last executing test programs: 282.581259ms ago: executing program 0 (id=19038): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) 228.335667ms ago: executing program 0 (id=19041): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x101200) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0), 0xffa4}) 227.191292ms ago: executing program 3 (id=19043): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x1407, 0x1, 0x0, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x60, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) 172.857169ms ago: executing program 2 (id=19044): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000380)={&(0x7f0000001880)=[{0x7, 0x8400, 0x20, 0x0}], 0x1}) 172.68813ms ago: executing program 3 (id=19045): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {0x1, 0x7}, [{0x2, 0x1, 0xee01}], {0x4, 0x4}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x3) 171.200411ms ago: executing program 0 (id=19046): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 171.061562ms ago: executing program 1 (id=19047): r0 = syz_open_dev$loop(&(0x7f0000000080), 0xfffff02d, 0x2080) ioctl$BLKCRYPTOPREPAREKEY(r0, 0xc040128b, 0x0) 121.905372ms ago: executing program 2 (id=19048): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x14, 0x0, &(0x7f0000000200)) 121.680902ms ago: executing program 0 (id=19049): r0 = io_uring_setup(0x167c, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x131}) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, 0x0, 0x1) 121.590486ms ago: executing program 1 (id=19050): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @empty, 0xa3c}, {0xa, 0xbffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0xb9) 121.463432ms ago: executing program 3 (id=19051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000e06010200000000000000000000000205000100070000000900020073797a32000000000900020073797a320000000005000100070000000900020073797a3100000000050001"], 0x64}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) 121.269799ms ago: executing program 2 (id=19052): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000ec0), 0x302, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, 0x0) 65.382807ms ago: executing program 1 (id=19053): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x48, &(0x7f00000007c0), 0x4) 65.215189ms ago: executing program 0 (id=19054): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$sock(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@txtime={{0x18, 0x1, 0x51, 0x5}}], 0x18}}], 0x1, 0x2a9b0a4a1e70e25c) 65.137167ms ago: executing program 3 (id=19055): r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x800006, 0x0, &(0x7f0000000040)) 65.040955ms ago: executing program 2 (id=19056): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000080)=':$/\x00', 0x4) 64.9834ms ago: executing program 1 (id=19057): setresuid(0x0, 0xee00, 0x0) setrlimit(0x7, &(0x7f0000000740)={0x0, 0x7fff}) 59.89532ms ago: executing program 3 (id=19058): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 55.103972ms ago: executing program 2 (id=19059): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005f00010000000000000000000000000005", @ANYBLOB="f19e"], 0x1c}}, 0x0) 53.618914ms ago: executing program 0 (id=19060): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\x14\xe2\xc3\x11\xe2\xcb\x86\xc8-Hs\xc6\xafm\xdc{\xdeU#\xebp7-\x9f\xb8\xf3A\xb2CX\xd3//\xdd28+\x9dS\"\x9bm\x19\xd0K4a\xe6\xfb\xdb\xf7\xe4K\xb5\xc8\x94_\a\xe61\x91\xe4<@\xc37+\x9c\xb2\xe8E=T\xd5\xb1\'\xc3w\f\'\xd4\x97\xf8\xba\xe8\xa0\n\x8d\xc7\xc9\x7f\xa8\x1d\x88\xa3\x17\xca\xa5e\x7fYj\x82Z\xe9K\xa0T\\\x87u\x8coL\a|\xc8f^\x01\x04\xe4\x8e\x0f\xfe\x16\xa7G\xd4\xa1\xef\xc5\xa7k\x1dE\xb0\x9d!i\x99\\^\\]G?E+\xcd}\xf7i\xe2\xa2\x8dEW\xab\xdc\x8c\xe9Y\xb1\xc8\xc4\x97!\xbc\xf4\xef\xc9\x03v\xf3 \xb2\xc5\xd5\xf0$\xa0KD5\xf4\x9c\xe1\r\xc4\xa0\xd1\'\xadC\xb7Z\f[t\xd1\xadYk\x90v00000400) [ 323.837027][ T5460] futex_wake_op: syz.3.14146 tries to shift op by 144; fix this program [ 323.840384][ T5460] futex_wake_op: syz.3.14146 tries to shift op by 144; fix this program [ 324.061638][ T5503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14164'. [ 324.094675][ T5509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14168'. [ 324.138938][ T1133] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 324.144004][ T1133] ata1.00: configured for UDMA/100 [ 324.215835][ T5525] ubi8: attaching mtd0 [ 324.218423][ T5525] ubi8: scanning is finished [ 324.220071][ T5525] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 325.079219][ T42] audit: type=1800 audit(311.105:18557): pid=5532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14178" name="file1" dev="tmpfs" ino=17807 res=0 errno=0 [ 325.129870][ T5541] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 325.130339][ T5543] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 325.186674][ T5525] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 325.238549][ T5558] netlink: 'syz.2.14190': attribute type 15 has an invalid length. [ 325.245632][ T5558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14190'. [ 325.521292][ T5609] netlink: 'syz.0.14212': attribute type 21 has an invalid length. [ 325.523335][ T5611] netlink: 52 bytes leftover after parsing attributes in process `syz.3.14214'. [ 325.567202][ T5616] netlink: 'syz.2.14216': attribute type 1 has an invalid length. [ 325.572907][ T5616] netlink: 224 bytes leftover after parsing attributes in process `syz.2.14216'. [ 325.620575][ T5629] Device name not specified. [ 325.620575][ T5629] [ 325.634046][ T5631] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 325.650495][ T5633] gre1: entered promiscuous mode [ 325.685213][ T5638] gre2: entered promiscuous mode [ 325.723345][ T5644] netlink: 84 bytes leftover after parsing attributes in process `syz.0.14224'. [ 325.727912][ T5644] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14224'. [ 325.734059][ T5644] netlink: 84 bytes leftover after parsing attributes in process `syz.0.14224'. [ 325.873919][ T5670] gre1: entered promiscuous mode [ 325.918845][ T5677] netlink: 'syz.3.14241': attribute type 32 has an invalid length. [ 325.922029][ T5677] netlink: 'syz.3.14241': attribute type 32 has an invalid length. [ 326.076063][ T5706] netlink: 'syz.2.14250': attribute type 1 has an invalid length. [ 326.280993][ T5727] dlm: plock device version mismatch: kernel (1.2.0), user (1.1792.0) [ 326.681527][ T5799] netlink: 'syz.0.14292': attribute type 10 has an invalid length. [ 326.699851][ T5801] netlink: 'syz.2.14294': attribute type 39 has an invalid length. [ 326.885896][ T5860] 9pnet_fd: p9_fd_create_unix (5860): address too long: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 326.970986][ T5875] syz.2.14313 (5875): /proc/5874/oom_adj is deprecated, please use /proc/5874/oom_score_adj instead. [ 327.020008][ T5879] netlink: 'syz.3.14314': attribute type 2 has an invalid length. [ 327.023292][ T5879] netlink: 'syz.3.14314': attribute type 1 has an invalid length. [ 327.136505][ T5893] binfmt_misc: register: failed to install interpreter file ./bus [ 327.141264][ T60] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 327.301622][ T60] usb 6-1: Using ep0 maxpacket: 16 [ 327.305013][ T60] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.310724][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 327.322928][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 327.330261][ T60] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.338303][ T60] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 327.341035][ T5918] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 327.342086][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.358393][ T60] usb 6-1: config 0 descriptor?? [ 327.361519][ T5862] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 327.370765][ T5916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.375006][ T60] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input47 [ 327.427654][ T5916] batadv_slave_0: left promiscuous mode [ 327.448135][ T5916] : Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 327.453972][ T5916] : Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.464080][ T5916] veth1_vlan: left promiscuous mode [ 327.467446][ T5916] veth0_vlan: left promiscuous mode [ 327.473240][ T5916] veth0_vlan: entered promiscuous mode [ 327.477980][ T5916] veth1_vlan: entered promiscuous mode [ 327.484874][ T5916] veth1_macvtap: left promiscuous mode [ 327.488593][ T5916] veth0_macvtap: left promiscuous mode [ 327.492292][ T5916] veth0_macvtap: entered promiscuous mode [ 327.497570][ T5916] veth1_macvtap: entered promiscuous mode [ 327.508498][ T5916] netdevsim netdevsim2 30: left allmulticast mode [ 327.511577][ T5916] 8021q: adding VLAN 0 to HW filter on device 30 [ 327.515970][ T5916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 327.521435][ T5916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 327.525532][ T5916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 327.532979][ T5916] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 327.537562][ T5916] bridge1: left promiscuous mode [ 327.540001][ T5916] bridge1: left