634][ T9748] syz.3.955: attempt to access beyond end of device [ 203.282634][ T9748] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 203.623706][ T1473] usb 6-1: USB disconnect, device number 13 [ 203.768153][ T9760] netlink: 148 bytes leftover after parsing attributes in process `syz.1.960'. [ 203.782352][ T9760] mac80211_hwsim hwsim9 : renamed from wlan1 [ 203.968195][ T9763] /dev/nullb0: Can't open blockdev [ 204.180305][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.962'. [ 204.190022][ T9767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.962'. [ 204.495314][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.964'. [ 204.498704][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.964'. [ 204.630921][ T9778] netlink: 5 bytes leftover after parsing attributes in process `syz.0.963'. [ 204.657912][ T9776] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 204.671380][ T9778] hub 1-0:1.0: USB hub found [ 204.674878][ T9778] hub 1-0:1.0: 2 ports detected [ 204.778963][ T40] audit: type=1804 audit(1755866127.464:84): pid=9782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.965" name="/newroot/73/bus" dev="tmpfs" ino=401 res=1 errno=0 [ 204.953176][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.966'. [ 205.367080][ T9801] netlink: 'syz.3.972': attribute type 33 has an invalid length. [ 206.193449][ T9844] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 206.505019][ T9851] warning: `syz.0.984' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 207.472496][ T9867] FAULT_INJECTION: forcing a failure. [ 207.472496][ T9867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.478117][ T9867] CPU: 1 UID: 0 PID: 9867 Comm: syz.3.989 Not tainted syzkaller #0 PREEMPT(full) [ 207.478142][ T9867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 207.478152][ T9867] Call Trace: [ 207.478159][ T9867] [ 207.478165][ T9867] dump_stack_lvl+0x16c/0x1f0 [ 207.478191][ T9867] should_fail_ex+0x512/0x640 [ 207.478216][ T9867] _copy_from_user+0x2e/0xd0 [ 207.478241][ T9867] get_compat_msghdr+0xa7/0x170 [ 207.478263][ T9867] ? __pfx_get_compat_msghdr+0x10/0x10 [ 207.478284][ T9867] ? kstrtouint_from_user+0x13c/0x1d0 [ 207.478306][ T9867] ___sys_sendmsg+0x1ae/0x1d0 [ 207.478327][ T9867] ? get_pid_task+0xfc/0x250 [ 207.478350][ T9867] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.478376][ T9867] ? rcu_is_watching+0x12/0xc0 [ 207.478402][ T9867] __sys_sendmsg+0x16d/0x220 [ 207.478423][ T9867] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.478449][ T9867] ? rcu_is_watching+0x12/0xc0 [ 207.478467][ T9867] __do_fast_syscall_32+0x7c/0x3a0 [ 207.478491][ T9867] do_fast_syscall_32+0x32/0x80 [ 207.478513][ T9867] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.478534][ T9867] RIP: 0023:0xf7fa4579 [ 207.478546][ T9867] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 207.478562][ T9867] RSP: 002b:00000000f54c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 207.478578][ T9867] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001140 [ 207.478590][ T9867] RDX: 00000000000080c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.478599][ T9867] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.478609][ T9867] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 207.478618][ T9867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.478634][ T9867] [ 207.795661][ T9879] __nla_validate_parse: 8 callbacks suppressed [ 207.795673][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.994'. [ 207.801539][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.994'. [ 207.960938][ T9881] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 208.363930][ T9848] Bluetooth: hci3: Opcode 0x0401 failed: -110 [ 209.186058][ T9898] gretap0: entered promiscuous mode [ 209.188116][ T9898] vlan0: entered promiscuous mode [ 209.624064][ T9888] delete_channel: no stack [ 209.773714][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1005'. [ 209.778209][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1005'. [ 