last executing test programs: 1.200284601s ago: executing program 2 (id=5104): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x67) listen(r0, 0x8) 1.149219415s ago: executing program 2 (id=5107): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000380)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000003c0)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000400)={{@host, 0x2}, @hyper, 0x0, 0x6, 0x5e, 0x8, 0x0, 0x183}) 1.131549585s ago: executing program 2 (id=5109): pipe2$9p(&(0x7f0000000240), 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 593.178964ms ago: executing program 1 (id=5131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) 439.772748ms ago: executing program 0 (id=5136): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000010027bd700403dcdf2500000000", @ANYRES32=r2, @ANYBLOB="30ce0600016803004c001280110001006272696467655f736c61766500000000340005800500090000000000050006"], 0x6c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) 431.116642ms ago: executing program 1 (id=5137): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/scsi_host/host0/link_power_management_policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='m', 0x1) 371.961382ms ago: executing program 0 (id=5138): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x28, r2, 0x1, 0x0, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0xec0}, 0x20000800) 370.185739ms ago: executing program 3 (id=5139): openat$dlm_plock(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 338.790387ms ago: executing program 3 (id=5140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x63}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4024004) 331.355482ms ago: executing program 1 (id=5141): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x50) add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000240)="633319", 0x3, r0) 286.695422ms ago: executing program 0 (id=5142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r1, 0x303, 0x8004000, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4004010) 283.766453ms ago: executing program 3 (id=5143): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={0x30, r2, 0x1, 0x0, 0x4, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7}]}, 0x30}, 0x1, 0xffffffff00000003}, 0x0) 255.918563ms ago: executing program 1 (id=5144): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/rxrpc/stats\x00', 0x0, 0x0) read(r0, &(0x7f0000000100), 0x1000) 253.436226ms ago: executing program 2 (id=5145): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0) read(r0, &(0x7f00000006c0)=""/256, 0x100) 219.431829ms ago: executing program 0 (id=5146): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xac, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xac}}, 0x0) 209.97668ms ago: executing program 3 (id=5147): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) 166.891083ms ago: executing program 1 (id=5148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x14, &(0x7f0000001880)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 160.790187ms ago: executing program 2 (id=5149): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000021, 0x0, 0x2d6e}]}) 124.07321ms ago: executing program 0 (id=5150): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x1000, 0x4) sendto$inet(r0, &(0x7f00000005c0)='0', 0x1, 0x200400d4, &(0x7f00000002c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) 53.045346ms ago: executing program 3 (id=5151): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xd5d7a000) umount2(&(0x7f0000000480)='./file0\x00', 0x9) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) 42.148106ms ago: executing program 0 (id=5152): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 35.453356ms ago: executing program 1 (id=5153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.665862ms ago: executing program 2 (id=5154): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000c00)) 0s ago: executing program 3 (id=5155): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1fb) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x4000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000000c0)={0x4, 0xfffffffc, 0x10, 0xf, 0x100, &(0x7f0000000500)="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"}) kernel console output (not intermixed with test programs): 0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 106.777967][ T43] audit: type=1326 audit(1792021282.455:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11096 comm="syz.2.2418" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 106.778085][ T43] audit: type=1326 audit(1792021282.455:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11096 comm="syz.2.2418" exe="/syz-executor" sig=0 arch=40000003 syscall=107 compat=1 ip=0xf73defec code=0x7ffc0000 [ 107.006675][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2428'. [ 107.184468][T11136] ALSA: seq fatal error: cannot create timer (-19) [ 108.251607][T11159] netlink: 'syz.0.2445': attribute type 62 has an invalid length. [ 108.366021][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2455'. [ 108.393198][T11178] ipvlan3: entered allmulticast mode [ 108.431064][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2457'. [ 108.538915][T11194] random: crng reseeded on system resumption [ 109.423476][ T30] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 109.437194][T11214] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2472'. [ 109.561752][T11228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2487'. [ 109.574147][ T30] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 109.575706][ T30] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 109.575721][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.575730][ T30] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 109.575750][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.575762][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.577247][ T30] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 109.577266][ T30] usb 5-1: Product: syz [ 109.577278][ T30] usb 5-1: Manufacturer: syz [ 109.583238][ T30] cdc_wdm 5-1:1.0: skipping garbage [ 109.583247][ T30] cdc_wdm 5-1:1.0: skipping garbage [ 109.587525][ T30] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 109.587536][ T30] cdc_wdm 5-1:1.0: Unknown control protocol [ 109.790981][T11202] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 109.791828][ T5530] usb 5-1: USB disconnect, device number 6 [ 110.419409][T11244] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2484'. [ 111.691395][T11294] Bluetooth: hci0: unsupported parameter 5161 [ 111.691416][T11294] Bluetooth: hci0: unsupported parameter 8192 [ 111.691423][T11294] Bluetooth: hci0: unsupported parameter 5161 [ 111.691429][T11294] Bluetooth: hci0: unsupported parameter 8192 [ 112.216040][ T43] kauditd_printk_skb: 37 callbacks suppressed [ 112.216052][ T43] audit: type=1326 audit(1792021287.895:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.2.2527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 112.216077][ T43] audit: type=1326 audit(1792021287.895:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.2.2527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 112.218720][ T43] audit: type=1326 audit(1792021287.895:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.2.2527" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73defec code=0x7ffc0000 [ 112.218776][ T43] audit: type=1326 audit(1792021287.895:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.2.2527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 112.221082][ T43] audit: type=1326 audit(1792021287.895:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.2.2527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 112.221161][ T43] audit: type=1326 audit(1792021287.895:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.2.2527" exe="/syz-executor" sig=0 arch=40000003 syscall=309 compat=1 ip=0xf73defec code=0x7ffc0000 [ 112.281416][ T43] audit: type=1326 audit(1792021287.955:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.2.2527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 112.281488][ T43] audit: type=1326 audit(1792021287.955:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.2.2527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 112.363141][T11329] netlink: 'syz.3.2525': attribute type 5 has an invalid length. [ 113.317268][T11348] net_ratelimit: 48 callbacks suppressed [ 113.317286][T11348] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 113.837506][T11439] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 113.837527][T11439] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 113.838241][T11439] vhci_hcd vhci_hcd.0: Device attached [ 114.083453][ T855] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 114.083555][ T5530] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 114.244103][ T855] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 114.244598][ T855] usb 6-1: config 0 has no interfaces? [ 114.244615][ T855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.246270][ T855] usb 6-1: config 0 descriptor?? [ 114.452900][ T1038] usb 6-1: USB disconnect, device number 5 [ 114.458156][T11440] vhci_hcd: connection closed [ 114.460956][ T7717] vhci_hcd vhci_hcd.1: stop threads [ 114.460971][ T7717] vhci_hcd vhci_hcd.1: release socket [ 114.461397][ T7717] vhci_hcd vhci_hcd.1: disconnect device [ 114.513500][ T5530] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 114.715979][T11459] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2587'. [ 114.715995][T11459] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2587'. [ 114.716002][T11459] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 114.994585][T11478] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2595'. [ 115.028819][ T43] audit: type=1326 audit(1792021290.705:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11484 comm="syz.1.2600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 115.028852][ T43] audit: type=1326 audit(1792021290.705:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11484 comm="syz.1.2600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x7ffc0000 [ 115.052729][T11487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2598'. [ 115.114923][T11501] batadv_slave_1: entered promiscuous mode [ 115.653258][T11552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2631'. [ 115.681143][T11554] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 116.440157][T11566] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 116.496984][ T30] kernel write not supported for file /vcs (pid: 30 comm: kworker/1:0) [ 116.807601][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2659'. [ 117.064473][T11635] PID 11635 killed due to inadequate hugepage pool [ 117.145384][T11651] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 117.466798][T11680] < [ 117.527509][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2693'. [ 117.527551][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2693'. [ 117.703857][ T5835] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 117.803471][ T58] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 117.874641][ T5835] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 117.875430][ T5835] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 117.875453][ T5835] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 117.875465][ T5835] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 117.875477][ T5835] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 117.875488][ T5835] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 117.875500][ T5835] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 117.875511][ T5835] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 117.875523][ T5835] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 117.875535][ T5835] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 117.875546][ T5835] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 117.875557][ T5835] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 117.875569][ T5835] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 117.875580][ T5835] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 65535, setting to 1024 [ 117.875593][ T5835] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 117.875604][ T5835] usb 8-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 117.877078][ T5835] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.877090][ T5835] usb 8-1: Product: syz [ 117.877097][ T5835] usb 8-1: Manufacturer: syz [ 117.877104][ T5835] usb 8-1: SerialNumber: syz [ 117.878768][T11678] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 117.878874][T11678] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 117.878964][T11678] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 117.879013][T11678] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 117.879099][T11678] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 117.879147][T11678] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 117.879239][T11678] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 117.879287][T11678] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 117.879333][T11678] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 117.879428][T11678] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 117.879474][T11678] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 117.879569][T11678] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 117.880652][ T5835] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 117.883760][ T5835] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 7 [ 117.888750][ T5835] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 117.889833][ T5835] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 117.890630][ T5835] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 117.964060][ T58] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 117.964981][ T58] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 117.964993][ T58] usb 5-1: config 1 has no interface number 0 [ 117.965011][ T58] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 117.965024][ T58] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 117.965036][ T58] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.967055][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.967067][ T58] usb 5-1: Product: syz [ 117.967074][ T58] usb 5-1: Manufacturer: syz [ 117.967082][ T58] usb 5-1: SerialNumber: syz [ 117.970770][T11688] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 118.182402][T11688] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 118.213062][ T855] usb 8-1: USB disconnect, device number 6 [ 118.228280][ T855] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 118.229699][ T855] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 118.230465][ T855] keyspan 8-1:1.0: device disconnected [ 118.406961][ T58] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 118.586930][ T58] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 118.586949][ T58] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 118.588131][ T58] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 118.588146][ T58] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 118.592070][ T58] usb 5-1: USB disconnect, device number 7 [ 118.593882][ T58] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 119.067955][ T58] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 119.086513][T11712] openvswitch: netlink: Unknown key attributes 1 [ 119.170005][T11715] ALSA: seq fatal error: cannot create timer (-19) [ 119.376959][T11739] tmpfs: Using encoding : utf8-12.1.0 [ 119.378873][T11739] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 120.057508][T11769] Bluetooth: hci0: Invalid link address type 18 for 00:40:00:00:00:00 [ 120.489634][ T43] kauditd_printk_skb: 12 callbacks suppressed [ 120.489651][ T43] audit: type=1326 audit(1792021296.165:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11783 comm="syz.0.2740" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff6fec code=0x0 [ 120.705538][T11801] batman_adv: batadv0: Adding interface: gretap1 [ 120.705551][T11801] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 120.716946][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2750'. [ 120.716964][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2750'. [ 120.971140][T11824] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2760'. [ 121.175336][T11842] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.241326][T11842] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.287861][T11842] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.337999][T11842] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.396058][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.403859][ T7719] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.403891][ T7719] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.413744][ T7719] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.644271][T11865] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.644468][T11865] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.653212][T11865] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.662111][T11865] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.662440][T11865] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.664624][T11865] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.813566][ T2338] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 121.913452][ T5850] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 121.963800][ T2338] usb 8-1: Using ep0 maxpacket: 8 [ 121.964578][ T2338] usb 8-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 121.965097][ T2338] usb 8-1: config 0 has no interfaces? [ 121.967952][ T2338] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.967971][ T2338] usb 8-1: Product: syz [ 121.967983][ T2338] usb 8-1: Manufacturer: syz [ 121.967995][ T2338] usb 8-1: SerialNumber: syz [ 121.971661][ T2338] usb 8-1: config 0 descriptor?? [ 122.073481][ T5850] usb 6-1: Using ep0 maxpacket: 8 [ 122.074246][ T5850] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 122.075442][ T5850] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 122.075465][ T5850] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 122.075494][ T5850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.078405][ T5850] kobil_sct 6-1:1.0: KOBIL USB smart card terminal converter detected [ 122.084923][ T5850] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 122.177643][ T2338] usb 8-1: USB disconnect, device number 7 [ 122.295756][T11883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2785'. [ 122.356232][T11887] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.436222][T11887] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.530068][T11887] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.598124][T11887] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.703475][ T7719] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.703515][ T7719] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.703545][ T7719] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.723518][ T7719] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.800242][ T30] usb 6-1: USB disconnect, device number 6 [ 122.818772][ T30] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 122.819226][ T30] kobil_sct 6-1:1.0: device disconnected [ 123.441747][T11980] bad cache= option: none_mlock 0 [ 123.441747][T11980] nr_zspages 477 [ 123.441747][T11980] nr_free_cma 0 [ 123.441747][T11980] numa_hit 78623 [ 123.441747][T11980] numa_miss 1425178 [ 123.441747][T11980] numa_foreign 1425178 [ 123.441747][T11980] numa_interleave 5089 [ 123.441747][T11980] numa_local 73022 [ 123.441747][T11980] numa_other 1430779 [ 123.441747][T11980] nr_inactive_anon 258 [ 123.441747][T11980] nr_active_anon 9523 [ 123.441747][T11980] nr_inactive_file 46590 [ 123.441747][T11980] nr_active_file 365 [ 123.441747][T11980] nr_unevictable 987 [ 123.441747][T11980] nr_slab_reclaimable 7936 [ 123.441747][T11980] nr_slab_unreclaimable 57498 [ 123.441747][T11980] nr_isolated_anon 0 [ 123.441747][T11980] nr_isolated_file 0 [ 123.441747][T11980] workingset_nodes 189 [ 123.441747][T11980] workingset_refault_anon 193 [ 123.441747][T11980] workingset_refault_file 8516 [ 123.441747][T11980] workingset_activate_anon 8 [ 123.441747][T11980] workingset_activate_file 716 [ 123.441747][T11980] workingset_restore_anon 8 [ 123.441747][T11980] workingset_restore_file 720 [ 123.441747][T11980] workingset_nodereclaim 291 [ 123.441747][T11980] nr_anon_pages 6023 [ 123.441747][T11980] nr_mapped 26311 [ 123.441747][T11980] nr_file_pages 51827 [ 123.441747][T11980] nr_dirty 412 [ 123.441747][T11980] nr_writeback 0 [ 123.441747][T11980] nr_shmem 4333 [ 123.441747][T11980] nr_shmem_hugepages 0 [ 123.441747][T11980] nr_shmem_pmdmapped 0 [ 123.441747][T11980] nr_file_hugepages 0 [ 123.441747][T11980] nr_file_pmdmapped 0 [ 123.441747][T11980] nr_anon_transparent_hugepages 0 [ 123.441747][T11980] nr_vmscan_write 8544 [ 123.441747][T11980] nr_vmscan_immediate_reclaim 164 [ 123.441747][T11980] nr_dirtied 17683 [ 123.441747][T11980] nr_written 17271 [ 123.441747][T11980] nr_throttled_written 71 [ 123.441747][T11980] nr_kernel_misc_reclaimable 0 [ 123.441747][T11980] nr_foll_pin_acquired 538 [ 123.441747][T11980] nr_foll_pin_released 538 [ 123.441989][T11980] CIFS: VFS: bad cache= option: none_mlock 0 [ 123.441989][T11980] nr_zspages 477 [ 123.441989][T11980] nr_free_cma 0 [ 123.441989][T11980] numa_hit 78623 [ 123.441989][T11980] numa_miss 1425178 [ 123.441989][T11980] numa_foreign 1425178 [ 123.441989][T11980] numa_interleave 5089 [ 123.441989][T11980] numa_local 73022 [ 123.441989][T11980] numa_other 1430779 [ 123.441989][T11980] nr_inactive_anon 258 [ 123.441989][T11980] nr_active_anon 9523 [ 123.441989][T11980] nr_inactive_file 46590 [ 123.441989][T11980] nr_active_file 365 [ 123.441989][T11980] nr_unevictable 987 [ 123.441989][T11980] nr_slab_reclaimable 7936 [ 123.441989][T11980] nr_slab_unreclaimable 57498 [ 123.441989][T11980] nr_isolated_anon 0 [ 123.441989][T11980] nr_isolated_file 0 [ 123.441989][T11980] workingset_nodes 189 [ 123.441989][T11980] workingset_refault_anon 193 [ 123.441989][T11980] workingset_refault_file 8516 [ 123.441989][T11980] workingset_activate_anon 8 [ 123.441989][T11980] workingset_activate_file 716 [ 123.441989][T11980] workingset_restore_anon 8 [ 123.441989][T11980] workingset_restore_file 720 [ 123.441989][T11980] workingset_nodereclaim 291 [ 123.441989][T11980] nr_anon_pages 6023 [ 123.441989][T11980] nr_mapped 26311 [ 123.441989][T11980] nr_file_pages 51827 [ 123.441989][T11980] nr_dirty 412 [ 123.441989][T11980] nr_writeback 0 [ 123.441989][T11980] nr_shmem 4333 [ 123.441989][T11980] nr_shmem_hugepages 0 [ 123.441989][T11980] nr_shmem_pmdmapped 0 [ 123.441989][T11980] nr_file_hugepages 0 [ 123.441989][T11980] nr_file_pmdmapped 0 [ 123.441989][T11980] nr_anon_transparent_hugepages 0 [ 123.441989][T11980] nr_vmscan_write 8544 [ 123.441989][T11980] nr_vmscan_immediate_reclaim 164 [ 123.441989][T11980] nr_dirtied 17683 [ 123.441989][T11980] nr_written 17271 [ 123.441989][T11980] nr_throttled_written 71 [ 123.441989][T11980] nr_kernel_misc_reclaimable 0 [ 123.441989][T11980] nr_foll_pin_acquired 538 [ 123.441989][T11980] nr_foll_pin_released 538 [ 123.591436][T11999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2838'. [ 123.693509][ T5745] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.693546][ T5745] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.612354][T12082] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2862'. [ 125.260070][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2874'. [ 125.265853][T12108] ovs-dp0: left promiscuous mode [ 125.419778][T12116] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.420581][T12116] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.763862][ T2338] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 125.913563][ T2338] usb 6-1: Using ep0 maxpacket: 8 [ 125.914287][ T2338] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 125.915418][ T2338] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.915436][ T2338] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 125.915473][ T2338] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.915506][ T2338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.932468][ T2338] hub 6-1:1.0: bad descriptor, ignoring hub [ 125.932492][ T2338] hub 6-1:1.0: probe with driver hub failed with error -5 [ 125.932855][ T2338] cdc_wdm 6-1:1.0: skipping garbage [ 125.932866][ T2338] cdc_wdm 6-1:1.0: skipping garbage [ 125.938793][ T2338] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 125.938810][ T2338] cdc_wdm 6-1:1.0: Unknown control protocol [ 125.997593][T12128] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.049689][T12128] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.109452][T12128] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.172672][T12128] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.273465][ T7719] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.273491][ T7719] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.286315][ T7719] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.286338][ T7719] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.631907][ T43] audit: type=1400 audit(1792021302.305:216): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=12165 comm="syz.3.2899" name="unknown" offset=28 [ 126.888310][T12186] scsi_nl_rcv_msg: discarding partial skb [ 127.171689][T12204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.175496][T12204] bond0: (slave bond1): Enslaving as an active interface with an up link [ 127.453649][ T5746] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.453676][ T5746] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.657539][T12248] jffs2: notice: (12248) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 128.022350][T12285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2955'. [ 128.098903][T12291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2958'. [ 128.102904][T12293] block2mtd: erasesize must be a divisor of device size [ 128.329507][T12315] netlink: 'syz.2.2970': attribute type 3 has an invalid length. [ 128.329527][T12315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2970'. [ 128.566815][ T30] usb 6-1: USB disconnect, device number 7 [ 128.780097][T12376] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.796851][T12379] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2997'. [ 128.882686][T12393] input: syz0 as /devices/virtual/input/input20 [ 128.942420][T12401] block2mtd: device name too long [ 129.027579][T12417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3015'. [ 129.543465][ T5745] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.839903][T12446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3029'. [ 129.940779][T12460] openvswitch: netlink: IP tunnel dst address not specified [ 129.940797][T12460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.989084][T12462] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 130.229681][T12493] jffs2: notice: (12493) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 130.236241][T12496] netlink: 'syz.0.3053': attribute type 