last executing test programs: 27.78308354s ago: executing program 1 (id=15571): openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x101000, 0x0) r0 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x4004510d, &(0x7f0000000000)) 27.68354794s ago: executing program 1 (id=15572): r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mbind(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x6, 0x1) 27.611897819s ago: executing program 1 (id=15575): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r0, 0x4, r0}, 0x7) 27.605850904s ago: executing program 1 (id=15578): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 16.923649044s ago: executing program 1 (id=15581): r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000003c0)='espintcp', 0x8) close(0x3) 16.903984441s ago: executing program 1 (id=15583): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x2) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x1, 0x6, 0x1, &(0x7f0000000000)={0x14, "7f4db0090000000000000064ebcddff888df0437600c9212860500"}}) 16.900032751s ago: executing program 32 (id=15583): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x2) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x1, 0x6, 0x1, &(0x7f0000000000)={0x14, "7f4db0090000000000000064ebcddff888df0437600c9212860500"}}) 1.97481162s ago: executing program 3 (id=16114): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080040}, 0x10) 1.961538528s ago: executing program 3 (id=16117): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f0000000180)={0x0, 0x1, @name="44c8e76a390e80ca112cd78c0d7fddd4721a01000000000000003e6560d83ffd"}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, 0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={'xcbc(camellia-asm)\x00'}}) 1.87447035s ago: executing program 3 (id=16122): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x29, 0x7, 0x66, 0x81, 0x2, 0x29, 0x1000, @empty, @multicast1}}}}}}, 0x0) 1.822267195s ago: executing program 3 (id=16126): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) gettimeofday(0x0, 0x0) mlockall(0x3) 1.276048853s ago: executing program 0 (id=16145): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xb}, 0xe) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000440)) 971.431926ms ago: executing program 3 (id=16152): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)) 832.966829ms ago: executing program 3 (id=16156): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ustat(0x90000000000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)) 538.195292ms ago: executing program 2 (id=16166): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x18) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000000)) 479.310242ms ago: executing program 2 (id=16167): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000600)='wg2\x00', 0x4) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000001c0)={@dev={0xac, 0x14, 0x14, 0x24}, @local}, 0xc) 415.937459ms ago: executing program 2 (id=16170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2d8400"], 0xffdd) 350.953714ms ago: executing program 4 (id=16171): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r0, &(0x7f000000bd00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="0a1057d48a", 0x33fe0}], 0x1}}], 0x1, 0x48844) 306.890669ms ago: executing program 0 (id=16172): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460e02f9b7ff7f00000000000002000300fffeffffdf02000000000000400000000000000003030000000000000000000008003a00011d040004000d00030000000080000000000000000000000700000000000000080000000000000005000000000000000204"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 266.801933ms ago: executing program 2 (id=16174): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) 249.406133ms ago: executing program 4 (id=16175): syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180), &(0x7f0000000140), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) clock_settime(0xfffffffb, &(0x7f0000000140)) 212.128438ms ago: executing program 2 (id=16176): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80003, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2, 0x800, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 209.254319ms ago: executing program 0 (id=16177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)={0x54, r1, 0x1, 0x470bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x56}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4004) 179.932923ms ago: executing program 4 (id=16178): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0x6a31, 0x7f7, 0x3, "bd31c267a000002000002000", 0x10, 0x200008}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 148.422252ms ago: executing program 0 (id=16179): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x240}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 103.863233ms ago: executing program 2 (id=16180): syz_open_dev$usbmon(&(0x7f00000001c0), 0xfff, 0x101000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 85.20279ms ago: executing program 4 (id=16181): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)={0x0, 0x11, "3ee984d87e623cb4919ebfcfddd6c4f347"}, &(0x7f00000003c0)=0x19) 53.32901ms ago: executing program 0 (id=16182): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000002580)=""/4096}, {&(0x7f00000014c0)=""/155}, {&(0x7f00000024c0)=""/170}], 0x1}, 0xe5c}], 0x40000000000013e, 0x2, 0x0) 41.627482ms ago: executing program 4 (id=16183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2e, 0x0, {{}, {0x0, 0x4102}, {0x14, 0x19, {0x80, 0x1, 0x4, 0x2}}}}, 0x30}}, 0x8000) 10.642807ms ago: executing program 0 (id=16184): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4) 0s ago: executing program 4 (id=16185): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000240)) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0x2, 0xa}}) kernel console output (not intermixed with test programs): b/0x110 [ 282.779952][T28134] ? __pfx___video_do_ioctl+0x10/0x10 [ 282.779982][T28134] ? video_usercopy+0x145/0x14c0 [ 282.780011][T28134] video_usercopy+0x3d3/0x14c0 [ 282.780036][T28134] ? __pfx___video_do_ioctl+0x10/0x10 [ 282.780063][T28134] ? __pfx_video_usercopy+0x10/0x10 [ 282.780097][T28134] ? __fget_files+0x215/0x3d0 [ 282.780114][T28134] ? hook_file_ioctl_common+0x140/0x440 [ 282.780147][T28134] v4l2_ioctl+0x1bd/0x250 [ 282.780176][T28134] v4l2_compat_ioctl32+0x20f/0x2d0 [ 282.780198][T28134] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 282.780218][T28134] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 282.780248][T28134] __do_fast_syscall_32+0xe7/0x970 [ 282.780273][T28134] ? lockdep_hardirqs_on+0x78/0x100 [ 282.780299][T28134] do_fast_syscall_32+0x32/0x70 [ 282.780325][T28134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.780347][T28134] RIP: 0023:0xf706efec [ 282.780369][T28134] Code: Unable to access opcode bytes at 0xf706efc2. [ 282.780378][T28134] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 282.780396][T28134] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0f8565c [ 282.780407][T28134] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.780417][T28134] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 282.780426][T28134] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 282.780436][T28134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 282.780459][T28134] [ 282.780552][T28134] Mem-Info: [ 282.829060][T28143] netlink: 'syz.3.10798': attribute type 11 has an invalid length. [ 282.830266][T28134] active_anon:4838 inactive_anon:259 isolated_anon:0 [ 282.830266][T28134] active_file:2056 inactive_file:21505 isolated_file:0 [ 282.830266][T28134] unevictable:1770 dirty:519 writeback:0 [ 282.830266][T28134] slab_reclaimable:6645 slab_unreclaimable:84870 [ 282.830266][T28134] mapped:23113 shmem:2272 pagetables:1157 [ 282.830266][T28134] sec_pagetables:304 bounce:0 [ 282.830266][T28134] kernel_misc_reclaimable:0 [ 282.830266][T28134] free:31354 free_pcp:16763 free_cma:0 [ 282.832456][T28143] netlink: 4320 bytes leftover after parsing attributes in process `syz.3.10798'. [ 282.834074][T28134] Node 0 active_anon:0kB inactive_anon:28kB active_file:40kB inactive_file:120kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9216kB pagetables:1216kB sec_pagetables:1100kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 282.975302][T28134] Node 1 active_anon:19352kB inactive_anon:1008kB active_file:8184kB inactive_file:85900kB unevictable:3544kB isolated(anon):0kB isolated(file):0kB mapped:92324kB dirty:2068kB writeback:0kB shmem:5552kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4828kB pagetables:3912kB sec_pagetables:116kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 282.989083][T28134] Node 0 DMA free:2040kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:256kB local_pcp:108kB free_cma:0kB [ 283.001250][T28157] random: crng reseeded on system resumption [ 283.004086][T28134] lowmem_reserve[]: 0 280 280 280 280 [ 283.004138][T28134] Node 0 DMA32 free:15388kB boost:0kB min:12768kB low:15960kB high:19152kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:28kB active_file:40kB inactive_file:120kB unevictable:3536kB writepending:8kB zspages:0kB present:1032196kB managed:286920kB mlocked:0kB bounce:0kB free_pcp:9396kB local_pcp:3084kB free_cma:0kB [ 283.019716][T28134] lowmem_reserve[]: 0 0 0 0 0 [ 283.019771][T28134] Node 1 DMA32 free:107988kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19452kB inactive_anon:1008kB active_file:8184kB inactive_file:85900kB unevictable:3544kB writepending:2068kB zspages:1960kB present:1048432kB managed:948212kB mlocked:8kB bounce:0kB free_pcp:55984kB local_pcp:14244kB free_cma:0kB [ 283.019828][T28134] lowmem_reserve[]: 0 0 0 0 0 [ 283.019860][T28134] Node 0 DMA: 20*4kB [ 283.036862][T28134] (UM) 13*8kB (U) 8*16kB (U) 4*32kB (UM) 1*64kB (M) 2*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2040kB [ 283.043106][ T5890] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 283.045549][T28134] Node 0 [ 283.049702][T28134] DMA32: 9*4kB (ME) 21*8kB (UE) 3*16kB (UME) 25*32kB (ME) 44*64kB (UE) 22*128kB (UME) 4*256kB (UM) 9*512kB (UME) 1*1024kB (M) 1*2048kB (U) 0*4096kB = 15388kB [ 283.056448][T28134] Node 1 DMA32: 531*4kB (UM) 419*8kB (UME) 200*16kB (UM) 236*32kB (UM) 297*64kB (UME) 155*128kB (UME) 23*256kB (UME) 37*512kB (UME) 1*1024kB (M) 11*2048kB (UM) 1*4096kB (U) = 107556kB [ 283.063597][T28134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.067589][T28134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 283.070572][T28134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.074101][T28134] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 283.077951][T28134] 25985 total pagecache pages [ 283.079741][T28134] 154 pages in swap cache [ 283.081611][T28134] Free swap = 121232kB [ 283.083400][T28134] Total swap = 124996kB [ 283.085179][T28134] 524155 pages RAM [ 283.086678][T28134] 0 pages HighMem/MovableOnly [ 283.088500][T28134] 211532 pages reserved [ 283.090025][T28134] 0 pages cma reserved [ 283.206372][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 283.211104][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 283.226878][ T5890] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 283.230452][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.232991][ T5890] usb 5-1: Product: syz [ 283.234777][ T5890] usb 5-1: Manufacturer: syz [ 283.239292][ T5890] usb 5-1: SerialNumber: syz [ 283.246608][ T5890] usb 5-1: config 0 descriptor?? [ 283.254074][ T5890] hub 5-1:0.0: bad descriptor, ignoring hub [ 283.256739][ T5890] hub 5-1:0.0: probe with driver hub failed with error -5 [ 283.262930][ T5890] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input25 [ 283.892631][T28255] netlink: 'syz.2.10852': attribute type 21 has an invalid length. [ 283.897834][T28255] IPv6: NLM_F_CREATE should be specified when creating new route [ 283.900419][T28255] netlink: 'syz.2.10852': attribute type 1 has an invalid length. [ 284.036911][T28272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10861'. [ 284.081409][T28278] netlink: 'syz.1.10864': attribute type 2 has an invalid length. [ 284.285865][T28304] xt_CT: You must specify a L4 protocol and not use inversions on it [ 284.378217][T28316] netlink: 'syz.0.10883': attribute type 1 has an invalid length. [ 284.549412][T28343] IPv6: NLM_F_CREATE should be specified when creating new route [ 284.560467][T28343] netlink: 'syz.2.10896': attribute type 1 has an invalid length. [ 284.713170][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 284.821803][T28371] ceph: Path missing in source [ 284.871316][T28378] netlink: 160 bytes leftover after parsing attributes in process `syz.0.10913'. [ 284.893716][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 284.898539][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 284.906084][ T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 206, changing to 7 [ 284.913828][ T9] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 284.920375][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.926273][ T9] usb 6-1: Product: syz [ 284.928031][ T9] usb 6-1: Manufacturer: syz [ 284.932401][ T9] usb 6-1: SerialNumber: syz [ 284.949110][ T9] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 285.175080][ T9] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 285.223754][ T9] usb 6-1: USB disconnect, device number 13 [ 285.399130][T28433] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 285.439225][T28437] netlink: 1 bytes leftover after parsing attributes in process `syz.0.10943'. [ 285.654163][T28462] netlink: 'syz.3.10956': attribute type 11 has an invalid length. [ 285.975506][T28492] netlink: 'syz.2.10970': attribute type 12 has an invalid length. [ 285.979397][T28492] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10970'. [ 286.203178][T28513] program syz.2.10981 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.192269][T13360] usb 5-1: USB disconnect, device number 13 [ 287.651064][T28592] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 287.655113][T28592] exFAT-fs (nbd2): unable to read boot sector [ 287.657636][T28592] exFAT-fs (nbd2): failed to read boot sector [ 287.660751][T28592] exFAT-fs (nbd2): failed to recognize exfat type [ 287.678660][T28594] overlayfs: workdir and upperdir must be separate subtrees [ 287.750899][T28606] netlink: 'syz.3.11022': attribute type 2 has an invalid length. [ 287.803838][T28609] SET target dimension over the limit! [ 288.030391][T28629] bond4: Removing last arp target with arp_interval on [ 288.034885][T28629] bond4: entered promiscuous mode [ 288.037604][T28629] 8021q: adding VLAN 0 to HW filter on device bond4 [ 288.106942][T28643] netlink: 'syz.3.11041': attribute type 16 has an invalid length. [ 288.113359][T28643] netlink: 'syz.3.11041': attribute type 3 has an invalid length. [ 288.116748][T28643] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11041'. [ 288.591758][T28707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11071'. [ 288.595789][T28707] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 288.634325][T28713] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 288.807182][T28738] binder: 28737:28738 unknown command 0 [ 288.813371][T28738] binder: 28737:28738 ioctl c0306201 80000080 returned -22 [ 288.887307][T28749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11090'. [ 288.891330][T28749] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 289.235088][T28795] netlink: 'syz.1.11115': attribute type 1 has an invalid length. [ 289.244829][T28795] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11115'. [ 289.340660][T28811] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 289.340660][T28811] Please contact the netfilter-devel mailing list or update your nftables rules. [ 289.456643][T28823] tmpfs: Bad value for 'mpol' [ 289.512781][T28835] ata1.00: invalid multi_count 1 ignored [ 289.769107][T28870] SET target dimension over the limit! [ 289.942828][T28894] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 290.025963][T28904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.082552][T28912] No control pipe specified [ 290.085771][T28909] xt_CT: You must specify a L4 protocol and not use inversions on it [ 290.105712][T28914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11173'. [ 290.414891][T28936] binfmt_misc: register: failed to install interpreter file ./bus [ 290.604710][T28949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11190'. [ 290.622873][T28949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11190'. [ 290.773640][T28967] overlayfs: conflicting options: nfs_export=on,index=off [ 290.796034][T28971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11201'. [ 290.799933][T28971] openvswitch: netlink: Missing key (keys=40, expected=100) [ 290.969679][T28989] 9pnet_fd: p9_fd_create_unix (28989): problem connecting socket: ./file0/file0: -2 [ 291.006446][T28991] --map-set only usable from mangle table [ 291.037963][T28997] netlink: 'syz.2.11214': attribute type 1 has an invalid length. [ 291.305964][T29027] netlink: 'syz.0.11228': attribute type 16 has an invalid length. [ 291.309040][T29027] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.11228'. [ 291.363085][T29034] random: crng reseeded on system resumption [ 291.374992][T29037] dlm: no locking on control device [ 291.942541][T29102] MPI: mpi too large (107144 bits) [ 291.980950][T29107] netlink: 'syz.0.11267': attribute type 1 has an invalid length. [ 291.984544][T29107] netlink: 'syz.0.11267': attribute type 2 has an invalid length. [ 292.221791][T29131] netlink: 'syz.0.11278': attribute type 1 has an invalid length. [ 292.225261][T29131] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11278'. [ 292.724150][T29191] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 292.738151][T29191] overlayfs: overlapping lowerdir path [ 292.813306][T29202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.873100][T29206] JFS: charset not found [ 292.985055][T29231] netlink: 'syz.0.11326': attribute type 1 has an invalid length. [ 293.100951][T29239] xt_CT: No such helper "snmp" [ 293.158525][T29250] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 293.246929][T29256] xt_CT: No such helper "pptp" [ 293.753961][T29299] __nla_validate_parse: 4 callbacks suppressed [ 293.753984][T29299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11358'. [ 293.808771][T29303] netlink: 'syz.3.11360': attribute type 1 has an invalid length. [ 293.855178][T29308] overlay: Bad value for 'workdir' [ 293.967167][T29322] netlink: 'syz.3.11369': attribute type 2 has an invalid length. [ 294.000468][T29325] Mount JFS Failure: -5 [ 294.002293][T29325] jfs_mount failed w/return code = -5 [ 294.131703][T29342] netlink: 'syz.2.11379': attribute type 7 has an invalid length. [ 294.134792][T29342] netlink: 'syz.2.11379': attribute type 8 has an invalid length. [ 294.268765][T29361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11388'. [ 294.294131][T29365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11389'. [ 294.873134][T29422] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 294.876823][T29422] bridge5: entered promiscuous mode [ 294.878961][T29422] bridge5: entered allmulticast mode [ 294.992111][T29436] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11425'. [ 294.995927][T29436] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11425'. [ 295.115944][T29452] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 295.404788][T29481] 9pnet: Found fid 0 not clunked [ 295.655316][T29505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11459'. [ 295.841885][T29525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11468'. [ 296.121772][T29552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11481'. [ 296.331354][T29573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11492'. [ 296.335268][T29573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11492'. [ 296.421643][T29586] syz.3.11496: vmalloc error: size 34359742464, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 296.434524][T29586] CPU: 1 UID: 0 PID: 29586 Comm: syz.3.11496 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.434555][T29586] Tainted: [L]=SOFTLOCKUP [ 296.434561][T29586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 296.434572][T29586] Call Trace: [ 296.434579][T29586] [ 296.434587][T29586] dump_stack_lvl+0x100/0x190 [ 296.434615][T29586] warn_alloc.cold+0x94/0xa8 [ 296.434635][T29586] ? __pfx_warn_alloc+0x10/0x10 [ 296.434659][T29586] ? kasan_save_stack+0x3f/0x50 [ 296.434690][T29586] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 296.434708][T29586] ? xskq_create+0x52/0x1d0 [ 296.434728][T29586] ? xsk_setsockopt+0x56f/0xab0 [ 296.434747][T29586] ? do_sock_setsockopt+0xf3/0x1d0 [ 296.434765][T29586] ? __sys_setsockopt+0x119/0x190 [ 296.434790][T29586] ? __ia32_sys_setsockopt+0xbc/0x160 [ 296.434812][T29586] ? __do_fast_syscall_32+0xe7/0x970 [ 296.434836][T29586] ? do_fast_syscall_32+0x32/0x70 [ 296.434863][T29586] ? xskq_create+0xfb/0x1d0 [ 296.434883][T29586] __vmalloc_node_range_noprof+0x136c/0x1630 [ 296.434918][T29586] ? xskq_create+0xfb/0x1d0 [ 296.434943][T29586] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 296.434972][T29586] ? kasan_save_track+0x14/0x30 [ 296.434992][T29586] ? __kasan_kmalloc+0xaa/0xb0 [ 296.435014][T29586] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 296.435032][T29586] ? xskq_create+0xfb/0x1d0 [ 296.435051][T29586] vmalloc_user_noprof+0x9e/0xe0 [ 296.435075][T29586] ? xskq_create+0xfb/0x1d0 [ 296.435094][T29586] xskq_create+0xfb/0x1d0 [ 296.435115][T29586] xsk_setsockopt+0x56f/0xab0 [ 296.435135][T29586] ? __pfx_xsk_setsockopt+0x10/0x10 [ 296.435154][T29586] ? find_held_lock+0x2b/0x80 [ 296.435177][T29586] ? aa_sock_opt_perm+0xfe/0x1b0 [ 296.435199][T29586] ? __pfx_xsk_setsockopt+0x10/0x10 [ 296.435220][T29586] do_sock_setsockopt+0xf3/0x1d0 [ 296.435240][T29586] __sys_setsockopt+0x119/0x190 [ 296.435270][T29586] __ia32_sys_setsockopt+0xbc/0x160 [ 296.435291][T29586] ? __do_fast_syscall_32+0x98/0x970 [ 296.435315][T29586] ? lockdep_hardirqs_on+0x78/0x100 [ 296.435335][T29586] __do_fast_syscall_32+0xe7/0x970 [ 296.435362][T29586] do_fast_syscall_32+0x32/0x70 [ 296.435385][T29586] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 296.435406][T29586] RIP: 0023:0xf70cefec [ 296.435430][T29586] Code: Unable to access opcode bytes at 0xf70cefc2. [ 296.435437][T29586] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 296.435454][T29586] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 296.435466][T29586] RDX: 0000000000000002 RSI: 0000000080000080 RDI: 000000000000001c [ 296.435477][T29586] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 296.435488][T29586] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 296.435499][T29586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 296.435522][T29586] [ 296.435529][T29586] Mem-Info: [ 296.556623][T29586] active_anon:4951 inactive_anon:258 isolated_anon:0 [ 296.556623][T29586] active_file:2056 inactive_file:21511 isolated_file:0 [ 296.556623][T29586] unevictable:1768 dirty:469 writeback:0 [ 296.556623][T29586] slab_reclaimable:6691 slab_unreclaimable:85082 [ 296.556623][T29586] mapped:23113 shmem:2276 pagetables:1211 [ 296.556623][T29586] sec_pagetables:304 bounce:0 [ 296.556623][T29586] kernel_misc_reclaimable:0 [ 296.556623][T29586] free:35408 free_pcp:12718 free_cma:0 [ 296.576381][T29586] Node 0 active_anon:0kB inactive_anon:28kB active_file:40kB inactive_file:120kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9216kB pagetables:1216kB sec_pagetables:1100kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 296.590684][T29586] Node 1 active_anon:19804kB inactive_anon:1004kB active_file:8184kB inactive_file:85924kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:92424kB dirty:1868kB writeback:0kB shmem:5568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4952kB pagetables:3828kB sec_pagetables:116kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 296.603830][T29586] Node 0 DMA free:2040kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:256kB local_pcp:8kB free_cma:0kB [ 296.616689][T29586] lowmem_reserve[]: 0 280 280 280 280 [ 296.619073][T29586] Node 0 DMA32 free:15388kB boost:0kB min:12768kB low:15960kB high:19152kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:28kB active_file:40kB inactive_file:120kB unevictable:3536kB writepending:8kB zspages:0kB present:1032196kB managed:286920kB mlocked:0kB bounce:0kB free_pcp:9608kB local_pcp:1388kB free_cma:0kB [ 296.631523][T29586] lowmem_reserve[]: 0 0 0 0 0 [ 296.633664][T29586] Node 1 DMA32 free:123804kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19904kB inactive_anon:1004kB active_file:8184kB inactive_file:85924kB unevictable:3536kB writepending:1868kB zspages:1960kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:41388kB local_pcp:18956kB free_cma:0kB [ 296.647736][T29586] lowmem_reserve[]: 0 0 0 0 0 [ 296.649803][T29586] Node 0 DMA: 20*4kB (UM) 13*8kB (U) 8*16kB (U) 4*32kB (UM) 1*64kB (M) 2*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2040kB [ 296.655828][T29586] Node 0 DMA32: 9*4kB (ME) 21*8kB (UE) 3*16kB (UME) 25*32kB (ME) 44*64kB (UE) 22*128kB (UME) 4*256kB (UM) 9*512kB (UME) 1*1024kB (M) 1*2048kB (U) 0*4096kB = 15388kB [ 296.663545][T29586] Node 1 DMA32: 1623*4kB (UME) 594*8kB (UME) 255*16kB (UME) 197*32kB (UME) 261*64kB (UME) 138*128kB (UME) 24*256kB (UE) 36*512kB (UE) 2*1024kB (M) 12*2048kB (UM) 4*4096kB (UM) = 123580kB [ 296.677204][T29586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.683666][T29586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 296.687542][T29586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.692888][T29586] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 296.696689][T29586] 25993 total pagecache pages [ 296.698514][T29586] 154 pages in swap cache [ 296.702710][T29586] Free swap = 121232kB [ 296.704188][T29586] Total swap = 124996kB [ 296.705790][T29586] 524155 pages RAM [ 296.706981][T29586] 0 pages HighMem/MovableOnly [ 296.709336][T29586] 211532 pages reserved [ 296.711566][T29586] 0 pages cma reserved [ 296.933213][T29634] validate_nla: 2 callbacks suppressed [ 296.933235][T29634] netlink: 'syz.3.11522': attribute type 16 has an invalid length. [ 296.939289][T29634] netlink: 'syz.3.11522': attribute type 17 has an invalid length. [ 296.991025][T29634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.995749][T29634] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.002593][T29634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.059629][T29634] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 297.065159][T29634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.076811][T29634] veth1_vlan: left promiscuous mode [ 297.080184][T29634] veth0_vlan: left promiscuous mode [ 297.084123][T29634] veth0_vlan: entered promiscuous mode [ 297.090215][T29634] veth1_vlan: entered promiscuous mode [ 297.100854][T29634] ipvlan1: left promiscuous mode [ 297.105576][T29634] ipvlan1: left allmulticast mode [ 297.111057][T29634] veth0_vlan: left allmulticast mode [ 297.117738][T29634] veth0_macvtap: left promiscuous mode [ 297.121180][T29634] veth0_macvtap: entered promiscuous mode [ 297.129507][T29634] 8021q: adding VLAN 0 to HW filter on device 30 [ 297.130215][T29634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.130921][T29634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 297.131833][T29634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 297.210453][T29634] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 297.224135][T29634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.226570][T29634] 8021q: adding VLAN 0 to HW filter on device bond2 [ 297.242040][T29634] 8021q: adding VLAN 0 to HW filter on device bond3 [ 297.253519][T29634] bond4: left promiscuous mode [ 297.375360][ T5843] netdevsim netdevsim3 30: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.379280][ T5843] netdevsim netdevsim3 30: set [1, 1] type 2 family 0 port 20004 - 0 [ 297.382689][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.391057][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 297.395801][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.399586][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 297.403158][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.407174][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 297.520702][T29679] program syz.0.11544 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.962523][T29726] binder: 29725:29726 ioctl c0306201 80000580 returned -14 [ 297.982144][T29730] tc_dump_action: action bad kind [ 298.521089][T29790] netlink: 'syz.0.11597': attribute type 7 has an invalid length. [ 298.701613][T29805] /dev/sg0: Can't lookup blockdev [ 299.302832][T29865] __nla_validate_parse: 4 callbacks suppressed [ 299.302852][T29865] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11633'. [ 299.327669][T29869] netlink: 'syz.1.11634': attribute type 11 has an invalid length. [ 299.334274][T29869] netlink: 448 bytes leftover after parsing attributes in process `syz.1.11634'. [ 299.345874][T29871] netlink: 'syz.0.11635': attribute type 1 has an invalid length. [ 299.434383][T29881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11640'. [ 299.560936][T29897] netlink: 'syz.2.11648': attribute type 16 has an invalid length. [ 299.565072][T29897] netlink: 'syz.2.11648': attribute type 17 has an invalid length. [ 299.680529][T29897] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 299.837831][T29924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11660'. [ 299.953170][T29937] netlink: 'syz.0.11668': attribute type 16 has an invalid length. [ 299.956533][T29937] netlink: 'syz.0.11668': attribute type 17 has an invalid length. [ 300.006098][T29937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.010539][T29937] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.017853][T29937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.062337][T29937] veth1_to_hsr: left promiscuous mode [ 300.066423][T29937] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 300.070655][T29937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.076276][T29937] veth1_vlan: left promiscuous mode [ 300.079896][T29937] veth0_vlan: left promiscuous mode [ 300.083659][T29937] veth0_vlan: entered promiscuous mode [ 300.088133][T29937] veth1_vlan: entered promiscuous mode [ 300.094663][T29937] veth1_macvtap: left promiscuous mode [ 300.097320][T29937] veth0_macvtap: left promiscuous mode [ 300.102111][T29937] veth0_macvtap: entered promiscuous mode [ 300.105801][T29937] veth1_macvtap: entered promiscuous mode [ 300.112889][T29937] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 300.117268][T29937] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 300.121735][T29937] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 300.126145][T29937] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 300.144747][T29937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.148246][T29937] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 300.184712][ T50] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 300.193706][T29947] netlink: 160 bytes leftover after parsing attributes in process `syz.2.11673'. [ 300.248691][ T5911] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.252524][ T5911] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 300.256221][ T5911] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.260955][ T5911] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 300.269593][ T5911] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.273458][ T5911] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 300.276993][ T5911] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.281334][ T5911] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 300.310386][T29964] 8021q: adding VLAN 0 to HW filter on device bond5 [ 300.375448][T29971] netlink: 'syz.1.11685': attribute type 1 has an invalid length. [ 300.594123][T29993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11695'. [ 300.696809][ T34] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 300.905132][T30024] program syz.0.11709 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.083480][T30045] batadv_slave_1: entered promiscuous mode [ 301.191246][T30056] netlink: 512 bytes leftover after parsing attributes in process `syz.3.11726'. [ 301.362333][ T5911] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 301.371957][ T5911] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 301.466202][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 301.466221][ T42] audit: type=1400 