last executing test programs: 268.873602ms ago: executing program 3 (id=4731): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 268.437597ms ago: executing program 1 (id=4734): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000180)={0x7}) 219.824412ms ago: executing program 3 (id=4737): r0 = openat$ptp1(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000040)={0x9}) 219.722549ms ago: executing program 0 (id=4738): r0 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000300)={{0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 219.644296ms ago: executing program 2 (id=4739): r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1}) 219.590018ms ago: executing program 1 (id=4740): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000740)="ff0204ffaf0000000000ac2643d25d1afc0d7487", 0x14) 160.787488ms ago: executing program 3 (id=4741): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8910, &(0x7f0000000580)={'bond0\x00', 0x10001}) 160.602013ms ago: executing program 2 (id=4742): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x98f90a}) 160.503653ms ago: executing program 1 (id=4743): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000838500000004000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) 160.447281ms ago: executing program 0 (id=4744): r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0xfffffffc, @empty, 0xe79}, 0x1c) 160.401517ms ago: executing program 1 (id=4745): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0xa8301, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f00000001c0)={0x1}) 160.354916ms ago: executing program 2 (id=4746): r0 = socket(0x2d, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, @broadcast, 0xb, 0xfffe}}) 110.597182ms ago: executing program 0 (id=4747): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) 110.416251ms ago: executing program 3 (id=4748): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001100010027bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2842000016240000140035"], 0x34}}, 0x0) 110.25091ms ago: executing program 2 (id=4749): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) migrate_pages(0x0, 0x9, 0x0, &(0x7f0000000080)=0x3) 109.99741ms ago: executing program 1 (id=4750): r0 = syz_io_uring_setup(0x5477, &(0x7f00000011c0)={0x0, 0xbc09, 0x2, 0x2, 0x1}, &(0x7f0000001180), &(0x7f0000001400)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0x0, 0x0) 60.817014ms ago: executing program 0 (id=4751): r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) 60.678219ms ago: executing program 3 (id=4752): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 60.597887ms ago: executing program 2 (id=4753): setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 619.653µs ago: executing program 0 (id=4754): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@newlink={0x38, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x4c040) 400.865µs ago: executing program 1 (id=4755): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/107, 0x6b}], 0x1, 0x6, 0x0) 291.71µs ago: executing program 2 (id=4756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}]}}}]}]}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 161.166µs ago: executing program 0 (id=4757): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) 0s ago: executing program 3 (id=4758): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x9, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:10652' (ED25519) to the list of known hosts. [ 78.313988][ T5910] cgroup: Unknown subsys name 'net' [ 78.462291][ T5910] cgroup: Unknown subsys name 'cpuset' [ 78.466818][ T5910] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.371224][ T5910] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.998859][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.002246][ T5950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.005383][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.007205][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.008491][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.009071][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.010045][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.010606][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.013452][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.013467][ T5951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.016619][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.018071][ T5951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.018344][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.018802][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.019267][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.019479][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.020443][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.021534][ T5953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.025039][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.050373][ T5947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.341912][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 83.370819][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 83.488047][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 83.527107][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.533637][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.536918][ T5937] bridge_slave_0: entered allmulticast mode [ 83.541013][ T5937] bridge_slave_0: entered promiscuous mode [ 83.564362][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 83.575116][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.578492][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.582552][ T5937] bridge_slave_1: entered allmulticast mode [ 83.586832][ T5937] bridge_slave_1: entered promiscuous mode [ 83.602514][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.605668][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.608871][ T5943] bridge_slave_0: entered allmulticast mode [ 83.613463][ T5943] bridge_slave_0: entered promiscuous mode [ 83.618598][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.621894][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.624683][ T5943] bridge_slave_1: entered allmulticast mode [ 83.627430][ T5943] bridge_slave_1: entered promiscuous mode [ 83.668521][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.713832][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.749287][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.796990][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.812622][ T5937] team0: Port device team_slave_0 added [ 83.824764][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.827973][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.832572][ T5944] bridge_slave_0: entered allmulticast mode [ 83.836675][ T5944] bridge_slave_0: entered promiscuous mode [ 83.852870][ T5937] team0: Port device team_slave_1 added [ 83.855581][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.858348][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.861163][ T5939] bridge_slave_0: entered allmulticast mode [ 83.864460][ T5939] bridge_slave_0: entered promiscuous mode [ 83.869036][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.872119][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.875077][ T5939] bridge_slave_1: entered allmulticast mode [ 83.878022][ T5939] bridge_slave_1: entered promiscuous mode [ 83.881299][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.883633][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.886607][ T5944] bridge_slave_1: entered allmulticast mode [ 83.891441][ T5944] bridge_slave_1: entered promiscuous mode [ 83.933239][ T5943] team0: Port device team_slave_0 added [ 83.935811][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.938170][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.947904][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.953166][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.955467][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.965081][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.971842][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.986017][ T5943] team0: Port device team_slave_1 added [ 83.997108][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.007851][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.014290][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.026427][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.029496][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.040906][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.081800][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.084891][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.097054][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.121379][ T5944] team0: Port device team_slave_0 added [ 84.148327][ T5939] team0: Port device team_slave_0 added [ 84.152889][ T5944] team0: Port device team_slave_1 added [ 84.168177][ T5939] team0: Port device team_slave_1 added [ 84.204886][ T5943] hsr_slave_0: entered promiscuous mode [ 84.208353][ T5943] hsr_slave_1: entered promiscuous mode [ 84.216982][ T5937] hsr_slave_0: entered promiscuous mode [ 84.220014][ T5937] hsr_slave_1: entered promiscuous mode [ 84.222863][ T5937] debugfs: 'hsr0' already exists in 'hsr' [ 84.225162][ T5937] Cannot create hsr debugfs directory [ 84.245383][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.248446][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.259922][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.265507][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.268887][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.281147][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.337086][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.340185][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.351986][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.364074][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.367023][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.378779][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.442480][ T5944] hsr_slave_0: entered promiscuous mode [ 84.445856][ T5944] hsr_slave_1: entered promiscuous mode [ 84.448934][ T5944] debugfs: 'hsr0' already exists in 'hsr' [ 84.451756][ T5944] Cannot create hsr debugfs directory [ 84.475239][ T5939] hsr_slave_0: entered promiscuous mode [ 84.478636][ T5939] hsr_slave_1: entered promiscuous mode [ 84.482039][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 84.484527][ T5939] Cannot create hsr debugfs directory [ 84.835046][ T5943] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.845041][ T5943] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.866704][ T5943] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.881231][ T5943] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.942856][ T5937] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.952608][ T5937] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.960693][ T5937] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.966293][ T5937] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.051515][ T5940] Bluetooth: hci0: command tx timeout [ 85.051658][ T5951] Bluetooth: hci3: command tx timeout [ 85.059174][ T5944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.066133][ T5944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.076898][ T5944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.102993][ T5944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.137603][ T5939] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.139596][ T5951] Bluetooth: hci2: command tx timeout [ 85.141213][ T5940] Bluetooth: hci1: command tx timeout [ 85.160810][ T5939] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.169230][ T5939] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.186638][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.193476][ T5939] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.239019][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.259631][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.263238][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.275136][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.302078][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.305127][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.311055][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.322118][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.325442][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.334567][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.338173][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.416396][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.457144][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.465978][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.482833][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.486861][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.489687][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.502780][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.506190][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.525046][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.528330][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.560992][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.563642][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.587827][ T5944] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.605138][ T5944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.638668][ T5939] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.644262][ T5939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.661660][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.683728][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.743765][ T5943] veth0_vlan: entered promiscuous mode [ 85.748626][ T5937] veth0_vlan: entered promiscuous mode [ 85.763240][ T5937] veth1_vlan: entered promiscuous mode [ 85.778666][ T5943] veth1_vlan: entered promiscuous mode [ 85.786537][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.818118][ T5937] veth0_macvtap: entered promiscuous mode [ 85.838927][ T5937] veth1_macvtap: entered promiscuous mode [ 85.846549][ T5943] veth0_macvtap: entered promiscuous mode [ 85.868654][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.874872][ T5943] veth1_macvtap: entered promiscuous mode [ 85.880670][ T5944] veth0_vlan: entered promiscuous mode [ 85.895148][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.901422][ T5944] veth1_vlan: entered promiscuous mode [ 85.914579][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.923455][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.936364][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.961214][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.964853][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.971505][ T5939] veth0_vlan: entered promiscuous mode [ 85.976062][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.980949][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.984340][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.987794][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.003349][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.006886][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.012175][ T5944] veth0_macvtap: entered promiscuous mode [ 86.026901][ T5944] veth1_macvtap: entered promiscuous mode [ 86.030167][ T5939] veth1_vlan: entered promiscuous mode [ 86.065574][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.099689][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.102766][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.103669][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.114364][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.117818][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.124502][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.140795][ T5939] veth0_macvtap: entered promiscuous mode [ 86.145478][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.153145][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.170671][ T5939] veth1_macvtap: entered promiscuous mode [ 86.180559][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.186693][ T382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.191172][ T382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.199471][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.203761][ T382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.207403][ T382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.209364][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.225921][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.231476][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.244380][ T5943] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.254371][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.275032][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.317789][ T382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.338853][ T53] cfg80211: failed to load regulatory.db [ 86.339504][ T382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.390923][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.394953][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.397940][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.397957][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.442161][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.446616][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.747337][ T6048] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 86.958042][ T6073] tmpfs: Bad value for 'mpol' [ 87.129573][ T5940] Bluetooth: hci0: command tx timeout [ 87.139984][ T5940] Bluetooth: hci3: command tx timeout [ 87.217013][ T5940] Bluetooth: hci1: command tx timeout [ 87.217210][ T5951] Bluetooth: hci2: command tx timeout [ 87.583082][ T6149] ======================================================= [ 87.583082][ T6149] WARNING: The mand mount option has been deprecated and [ 87.583082][ T6149] and is ignored by this kernel. Remove the mand [ 87.583082][ T6149] option from the mount to silence this warning. [ 87.583082][ T6149] ======================================================= [ 87.601080][ T6149] qnx4: unable to read the superblock [ 87.858705][ T6177] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 88.632638][ T6232] random: crng reseeded on system resumption [ 88.929798][ T6254] virtio-fs: tag not found [ 89.097529][ T6265] Option 'TXƮ' to dns_resolver key: bad/missing value [ 89.214485][ T5951] Bluetooth: hci3: command tx timeout [ 89.217006][ T5951] Bluetooth: hci0: command tx timeout [ 89.291556][ T5951] Bluetooth: hci2: command tx timeout [ 89.291589][ T5940] Bluetooth: hci1: command tx timeout [ 89.498771][ T6320] SQUASHFS error: Failed to read block 0x0: -5 [ 89.501503][ T6320] unable to read squashfs_super_block [ 89.568722][ T6331] syz.1.152 (6331): attempted to duplicate a private mapping with mremap. This is not supported. [ 89.838029][ T6377] hpfs: Bad magic ... probably not HPFS [ 90.079504][ T5945] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 90.269002][ T5945] usb 7-1: unable to get BOS descriptor or descriptor too short [ 90.274041][ T5945] usb 7-1: not running at top speed; connect to a high speed hub [ 90.286471][ T5945] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 90.308284][ T5945] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.313330][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.315952][ T5945] usb 7-1: Product: syz [ 90.317331][ T5945] usb 7-1: Manufacturer: syz [ 90.318849][ T5945] usb 7-1: SerialNumber: syz [ 90.331295][ T6370] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 90.410816][ T6423] tmpfs: Bad value for 'size' [ 90.548536][ T5945] cdc_ncm 7-1:1.0: bind() failure [ 90.555149][ T5945] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 90.559604][ T5945] cdc_ncm 7-1:1.1: bind() failure [ 90.565457][ T5945] usb 7-1: USB disconnect, device number 2 [ 90.659876][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 90.823532][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 90.827376][ T9] usb 6-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 8 [ 90.830960][ T9] usb 6-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.836295][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 90.851276][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 90.855119][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.857828][ T9] usb 6-1: Product: syz [ 90.869594][ T9] usb 6-1: Manufacturer: syz [ 90.871599][ T9] usb 6-1: SerialNumber: syz [ 90.889066][ T6421] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 90.990210][ T6451] trusted_key: encrypted_key: insufficient parameters specified [ 91.110210][ T9] usb 6-1: USB disconnect, device number 2 [ 91.300033][ T5940] Bluetooth: hci3: command tx timeout [ 91.300700][ T5951] Bluetooth: hci0: command tx timeout [ 91.370918][ T5951] Bluetooth: hci1: command tx timeout [ 91.452510][ T6478] capability: warning: `syz.0.225' uses 32-bit capabilities (legacy support in use) [ 91.460182][ T5945] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 91.628831][ T5945] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 91.633371][ T5945] usb 7-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 91.636310][ T5945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.640901][ T5945] usb 7-1: config 0 descriptor?? [ 91.643468][ T6465] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.856162][ T5945] usbhid 7-1:0.0: can't add hid device: -71 [ 91.858198][ T5945] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 91.869570][ T5945] usb 7-1: USB disconnect, device number 3 [ 92.036463][ T6516] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 92.171424][ T6522] tmpfs: Bad value for 'mpol' [ 92.631696][ T6559] qnx4: no qnx4 filesystem (no root dir). [ 92.695631][ T6556] can: request_module (can-proto-3) failed. [ 92.966759][ T6595] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 93.007373][ T6601] zonefs (nullb0) ERROR: Not a zoned block