6 has an invalid length. [ 130.247544][ T43] audit: type=1804 audit(1792021305.925:217): pid=12493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3052" name="/newroot/888/mnt/fillfile" dev="jffs2" ino=2 res=1 errno=0 [ 130.527143][T12552] netlink: 'syz.3.3079': attribute type 8 has an invalid length. [ 130.594538][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3083'. [ 130.595164][T12562] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3083'. [ 130.639616][T12569] openvswitch: netlink: IPv4 tunnel dst address is zero [ 130.639634][T12569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.669960][T12575] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 130.669979][T12575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.691066][T12577] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.748109][T12577] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.808205][T12577] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.879147][T12577] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.890447][ T43] audit: type=1400 audit(1792021306.565:218): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=12600 comm="syz.0.3102" name="p" offset=48 [ 130.918336][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.922120][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.928522][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.953018][T12610] tipc: Enabling of bearer rejected, failed to enable media [ 130.963486][ T7719] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.116324][T12632] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.156841][T12632] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.198735][T12632] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.249254][T12632] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.343572][ T5850] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 131.493442][ T5850] usb 5-1: Using ep0 maxpacket: 16 [ 131.494055][ T5850] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 131.497233][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.497254][ T5850] usb 5-1: Product: syz [ 131.497267][ T5850] usb 5-1: Manufacturer: syz [ 131.497279][ T5850] usb 5-1: SerialNumber: syz [ 131.707676][ T5850] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 131.718681][ T5850] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 131.719929][ T5850] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 131.719960][ T5850] usb 5-1: media controller created [ 131.726984][ T5850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.905516][T12639] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 131.948864][ T5850] zl10353_read_register: readreg error (reg=127, ret==-110) [ 131.973794][ T5850] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 131.975141][ T5850] usb 5-1: USB disconnect, device number 8 [ 132.255712][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.568741][ T7719] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.603589][ T7719] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.613669][ T7719] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.613694][ T7719] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.635044][T12652] block2mtd: device name too long [ 135.543475][ T5893] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 135.622839][T12713] block2mtd: illegal erase size [ 135.672960][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3155'. [ 135.723630][ T5893] usb 6-1: Using ep0 maxpacket: 8 [ 135.724285][ T5893] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.727598][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.727627][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.729629][ T5893] usb 6-1: config 0 descriptor?? [ 135.939324][ T5893] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 136.008983][T12736] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x8010d pfn:0x71000 [ 136.009020][T12736] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 136.009042][T12736] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 136.009060][T12736] raw: 000000000008010d 0000000000000000 00000001ffffffff 0000000000000000 [ 136.009073][T12736] page dumped because: unmovable page [ 136.009081][T12736] page_owner tracks the page as allocated [ 136.009087][T12736] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x44dc0(GFP_KERNEL|__GFP_ZERO|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 12327, tgid 12326 (syz.3.2974), ts 128498750905 [ 136.009109][T12736] post_alloc_hook+0xfd/0x120 [ 136.009126][T12736] get_page_from_freelist+0x110d/0x35d0 [ 136.009140][T12736] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 136.009155][T12736] alloc_pages_node_noprof+0x93/0x200 [ 136.009168][T12736] alloc_cpu_data+0x20/0x120 [ 136.009181][T12736] __rb_allocate_pages+0xb39/0xfc0 [ 136.009195][T12736] ring_buffer_resize+0x71c/0x1ed0 [ 136.009211][T12736] __tracing_resize_ring_buffer.part.0+0x52/0x1f0 [ 136.009228][T12736] tracing_set_tracer+0x621/0x8c0 [ 136.009242][T12736] tracing_set_trace_write+0x14d/0x240 [ 136.009257][T12736] vfs_write+0x2aa/0x1050 [ 136.009271][T12736] ksys_write+0x12a/0x250 [ 136.009283][T12736] __do_fast_syscall_32+0x13a/0x8b0 [ 136.009295][T12736] do_fast_syscall_32+0x32/0x70 [ 136.009306][T12736] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.009319][T12736] page last free pid 12056 tgid 12053 ts 124279676776 stack trace: [ 136.009406][T12736] free_unref_folios+0xa4a/0x1790 [ 136.009421][T12736] folios_put_refs+0x585/0xaa0 [ 136.009432][T12736] free_pages_and_swap_cache+0x22d/0x3b0 [ 136.009448][T12736] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 136.009459][T12736] tlb_flush_mmu+0xe9/0x590 [ 136.009469][T12736] __zap_vma_range+0x2166/0x48e0 [ 136.009485][T12736] unmap_vmas+0x299/0x5f0 [ 136.009505][T12736] exit_mmap+0x1ef/0xa00 [ 136.009527][T12736] __mmput+0x12a/0x410 [ 136.009550][T12736] mmput+0x67/0x80 [ 136.009576][T12736] do_exit+0x83b/0x2a50 [ 136.009592][T12736] do_group_exit+0xd5/0x2a0 [ 136.009610][T12736] get_signal+0x1ec7/0x21e0 [ 136.009624][T12736] arch_do_signal_or_restart+0x91/0x7a0 [ 136.009646][T12736] exit_to_user_mode_loop+0x139/0x700 [ 136.009665][T12736] __do_fast_syscall_32+0x59f/0x8b0 [ 136.146928][ T2338] usb 6-1: USB disconnect, device number 8 [ 136.152391][T12747] MTRR 1 not used [ 136.235985][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3173'. [ 136.236006][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3173'. [ 136.350463][T12763] vxcan0: tx address claim with dlc 0 [ 136.409649][T12765] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.698383][T12785] Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks! [ 136.844606][T12803] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 136.844623][T12803] CPU: 1 UID: 0 PID: 12803 Comm: syz.2.3191 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.844642][T12803] Tainted: [L]=SOFTLOCKUP [ 136.844647][T12803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.844653][T12803] Call Trace: [ 136.844658][T12803] [ 136.844662][T12803] dump_stack_lvl+0x100/0x190 [ 136.844682][T12803] sysfs_warn_dup.cold+0x1c/0x28 [ 136.844702][T12803] sysfs_create_dir_ns+0x24b/0x2b0 [ 136.844719][T12803] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 136.844735][T12803] ? find_held_lock+0x2b/0x80 [ 136.844748][T12803] ? kobject_add_internal+0x25f/0x930 [ 136.844763][T12803] ? kobject_add_internal+0x25f/0x930 [ 136.844778][T12803] ? class_dir_child_ns_type+0xd/0x60 [ 136.844795][T12803] kobject_add_internal+0x2c8/0x930 [ 136.844811][T12803] kobject_add+0x16a/0x1e0 [ 136.844825][T12803] ? __pfx_kobject_add+0x10/0x10 [ 136.844840][T12803] ? get_device_parent+0x1b3/0x4c0 [ 136.844854][T12803] ? kobject_put+0xb9/0x640 [ 136.844872][T12803] device_add+0x294/0x1970 [ 136.844889][T12803] ? lockdep_init_map_type+0x5c/0x250 [ 136.844907][T12803] ? __pfx_device_add+0x10/0x10 [ 136.844921][T12803] ? lockdep_init_map_type+0x5c/0x250 [ 136.844939][T12803] ? __init_waitqueue_head+0xca/0x150 [ 136.844956][T12803] tty_register_device_attr+0x388/0x810 [ 136.844977][T12803] ? lockdep_init_map_type+0x5c/0x250 [ 136.844996][T12803] ? __pfx_tty_register_device_attr+0x10/0x10 [ 136.845014][T12803] ? tty_port_init+0x156/0x1c0 [ 136.845029][T12803] gsm_activate_mux+0x155/0x2a0 [ 136.845044][T12803] gsmld_ioctl+0xbbc/0x15c0 [ 136.845063][T12803] ? __pfx_gsmld_ioctl+0x10/0x10 [ 136.845090][T12803] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 136.845112][T12803] ? __pfx_gsmld_ioctl+0x10/0x10 [ 136.845127][T12803] tty_compat_ioctl+0x396/0x420 [ 136.845140][T12803] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 136.845155][T12803] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 136.845171][T12803] __do_fast_syscall_32+0x13a/0x8b0 [ 136.845185][T12803] do_fast_syscall_32+0x32/0x70 [ 136.845197][T12803] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.845211][T12803] RIP: 0023:0xf73defec [ 136.845225][T12803] Code: Unable to access opcode bytes at 0xf73defc2. [ 136.845231][T12803] RSP: 002b:00000000f53d550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 136.845242][T12803] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000404c4701 [ 136.845249][T12803] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.845256][T12803] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.845262][T12803] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 136.845269][T12803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.845284][T12803] [ 136.845295][T12803] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 137.144446][T12823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3203'. [ 137.147348][T12823] ovs-dp0: entered promiscuous mode [ 137.151841][T12823] ovs-dp0: left promiscuous mode [ 137.183476][ T855] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 137.343535][ T855] usb 5-1: Using ep0 maxpacket: 8 [ 137.344154][ T855] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 137.345126][ T855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.345148][ T855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.349055][ T855] usb 5-1: config 0 descriptor?? [ 137.559731][ T855] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 137.761144][ T855] usb 5-1: USB disconnect, device number 9 [ 138.376935][T12878] input: syz0 as /devices/virtual/input/input21 [ 138.540293][ T855] kernel write not supported for file /uinput (pid: 855 comm: kworker/0:2) [ 138.727434][ T5741] kernel read not supported for file /media1 (pid: 5741 comm: kworker/2:4) [ 138.829610][T12855] comedi comedi1: reset error (fatal) [ 138.864566][T12929] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 138.966724][ T5745] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 139.516820][T12988] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3279'. [ 139.524078][ T855] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 139.683578][ T855] usb 5-1: Using ep0 maxpacket: 8 [ 139.684155][ T855] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 139.685186][ T855] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.685204][ T855] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 139.685238][ T855] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.685270][ T855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.692347][ T855] hub 5-1:1.0: bad descriptor, ignoring hub [ 139.692367][ T855] hub 5-1:1.0: probe with driver hub failed with error -5 [ 139.692805][ T855] cdc_wdm 5-1:1.0: skipping garbage [ 139.692818][ T855] cdc_wdm 5-1:1.0: skipping garbage [ 139.697085][ T855] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 139.697096][ T855] cdc_wdm 5-1:1.0: Unknown control protocol [ 139.728054][ T2338] kernel read not supported for file /swradio4 (pid: 2338 comm: kworker/2:3) [ 139.760957][T13018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3293'. [ 139.893927][ T5741] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 140.053460][ T5741] usb 8-1: Using ep0 maxpacket: 8 [ 140.054452][ T5741] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.055581][ T5741] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 140.055621][ T5741] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 140.055643][ T5741] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 140.055663][ T5741] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 140.055685][ T5741] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 140.055704][ T5741] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.055736][ T5741] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.262772][ T5741] usb 8-1: GET_CAPABILITIES returned 0 [ 140.262798][ T5741] usbtmc 8-1:16.0: can't read capabilities [ 140.752111][T13035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3301'. [ 140.752132][T13035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3301'. [ 142.661766][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.661856][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.662093][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.662109][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.662330][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.662345][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.662547][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.662561][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.662755][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.662769][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.662972][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.662982][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.663192][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.663206][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.663460][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.663474][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.663674][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.663688][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.663896][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 