allmulticast mode [ 327.544335][ T5916] veth3: left promiscuous mode [ 327.546253][ T5916] veth3: left allmulticast mode [ 327.551966][ T5916] bond1: left allmulticast mode [ 327.554339][ T5916] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.558178][ T5916] 8021q: adding VLAN 0 to HW filter on device bond2 [ 327.563305][ T5916] bond3: left allmulticast mode [ 327.565590][ T5916] 8021q: adding VLAN 0 to HW filter on device bond3 [ 327.572429][ T5916] 8021q: adding VLAN 0 to HW filter on device bond4 [ 327.588340][ T5916] 8021q: adding VLAN 0 to HW filter on device bond5 [ 327.595886][ T60] usb 6-1: USB disconnect, device number 23 [ 327.598018][ T5916] 8021q: adding VLAN 0 to HW filter on device bond6 [ 327.608940][ T5916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.616024][ T5916] bridge7: left promiscuous mode [ 327.618323][ T5916] bridge7: left allmulticast mode [ 327.628618][ T5916] bond7: left allmulticast mode [ 327.632024][ T5916] 8021q: adding VLAN 0 to HW filter on device bond7 [ 327.641871][ T5916] bridge9: left promiscuous mode [ 327.644435][ T5916] bridge9: left allmulticast mode [ 327.684407][ T9] wg2 speed is unknown, defaulting to 1000 [ 327.684636][ T6141] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 327.694404][ T9] syz2: Port: 1 Link ACTIVE [ 327.700114][ T6141] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 327.720726][ T6141] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 327.826933][ T5999] __nla_validate_parse: 5 callbacks suppressed [ 327.826955][ T5999] netlink: 224 bytes leftover after parsing attributes in process `syz.2.14349'. [ 327.950324][ T6009] IPv6: NLM_F_CREATE should be specified when creating new route [ 328.379032][ T6085] netlink: 216 bytes leftover after parsing attributes in process `syz.3.14380'. [ 328.429970][ T6092] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 328.602233][ T6129] random: crng reseeded on system resumption [ 328.678144][ T6170] netlink: 244 bytes leftover after parsing attributes in process `syz.2.14396'. [ 328.684878][ T6170] NCSI netlink: No device for ifindex 0 [ 328.993376][ T6217] Unsupported ieee802154 address type: 0 [ 329.028790][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14416'. [ 329.035987][ T6219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.218514][ T6241] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14424'. [ 329.230107][ T6241] Process accounting resumed [ 329.982432][ T6302] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14453'. [ 330.003019][ T6304] block nbd0: NBD_DISCONNECT [ 330.171959][ T6326] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 330.294612][ T6342] openvswitch: netlink: Actions may not be safe on all matching packets [ 330.626523][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14486'. [ 330.854702][ T6401] validate_nla: 9 callbacks suppressed [ 330.854720][ T6401] netlink: 'syz.3.14496': attribute type 64 has an invalid length. [ 330.866465][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14496'. [ 330.879809][ T6401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.212681][ T6081] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 331.383715][ T6081] usb 7-1: Using ep0 maxpacket: 32 [ 331.387407][ T6081] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.391605][ T6081] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.395847][ T6081] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 331.403692][ T6081] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 331.407504][ T6081] usb 7-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 331.411109][ T6081] usb 7-1: Product: syz [ 331.412876][ T6081] usb 7-1: Manufacturer: syz [ 331.414823][ T6081] usb 7-1: SerialNumber: syz [ 331.427865][ T6081] input: appletouch as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input48 [ 331.711472][ T6081] usb 7-1: USB disconnect, device number 19 [ 331.727196][ T6081] appletouch 7-1:1.0: input: appletouch disconnected [ 332.286145][ T6458] netlink: 'syz.2.14511': attribute type 64 has an invalid length. [ 332.289783][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14511'. [ 332.294601][ T6458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.379465][ T6466] 8021q: adding VLAN 0 to HW filter on device bond10 [ 332.612648][ T6532] /dev/sg0: Can't lookup blockdev [ 332.810224][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14545'. [ 332.830120][ T6556] netlink: 'syz.1.14546': attribute type 1 has an invalid length. [ 333.045661][ T6586] netlink: 'syz.1.14560': attribute type 21 has an invalid length. [ 333.258677][ C3] sr 2:0:0:0: [sr0] tag#2 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 333.263228][ C3] sr 2:0:0:0: [sr0] tag#2 CDB: opcode=0x69 (reserved) [ 333.266473][ C3] sr 2:0:0:0: [sr0] tag#2 CDB[00]: 69 1b a0 ff 9f 01 d8 74 19 5b 02 00 ca de 42 78 [ 333.270498][ C3] sr 2:0:0:0: [sr0] tag#2 CDB[10]: fc 42 [ 333.397533][ T6627] [U]  [ 333.505921][ T6638] bond0: (slave sit0): refused to change device type [ 333.607645][ T6646] __nla_validate_parse: 12 callbacks suppressed [ 333.607665][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14585'. [ 333.676221][ T6652] netlink: 108 bytes leftover after parsing attributes in process `syz.3.14588'. [ 333.679735][ T6652] netlink: 108 bytes leftover after parsing attributes in process `syz.3.14588'. [ 334.015369][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14603'. [ 334.288792][ T6705] xt_ecn: cannot match TCP bits for non-tcp packets [ 334.477454][ T6731] hfs: unable to load iocharset "io#harset" [ 334.592671][ T6754] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 334.598714][ T6754] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 334.604341][ T6754] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 334.806858][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14648'. [ 334.859642][ T6787] warn_alloc: 2 callbacks suppressed [ 334.859655][ T6787] syz.1.14652: vmalloc error: size 4294967295, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 334.862129][ T6787] CPU: 3 UID: 0 PID: 6787 Comm: syz.1.14652 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.862158][ T6787] Tainted: [L]=SOFTLOCKUP [ 334.862165][ T6787] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 334.862177][ T6787] Call Trace: [ 334.862184][ T6787] [ 334.862190][ T6787] dump_stack_lvl+0x100/0x190 [ 334.862215][ T6787] warn_alloc.cold+0x94/0xa8 [ 334.862235][ T6787] ? __pfx_warn_alloc+0x10/0x10 [ 334.862248][ T6787] ? __do_fast_syscall_32+0xe7/0x970 [ 334.862262][ T6787] ? do_fast_syscall_32+0x32/0x70 [ 334.862271][ T6787] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.862289][ T6787] ? __lock_acquire+0x49f/0x1a40 [ 334.862318][ T6787] __vmalloc_node_range_noprof+0x136c/0x1630 [ 334.862351][ T6787] ? trace_contention_end+0x126/0x160 [ 334.862376][ T6787] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 334.862402][ T6787] ? dvb_demux_do_ioctl+0x929/0x1200 [ 334.862428][ T6787] ? lockdep_hardirqs_on+0x78/0x100 [ 334.862459][ T6787] ? find_held_lock+0x2b/0x80 [ 334.862478][ T6787] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 334.862501][ T6787] ? __pfx___mutex_lock+0x10/0x10 [ 334.862532][ T6787] ? tomoyo_path_number_perm+0x188/0x580 [ 334.862558][ T6787] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 334.862579][ T6787] __vmalloc_node_noprof+0xad/0xf0 [ 334.862605][ T6787] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 334.862635][ T6787] dvb_demux_do_ioctl+0x9e0/0x1200 [ 334.862666][ T6787] ? do_vfs_ioctl+0x226/0x13e0 [ 334.862690][ T6787] dvb_usercopy+0x167/0x340 [ 334.862714][ T6787] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 334.862740][ T6787] ? __pfx_dvb_usercopy+0x10/0x10 [ 334.862770][ T6787] ? __fget_files+0x21f/0x3d0 [ 334.862796][ T6787] dvb_demux_ioctl+0x29/0x40 [ 334.862818][ T6787] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 334.862845][ T6787] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 334.862868][ T6787] __do_fast_syscall_32+0xe7/0x970 [ 334.862881][ T6787] ? lockdep_hardirqs_on+0x78/0x100 [ 334.862912][ T6787] do_fast_syscall_32+0x32/0x70 [ 334.862929][ T6787] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.862951][ T6787] RIP: 0023:0xf704efec [ 334.862971][ T6787] Code: Unable to access opcode bytes at 0xf704efc2. [ 334.862977][ T6787] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 334.862991][ T6787] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000006f2d [ 334.863002][ T6787] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: 0000000000000000 [ 334.863013][ T6787] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 334.863026][ T6787] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 334.863038][ T6787] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 334.863063][ T6787] [ 334.863070][ T6787] Mem-Info: [ 334.988075][ T6787] active_anon:1292 inactive_anon:13544 isolated_anon:0 [ 334.988075][ T6787] active_file:2527 inactive_file:17940 isolated_file:0 [ 334.988075][ T6787] unevictable:1768 dirty:398 writeback:0 [ 334.988075][ T6787] slab_reclaimable:6442 slab_unreclaimable:71126 [ 334.988075][ T6787] mapped:22438 