device [ 93.435288][ T6666] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 93.440047][ T6666] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 93.444759][ T6666] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 93.448186][ T6666] UDF-fs: Scanning with blocksize 512 failed [ 93.454455][ T6666] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 93.458759][ T6666] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 93.476332][ T6666] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 93.479021][ T6666] UDF-fs: Scanning with blocksize 1024 failed [ 93.481714][ T6666] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 93.484864][ T6666] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 93.487983][ T6666] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 93.492528][ T6666] UDF-fs: Scanning with blocksize 2048 failed [ 93.495002][ T6666] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 93.509928][ T6666] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 93.516276][ T6666] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 93.519063][ T6666] UDF-fs: Scanning with blocksize 4096 failed [ 93.522549][ T6666] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 93.574820][ T6682] affs: No valid root block on device sr0 [ 93.821823][ T40] audit: type=1326 audit(1773309707.624:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.1.343" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x0 [ 94.179913][ T5945] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 94.350251][ T5945] usb 8-1: too many configurations: 178, using maximum allowed: 8 [ 94.365683][ T5945] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 94.369695][ T5945] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.373081][ T5945] usb 8-1: Product: syz [ 94.374863][ T5945] usb 8-1: Manufacturer: syz [ 94.376851][ T5945] usb 8-1: SerialNumber: syz [ 94.385150][ T5945] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 94.410798][ T6027] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 94.499957][ T1332] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 94.641932][ T6022] usb 8-1: USB disconnect, device number 2 [ 94.670928][ T1332] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 94.674633][ T1332] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 94.681248][ T1332] usb 5-1: string descriptor 0 read error: -22 [ 94.683524][ T1332] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.686843][ T1332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.709032][ T6831] tmpfs: Bad value for 'mpol' [ 94.908138][ T1332] cdc_ncm 5-1:1.0: bind() failure [ 94.914932][ T1332] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 94.917308][ T1332] cdc_ncm 5-1:1.1: bind() failure [ 94.922174][ T1332] usb 5-1: USB disconnect, device number 2 [ 95.198801][ T40] audit: type=1400 audit(1773309709.004:3): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6881 comm="syz.3.420" [ 95.462639][ T6027] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 95.466015][ T6027] ath9k_htc: Failed to initialize the device [ 95.470535][ T6022] usb 8-1: ath9k_htc: USB layer deinitialized [ 95.747758][ T6948] hfsplus: unable to find HFS+ superblock [ 95.849674][ T29] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 96.021082][ T29] usb 5-1: config 6 has an invalid interface number: 7 but max is 0 [ 96.024287][ T29] usb 5-1: config 6 has no interface number 0 [ 96.026310][ T29] usb 5-1: config 6 interface 7 has no altsetting 0 [ 96.030143][ T29] usb 5-1: New USB device found, idVendor=05c6, idProduct=9055, bcdDevice=62.d8 [ 96.033170][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.035784][ T29] usb 5-1: Product: syz [ 96.037176][ T29] usb 5-1: Manufacturer: syz [ 96.038858][ T29] usb 5-1: SerialNumber: syz [ 96.226766][ T5951] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 96.288608][ T29] usb 5-1: USB disconnect, device number 3 [ 96.917919][ T7059] libceph: secret too big 289 [ 96.975188][ T7061] could not allocate digest TFM handle crc32c-generic [ 97.836856][ T7174] could not allocate digest TFM handle crc32c-generic [ 99.008407][ T7272] Can't find a SQUASHFS superblock on nullb0 [ 99.013189][ T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 99.159922][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 99.169902][ T9] usb 7-1: config 3 has an invalid interface number: 235 but max is 1 [ 99.172445][ T9] usb 7-1: config 3 has an invalid interface number: 130 but max is 1 [ 99.175038][ T9] usb 7-1: config 3 has no interface number 0 [ 99.176960][ T9] usb 7-1: config 3 has no interface number 1 [ 99.178881][ T9] usb 7-1: config 3 interface 235 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 99.185411][ T9] usb 7-1: config 3 interface 235 has no altsetting 0 [ 99.187593][ T9] usb 7-1: config 3 interface 130 has no altsetting 0 [ 99.210037][ T9] usb 7-1: New USB device found, idVendor=20f4, idProduct=624d, bcdDevice=17.50 [ 99.212320][ T40] audit: type=1326 audit(1773312291.027:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.3.626" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f64f6c code=0x0 [ 99.212706][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.229499][ T9] usb 7-1: Product: syz [ 99.230795][ T9] usb 7-1: Manufacturer: syz [ 99.232188][ T9] usb 7-1: SerialNumber: syz [ 99.237039][ T7260] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 99.328015][ T7308] Can't find a SQUASHFS superblock on nullb0 [ 99.460063][ T9] usb 7-1: USB disconnect, device number 4 [ 99.847664][ T7359] NILFS (loop0): device size too small [ 100.114895][ T7392] futex_wake_op: syz.1.671 tries to shift op by -1; fix this program [ 100.324598][ T7424] futex_wake_op: syz.0.689 tries to shift op by -1; fix this program [ 100.349215][ T5951] Bluetooth: hci1: unexpected event 0x30 length: 4 > 3 [ 100.416175][ T7438] NILFS (loop2): device size too small [ 100.546043][ T5951] Bluetooth: hci3: unexpected event 0x30 length: 4 > 3 [ 101.014048][ T7532] Mount JFS Failure: -5 [ 101.540904][ T7606] tmpfs: Bad value for 'mpol' [ 101.751987][ T40] audit: type=1326 audit(1773312293.568:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7634 comm="syz.2.792" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f24f6c code=0x0 [ 102.156825][ T7674] ISOFS: Unable to identify CD-ROM format. [ 104.200327][ T7780] 9p: Could not find request transport: xen [ 104.319776][ T7799] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 104.998550][ T7888] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 105.151338][ T7911] tmpfs: Bad value for 'mpol' [ 105.239300][ T7918] kAFS: unparsable volume name [ 105.284218][ T7924] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 105.469068][ T7955] Malformed UNC in devname [ 105.469068][ T7955] [ 105.472120][ T7955] CIFS: VFS: Malformed UNC in devname [ 105.509615][ T40] audit: type=1326 audit(1773312297.328:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.3.953" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x0 [ 105.588739][ T7967] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 105.597396][ T7967] VFS: Can't find a romfs filesystem on dev nullb0. [ 105.597396][ T7967] [ 105.699327][ T7983] Malformed UNC in devname [ 105.699327][ T7983] [ 105.701603][ T7983] CIFS: VFS: Malformed UNC in devname [ 105.847113][ T40] audit: type=1326 audit(1773312297.658:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.1.970" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x0 [ 106.242747][ T8058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.290484][ T40] audit: type=1326 audit(1773312298.108:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.2.1004" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x0 [ 106.349928][ T40] audit: type=1326 audit(1773312298.168:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.3.1009" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x0 [ 106.584091][ T8102] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 106.587469][ T8102] VFS: Can't find a romfs filesystem on dev nullb0. [ 106.587469][ T8102] [ 106.895490][ T8144] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 106.942625][ T8148] kAFS: unparsable volume name [ 107.086904][ T8168] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 107.221591][ T8190] ptrace attach of "/syz-executor exec"[5943] was attempted by "/syz-executor exec"[8190] [ 107.785490][ T8280] cgroup: Invalid name [ 107.955637][ T8308] ptrace attach of "/syz-executor exec"[5944] was attempted by "/syz-executor exec"[8308] [ 108.106377][ T40] audit: type=1326 audit(1773312299.918:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8329 comm="syz.1.1143" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x0 [ 109.112116][ T8488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.867898][ T8603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.939247][ T40] audit: type=1326 audit(1773312301.759:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8613 comm="syz.0.1279" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33f6c code=0x0 [ 110.157017][ T40] audit: type=1326 audit(1773312301.969:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8645 comm="syz.3.1293" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x0 [ 110.331113][ T8664] tmpfs: Bad value for 'mpol' [ 110.394750][ T8674] tmpfs: Bad value for 'mpol' [ 110.521975][ T8688] Process accounting resumed [ 110.637060][ T8708] Invalid ELF header type: 3 != 1 [ 110.890130][ T8750] capability: warning: `syz.2.1347' uses deprecated v2 capabilities in a way that may be insecure [ 110.957229][ T8762] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 110.960071][ T8762] PKCS7: Only support pkcs7_signedData type [ 110.966678][ T8759] Process accounting resumed [ 111.101387][ T8785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.137212][ T8788] Process accounting resumed [ 111.357235][ T8812] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 112.544116][ T8967] tmpfs: Unknown parameter 'noinode32' [ 112.803202][ T9007] tmpfs: Bad value for 'mpol' [ 113.986891][ T9186] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 113.997904][ T9186] CIFS mount error: No usable UNC path provided in device string! [ 113.997904][ T9186] [ 114.002196][ T9186] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 114.073399][ T40] audit: type=1326 audit(1773312305.889:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9198 comm="syz.1.1571" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x0 [ 114.105723][ T9205] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 114.109395][ T9205] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 114.114132][ T9205] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 114.119587][ T9205] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 114.428907][ T9253] qnx6: unable to read the first superblock [ 114.431874][ T9253] qnx6: unable to read the first superblock [ 114.434450][ T9253] qnx6: unable to read the first superblock [ 114.521988][ T9268] IPv6: addrconf: prefix option has invalid lifetime [ 