audit(2000524972.566:16414): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=30067 comm="syz.0.11732" [ 301.610530][T30082] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 301.781270][T30048] syz.2.11721 (30048): drop_caches: 3 [ 301.826290][T30100] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11745'. [ 301.899534][T30104] kAFS: unable to lookup cell '.,c' [ 301.948866][T30108] libceph: Failed to parse secret: -22 [ 302.000935][ T50] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 302.633964][T30162] validate_nla: 1 callbacks suppressed [ 302.633986][T30162] netlink: 'syz.0.11778': attribute type 2 has an invalid length. [ 302.650188][T30166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11779'. [ 303.465203][T30243] xt_CT: No such helper "syz1" [ 303.782522][T30277] sctp: [Deprecated]: syz.2.11834 (pid 30277) Use of int in maxseg socket option. [ 303.782522][T30277] Use struct sctp_assoc_value instead [ 304.109980][T30307] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 304.168906][T30315] netlink: 'syz.1.11852': attribute type 16 has an invalid length. [ 304.173009][T30315] netlink: 'syz.1.11852': attribute type 17 has an invalid length. [ 304.201751][T30315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.207184][T30315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.240773][T30315] batadv_slave_1: left promiscuous mode [ 304.246032][T30315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 304.246061][T30315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.248582][T30315] veth0_macvtap: left promiscuous mode [ 304.249648][T30315] veth0_macvtap: entered promiscuous mode [ 304.262353][T30315] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 304.282604][T30315] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 304.283811][T30315] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 304.290636][T30315] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 304.295828][T30315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.297181][T30315] 8021q: adding VLAN 0 to HW filter on device bond2 [ 304.350195][T30315] 8021q: adding VLAN 0 to HW filter on device bond3 [ 304.367473][T30315] 8021q: adding VLAN 0 to HW filter on device bond4 [ 304.369246][T30315] 8021q: adding VLAN 0 to HW filter on device bond5 [ 304.388792][T30315] bond6: left allmulticast mode [ 304.388972][T30315] 8021q: adding VLAN 0 to HW filter on device bond6 [ 304.400086][T30315] 8021q: adding VLAN 0 to HW filter on device bond7 [ 304.403941][T30315] xfrm0: left promiscuous mode [ 304.412459][T30315] bridge4: left promiscuous mode [ 304.412486][T30315] bridge4: left allmulticast mode [ 304.416045][T30315] 8021q: adding VLAN 0 to HW filter on device bond8 [ 304.422765][T30315] 8021q: adding VLAN 0 to HW filter on device bond9 [ 304.423827][T30315] bridge5: left promiscuous mode [ 304.425533][T30315] ip6gre1: left allmulticast mode [ 304.430271][T30315] 8021q: adding VLAN 0 to HW filter on device bond10 [ 304.444657][T30315] 8021q: adding VLAN 0 to HW filter on device bond11 [ 304.502180][ T5891] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.511540][ T5891] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.533432][ T5911] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.537420][ T5911] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.759344][T30344] netlink: 'syz.1.11866': attribute type 1 has an invalid length. [ 304.762679][T30344] netlink: 396 bytes leftover after parsing attributes in process `syz.1.11866'. [ 304.993859][T30366] netlink: 'syz.2.11877': attribute type 1 has an invalid length. [ 304.996910][T30366] netlink: 'syz.2.11877': attribute type 1 has an invalid length. [ 305.551951][T30395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11891'. [ 305.742998][T30392] syz.1.11889 (30392): drop_caches: 3 [ 305.901827][T30405] netlink: 'syz.0.11897': attribute type 1 has an invalid length. [ 305.905193][T30405] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11897'. [ 305.937164][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 307.295521][T30447] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 307.949452][T30473] netlink: 'syz.3.11928': attribute type 39 has an invalid length. [ 308.117886][T30485] bond12: entered promiscuous mode [ 308.246382][T30488] ptrace attach of "/syz-executor exec"[30489] was attempted by "/syz-executor exec"[30488] [ 308.300828][T30499] netlink: 'syz.2.11941': attribute type 1 has an invalid length. [ 308.323343][T30385] syz.2.11884 (30385) used greatest stack depth: 17808 bytes left [ 308.329773][T30502] netlink: 'syz.0.11940': attribute type 1 has an invalid length. [ 308.742616][ T42] audit: type=1800 audit(2000524979.360:16415): pid=30537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11955" name="file1" dev="tmpfs" ino=15198 res=0 errno=0 [ 309.175281][T30579] netlink: 'syz.0.11974': attribute type 2 has an invalid length. [ 309.181061][T30579] netlink: 'syz.0.11974': attribute type 1 has an invalid length. [ 309.374977][T30601] openvswitch: netlink: ct_state flags 0001010a unsupported [ 309.449226][T30608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11990'. [ 309.624782][T30623] overlayfs: missing 'lowerdir' [ 309.689759][T30629] netlink: 'syz.2.12001': attribute type 1 has an invalid length. [ 309.722376][T30633] netlink: 'syz.3.12003': attribute type 1 has an invalid length. [ 309.726528][T30633] netlink: 'syz.3.12003': attribute type 12 has an invalid length. [ 309.729975][T30633] netlink: 'syz.3.12003': attribute type 83 has an invalid length. [ 309.804954][T30644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.808286][T30645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12008'. [ 310.098384][T30679] autofs4:pid:30679:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 310.138973][T30684] ata1.00: invalid multi_count 128 ignored [ 310.204579][T30695] netlink: 'syz.0.12034': attribute type 11 has an invalid length. [ 310.226208][T30697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12035'. [ 310.787482][T30751] netlink: 'syz.0.12062': attribute type 3 has an invalid length. [ 310.812904][ T42] audit: type=1107 audit(2000524981.306:16416): pid=30752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 310.998919][T30775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12076'. [ 311.032298][T30779] netlink: 'syz.1.12075': attribute type 2 has an invalid length. [ 311.042566][T30781] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 311.108499][T30789] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12081'. [ 311.172790][T30799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12086'. [ 311.264224][T30810] netlink: 'syz.1.12091': attribute type 11 has an invalid length. [ 311.270970][T30810] netlink: 244 bytes leftover after parsing attributes in process `syz.1.12091'. [ 311.510771][T13360] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 311.685987][T13360] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 311.696270][T13360] usb 7-1: config 0 has no interface number 0 [ 311.700061][T13360] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 311.704791][T13360] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 311.708790][T13360] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 311.712648][T13360] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.720196][T13360] usb 7-1: config 0 descriptor?? [ 311.734403][T13360] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 311.947872][T30807] iowarrior 7-1:0.1: Error -90 while submitting URB [ 311.960681][T13360] usb 7-1: USB disconnect, device number 10 [ 312.024094][T30884] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12128'. [ 312.027675][T30884] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12128'. [ 312.217763][T30898] openvswitch: netlink: IP tunnel dst address not specified [ 312.419558][T30914] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.073867][T30975] misc userio: No port type given on /dev/userio [ 313.185659][T30993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12183'. [ 313.190578][T30995] netlink: 17 bytes leftover after parsing attributes in process `syz.2.12182'. [ 313.264273][T31001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12187'. [ 313.283267][ T42] audit: type=1800 audit(2000524983.618:16417): pid=31005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12189" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 314.752833][T31173] wg2 speed is unknown, defaulting to 1000 [ 315.169737][T31230] validate_nla: 5 callbacks suppressed [ 315.169759][T31230] netlink: 'syz.3.12299': attribute type 4 has an invalid length. [ 315.507694][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 316.174202][T31285] netlink: 'syz.0.12327': attribute type 1 has an invalid length. [ 316.177618][T31285] __nla_validate_parse: 17 callbacks suppressed [ 316.177635][T31285] netlink: 244 bytes leftover after parsing attributes in process `syz.0.12327'. [ 316.184983][T31289] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 316.190079][T31285] NCSI netlink: No device for ifindex 0 [ 316.298896][T31301] netlink: 'syz.0.12334': attribute type 5 has an invalid length. [ 316.301906][T31301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12334'. [ 316.385050][T31310] CIFS mount error: No usable UNC path provided in device string! [ 316.385050][T31310] [ 316.389797][T31310] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 316.795083][T31349] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 316.928424][T31361] netlink: 148 bytes leftover after parsing attributes in process `syz.3.12363'. [ 316.967893][T31361] netlink: 148 bytes leftover after parsing attributes in process `syz.3.12363'. [ 316.980635][T31369] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 317.107974][T31383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12372'. [ 317.281763][T31400] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12382'. [ 317.299432][T31400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.320698][T31405] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 317.422290][T31415] bond5 (unregistering): Released all slaves [ 317.512719][T31422] bond13 (unregistering): Released all slaves [ 317.904770][T31466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12413'. [ 318.674197][ T50] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 318.841383][ T50] usb 8-1: Using ep0 maxpacket: 32 [ 318.849346][ T50] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.854309][ T50] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.862090][ T50] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 318.870294][ T50] usb 8-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 318.875682][ T50] usb 8-1: Product: syz [ 318.877341][ T50] usb 8-1: Manufacturer: syz [ 318.883959][ T50] usb 8-1: SerialNumber: syz [ 318.908164][ T50] input: appletouch as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/input/input33 [ 319.032039][T31537] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 319.036542][T31537] CIFS mount error: No usable UNC path provided in device string! [ 319.036542][T31537] [ 319.040866][T31537] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 319.064089][ T42] audit: type=1326 audit(2000524989.027:16418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31540 comm="syz.2.12450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 319.078993][ T42] audit: type=1326 audit(2000524989.027:16419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31540 comm="syz.2.12450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 319.087458][ T42] audit: type=1326 audit(2000524989.027:16420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31540 comm="syz.2.12450" exe="/syz-executor" sig=0 arch=40000003 syscall=43 compat=1 ip=0xf706efec code=0x7ffc0000 [ 319.096515][ T42] audit: type=1326 audit(2000524989.027:16421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31540 comm="syz.2.12450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 319.107775][ T42] audit: type=1326 audit(2000524989.027:16422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31540 comm="syz.2.12450" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 319.140057][ T5901] usb 8-1: USB disconnect, device number 12 [ 319.157297][ T5901] appletouch 8-1:1.0: input: appletouch disconnected [ 319.297108][T31564] netlink: 'syz.0.12460': attribute type 1 has an invalid length. [ 319.339051][T31568] netlink: 'syz.1.12462': attribute type 3 has an invalid length. [ 319.348013][T31570] program syz.0.12464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.801986][T31620] SET target dimension over the limit! [ 320.292785][T31684] netlink: 'syz.3.12519': attribute type 29 has an invalid length. [ 320.313621][T31686] netlink: 'syz.1.12520': attribute type 20 has an invalid length. [ 320.317359][T31686] IPv6: NLM_F_CREATE should be specified when creating new route [ 320.319944][T31686] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 320.322263][T31686] IPv6: NLM_F_CREATE should be set when creating new route [ 320.332680][T31688] netlink: 9 bytes leftover after parsing attributes in process `syz.3.12521'. [ 320.336475][T31688] 0: renamed from hsr0 (while UP) [ 320.351094][T31688] 0: entered allmulticast mode [ 320.353162][T31688] hsr_slave_0: entered allmulticast mode [ 320.355606][T31688] hsr_slave_1: entered allmulticast mode [ 320.359137][T31688] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 320.408567][T31692] ip6t_srh: unknown srh invflags B520 [ 321.257327][T31791] CIFS mount error: No usable UNC path provided in device string! [ 321.257327][T31791] [ 321.261354][T31791] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 321.463068][T31820] nftables ruleset with unbound chain [ 321.483545][T31822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12587'. [ 321.747208][T31858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.830169][T31868] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 321.849290][T31870] program syz.3.12617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.853584][T31870] ata1.00: invalid transfer count 0 [ 321.936429][T31880] netlink: 'syz.1.12615': attribute type 2 has an invalid length. [ 321.959733][T31884] Unknown options in mask 1001 [ 322.020246][T31888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12620'. [ 322.088808][T31898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12624'. [ 322.235785][T31912] netlink: 'syz.1.12632': attribute type 1 has an invalid length. [ 322.238687][T31912] netlink: 'syz.1.12632': attribute type 3 has an invalid length. [ 322.241848][T31912] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12632'. [ 322.324355][T31922] netlink: 'syz.0.12637': attribute type 9 has an invalid length. [ 322.460790][T31942] xt_HMARK: proto mask must be zero with L3 mode [ 322.478502][T31946] netlink: 'syz.1.12649': attribute type 1 has an invalid length. [ 322.514939][T31948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12650'. [ 322.602740][T31955] veth3: entered promiscuous mode [ 322.604891][T31955] veth3: entered allmulticast mode [ 323.062326][T32024] dlm: non-version read from control device 36 [ 323.104789][T32028] usb usb9: usbfs: process 32028 (syz.3.12689) did not claim interface 0 before use [ 323.236352][T32044] netlink: 6 bytes leftover after parsing attributes in process `syz.2.12697'. [ 323.423384][ T42] audit: type=1326 audit(2000524993.107:16423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32065 comm="syz.0.12708" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 323.431005][ T42] audit: type=1326 audit(2000524993.107:16424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32065 comm="syz.0.12708" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 323.440076][T32068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12707'. [ 323.444576][ T42] audit: type=1326 audit(2000524993.107:16425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32065 comm="syz.0.12708" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 323.466994][ T42] audit: type=1326 audit(2000524993.107:16426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32065 comm="syz.0.12708" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 323.476634][ T42] audit: type=1326 