shmem:1803 pagetables:1315 [ 334.988075][ T6787] sec_pagetables:320 bounce:0 [ 334.988075][ T6787] kernel_misc_reclaimable:0 [ 334.988075][ T6787] free:50338 free_pcp:7813 free_cma:0 [ 335.007065][ T6787] Node 0 active_anon:0kB inactive_anon:4kB active_file:4kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8192kB pagetables:1452kB sec_pagetables:1116kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 335.007109][ T6787] Node 1 active_anon:5168kB inactive_anon:54172kB active_file:10104kB inactive_file:71752kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:89724kB dirty:1588kB writeback:0kB shmem:3676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5932kB pagetables:3808kB sec_pagetables:164kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 335.007146][ T6787] Node 0 DMA free:3228kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 335.007190][ T6787] lowmem_reserve[]: 0 280 280 280 280 [ 335.007218][ T6787] Node 0 DMA32 free:36944kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:3536kB writepending:4kB zspages:1384kB present:1032196kB managed:287152kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 335.007257][ T6787] lowmem_reserve[]: 0 0 0 0 0 [ 335.007281][ T6787] Node 1 DMA32 free:161180kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5168kB inactive_anon:54172kB active_file:10104kB inactive_file:71752kB unevictable:3536kB writepending:1588kB zspages:3680kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:31300kB local_pcp:8316kB free_cma:0kB [ 335.007318][ T6787] lowmem_reserve[]: 0 0 0 0 0 [ 335.007342][ T6787] Node 0 DMA: 259*4kB (UE) 18*8kB (UE) 6*16kB (UE) 15*32kB (UE) 11*64kB (UE) 2*128kB (E) 2*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3228kB [ 335.007476][ T6787] Node 0 DMA32: 1368*4kB (UME) 322*8kB (UME) 184*16kB (UME) 319*32kB (UME) 74*64kB (UME) 42*128kB (UME) 16*256kB (UM) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36944kB [ 335.007630][ T6787] Node 1 DMA32: 2*4kB (UM) 290*8kB (UM) 192*16kB (UM) 82*32kB (UM) 282*64kB (UME) 198*128kB (UME) 143*256kB (UME) 81*512kB (UME) 29*1024kB (UM) 1*2048kB (U) 0*4096kB = 161240kB [ 335.108350][ T6787] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.112129][ T6787] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 335.115475][ T6787] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.119207][ T6787] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 335.122412][ T6787] 23796 total pagecache pages [ 335.124128][ T6787] 1528 pages in swap cache [ 335.125952][ T6787] Free swap = 103704kB [ 335.127820][ T6787] Total swap = 124996kB [ 335.129743][ T6787] 524155 pages RAM [ 335.131565][ T6787] 0 pages HighMem/MovableOnly [ 335.133772][ T6787] 211474 pages reserved [ 335.137827][ T6787] 0 pages cma reserved [ 335.256391][ T6816] netlink: 68 bytes leftover after parsing attributes in process `syz.1.14667'. [ 335.646330][ T6074] Bluetooth: hci3: unexpected event for opcode 0x200b [ 335.771024][ T6894] netlink: 'syz.0.14708': attribute type 4 has an invalid length. [ 336.088049][ T6949] kAFS: unable to lookup cell '.,c' [ 336.141945][ T6960] overlayfs: unescaped trailing colons in lowerdir mount option. [ 336.345736][ T6987] netlink: 'syz.0.14752': attribute type 2 has an invalid length. [ 336.452165][ T7001] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 336.639549][ T7029] bochs-drm 0000:00:01.0: [drm] Unknown color mode 65545; guessing buffer size. [ 336.646032][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 336.650054][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 336.776059][ T7055] netlink: 'syz.1.14782': attribute type 1 has an invalid length. [ 336.780022][ T7055] netlink: 756 bytes leftover after parsing attributes in process `syz.1.14782'. [ 336.827606][ T7059] netlink: 'syz.2.14783': attribute type 2 has an invalid length. [ 337.152602][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14806'. [ 337.350459][ T7126] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 337.354374][ T7126] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 337.614268][ T7149] bond3: entered promiscuous mode [ 338.049211][ T7210] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 338.052368][ T7210] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 338.291627][ T7239] xt_TPROXY: Can be used only with -p tcp or -p udp [ 338.292232][ T7237] netlink: 'syz.1.14855': attribute type 5 has an invalid length. [ 338.493965][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14868'. [ 338.496909][ T7263] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 338.499969][ T7265] openvswitch: netlink: Actions may not be safe on all matching packets [ 338.593607][ T7277] cgroup: name respecified [ 338.621239][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 339.147509][ T7351] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 339.223684][ T7359] random: crng reseeded on system resumption [ 339.325364][ T7369] netlink: 260 bytes leftover after parsing attributes in process `syz.3.14918'. [ 339.811829][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14934'. [ 339.904657][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14940'. [ 339.911003][ T7432] netlink: 5 bytes leftover after parsing attributes in process `syz.1.14940'. [ 340.028140][ T7449] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 340.490215][ T7510] openvswitch: netlink: IPv4 tunnel dst address is zero [ 340.596991][ T7525] netlink: 'syz.3.14985': attribute type 8 has an invalid length. [ 340.686342][ T7536] xt_hashlimit: max too large, truncated to 1048576 [ 340.861461][ T7589] ip6t_REJECT: ECHOREPLY is not supported [ 340.863924][ T7591] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14997'. [ 340.904420][ T7596] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 340.945192][ T7599] netlink: 'syz.0.15003': attribute type 2 has an invalid length. [ 340.953041][ T7603] /dev/sg0: Can't lookup blockdev [ 341.091286][ T7621] netlink: zone id is out of range [ 341.093667][ T7621] netlink: zone id is out of range [ 341.095930][ T7621] netlink: zone id is out of range [ 341.098424][ T7621] netlink: zone id is out of range [ 341.100008][ T7621] netlink: zone id is out of range [ 341.101801][ T7621] netlink: zone id is out of range [ 341.108460][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15014'. [ 341.301162][ T7650] netlink: 'syz.3.15027': attribute type 21 has an invalid length. [ 341.303873][ T7650] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15027'. [ 341.306737][ T7650] netlink: 'syz.3.15027': attribute type 5 has an invalid length. [ 341.309222][ T7650] netlink: 3 bytes leftover after parsing attributes in process `syz.3.15027'. [ 341.527880][ T7690] netlink: 'syz.0.15046': attribute type 12 has an invalid length. [ 341.534945][ T7692] netlink: 'syz.2.15048': attribute type 21 has an invalid length. [ 341.542761][ T7694] tmpfs: Bad value for 'mpol' [ 341.672429][ T7717] 9pnet_fd: p9_fd_create_unix (7717): problem connecting socket: ./file0/file0: -2 [ 341.722751][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15064'. [ 341.768775][ T7730] netlink: 'syz.3.15066': attribute type 1 has an invalid length. [ 341.772622][ T7730] netlink: 224 bytes leftover after parsing attributes in process `syz.3.15066'. [ 342.040584][ T7774] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 342.238758][ T7800] net_ratelimit: 361 callbacks suppressed [ 342.238783][ T7800] openvswitch: netlink: Key type 30 is not supported [ 342.305240][ T7809] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 342.465056][ T7834] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 342.468373][ T7834] CIFS mount error: No usable UNC path provided in device string! [ 342.468373][ T7834] [ 342.471198][ T7836] netlink: zone id is out of range [ 342.472316][ T7834] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 342.524781][ T7843] netlink: 'syz.2.15118': attribute type 1 has an invalid length. [ 342.721525][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 342.833971][ T7896] overlayfs: conflicting options: userxattr,metacopy=on [ 342.988426][ T7918] netlink: 'syz.0.15152': attribute type 2 has an invalid length. [ 343.122844][ T7938] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 343.176330][ T7936] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 344.499274][ T8494] ntfs3(nullb0): Primary boot signature is not NTFS. [ 344.502258][ T8494] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 344.617214][ T8508] binder: 8506:8508 ioctl c0306201 80000440 returned -22 [ 344.666922][ T8514] random: crng reseeded on system resumption [ 344.908829][ T6074] Bluetooth: hci3: unexpected event for opcode 0x1804 [ 344.921738][ T8561] __nla_validate_parse: 4 callbacks suppressed [ 344.921759][ T8561] netlink: 104 bytes leftover after parsing attributes in process `syz.1.15235'. [ 345.311991][ T8558] syz.0.15234 (8558): drop_caches: 3 [ 345.473150][ T8630] openvswitch: netlink: IP tunnel dst address not specified [ 345.500361][ T8635] CIFS mount error: No usable UNC path provided in device string! [ 345.500361][ T8635] [ 345.503604][ T8635] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 345.837878][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15297'. [ 345.844372][ T8688] netlink: 'syz.0.15297': attribute type 5 has an invalid length. [ 345.846963][ T8688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15297'. [ 345.848397][ T8693] ipt_ECN: cannot use operation on non-tcp rule [ 345.860449][ T8688] geneve2: entered promiscuous mode [ 345.862720][ T8688] geneve2: entered allmulticast mode [ 345.870023][ T6140] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 345.875778][ T6140] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 345.879299][ T6140] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 345.882926][ T6140] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 345.954117][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15305'. [ 345.959809][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 345.959820][ T42] audit: type=1326 audit(330.644:18567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.2.15307" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 345.960519][ T8708] xt_hashlimit: overflow, rate too high: 0 [ 345.963651][ T42] audit: type=1326 audit(330.644:18568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.2.15307" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 345.982460][ T42] audit: type=1326 audit(330.644:18569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.2.15307" exe="/syz-executor" sig=0 arch=40000003 syscall=266 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 346.000434][ T42] audit: type=1326 audit(330.644:18570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.2.15307" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 346.009740][ T42] audit: type=1326 audit(330.644:18571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.2.15307" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 346.074800][ T8717] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 346.082287][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15313'. [ 346.102983][ T8810] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15314'. [ 346.324133][ T8844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15327'. [ 346.366580][ T8847] IPv6: NLM_F_CREATE should be specified when creating new route [ 346.625497][ T8871] Unknown options in mask b7f2 [ 347.063883][ T8816] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 347.067862][ T8816] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 348.438643][ T6074] Bluetooth: hci1: command 0x0406 tx timeout [ 348.685548][ T8816] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 348.688194][ T8816] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 348.782360][ T8816] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 348.787828][ T8816] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 348.932303][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15356'. [ 348.990951][ T8965] (syz.2.15358,8965,1):ocfs2_get_sector:1713 ERROR: status = -5 [ 348.994680][ T8965] (syz.2.15358,8965,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 348.997865][ T8965] (syz.2.15358,8965,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 349.001440][ T8965] (syz.2.15358,8965,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 349.240470][T22037] IPVS: starting estimator thread 0... [ 349.324856][ T9012] CIFS mount error: No usable UNC path provided in device string! [ 349.324856][ T9012] [ 349.330950][ T9012] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 349.336384][ T9006] IPVS: using max 33 ests per chain, 79200 per kthread [ 349.381762][ T9020] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 349.492522][ T9041] (syz.3.15389,9041,0):ocfs2_get_sector:1713 ERROR: status = -5 [ 349.495933][ T9041] (syz.3.15389,9041,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 349.498915][ T9041] (syz.3.15389,9041,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 349.501966][ T9041] (syz.3.15389,9041,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 350.174773][ T9509] netlink: 'syz.1.15419': attribute type 21 has an invalid length. [ 350.177841][ T9509] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15419'. [ 350.411115][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15434'. [ 350.435770][ T9547] netlink: 'syz.2.15436': attribute type 1 has an invalid length. [ 350.439939][ T9547] netlink: 244 bytes leftover after parsing attributes in process `syz.2.15436'. [ 350.718892][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15453'. [ 350.722621][ T9584] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15453'. [ 350.814465][ T9600] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 351.013966][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 351.068287][ T9634] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 351.116752][ T9640] No such timeout policy "syz1" [ 351.125384][ T9641] bond0: left promiscuous mode [ 351.145948][ T9641] macsec0: left promiscuous mode [ 351.148358][ T9641] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 351.151637][ T9641] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 351.155264][ T9641] veth3: left promiscuous mode [ 351.157330][ T9641] ip6erspan0: left promiscuous mode [ 351.159875][ T9641] bridge1: left promiscuous mode [ 351.161796][ T9641] bridge2: left promiscuous mode [ 351.164440][ T9641] bond4: left promiscuous mode [ 351.167815][ T9641] bond7: left promiscuous mode [ 351.171336][ T9641] gre1: left promiscuous mode [ 351.206323][T22037] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 351.284166][ T9656] netlink: 'syz.2.15487': attribute type 5 has an invalid length. [ 351.291182][ T9656] ip6erspan1: entered promiscuous mode [ 351.389371][T22037] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.393231][T22037] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 351.400388][T22037] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 351.404135][T22037] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.418927][T22037] usb 6-1: Product: syz [ 351.421968][T22037] usb 6-1: Manufacturer: syz [ 351.423815][T22037] usb 6-1: SerialNumber: syz [ 351.429085][T22037] usb 6-1: config 0 descriptor?? [ 351.437530][T22037] usb 6-1: ucan: probing device on interface #0 [ 351.441729][T22037] usb 6-1: ucan: invalid EP count (0) [ 351.444434][T22037] usb 6-1: ucan: probe failed; try to update the device firmware [ 351.450784][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15497'. [ 351.659256][T22037] usb 6-1: USB disconnect, device number 24 [ 351.841986][ T9728] netlink: 'syz.3.15517': attribute type 21 has an invalid length. [ 351.844731][ T9728] netlink: 'syz.3.15517': attribute type 20 has an invalid length. [ 352.019303][ T9745] netlink: 'syz.2.15525': attribute type 10 has an invalid length. [ 352.029635][ T9745] macvlan1: entered promiscuous mode [ 352.031938][ T9745] macvlan1: entered allmulticast mode [ 352.038070][ T9745] veth1_vlan: entered allmulticast mode [ 352.048063][ T9745] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 352.157712][ T9757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15531'. [ 352.343834][ T9787] netlink: 'syz.2.15546': attribute type 1 has an invalid length. [ 352.353922][ T9787] netlink: 'syz.2.15546': attribute type 1 has an invalid length. [ 352.597454][ T9817] bond8 (unregistering): Released all slaves [ 353.135668][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15587'. [ 353.166326][ T42] audit: type=1326 audit(337.382:18572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.0.15588" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 353.178418][ T42] audit: type=1326 audit(337.382:18573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.0.15588" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 353.188872][ T42] audit: type=1326 audit(337.382:18574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.0.15588" exe="/syz-executor" sig=0 arch=40000003 syscall=234 compat=1 ip=0xf706efec code=0x7ffc0000 [ 353.198373][ T42] audit: type=1326 audit(337.382:18575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.0.15588" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 353.293948][T10224] netlink: 44 bytes leftover after parsing attributes in process `syz.0.15592'. [ 353.423661][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15598'. [ 353.426544][T10344] netlink: 14 bytes leftover after parsing attributes in process `syz.0.15598'. [ 353.563785][T10366] geneve3: entered allmulticast mode [ 354.200425][T10497] 0{X: renamed from gretap0 (while UP) [ 354.213140][T10497] 0{X: entered allmulticast mode [ 354.215750][T10497] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 354.239216][T10501] netlink: 'syz.3.15657': attribute type 11 has an invalid length. [ 354.324460][T10514] netlink: 'syz.0.15664': attribute type 2 has an invalid length. [ 354.464243][T10537] netlink: 'syz.3.15674': attribute type 1 has an invalid length. [ 354.475908][T10541] set match dimension is over the limit! [ 354.859145][T10603] tmpfs: Bad value for 'mpol' [ 355.670701][T10747] syz.3.15770: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 355.671275][T10752] program