114.601358][ T9283] omfs: Invalid superblock (0) [ 115.278029][ T9359] gfs2: error -5 reading superblock [ 115.294977][ T9363] MINIX-fs: blocksize too small for device [ 115.489601][ T9397] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 115.595830][ T9415] tmpfs: Bad value for 'mpol' [ 115.655182][ T9425] hpfs: hpfs_map_sector(): read error [ 116.150083][ T9518] futex_wake_op: syz.2.1729 tries to shift op by 32; fix this program [ 116.274531][ T9543] exFAT-fs (nbd0): unable to read boot sector [ 116.276813][ T9543] exFAT-fs (nbd0): failed to read boot sector [ 116.279910][ T9543] exFAT-fs (nbd0): failed to recognize exfat type [ 116.787625][ T9620] syz.3.1780(9620): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 117.048923][ T9656] /dev/sr0: Can't open blockdev [ 117.204814][ T9697] vxfs: unable to read disk superblock at 1 [ 117.212088][ T9697] vxfs: unable to read disk superblock at 8 [ 117.214570][ T9697] vxfs: can't find superblock. [ 117.263374][ T5947] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 117.438109][ T9737] befs: (nullb0): No write support. Marking filesystem read-only [ 117.446572][ T9737] befs: (nullb0): invalid magic header [ 118.162218][ T5953] Bluetooth: hci1: unexpected event for opcode 0x0c2d [ 118.219492][ T9848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.506165][ T9769] syz.2.1853: page allocation failure: order:0, mode:0x10cc0(GFP_KERNEL|__GFP_NORETRY), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 118.510577][ T9769] CPU: 0 UID: 0 PID: 9769 Comm: syz.2.1853 Not tainted syzkaller #0 PREEMPT(full) [ 118.510592][ T9769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.510599][ T9769] Call Trace: [ 118.510603][ T9769] [ 118.510608][ T9769] dump_stack_lvl+0x100/0x190 [ 118.510628][ T9769] warn_alloc.cold+0x95/0x1c1 [ 118.510648][ T9769] ? __pfx_warn_alloc+0x10/0x10 [ 118.510664][ T9769] ? find_held_lock+0x2b/0x80 [ 118.510674][ T9769] ? psi_memstall_leave+0x19c/0x2e0 [ 118.510704][ T9769] ? psi_memstall_leave+0x1df/0x2e0 [ 118.510717][ T9769] ? psi_memstall_leave+0x1e4/0x2e0 [ 118.510729][ T9769] ? lockdep_hardirqs_on+0x78/0x100 [ 118.510745][ T9769] __alloc_frozen_pages_noprof+0xf36/0x2ba0 [ 118.510768][ T9769] ? __schedule+0x2fd3/0x6120 [ 118.510781][ T9769] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 118.510801][ T9769] ? irqentry_exit+0x180/0x670 [ 118.510817][ T9769] ? __pfx___schedule+0x10/0x10 [ 118.510830][ T9769] ? preempt_schedule_irq+0x7b/0x90 [ 118.510843][ T9769] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.510863][ T9769] ? policy_nodemask+0xed/0x4f0 [ 118.510876][ T9769] alloc_pages_mpol+0x1fb/0x550 [ 118.510888][ T9769] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 118.510901][ T9769] ? alloc_pages_noprof+0x142/0x390 [ 118.510913][ T9769] alloc_pages_noprof+0x131/0x390 [ 118.510925][ T9769] kimage_alloc_pages+0x72/0x380 [ 118.510945][ T9769] kimage_alloc_control_pages+0x157/0xa20 [ 118.510959][ T9769] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 118.510974][ T9769] do_kexec_load+0x275/0x810 [ 118.510988][ T9769] ? __pfx_do_kexec_load+0x10/0x10 [ 118.511003][ T9769] __ia32_compat_sys_kexec_load+0x37f/0x400 [ 118.511018][ T9769] ? __pfx___ia32_compat_sys_kexec_load+0x10/0x10 [ 118.511035][ T9769] __do_fast_syscall_32+0xe3/0x8c0 [ 118.511050][ T9769] do_fast_syscall_32+0x32/0x70 [ 118.511065][ T9769] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.511079][ T9769] RIP: 0023:0xf7f24f6c [ 118.511088][ T9769] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 118.511098][ T9769] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000011b [ 118.511109][ T9769] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000003 [ 118.511120][ T9769] RDX: 0000000080001080 RSI: 00000000003e0000 RDI: 0000000000000000 [ 118.511126][ T9769] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.511132][ T9769] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 118.511138][ T9769] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.511151][ T9769] [ 118.511155][ T9769] Mem-Info: [ 118.602466][ T9769] active_anon:230 inactive_anon:628 isolated_anon:0 [ 118.602466][ T9769] active_file:377 inactive_file:18031 isolated_file:0 [ 118.602466][ T9769] unevictable:1768 dirty:142 writeback:0 [ 118.602466][ T9769] slab_reclaimable:5914 slab_unreclaimable:50925 [ 118.602466][ T9769] mapped:22754 shmem:1779 pagetables:1260 [ 118.602466][ T9769] sec_pagetables:303 bounce:0 [ 118.602466][ T9769] kernel_misc_reclaimable:0 [ 118.602466][ T9769] free:19363 free_pcp:623 free_cma:0 [ 118.617486][ T9769] Node 0 active_anon:56kB inactive_anon:36kB active_file:384kB inactive_file:548kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:144kB dirty:12kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7944kB pagetables:1376kB sec_pagetables:1136kB all_unreclaimable? yes Balloon:0kB [ 118.632534][ T9769] Node 1 active_anon:864kB inactive_anon:2476kB active_file:1124kB inactive_file:71576kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:90872kB dirty:556kB writeback:0kB shmem:3580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4708kB pagetables:3664kB sec_pagetables:76kB all_unreclaimable? no Balloon:0kB [ 118.649435][ T9769] Node 0 DMA free:2824kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 118.662832][ T9769] lowmem_reserve[]: 0 285 285 285 285 [ 118.664964][ T9769] Node 0 DMA32 free:24788kB boost:12288kB min:25360kB low:28628kB high:31896kB reserved_highatomic:2048KB free_highatomic:552KB active_anon:56kB inactive_anon:36kB active_file:384kB inactive_file:548kB unevictable:3536kB writepending:12kB zspages:2336kB present:1032196kB managed:292632kB mlocked:0kB bounce:0kB free_pcp:600kB local_pcp:176kB free_cma:0kB [ 118.677414][ T9769] lowmem_reserve[]: 0 0 0 0 0 [ 118.679577][ T9769] Node 1 DMA32 free:49892kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1064kB inactive_anon:2276kB active_file:1124kB inactive_file:70276kB unevictable:3536kB writepending:556kB zspages:4644kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:3036kB local_pcp:940kB free_cma:0kB [ 118.697506][ T9769] lowmem_reserve[]: 0 0 0 0 0 [ 118.699763][ T9769] Node 0 DMA: 134*4kB (UM) 20*8kB (UM) 15*16kB (UM) 9*32kB (UM) 7*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2824kB [ 118.717512][ T9769] Node 0 DMA32: 325*4kB (UE) 412*8kB (UMEH) 137*16kB (UMEH) 261*32kB (UMEH) 71*64kB (UMEH) 11*128kB (UME) 8*256kB (UME) 1*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 24676kB [ 118.723528][ T9769] Node 1 DMA32: 747*4kB (UME) 726*8kB (UME) 310*16kB (UME) 128*32kB (UME) 58*64kB (UME) 48*128kB (UME) 24*256kB (UME) 21*512kB (UME) 5*1024kB (M) 0*2048kB 0*4096kB = 49724kB [ 118.729509][ T9769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.737823][ T9769] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.741588][ T9769] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.745943][ T9769] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.750198][ T9769] 20064 total pagecache pages [ 118.751980][ T9769] 229 pages in swap cache [ 118.753935][ T9769] Free swap = 97712kB [ 118.755778][ T9769] Total swap = 124996kB [ 118.758711][ T9769] 524155 pages RAM [ 118.760536][ T9769] 0 pages HighMem/MovableOnly [ 118.762622][ T9769] 210104 pages reserved [ 118.764525][ T9769] 0 pages cma reserved [ 118.901549][ T5951] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 119.083850][ T5953] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 119.137553][ T5953] Bluetooth: hci0: command 0x0406 tx timeout [ 119.220997][ T9941] /dev/sr0: Can't open blockdev [ 119.458518][ T9769] kexec: Could not allocate control_code_buffer [ 119.692798][T10016] qnx6: unable to read the first superblock [ 119.694925][T10016] qnx6: unable to read the first superblock [ 119.698124][T10016] qnx6: unable to read the first superblock [ 119.926322][ T5940] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 120.409872][T10122] omfs: Invalid superblock (0) [ 120.492083][T10138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.556313][T10151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.649604][T10161] IPv6: addrconf: prefix option has invalid lifetime [ 120.759921][ T5940] Bluetooth: hci3: unexpected event for opcode 0x201c [ 120.830977][T10182] IPv6: addrconf: prefix option has invalid lifetime [ 120.908273][T10180] /dev/sr0: Can't open blockdev [ 120.967860][ T5951] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 121.084526][T10208] MINIX-fs: blocksize too small for device [ 121.319540][T10243] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 121.687823][ T5947] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 121.687869][ T5951] Bluetooth: hci2: command 0x206a tx timeout [ 122.537323][T10353] futex_wake_op: syz.1.2138 tries to shift op by 32; fix this program [ 122.705149][ T40] audit: type=1326 audit(1773312570.518:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10373 comm="syz.2.2149" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x0 [ 122.799089][T10385] exFAT-fs (nbd1): unable to read boot sector [ 122.801746][T10385] exFAT-fs (nbd1): failed to read boot sector [ 122.804322][T10385] exFAT-fs (nbd1): failed to recognize exfat type [ 122.806772][T10224] kexec: Could not allocate control_code_buffer [ 122.819084][T10388] mmap: syz.0.2155 (10388) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 122.855524][T10391] exFAT-fs (nullb0): invalid boot record signature [ 122.858567][T10391] exFAT-fs (nullb0): failed to read boot sector [ 122.860719][T10391] exFAT-fs (nullb0): failed to recognize exfat type [ 123.036388][T10417] exFAT-fs (nullb0): invalid boot record signature [ 123.041600][T10417] exFAT-fs (nullb0): failed to read boot sector [ 123.044546][T10417] exFAT-fs (nullb0): failed to recognize exfat type [ 123.398296][T10480] dns_resolver: Unsupported server list version (0) [ 123.619890][ T5951] Bluetooth: hci1: unexpected event for opcode 0x2010 [ 123.667566][ T5951] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 123.714353][T10531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.308669][T10604] vxfs: unable to read disk superblock at 1 [ 124.311047][T10604] vxfs: unable to read disk superblock at 8 [ 124.318250][T10604] vxfs: can't find superblock. [ 124.430916][T10622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.122805][ T5951] Bluetooth: hci2: unexpected event for opcode 0x200d [ 125.292945][T10748] tmpfs: Bad value for 'mpol' [ 125.540161][ T5951] Bluetooth: hci3: unexpected event for opcode 0x200d [ 125.735538][T10824] erofs (device loop0): cannot find valid erofs superblock [ 125.783208][ T40] audit: type=1326 audit(2000000000.229:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10829 comm="syz.2.2367" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x0 [ 126.105308][T10887] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 126.108393][T10887] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.118553][T10887] vhci_hcd vhci_hcd.0: Device attached [ 126.124457][T10889] vhci_hcd: connection closed [ 