audit(2000524993.107:16427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32065 comm="syz.0.12708" exe="/syz-executor" sig=0 arch=40000003 syscall=270 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 323.483417][T32071] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12709'. [ 323.520774][T32074] 8021q: adding VLAN 0 to HW filter on device bond13 [ 323.753302][T32096] netlink: 'syz.1.12721': attribute type 1 has an invalid length. [ 324.247371][T32147] xt_hashlimit: size too large, truncated to 1048576 [ 324.250499][T32147] xt_hashlimit: max too large, truncated to 1048576 [ 324.329474][T32153] netlink: 'syz.1.12749': attribute type 1 has an invalid length. [ 324.332917][T32153] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12749'. [ 324.360176][T32157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12751'. [ 324.410783][T32159] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 324.487290][T32164] netlink: 5188 bytes leftover after parsing attributes in process `syz.0.12754'. [ 324.554745][T32171] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 324.559084][T32171] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 324.645960][T32182] netlink: 'syz.1.12762': attribute type 1 has an invalid length. [ 324.967726][T32225] overlayfs: failed to resolve './file2': -2 [ 325.035504][T32235] netlink: 'syz.1.12790': attribute type 1 has an invalid length. [ 325.190924][T32257] openvswitch: netlink: Missing valid actions attribute. [ 325.199600][T32257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.452136][T32292] netlink: 'syz.1.12818': attribute type 10 has an invalid length. [ 327.516765][T32346] nft_compat: unsupported protocol 0 [ 327.580900][T32355] __nla_validate_parse: 3 callbacks suppressed [ 327.580920][T32355] netlink: 6 bytes leftover after parsing attributes in process `syz.2.12849'. [ 327.607912][T32358] vivid-001: ================= START STATUS ================= [ 327.610593][T32358] vivid-001: RDS Tx I/O Mode: Controls [ 327.613648][T32358] vivid-001: RDS Program ID: 32904 [ 327.619845][T32358] vivid-001: RDS Program Type: 3 [ 327.626864][T32358] vivid-001: RDS PS Name: VIVID-TX [ 327.628900][T32358] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 327.633680][T32358] vivid-001: RDS Stereo: true [ 327.667931][T32358] vivid-001: RDS Artificial Head: false [ 327.670898][T32358] vivid-001: RDS Compressed: false [ 327.671252][T32368] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 327.673109][T32358] vivid-001: RDS Dynamic PTY: false [ 327.677823][T32358] vivid-001: RDS Traffic Announcement: false [ 327.679986][T32358] vivid-001: RDS Traffic Program: true [ 327.681867][T32358] vivid-001: RDS Music: true [ 327.683944][T32358] vivid-001: ================== END STATUS ================== [ 327.881135][T32392] netlink: 'syz.2.12867': attribute type 3 has an invalid length. [ 327.888658][T32392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12867'. [ 328.228468][T32417] No source specified [ 328.529329][T32421] netlink: 'syz.2.12881': attribute type 4 has an invalid length. [ 328.663604][T32431] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12886'. [ 329.297038][T32495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12918'. [ 329.312964][T32498] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 329.410558][T32507] XFS (nbd1): no-recovery mounts must be read-only. [ 329.497104][T32515] netlink: 'syz.1.12928': attribute type 64 has an invalid length. [ 329.500057][T32515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12928'. [ 329.505541][T32515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.710913][T32530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12935'. [ 329.713476][T32531] ata1.00: invalid cdb length 6 [ 329.805806][T32538] netlink: 2 bytes leftover after parsing attributes in process `syz.0.12940'. [ 329.808051][T32539] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12939'. [ 329.813370][T32539] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12939'. [ 329.907312][T32549] sctp: [Deprecated]: syz.0.12945 (pid 32549) Use of int in max_burst socket option deprecated. [ 329.907312][T32549] Use struct sctp_assoc_value instead [ 330.207042][T32572] MTD: Couldn't look up './file0': -15 [ 330.272368][T32580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12960'. [ 330.324705][ T1172] nvmet: connect request for invalid subsystem n! [ 330.327696][T32573] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n" [ 330.590236][T32611] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 330.646966][T32618] exfat: Deprecated parameter 'debug' [ 330.650072][T32618] exFAT-fs (loop2): unable to read boot sector [ 330.655278][T32618] exFAT-fs (loop2): failed to read boot sector [ 330.657918][T32618] exFAT-fs (loop2): failed to recognize exfat type [ 331.364602][T32693] sock: sock_set_timeout: `syz.1.13015' (pid 32693) tries to set negative timeout [ 331.568095][T32720] UBIFS error (pid: 32720): cannot open "ubi0_0", error -19 [ 331.605161][T32724] openvswitch: netlink: IP tunnel TTL not specified. [ 331.977895][T32754] 9pnet_fd: p9_fd_create_tcp (32754): problem connecting socket to 127.0.0.1 [ 332.831578][ T366] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 332.850754][T32744] comedi comedi0: reset error (fatal) [ 332.962090][ T384] __nla_validate_parse: 9 callbacks suppressed [ 332.962105][ T384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13091'. [ 333.010793][ T389] netlink: 80 bytes leftover after parsing attributes in process `syz.1.13093'. [ 333.190742][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 333.190760][ T42] audit: type=1400 audit(2000525002.240:16431): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=405 comm="syz.1.13102" [ 333.289126][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 333.643486][ T435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13114'. [ 333.647049][ T435] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 333.776758][ T372] 9pnet_fd: p9_fd_create_tcp (372): problem connecting socket to 127.0.0.1 [ 333.861878][ T447] netdevsim netdevsim2: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 333.920161][ T453] Invalid ELF header magic: != ELF [ 334.008808][ T459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13126'. [ 334.035096][ T463] 9pnet_fd: p9_fd_create_tcp (463): problem connecting socket to 127.0.0.1 [ 334.056424][ T465] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 334.392808][ T42] audit: type=1326 audit(2000525003.372:16432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=498 comm="syz.1.13146" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 334.401975][ T42] audit: type=1326 audit(2000525003.372:16433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=498 comm="syz.1.13146" exe="/syz-executor" sig=0 arch=40000003 syscall=10 compat=1 ip=0xf707efec code=0x7ffc0000 [ 334.411803][ T42] audit: type=1326 audit(2000525003.372:16434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=498 comm="syz.1.13146" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 334.422026][ T501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13147'. [ 334.447320][ T42] audit: type=1326 audit(2000525003.372:16435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=498 comm="syz.1.13146" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000 [ 334.729974][ T543] dvmrp9: entered allmulticast mode [ 334.810246][ T552] netlink: 'syz.1.13172': attribute type 12 has an invalid length. [ 334.850096][ T555] xt_hashlimit: invalid interval [ 334.938452][ T570] : renamed from bridge_slave_1 (while UP) [ 335.167983][ T595] /dev/sr0: Can't open blockdev [ 335.404378][ T629] autofs4:pid:629:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 335.428007][ T629] autofs4:pid:629:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 335.562633][ T647] xt_TCPMSS: Only works on TCP SYN packets [ 335.594292][ T651] cgroup: none used incorrectly [ 335.626342][ T655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13222'. [ 335.646843][ T658] netlink: 'syz.2.13223': attribute type 4 has an invalid length. [ 335.728937][ T669] netlink: del zone limit has 4 unknown bytes [ 335.879178][ T687] netlink: 'syz.1.13236': attribute type 11 has an invalid length. [ 335.930938][ T695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13242'. [ 335.934894][ T695] lo: entered allmulticast mode [ 335.990849][ T703] syz.3.13245: vmalloc error: size 2147483264, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 335.998490][ T703] CPU: 0 UID: 0 PID: 703 Comm: syz.3.13245 Tainted: G L syzkaller #0 PREEMPT(full) [ 335.998518][ T703] Tainted: [L]=SOFTLOCKUP [ 335.998525][ T703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 335.998535][ T703] Call Trace: [ 335.998542][ T703] [ 335.998549][ T703] dump_stack_lvl+0x100/0x190 [ 335.998581][ T703] warn_alloc.cold+0x94/0xa8 [ 335.998599][ T703] ? __pfx_warn_alloc+0x10/0x10 [ 335.998619][ T703] ? dequeue_entities+0x152a/0x3650 [ 335.998646][ T703] ? __lock_acquire+0x49f/0x1a40 [ 335.998673][ T703] __vmalloc_node_range_noprof+0x136c/0x1630 [ 335.998699][ T703] ? find_held_lock+0x2b/0x80 [ 335.998716][ T703] ? __might_fault+0xc5/0x140 [ 335.998731][ T703] ? __might_fault+0xc5/0x140 [ 335.998746][ T703] ? compat_do_replace+0x1b1/0x7a0 [ 335.998770][ T703] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 335.998793][ T703] ? compat_copy_ebt_replace_from_user+0x2c8/0x3f0 [ 335.998814][ T703] ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10 [ 335.998839][ T703] ? compat_do_replace+0x1b1/0x7a0 [ 335.998855][ T703] __vmalloc_node_noprof+0xad/0xf0 [ 335.998876][ T703] ? compat_do_replace+0x1b1/0x7a0 [ 335.998895][ T703] compat_do_replace+0x1b1/0x7a0 [ 335.998914][ T703] ? __pfx_compat_do_replace+0x10/0x10 [ 335.998943][ T703] ? bpf_lsm_capable+0x9/0x10 [ 335.998960][ T703] ? security_capable+0x80/0x260 [ 335.998982][ T703] do_ebt_set_ctl+0x3f4/0x4a0 [ 335.999001][ T703] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 335.999021][ T703] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 335.999051][ T703] ? futex_wake+0x4ea/0x5e0 [ 335.999077][ T703] ? nf_sockopt_find.isra.0+0x222/0x290 [ 335.999101][ T703] nf_setsockopt+0x8d/0xf0 [ 335.999123][ T703] ip_setsockopt+0xcb/0xf0 [ 335.999144][ T703] tcp_setsockopt+0xa7/0x100 [ 335.999158][ T703] smc_setsockopt+0x1b6/0xa40 [ 335.999171][ T703] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 335.999186][ T703] ? __pfx_smc_setsockopt+0x10/0x10 [ 335.999203][ T703] ? aa_sock_opt_perm+0xfe/0x1b0 [ 335.999220][ T703] ? __pfx_smc_setsockopt+0x10/0x10 [ 335.999232][ T703] do_sock_setsockopt+0xf3/0x1d0 [ 335.999246][ T703] __sys_setsockopt+0x119/0x190 [ 335.999265][ T703] __ia32_sys_setsockopt+0xbc/0x160 [ 335.999280][ T703] ? __do_fast_syscall_32+0x98/0x970 [ 335.999296][ T703] ? lockdep_hardirqs_on+0x78/0x100 [ 335.999311][ T703] __do_fast_syscall_32+0xe7/0x970 [ 335.999328][ T703] do_fast_syscall_32+0x32/0x70 [ 335.999344][ T703] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 335.999358][ T703] RIP: 0023:0xf70cefec [ 335.999375][ T703] Code: Unable to access opcode bytes at 0xf70cefc2. [ 335.999381][ T703] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 335.999393][ T703] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 335.999400][ T703] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 00000000000000e0 [ 335.999406][ T703] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 335.999412][ T703] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 335.999419][ T703] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 335.999432][ T703] [ 335.999439][ T703] Mem-Info: [ 336.138563][ T703] active_anon:538 inactive_anon:1649 isolated_anon:0 [ 336.138563][ T703] active_file:4368 inactive_file:8194 isolated_file:0 [ 336.138563][ T703] unevictable:1768 dirty:326 writeback:0 [ 336.138563][ T703] slab_reclaimable:6761 slab_unreclaimable:89736 [ 336.138563][ T703] mapped:21701 shmem:1768 pagetables:1245 [ 336.138563][ T703] sec_pagetables:312 bounce:0 [ 336.138563][ T703] kernel_misc_reclaimable:0 [ 336.138563][ T703] free:46119 free_pcp:6346 free_cma:0 [ 336.157018][ T703] Node 0 active_anon:0kB inactive_anon:32kB active_file:16kB inactive_file:968kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8960kB pagetables:1216kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 336.171347][ T703] Node 1 active_anon:2052kB inactive_anon:6564kB active_file:17456kB inactive_file:31808kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:86776kB dirty:1304kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5044kB pagetables:3764kB sec_pagetables:140kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 336.186035][ T703] Node 0 DMA free:2132kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:168kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 336.197685][ T703] lowmem_reserve[]: 0 280 280 280 280 [ 336.199719][ T703] Node 0 DMA32 free:17700kB boost:4096kB min:16864kB low:20056kB high:23248kB reserved_highatomic:2048KB free_highatomic:64KB active_anon:0kB inactive_anon:32kB active_file:16kB inactive_file:800kB unevictable:3536kB writepending:0kB zspages:936kB present:1032196kB managed:286920kB mlocked:0kB bounce:0kB free_pcp:5320kB local_pcp:364kB free_cma:0kB [ 336.212881][ T703] lowmem_reserve[]: 0 0 0 0 0 [ 336.214796][ T703] Node 1 DMA32 free:164644kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2052kB inactive_anon:6564kB active_file:17456kB inactive_file:31808kB unevictable:3536kB writepending:1304kB zspages:3508kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:21024kB local_pcp:5732kB free_cma:0kB [ 336.227296][ T42] audit: type=1326 audit(2000525005.085:16436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=716 comm="syz.0.13253" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f74fec code=0x0 [ 336.237674][ T703] lowmem_reserve[]: 0 0 0 0 0 [ 336.239610][ T703] Node 0 DMA: 37*4kB (U) 16*8kB (U) 14*16kB (U) 5*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 2132kB [ 336.247236][ T703] Node 0 DMA32: 33*4kB (UMEH) 58*8kB (MEH) 27*16kB (UM) 133*32kB (UME) 60*64kB (UME) 29*128kB (UME) 7*256kB (UM) 4*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 17700kB [ 336.261389][ T703] Node 1 DMA32: 1*4kB (E) 1*8kB (M) 16*16kB (UME) 177*32kB (UE) 294*64kB (UME) 250*128kB (UME) 93*256kB (UME) 68*512kB (UME) 22*1024kB (UM) 13*2048kB (U) 0*4096kB = 164524kB [ 336.268914][ T703] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 336.273511][ T703] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 336.277485][ T703] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 336.281868][ T703] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 336.285622][ T703] 15323 total pagecache pages [ 336.287512][ T703] 994 pages in swap cache [ 336.289262][ T703] Free swap = 105468kB [ 336.290867][ T703] Total swap = 124996kB [ 336.294546][ T703] 524155 pages RAM [ 336.296130][ T703] 0 pages HighMem/MovableOnly [ 336.298410][ T703] 211532 pages reserved [ 336.300679][ T703] 0 pages cma reserved [ 336.364289][ T730] netlink: 76 bytes leftover after parsing attributes in process `syz.3.13260'. [ 337.706785][ T851] openvswitch: netlink: Flow key attr not present in new flow. [ 337.796152][ T863] netlink: 'syz.2.13321': attribute type 1 has an invalid length. [ 337.872919][ T873] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 337.910677][ T876] netlink: zone id is out of range [ 337.912723][ T876] netlink: zone id is out of range [ 337.915379][ T876] netlink: zone id is out of range [ 337.918342][ T876] netlink: zone id is out of range [ 337.920547][ T876] netlink: zone id is out of range [ 337.922794][ T876] netlink: zone id is out of range [ 337.925397][ T876] netlink: get zone limit has 4 unknown bytes [ 338.054842][ T893] netlink: 45 bytes leftover after parsing attributes in process `syz.3.13337'. [ 338.068532][ T897] netlink: 76 bytes leftover after parsing attributes in process `syz.1.13339'. [ 338.111494][ T900] bond0: (slave bond_slave_1): Releasing backup interface [ 338.220606][ T911] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 338.321966][ T5898] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 338.414359][ T933] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 338.454484][ T937] tmpfs: Bad value for 'mpol' [ 