209.888825][ T9914] ufs: You didn't specify the type of your ufs filesystem [ 209.888825][ T9914] [ 209.888825][ T9914] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 209.888825][ T9914] [ 209.888825][ T9914] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 209.898886][ T9914] ufs: ufstype=old is supported read-only [ 209.900982][ T9914] syz.4.1003: attempt to access beyond end of device [ 209.900982][ T9914] loop9: rw=0, sector=16, nr_sectors = 2 limit=0 [ 209.937913][ T9915] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 210.043553][ T1473] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 210.215074][ T1473] usb 6-1: Using ep0 maxpacket: 8 [ 210.222164][ T1473] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 210.226376][ T1473] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 210.229535][ T1473] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024 [ 210.232999][ T1473] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 210.236504][ T1473] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.240556][ T1473] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 210.243428][ T1473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.709029][ T9940] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1014'. [ 210.741750][ T9941] openvswitch: : Dropping previously announced user features [ 210.747042][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1011'. [ 210.928782][ T9949] FAULT_INJECTION: forcing a failure. [ 210.928782][ T9949] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 210.933921][ T9949] CPU: 1 UID: 0 PID: 9949 Comm: syz.3.1012 Not tainted syzkaller #0 PREEMPT(full) [ 210.933957][ T9949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 210.933968][ T9949] Call Trace: [ 210.933973][ T9949] [ 210.933979][ T9949] dump_stack_lvl+0x16c/0x1f0 [ 210.934004][ T9949] should_fail_ex+0x512/0x640 [ 210.934030][ T9949] should_fail_alloc_page+0xe7/0x130 [ 210.934053][ T9949] prepare_alloc_pages+0x3c2/0x610 [ 210.934077][ T9949] ? bpf_ksym_find+0x124/0x1c0 [ 210.934093][ T9949] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 210.934114][ T9949] ? __kernel_text_address+0xd/0x40 [ 210.934130][ T9949] ? unwind_get_return_address+0x59/0xa0 [ 210.934146][ T9949] ? arch_stack_walk+0xa6/0x100 [ 210.934166][ T9949] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 210.934186][ T9949] ? stack_trace_save+0x8e/0xc0 [ 210.934204][ T9949] ? __pfx_stack_trace_save+0x10/0x10 [ 210.934224][ T9949] ? kasan_save_stack+0x42/0x60 [ 210.934242][ T9949] ? kasan_save_stack+0x33/0x60 [ 210.934259][ T9949] ? kasan_save_track+0x14/0x30 [ 210.934276][ T9949] ? __kasan_slab_alloc+0x89/0x90 [ 210.934295][ T9949] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 210.934313][ T9949] ? security_inode_alloc+0x3b/0x2b0 [ 210.934331][ T9949] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 210.934356][ T9949] ? policy_nodemask+0xea/0x4e0 [ 210.934378][ T9949] alloc_pages_mpol+0x1fb/0x550 [ 210.934399][ T9949] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 210.934419][ T9949] ? xas_start+0x153/0x790 [ 210.934439][ T9949] ? filemap_get_entry+0x1a7/0x3b0 [ 210.934460][ T9949] ? rcu_is_watching+0x12/0xc0 [ 210.934477][ T9949] ? lock_release+0x201/0x2f0 [ 210.934498][ T9949] folio_alloc_noprof+0x20/0x2d0 [ 210.934522][ T9949] filemap_alloc_folio_noprof+0x3a1/0x470 [ 210.934549][ T9949] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 210.934576][ T9949] ? inode_set_ctime_current+0xa3/0x8f0 [ 210.934597][ T9949] ? rcu_is_watching+0x12/0xc0 [ 210.934637][ T9949] ? timestamp_truncate+0x21e/0x2d0 [ 210.934660][ T9949] __filemap_get_folio+0x5e1/0xc30 [ 210.934680][ T9949] ? rcu_is_watching+0x12/0xc0 [ 210.934697][ T9949] simple_write_begin+0x61/0x3c0 [ 210.934716][ T9949] page_symlink+0x3f9/0x4c0 [ 210.934741][ T9949] ? __pfx_page_symlink+0x10/0x10 [ 210.934764][ T9949] ? __pfx_security_inode_init_security+0x10/0x10 [ 210.934792][ T9949] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 210.934817][ T9949] ? inode_nohighmem+0xd/0x70 [ 210.934835][ T9949] ramfs_symlink+0xaf/0x1b0 [ 210.934860][ T9949] vfs_symlink+0x400/0x680 [ 210.934876][ T9949] do_symlinkat+0x261/0x310 [ 210.934903][ T9949] ? __pfx_do_symlinkat+0x10/0x10 [ 210.934924][ T9949] ? getname_flags.part.0+0x1c5/0x550 [ 210.934947][ T9949] ? __pfx_ksys_write+0x10/0x10 [ 210.934968][ T9949] __ia32_sys_symlinkat+0x93/0xc0 [ 210.934989][ T9949] __do_fast_syscall_32+0x7c/0x3a0 [ 210.935012][ T9949] do_fast_syscall_32+0x32/0x80 [ 210.935032][ T9949] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.935053][ T9949] RIP: 0023:0xf7fa4579 [ 210.935065][ T9949] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 210.935082][ T9949] RSP: 002b:00000000f548455c EFLAGS: 00000296 ORIG_RAX: 0000000000000130 [ 210.935099][ T9949] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 000000000000000b [ 210.935109][ T9949] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.935119][ T9949] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.935128][ T9949] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 210.935137][ T9949] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.935151][ T9949] [ 211.270954][ T1473] usb 6-1: usb_control_msg returned -71 [ 211.277846][ T1473] usbtmc 6-1:16.0: can't read capabilities [ 211.287659][ T1473] usb 6-1: USB disconnect, device number 14 [ 211.556612][ T9946] delete_channel: no stack [ 211.819109][ T9965] netlink: set zone limit has 4 unknown bytes [ 211.889804][ T9959] openvswitch: : Dropping previously announced user features [ 211.942496][ T9961] delete_channel: no stack [ 211.978956][ T9972] netlink: 'syz.3.1024': attribute type 27 has an invalid length. [ 211.995319][ T9] lo speed is unknown, defaulting to 1000 [ 211.997219][ T9] syz0: Port: 1 Link DOWN [ 212.020233][ T9972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.024517][ T9972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.030545][ T6025] lo speed is unknown, defaulting to 1000 [ 212.033042][ T6025] syz0: Port: 1 Link ACTIVE [ 213.211581][ T9994] netlink: 'syz.4.1030': attribute type 10 has an invalid length. [ 213.264415][ T9999] netlink: 'syz.4.1030': attribute type 10 has an invalid length. [ 213.267526][ T9999] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1030'. [ 213.541550][T10003] netlink: 'syz.3.1032': attribute type 13 has an invalid length. [ 213.544289][T10003] netlink: 'syz.3.1032': attribute type 17 has an invalid length. [ 213.625624][ T9994] bridge0: port 3(team0) entered disabled state [ 213.633937][ T9994] team0: left allmulticast mode [ 213.635700][ T9994] team_slave_0: left allmulticast mode [ 213.637442][ T9994] team_slave_1: left allmulticast mode [ 213.642205][ T9994] team0: left promiscuous mode [ 213.645865][ T9994] team_slave_0: left promiscuous mode [ 213.647731][ T9994] team_slave_1: left promiscuous mode [ 213.649722][ T9994] bridge0: port 3(team0) entered disabled state [ 213.657144][ T9994] batman_adv: batadv0: Adding interface: team0 [ 213.659396][ T9994] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.671035][ T9994] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 213.675775][ T9999] team0: entered promiscuous mode [ 213.677533][ T9999] team_slave_0: entered promiscuous mode [ 213.680081][ T9999] team_slave_1: entered promiscuous mode [ 213.682501][ T9999] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.685692][ T9999] batman_adv: batadv0: Interface activated: team0 [ 213.688330][ T9999] batman_adv: batadv0: Interface deactivated: team0 [ 213.690525][ T9999] batman_adv: batadv0: Removing interface: team0 [ 213.733652][T10008] /dev/nullb0: Can't open blockdev [ 213.864236][T10003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.877417][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1034'. [ 214.132058][T10019] ufs: You didn't specify the type of your ufs filesystem [ 214.132058][T10019] [ 