126.125673][ T60] vhci_hcd vhci_hcd.1: stop threads [ 126.133989][ T60] vhci_hcd vhci_hcd.1: release socket [ 126.136362][ T60] vhci_hcd vhci_hcd.1: disconnect device [ 126.138455][T10894] vxfs: WRONG superblock magic 00000000 at 1 [ 126.142043][T10894] vxfs: WRONG superblock magic 00000000 at 8 [ 126.144736][T10894] vxfs: can't find superblock. [ 126.589854][T10966] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 126.746666][T10988] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 127.386535][T11097] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 127.492813][T11119] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 127.571778][T11133] tmpfs: Bad value for 'mpol' [ 127.803245][T11175] No source specified [ 127.949367][T11191] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 127.978297][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 128.129948][ T34] usb 7-1: config 0 has an invalid interface number: 121 but max is 0 [ 128.133601][ T34] usb 7-1: config 0 has no interface number 0 [ 128.137773][ T34] usb 7-1: config 0 interface 121 has no altsetting 0 [ 128.141230][ T34] usb 7-1: New USB device found, idVendor=08e9, idProduct=0100, bcdDevice=7f.b9 [ 128.145232][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.162152][ T34] usb 7-1: config 0 descriptor?? qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x108000) [ 128.215894][T11223] bpf: Bad value for 'mode' [ 128.249863][ T1113] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 128.252865][ T1113] ata1: failed to read log page 10h (errno=-5) [ 128.255568][ T1113] ata1.00: exception Emask 0x1 SAct 0x804000 SErr 0x0 action 0x0 [ 128.260588][ T1113] ata1.00: irq_stat 0x41000000 [ 128.263059][ T1113] ata1.00: failed command: READ FPDMA QUEUED [ 128.265837][ T1113] ata1.00: cmd 60/40:70:d6:3d:01/08:00:00:00:00/40 tag 14 ncq dma 1081344 in [ 128.265837][ T1113] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 128.273562][ T1113] ata1.00: status: { DRDY } [ 128.275624][ T1113] ata1.00: error: { ABRT } [ 128.277354][ T1113] ata1.00: failed command: READ FPDMA QUEUED [ 128.280501][ T1113] ata1.00: cmd 60/60:b8:2e:46:01/03:00:00:00:00/40 tag 23 ncq dma 442368 in [ 128.280501][ T1113] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 128.288237][ T1113] ata1.00: status: { DRDY } [ 128.290418][ T1113] ata1.00: error: { ABRT } [ 128.298849][ T1113] ata1.00: configured for UDMA/100 [ 128.302455][ T1113] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 128.306810][ T1113] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 128.310026][ T1113] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 128.313167][ T1113] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 3d d6 00 08 40 00 [ 128.316995][ T1113] I/O error, dev sda, sector 81366 op 0x0:(READ) flags 0x80700 phys_seg 47 prio class 2 [ 128.323305][ T1113] sd 0:0:0:0: [sda] tag#23 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 128.327471][ T1113] sd 0:0:0:0: [sda] tag#23 Sense Key : Aborted Command [current] [ 128.333310][ T1113] sd 0:0:0:0: [sda] tag#23 Add. Sense: No additional sense information [ 128.336975][ T1113] sd 0:0:0:0: [sda] tag#23 CDB: Read(10) 28 00 00 01 46 2e 00 03 60 00 [ 128.341644][ T1113] I/O error, dev sda, sector 83502 op 0x0:(READ) flags 0x80700 phys_seg 12 prio class 2 [ 128.345900][ T1113] ata1: EH complete [ 128.378426][ T34] usb 7-1: string descriptor 0 read error: -71 [ 128.382364][ T34] ir_usb 7-1:0.121: required endpoints missing [ 128.388133][ T34] usb 7-1: USB disconnect, device number 5 [ 128.447399][T11241] No source specified [ 128.818753][T11283] bpf: Bad value for 'mode' [ 129.101749][ T5951] Bluetooth: hci0: unexpected event for opcode 0x2031 [ 130.395674][ T5951] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 130.733546][T11603] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 130.736192][T11603] cramfs: wrong magic [ 130.849379][T11621] syz.2.2761 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 130.953747][T11642] PKCS7: Unknown OID: [4] 2.19.1.0.0.0.4.0.0.0.0 [ 130.958410][T11642] PKCS7: Only support pkcs7_signedData type [ 131.062324][T11659] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 131.065793][T11659] cramfs: wrong magic [ 131.073051][T11663] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 131.075922][T11663] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 131.080930][T11663] vhci_hcd vhci_hcd.0: Device attached [ 131.090400][T11664] vhci_hcd: connection closed [ 131.091156][ T155] vhci_hcd vhci_hcd.0: stop threads [ 131.094974][ T155] vhci_hcd vhci_hcd.0: release socket [ 131.096724][ T155] vhci_hcd vhci_hcd.0: disconnect device [ 131.228714][T11686] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 131.232654][T11686] cramfs: wrong magic [ 131.663235][ T5951] Bluetooth: min 0 < 6 [ 131.792201][T11782] Invalid source name [ 131.793610][T11782] UBIFS error (pid: 11782): cannot open "/dev/sg0", error -22 [ 132.218541][T11875] tmpfs: Bad value for 'mpol' [ 132.328456][ T5951] Bluetooth: hci2: command 0x206a tx timeout [ 132.508255][ T34] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 132.566276][ T5951] Bluetooth: hci3: Malformed Event: 0x02 [ 132.659707][ T34] usb 7-1: Using ep0 maxpacket: 16 [ 132.663483][ T34] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.667439][ T34] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 132.672809][ T34] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 132.676371][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.679863][ T34] usb 7-1: Product: syz [ 132.681696][ T34] usb 7-1: Manufacturer: syz [ 132.683717][ T34] usb 7-1: SerialNumber: syz [ 132.698429][ T34] r8152-cfgselector 7-1: Unknown version 0x0000 [ 132.701058][ T34] r8152-cfgselector 7-1: config 0 descriptor?? [ 132.920367][ T5945] r8152-cfgselector 7-1: USB disconnect, device number 6 [ 133.645401][T12009] tmpfs: Bad value for 'mpol' [ 133.688385][ T5951] Bluetooth: hci1: command 0x0406 tx timeout [ 134.187194][T12098] qnx6: unable to set blocksize [ 134.449593][T12003] orangefs_mount: mount request failed with -4 [ 134.981312][T12155] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 134.981312][T12155] Ue[%#s' qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x8c000) [ 135.355657][T12118] syz.0.3005 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 135.389019][T12118] CPU: 1 UID: 0 PID: 12118 Comm: syz.0.3005 Not tainted syzkaller #0 PREEMPT(full) [ 135.389036][T12118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.389043][T12118] Call Trace: [ 135.389047][T12118] [ 135.389051][T12118] dump_stack_lvl+0x100/0x190 [ 135.389072][T12118] dump_header+0xfb/0x606 [ 135.389085][T12118] oom_kill_process.cold+0xd/0x330 [ 135.389098][T12118] out_of_memory+0x340/0x14f0 [ 135.389117][T12118] ? __pfx_out_of_memory+0x10/0x10 [ 135.389138][T12118] mem_cgroup_out_of_memory+0xc6/0x130 [ 135.389154][T12118] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 135.389168][T12118] ? find_held_lock+0x2b/0x80 [ 135.389181][T12118] ? do_raw_spin_unlock+0x145/0x1e0 [ 135.389198][T12118] ? _raw_spin_unlock+0x28/0x50 [ 135.389211][T12118] try_charge_memcg+0x652/0xc90 [ 135.389226][T12118] ? __pfx_try_charge_memcg+0x10/0x10 [ 135.389240][T12118] ? find_held_lock+0x2b/0x80 [ 135.389249][T12118] ? rcu_read_unlock+0x17/0x60 [ 135.389260][T12118] ? rcu_read_unlock+0x17/0x60 [ 135.389273][T12118] charge_memcg+0xa6/0x280 [ 135.389284][T12118] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 135.389300][T12118] __swap_cache_prepare_and_add+0x528/0x9e0 [ 135.389321][T12118] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 135.389336][T12118] ? __pfx_swap_entry_swapped+0x10/0x10 [ 135.389351][T12118] swap_cache_alloc_folio+0x1cb/0x300 [ 135.389367][T12118] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 135.389384][T12118] ? __lock_acquire+0x4a5/0x2630 [ 135.389400][T12118] swap_cluster_readahead+0x53b/0x770 [ 135.389419][T12118] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 135.389437][T12118] ? __lock_acquire+0x4a5/0x2630 [ 135.389451][T12118] ? css_rstat_updated+0x1ce/0x5a0 [ 135.389473][T12118] ? get_vma_policy+0x23f/0x3b0 [ 135.389487][T12118] swapin_readahead+0x160/0x12c0 [ 135.389507][T12118] ? __pfx_swapin_readahead+0x10/0x10 [ 135.389522][T12118] ? find_held_lock+0x2b/0x80 [ 135.389531][T12118] ? swap_table_get+0x103/0x2c0 [ 135.389545][T12118] ? swap_table_get+0x103/0x2c0 [ 135.389561][T12118] ? swap_table_get+0x10d/0x2c0 [ 135.389576][T12118] ? swap_cache_get_folio+0x1ae/0x600 [ 135.389591][T12118] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 135.389605][T12118] ? __pfx_get_swap_device+0x10/0x10 [ 135.389619][T12118] ? do_swap_page+0xb2e/0x6900 [ 135.389632][T12118] do_swap_page+0xb2e/0x6900 [ 135.389654][T12118] ? __pfx_do_swap_page+0x10/0x10 [ 135.389669][T12118] ? do_fault+0x9d6/0x1990 [ 135.389682][T12118] ? rcu_is_watching+0x12/0xc0 [ 135.389698][T12118] ? __pte_offset_map+0x179/0x310 [ 135.389711][T12118] __handle_mm_fault+0x18c1/0x2b60 [ 135.389728][T12118] ? reacquire_held_locks+0xce/0x1e0 [ 135.389743][T12118] ? __pfx___handle_mm_fault+0x10/0x10 [ 135.389760][T12118] ? lock_vma_under_rcu+0x17c/0x590 [ 135.389783][T12118] handle_mm_fault+0x36d/0xa20 [ 135.389801][T12118] do_user_addr_fault+0x5a3/0x12f0 [ 135.389823][T12118] exc_page_fault+0x6f/0xd0 [ 135.389836][T12118] asm_exc_page_fault+0x26/0x30 [ 135.389847][T12118] RIP: 0023:0xf703d9a4 [ 135.389860][T12118] Code: Unable to access opcode bytes at 0xf703d97a. [ 135.389865][T12118] RSP: 002b:00000000ffa818f0 EFLAGS: 00010293 [ 135.389874][T12118] RAX: 000000000c242d94 RBX: 00000000f6bff008 RCX: 0000000000000003 [ 135.389881][T12118] RDX: 0000000000000008 RSI: 0000000000000001 RDI: 00000000f73f4fe8 [ 135.389887][T12118] RBP: 00000000f7f25610 R08: 0000000000000000 R09: 0000000000000000 [ 135.389893][T12118] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 135.389899][T12118] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.389912][T12118] [ 135.389916][T12118] memory: usage 304604kB, limit 307200kB, failcnt 352 [ 135.402738][ T1113] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 135.424327][T12118] memory+swap: usage 296928kB, limit 9007199254740988kB, failcnt 0 [ 135.428373][ T1113] ata1: failed to read log page 10h (errno=-5) [ 135.448232][T12118] kmem: usage 286480kB, limit 9007199254740988kB, failcnt 0 [ 135.452609][ T1113] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 135.452943][T12118] Memory cgroup stats for [ 135.454551][ T1113] ata1.00: irq_stat 0x41000000 [ 135.456330][T12118] /syz0 [ 135.458078][ T1113] ata1.00: failed command: READ FPDMA QUEUED [ 135.458088][ T1113] ata1.00: cmd 60/60:f0:2e:08:04/04:00:00:00:00/40 tag 30 ncq dma 573440 in [ 135.458088][ T1113] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 135.483246][T12118] : [ 135.483644][ T1113] ata1.00: status: { DRDY } [ 135.485387][T12118] cache 8192 [ 135.487650][ T1113] ata1.00: error: { ABRT } [ 135.498263][T12118] rss 4096 [ 135.499454][ T1113] ata1.00: configured for UDMA/100 [ 