338.494704][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 338.499649][ T5898] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 338.506007][ T5898] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 338.512806][ T5898] usb 5-1: string descriptor 0 read error: -22 [ 338.518833][ T5898] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 338.525137][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.542443][ T891] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 338.561028][ T5898] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 338.566378][ T5898] usb 5-1: MIDIStreaming interface descriptor not found [ 338.669824][ T959] netlink: 'syz.3.13371': attribute type 1 has an invalid length. [ 338.674587][ T959] netlink: 'syz.3.13371': attribute type 2 has an invalid length. [ 338.797811][ T5898] usb 5-1: USB disconnect, device number 14 [ 338.901348][ T991] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 339.029957][ T1010] random: crng reseeded on system resumption [ 339.077800][ T1014] __nla_validate_parse: 1 callbacks suppressed [ 339.077819][ T1014] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13387'. [ 339.088764][ T1014] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13387'. [ 339.096379][ T1014] unsupported nlmsg_type 40 [ 339.097631][ T1016] netlink: 'syz.2.13388': attribute type 7 has an invalid length. [ 340.216012][ T1052] bridge6: entered promiscuous mode [ 340.218306][ T1052] bridge6: entered allmulticast mode [ 340.728076][ T1118] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 340.730800][ T1118] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 340.734380][ T1118] vhci_hcd vhci_hcd.0: Device attached [ 340.777207][ T1119] vhci_hcd: connection closed [ 340.777460][ T13] vhci_hcd vhci_hcd.3: stop threads [ 340.781828][ T13] vhci_hcd vhci_hcd.3: release socket [ 340.783977][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 341.200486][ T1173] xt_CT: You must specify a L4 protocol and not use inversions on it [ 341.425994][ T1186] netlink: 'syz.0.13458': attribute type 13 has an invalid length. [ 341.513243][ T1191] netlink: 'syz.0.13460': attribute type 11 has an invalid length. [ 341.706004][ T1207] No source specified [ 342.083627][ T1250] Invalid option length (1048307) for dns_resolver key [ 342.118604][ T1254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13490'. [ 342.296867][ T1277] netlink: 'syz.3.13500': attribute type 12 has an invalid length. [ 342.438686][ T1295] tipc: Trying to set illegal importance in message [ 342.563007][ T1315] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.13518'. [ 342.754058][ T1340] Unknown vers= option specified: 3.0/ [ 342.754058][ T1340] [ 342.763197][ T1340] CIFS: VFS: Unknown vers= option specified: 3.0/ [ 342.965634][ T1372] deleting an unspecified loop device is not supported. [ 343.079523][ T1391] netlink: 'syz.1.13554': attribute type 2 has an invalid length. [ 343.085359][ T1391] netlink: 228 bytes leftover after parsing attributes in process `syz.1.13554'. [ 343.197290][ T1401] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 343.203583][ T1404] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 343.287226][ T1414] bond0: option ad_select: unable to set because the bond device is up [ 343.682438][ T1462] 8021q: adding VLAN 0 to HW filter on device bond14 [ 344.569918][ T1561] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 344.791009][ T1591] SET target dimension over the limit! [ 344.829339][ T1597] openvswitch: netlink: IP tunnel dst address not specified [ 344.879248][ T1603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.061030][ T42] audit: type=1326 audit(2000525013.357:16437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1630 comm="syz.0.13667" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 345.070276][ T42] audit: type=1326 audit(2000525013.357:16438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1630 comm="syz.0.13667" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 345.096441][ T42] audit: type=1326 audit(2000525013.357:16439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1630 comm="syz.0.13667" exe="/syz-executor" sig=0 arch=40000003 syscall=249 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 345.104632][ T42] audit: type=1326 audit(2000525013.357:16440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1630 comm="syz.0.13667" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 345.112606][ T42] audit: type=1326 audit(2000525013.357:16441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1630 comm="syz.0.13667" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 345.377035][ T1677] program syz.0.13689 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.543550][ T42] audit: type=1326 audit(2000525013.807:16442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1697 comm="syz.2.13698" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 345.553252][ T42] audit: type=1326 audit(2000525013.807:16443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1697 comm="syz.2.13698" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 345.562019][ T42] audit: type=1326 audit(2000525013.807:16444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1697 comm="syz.2.13698" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 345.577040][ T42] audit: type=1326 audit(2000525013.816:16445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1697 comm="syz.2.13698" exe="/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf706efec code=0x7ffc0000 [ 345.587563][ T42] audit: type=1326 audit(2000525013.816:16446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1697 comm="syz.2.13698" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 345.678200][ T1715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13707'. [ 345.748561][ T1725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13711'. [ 345.948369][ T1747] netlink: 'syz.0.13722': attribute type 2 has an invalid length. [ 345.963186][ T1747] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13722'. [ 346.392291][ T1799] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 346.417760][ T1804] xt_ecn: cannot match TCP bits for non-tcp packets [ 346.718048][ T1839] netlink: zone id is out of range [ 346.729710][ T1839] netlink: zone id is out of range [ 346.732284][ T1839] netlink: zone id is out of range [ 346.735369][ T1839] netlink: zone id is out of range [ 346.740177][ T1839] netlink: zone id is out of range [ 346.746930][ T1839] netlink: zone id is out of range [ 346.749157][ T1839] netlink: zone id is out of range [ 346.753308][ T1839] netlink: zone id is out of range [ 346.755136][ T1843] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13769'. [ 347.044625][ T1885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13791'. [ 347.104482][ T1893] binder: 1892:1893 ioctl c00c620f 800003c0 returned -22 [ 347.235982][ T1909] netlink: 'syz.2.13802': attribute type 11 has an invalid length. [ 347.355047][ C3] sr 2:0:0:0: [sr0] tag#15 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 347.358304][ C3] sr 2:0:0:0: [sr0] tag#15 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 347.649633][ T1967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13831'. [ 347.763015][ T1983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13840'. [ 347.766921][ T1983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13840'. [ 348.575481][ T2077] ipt_ECN: cannot use operation on non-tcp rule [ 348.665730][ T2092] netlink: 'syz.2.13894': attribute type 21 has an invalid length. [ 348.686423][ T2094] comedi comedi3: comedi_config --init_data is deprecated [ 348.711545][ T2099] netlink: 'syz.2.13897': attribute type 4 has an invalid length. [ 348.822464][ T2110] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 348.898266][ T2123] netlink: 'syz.2.13908': attribute type 1 has an invalid length. [ 349.242907][ T2172] xt_CONNSECMARK: invalid mode: 5 [ 349.432023][ T2193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13944'. [ 349.628557][ T2213] geneve7: entered promiscuous mode [ 349.630546][ T2213] geneve7: entered allmulticast mode [ 350.111014][ T2274] xt_TCPMSS: Only works on TCP SYN packets [ 350.781071][ T2364] dlm: Unknown command passed to DLM device : 3 [ 350.781071][ T2364] [ 350.828923][ T2372] netlink: 'syz.2.14030': attribute type 2 has an invalid length. [ 350.842342][ T2372] openvswitch: : Dropping previously announced user features [ 350.943578][ T2388] netlink: 'syz.3.14036': attribute type 49 has an invalid length. [ 351.050064][ T2388] ip6gretap0: entered promiscuous mode [ 351.057491][ T2388] ip6gretap0: entered allmulticast mode [ 351.336091][ T2426] netlink: 'syz.3.14051': attribute type 11 has an invalid length. [ 351.353134][ T2429] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14053'. [ 351.411990][ T2438] netlink: 'syz.2.14057': attribute type 21 has an invalid length. [ 351.468518][ T2447] netlink: 2 bytes leftover after parsing attributes in process `syz.2.14061'. [ 351.788600][ T2501] ./bus: Can't lookup blockdev [ 351.823119][ T2503] sctp: [Deprecated]: syz.0.14088 (pid 2503) Use of struct sctp_assoc_value in delayed_ack socket option. [ 351.823119][ T2503] Use struct sctp_sack_info instead [ 351.882607][ T2513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14094'. [ 351.893455][ T2513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14094'. [ 352.014879][ T2535] netlink: 420 bytes leftover after parsing attributes in process `syz.3.14104'. [ 352.019096][ T2536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14103'. [ 352.397508][ T2586] netlink: 68 bytes leftover after parsing attributes in process `syz.3.14126'. [ 352.456965][ T2594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14129'. [ 352.481225][ T2596] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 352.781268][ T2651] program syz.2.14152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 352.809937][ T2653] netlink: 'syz.3.14153': attribute type 11 has an invalid length. [ 352.945833][ T2675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14162'. [ 353.273630][ T2736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14187'. [ 353.649934][ T2813] netlink: 'syz.3.14218': attribute type 4 has an invalid length. [ 353.895078][ T2852] netlink: 'syz.2.14234': attribute type 64 has an invalid length. [ 353.943901][ T2864] usb usb8: usbfs: process 2864 (syz.0.14239) did not claim interface 0 before use [ 353.998692][ T2874] netlink: 'syz.0.14241': attribute type 15 has an invalid length. [ 354.002784][ T2874] netlink: 'syz.0.14241': attribute type 7 has an invalid length. [ 354.045174][ T2878] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 354.335947][ T2930] netlink: 'syz.3.14264': attribute type 21 has an invalid length. [ 354.431239][ T2943] block device autoloading is deprecated and will be removed. [ 354.796799][ T3013] dlm: plock device version mismatch: kernel (1.2.0), user (1.1792.0) [ 355.238282][ T3086] pim6reg: entered allmulticast mode [ 355.399583][ T3110] bridge8: entered promiscuous mode [ 355.401947][ T3110] bridge8: entered allmulticast mode [ 355.414831][ T3114] netlink: 'syz.2.14339': attribute type 74 has an invalid length. [ 355.674994][ T3150] /dev/nullb0: Can't open blockdev [ 355.698939][ T3154] netlink: 'syz.0.14359': attribute type 2 has an invalid length. [ 355.744339][ T3160] bond0 (unregistering): Released all slaves [ 356.030475][ T3200] libceph: resolve '0' (ret=-3): failed [ 356.708753][ T3277] net_ratelimit: 493 callbacks suppressed [ 356.708772][ T3277] netlink: NAT attribute has 5 unknown bytes [ 356.718462][ T3277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.847214][ T3294] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 357.017791][ T3318] program syz.2.14437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.418173][ T3388] autofs4:pid:3388:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 357.430903][ T3390] 9pnet_fd: p9_fd_create_unix (3390): address too long: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 357.495754][ T3401] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 357.556254][ T3409] __nla_validate_parse: 10 callbacks suppressed [ 357.556276][ T3409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14475'. [ 357.966273][ T3467] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14504'. [ 358.060795][ T3479] netlink: 'syz.0.14510': attribute type 2 has an invalid length. [ 358.064210][ T3479] netlink: 'syz.0.14510': attribute type 1 has an invalid length. [ 358.067497][ T3479] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14510'. [ 358.376711][ T3525] netlink: 'syz.0.14532': attribute type 7 has an invalid length. [ 358.436534][ T3535] netlink: 'syz.3.14537': attribute type 2 has an invalid length. [ 358.538060][ T3545] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 358.540644][ T3545] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 358.543404][ T3545] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 358.545787][ T3545] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 358.649452][ T3557] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 358.680086][ T3561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.844988][ T3585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14563'. [ 358.915475][ T3596] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 358.920306][ T3597] netlink: 'syz.1.14567': attribute type 12 has an invalid length. [ 359.416278][ T3659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14597'. [ 359.419275][ T3659] openvswitch: netlink: Actions may not be safe on all matching packets [ 359.428710][ T3661] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14599'. [ 359.432610][ T3661] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14599'. [ 359.614406][ T3679] Cannot find add_set index 3 as target [ 359.998895][ T3688] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 360.023397][ T3706] Mount JFS Failure: -22 [ 360.025365][ T3706] jfs_mount failed w/return code = -22 [ 360.216983][ T3732] pimreg: entered allmulticast mode [ 360.461788][ T3770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14650'. [ 360.516671][ T3779] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 360.527015][ T3781] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 360.776551][ T3821] TCP: TCP_TX_DELAY enabled [ 360.906468][ T3842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14684'. [ 360.999074][ T3844] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 361.028804][ T3859] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 361.192304][ T3877] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 361.237058][ T3889] program syz.3.14708 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.286562][ T3896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14711'. [ 361.885890][ T3957] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 361.889227][ T3968] bond0: Error: Cannot enslave bond to itself. [ 361.953302][ T3977] netlink: 'syz.2.14749': attribute type 3 has an invalid length. [ 361.956752][ T3977] netlink: 'syz.2.14749': attribute type 1 has an invalid length. [ 361.960500][ T3977] NCSI netlink: No device for ifindex 0 [ 362.277385][ T4025] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 362.382673][ T4045] [U] v3f"S/4:XTzWtlW= [ 362.385144][ T4045] [U] J"e:" [ 362.520490][ T4062] netlink: 'syz.3.14780': attribute type 2 has an invalid length. [ 362.524592][ T4062] netlink: 'syz.3.14780': attribute type 1 has an invalid length. [ 362.789202][ T4091] C speed is unknown, defaulting to 1000 [ 362.951748][ T4112] netlink: 'syz.3.14802': attribute type 3 has an invalid length. [ 362.958226][ T4112] netlink: 'syz.3.14802': attribute type 3 has an invalid length. [ 362.965030][ T4091] wg2 speed is unknown, defaulting to 1000 [ 363.082130][ T4128] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 363.084654][ T4128] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 363.088328][ T4128] vhci_hcd vhci_hcd.0: Device attached [ 363.096995][ T4129] vhci_hcd: unknown pdu 1 [ 363.104481][T21021] vhci_hcd vhci_hcd.3: stop threads [ 363.107016][T21021] vhci_hcd vhci_hcd.3: release socket [ 363.109271][T21021] vhci_hcd vhci_hcd.3: disconnect device [ 363.136812][ T4134] gfs2: error -5 reading superblock [ 363.335826][ T4154] netlink: 