214.132058][T10019] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 214.132058][T10019] [ 214.132058][T10019] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 214.142184][T10019] ufs: ufstype=old is supported read-only [ 214.144484][T10019] syz.4.1036: attempt to access beyond end of device [ 214.144484][T10019] loop9: rw=0, sector=16, nr_sectors = 2 limit=0 [ 214.242279][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 214.413595][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 214.424306][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.427695][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 214.430815][ T9] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 214.443559][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.447648][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 214.453541][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.462121][ T9] usbtmc 5-1:16.0: bulk endpoints not found [ 214.490049][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1038'. [ 214.600349][T10027] netlink: 'syz.1.1040': attribute type 27 has an invalid length. [ 214.622919][T10027] team0: left promiscuous mode [ 214.625295][T10027] team_slave_0: left promiscuous mode [ 214.627816][T10027] team_slave_1: left promiscuous mode [ 214.634946][ T6025] »»»»»»¥úU9íæÜ speed is unknown, defaulting to 1000 [ 214.641191][ T6025] syz2: Port: 1 Link DOWN [ 214.673284][T10027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.675991][T10027] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.678886][T10027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.684331][ T1473] »»»»»»¥úU9íæÜ speed is unknown, defaulting to 1000 [ 214.686413][ T1473] syz2: Port: 1 Link ACTIVE [ 214.748014][ T5974] BUG: sleeping function called from invalid context at mm/vmalloc.c:3409 [ 214.750665][ T5974] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5974, name: syz-executor [ 214.754478][ T5974] preempt_count: 1, expected: 0 [ 214.757698][ T5974] RCU nest depth: 0, expected: 0 [ 214.759237][ T5974] INFO: lockdep is turned off. [ 214.760649][ T5974] Preemption disabled at: [ 214.760654][ T5974] [] schedule+0xe0/0x3a0 [ 214.764166][ T5974] CPU: 2 UID: 0 PID: 5974 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 214.764182][ T5974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 214.764188][ T5974] Call Trace: [ 214.764192][ T5974] [ 214.764196][ T5974] dump_stack_lvl+0x16c/0x1f0 [ 214.764214][ T5974] __might_resched+0x3c0/0x5e0 [ 214.764225][ T5974] ? __pfx___might_resched+0x10/0x10 [ 214.764234][ T5974] ? pcpu_block_update+0x562/0x660 [ 214.764250][ T5974] ? pcpu_chunk_relocate+0x126/0x190 [ 214.764261][ T5974] vfree+0x75/0xb50 [ 214.764277][ T5974] ? rcu_is_watching+0x12/0xc0 [ 214.764287][ T5974] ? kfree+0x24f/0x4d0 [ 214.764296][ T5974] ? free_percpu+0x6db/0x13c0 [ 214.764307][ T5974] futex_hash_free+0x98/0xc0 [ 214.764320][ T5974] __mmdrop+0x33f/0x580 [ 214.764330][ T5974] ? rcu_is_watching+0x12/0xc0 [ 214.764340][ T5974] finish_task_switch.isra.0+0x7a4/0xc10 [ 214.764351][ T5974] ? __switch_to+0x7a5/0x11a0 [ 214.764364][ T5974] __schedule+0x1198/0x5de0 [ 214.764374][ T5974] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 214.764386][ T5974] ? debug_object_activate+0x2ec/0x4c0 [ 214.764399][ T5974] ? debug_objects_fill_pool+0x470/0x520 [ 214.764412][ T5974] ? __pfx___schedule+0x10/0x10 [ 214.764424][ T5974] ? schedule+0x2d7/0x3a0 [ 214.764433][ T5974] ? rcu_is_watching+0x12/0xc0 [ 214.764443][ T5974] ? lock_release+0x201/0x2f0 [ 214.764457][ T5974] schedule+0xe7/0x3a0 [ 214.764467][ T5974] do_nanosleep+0x21a/0x570 [ 214.764476][ T5974] ? __pfx_do_nanosleep+0x10/0x10 [ 214.764486][ T5974] ? __asan_memset+0x23/0x50 [ 214.764495][ T5974] ? __hrtimer_setup+0x176/0x280 [ 214.764510][ T5974] hrtimer_nanosleep+0x155/0x380 [ 214.764520][ T5974] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 214.764531][ T5974] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 214.764545][ T5974] ? get_old_timespec32+0xda/0x130 [ 214.764558][ T5974] ? __pfx_get_old_timespec32+0x10/0x10 [ 214.764571][ T5974] common_nsleep+0xa1/0xd0 [ 214.764583][ T5974] __ia32_sys_clock_nanosleep_time32+0x33d/0x4f0 [ 214.764594][ T5974] ? __pfx___ia32_sys_clock_nanosleep_time32+0x10/0x10 [ 214.764605][ T5974] ? rcu_is_watching+0x12/0xc0 [ 214.764616][ T5974] __do_fast_syscall_32+0x7c/0x3a0 [ 214.764629][ T5974] do_fast_syscall_32+0x32/0x80 [ 214.764642][ T5974] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 214.764655][ T5974] RIP: 0023:0xf7f72579 [ 214.764663][ T5974] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 214.764673][ T5974] RSP: 002b:00000000ffa28fd0 EFLAGS: 00000293 ORIG_RAX: 000000000000010b [ 214.764683][ T5974] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 214.764689][ T5974] RDX: 00000000ffa29004 RSI: 00000000ffa28ffc RDI: 00000000ffa29004 [ 214.764695][ T5974] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 214.764701][ T5974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.764707][ T5974] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 214.764716][ T5974] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 215.152246][ T6025] usb 5-1: USB disconnect, device number 16 [ 215.825731][ T60] bridge_slave_1: left allmulticast mode [ 215.827542][ T60] bridge_slave_1: left promiscuous mode [ 215.829356][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.832112][ T60] bridge_slave_0: left allmulticast mode [ 215.834059][ T60] bridge_slave_0: left promiscuous mode [ 215.835885][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.961553][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.965270][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.968218][ T60] bond0 (unregistering): Released all slaves [ 216.046714][ T60] : left promiscuous mode [ 216.339359][ T60] hsr_slave_0: left promiscuous mode [ 216.341550][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.347232][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.399164][ T60] team_slave_1 (unregistering): left promiscuous mode [ 216.401665][ T60] team0 (unregistering): Port device team_slave_1 removed [ 216.408363][ T60] team_slave_0 (unregistering): left promiscuous mode [ 216.411715][ T60] team0 (unregistering): Port device team_slave_0 removed [ 217.156860][ T60] bridge_slave_1: left allmulticast mode [ 217.159124][ T60] bridge_slave_1: left promiscuous mode [ 217.161436][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.165477][ T60] bridge_slave_0: left allmulticast mode [ 217.167680][ T60] bridge_slave_0: left promiscuous mode [ 217.169850][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.446464][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.449847][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.452799][ T60] bond0 (unregistering): Released all slaves [ 217.456832][ T60] bond1 (unregistering): Released all slaves [ 217.460409][ T60] bond2 (unregistering): Released all slaves [ 217.464258][ T60] bond3 (unregistering): Released all slaves [ 217.468544][ T60] bond4 (unregistering): Released all slaves [ 217.524229][ T60] : left promiscuous mode [ 218.139739][ T60] hsr_slave_0: left promiscuous mode [ 218.142542][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.146146][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.264907][ T9] lo speed is unknown, defaulting to 1000 [ 218.266809][ T9] infiniband syz0: ib_query_port failed (-19) VM DIAGNOSIS: 12:35:37 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffffff9b0cd798 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff9b0cd79c RBP=1ffff92000664f08 RSP=ffffc90003327838 R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff90ab7697 R11=0000000000000000 R12=dffffc0000000000 R13=ffff888074e1edc0 R14=ffffffff9b0cd790 R15=00000000000039ee RIP=ffffffff8197a9c1 RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7588b46880 ffffffff 00c00000 GS =0000 ffff8880974c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7435014 