135.499913][T12118] rss_huge 0 [ 135.499919][T12118] shmem 0 [ 135.502279][ T1113] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 135.503321][T12118] mapped_file 0 [ 135.503328][T12118] dirty 0 [ 135.506225][ T1113] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 135.519435][T12118] writeback 0 [ 135.522735][ T1113] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 135.525239][T12118] workingset_refault_anon 27 [ 135.526646][ T1113] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 04 08 2e 00 04 60 00 [ 135.528903][T12118] workingset_refault_file 29 [ 135.531734][ T1113] I/O error, dev sda, sector 264238 op 0x0:(READ) flags 0x80700 phys_seg 140 prio class 2 [ 135.534327][T12118] swap 126976 [ 135.534334][T12118] swapcached 131072 [ 135.537309][ T1113] ata1: EH complete [ 135.539739][T12118] pgpgin 40300 [ 135.685371][T12118] pgpgout 40297 [ 135.713298][T12118] pgfault 80825 [ 135.715673][T12118] pgmajfault 211 [ 135.728242][T12118] inactive_anon 0 [ 135.730049][T12118] active_anon 4096 [ 135.732660][T12118] inactive_file 8192 [ 135.734505][T12118] active_file 0 [ 135.736213][T12118] unevictable 0 [ 135.737791][T12118] hierarchical_memory_limit 314572800 [ 135.740435][T12118] hierarchical_memsw_limit 9223372036854771712 [ 135.743457][T12118] total_cache 8192 [ 135.745088][T12118] total_rss 4096 [ 135.746617][T12118] total_rss_huge 0 [ 135.758252][T12118] total_shmem 0 [ 135.759983][T12118] total_mapped_file 0 [ 135.761792][T12118] total_dirty 0 [ 135.763339][T12118] total_writeback 0 [ 135.765177][T12118] total_workingset_refault_anon 27 [ 135.767578][T12118] total_workingset_refault_file 29 [ 135.778263][T12118] total_swap 126976 [ 135.780095][T12118] total_swapcached 131072 [ 135.781998][T12118] total_pgpgin 40300 [ 135.783725][T12118] total_pgpgout 40297 [ 135.785523][T12118] total_pgfault 80825 [ 135.787525][T12118] total_pgmajfault 211 [ 135.792172][T12169] [syz.1.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 135.798247][T12118] total_inactive_anon 0 [ 135.800216][T12118] total_active_anon 4096 [ 135.802110][T12118] total_inactive_file 8192 [ 135.804090][T12118] total_active_file 0 [ 135.805875][T12118] total_unevictable 0 [ 135.807669][T12118] anon_cost 0 [ 135.809324][T12118] file_cost 0 [ 135.810849][T12118] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3005,pid=12118,uid=0 [ 135.829256][T12118] Memory cgroup out of memory: Killed process 12118 (syz.0.3005) total-vm:102004kB, anon-rss:12kB, file-rss:20744kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 136.123567][T12187] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 136.132753][T12186] /dev/sr0: Can't open blockdev [ 136.132932][T12187] romfs: unable to set blocksize [ 136.132932][T12187] [ 136.308250][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 136.458506][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 136.464114][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.469023][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 136.474977][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 136.481339][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.488282][ T24] usb 5-1: Product: syz [ 136.491572][ T24] usb 5-1: Manufacturer: syz [ 136.493904][ T24] usb 5-1: SerialNumber: syz [ 136.506707][ T24] r8152-cfgselector 5-1: Unknown version 0x0000 [ 136.509862][ T24] r8152-cfgselector 5-1: config 0 descriptor?? [ 136.516956][ T40] audit: type=1326 audit(2000000010.591:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12228 comm="syz.2.3059" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x0 [ 136.725520][ T24] r8152-cfgselector 5-1: USB disconnect, device number 4 [ 137.404025][ T5951] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 137.491332][T12347] hfs: can't find a HFS filesystem on dev loop2 [ 137.543431][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.546438][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.580950][T12362] FAT-fs (loop3): unable to read boot sector [ 137.593993][ T40] audit: type=1326 audit(2000000011.661:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12363 comm="syz.1.3125" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700ef6c code=0x0 [ 137.838238][ T40] audit: type=1326 audit(2000000011.911:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12402 comm="syz.0.3142" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33f6c code=0x0 [ 137.930409][T12413] hfs: can't find a HFS filesystem on dev loop1 [ 138.581818][T12391] orangefs_mount: mount request failed with -4 [ 138.599795][T12479] /dev/sr0: Can't open blockdev [ 138.754982][T12511] FAT-fs (nullb0): bogus number of reserved sectors [ 138.757986][T12511] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 138.895651][T12533] FAT-fs (nullb0): bogus number of reserved sectors [ 138.898706][T12533] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 139.045627][T12555] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 139.312293][T12582] /dev/sr0: Can't open blockdev [ 139.650729][ T1332] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 139.733648][T12656] cgroup: release_agent respecified [ 139.800764][ T1332] usb 7-1: unable to get BOS descriptor or descriptor too short [ 139.810358][ T1332] usb 7-1: config 1 interface 0 altsetting 18 endpoint 0x82 is Bulk; changing to Interrupt [ 139.815070][ T1332] usb 7-1: config 1 interface 0 altsetting 18 endpoint 0x3 is Bulk; changing to Interrupt [ 139.824626][ T1332] usb 7-1: config 1 interface 0 altsetting 18 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.832525][ T1332] usb 7-1: config 1 interface 0 has no altsetting 0 [ 139.839002][ T1332] usb 7-1: string descriptor 0 read error: -22 [ 139.842004][ T1332] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.846133][ T1332] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.853865][T12611] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 139.857409][T12611] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 139.873364][ T1332] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 140.071694][ T24] usb 7-1: USB disconnect, device number 7 [ 140.404403][T12747] IPv6: addrconf: prefix option has invalid lifetime [ 140.545748][T12759] Process accounting paused [ 140.906725][T12811] tmpfs: Bad value for 'mpol' [ 140.974471][T12817] Process accounting paused [ 140.988287][ T29] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 141.140374][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 141.144814][ T29] usb 5-1: config 1 interface 0 altsetting 18 endpoint 0x82 is Bulk; changing to Interrupt [ 141.149869][ T29] usb 5-1: config 1 interface 0 altsetting 18 endpoint 0x3 is Bulk; changing to Interrupt [ 141.154025][ T29] usb 5-1: config 1 interface 0 altsetting 18 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.160420][ T29] usb 5-1: config 1 interface 0 has no altsetting 0 [ 141.165744][ T29] usb 5-1: string descriptor 0 read error: -22 [ 141.168984][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.169311][T12846] Process accounting paused [ 141.172659][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.187694][T12789] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 141.193922][T12789] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 141.205332][ T29] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 141.285058][T12863] IPv6: addrconf: prefix option has invalid lifetime [ 141.302278][ T5940] Bluetooth: hci2: command 0x206a tx timeout [ 141.412960][ T1332] usb 5-1: USB disconnect, device number 5 [ 141.414724][ T40] audit: type=1326 audit(2000000015.491:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12883 comm="syz.3.3383" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x0 [ 141.448386][ T5940] Bluetooth: hci1: command 0x0406 tx timeout [ 141.466352][T12890] ntfs3(sr0): Primary boot signature is not NTFS. [ 141.469348][T12890] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 141.608985][T12908] IPv6: addrconf: prefix option has invalid lifetime [ 142.039605][T12959] ntfs3(sr0): Primary boot signature is not NTFS. [ 142.042250][T12959] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 142.064101][T12965] futex_wake_op: syz.2.3423 tries to shift op by 144; fix this program [ 142.199949][T12987] ntfs3(sr0): Primary boot signature is not NTFS. [ 142.202881][T12987] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 142.319183][T13006] gfs2: not a GFS2 filesystem [ 142.328949][ T5947] Bluetooth: hci3: command 0x0406 tx timeout [ 142.472599][T13033] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 142.506102][ T5947] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 142.723489][ T5947] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 142.782263][T13085] hfsplus: unable to find HFS+ superblock [ 142.899046][ T5947] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 143.028437][ T5947] Bluetooth: Unexpected start frame (len 10) [ 143.080118][ T40] audit: type=1326 audit(2000000017.151:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13136 comm="syz.0.3509" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33f6c code=0x0 [ 143.318129][T13177] overlayfs: missing 'lowerdir' [ 143.823098][T13262] futex_wake_op: syz.1.3572 tries to shift op by -1; fix this program [ 144.514672][ T40] audit: type=1800 audit(2000000016.583:21): pid=13353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.3618" name="/newroot/976" dev="tmpfs" ino=4895 res=0 errno=0 [ 144.842148][T13418] Invalid source name [ 144.844039][T13418] UBIFS error (pid: 13418): cannot open "ubifs", error -22 [ 144.882329][ T40] audit: type=1800 audit(2000000016.963:22): pid=13416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.3648" name="/newroot/929" dev="tmpfs" ino=4659 res=0 errno=0 [ 145.072020][T13451] tmpfs: Bad value for 'mpol' [ 145.079855][T13453] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 145.083603][T13453] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 145.087793][T13453] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 145.094098][T13453] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 145.098447][T13453] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 145.099086][ T40] audit: type=1326 audit(2000000017.183:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13456 comm="syz.0.3668" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33f6c code=0x0 [ 145.101745][T13453] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 145.116007][T13453] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 145.119940][T13453] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 145.123709][T13453] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 145.187502][T13470] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 145.371473][T13504] tmpfs: Bad value for 'mpol' [ 145.566459][ T40] audit: type=1326 audit(2000000017.643:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13529 comm="syz.3.3701" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x0 [ 145.590280][T13533] hpfs: hpfs_map_sector(): read error [ 145.673512][ T5947] Bluetooth: hci2: unexpected event for opcode 0x204e [ 145.734371][T13553] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 145.739075][T13553] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 145.743763][T13553] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 145.748059][T13553] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 145.755188][T13553] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 145.767000][T13553] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 145.772609][T13553] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 145.776853][T13553] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 145.782145][T13553] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 146.105113][T13486] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.108072][T13486] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 146.121887][T13486] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.125260][T13486] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.127955][T13486] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 146.150916][T13486] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.153717][T13486] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 147.368321][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.379875][T13770] futex_wake_op: syz.0.3821 tries to shift op by 144; fix this program [ 148.004654][T13880] futex_wake_op: syz.1.3875 tries to shift op by 144; fix this program [ 148.054339][ T5947] Bluetooth: hci0: unexpected event for opcode 0x0c7a [ 148.178834][ T5947] Bluetooth: hci2: command 0x206a tx timeout [ 148.179055][ T5951] Bluetooth: hci1: command 0x0406 tx timeout [ 148.183855][ T5940] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.186274][T13912] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 148.189205][T13912] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 148.198316][T13912] vhci_hcd vhci_hcd.0: Device attached [ 148.203558][T13914] vhci_hcd: connection closed [ 148.204503][ T46] vhci_hcd vhci_hcd.2: stop threads [ 148.209045][ T46] vhci_hcd vhci_hcd.2: release socket [ 148.211466][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 148.343142][T13938] Device name cannot be null; rc = [-22] [ 148.381703][T13944] tmpfs: Bad value for 'mpol' [ 148.408049][T13948] trusted_key: encrypted_key: master key parameter '' is invalid [ 148.857788][T14017] trusted_key: encrypted_key: master key parameter '' is invalid [ 148.979750][T14033] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 148.984401][T14033] qnx6: wrong signature (magic) in superblock #1. [ 148.987344][T14033] qnx6: unable to read the first superblock [ 149.118043][T14055] Device name cannot be null; rc = [-22] [ 149.514497][T14135] futex_wake_op: syz.1.4002 tries to shift op by 32; fix this program [ 150.128692][ T5940] Bluetooth: hci1: unexpected event for opcode 0x200b [ 150.248355][ T5940] Bluetooth: hci3: command 0x0c1a tx timeout [ 150.249166][ T5951] Bluetooth: hci2: command 0x206a tx timeout [ 150.300263][T14127] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 150.302636][T14127] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 150.304670][T14127] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 150.306884][T14127] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 150.473434][ T5951] Bluetooth: hci2: SCO packet for unknown connection handle 173 [ 150.556556][T14272] tmpfs: Unknown parameter 'hash' [ 150.561430][ T5945] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 150.590585][ T5951] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 150.730628][ T5945] usb 6-1: unable to get BOS descriptor or descriptor too short [ 150.737255][ T5945] usb 6-1: config 129 has an invalid interface number: 4 but max is 0 [ 150.741554][ T5945] usb 6-1: config 129 has no interface number 0 [ 150.744240][ T5945] usb 6-1: config 129 interface 4 altsetting 9 endpoint 0x5 has invalid maxpacket 1024, setting to 8 [ 150.758214][ T5945] usb 6-1: config 129 interface 4 has no altsetting 0 [ 150.763639][ T5945] usb 6-1: string descriptor 0 read error: -22 [ 150.768339][ T5945] usb 6-1: New USB device found, idVendor=19d2, idProduct=2002, bcdDevice=17.4e [ 150.771341][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.776015][T14199] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 150.986175][ T9] usb 6-1: USB disconnect, device number 3 [ 151.006725][T14324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4094'. [ 151.255365][T14354] netlink: 'syz.3.4109': attribute type 2 has an invalid length. [ 151.258288][T14354] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4109'. [ 151.576068][T14387] warning: `syz.0.4123' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 151.609514][ T5951] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.626257][T14393] ip6tnl1: entered promiscuous mode [ 151.627967][T14393] ip6tnl1: entered allmulticast mode [ 151.679432][T14404] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4133'. [ 151.839847][T14429] binder: BC_ATTEMPT_ACQUIRE not supported [ 151.842354][T14429] binder: 14428:14429 ioctl c0306201 80000540 returned -22 [ 151.970740][T14451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4157'. [ 152.153595][T14479] nfs: Deprecated parameter 'nointr' [ 152.186860][T14486] overlayfs: conflicting options: userxattr,metacopy=on [ 152.329533][ T5951] Bluetooth: hci2: command 0x206a tx timeout [ 152.331540][ T5951] Bluetooth: hci3: command 0x0c1a tx timeout [ 152.332067][ T5940] Bluetooth: hci1: command 0x0406 tx timeout [ 152.343926][T14506] netlink: 'syz.1.4184': attribute type 1 has an invalid length. [ 152.356007][T14508] netlink: 'syz.3.4185': attribute type 1 has an invalid length. [ 152.412743][T14514] ufs: failed to set blocksize [ 152.559427][T14534] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 152.605217][T14542] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4202'. [ 153.908289][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 154.060133][ T9] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 154.064040][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 999, setting to 64 [ 154.069926][ T9] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 154.073767][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.077354][ T9] usb 6-1: Product: syz [ 154.079482][ T9] usb 6-1: Manufacturer: syz [ 154.081585][ T9] usb 6-1: SerialNumber: syz [ 154.309471][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 154.312649][ T9] usb 6-1: MIDIStreaming interface descriptor not found [ 154.369371][ T9] usb 6-1: USB disconnect, device number 4 [ 154.418257][T14579] udevd[14579]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.034459][T14595] binder: BC_ATTEMPT_ACQUIRE not supported [ 157.036430][T14595] binder: 14592:14595 ioctl c0306201 80000540 returned -22 [ 157.242794][T14630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4244'. [ 157.296312][T14637] tmpfs: User quota inode hardlimit too large. [ 157.329525][T14645] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 157.712625][T14697] syz_tun: entered promiscuous mode [ 157.717633][T14697] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 157.939075][T14734] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 157.941991][T14734] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 157.948086][T14734] vhci_hcd vhci_hcd.0: Device attached [ 157.956814][T14742] netlink: 'syz.1.4296': attribute type 2 has an invalid length. [ 157.961174][T14742] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4296'. [ 157.996260][T14747] random: crng reseeded on system resumption [ 158.090502][T14744] /dev/sr0: Can't open blockdev [ 158.145664][T14762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4306'. [ 158.208307][ T5945] usb 44-1: SetAddress Request (2) to port 0 [ 158.211103][ T5945] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 158.242713][T14735] vhci_hcd: connection closed [ 158.243316][ T13] vhci_hcd vhci_hcd.3: stop threads [ 158.254248][ T13] vhci_hcd vhci_hcd.3: release socket [ 158.258066][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 158.430216][T14804] QAT: failed to copy from user cfg_data. [ 158.447692][T14807] netlink: 276 bytes leftover after parsing attributes in process `syz.2.4330'. [ 158.493874][T14813] netlink: 'syz.2.4333': attribute type 7 has an invalid length. [ 158.501866][T14813] : entered promiscuous mode [ 158.547065][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4337'. [ 158.553752][T14822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4336'. [ 158.641178][T14834] mmap: syz.2.4343 (14834): VmData 45760512 exceed data ulimit 32768. Update limits or use boot option ignore_rlimit_data. [ 158.645290][T14835] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4344'. [ 158.679078][T14840] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.4346'. [ 158.720230][T14846] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.4349'. [ 158.790568][T14856] netlink: 206236 bytes leftover after parsing attributes in process `syz.1.4361'. [ 158.809896][T14862] QAT: failed to copy from user cfg_data. [ 158.823952][T14865] netlink: 'syz.1.4357': attribute type 7 has an invalid length. [ 158.830244][T14865] : entered promiscuous mode [ 159.005351][T14896] netlink: 'syz.0.4375': attribute type 2 has an invalid length. [ 159.199176][T14930] netlink: 'syz.2.4390': attribute type 4 has an invalid length. [ 159.430213][T14966] netlink: 'syz.3.4408': attribute type 4 has an invalid length. [ 159.527351][T14986] SET target dimension over the limit! [ 159.716597][T15018] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 159.797704][T15032] netlink: 'syz.2.4440': attribute type 10 has an invalid length. [ 159.803066][T15032] team0: Device ipvlan1 failed to register rx_handler [ 159.897495][T15052] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 159.922772][T15055] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 160.004577][T15073] syz.1.4460 uses obsolete (PF_INET,SOCK_PACKET) [ 160.507735][ T40] audit: type=1326 audit(2000000032.583:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.3.4496" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000 [ 160.517243][ T40] audit: type=1326 audit(2000000032.583:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.3.4496" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000 [ 160.526315][ T40] audit: type=1326 audit(2000000032.583:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.3.4496" exe="/syz-executor" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7f64f6c code=0x7ffc0000 [ 160.617002][T15153] netlink: 'syz.1.4500': attribute type 7 has an invalid length. [ 160.688984][T15161] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 160.750843][T15169] netlink: 'syz.1.4507': attribute type 11 has an invalid length. [ 160.829352][ T40] audit: type=1326 audit(2000000032.913:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.3.4496" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000 [ 160.836034][ T40] audit: type=1326 audit(2000000032.913:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.3.4496" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64f6c code=0x7ffc0000 [ 160.966453][T15181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.120662][T15205] netlink: 'syz.0.4524': attribute type 1 has an invalid length. [ 161.123870][T15205] NCSI netlink: No device for ifindex 0 [ 161.300894][T15225] : renamed from vlan0 (while UP) [ 161.965456][T15329] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 161.971588][T15333] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 161.977403][T15333] xt_TPROXY: Can be used only with -p tcp or -p udp [ 162.034087][T15348] JFS: discard option not supported on device [ 162.037894][T15348] Mount JFS Failure: -22 [ 162.043418][T15348] jfs_mount failed w/return code = -22 [ 162.139569][T15366] xt_hashlimit: size too large, truncated to 1048576 [ 162.365355][T15403] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 162.400112][T15409] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.485994][T15423] __nla_validate_parse: 14 callbacks suppressed [ 162.486011][T15423] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4629'. [ 162.523939][T15427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4634'. [ 162.529529][T15429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4633'. [ 162.571958][T15436] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4636'. [ 162.646312][T15442] syz.2.4640 (15442): drop_caches: 2 [ 162.658403][T15448] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4644'. [ 162.754457][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4647'. [ 162.944344][T15492] xt_TPROXY: Can be used only with -p tcp or -p udp [ 163.288352][ T5945] usb 44-1: device descriptor read/8, error -110 [ 163.329712][T15556] openvswitch: netlink: nsh attribute has 7 unknown bytes. [ 163.348730][T15561] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 163.427815][T15574] bond0: (slave bond_slave_1): Releasing backup interface [ 163.487753][T15585] usb usb7: usbfs: process 15585 (syz.3.4712) did not claim interface 0 before use [ 163.690083][ T5945] usb usb44-port1: attempt power cycle [ 163.916426][ T40] audit: type=1326 audit(163.790:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15659 comm="syz.2.4749" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 163.930820][ T40] audit: type=1326 audit(163.790:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15659 comm="syz.2.4749" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 163.938593][ T40] audit: type=1326 audit(163.810:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15659 comm="syz.2.4749" exe="/syz-executor" sig=0 arch=40000003 syscall=294 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 163.948066][ T40] audit: type=1326 audit(163.810:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15659 comm="syz.2.4749" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 163.959138][ T40] audit: type=1326 audit(163.810:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15659 comm="syz.2.4749" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24f6c code=0x7ffc0000 [ 164.078420][ T10] ================================================================== [ 164.078433][ T10] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 164.078460][ T10] Write of size 8 at addr ffffc900049c1000 by task kworker/0:1/10 [ 164.078475][ T10] [ 164.078484][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 164.078502][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.078513][ T10] Workqueue: events_power_efficient fb_flashcursor [ 164.078540][ T10] Call Trace: [ 164.078546][ T10] [ 164.078553][ T10] dump_stack_lvl+0x100/0x190 [ 164.078578][ T10] print_report+0x156/0x4c9 [ 164.078600][ T10] ? ret_from_fork+0x754/0xd80 [ 164.078624][ T10] ? _raw_spin_lock_irqsave+0x52/0x60 [ 164.078643][ T10] ? __virt_addr_valid+0x81/0x620 [ 164.078666][ T10] ? sys_imageblit+0x19fb/0x1d60 [ 164.078685][ T10] kasan_report+0xdf/0x1e0 [ 164.078704][ T10] ? sys_imageblit+0x19fb/0x1d60 [ 164.078726][ T10] sys_imageblit+0x19fb/0x1d60 [ 164.078750][ T10] ? __pfx_sys_imageblit+0x10/0x10 [ 164.078771][ T10] ? trace_kmalloc+0x101/0x130 [ 164.078788][ T10] ? __kasan_kmalloc+0xaa/0xb0 [ 164.078828][ T10] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 164.078854][ T10] soft_cursor+0x524/0xa10 [ 164.078875][ T10] bit_cursor+0xe58/0x16f0 [ 164.078894][ T10] ? __pfx_bit_cursor+0x10/0x10 [ 164.078914][ T10] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 164.078942][ T10] ? get_color+0x1da/0x450 [ 164.078965][ T10] ? __pfx_bit_cursor+0x10/0x10 [ 164.078980][ T10] fb_flashcursor+0x338/0x430 [ 164.079005][ T10] process_one_work+0x9d7/0x1920 [ 164.079034][ T10] ? __pfx_process_one_work+0x10/0x10 [ 164.079062][ T10] ? __pfx_fb_flashcursor+0x10/0x10 [ 164.079086][ T10] worker_thread+0x5da/0xe40 [ 164.079114][ T10] ? kthread+0x13a/0x450 [ 164.079135][ T10] ? __pfx_worker_thread+0x10/0x10 [ 164.079158][ T10] kthread+0x370/0x450 [ 164.079176][ T10] ? __pfx_kthread+0x10/0x10 [ 164.079195][ T10] ret_from_fork+0x754/0xd80 [ 164.079220][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 164.079242][ T10] ? __switch_to+0x7b4/0x1120 [ 164.079260][ T10] ? __pfx_kthread+0x10/0x10 [ 164.079282][ T10] ret_from_fork_asm+0x1a/0x30 [ 164.079305][ T10] [ 164.079311][ T10] [ 164.079316][ T10] The buggy address belongs to a vmalloc virtual mapping [ 164.079328][ T10] Memory state around the buggy address: [ 164.079337][ T10] ffffc900049c0f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 164.079349][ T10] ffffc900049c0f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 164.079360][ T10] >ffffc900049c1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 164.079369][ T10] ^ [ 164.079378][ T10] ffffc900049c1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 164.079389][ T10] ffffc900049c1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 164.079399][ T10] ================================================================== [ 164.079408][ T10] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 164.079418][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 164.079437][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.079447][ T10] Workqueue: events_power_efficient fb_flashcursor [ 164.079470][ T10] Call Trace: [ 164.079475][ T10] [ 164.079481][ T10] dump_stack_lvl+0x100/0x190 [ 164.079504][ T10] vpanic+0x552/0x970 [ 164.079520][ T10] ? __pfx_vpanic+0x10/0x10 [ 164.079535][ T10] ? __pfx_vprintk_emit+0x10/0x10 [ 164.079552][ T10] ? sys_imageblit+0x19fb/0x1d60 [ 164.079571][ T10] panic+0xd1/0xe0 [ 164.079586][ T10] ? __pfx_panic+0x10/0x10 [ 164.079603][ T10] ? sys_imageblit+0x19fb/0x1d60 [ 164.079621][ T10] ? check_panic_on_warn+0x1f/0x90 [ 164.079646][ T10] check_panic_on_warn.cold+0x19/0x34 [ 164.079663][ T10] end_report.part.0+0x3a/0x90 [ 164.079686][ T10] kasan_report.cold+0xe/0x18 [ 164.079708][ T10] ? sys_imageblit+0x19fb/0x1d60 [ 164.079730][ T10] sys_imageblit+0x19fb/0x1d60 [ 164.079753][ T10] ? __pfx_sys_imageblit+0x10/0x10 [ 164.079772][ T10] ? trace_kmalloc+0x101/0x130 [ 164.079785][ T10] ? __kasan_kmalloc+0xaa/0xb0 [ 164.079803][ T10] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 164.079826][ T10] soft_cursor+0x524/0xa10 [ 164.079838][ T10] bit_cursor+0xe58/0x16f0 [ 164.079850][ T10] ? __pfx_bit_cursor+0x10/0x10 [ 164.079863][ T10] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 164.079881][ T10] ? get_color+0x1da/0x450 [ 164.079896][ T10] ? __pfx_bit_cursor+0x10/0x10 [ 164.079905][ T10] fb_flashcursor+0x338/0x430 [ 164.079921][ T10] process_one_work+0x9d7/0x1920 [ 164.079939][ T10] ? __pfx_process_one_work+0x10/0x10 [ 164.079957][ T10] ? __pfx_fb_flashcursor+0x10/0x10 [ 164.079973][ T10] worker_thread+0x5da/0xe40 [ 164.079990][ T10] ? kthread+0x13a/0x450 [ 164.080003][ T10] ? __pfx_worker_thread+0x10/0x10 [ 164.080018][ T10] kthread+0x370/0x450 [ 164.080031][ T10] ? __pfx_kthread+0x10/0x10 [ 164.080045][ T10] ret_from_fork+0x754/0xd80 [ 164.080061][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 164.080077][ T10] ? __switch_to+0x7b4/0x1120 [ 164.080089][ T10] ? __pfx_kthread+0x10/0x10 [ 164.080103][ T10] ret_from_fork_asm+0x1a/0x30 [ 164.080118][ T10] [ 164.080854][ T10] Kernel Offset: disabled VM DIAGNOSIS: 10:02:58 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85773615 RDI=ffffffff9b48b080 RBP=ffffffff9b48b040 RSP=ffffc900001c7330 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000030 R14=0000000000000010 R15=ffffffff857735b0 RIP=ffffffff8577363f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809714d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000ffb3ff4c CR3=000000004cd2c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81ad4d53 RDX=ffff888029f1a4c0 RSI=ffffffff81ad4d9b RDI=ffffffff94125fa0 RBP=0000000000000000 RSP=ffffc90000590fd0 R8 =0000000000000001 R9 =fffffbfff2824bf4 R10=ffffffff94125fa7 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81ad4d9c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809724d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73c32f0 CR3=000000005346f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000003ffffffeb 000000c8ffffffeb ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81ad4d53 RDX=ffff88801c7d4980 RSI=ffffffff81ad4d9b RDI=ffffffff94125fa0 RBP=0000000000000000 RSP=ffffc90000538fd0 R8 =0000000000000001 R9 =fffffbfff2824bf4 R10=ffffffff94125fa7 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81ad4d9c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809734d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c3af532 CR3=000000004dd7d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a87d284c05ae76f3 2a67d8d143abca39 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8be1ba35dc3de5f4 3467e3ec5e464bee ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d0bc0873a43e5a04 cec9db221404518f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 823870fa7335de82 d60887630edc7b57 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000005a80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006400000064 003fb65593888646 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006400000000 0000006400000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000093527d48 0122f1d292775a2c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0087fdf0938a9df4 0000006491c169f0 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fbdb5b8bc6649aec 07b0cba0f68ce9d6 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9832464164839eef 66b9bd7105005503 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81ad4d53 RDX=ffff8880294524c0 RSI=ffffffff81ad4d9b RDI=ffffffff94125fa0 RBP=0000000000000000 RSP=ffffc900005e8fd0 R8 =0000000000000001 R9 =fffffbfff2824bf4 R10=ffffffff94125fa7 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81ad4d9c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809744d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000057a1b1fc CR3=000000004da81000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000