'syz.2.14817': attribute type 1 has an invalid length. [ 363.339162][ T4155] bond0: Error: CAN devices cannot be enslaved [ 363.533815][ T4175] __nla_validate_parse: 3 callbacks suppressed [ 363.533835][ T4175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14828'. [ 363.540650][ T4175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14828'. [ 364.286630][ T4241] xt_hashlimit: size too large, truncated to 1048576 [ 364.372814][ T4252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14865'. [ 364.378009][ T4240] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 364.383280][ T4252] openvswitch: netlink: Missing key (keys=40, expected=80) [ 364.566092][ T4269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14873'. [ 364.649374][ T4277] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 364.656794][ T4277] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 364.660516][ T4277] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 364.664093][ T4277] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 364.755211][ T4247] syz.2.14861 (4247): drop_caches: 3 [ 364.896784][ T4300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14888'. [ 364.978557][ T4310] netlink: 'syz.2.14893': attribute type 3 has an invalid length. [ 364.981625][ T4310] netlink: 'syz.2.14893': attribute type 1 has an invalid length. [ 364.985309][ T4310] netlink: 216 bytes leftover after parsing attributes in process `syz.2.14893'. [ 364.985493][ T4313] xt_ecn: cannot match TCP bits for non-tcp packets [ 364.990508][ T4314] futex_wake_op: syz.3.14895 tries to shift op by 144; fix this program [ 364.996828][ T4314] futex_wake_op: syz.3.14895 tries to shift op by 144; fix this program [ 365.413819][ T4362] netlink: 'syz.2.14919': attribute type 21 has an invalid length. [ 365.417134][ T4362] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14919'. [ 365.630241][ T4390] netlink: 84 bytes leftover after parsing attributes in process `syz.1.14933'. [ 365.842976][ T4410] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 365.921155][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.928909][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.941331][ T4427] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 365.942162][ T4427] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 366.062756][ T4440] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14958'. [ 366.086304][ T4445] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 366.587823][ T4507] netlink: 'syz.2.14989': attribute type 27 has an invalid length. [ 366.615316][ T4510] netlink: 'syz.1.14990': attribute type 2 has an invalid length. [ 366.717771][ T4527] netlink: 184 bytes leftover after parsing attributes in process `syz.1.14999'. [ 366.832019][ T4545] tunl0: entered promiscuous mode [ 366.838467][ T4545] netlink: 'syz.3.15008': attribute type 4 has an invalid length. [ 367.098464][ T4565] syz.0.15018 (4565): drop_caches: 3 [ 367.336987][ T4604] program syz.2.15037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 367.470735][ T4622] set match dimension is over the limit! [ 367.488235][ T4619] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 367.490981][ T4619] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 367.494593][ T4619] vhci_hcd vhci_hcd.0: Device attached [ 367.506622][ T4628] vhci_hcd vhci_hcd.0: port 0 already used [ 367.577945][ T4624] vhci_hcd: connection closed [ 367.578228][ T13] vhci_hcd vhci_hcd.0: stop threads [ 367.581994][ T13] vhci_hcd vhci_hcd.0: release socket [ 367.584366][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 367.829736][ T4667] netlink: 'syz.3.15065': attribute type 2 has an invalid length. [ 368.179191][ T4697] netlink: 'syz.0.15079': attribute type 25 has an invalid length. [ 368.381568][ T4724] program syz.1.15091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.574473][ C1] sd 0:0:0:0: [sda] tag#7 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 368.578354][ C1] sd 0:0:0:0: [sda] tag#7 CDB: Test Unit Ready [ 368.842291][ T4783] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 368.852411][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 368.960276][ T4795] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 368.960673][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.968937][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.998041][ T4810] netlink: 'syz.1.15133': attribute type 3 has an invalid length. [ 369.001416][ T4810] __nla_validate_parse: 4 callbacks suppressed [ 369.005951][ T4810] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15133'. [ 369.079612][ T4818] ubi8: attaching mtd0 [ 369.098829][ T4818] ubi8: scanning is finished [ 369.100527][ T4818] ubi8 error: ubi_read_volume_table: the layout volume was not found [ 369.134634][ T4824] IPv6: sit4: Disabled Multicast RS [ 369.137602][ T4824] sit4: entered allmulticast mode [ 369.346347][ T4818] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 369.490667][ T4856] C speed is unknown, defaulting to 1000 [ 369.536876][ T4863] ubi8: attaching mtd0 [ 369.544524][ T4863] ubi8: scanning is finished [ 369.546409][ T4863] ubi8 error: ubi_read_volume_table: the layout volume was not found [ 369.672804][ T4856] wg2 speed is unknown, defaulting to 1000 [ 369.789945][ T4863] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 370.161654][ T4911] ubi8: attaching mtd0 [ 370.170183][ T4911] ubi8: scanning is finished [ 370.171906][ T4911] ubi8 error: ubi_read_volume_table: the layout volume was not found [ 370.212006][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 370.212024][ T42] audit: type=1326 audit(2000525036.893:16451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4915 comm="syz.2.15182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 370.245054][ T42] audit: type=1326 audit(2000525036.893:16452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4915 comm="syz.2.15182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 370.251660][ T42] audit: type=1326 audit(2000525036.893:16453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4915 comm="syz.2.15182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 370.259029][ T42] audit: type=1326 audit(2000525036.893:16454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4915 comm="syz.2.15182" exe="/syz-executor" sig=0 arch=40000003 syscall=97 compat=1 ip=0xf706efec code=0x7ffc0000 [ 370.270546][ T42] audit: type=1326 audit(2000525036.893:16455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4915 comm="syz.2.15182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 370.278253][ T42] audit: type=1326 audit(2000525036.893:16456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4915 comm="syz.2.15182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 370.292383][ T42] audit: type=1326 audit(2000525036.893:16457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4915 comm="syz.2.15182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 370.301609][ T42] audit: type=1326 audit(2000525036.893:16458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4915 comm="syz.2.15182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 370.308967][ T42] audit: type=1326 audit(2000525036.893:16459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4915 comm="syz.2.15182" exe="/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf706efec code=0x7ffc0000 [ 370.318833][ T42] audit: type=1326 audit(2000525036.893:16460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4915 comm="syz.2.15182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 370.504936][ T4911] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 370.897046][ T4957] ubi8: attaching mtd0 [ 370.907968][ T4957] ubi8: scanning is finished [ 370.910063][ T4957] ubi8 error: ubi_read_volume_table: the layout volume was not found [ 371.153784][ T4973] netlink: 'syz.0.15210': attribute type 1 has an invalid length. [ 371.188329][ T4957] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 371.248790][ T4981] netlink: 276 bytes leftover after parsing attributes in process `syz.3.15214'. [ 371.369174][ T4989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15218'. [ 371.869792][ T5050] ubi8: attaching mtd0 [ 371.871552][ T5050] ubi8: scanning is finished [ 371.871582][ T5050] ubi8 error: ubi_read_volume_table: the layout volume was not found [ 372.038179][ T5050] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 373.151856][ T5094] binder: 5093:5094 ioctl 400c620e 80000100 returned -22 [ 373.773625][ T5173] C speed is unknown, defaulting to 1000 [ 373.938571][ T5173] wg2 speed is unknown, defaulting to 1000 [ 374.105416][ C3] sr 2:0:0:0: [sr0] tag#17 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 374.110000][ C3] sr 2:0:0:0: [sr0] tag#17 CDB: Test Unit Ready [ 374.112638][ C3] sr 2:0:0:0: [sr0] tag#17 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.116525][ C3] sr 2:0:0:0: [sr0] tag#17 CDB[10]: 00 00 00 00 00 [ 374.169918][ T5194] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 374.610923][ T5232] comedi comedi3: comedi_test: 256 microvolt, 15 microsecond waveform attached [ 375.849525][ T5299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15355'. [ 375.853716][ T5299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15355'. [ 375.915627][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 375.915647][ T42] audit: type=1326 audit(2000525042.227:16465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5302 comm="syz.0.15357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 375.950480][ T42] audit: type=1326 audit(2000525042.227:16466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5302 comm="syz.0.15357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 375.968869][ T42] audit: type=1326 audit(2000525042.227:16467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5302 comm="syz.0.15357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 375.985722][ T42] audit: type=1326 audit(2000525042.227:16469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5302 comm="syz.0.15357" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 376.000329][ T42] audit: type=1326 audit(2000525042.227:16470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5302 comm="syz.0.15357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 376.018493][ T42] audit: type=1326 audit(2000525042.227:16471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5302 comm="syz.0.15357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 376.044950][ T42] audit: type=1326 audit(2000525042.227:16468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5302 comm="syz.0.15357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 376.063170][ T42] audit: type=1326 audit(2000525042.264:16472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5302 comm="syz.0.15357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 376.079716][ T42] audit: type=1326 audit(2000525042.264:16473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5302 comm="syz.0.15357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 376.089957][ T42] audit: type=1326 audit(2000525042.274:16474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5302 comm="syz.0.15357" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f74fec code=0x7ffc0000 [ 376.195419][ T5319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.572475][ T5354] C speed is unknown, defaulting to 1000 [ 376.701526][ T5367] use of bytesused == 0 is deprecated and will be removed in the future, [ 376.757896][ T5367] use the actual size instead. [ 376.767426][ T5372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15382'. [ 376.844886][ T5354] wg2 speed is unknown, defaulting to 1000 [ 376.969897][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15394'. [ 377.229453][ T5392] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15391'. [ 377.461278][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15401'. [ 377.469555][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15401'. [ 377.913235][ T5436] netlink: 108 bytes leftover after parsing attributes in process `syz.3.15413'. [ 378.016936][ T5451] raw_sendmsg: syz.1.15420 forgot to set AF_INET. Fix it! [ 378.081698][ T5463] loop8: detected capacity change from 0 to 7 [ 378.103626][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 378.106930][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 378.116488][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 378.119755][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 378.126762][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 378.130276][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 378.134352][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 378.138439][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 378.142043][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 378.145518][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 378.148633][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 378.152733][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 378.159352][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 378.163519][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 378.166990][ T5463] ldm_validate_partition_table(): Disk read failed. [ 378.176618][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 378.180536][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 378.183996][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 378.187866][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 378.193739][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 378.197758][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 378.206107][ T5463] Dev loop8: unable to read RDB block 0 [ 378.209968][ T5463] loop8: unable to read partition table [ 378.212506][ T5463] loop8: partition table beyond EOD, truncated [ 378.215454][ T5463] loop_reread_partitions: partition scan of loop8 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 378.776200][ T5532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15458'. [ 378.811689][ T5538] Bluetooth: MGMT ver 1.23 [ 378.830199][ T5540] [U] [ 378.832085][ T5540] [U] [ 378.833355][ T5540] [U] [ 378.834561][ T5540] [U] [ 378.836139][ T5540] [U] [ 378.837366][ T5540] [U] [ 378.838565][ T5540] [U] [ 378.839751][ T5540] [U] [ 378.846261][ T5540] [U] [ 378.847342][ T5540] [U] [ 378.848287][ T5540] [U] [ 378.849284][ T5540] [U] [ 378.850348][ T5540] [U] [ 378.851314][ T5540] [U] [ 378.852294][ T5540] [U] [ 378.853239][ T5540] [U] [ 378.861485][ T5540] [U] [ 378.862514][ T5540] [U] [ 378.863432][ T5540] [U] [ 378.864315][ T5540] [U] [ 378.867183][ T5540] [U] [ 378.868122][ T5540] [U] [ 378.869125][ T5540] [U] [ 378.870083][ T5540] [U] [ 378.871061][ T5540] [U] [ 378.872219][ T5540] [U] [ 378.873338][ T5540] [U] [ 378.874435][ T5540] [U] [ 378.875975][ T5540] [U] [ 378.876955][ T5540] [U] [ 378.877847][ T5540] [U] [ 378.878851][ T5540] [U] [ 378.880328][ T5540] [U] [ 378.881401][ T5540] [U] [ 378.882581][ T5540] [U] [ 378.883771][ T5540] [U] [ 378.885407][ T5540] [U] [ 378.886619][ T5540] [U] [ 378.887765][ T5540] [U] [ 378.888928][ T5540] [U] [ 378.893254][ T5540] [U] [ 378.894402][ T5540] [U] [ 378.895725][ T5540] [U] [ 378.896899][ T5540] [U] [ 378.907527][ T5540] [U] [ 378.908540][ T5540] [U] [ 378.909465][ T5540] [U] [ 378.910341][ T5540] [U] [ 378.914522][ T5540] [U] [ 378.915570][ T5540] [U] [ 378.916669][ T5540] [U] [ 378.917763][ T5540] [U] [ 378.920005][ T5540] [U] [ 378.921141][ T5540] [U] [ 378.922252][ T5540] [U] [ 378.923405][ T5540] [U] [ 378.924506][ T5540] [U] [ 378.925630][ T5540] [U] [ 378.926722][ T5540] [U] [ 378.927817][ T5540] [U] [ 378.929550][ T5540] [U] [ 378.930670][ T5540] [U] [ 378.931789][ T5540] [U] [ 378.932895][ T5540] [U] [ 378.934035][ T5540] [U] [ 378.935126][ T5540] [U] [ 378.936208][ T5540] [U] [ 378.937276][ T5540] [U] [ 378.938188][ T5540] [U] [ 378.939118][ T5540] [U] [ 378.940013][ T5540] [U] [ 378.940916][ T5540] [U] [ 378.944608][ T5540] [U] [ 378.945560][ T5540] [U] [ 378.946629][ T5540] [U] [ 378.947712][ T5540] [U] [ 378.951534][ T5540] [U] [ 378.952701][ T5540] [U] [ 378.953836][ T5540] [U] [ 378.954896][ T5540] [U] [ 378.961155][ T5540] [U] [ 378.962093][ T5540] [U] [ 378.963029][ T5540] [U] [ 378.963917][ T5540] [U] [ 378.967157][ T5540] [U] [ 378.968298][ T5540] [U] [ 378.969559][ T5540] [U] [ 