142.663910][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 142.664942][ T5825] usb 5-1: USB disconnect, device number 10 [ 142.665067][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 142.681484][ T855] usb 8-1: USB disconnect, device number 8 [ 143.043451][ T855] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 143.215221][ T855] usb 8-1: Using ep0 maxpacket: 8 [ 143.215811][ T855] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 143.216956][ T855] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.216993][ T855] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.220290][ T855] usb 8-1: config 0 descriptor?? [ 143.431568][ T855] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 143.625927][T13089] ipvlan1: entered promiscuous mode [ 143.631395][ T5741] usb 8-1: USB disconnect, device number 9 [ 143.882377][T13107] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 143.915399][T13109] block nbd1: not configured, cannot reconfigure [ 143.923884][ T67] block nbd0: Receive control failed (result -32) [ 143.926546][ T67] block nbd0: Receive control failed (result -32) [ 144.009107][T13125] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 144.032535][T13127] sg_write: process 1452 (syz.1.3344) changed security contexts after opening file descriptor, this is not allowed. [ 144.038019][ T12] rtrs_client L1783: : Resolving route failed, err: -ENODEV [ 144.071352][T13125] rtrs_client L2644: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 144.085870][ T43] audit: type=1807 audit(1792021320.754:219): action=appraise func=FIRMWARE_CHECK res=1 [ 144.087670][T13128] ima: policy update completed [ 144.087765][ T43] audit: type=1802 audit(1792021320.764:220): pid=13128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.1.3345" res=1 errno=0 [ 144.151392][T13137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3349'. [ 144.310373][T13157] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 145.135707][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3394'. [ 145.170418][T13238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3397'. [ 146.501717][T13331] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 146.501735][T13331] CPU: 3 UID: 0 PID: 13331 Comm: syz.0.3433 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.501752][T13331] Tainted: [L]=SOFTLOCKUP [ 146.501757][T13331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.501764][T13331] Call Trace: [ 146.501769][T13331] [ 146.501774][T13331] dump_stack_lvl+0x100/0x190 [ 146.501793][T13331] sysfs_warn_dup.cold+0x1c/0x28 [ 146.501819][T13331] sysfs_create_dir_ns+0x24b/0x2b0 [ 146.501837][T13331] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 146.501854][T13331] ? find_held_lock+0x2b/0x80 [ 146.501868][T13331] ? kobject_add_internal+0x25f/0x930 [ 146.501883][T13331] ? kobject_add_internal+0x25f/0x930 [ 146.501898][T13331] ? class_dir_child_ns_type+0xd/0x60 [ 146.501916][T13331] kobject_add_internal+0x2c8/0x930 [ 146.501932][T13331] kobject_add+0x16a/0x1e0 [ 146.501946][T13331] ? __pfx_kobject_add+0x10/0x10 [ 146.501961][T13331] ? get_device_parent+0x1b3/0x4c0 [ 146.501975][T13331] ? kobject_put+0xb9/0x640 [ 146.501992][T13331] device_add+0x294/0x1970 [ 146.502007][T13331] ? lockdep_init_map_type+0x5c/0x250 [ 146.502024][T13331] ? __pfx_device_add+0x10/0x10 [ 146.502038][T13331] ? lockdep_init_map_type+0x5c/0x250 [ 146.502056][T13331] ? __init_waitqueue_head+0xca/0x150 [ 146.502073][T13331] tty_register_device_attr+0x388/0x810 [ 146.502086][T13331] ? lockdep_init_map_type+0x5c/0x250 [ 146.502104][T13331] ? __pfx_tty_register_device_attr+0x10/0x10 [ 146.502120][T13331] ? tty_port_init+0x156/0x1c0 [ 146.502136][T13331] gsm_activate_mux+0x155/0x2a0 [ 146.502150][T13331] gsmld_ioctl+0xbbc/0x15c0 [ 146.502171][T13331] ? __pfx_gsmld_ioctl+0x10/0x10 [ 146.502220][T13331] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 146.502244][T13331] ? __pfx_gsmld_ioctl+0x10/0x10 [ 146.502259][T13331] tty_compat_ioctl+0x396/0x420 [ 146.502273][T13331] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 146.502287][T13331] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 146.502306][T13331] __do_fast_syscall_32+0x13a/0x8b0 [ 146.502320][T13331] do_fast_syscall_32+0x32/0x70 [ 146.502332][T13331] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.502347][T13331] RIP: 0023:0xf7ff6fec [ 146.502360][T13331] Code: Unable to access opcode bytes at 0xf7ff6fc2. [ 146.502365][T13331] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 146.502376][T13331] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000404c4701 [ 146.502384][T13331] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.502391][T13331] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.502397][T13331] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 146.502404][T13331] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.502418][T13331] [ 146.502430][T13331] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 146.967388][T13366] netlink: 'syz.2.3450': attribute type 2 has an invalid length. [ 146.967402][T13366] netlink: 'syz.2.3450': attribute type 1 has an invalid length. [ 146.967410][T13366] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3450'. [ 146.967420][T13366] netlink: 'syz.2.3450': attribute type 2 has an invalid length. [ 146.967427][T13366] netlink: 'syz.2.3450': attribute type 1 has an invalid length. [ 146.967434][T13366] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3450'. [ 146.967441][T13366] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 148.253571][ T5745] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 148.428062][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3464'. [ 148.708304][T13430] jffs2: notice: (13430) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 149.202758][ T30] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 149.208196][ T30] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 149.409839][T13513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3515'. [ 149.410574][T13513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3515'. [ 149.466996][ T1038] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 149.497056][T13517] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3517'. [ 149.497532][T13517] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3517'. [ 149.635694][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3520'. [ 149.636431][T13522] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3520'. [ 149.817797][T13540] ima: Unable to open file: /e (-2) [ 149.818005][T13539] ima: policy update failed [ 149.818116][ T43] audit: type=1802 audit(1792021326.494:221): pid=13539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3528" res=0 errno=0 [ 149.973918][ T1038] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 150.012126][T13503] ceph: No mds server is up or the cluster is laggy [ 150.274888][T13575] C: renamed from veth1_to_team (while UP) [ 150.277146][T13575] netlink: 'syz.0.3546': attribute type 3 has an invalid length. [ 150.277157][T13575] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3546'. [ 150.277382][T13575] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 150.714167][ T5741] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 150.864161][ T5741] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 150.867399][ T5741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.867412][ T5741] usb 5-1: Product: syz [ 150.867420][ T5741] usb 5-1: Manufacturer: syz [ 150.867427][ T5741] usb 5-1: SerialNumber: syz [ 150.875002][T13619] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 150.963642][ T25] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 151.072093][ T5741] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 151.072121][ T5741] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 151.072132][ T5741] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 151.078596][ T5741] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 151.082153][ T5741] usb 5-1: USB disconnect, device number 11 [ 151.114271][ T25] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 151.115175][ T25] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 151.115194][ T25] usb 8-1: config 0 has no interface number 0 [ 151.115223][ T25] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 151.118996][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.119014][ T25] usb 8-1: Product: syz [ 151.119023][ T25] usb 8-1: Manufacturer: syz [ 151.119034][ T25] usb 8-1: SerialNumber: syz [ 151.120856][ T25] usb 8-1: config 0 descriptor?? [ 151.125532][ T25] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 151.638498][T13639] tipc: Started in network mode [ 151.638527][T13639] tipc: Node identity ac14140f, cluster identity 4711 [ 151.638682][T13639] tipc: New replicast peer: 255.255.255.255 [ 151.639083][T13639] tipc: Enabled bearer , priority 10 [ 151.795297][T13647] ipvlan2: entered allmulticast mode [ 151.795313][T13647] macvlan1: entered allmulticast mode [ 151.795322][T13647] veth1_vlan: entered allmulticast mode [ 151.797617][T13647] batman_adv: batadv0: Adding interface: ipvlan2 [ 151.797626][T13647] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.797642][T13647] batman_adv: batadv0: Interface activated: ipvlan2 [ 151.883484][ T5850] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 151.984875][T13655] jffs2: notice: (13655) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 152.033576][ T5850] usb 6-1: Using ep0 maxpacket: 32 [ 152.034134][ T855] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 152.034309][ T5850] usb 6-1: New USB device found, idVendor=1bac, idProduct=0304, bcdDevice= 0.00 [ 152.035482][ T5850] usb 6-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30 [ 152.035515][ T5850] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.035537][ T5850] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 152.035559][ T5850] usb 6-1: config 0 interface 0 has no altsetting 0 [ 152.035584][ T5850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.037686][ T5850] usb 6-1: config 0 descriptor?? [ 152.194406][ T855] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 152.195621][ T855] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.195658][ T855] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 152.195679][ T855] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 152.195757][ T855] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 152.195778][ T855] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 152.195816][ T855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.199501][T13649] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 152.206855][ T855] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 152.211892][ T855] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 152.211958][ T855] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 152.216391][ T855] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 152.224474][ T855] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 152.227577][ T855] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 152.231002][ T855] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 152.245289][ T5850] usbhid 6-1:0.0: can't add hid device: -71 [ 152.245340][ T5850] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 152.247644][ T5850] usb 6-1: USB disconnect, device number 9 [ 152.527170][ T5825] usb 5-1: USB disconnect, device number 12 [ 152.530813][ T5825] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 152.533230][ T5825] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 152.533658][ T5825] keyspan 5-1:1.0: device disconnected [ 152.753492][ T1038] tipc: Node number set to 2886997007 [ 153.088529][T13687] netlink: 'syz.0.3597': attribute type 10 has an invalid length. [ 153.092002][T13687] team0: Device vxcan0 is of different type [ 153.193492][T13698] tipc: New replicast peer: 127.0.0.1 [ 153.193911][T13698] tipc: Enabled bearer , priority 10 [ 153.194965][T13698] tipc: Disabling bearer [ 153.273084][T13709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3608'. [ 153.279548][T13709] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3608'. [ 153.279562][T13709] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3608'. [ 153.386432][ C2] usb 8-1: yurex_control_callback - control failed: -2 [ 153.391591][ T855] usb 8-1: USB disconnect, device number 10 [ 153.401632][ T855] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 153.489616][T13737] rxe_eth0 speed is unknown, defaulting to 1000 [ 153.800442][T13773] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3636'. [ 153.922483][T13784] i2c i2c-0: delete_device: Can't find device in list [ 154.031111][T13802] Falling back ldisc for ttyS3. [ 154.269259][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3668'. [ 154.289291][T13842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3670'. [ 154.714636][T13111] block nbd1: Receive control failed (result -32) [ 154.721062][T13110] block nbd1: Receive control failed (result -32) [ 154.765152][T13880] sctp: [Deprecated]: syz.3.3686 (pid 13880) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.765152][T13880] Use struct sctp_sack_info instead [ 155.917291][ T43] audit: type=1807 audit(1792021332.594:222): action=measure func=F res=0 [ 155.917363][ T43] audit: type=1802 audit(1792021332.594:223): pid=13914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.3702" res=0 errno=0 [ 155.917518][T13913] ima: policy update failed [ 155.917604][ T43] audit: type=1802 audit(1792021332.594:224): pid=13913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3702" res=0 errno=0 [ 155.961369][T13916] openvswitch: netlink: IP tunnel dst address not specified [ 155.961398][T13916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.055518][T13912] syz.1.3701(13912): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 156.140241][T13926] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3707'. [ 156.246822][T13111] block nbd2: Receive control failed (result -32) [ 156.248673][T13110] block nbd2: Receive control failed (result -32) [ 156.344923][T13944] bcache: register_bcache() error : failed to open device [ 156.523218][T13969] WARNING! power/level is deprecated; use power/control instead PÚÿÿÿ-D [ 158.194018][ T5741] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 158.403825][T14025] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 158.423196][ T7715] rtrs_client L1783: : Resolving route failed, err: -ENODEV [ 158.451572][T14025] rtrs_client L2644: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 168.407807][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3752'. [ 168.430144][T14066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3756'. [ 168.444527][ T5786] netdevsim netdevsim10 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.646138][T14088] gadgetfs: bound to dummy_udc driver [ 170.467266][T14189] batadv_slave_1: entered promiscuous mode [ 170.467740][T14189] batadv_slave_1: left promiscuous mode [ 170.749793][T14223] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 170.750210][T14223] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 170.753701][ T5530] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 170.923529][ T5530] usb 6-1: Using ep0 maxpacket: 8 [ 170.925420][ T5530] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 170.926453][ T5530] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 170.926484][ T5530] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.926500][ T5530] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 170.926517][ T5530] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 170.926533][ T5530] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.926559][ T5530] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.025542][T14244] bond0: (slave gtp0): refused to change device type [ 171.142734][ T5530] usb 6-1: GET_CAPABILITIES returned 0 [ 171.142761][ T5530] usbtmc 6-1:16.0: can't read capabilities [ 171.347700][ T5741] usb 6-1: USB disconnect, device number 10 [ 171.372843][T14272] ovs-dp0: entered promiscuous mode [ 172.035227][ T5835] kernel read not supported for file /dsp1 (pid: 5835 comm: kworker/3:4) [ 172.817862][T14362] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.906051][T14362] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.968435][T14362] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.022168][T14362] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.153480][ T5786] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.153505][ T5786] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.153523][ T5786] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.153540][ T5786] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.332218][T14390] binder: 14389:14390 unknown command 120 [ 173.332233][T14390] binder: 14389:14390 ioctl c0306201 80000180 returned -22 [ 173.429685][T14404] i2c i2c-1: Invalid 7-bit I2C address 0x00 [ 173.607980][T14432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3918'. [ 173.608946][T14432] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3918'. [ 173.608957][T14432] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3918'. [ 173.978426][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3934'. [ 173.979314][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3934'. [ 174.021864][ T5745] Bluetooth: hci2: unexpected event 0x0f length: 84 > 4 [ 174.021896][ T5745] Bluetooth: hci2: unexpected event for opcode 0x0411 [ 174.773445][ T855] kernel read not supported for file /video7 (pid: 855 comm: kworker/0:2) [ 175.015373][T14522] sda1: Can't mount, would change RO state [ 175.443321][T14557] XFS (mtdblock0): Invalid superblock magic number [ 176.514113][ T5741] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 186.876833][T14645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3994'. [ 187.072668][ T5850] kernel write not supported for file [eventfd] (pid: 5850 comm: kworker/0:6) [ 187.537534][T14732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4034'. [ 187.565267][T14732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4034'. [ 187.592765][T14736] binder: BINDER_SET_CONTEXT_MGR already set [ 187.592775][T14736] binder: 14735:14736 ioctl 4018620d 80000280 returned -16 [ 187.678828][ T43] audit: type=1807 audit(1792021364.354:225): UNKNOWN=appr#ise res=0 [ 187.678896][ T43] audit: type=1802 audit(1792021364.354:226): pid=14746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.4041" res=0 errno=0 [ 187.679100][T14745] ima: policy update failed [ 187.679194][ T43] audit: type=1802 audit(1792021364.354:227): pid=14745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.4041" res=0 errno=0 [ 187.734568][T14752] input: syz1 as /devices/virtual/input/input22 [ 187.856377][T14773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4054'. [ 188.015749][T14791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4062'. [ 188.143903][ T30] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 188.293450][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 188.293920][ T30] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 188.297198][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.297212][ T30] usb 6-1: Product: syz [ 188.297219][ T30] usb 6-1: Manufacturer: syz [ 188.297226][ T30] usb 6-1: SerialNumber: syz [ 188.510336][ T30] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 188.512578][ T30] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 188.512741][ T30] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 188.512761][ T30] usb 6-1: media controller created [ 188.520186][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 188.552784][T14810] netlink: 'syz.0.4070': attribute type 9 has an invalid length. [ 188.567234][T14812] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4071'. [ 188.567897][T14812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4071'. [ 188.567913][T14812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4071'. [ 188.735654][ T30] zl10353_read_register: readreg error (reg=127, ret==-110) [ 188.767744][ T30] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 188.771287][ T30] usb 6-1: USB disconnect, device number 11 [ 189.000081][T14840] ACPI: EC: Assuming SCI_EVT clearing on event reads [ 189.276289][T14845] phram: illegal device length [ 189.869477][T14898] block2mtd: Using custom MTD label '&' for dev #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-‰%#!$([)^)} [ 189.871457][T14898] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-‰%#!$([)^)} [ 189.966601][T14908] jffs2: notice: (14908) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 190.205445][T14923] bond2 (unregistering): Released all slaves [ 190.987452][ T43] audit: type=1326 audit(1792021367.664:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14953 comm="syz.1.4128" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73defec code=0x0 [ 191.093063][T14956] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 191.099759][ T1625] Bluetooth: hci4: Frame reassembly failed (-84) [ 191.515283][T14968] netlink: 'syz.3.4134': attribute type 4 has an invalid length. [ 191.515298][T14968] netlink: 'syz.3.4134': attribute type 8 has an invalid length. [ 191.515305][T14968] netlink: 212 bytes leftover after parsing attributes in process `syz.3.4134'. [ 192.535326][T15023] netlink: 'syz.3.4159': attribute type 14 has an invalid length. [ 192.611423][T15027] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48000 [ 192.611441][T15027] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 192.611457][T15027] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 192.611468][T15027] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 192.611475][T15027] page dumped because: unmovable page [ 192.611481][T15027] page_owner tracks the page as allocated [ 192.611485][T15027] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 1, tgid 1 (swapper/0), ts 8232118785 [ 192.611529][T15027] post_alloc_hook+0xfd/0x120 [ 192.611547][T15027] get_page_from_freelist+0x110d/0x35d0 [ 192.611561][T15027] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 192.611575][T15027] alloc_pages_mpol+0x201/0x550 [ 192.611585][T15027] alloc_pages_noprof+0x1a/0x160 [ 192.611597][T15027] __vmalloc_node_range_noprof+0x833/0x1420 [ 192.611616][T15027] __vmalloc_node_noprof+0xad/0xf0 [ 192.611633][T15027] tpg_alloc+0x166/0x9b0 [ 192.611649][T15027] vivid_probe.cold+0x2166/0x921e [ 192.611663][T15027] platform_probe+0x106/0x1d0 [ 192.611681][T15027] really_probe+0x241/0xa60 [ 192.611692][T15027] __driver_probe_device+0x210/0x460 [ 192.611704][T15027] driver_probe_device+0x4a/0x140 [ 192.611715][T15027] __driver_attach+0x21f/0x5b0 [ 192.611727][T15027] bus_for_each_dev+0x13e/0x1d0 [ 192.611743][T15027] bus_add_driver+0x305/0x5b0 [ 192.611753][T15027] page_owner free stack trace missing [ 192.929140][T15036] kAFS: bad VL server IP address [ 193.133433][ T5745] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 193.525732][T15052] sd 0:0:0:0: PR command failed: 1026 [ 193.525775][T15052] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 193.525813][T15052] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 193.696332][ T1436] aoe: packet could not be sent on wpan0. consider increasing tx_queue_len [ 193.696362][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.842118][ T43] audit: type=1807 audit(1792021370.514:229): action=appraise UNKNOWN=f res=0 [ 193.842217][ T43] audit: type=1802 audit(1792021370.514:230): pid=15084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.4187" res=0 errno=0 [ 193.842492][T15083] ima: policy update failed [ 193.842558][ T43] audit: type=1802 audit(1792021370.514:231): pid=15083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.4187" res=0 errno=0 [ 193.859611][T15086] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4188'. [ 194.121196][ T1161] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 195.603093][T15193] bond0: no command found in slaves file - use +ifname or -ifname [ 195.752453][T15203] sd 0:0:0:0: PR command failed: 1026 [ 195.752480][T15203] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 195.752501][T15203] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 196.173484][ T5746] Bluetooth: hci4: command 0x1003 tx timeout [ 196.173870][ T5745] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 196.695947][T15214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4249'. [ 196.729011][T15218] caif0: tun_chr_ioctl cmd 1074025672 [ 196.729038][T15218] caif0: ignored: set checksum enabled [ 198.589668][T15264] overlayfs: invalid origin (0000) [ 199.053524][ T5746] Bluetooth: hci4: command 0x1003 tx timeout [ 199.055868][ T5745] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 200.512995][ T43] audit: type=1400 audit(1792021377.184:232): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=15310 comm="syz.0.4292" [ 200.630381][T15324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4298'. [ 200.675413][ T5743] Bluetooth: hci5: sending frame failed (-49) [ 200.677997][ T5746] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 200.715064][T15332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4303'. [ 200.811297][T15350] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4312'. [ 201.047044][T12663] bond0: (slave bond_slave_0): interface is now down [ 201.047059][T12663] bond0: (slave bond_slave_1): interface is now down [ 201.052808][T12663] bond0: now running without any active interface! [ 202.110387][ T43] audit: type=1400 audit(1792021378.784:233): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=15408 comm="syz.1.4337" name="p" offset=53 [ 202.413519][ T5746] Bluetooth: hci4: command 0x1003 tx timeout [ 202.415108][ T5745] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 202.596186][T15476] erspan0: entered promiscuous mode [ 202.811925][T15509] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4383'. [ 202.815157][ T1625] IPVS: starting estimator thread 0... [ 202.905033][T15510] IPVS: using max 43 ests per chain, 103200 per kthread [ 203.010667][T15528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4392'. [ 203.040347][T15533] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4395'. [ 203.075289][T15537] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000003) at rIP: 0xffffffff81b2cfea (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 203.075320][T15537] Call Trace: [ 203.075338][T15537] [ 203.075345][T15537] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 203.075361][T15537] ? native_send_call_func_ipi+0xcb/0x1b0 [ 203.075380][T15537] mce_cpu_restart+0xd5/0x1f0 [ 203.075392][T15537] ? __pfx_mce_cpu_restart+0x10/0x10 [ 203.075405][T15537] ? set_bank+0x240/0x3a0 [ 203.075414][T15537] smp_call_function_many_cond+0x1449/0x18c0 [ 203.075437][T15537] ? __pfx_mce_cpu_restart+0x10/0x10 [ 203.075451][T15537] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 