syz.2.15772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.678100][T10747] CPU: 2 UID: 0 PID: 10747 Comm: syz.3.15770 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.678128][T10747] Tainted: [L]=SOFTLOCKUP [ 355.678133][T10747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 355.678143][T10747] Call Trace: [ 355.678150][T10747] [ 355.678157][T10747] dump_stack_lvl+0x100/0x190 [ 355.678183][T10747] warn_alloc.cold+0x94/0xa8 [ 355.678203][T10747] ? __pfx_warn_alloc+0x10/0x10 [ 355.678226][T10747] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 355.678257][T10747] ? __pfx_get_page_from_freelist+0x10/0x10 [ 355.678292][T10747] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 355.678326][T10747] ? debug_object_activate+0x343/0x4b0 [ 355.678353][T10747] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 355.678368][T10747] ? do_raw_spin_unlock+0x145/0x1e0 [ 355.678384][T10747] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 355.678404][T10747] ? debug_object_activate+0x343/0x4b0 [ 355.678425][T10747] ? __pfx_debug_object_activate+0x10/0x10 [ 355.678451][T10747] ? timerqueue_linked_add+0x260/0x430 [ 355.678479][T10747] __folio_alloc_noprof+0x13/0x260 [ 355.678495][T10747] alloc_migration_target+0x1d7/0x6d0 [ 355.678518][T10747] migrate_pages_batch+0x5dc/0x45c0 [ 355.678541][T10747] ? __pfx_alloc_migration_target+0x10/0x10 [ 355.678572][T10747] ? __pfx_migrate_pages_batch+0x10/0x10 [ 355.678602][T10747] ? __pfx___schedule+0x10/0x10 [ 355.678624][T10747] ? find_held_lock+0x2b/0x80 [ 355.678647][T10747] ? __lock_acquire+0x49f/0x1a40 [ 355.678675][T10747] migrate_pages_sync+0x12c/0x880 [ 355.678701][T10747] ? __pfx_alloc_migration_target+0x10/0x10 [ 355.678730][T10747] ? __pfx_migrate_pages_sync+0x10/0x10 [ 355.678766][T10747] migrate_pages+0x1a83/0x2850 [ 355.678795][T10747] ? __pfx_alloc_migration_target+0x10/0x10 [ 355.678823][T10747] ? __pfx_migrate_pages+0x10/0x10 [ 355.678850][T10747] ? __pfx___css_rstat_updated+0x10/0x10 [ 355.678887][T10747] move_pages_and_store_status+0xf1/0x230 [ 355.678916][T10747] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 355.678944][T10747] ? kernel_move_pages+0xbfb/0x14a0 [ 355.678970][T10747] ? kernel_move_pages+0xbfb/0x14a0 [ 355.679005][T10747] kernel_move_pages+0xcf6/0x14a0 [ 355.679048][T10747] ? __pfx_kernel_move_pages+0x10/0x10 [ 355.679083][T10747] ? xfd_validate_state+0x129/0x190 [ 355.679118][T10747] __ia32_sys_move_pages+0xdd/0x1b0 [ 355.679144][T10747] ? __do_fast_syscall_32+0x98/0x970 [ 355.679215][T10747] ? lockdep_hardirqs_on+0x78/0x100 [ 355.679244][T10747] __do_fast_syscall_32+0xe7/0x970 [ 355.679264][T10747] do_fast_syscall_32+0x32/0x70 [ 355.679279][T10747] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 355.679325][T10747] RIP: 0023:0xf708efec [ 355.679346][T10747] Code: Unable to access opcode bytes at 0xf708efc2. [ 355.679354][T10747] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 355.679372][T10747] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000001 [ 355.679383][T10747] RDX: 0000000080000040 RSI: 00000000800002c0 RDI: 0000000080001680 [ 355.679393][T10747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 355.679403][T10747] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 355.679413][T10747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 355.679435][T10747] [ 355.679559][T10747] Mem-Info: [ 355.818835][T10765] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 355.823508][T10747] active_anon:4114 inactive_anon:10790 isolated_anon:0 [ 355.823508][T10747] active_file:2278 inactive_file:3284 isolated_file:0 [ 355.823508][T10747] unevictable:1768 dirty:16 writeback:0 [ 355.823508][T10747] slab_reclaimable:6447 slab_unreclaimable:71707 [ 355.823508][T10747] mapped:22477 shmem:1810 pagetables:1412 [ 355.823508][T10747] sec_pagetables:322 bounce:0 [ 355.823508][T10747] kernel_misc_reclaimable:0 [ 355.823508][T10747] free:62026 free_pcp:9364 free_cma:0 [ 355.847557][T10747] Node 0 active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:12kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8192kB pagetables:1452kB sec_pagetables:1116kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 355.860084][T10747] Node 1 active_anon:16356kB inactive_anon:43156kB active_file:9112kB inactive_file:13124kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:89780kB dirty:56kB writeback:0kB shmem:3704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6148kB pagetables:3996kB sec_pagetables:172kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 355.876070][T10747] Node 0 DMA free:3232kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.885634][T10747] lowmem_reserve[]: 0 280 280 280 280 [ 355.888041][T10747] Node 0 DMA32 free:37148kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:3536kB writepending:4kB zspages:1272kB present:1032196kB managed:287152kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 355.898131][T10747] lowmem_reserve[]: 0 0 0 0 0 [ 355.899705][T10747] Node 1 DMA32 free:207724kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16456kB inactive_anon:43156kB active_file:9112kB inactive_file:13124kB unevictable:3536kB writepending:56kB zspages:3252kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:38240kB local_pcp:15028kB free_cma:0kB [ 355.910416][T10747] lowmem_reserve[]: 0 0 0 0 0 [ 355.912133][T10747] Node 0 DMA: 260*4kB (UE) 18*8kB (UE) 6*16kB (UE) 15*32kB (UE) 11*64kB (UE) 2*128kB (E) 2*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3232kB [ 355.917381][T10747] Node 0 DMA32: 1375*4kB (UME) 330*8kB (UME) 187*16kB (UME) 319*32kB (UME) 73*64kB (UME) 43*128kB (UME) 16*256kB (UM) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 37148kB [ 355.923309][T10747] Node 1 DMA32: 120*4kB (M) 222*8kB (UME) 209*16kB (UM) 288*32kB (UME) 142*64kB (UME) 225*128kB (UME) 171*256kB (UME) 99*512kB (UME) 39*1024kB (UM) 6*2048kB (M) 2*4096kB (UM) = 207584kB [ 355.929051][T10747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.932312][T10747] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 355.935492][T10747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.938981][T10747] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 355.942859][T10747] 8923 total pagecache pages [ 355.944386][T10747] 1553 pages in swap cache [ 355.945818][T10747] Free swap = 103708kB [ 355.947242][T10747] Total swap = 124996kB [ 355.948559][T10747] 524155 pages RAM [ 355.950087][T10747] 0 pages HighMem/MovableOnly [ 355.952700][T10747] 211474 pages reserved [ 355.954247][T10747] 0 pages cma reserved [ 355.982929][ T29] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 356.154244][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 356.158362][ T29] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 356.161949][ T29] usb 5-1: config 0 has no interface number 0 [ 356.165213][ T29] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 356.172174][ T29] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 356.179577][ T29] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 356.183696][ T29] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 356.192215][T10794] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 356.199029][ T29] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 356.203210][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.217927][ T29] usb 5-1: Product: syz [ 356.219769][ T29] usb 5-1: Manufacturer: syz [ 356.221731][ T29] usb 5-1: SerialNumber: syz [ 356.225946][ T29] usb 5-1: config 0 descriptor?? [ 356.237787][ T29] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.119/input/input54 [ 356.261247][T10811] netlink: zone id is out of range [ 356.313638][T10817] dlm: non-version read from control device 0 [ 356.413235][T10824] ipip0: entered promiscuous mode [ 356.429954][T10832] ALSA: mixer_oss: invalid OSS volume '' [ 356.431939][T10832] ALSA: mixer_oss: invalid OSS volume 'ұB;T`@$EcXMYd,' [ 356.434519][T10832] ALSA: mixer_oss: invalid OSS volume 'b@h#' [ 356.436522][T10832] ALSA: mixer_oss: invalid OSS volume 'h4XS4v=0_>&' [ 356.439062][T10832] ALSA: mixer_oss: invalid OSS volume '|/"tj' [ 356.441072][T10832] ALSA: mixer_oss: invalid OSS volume '-z5c^J6$' [ 356.444764][T10832] ALSA: mixer_oss: invalid OSS volume '0Ty󉴪jP&at' [ 356.448265][T10832] ALSA: mixer_oss: invalid OSS volume '|~\' [ 356.451109][T10832] ALSA: mixer_oss: invalid OSS volume '@^3bɜ}G$#\("/oL' [ 356.456610][T22037] usb 5-1: USB disconnect, device number 14 [ 356.456816][T10832] ALSA: mixer_oss: invalid OSS volume 'I :' [ 356.462814][T10832] ALSA: mixer_oss: invalid OSS volume '%^vhcGJPr('⍯Q=' [ 356.466401][T10832] ALSA: mixer_oss: invalid OSS volume ' Gj;4Ìz3WҼ0F=%' [ 356.470287][T10832] ALSA: mixer_oss: invalid OSS volume ';4 4fh߇GIבQ5oJ' [ 356.473844][T10832] ALSA: mixer_oss: invalid OSS volume 'Wl]Y1-J<A>o' [ 356.621354][T10857] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 356.667796][T10862] netlink: 'syz.1.15809': attribute type 5 has an invalid length. [ 356.680272][T10862] ip6erspan1: entered promiscuous mode [ 356.776631][T10872] __nla_validate_parse: 8 callbacks suppressed [ 356.776651][T10872] netlink: 10 bytes leftover