378.970863][ T5540] [U] [ 378.975267][ T5540] [U] [ 378.976524][ T5540] [U] [ 378.977724][ T5540] [U] [ 378.978962][ T5540] [U] [ 378.985549][ T5540] [U] [ 378.987014][ T5540] [U] [ 378.988282][ T5540] [U] [ 378.989530][ T5540] [U] [ 378.990754][ T5540] [U] [ 378.991831][ T5540] [U] [ 378.993013][ T5540] [U] [ 378.994162][ T5540] [U] [ 378.996204][ T5540] [U] [ 378.997172][ T5540] [U] [ 378.998113][ T5540] [U] [ 378.999096][ T5540] [U] [ 379.000355][ T5540] [U] [ 379.001332][ T5540] [U] [ 379.002302][ T5540] [U] [ 379.003390][ T5540] [U] [ 379.006224][ T5540] [U] [ 379.007350][ T5540] [U] [ 379.008540][ T5540] [U] [ 379.009697][ T5540] [U] [ 379.010888][ T5540] [U] [ 379.011915][ T5540] [U] [ 379.012934][ T5540] [U] [ 379.013820][ T5540] [U] [ 379.015541][ T5540] [U] [ 379.016546][ T5540] [U] [ 379.017442][ T5540] [U] [ 379.018329][ T5540] [U] [ 379.019455][ T5540] [U] [ 379.020467][ T5540] [U] [ 379.021512][ T5540] [U] [ 379.022687][ T5540] [U] [ 379.023955][ T5540] [U] [ 379.025165][ T5540] [U] [ 379.026351][ T5540] [U] [ 379.070324][ T5539] [U] [ 379.495990][ T5608] netlink: 'syz.0.15484': attribute type 4 has an invalid length. [ 379.499399][ T5608] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15484'. [ 379.793633][ T5654] fuse: blksize only supported for fuseblk [ 380.025366][ T5673] ALSA: mixer_oss: invalid OSS volume '' [ 381.234060][ T5765] vlan2: entered promiscuous mode [ 381.235761][ T5765] macvtap0: entered promiscuous mode [ 381.267024][ T5768] C speed is unknown, defaulting to 1000 [ 381.418590][ T5768] wg2 speed is unknown, defaulting to 1000 [ 382.242982][ T5901] e1000 0000:00:06.0 eth0: Reset adapter [ 382.680346][ T5901] e1000 0000:00:06.0 eth0: Reset adapter [ 382.782443][ T5856] IPVS: ip_vs_add_dest(): server weight less than zero [ 382.845771][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.866694][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.870404][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.877074][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.880194][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.899614][ T5898] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 383.164235][ T5868] C speed is unknown, defaulting to 1000 [ 383.247958][ T5868] wg2 speed is unknown, defaulting to 1000 [ 383.385973][ T5891] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.507940][ T5891] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.632854][ T5891] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.672798][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.675561][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.678089][ T5868] bridge_slave_0: entered allmulticast mode [ 383.680943][ T5868] bridge_slave_0: entered promiscuous mode [ 383.685064][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.687474][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.689886][ T5868] bridge_slave_1: entered allmulticast mode [ 383.692617][ T5868] bridge_slave_1: entered promiscuous mode [ 383.725196][ T5891] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.737093][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.742033][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.761274][ T5868] team0: Port device team_slave_0 added [ 383.765555][ T5868] team0: Port device team_slave_1 added [ 383.783360][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.785561][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.794386][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.802575][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.805163][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.813528][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.836885][ T5868] hsr_slave_0: entered promiscuous mode [ 383.839179][ T5868] hsr_slave_1: entered promiscuous mode [ 383.841448][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 383.843443][ T5868] Cannot create hsr debugfs directory [ 384.275921][ T5891] bond1 (unregistering): Released all slaves [ 384.294535][ T5891] bond2 (unregistering): Released all slaves [ 384.307270][ T5891] bond3 (unregistering): Released all slaves [ 384.319601][ T5891] bond4 (unregistering): Released all slaves [ 384.332477][ T5891] bond5 (unregistering): Released all slaves [ 384.351650][ T5891] bond6 (unregistering): Released all slaves [ 384.364347][ T5891] bond7 (unregistering): Released all slaves [ 384.377117][ T5891] bond8 (unregistering): Released all slaves [ 384.392850][ T5891] bond9 (unregistering): Released all slaves [ 384.401825][ T5891] bond10 (unregistering): Released all slaves [ 384.415966][ T5891] bond11 (unregistering): Released all slaves [ 384.426955][ T5891] bond12 (unregistering): Released all slaves [ 384.440314][ T5891] bond13 (unregistering): Released all slaves [ 384.449018][ T5891] bond14 (unregistering): Released all slaves [ 384.460582][ T5891] bond0 (unregistering): Released all slaves [ 384.471871][ T5891] bond15 (unregistering): Released all slaves [ 384.776713][ T5891] : left promiscuous mode [ 384.814959][ T5455] 8021q: adding VLAN 0 to HW filter on device eth2 [ 384.876981][ T5868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 384.893524][ T5868] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.897593][ T5868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 384.914737][ T5868] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.917801][ T5868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 384.932456][ T5868] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 384.936705][ T5868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 384.956486][ T5868] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 385.015255][ T5890] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 385.095239][ T5804] Bluetooth: hci2: command tx timeout [ 385.098786][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.101281][ T5455] 8021q: adding VLAN 0 to HW filter on device eth3 [ 385.122568][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.136483][ T119] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.138992][ T119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.151075][ T119] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.153863][ T119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.188989][ T5868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 385.194381][ T5868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.364582][ T5455] 8021q: adding VLAN 0 to HW filter on device eth4 [ 385.570648][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.580365][ T5455] 8021q: adding VLAN 0 to HW filter on device eth5 [ 385.777052][ T5868] veth0_vlan: entered promiscuous mode [ 385.785162][ T5868] veth1_vlan: entered promiscuous mode [ 385.811827][ T5868] veth0_macvtap: entered promiscuous mode [ 385.826969][ T5868] veth1_macvtap: entered promiscuous mode [ 385.856420][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.869877][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.959219][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.962587][ T5911] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.966445][ T5911] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.968807][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.000843][ T1271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.004264][ T1271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.004288][T21016] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.011005][T21016] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.305054][ T5891] hsr_slave_0: left promiscuous mode [ 386.307423][ T5891] hsr_slave_1: left promiscuous mode [ 386.311431][ T5891] veth0_macvtap: left promiscuous mode [ 387.317936][ T5804] Bluetooth: hci2: command tx timeout [ 389.550971][ T5804] Bluetooth: hci2: command tx timeout [ 391.763035][ T5804] Bluetooth: hci2: command tx timeout [ 392.694994][ T6014] nftables ruleset with unbound set [ 393.443468][ T6094] C speed is unknown, defaulting to 1000 [ 393.538968][ T6094] wg2 speed is unknown, defaulting to 1000 [ 393.641419][ T6106] comedi comedi3: dt2815: I/O base address or length out of range [ 393.856494][ T6125] macvtap1: entered allmulticast mode [ 393.859014][ T6125] dummy0: entered allmulticast mode [ 393.863400][ T6125] dummy0: entered promiscuous mode [ 393.894396][ T6125] dummy0: left allmulticast mode [ 393.950203][ T29] dummy0: left promiscuous mode [ 394.066223][ T5101] Bluetooth: hci4: sending frame failed (-49) [ 394.071844][ T5804] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 394.233869][ T6145] input: syz1 as /devices/virtual/input/input42 [ 394.558732][ T6177] veth0_to_bond: entered allmulticast mode [ 394.936670][ T983] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 395.104867][ T983] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.109856][ T983] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 395.114525][ T983] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 395.120572][ T983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.128415][ T983] usb 7-1: config 0 descriptor?? [ 395.142744][ T983] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 395.149046][ T983] dvb-usb: bulk message failed: -22 (3/0) [ 395.154878][ T6210] Bluetooth: MGMT ver 1.23 [ 395.200880][ T983] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 395.226540][ T983] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 395.230932][ T983] usb 7-1: media controller created [ 395.234684][ T983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 395.270331][ T983] dvb-usb: bulk message failed: -22 (6/0) [ 395.275347][ T983] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 395.284819][ T983] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input43 [ 395.300734][ T983] dvb-usb: schedule remote query interval to 150 msecs. [ 395.303617][ T983] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 395.381662][ T6188] dvb-usb: bulk message failed: -22 (2/0) [ 395.396264][ T5901] usb 7-1: USB disconnect, device number 11 [ 395.430103][ T5901] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 395.984626][ T6250] __nla_validate_parse: 1 callbacks suppressed [ 395.984645][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15697'. [ 395.992110][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15697'. [ 396.090945][ T5843] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.095175][ T5843] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.101197][ T5843] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.107013][ T5843] netdevsim netdevsim3 30: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.325613][ T6276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15710'. [ 396.370332][ T6281] netlink: 'syz.2.15712': attribute type 10 has an invalid length. [ 396.390802][ T6281] netlink: 'syz.2.15712': attribute type 10 has an invalid length. [ 396.705614][ T6303] option changes via remount are deprecated (pid=6302 comm=syz.3.15722) [ 396.959914][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15738'. [ 396.963093][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15738'. [ 396.965971][ T6338] netlink: 'syz.3.15738': attribute type 12 has an invalid length. [ 396.969726][ T6338] netlink: 'syz.3.15738': attribute type 13 has an invalid length. [ 397.187390][ T6362] netlink: 1 bytes leftover after parsing attributes in process `syz.3.15748'. [ 397.547467][ T6384] xt_l2tp: unknown flags: 51 [ 398.156631][ T6438] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 398.158732][ T6438] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 398.174527][ T6438] vhci_hcd vhci_hcd.0: Device attached [ 398.179206][ T6439] vhci_hcd: connection closed [ 398.179553][ T5911] vhci_hcd vhci_hcd.3: stop threads [ 398.185342][ T5911] vhci_hcd vhci_hcd.3: release socket [ 398.187168][ T5911] vhci_hcd vhci_hcd.3: disconnect device [ 398.223575][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15778'. [ 398.229636][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15778'. [ 398.233609][ T6442] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 399.641618][ T6488] devpts: Bad value for 'max' [ 400.282687][ T6565] CacheFiles: Failed to register: -2 [ 400.487897][ T6589] netlink: 'syz.0.15844': attribute type 32 has an invalid length. [ 400.492001][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15844'. [ 400.505586][ T6589] bond7: Setting coupled_control to off (0) [ 400.550447][ T6596] netlink: 'syz.3.15847': attribute type 3 has an invalid length. [ 400.589395][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15849'. [ 400.597697][ T6602] vivid-001: disconnect [ 400.599888][ T6602] vivid-001: reconnect [ 400.776427][ T6624] Bluetooth: MGMT ver 1.23 [ 401.066042][ T50] kernel write not supported for file /dsp1 (pid: 50 comm: kworker/3:1) [ 401.240664][ T6668] netlink: 'syz.3.15882': attribute type 58 has an invalid length. [ 401.297817][ T6676] gre1: entered promiscuous mode [ 402.449622][ T6770] tipc: Started in network mode [ 402.454234][ T6770] tipc: Node identity , cluster identity 4711 [ 402.456567][ T6770] tipc: Failed to obtain node identity [ 402.458572][ T6770] tipc: Enabling of bearer rejected, failed to enable media [ 404.282801][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 404.282814][ T42] audit: type=1326 audit(2000525068.775:16479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.15974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 404.292063][ T42] audit: type=1326 audit(2000525068.775:16480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.15974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 404.299406][ T42] audit: type=1326 audit(2000525068.785:16481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.15974" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 404.306839][ T42] audit: type=1326 audit(2000525068.785:16482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.15974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 404.319020][ T42] audit: type=1326 audit(2000525068.785:16483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.15974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 404.326712][ T42] audit: type=1326 audit(2000525068.794:16484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.15974" exe="/syz-executor" sig=0 arch=40000003 syscall=433 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 404.337563][ T42] audit: type=1326 audit(2000525068.794:16485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.15974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 404.348689][ T42] audit: type=1326 audit(2000525068.794:16486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.3.15974" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 404.411864][T26697] IPVS: starting estimator thread 0... [ 404.450556][ T6873] ALSA: seq fatal error: cannot create timer (-22) [ 404.522286][ T6870] IPVS: using max 46 ests per chain, 110400 per kthread [ 404.541877][ T6881] program syz.4.15986 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.686960][ T6901] __nla_validate_parse: 1 callbacks suppressed [ 404.686981][ T6901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15995'. [ 404.717998][ T6903] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15996'. [ 404.871688][ T6919] veth0_to_bond: entered allmulticast mode [ 404.918653][ T6923] hub 8-0:1.0: USB hub found [ 404.925017][ T6923] hub 8-0:1.0: 1 port detected [ 405.612883][ T6968] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 405.711028][ T6976] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16030'. [ 405.714947][ T6976] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16030'. [ 406.449455][ T7024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16053'. [ 406.823101][ T7059] netlink: 'syz.3.16072': attribute type 7 has an invalid length. [ 406.825752][ T7059] netlink: 'syz.3.16072': attribute type 8 has an invalid length. [ 406.975511][ T7078] [U]  [ 406.976679][ T7078] [U] K{ [ 406.977914][ T7078] [U] t 1ŠFfˊ`GJgo/mC [ 406.981455][ T7078] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 406.986927][ T7078] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 406.991997][ T7078] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 407.006324][ T7078] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 407.014845][ T7078] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 407.018297][ T7078] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 407.021907][ T7078] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 407.068332][ T7078] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 407.072373][ T7078] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 407.078190][ T7078] [U] 22Ʃx?0;3u [ 407.079822][ T7078] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 407.091221][ T7078] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 407.095208][ T7078] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 407.100073][ T7078] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 407.102882][ T7078] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 407.110266][ T7078] [U] ec [ 407.111686][ T7078] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 407.116345][ T7078] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 407.248535][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16093'. [ 407.293684][ T7114] tipc: Started in network mode [ 407.296449][ T7114] tipc: Node identity e0000001, cluster identity 4711 [ 407.303010][ T7114] tipc: Enabling of bearer rejected, failed to enable media [ 407.322525][ T7122] program syz.4.16100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.515483][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16112'. [ 407.529113][ T7148] ip6gretap0: entered promiscuous mode [ 407.578545][ T5804] Bluetooth: hci2: command 0x0405 tx timeout [ 407.968662][ T7197] PKCS8: Unsupported PKCS#8 version [ 408.953697][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16164'. [ 409.550022][ T7299] ================================================================== [ 409.553384][ T7299] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4c/0xd0 [ 409.556182][ T7299] Write of size 4 at addr ffff888021a8f108 by task syz.4.16185/7299 [ 409.560255][ T7299] [ 409.561622][ T7299] CPU: 1 UID: 0 PID: 7299 Comm: syz.4.16185 Tainted: G L syzkaller #0 PREEMPT(full) [ 409.561641][ T7299] Tainted: [L]=SOFTLOCKUP [ 409.561646][ T7299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 409.561655][ T7299] Call Trace: [ 409.561660][ T7299] [ 409.561665][ T7299] dump_stack_lvl+0x100/0x190 [ 409.561684][ T7299] print_report+0x13d/0x4b0 [ 409.561702][ T7299] ? __virt_addr_valid+0x239/0x430 [ 409.561717][ T7299] ? try_module_get+0x4c/0xd0 [ 409.561733][ T7299] kasan_report+0xdf/0x1c0 [ 409.561752][ T7299] ? try_module_get+0x4c/0xd0 [ 409.561769][ T7299] kasan_check_range+0x10f/0x1e0 [ 409.561786][ T7299] try_module_get+0x4c/0xd0 [ 409.561801][ T7299] dvb_device_open+0x124/0x3b0 [ 409.561820][ T7299] ? __pfx_dvb_device_open+0x10/0x10 [ 409.561837][ T7299] chrdev_open+0x234/0x6a0 [ 409.561849][ T7299] ? __pfx_apparmor_file_open+0x10/0x10 [ 409.561865][ T7299] ? __pfx_chrdev_open+0x10/0x10 [ 409.561877][ T7299] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 409.561894][ T7299] do_dentry_open+0x6ab/0x14d0 [ 409.561905][ T7299] ? __pfx_chrdev_open+0x10/0x10 [ 409.561918][ T7299] vfs_open+0x82/0x3f0 [ 409.561932][ T7299] path_openat+0x2873/0x4280 [ 409.561946][ T7299] ? __pfx_path_openat+0x10/0x10 [ 409.561959][ T7299] do_file_open+0x20e/0x430 [ 409.561970][ T7299] ? __lock_acquire+0x49f/0x1a40 [ 409.561990][ T7299] ? __pfx_do_file_open+0x10/0x10 [ 409.562005][ T7299] ? _raw_spin_unlock+0x28/0x50 [ 409.562019][ T7299] ? alloc_fd+0x471/0x7a0 [ 409.562032][ T7299] do_sys_openat2+0x10f/0x1e0 [ 409.562046][ T7299] ? __pfx_do_sys_openat2+0x10/0x10 [ 409.562060][ T7299] ? do_raw_spin_lock+0x128/0x260 [ 409.562072][ T7299] ? find_held_lock+0x2b/0x80 [ 409.562085][ T7299] ? kcov_ioctl+0x17a/0x750 [ 409.562101][ T7299] ? rcu_is_watching+0x12/0xc0 [ 409.562120][ T7299] ? kcov_ioctl+0x17a/0x750 [ 409.562136][ T7299] __ia32_compat_sys_openat+0x12d/0x210 [ 409.562153][ T7299] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 409.562173][ T7299] do_int80_emulation+0x14b/0x720 [ 409.562191][ T7299] asm_int80_emulation+0x1a/0x20 [ 409.562203][ T7299] RIP: 0023:0xf71d73eb [ 409.562214][ T7299] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 409.562225][ T7299] RSP: 002b:00000000f548d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 409.562237][ T7299] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f548d100 [ 409.562244][ T7299] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000 [ 409.562251][ T7299] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 409.562257][ T7299] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 409.562264][ T7299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 409.562274][ T7299] [ 409.562278][ T7299] [ 409.657627][ T7299] Allocated by task 1: [ 409.659063][ T7299] kasan_save_stack+0x30/0x50 [ 409.660776][ T7299] kasan_save_track+0x14/0x30 [ 409.662461][ T7299] __kasan_kmalloc+0xaa/0xb0 [ 409.664172][ T7299] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 409.666094][ T7299] bus_add_driver+0x92/0x5b0 [ 409.667769][ T7299] driver_register+0x1e2/0x360 [ 409.669510][ T7299] i2c_register_driver+0xd9/0x1f0 [ 409.671319][ T7299] do_one_initcall+0x11d/0x700 [ 409.673085][ T7299] kernel_init_freeable+0x6ea/0x7b0 [ 409.674967][ T7299] kernel_init+0x1f/0x1e0 [ 409.676538][ T7299] ret_from_fork+0x72b/0xd50 [ 409.678215][ T7299] ret_from_fork_asm+0x1a/0x30 [ 409.679950][ T7299] [ 409.680829][ T7299] The buggy address belongs to the object at ffff888021a8f000 [ 409.680829][ T7299] which belongs to the cache kmalloc-256 of size 256 [ 409.685754][ T7299] The buggy address is located 56 bytes to the right of [ 409.685754][ T7299] allocated 208-byte region [ffff888021a8f000, ffff888021a8f0d0) [ 409.690818][ T7299] [ 409.691666][ T7299] The buggy address belongs to the physical page: [ 409.693958][ T7299] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21a8e [ 409.697098][ T7299] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 409.700123][ T7299] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 409.702829][ T7299] page_type: f5(slab) [ 409.704298][ T7299] raw: 00fff00000000040 ffff88801bc42b40 dead000000000100 dead000000000122 [ 409.707351][ T7299] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 409.710155][ T7299] head: 00fff00000000040 ffff88801bc42b40 dead000000000100 dead000000000122 [ 409.712886][ T7299] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 409.715888][ T7299] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 409.718879][ T7299] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 409.721946][ T7299] page dumped because: kasan: bad access detected [ 409.724262][ T7299] page_owner tracks the page as allocated [ 409.726273][ T7299] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16139338038, free_ts 16021180070 [ 409.733394][ T7299] post_alloc_hook+0xfd/0x120 [ 409.735117][ T7299] get_page_from_freelist+0xf48/0x3530 [ 409.737094][ T7299] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 409.739211][ T7299] new_slab+0xa2/0x640 [ 409.740704][ T7299] refill_objects+0xe3/0x410 [ 409.742384][ T7299] __pcs_replace_empty_main+0x376/0x680 [ 409.744406][ T7299] __kmalloc_cache_noprof+0x479/0x6c0 [ 409.746321][ T7299] bus_add_driver+0x92/0x5b0 [ 409.748007][ T7299] driver_register+0x1e2/0x360 [ 409.749740][ T7299] usb_register_driver+0x21c/0x3e0 [ 409.751589][ T7299] do_one_initcall+0x11d/0x700 [ 409.753365][ T7299] kernel_init_freeable+0x6ea/0x7b0 [ 409.755257][ T7299] kernel_init+0x1f/0x1e0 [ 409.756813][ T7299] ret_from_fork+0x72b/0xd50 [ 409.758511][ T7299] ret_from_fork_asm+0x1a/0x30 [ 409.760049][ T7299] page last free pid 1 tgid 1 stack trace: [ 409.762098][ T7299] __free_frozen_pages+0x79f/0x1090 [ 409.763983][ T7299] qlist_free_all+0x47/0xf0 [ 409.765626][ T7299] kasan_quarantine_reduce+0x1a0/0x1f0 [ 409.767586][ T7299] __kasan_slab_alloc+0x69/0x90 [ 409.769378][ T7299] __kmalloc_cache_noprof+0x265/0x6c0 [ 409.771287][ T7299] bus_add_driver+0x92/0x5b0 [ 409.773005][ T7299] driver_register+0x1e2/0x360 [ 409.774749][ T7299] usb_register_driver+0x21c/0x3e0 [ 409.776624][ T7299] do_one_initcall+0x11d/0x700 [ 409.778358][ T7299] kernel_init_freeable+0x6ea/0x7b0 [ 409.780248][ T7299] kernel_init+0x1f/0x1e0 [ 409.781805][ T7299] ret_from_fork+0x72b/0xd50 [ 409.783490][ T7299] ret_from_fork_asm+0x1a/0x30 [ 409.785177][ T7299] [ 409.786054][ T7299] Memory state around the buggy address: [ 409.788080][ T7299] ffff888021a8f000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.790942][ T7299] ffff888021a8f080: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 409.793795][ T7299] >ffff888021a8f100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 409.796645][ T7299] ^ [ 409.798208][ T7299] ffff888021a8f180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 409.801081][ T7299] ffff888021a8f200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 409.804028][ T7299] ================================================================== [ 409.811838][ T7299] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 409.814888][ T7299] CPU: 1 UID: 0 PID: 7299 Comm: syz.4.16185 Tainted: G L syzkaller #0 PREEMPT(full) [ 409.819273][ T7299] Tainted: [L]=SOFTLOCKUP [ 409.821000][ T7299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 409.825100][ T7299] Call Trace: [ 409.826251][ T7299] [ 409.827214][ T7299] dump_stack_lvl+0x100/0x190 [ 409.828829][ T7299] vpanic+0x552/0x970 [ 409.830253][ T7299] ? __pfx_vpanic+0x10/0x10 [ 409.831680][ T7299] ? mark_held_locks+0x40/0x70 [ 409.833240][ T7299] ? try_module_get+0x4c/0xd0 [ 409.834730][ T7299] panic+0xd1/0xe0 [ 409.835925][ T7299] ? __pfx_panic+0x10/0x10 [ 409.837327][ T7299] ? try_module_get+0x4c/0xd0 [ 409.838823][ T7299] ? preempt_schedule_common+0x42/0xc0 [ 409.840688][ T7299] check_panic_on_warn.cold+0x19/0x34 [ 409.842370][ T7299] end_report.part.0+0x3a/0x90 [ 409.843919][ T7299] kasan_report.cold+0xe/0x18 [ 409.845385][ T7299] ? try_module_get+0x4c/0xd0 [ 409.846866][ T7299] kasan_check_range+0x10f/0x1e0 [ 409.848370][ T7299] try_module_get+0x4c/0xd0 [ 409.849965][ T7299] dvb_device_open+0x124/0x3b0 [ 409.851484][ T7299] ? __pfx_dvb_device_open+0x10/0x10 [ 409.853186][ T7299] chrdev_open+0x234/0x6a0 [ 409.854604][ T7299] ? __pfx_apparmor_file_open+0x10/0x10 [ 409.856337][ T7299] ? __pfx_chrdev_open+0x10/0x10 [ 409.857773][ T7299] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 409.859740][ T7299] do_dentry_open+0x6ab/0x14d0 [ 409.861248][ T7299] ? __pfx_chrdev_open+0x10/0x10 [ 409.862855][ T7299] vfs_open+0x82/0x3f0 [ 409.864136][ T7299] path_openat+0x2873/0x4280 [ 409.865585][ T7299] ? __pfx_path_openat+0x10/0x10 [ 409.867128][ T7299] do_file_open+0x20e/0x430 [ 409.868563][ T7299] ? __lock_acquire+0x49f/0x1a40 [ 409.870109][ T7299] ? __pfx_do_file_open+0x10/0x10 [ 409.871740][ T7299] ? _raw_spin_unlock+0x28/0x50 [ 409.873526][ T7299] ? alloc_fd+0x471/0x7a0 [ 409.874904][ T7299] do_sys_openat2+0x10f/0x1e0 [ 409.876405][ T7299] ? __pfx_do_sys_openat2+0x10/0x10 [ 409.878036][ T7299] ? do_raw_spin_lock+0x128/0x260 [ 409.879593][ T7299] ? find_held_lock+0x2b/0x80 [ 409.881036][ T7299] ? kcov_ioctl+0x17a/0x750 [ 409.882484][ T7299] ? rcu_is_watching+0x12/0xc0 [ 409.884014][ T7299] ? kcov_ioctl+0x17a/0x750 [ 409.885451][ T7299] __ia32_compat_sys_openat+0x12d/0x210 [ 409.887187][ T7299] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 409.889077][ T7299] do_int80_emulation+0x14b/0x720 [ 409.890635][ T7299] asm_int80_emulation+0x1a/0x20 [ 409.892205][ T7299] RIP: 0023:0xf71d73eb [ 409.893608][ T7299] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 409.899542][ T7299] RSP: 002b:00000000f548d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 409.902137][ T7299] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f548d100 [ 409.904688][ T7299] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000 [ 409.907144][ T7299] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 409.909603][ T7299] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 409.912055][ T7299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 409.914533][ T7299] [ 409.916248][ T7299] Kernel Offset: disabled [ 409.917617][ T7299] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:46:23 Registers: info registers vcpu 0 CPU#0 RAX=000000000019f48f RBX=ffffffff8e891480 RCX=ffffffff8bb892d5 RDX=0000000000000000 RSI=ffffffff8e1a9a00 RDI=ffffffff8c400a80 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bb8789f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7496288 CR3=000000004cc9d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a09df5 RDI=ffffffff9b9f74e0 RBP=ffffffff9b9f74a0 RSP=ffffc900043272c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666657 R12=0000000000000000 R13=0000000000000034 R14=ffffffff9b6f722c R15=ffffffff85a09d90 RIP=ffffffff85a09e1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096cdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f72be9ea CR3=0000000050816000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff81dd22ef RDX=1ffff110039e84df RSI=0000000000000008 RDI=ffffffff9122afd0 RBP=ffffc90004da7430 RSP=ffffc90004da7398 R8 =0000000000000295 R9 =ffff88801cf426d8 R10=0000000000000000 R11=0000000000000003 R12=000000000000b913 R13=000000000000b913 R14=0000000000000b68 R15=ffff88801cf426c8 RIP=ffffffff827943f8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f38aa56a300 ffffffff 00c00000 GS =0000 ffff888096ddf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055983891bf40 CR3=000000004fd1b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=57bad584b41765c3 dceccdd80dba43be 57bad584b41765c3 dceccdd80dba43be 57bad584b41765c3 dceccdd80dba43be 57bad584b41765c3 dceccdd80dba43be ZMM18=10f95b8c1260702c 15c9abd42f790615 10f95b8c1260702c 15c9abd42f790615 10f95b8c1260702c 15c9abd42f790615 10f95b8c1260702c 15c9abd42f790615 ZMM19=1f4b000000000000 0000000000000004 1f4b000000000000 0000000000000003 1f4b000000000000 0000000000000002 1f4b000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff000006b7000000 00fff0a479ffffff f8fff00a7affff7e 0000000307000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a3bf0000f9 26000002b72ca008 7e80037e80040890 031c080008880318 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800088003000800 0fffffffff024008 00060102a0060000 0cc3000000000000 ZMM24=2f7906152f790615 2f7906152f790615 2f7906152f790615 2f7906152f790615 2f7906152f790615 2f7906152f790615 2f7906152f790615 2f7906152f790615 ZMM25=15c9abd415c9abd4 15c9abd415c9abd4 15c9abd415c9abd4 15c9abd415c9abd4 15c9abd415c9abd4 15c9abd415c9abd4 15c9abd415c9abd4 15c9abd415c9abd4 ZMM26=1260702c1260702c 1260702c1260702c 1260702c1260702c 1260702c1260702c 1260702c1260702c 1260702c1260702c 1260702c1260702c 1260702c1260702c ZMM27=10f95b8c10f95b8c 10f95b8c10f95b8c 10f95b8c10f95b8c 10f95b8c10f95b8c 10f95b8c10f95b8c 10f95b8c10f95b8c 10f95b8c10f95b8c 10f95b8c10f95b8c ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=1e4b00001e4b0000 1e4b00001e4b0000 1e4b00001e4b0000 1e4b00001e4b0000 1e4b00001e4b0000 1e4b00001e4b0000 1e4b00001e4b0000 1e4b00001e4b0000 info registers vcpu 3 CPU#3 RAX=0000000000163353 RBX=ffff88801c7fa540 RCX=ffffffff8bb892d5 RDX=0000000000000000 RSI=ffffffff8e1a9a00 RDI=ffffffff8c400a80 RBP=ffffed10038ff4a8 RSP=ffffc9000048fe00 R8 =0000000000000001 R9 =ffffed10056a678d R10=ffff88802b533c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bb8789f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002ee20ff8 CR3=000000000e994000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 25dca21a90fbf224 015c0a76a7523240 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 35460e6f713116ad 1c1d3804a2b7165a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 609c26463b15cf6d dd55b4d2477e65c8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 53332624436f03a2 7f960a4dff39c424 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000020a80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005046f9692138 6b000000e6000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f96711a200000adc f96c2322f96ad185 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f967b3777e000000 460000001e000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8e0000000c000000 f96a032a3d000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3163bf181533f588 688ac1a3c9f166d2 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d4ab3545e42b124c f009c68bd64386dc ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000