CR3=000000004234b000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008200002 Opmask01=0000000000000001 Opmask02=0000000000000001 Opmask03=0000000000400004 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b5722a4a00 000055b5722a4a00 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b5722a4a00 000055b5722a4a00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b5722968d0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b572285d40 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffff0000000000ff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 197a75b53d606f07 73737376282451e0 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737342 737326c6015f8a73 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e5552006d25203a 7d73257b52545441 20676e6974697277 20726f7272650065 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 0000000000000050 0000000000000000 0000000000302e36 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 6c2f0073656c7572 000000337400322d 6332692f7665642d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 EAX=849cc6ba EBX=00000011 ECX=00000000 EDX=000006ba ESI=849cc6ba EDI=ffffffff EBP=f7410000 ESP=ffd6eed8 EIP=f70ae752 EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 5684a440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 0004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f741fbe0 CR3=000000004cb47000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85616705 RDI=ffffffff9b0f9680 RBP=ffffffff9b0f9640 RSP=ffffc900033b73f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=5f74706d65657270 R12=0000000000000000 R13=0000000000000034 R14=ffffffff9b0f9640 R15=ffffffff856166a0 RIP=ffffffff8561672f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555fa6ba9510 CR3=0000000065a4a000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=526c481c0db804ef 45e3d5b177ddeff1 526c481c0db804ef 45e3d5b177ddeff1 526c481c0db804ef 45e3d5b177ddeff1 526c481c0db804ef 45e3d5b177ddeff1 ZMM18=0a4bd7b6045945c9 0b6c1b107fbe9f5f 0a4bd7b6045945c9 0b6c1b107fbe9f5f 0a4bd7b6045945c9 0b6c1b107fbe9f5f 0a4bd7b6045945c9 0b6c1b107fbe9f5f ZMM19=e907000000000000 0000000000000004 e907000000000000 0000000000000003 e907000000000000 0000000000000002 e907000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b078ffffffff89aa aff2ffffffff89aa afa8ffffffff89aa 833dffffffff89aa ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8291ffffffff89aa 816fffffffff89aa 80ecffffffff89aa 80d7ffffffff89aa ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 808affffffff89aa 7fe0ffffffff89aa 7fb1ffffffff89aa 7f73ffffffff89aa ZMM24=4966feaf4966feaf 4966feaf4966feaf 4966feaf4966feaf 4966feaf4966feaf 4966feaf4966feaf 4966feaf4966feaf 4966feaf4966feaf 4966feaf4966feaf ZMM25=05e7c8b705e7c8b7 05e7c8b705e7c8b7 05e7c8b705e7c8b7 05e7c8b705e7c8b7 05e7c8b705e7c8b7 05e7c8b705e7c8b7 05e7c8b705e7c8b7 05e7c8b705e7c8b7 ZMM26=9c3a96329c3a9632 9c3a96329c3a9632 9c3a96329c3a9632 9c3a96329c3a9632 9c3a96329c3a9632 9c3a96329c3a9632 9c3a96329c3a9632 9c3a96329c3a9632 ZMM27=660272d9660272d9 660272d9660272d9 660272d9660272d9 660272d9660272d9 660272d9660272d9 660272d9660272d9 660272d9660272d9 660272d9660272d9 ZMM28=00000200000001ff 000001fe000001fd 000001fc000001fb 000001fa000001f9 000001f8000001f7 000001f6000001f5 000001f4000001f3 000001f2000001f1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5a0c00005a0c0000 5a0c00005a0c0000 5a0c00005a0c0000 5a0c00005a0c0000 5a0c00005a0c0000 5a0c00005a0c0000 5a0c00005a0c0000 5a0c00005a0c0000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000040 RCX=ffffffff84e8c7fa RDX=ffff888042f08000 RSI=0000000000000004 RDI=0000000000000005 RBP=ffffffff8f181c29 RSP=ffffc9000109ec70 R8 =0000000000000005 R9 =0000000000000004 R10=0000000000000003 R11=ffff888027830030 R12=0000000000000003 R13=dffffc0000000000 R14=0000000000000008 R15=0000000000000000 RIP=ffffffff8b9390a0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000800bd01c CR3=00000000531f8000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000