after parsing attributes in process `syz.2.15813'. [ 356.799022][T10874] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15814'. [ 356.825256][T10874] 8021q: adding VLAN 0 to HW filter on device bond6 [ 356.887734][T10913] Cannot find add_set index 3 as target [ 357.162578][T10945] cgroup: No subsys list or none specified [ 357.231454][T10953] netlink: 'syz.2.15837': attribute type 15 has an invalid length. [ 357.243562][T10953] netlink: 'syz.2.15837': attribute type 7 has an invalid length. [ 357.247861][T10953] netlink: 52 bytes leftover after parsing attributes in process `syz.2.15837'. [ 357.278812][T10955] openvswitch: netlink: Message has 8 unknown bytes. [ 357.367814][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15844'. [ 357.368096][T10966] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 357.388380][T10969] netlink: 'syz.3.15846': attribute type 10 has an invalid length. [ 357.390933][T10969] macvlan1: entered promiscuous mode [ 357.393083][T10969] macvlan1: entered allmulticast mode [ 357.396492][T10969] veth1_vlan: entered allmulticast mode [ 357.400364][T10969] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 357.477195][T10982] netlink: 5 bytes leftover after parsing attributes in process `syz.0.15851'. [ 357.485152][T10982] 0{X: renamed from gretap0 (while UP) [ 357.490550][T10982] 0{X: entered allmulticast mode [ 357.493194][T10982] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 357.499605][T10985] XFS (nbd1): SB validate failed with error -5. [ 357.641404][T11012] netlink: 'syz.0.15864': attribute type 10 has an invalid length. [ 357.644894][T11012] macvlan1: entered promiscuous mode [ 357.646565][T11012] macvlan1: entered allmulticast mode [ 357.648748][T11011] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 357.649490][T11012] veth1_vlan: entered allmulticast mode [ 357.659133][T11012] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 357.714690][ T42] audit: type=1326 audit(341.640:18576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11019 comm="syz.2.15868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 357.726366][ T42] audit: type=1326 audit(341.640:18577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11019 comm="syz.2.15868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 357.737040][ T42] audit: type=1326 audit(341.649:18578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11019 comm="syz.2.15868" exe="/syz-executor" sig=0 arch=40000003 syscall=76 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 357.746514][ T42] audit: type=1326 audit(341.649:18579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11019 comm="syz.2.15868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 357.754591][ T42] audit: type=1326 audit(341.649:18580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11019 comm="syz.2.15868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 357.758413][T11026] sctp: [Deprecated]: syz.1.15870 (pid 11026) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.758413][T11026] Use struct sctp_sack_info instead [ 357.962989][T11052] overlayfs: cannot append lower layer [ 358.134887][T11081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15897'. [ 358.308862][T11113] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 358.432046][T11131] netlink: 56 bytes leftover after parsing attributes in process `syz.0.15923'. [ 358.563821][T11161] openvswitch: netlink: Flow actions attr not present in new flow. [ 358.991357][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15954'. [ 358.996386][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15954'. [ 359.037543][T11225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15955'. [ 359.086640][ T42] audit: type=1326 audit(342.922:18581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11232 comm="syz.3.15958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 359.094223][ T42] audit: type=1326 audit(342.922:18582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11232 comm="syz.3.15958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 359.100879][ T42] audit: type=1326 audit(342.931:18583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11232 comm="syz.3.15958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 359.108548][ T42] audit: type=1326 audit(342.931:18584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11232 comm="syz.3.15958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 359.115264][ T42] audit: type=1326 audit(342.931:18585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11232 comm="syz.3.15958" exe="/syz-executor" sig=0 arch=40000003 syscall=183 compat=1 ip=0xf708efec code=0x7ffc0000 [ 359.123768][ T42] audit: type=1326 audit(342.931:18586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11232 comm="syz.3.15958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 359.139660][ T42] audit: type=1326 audit(342.931:18587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11232 comm="syz.3.15958" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 359.139883][T11237] xt_addrtype: ipv6 does not support BROADCAST matching [ 359.146393][ T42] audit: type=1326 audit(342.931:18588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11232 comm="syz.3.15958" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf708efec code=0x7ffc0000 [ 359.146421][ T42] audit: type=1326 audit(342.931:18589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11232 comm="syz.3.15958" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf708efec code=0x7ffc0000 [ 359.444486][T11285] netlink: 'syz.0.15981': attribute type 1 has an invalid length. [ 359.706696][T11331] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 359.783305][ T42] audit: type=1326 audit(343.577:18590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.2.16002" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 359.855175][T11350] openvswitch: netlink: Actions may not be safe on all matching packets [ 359.997971][T11371] program syz.0.16015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 360.002136][T11371] ata1.00: invalid command format 31 [ 360.608293][T11477] netlink: 'syz.1.16059': attribute type 13 has an invalid length. [ 360.641367][T11480] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002 [ 360.789961][T11507] netlink: 'syz.1.16070': attribute type 4 has an invalid length. [ 360.799272][T11507] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 360.919932][T11527] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 360.972126][T11535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.311690][T11586] Process accounting paused [ 361.364147][T11595] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 361.366308][T11595] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 361.370747][T11595] vhci_hcd vhci_hcd.0: Device attached [ 361.421000][T11596] vhci_hcd: unknown pdu 1 [ 361.423913][ T6140] vhci_hcd vhci_hcd.3: stop threads [ 361.426171][ T6140] vhci_hcd vhci_hcd.3: release socket [ 361.428186][ T6140] vhci_hcd vhci_hcd.3: disconnect device [ 361.566276][T11627] 9pnet_fd: Insufficient options for proto=fd [ 361.692127][T11639] openvswitch: netlink: IP tunnel TTL not specified. [ 361.754111][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 361.925613][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 361.929630][ T9] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 361.932846][ T9] usb 7-1: config 0 has no interface number 0 [ 361.935525][ T9] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 361.940090][ T9] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 361.945256][ T9] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 361.950319][ T9] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 361.958080][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 361.961847][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.965103][ T9] usb 7-1: Product: syz [ 361.966748][ T9] usb 7-1: Manufacturer: syz [ 361.969078][ T9] usb 7-1: SerialNumber: syz [ 361.973382][ T9] usb 7-1: config 0 descriptor?? [ 361.988678][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.119/input/input56 [ 362.078877][T11684] No control pipe specified [ 362.905182][ T60] usb 7-1: USB disconnect, device number 20 [ 363.089832][T11749] __nla_validate_parse: 4 callbacks suppressed [ 363.089853][T11749] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16178'. [ 363.390342][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16195'. [ 363.497062][T11830] block nbd0: not configured, cannot reconfigure [ 363.509984][T11832] program syz.2.16201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.753854][T11895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16214'. [ 363.839342][T11906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16222'. [ 363.850937][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16223'. [ 363.980541][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16233'. [ 364.142746][T11952] netlink: 'syz.1.16243': attribute type 1 has an invalid length. [ 364.235227][T11964] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 364.237834][T11964] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 