203.075471][T15537] ? __timer_delete_sync+0x10f/0x1c0 [ 203.075492][T15537] set_bank+0x240/0x3a0 [ 203.075503][T15537] ? __pfx_set_bank+0x10/0x10 [ 203.075513][T15537] ? find_held_lock+0x2b/0x80 [ 203.075527][T15537] ? sysfs_file_kobj+0xe4/0x290 [ 203.075542][T15537] ? sysfs_file_kobj+0xe4/0x290 [ 203.075557][T15537] ? __pfx_set_bank+0x10/0x10 [ 203.075567][T15537] dev_attr_store+0x58/0x80 [ 203.075583][T15537] ? __pfx_dev_attr_store+0x10/0x10 [ 203.075598][T15537] sysfs_kf_write+0xf2/0x150 [ 203.075614][T15537] kernfs_fop_write_iter+0x3e0/0x5f0 [ 203.075628][T15537] ? __pfx_sysfs_kf_write+0x10/0x10 [ 203.075644][T15537] vfs_write+0x6af/0x1050 [ 203.075661][T15537] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 203.075676][T15537] ? __pfx_vfs_write+0x10/0x10 [ 203.075689][T15537] ? find_held_lock+0x2b/0x80 [ 203.075718][T15537] ksys_write+0x12a/0x250 [ 203.075732][T15537] ? __pfx_ksys_write+0x10/0x10 [ 203.075754][T15537] __do_fast_syscall_32+0x13a/0x8b0 [ 203.075769][T15537] do_fast_syscall_32+0x32/0x70 [ 203.075782][T15537] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.075797][T15537] RIP: 0023:0xf7ff6fec [ 203.075810][T15537] Code: Unable to access opcode bytes at 0xf7ff6fc2. [ 203.075815][T15537] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 203.075827][T15537] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 203.075834][T15537] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.075841][T15537] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 203.075847][T15537] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 203.075854][T15537] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.075869][T15537] [ 206.523551][T15603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4425'. [ 206.677640][T15613] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4428'. [ 206.836513][T15633] vivid-000: disconnect [ 206.844244][T15626] vivid-000: reconnect [ 206.937764][T15646] batman_adv: batadv0: Adding interface: virt_wifi0 [ 206.937777][T15646] batman_adv: batadv0: Interface activated: virt_wifi0 [ 206.938724][T15648] jffs2: notice: (15648) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 207.111641][T15670] tipc: Enabling of bearer rejected, already enabled [ 207.696154][T15730] netlink: 'syz.0.4484': attribute type 3 has an invalid length. [ 207.696167][T15730] netlink: 'syz.0.4484': attribute type 2 has an invalid length. syzkaller syzkaller login: [ 208.303399][T15804] scsi_dev_info_list_add_str: bad dev info string 'Öõ' '' '' [ 208.366107][T15815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4524'. [ 208.366130][T15815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4524'. [ 208.577671][T15843] block2mtd: illegal erase size [ 209.068198][ T5746] Bluetooth: hci1: command 0x0c1a tx timeout [ 209.072533][T15882] kAFS: bad VL server IP address [ 209.528170][T15900] block2mtd: illegal erase size [ 210.070349][T15920] netlink: 284 bytes leftover after parsing attributes in process `syz.3.4575'. [ 210.317431][T15939] synth uevent: /bus/acpi: unknown uevent action string [ 210.820674][ T43] audit: type=1326 audit(1792021387.494:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.3.4598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 210.820905][ T43] audit: type=1326 audit(1792021387.494:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.3.4598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 210.825389][ T43] audit: type=1326 audit(1792021387.504:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.3.4598" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 210.825608][ T43] audit: type=1326 audit(1792021387.504:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.3.4598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 210.826200][ T43] audit: type=1326 audit(1792021387.504:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.3.4598" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 210.826377][ T43] audit: type=1326 audit(1792021387.504:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.3.4598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 210.826559][ T43] audit: type=1326 audit(1792021387.504:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.3.4598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 210.827027][ T43] audit: type=1326 audit(1792021387.504:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.3.4598" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 210.827264][ T43] audit: type=1326 audit(1792021387.504:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.3.4598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 210.827436][ T43] audit: type=1326 audit(1792021387.504:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15986 comm="syz.3.4598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 210.884965][T15995] cramfs: checking physical address 0x000000002a200000 for linear cramfs image [ 210.885093][T15995] cramfs: wrong magic [ 210.888045][T15995] cramfs: wrong magic [ 211.074726][T16005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4606'. [ 211.135389][T16011] io-wq is not configured for unbound workers [ 211.256485][T16019] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 211.256609][T16019] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 211.730475][T16059] phram: not enough arguments [ 211.779119][T16065] netlink: 'syz.3.4635': attribute type 18 has an invalid length. [ 211.962586][T16081] loop7: detected capacity change from 0 to 7 [ 213.053528][ T5850] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 213.203886][ T5850] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 213.204773][ T5850] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.206084][ T5850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 213.206096][ T5850] usb 6-1: Product: syz [ 213.206103][ T5850] usb 6-1: Manufacturer: syz [ 213.212225][ T5850] usb 6-1: selecting invalid altsetting 1 [ 213.212740][ T5850] dvb_ttusb_budget: ttusb_init_controller: error [ 213.212748][ T5850] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 213.280879][ T5850] DVB: Unable to find symbol cx22700_attach() [ 213.293714][ T5745] Bluetooth: hci2: command 0x0c1a tx timeout [ 213.293749][ T5745] Bluetooth: hci1: command 0x0c1a tx timeout [ 213.299747][T16138] cramfs: checking physical address 0x000000002a200000 for linear cramfs image [ 213.299769][T16138] cramfs: wrong magic [ 213.301153][T16138] cramfs: wrong magic [ 213.311531][ T5850] DVB: Unable to find symbol tda10046_attach() [ 213.311540][ T5850] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 213.357807][T16146] rnbd_client L213: map_device: Parameters missing [ 213.416050][ T5850] usb 6-1: USB disconnect, device number 12 [ 213.893265][T16185] kvm [16184]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x1 [ 214.102743][T16208] nvme_fcloop: unknown parameter or missing value 'ww' [ 215.324015][T16250] openvswitch: netlink: Unknown nsh attribute 0 [ 215.375521][ T5746] Bluetooth: hci2: command 0x0c1a tx timeout [ 215.394190][T16259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4722'. [ 215.395157][T16259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4722'. [ 216.104295][ T1129] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 216.116048][ T1129] ata1.00: configured for UDMA/100 [ 216.315521][T16306] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input23 [ 216.668371][T16329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4760'. [ 217.709290][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4762'. [ 217.846649][T16361] warn_alloc: 2 callbacks suppressed [ 217.846667][T16361] syz.0.4770: vmalloc error: size 2147479553, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 217.846741][T16361] CPU: 3 UID: 0 PID: 16361 Comm: syz.0.4770 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.846759][T16361] Tainted: [L]=SOFTLOCKUP [ 217.846763][T16361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.846770][T16361] Call Trace: [ 217.846775][T16361] [ 217.846780][T16361] dump_stack_lvl+0x100/0x190 [ 217.846800][T16361] warn_alloc.cold+0x9e/0xb2 [ 217.846814][T16361] ? __pfx_warn_alloc+0x10/0x10 [ 217.846833][T16361] ? do_raw_spin_lock+0x128/0x260 [ 217.846854][T16361] __vmalloc_node_range_noprof+0x123b/0x1420 [ 217.846874][T16361] ? rcu_is_watching+0x13/0xc0 [ 217.846886][T16361] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 217.846909][T16361] ? lru_gen_seq_write+0x136/0x14c0 [ 217.846928][T16361] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 217.846946][T16361] ? find_held_lock+0x2b/0x80 [ 217.846959][T16361] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 217.846977][T16361] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.846998][T16361] ? rcu_is_watching+0x13/0xc0 [ 217.847014][T16361] __kvmalloc_node_noprof+0x3da/0x9b0 [ 217.847031][T16361] ? lru_gen_seq_write+0x136/0x14c0 [ 217.847056][T16361] ? lru_gen_seq_write+0x136/0x14c0 [ 217.847086][T16361] lru_gen_seq_write+0x136/0x14c0 [ 217.847125][T16361] ? lock_acquire+0x1d1/0x380 [ 217.847152][T16361] ? __pfx_lru_gen_seq_write+0x10/0x10 [ 217.847172][T16361] ? find_held_lock+0x2b/0x80 [ 217.847185][T16361] ? aa_file_perm+0x7e4/0x14d0 [ 217.847201][T16361] ? aa_file_perm+0x7e4/0x14d0 [ 217.847220][T16361] ? aa_file_perm+0x7f3/0x14d0 [ 217.847237][T16361] ? __pfx___futex_wait+0x10/0x10 [ 217.847255][T16361] ? __lock_acquire+0x5c0/0x1f40 [ 217.847279][T16361] ? __debugfs_file_get+0x1fc/0x860 [ 217.847295][T16361] ? __pfx___debugfs_file_get+0x10/0x10 [ 217.847310][T16361] ? lock_acquire+0x1d1/0x380 [ 217.847326][T16361] ? ksys_write+0x12a/0x250 [ 217.847344][T16361] ? full_proxy_write+0x135/0x1a0 [ 217.847358][T16361] full_proxy_write+0x135/0x1a0 [ 217.847376][T16361] vfs_write+0x2aa/0x1050 [ 217.847390][T16361] ? __pfx_full_proxy_write+0x10/0x10 [ 217.847406][T16361] ? lock_acquire+0x1d1/0x380 [ 217.847422][T16361] ? __fget_files+0x34/0x3d0 [ 217.847437][T16361] ? __pfx_vfs_write+0x10/0x10 [ 217.847450][T16361] ? find_held_lock+0x2b/0x80 [ 217.847464][T16361] ? __fget_files+0x215/0x3d0 [ 217.847482][T16361] ? __fget_files+0x21f/0x3d0 [ 217.847501][T16361] ksys_write+0x12a/0x250 [ 217.847516][T16361] ? __pfx_ksys_write+0x10/0x10 [ 217.847535][T16361] __do_fast_syscall_32+0x13a/0x8b0 [ 217.847550][T16361] do_fast_syscall_32+0x32/0x70 [ 217.847562][T16361] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.847577][T16361] RIP: 0023:0xf7ff6fec [ 217.847597][T16361] Code: Unable to access opcode bytes at 0xf7ff6fc2. [ 217.847603][T16361] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 217.847615][T16361] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 217.847623][T16361] RDX: 00000000ffffffe4 RSI: 0000000000000000 RDI: 0000000000000000 [ 217.847630][T16361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.847637][T16361] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 217.847644][T16361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.847660][T16361] [ 217.847666][T16361] Mem-Info: [ 217.847673][T16361] active_anon:1135 inactive_anon:235 isolated_anon:0 [ 217.847673][T16361] active_file:6733 inactive_file:13007 isolated_file:0 [ 217.847673][T16361] unevictable:1000 dirty:204 writeback:0 [ 217.847673][T16361] slab_reclaimable:7170 slab_unreclaimable:59958 [ 217.847673][T16361] mapped:22589 shmem:1003 pagetables:1808 [ 217.847673][T16361] sec_pagetables:316 bounce:0 [ 217.847673][T16361] kernel_misc_reclaimable:0 [ 217.847673][T16361] free:34078 free_pcp:6423 free_cma:0 [ 217.847699][T16361] Node 0 active_anon:4kB inactive_anon:44kB active_file:116kB inactive_file:1420kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:4kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8160kB pagetables:1184kB sec_pagetables:1152kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 217.847728][T16361] Node 1 active_anon:4536kB inactive_anon:896kB active_file:26816kB inactive_file:50608kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:90320kB dirty:812kB writeback:0kB shmem:2012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6796kB pagetables:6048kB sec_pagetables:112kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 217.847764][T16361] Node 0 DMA free:3632kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 217.847813][T16361] lowmem_reserve[]: 0 259 259 259 259 [ 217.847847][T16361] Node 0 DMA32 free:21136kB boost:10240kB min:21944kB low:24868kB high:27792kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:44kB active_file:8kB inactive_file:1420kB unevictable:2000kB writepending:4kB zspages:1396kB present:1032196kB managed:265356kB mlocked:0kB bounce:0kB free_pcp:3404kB local_pcp:0kB free_cma:0kB [ 217.847896][T16361] lowmem_reserve[]: 0 0 0 0 0 [ 217.847915][T16361] Node 1 DMA32 free:111544kB boost:8192kB min:55332kB low:67116kB high:78900kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4536kB inactive_anon:896kB active_file:26816kB inactive_file:50608kB unevictable:2000kB writepending:812kB zspages:3904kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:22280kB local_pcp:10628kB free_cma:0kB [ 217.850517][T16361] lowmem_reserve[]: 0 0 0 0 0 [ 217.850544][T16361] Node 0 DMA: 130*4kB (U) 43*8kB (U) 15*16kB (U) 31*32kB (U) 12*64kB (U) 2*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3632kB [ 217.850644][T16361] Node 0 DMA32: 28*4kB (UME) 82*8kB (UME) 41*16kB (UME) 172*32kB (UME) 54*64kB (UME) 12*128kB (UME) 6*256kB (UME) 9*512kB (UME) 3*1024kB (UM) 0*2048kB 0*4096kB = 21136kB [ 217.850732][T16361] Node 1 DMA32: 1407*4kB (UME) 720*8kB (UME) 435*16kB (UME) 330*32kB (UME) 217*64kB (UME) 98*128kB (UME) 41*256kB (UME) 29*512kB (UME) 10*1024kB (UM) 6*2048kB (UM) 2*4096kB (U) = 111404kB [ 217.850827][T16361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.850836][T16361] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.850844][T16361] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.850852][T16361] Node 1 hugepages_total=69 hugepages_free=69 hugepages_surp=0 hugepages_size=2048kB [ 217.850860][T16361] 21191 total pagecache pages [ 217.850865][T16361] 450 pages in swap cache [ 217.850869][T16361] Free swap = 98012kB [ 217.850873][T16361] Total swap = 124996kB [ 217.850877][T16361] 524155 pages RAM [ 217.850881][T16361] 0 pages HighMem/MovableOnly [ 217.850884][T16361] 216924 pages reserved [ 217.850888][T16361] 0 pages cma reserved [ 218.118983][T16377] bond0: option arp_interval: invalid value ( ) [ 218.118998][T16377] bond0: option arp_interval: allowed values 0 - 2147483647 [ 218.329364][T16385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4781'. [ 218.329388][T16385] block nbd3: Unsupported socket: should be TCP or UNIX. [ 218.464511][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4784'. [ 218.464533][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4784'. [ 218.464557][T16391] netlink: 'syz.0.4784': attribute type 18 has an invalid length. [ 218.466545][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4784'. [ 218.466562][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4784'. [ 218.466582][T16391] netlink: 'syz.0.4784': attribute type 18 has an invalid length. [ 219.276039][T16437] netlink: 'syz.2.4806': attribute type 10 has an invalid length. [ 219.291043][T16437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.296724][T16437] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 219.315665][T16437] bond0: (slave batadv0): Releasing backup interface [ 219.321391][T16437] bridge_slave_0: left allmulticast mode [ 219.321413][T16437] bridge_slave_0: left promiscuous mode [ 219.321640][T16437] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.326156][T16437] bridge_slave_1: left allmulticast mode [ 219.326176][T16437] bridge_slave_1: left promiscuous mode [ 219.326340][T16437] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.343997][T16437] bond0: (slave bond_slave_0): Releasing backup interface [ 219.352516][T16437] bond0: (slave bond_slave_1): Releasing backup interface [ 219.365186][T16437] team0: Port device team_slave_0 removed [ 219.369103][T16437] team0: Port device team_slave_1 removed [ 219.369496][T16437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.369508][T16437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.371677][T16437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.371694][T16437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.373578][T16437] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 219.636670][T16460] phram: illegal erasesize or len [ 219.720118][T16471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4821'. [ 219.754295][T16476] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 219.754312][T16476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.256308][T16515] netlink: 'syz.0.4843': attribute type 14 has an invalid length. [ 220.903252][T16582] ima: policy update failed [ 220.903927][ T43] audit: type=1802 audit(1792021397.574:244): pid=16582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.4875" res=0 errno=0 [ 222.814198][T16571] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 223.461481][T16604] netlink: 'syz.0.4883': attribute type 10 has an invalid length. [ 223.469397][T16604] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 223.487273][T16604] bond0: (slave dummy0): Releasing backup interface [ 223.496480][T16604] bridge_slave_0: left allmulticast mode [ 223.496496][T16604] bridge_slave_0: left promiscuous mode [ 223.496602][T16604] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.510311][T16604] bridge_slave_1: left allmulticast mode [ 223.510327][T16604] bridge_slave_1: left promiscuous mode [ 223.510420][T16604] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.526110][T16604] bond0: (slave bond_slave_0): Releasing backup interface [ 223.537704][T16604] bond0: (slave bond_slave_1): Releasing backup interface [ 223.558704][T16604] team0: Port device team_slave_0 removed [ 223.575055][T16604] team0: Port device team_slave_1 removed [ 223.575456][T16604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.575467][T16604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.583822][T16604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.583836][T16604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.591094][T16604] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 223.757393][T16620] tipc: Started in network mode [ 223.757411][T16620] tipc: Node identity 7f000001, cluster identity 4711 [ 223.757530][T16620] tipc: New replicast peer: 0.0.0.0 [ 223.757782][T16620] tipc: Enabled bearer , priority 10 [ 223.957390][T16635] smpboot: CPU 1 is now offline [ 224.020493][T16635] smpboot: CPU 3 is now offline [ 224.817451][T16694] kAFS: bad VL server IP address [ 224.873460][ T855] tipc: Node number set to 2130706433 [ 224.912390][T16701] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.125076][T16716] coredump: 2671(syz.3.4936): Core dump to core aborted: cannot preserve file permissions [ 225.248314][ T4674] IPVS: starting estimator thread 0... [ 225.334894][T16733] IPVS: using max 43 ests per chain, 103200 per kthread [ 225.548140][ T43] audit: type=1400 audit(1792021402.224:245): apparmor="STATUS" operation="profile_load" profile="unconfined" name="::o" pid=16741 comm="syz.1.4956" [ 225.769593][T16754] bond0: invalid ARP target specified [ 229.225333][ T107] IPVS: starting estimator thread 0... [ 229.299168][T16823] lo speed is unknown, defaulting to 1000 [ 229.299202][T16823] lo speed is unknown, defaulting to 1000 [ 229.299790][T16823] lo speed is unknown, defaulting to 1000 [ 229.300242][T16823] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 229.300261][T16823] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 229.300285][T16823] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 229.301565][T16823] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 229.318992][T16819] IPVS: using max 43 ests per chain, 103200 per kthread [ 229.324892][T16823] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 229.349097][T16823] lo speed is unknown, defaulting to 1000 [ 229.350606][T16823] lo speed is unknown, defaulting to 1000 [ 229.351285][T16823] lo speed is unknown, defaulting to 1000 [ 229.352017][T16823] lo speed is unknown, defaulting to 1000 [ 229.404758][T16823] CIFS: Attempting to mount //127.0.0.1/share [ 229.432084][T12663] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV [ 229.432102][T12663] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 229.435901][T16823] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:5445 failed: -ENODEV [ 229.470466][T12663] CIFS: VFS: smbdirect_connect_resolve_route:119 rdma_resolve_route() failed -ENODEV [ 229.470484][T12663] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 229.471720][T16823] CIFS: VFS: _smbd_get_connection:326 connect to 127.0.0.1:445 failed: -ENODEV [ 229.471878][T16823] CIFS: VFS: cifs_mount failed w/return code = -2 [ 229.674658][ T855] wacom 0003:056A:003F.000B: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 229.755162][T16864] netlink: 'syz.3.5004': attribute type 10 has an invalid length. [ 229.761600][T16864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.776877][T16864] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 229.793308][T16864] bond0: (slave batadv0): Releasing backup interface [ 229.807824][T16864] bridge_slave_0: left allmulticast mode [ 229.807839][T16864] bridge_slave_0: left promiscuous mode [ 229.807931][T16864] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.811009][T16864] bridge_slave_1: left promiscuous mode [ 229.811152][T16864] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.825152][T16864] bond0: (slave bond_slave_0): Releasing backup interface [ 229.831463][T16864] bond0: (slave bond_slave_1): Releasing backup interface [ 229.848213][T16864] team0: Port device team_slave_0 removed [ 229.860447][T16864] team0: Port device team_slave_1 removed [ 229.860825][T16864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.860836][T16864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.870329][T16864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.870342][T16864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.871362][T16864] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 230.015467][ T855] corsair-cpro 0003:1B1C:0C10.000C: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 230.086593][ T855] corsair-cpro 0003:1B1C:0C10.000C: probe with driver corsair-cpro failed with error -71 [ 230.199477][T16897] __nla_validate_parse: 2 callbacks suppressed [ 230.199491][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5017'. [ 230.199499][T16897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5017'. [ 230.359923][ T5741] corsair-cpro 0003:1B1C:0C10.000D: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 230.402979][ T5741] corsair-cpro 0003:1B1C:0C10.000D: probe with driver corsair-cpro failed with error -71 [ 230.437497][T16921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5028'. [ 230.772513][T16928] kAFS: unable to lookup cell '(G' [ 230.773016][T16928] kAFS: unable to lookup cell '(G' [ 230.895495][T16937] jffs2: notice: (16937) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 230.961366][T16944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5038'. [ 231.383341][T16975] syz.1.5053 uses obsolete (PF_INET,SOCK_PACKET) [ 231.482951][T16981] netlink: 'syz.1.5056': attribute type 10 has an invalid length. [ 231.504734][T16981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.505712][T16981] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 231.548167][T16981] bond0: (slave batadv0): Releasing backup interface [ 231.559814][T16981] bridge_slave_0: left allmulticast mode [ 231.559829][T16981] bridge_slave_0: left promiscuous mode [ 231.559934][T16981] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.576062][T16981] bridge_slave_1: left allmulticast mode [ 231.576079][T16981] bridge_slave_1: left promiscuous mode [ 231.576171][T16981] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.589561][T16981] bond0: (slave bond_slave_0): Releasing backup interface [ 231.603563][T16981] bond0: (slave bond_slave_1): Releasing backup interface [ 231.634999][T16981] team0: Port device team_slave_0 removed [ 231.641477][T16981] team0: Port device team_slave_1 removed [ 231.646342][T16981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.646356][T16981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.654845][T16981] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 231.654875][ T5741] lo speed is unknown, defaulting to 1000 [ 231.868007][T16997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5064'. [ 232.008932][T17011] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5071'. [ 232.075779][T17019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5075'. [ 232.291786][ T5746] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 232.813304][T17055] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 232.861544][ T43] audit: type=1807 audit(1792021409.534:246): func=FILE_CHECK res=0 [ 232.861641][ T43] audit: type=1802 audit(1792021409.534:247): pid=17059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.5093" res=0 errno=0 [ 232.861911][T17058] ima: policy update failed [ 232.861974][ T43] audit: type=1802 audit(1792021409.534:248): pid=17058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.5093" res=0 errno=0 [ 232.981957][T17069] bond0: no command found in slaves file - use +ifname or -ifname [ 233.243482][T17098] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5112'. [ 233.719632][T17136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5131'. [ 233.749128][T17139] netlink: 'syz.3.5132': attribute type 8 has an invalid length. [ 233.750589][T17139] sch_fq: defrate 0 ignored. [ 234.321648][ ** replaying previous printk message ** [ 234.321648][T17188] ================================================================== [ 234.321660][T17188] BUG: KASAN: slab-out-of-bounds in soft_cursor+0x458/0xa10 [ 234.321681][T17188] Read of size 30 at addr ffff888014fd3dc4 by task syz.3.5155/17188 [ 234.321691][T17188] [ 234.321698][T17188] CPU: 2 UID: 0 PID: 17188 Comm: syz.3.5155 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.321715][T17188] Tainted: [L]=SOFTLOCKUP [ 234.321720][T17188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.321728][T17188] Call Trace: [ 234.321731][T17188] [ 234.321736][T17188] dump_stack_lvl+0x100/0x190 [ 234.321753][T17188] print_report+0x13d/0x4b0 [ 234.321769][T17188] ? __virt_addr_valid+0x239/0x430 [ 234.321809][T17188] ? soft_cursor+0x458/0xa10 [ 234.321828][T17188] kasan_report+0xdf/0x1c0 [ 234.321847][T17188] ? soft_cursor+0x458/0xa10 [ 234.321865][T17188] kasan_check_range+0x10f/0x1e0 [ 234.321878][T17188] __asan_memcpy+0x23/0x60 [ 234.321892][T17188] soft_cursor+0x458/0xa10 [ 234.321911][T17188] ud_cursor+0xdd6/0x15f0 [ 234.321923][T17188] ? __pfx_ud_cursor+0x10/0x10 [ 234.321942][T17188] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 234.321960][T17188] ? get_color+0x1da/0x450 [ 234.321974][T17188] ? __pfx_ud_cursor+0x10/0x10 [ 234.321990][T17188] fbcon_cursor+0x43c/0x5e0 [ 234.322005][T17188] hide_cursor+0x87/0x230 [ 234.322022][T17188] redraw_screen+0x5d4/0x760 [ 234.322032][T17188] ? mark_held_locks+0x40/0x70 [ 