364.241348][T11964] vhci_hcd vhci_hcd.0: Device attached [ 364.247949][T11965] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 364.251499][ T6140] vhci_hcd vhci_hcd.1: stop threads [ 364.253121][ T6140] vhci_hcd vhci_hcd.1: release socket [ 364.258169][ T6140] vhci_hcd vhci_hcd.1: disconnect device [ 364.401929][T11982] netlink: 'syz.0.16257': attribute type 2 has an invalid length. [ 364.405498][T11982] netlink: 'syz.0.16257': attribute type 1 has an invalid length. [ 364.576996][T11996] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 364.684851][T12006] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16269'. [ 365.066489][T12044] random: crng reseeded on system resumption [ 365.096957][T12046] misc userio: No port type given on /dev/userio [ 365.217094][T12066] program syz.1.16299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 365.516548][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 365.516563][ T42] audit: type=1326 audit(348.939:18599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12115 comm="syz.2.16321" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 365.529415][ T42] audit: type=1326 audit(348.939:18600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12115 comm="syz.2.16321" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 365.537622][ T42] audit: type=1326 audit(348.939:18601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12115 comm="syz.2.16321" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 365.545825][ T42] audit: type=1326 audit(348.939:18602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12115 comm="syz.2.16321" exe="/syz-executor" sig=0 arch=40000003 syscall=270 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 365.558283][ T42] audit: type=1326 audit(348.939:18603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12115 comm="syz.2.16321" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 365.567717][ T42] audit: type=1326 audit(348.939:18604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12115 comm="syz.2.16321" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 365.583964][ T42] audit: type=1326 audit(348.939:18605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12115 comm="syz.2.16321" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 365.591496][T12126] openvswitch: netlink: Flow key attribute not present in set flow. [ 365.592389][ T42] audit: type=1326 audit(348.939:18606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12115 comm="syz.2.16321" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 365.603024][ T42] audit: type=1326 audit(348.939:18607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12115 comm="syz.2.16321" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 365.633470][T12132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16329'. [ 365.933910][T12173] xt_CT: You must specify a L4 protocol and not use inversions on it [ 366.099439][T12207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16365'. [ 366.106000][T12207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16365'. [ 366.110334][T12207] netlink: 'syz.0.16365': attribute type 6 has an invalid length. [ 366.333795][T12245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.746151][T12297] program syz.1.16409 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.860048][T12310] IPv6: Can't replace route, no match found [ 366.964090][T12321] dvmrp9: entered allmulticast mode [ 367.127811][T12343] netlink: 'syz.3.16430': attribute type 9 has an invalid length. [ 367.427727][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 367.580452][T12421] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 368.380205][T12578] overlayfs: missing 'lowerdir' [ 368.532058][T12601] program syz.1.16535 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.705602][T12622] netlink: 'syz.1.16544': attribute type 10 has an invalid length. [ 368.845338][T12640] __nla_validate_parse: 6 callbacks suppressed [ 368.845357][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16549'. [ 368.858000][T12640] netlink: 50 bytes leftover after parsing attributes in process `syz.2.16549'. [ 368.863991][T12640] netlink: 50 bytes leftover after parsing attributes in process `syz.2.16549'. [ 368.920617][T12648] netlink: 'syz.0.16553': attribute type 3 has an invalid length. [ 368.926025][T12648] netlink: 'syz.0.16553': attribute type 1 has an invalid length. [ 368.932197][T12648] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16553'. [ 368.936747][T12648] NCSI netlink: No device for ifindex 0 [ 369.300443][T12702] openvswitch: netlink: Missing valid actions attribute. [ 369.303405][T12702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.312089][T12706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16582'. [ 369.804796][T12782] netlink: 'syz.1.16618': attribute type 2 has an invalid length. [ 369.913938][T12797] nfs: Deprecated parameter 'nointr' [ 369.955663][T12799] netlink: 'syz.0.16626': attribute type 2 has an invalid length. [ 370.142407][T12823] XFS (nbd2): SB validate failed with error -5. [ 370.252724][T12840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.294079][T12843] netlink: 'syz.2.16644': attribute type 2 has an invalid length. [ 370.466446][T12865] netlink: 'syz.0.16656': attribute type 2 has an invalid length. [ 370.470065][T12865] netlink: 'syz.0.16656': attribute type 1 has an invalid length. [ 370.471138][T12869] binder: 12867:12869 ioctl 40046205 0 returned -22 [ 370.471637][T12868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16655'. [ 370.606697][T12889] XFS (nbd0): SB validate failed with error -5. [ 370.757150][T12912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16676'. [ 371.397072][T12946] autofs4:pid:12946:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 371.619108][T12970] sit0: entered promiscuous mode [ 371.689048][T12983] netlink: 'syz.3.16710': attribute type 21 has an invalid length. [ 371.692510][T12983] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16710'. [ 371.750590][T12994] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.806635][T13001] random: crng reseeded on system resumption [ 371.944163][T13021] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.157980][T13052] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.263908][T13068] netlink: 'syz.0.16752': attribute type 2 has an invalid length. [ 372.267337][T13068] netlink: 723 bytes leftover after parsing attributes in process `syz.0.16752'. [ 372.364545][T13084] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.580773][T13106] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.700030][T13117] netlink: 'syz.2.16776': attribute type 1 has an invalid length. [ 372.702599][T13117] netlink: 'syz.2.16776': attribute type 1 has an invalid length. [ 372.768699][ T42] audit: type=1400 audit(355.724:18608): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="::-" pid=13129 comm="syz.0.16782" [ 372.819384][T13141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16787'. [ 372.857992][T13145] No such timeout policy "syz1" [ 373.082586][T13175] openvswitch: netlink: IP tunnel dst address not specified [ 373.152255][T13191] vlan0: entered promiscuous mode [ 373.442951][T13236] openvswitch: netlink: IP tunnel dst address not specified [ 373.567209][ T42] audit: type=1326 audit(356.472:18609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.0.16842" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 373.576143][ T42] audit: type=1326 audit(356.472:18610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.0.16842" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 373.585793][ T42] audit: type=1326 audit(356.472:18611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.0.16842" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 373.596877][ T42] audit: type=1326 audit(356.472:18612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.0.16842" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 373.606182][ T42] audit: type=1326 audit(356.472:18613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.0.16842" exe="/syz-executor" sig=0 arch=40000003 syscall=141 compat=1 ip=0xf706efec code=0x7ffc0000 [ 373.623884][ T42] audit: type=1326 audit(356.472:18614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.0.16842" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 373.630885][ T42] audit: type=1326 audit(356.472:18615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.0.16842" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 373.637779][ T42] audit: type=1326 audit(356.472:18616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.0.16842" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf706efec code=0x7ffc0000 [ 373.644253][ T42] audit: type=1326 audit(356.472:18617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13255 comm="syz.0.16842" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf706efec code=0x7ffc0000 [ 373.664430][T13268] autofs4:pid:13268:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(65021.1), cmd(0xc018937e) [ 373.671984][T13268] autofs4:pid:13268:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 