234.322048][T17188] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 234.322065][T17188] ? __pfx_redraw_screen+0x10/0x10 [ 234.322075][T17188] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 234.322093][T17188] vc_do_resize+0xc3d/0xeb0 [ 234.322106][T17188] ? __pfx_vc_do_resize+0x10/0x10 [ 234.322117][T17188] ? __local_bh_enable_ip+0xa5/0x120 [ 234.322134][T17188] ? lockdep_hardirqs_on+0x7d/0x110 [ 234.322151][T17188] ? kernel_fpu_end+0x5f/0x80 [ 234.322163][T17188] ? __local_bh_enable_ip+0xa5/0x120 [ 234.322181][T17188] fbcon_do_set_font+0x443/0x8c0 [ 234.322197][T17188] fbcon_set_font+0x4be/0x730 [ 234.322211][T17188] ? __pfx_fbcon_set_font+0x10/0x10 [ 234.322225][T17188] con_font_op+0x991/0x1020 [ 234.322238][T17188] ? __pfx_con_font_op+0x10/0x10 [ 234.322251][T17188] ? __might_fault+0xc5/0x140 [ 234.322263][T17188] ? __might_fault+0xc5/0x140 [ 234.322277][T17188] vt_compat_ioctl+0x228/0x4e0 [ 234.322293][T17188] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 234.322308][T17188] ? __fget_files+0x215/0x3d0 [ 234.322322][T17188] ? hook_file_ioctl_common+0x140/0x440 [ 234.322345][T17188] ? __fget_files+0x21f/0x3d0 [ 234.322359][T17188] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 234.322376][T17188] tty_compat_ioctl+0x1b4/0x420 [ 234.322389][T17188] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 234.322402][T17188] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 234.322418][T17188] __do_fast_syscall_32+0x13a/0x8b0 [ 234.322430][T17188] ? lockdep_hardirqs_on+0x7d/0x110 [ 234.322448][T17188] do_fast_syscall_32+0x32/0x70 [ 234.322459][T17188] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 234.322475][T17188] RIP: 0023:0xf73cefec [ 234.322488][T17188] Code: Unable to access opcode bytes at 0xf73cefc2. [ 234.322493][T17188] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 234.322505][T17188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004b72 [ 234.322512][T17188] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 234.322519][T17188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 234.322525][T17188] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 234.322532][T17188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 234.322544][T17188] [ 234.322548][T17188] [ 234.322551][T17188] Allocated by task 13598: [ 234.322556][T17188] kasan_save_stack+0x30/0x50 [ 234.322572][T17188] kasan_save_track+0x14/0x30 [ 234.322587][T17188] __kasan_kmalloc+0xaa/0xb0 [ 234.322601][T17188] __kmalloc_noprof+0x32f/0x840 [ 234.322615][T17188] font_data_rotate+0x353/0x3b0 [ 234.322628][T17188] fbcon_rotate_font+0x2bf/0x510 [ 234.322643][T17188] fbcon_modechanged+0x218/0x7f0 [ 234.322656][T17188] fbcon_set_all_vcs+0x39b/0x470 [ 234.322669][T17188] rotate_all_store+0x31e/0x410 [ 234.322683][T17188] dev_attr_store+0x58/0x80 [ 234.322695][T17188] sysfs_kf_write+0xf2/0x150 [ 234.322708][T17188] kernfs_fop_write_iter+0x3e0/0x5f0 [ 234.322720][T17188] vfs_write+0x6af/0x1050 [ 234.322732][T17188] ksys_write+0x12a/0x250 [ 234.322744][T17188] __do_fast_syscall_32+0x13a/0x8b0 [ 234.322754][T17188] do_fast_syscall_32+0x32/0x70 [ 234.322764][T17188] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 234.322776][T17188] [ 234.322779][T17188] The buggy address belongs to the object at ffff888014fd2000 [ 234.322779][T17188] which belongs to the cache kmalloc-4k of size 4096 [ 234.322787][T17188] The buggy address is located 3524 bytes to the right of [ 234.322787][T17188] allocated 4096-byte region [ffff888014fd2000, ffff888014fd3000) [ 234.322797][T17188] [ 234.322800][T17188] The buggy address belongs to the physical page: [ 234.322805][T17188] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14fd0 [ 234.322815][T17188] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 234.322823][T17188] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 234.322833][T17188] page_type: f5(slab) [ 234.322842][T17188] raw: 00fff00000000040 ffff88801d043040 dead000000000100 dead000000000122 [ 234.322852][T17188] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 234.322861][T17188] head: 00fff00000000040 ffff88801d043040 dead000000000100 dead000000000122 [ 234.322871][T17188] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 234.322880][T17188] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 234.322890][T17188] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 234.322895][T17188] page dumped because: kasan: bad access detected [ 234.322900][T17188] page_owner tracks the page as allocated [ 234.322904][T17188] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5736, tgid 5736 (syz-executor), ts 38312703097 [ 234.322922][T17188] post_alloc_hook+0xfd/0x120 [ 234.322933][T17188] get_page_from_freelist+0x110d/0x35d0 [ 234.322946][T17188] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 234.322959][T17188] new_slab+0xa9/0x6e0 [ 234.322969][T17188] refill_objects+0xe3/0x410 [ 234.322981][T17188] __pcs_replace_empty_main+0x35e/0x650 [ 234.322992][T17188] __kmalloc_noprof+0x67c/0x840 [ 234.323005][T17188] tomoyo_realpath_from_path+0xb6/0x690 [ 234.323020][T17188] tomoyo_path_number_perm+0x23c/0x580 [ 234.323032][T17188] security_file_ioctl_compat+0xd3/0x230 [ 234.323044][T17188] __ia32_compat_sys_ioctl+0xc2/0x360 [ 234.323056][T17188] __do_fast_syscall_32+0x13a/0x8b0 [ 234.323066][T17188] do_fast_syscall_32+0x32/0x70 [ 234.323076][T17188] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 234.323088][T17188] page last free pid 5734 tgid 5734 ts 38024885300 stack trace: [ 234.323095][T17188] __free_frozen_pages+0x79f/0x10f0 [ 234.323105][T17188] qlist_free_all+0x47/0xf0 [ 234.323117][T17188] kasan_quarantine_reduce+0x1a0/0x1f0 [ 234.323132][T17188] __kasan_slab_alloc+0x69/0x90 [ 234.323146][T17188] __kmalloc_cache_noprof+0x278/0x6d0 [ 234.323158][T17188] ref_tracker_alloc+0x190/0x590 [ 234.323170][T17188] netdev_queue_update_kobjects+0x2db/0x6f0 [ 234.323188][T17188] netdev_register_kobject+0x2e9/0x410 [ 234.323203][T17188] register_netdevice+0x15b6/0x25a0 [ 234.323217][T17188] veth_newlink+0x316/0xce0 [ 234.323231][T17188] rtnl_newlink+0x1697/0x2620 [ 234.323243][T17188] rtnetlink_rcv_msg+0x95e/0xe90 [ 234.323256][T17188] netlink_rcv_skb+0x159/0x420 [ 234.323267][T17188] netlink_unicast+0x585/0x850 [ 234.323277][T17188] netlink_sendmsg+0x8b0/0xda0 [ 234.323287][T17188] __sys_sendto+0x48b/0x4e0 [ 234.323298][T17188] [ 234.323300][T17188] Memory state around the buggy address: [ 234.323305][T17188] ffff888014fd3c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 234.323312][T17188] ffff888014fd3d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 234.323319][T17188] >ffff888014fd3d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 234.323325][T17188] ^ [ 234.323359][T17188] ffff888014fd3e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 234.323368][T17188] ffff888014fd3e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 234.323375][T17188] ================================================================== [ 234.323881][T17188] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 234.582481][T17188] CPU: 2 UID: 0 PID: 17188 Comm: syz.3.5155 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.585832][T17188] Tainted: [L]=SOFTLOCKUP [ 234.587185][T17188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.590321][T17188] Call Trace: [ 234.591387][T17188] [ 234.592325][T17188] dump_stack_lvl+0x100/0x190 [ 234.594011][T17188] vpanic+0x553/0x970 [ 234.595578][T17188] ? __pfx_vpanic+0x10/0x10 [ 234.597014][T17188] ? mark_held_locks+0x40/0x70 [ 234.598549][T17188] ? soft_cursor+0x458/0xa10 [ 234.600018][T17188] panic+0xd1/0xe0 [ 234.601213][T17188] ? __pfx_panic+0x10/0x10 [ 234.602624][T17188] ? soft_cursor+0x458/0xa10 [ 234.604129][T17188] ? preempt_schedule_common+0x3c/0xb0 [ 234.605862][T17188] check_panic_on_warn.cold+0x19/0x34 [ 234.607547][T17188] end_report.part.0+0x3a/0x90 [ 234.609056][T17188] kasan_report.cold+0xe/0x18 [ 234.610548][T17188] ? soft_cursor+0x458/0xa10 [ 234.612013][T17188] kasan_check_range+0x10f/0x1e0 [ 234.613574][T17188] __asan_memcpy+0x23/0x60 [ 234.614993][T17188] soft_cursor+0x458/0xa10 [ 234.616416][T17188] ud_cursor+0xdd6/0x15f0 [ 234.617782][T17188] ? __pfx_ud_cursor+0x10/0x10 [ 234.619340][T17188] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 234.621202][T17188] ? get_color+0x1da/0x450 [ 234.622627][T17188] ? __pfx_ud_cursor+0x10/0x10 [ 234.624143][T17188] fbcon_cursor+0x43c/0x5e0 [ 234.625610][T17188] hide_cursor+0x87/0x230 [ 234.626990][T17188] redraw_screen+0x5d4/0x760 [ 234.628439][T17188] ? mark_held_locks+0x40/0x70 [ 234.629945][T17188] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 234.631768][T17188] ? __pfx_redraw_screen+0x10/0x10 [ 234.633368][T17188] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 234.635201][T17188] vc_do_resize+0xc3d/0xeb0 [ 234.636646][T17188] ? __pfx_vc_do_resize+0x10/0x10 [ 234.638253][T17188] ? __local_bh_enable_ip+0xa5/0x120 [ 234.639916][T17188] ? lockdep_hardirqs_on+0x7d/0x110 [ 234.641555][T17188] ? kernel_fpu_end+0x5f/0x80 [ 234.643058][T17188] ? __local_bh_enable_ip+0xa5/0x120 [ 234.644727][T17188] fbcon_do_set_font+0x443/0x8c0 [ 234.646314][T17188] fbcon_set_font+0x4be/0x730 [ 234.647805][T17188] ? __pfx_fbcon_set_font+0x10/0x10 [ 234.649428][T17188] con_font_op+0x991/0x1020 [ 234.651049][T17188] ? __pfx_con_font_op+0x10/0x10 [ 234.652571][T17188] ? __might_fault+0xc5/0x140 [ 234.654056][T17188] ? __might_fault+0xc5/0x140 [ 234.655545][T17188] vt_compat_ioctl+0x228/0x4e0 [ 234.657025][T17188] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 234.658721][T17188] ? __fget_files+0x215/0x3d0 [ 234.660207][T17188] ? hook_file_ioctl_common+0x140/0x440 [ 234.661977][T17188] ? __fget_files+0x21f/0x3d0 [ 234.663467][T17188] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 234.665121][T17188] tty_compat_ioctl+0x1b4/0x420 [ 234.666677][T17188] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 234.668378][T17188] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 234.670086][T17188] __do_fast_syscall_32+0x13a/0x8b0 [ 234.671722][T17188] ? lockdep_hardirqs_on+0x7d/0x110 [ 234.673365][T17188] do_fast_syscall_32+0x32/0x70 [ 234.674915][T17188] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 234.676895][T17188] RIP: 0023:0xf73cefec [ 234.678200][T17188] Code: Unable to access opcode bytes at 0xf73cefc2. [ 234.680264][T17188] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 234.682848][T17188] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004b72 [ 234.685306][T17188] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 234.687766][T17188] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 234.690228][T17188] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 234.692645][T17188] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 234.695122][T17188] [ 234.696616][T17188] Kernel Offset: disabled [ 234.698008][T17188] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:43:29 Registers: info registers vcpu 0 CPU#0 RAX=fffff52000085fb6 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81e9e133 RDI=ffff88801db50000 RBP=ffffc9000042fda8 RSP=ffffc9000042f960 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=3d3d3d3d3d3d3d3d R12=ffffffff90bdcf60 R13=ffffc9000042fda8 R14=0000000000000000 R15=ffffc9000042fdb4 RIP=ffffffff81e9e13b RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809574a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000008000525c CR3=000000006ee55000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801df04b00 RSI=ffffffff81b67e9e RDI=ffff88801df04b00 RBP=0000000000000001 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=0000000000000000 RIP=ffffffff81b67e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809584a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c300008 CR3=000000000fb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b10925 RDI=ffffffff9cc6cba0 RBP=ffffffff9cc6cb60 RSP=ffffc900039aee40 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3130383838666652 R12=0000000000000000 R13=000000000000002e R14=0000000000000006 R15=ffffc900039af158 RIP=ffffffff85b1094f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809594a000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73cf000 CR3=000000004bfa1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3b9aed4b 00007ffc3b9aed4b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3b9af250 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3b9af250 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3120534f4942202c 2939303032202c39 484349202b203533 5128204350206472 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303d6f6e72726520 303d736572202233 3930352e332e7a79 73223d6d6d6f6320 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656c6961663d65 7375616320657461 6470755f7963696c 6f703d706f206465 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69666e6f636e75 3d6a627573203539 3237363934393234 3d73657320353932 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 373639343932343d 6469756120303d64 6975203835303731 3d646970203a2938 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313a746e65736572 7020426b34303933 3a7365676170737a 20426b3231383a67 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801df00000 RSI=ffffffff81b67e9e RDI=ffff88801df00000 RBP=0000000000000003 RSP=ffffc9000049fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000093fc4 R15=0000000000000000 RIP=ffffffff81b67e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095a4a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=000000000fb96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000009c00000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000