373.777273][T13274] cdrom: dropping to single frame dma [ 373.892828][T13302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.021205][T13321] openvswitch: netlink: IPv6 tunnel dst address is zero [ 374.197375][T13344] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 374.201435][T13344] overlayfs: missing 'lowerdir' [ 374.224269][ T860] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 374.239079][T13347] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 374.395036][ T860] usb 8-1: Using ep0 maxpacket: 32 [ 374.405464][ T860] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 374.411699][ T860] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 374.419819][ T860] usb 8-1: string descriptor 0 read error: -22 [ 374.422796][ T860] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 374.426768][ T860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.438702][T13308] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 374.451518][ T860] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 374.459842][ T860] usb 8-1: MIDIStreaming interface descriptor not found [ 374.627796][T13402] __nla_validate_parse: 2 callbacks suppressed [ 374.627817][T13402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16901'. [ 374.634214][T13402] openvswitch: netlink: EtherType 0 is less than min 600 [ 374.684212][ T9] usb 8-1: USB disconnect, device number 25 [ 375.606523][T13540] netlink: 'syz.2.16958': attribute type 2 has an invalid length. [ 375.711956][T13562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16966'. [ 375.716579][T13562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16966'. [ 375.959444][T13598] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16983'. [ 377.042371][T13677] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 377.094906][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17026'. [ 377.136805][T13697] /dev/sg0: Can't lookup blockdev [ 377.162481][T13701] xt_cgroup: invalid path, errno=-2 [ 377.269115][T13719] 9p: Unknown access argument 18446744073709551615: -34 [ 377.299371][T13748] tc_dump_action: action bad kind [ 377.324939][T13766] netlink: 'syz.0.17044': attribute type 1 has an invalid length. [ 377.328893][T13766] netlink: 396 bytes leftover after parsing attributes in process `syz.0.17044'. [ 377.470687][T13789] netlink: 'syz.3.17055': attribute type 1 has an invalid length. [ 377.691501][T13827] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 377.798220][T13847] netlink: 'syz.3.17082': attribute type 1 has an invalid length. [ 377.803297][T13847] netlink: 248 bytes leftover after parsing attributes in process `syz.3.17082'. [ 378.037003][T13886] netlink: 'syz.0.17102': attribute type 11 has an invalid length. [ 378.040817][T13886] netlink: 'syz.0.17102': attribute type 4 has an invalid length. [ 378.044197][T13886] netlink: 224 bytes leftover after parsing attributes in process `syz.0.17102'. [ 378.130277][T13900] MTD: Couldn't look up './file0': -15 [ 378.343670][T13933] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17125'. [ 378.402233][T22035] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 378.481939][T13953] IPv6: NLM_F_CREATE should be specified when creating new route [ 378.551396][T13963] netlink: 256 bytes leftover after parsing attributes in process `syz.3.17140'. [ 378.573423][T22035] usb 6-1: Using ep0 maxpacket: 32 [ 378.578206][T22035] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 378.582976][T22035] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 378.590532][T22035] usb 6-1: string descriptor 0 read error: -22 [ 378.593245][T22035] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 378.599082][T22035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.613305][T13902] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 378.625260][T22035] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.628810][T22035] usb 6-1: MIDIStreaming interface descriptor not found [ 378.722266][T14001] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 378.810186][T14014] binder: 14013:14014 ioctl c0306201 80000040 returned -22 [ 378.839881][T14018] sctp: [Deprecated]: syz.2.17161 (pid 14018) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.839881][T14018] Use struct sctp_sack_info instead [ 378.868029][T22035] usb 6-1: USB disconnect, device number 25 [ 378.977328][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 378.982128][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 378.985724][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 378.989401][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 379.121896][T14074] openvswitch: netlink: Missing key (keys=40, expected=80) [ 379.813018][ T846] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 379.973544][ T846] usb 7-1: Using ep0 maxpacket: 32 [ 379.979580][ T846] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 379.988016][ T846] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 379.995420][ T846] usb 7-1: string descriptor 0 read error: -22 [ 379.998297][ T846] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 380.002090][ T846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.011013][T14141] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 380.022413][ T846] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 380.032007][ T846] usb 7-1: MIDIStreaming interface descriptor not found [ 380.094595][ T42] audit: type=1326 audit(362.583:18618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.1.17247" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 380.104107][ T42] audit: type=1326 audit(362.583:18619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.1.17247" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 380.122661][ T42] audit: type=1326 audit(362.592:18620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.1.17247" exe="/syz-executor" sig=0 arch=40000003 syscall=10 compat=1 ip=0xf704efec code=0x7ffc0000 [ 380.135530][T14232] ipt_REJECT: TCP_RESET invalid for non-tcp [ 380.136094][ T42] audit: type=1326 audit(362.592:18621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.1.17247" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 380.146998][ T42] audit: type=1326 audit(362.592:18622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.1.17247" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 380.235989][T14248] ata1.00: invalid multi_count 1 ignored [ 380.256650][T22035] usb 7-1: USB disconnect, device number 21 [ 380.470796][T14280] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 383.223446][ T1133] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 383.226474][ T1133] ata1: failed to read log page 10h (errno=-5) [ 383.229271][ T1133] ata1.00: exception Emask 0x1 SAct 0x800000 SErr 0x0 action 0x0 [ 383.235417][ T1133] ata1.00: irq_stat 0x40000000 [ 383.237729][ T1133] ata1.00: failed command: WRITE FPDMA QUEUED [ 383.240575][ T1133] ata1.00: cmd 61/18:b8:d6:10:10/00:00:00:00:00/40 tag 23 ncq dma 12288 out [ 383.240575][ T1133] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 383.249035][ T1133] ata1.00: status: { DRDY } [ 383.251210][ T1133] ata1.00: error: { ABRT } [ 383.254404][ T1133] ata1.00: configured for UDMA/100 [ 383.257173][ T1133] ata1: EH complete [ 383.553346][T14339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.798205][T14371] __nla_validate_parse: 3 callbacks suppressed [ 383.798222][T14371] netlink: 52 bytes leftover after parsing attributes in process `syz.2.17307'. [ 383.808773][T14371] netlink: 52 bytes leftover after parsing attributes in process `syz.2.17307'. [ 383.813799][T14371] netlink: 52 bytes leftover after parsing attributes in process `syz.2.17307'. [ 383.827041][T14373] overlayfs: missing 'lowerdir' [ 383.886909][T14385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17314'. [ 384.713377][T14514] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17376'. [ 385.130695][T14605] 8021q: adding VLAN 0 to HW filter on device bond6 [ 385.188392][T14651] xt_CT: You must specify a L4 protocol and not use inversions on it [ 385.214975][T14655] kAFS: unable to lookup cell '(,cL' [ 385.283367][T14673] BIDI support in bsg has been removed. [ 385.519233][ T6157] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 385.545081][T14711] netlink: 'syz.0.17438': attribute type 16 has an invalid length. [ 385.547770][T14711] netlink: 'syz.0.17438': attribute type 3 has an invalid length. [ 385.550540][T14711] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17438'. [ 385.654229][T14727] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17446'. [ 385.681704][ T6157] usb 8-1: unable to get BOS descriptor or descriptor too short [ 385.686117][ T6157] usb 8-1: config 129 has an invalid interface number: 135 but max is 0 [ 385.689761][ T6157] usb 8-1: config 129 has an invalid interface number: 5 but max is 0 [ 385.693461][ T6157] usb 8-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 385.697245][ T6157] usb 8-1: config 129 has no interface number 0 [ 385.699902][ T6157] usb 8-1: config 129 has no interface number 1 [ 385.703125][ T6157] usb 8-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 385.708648][ T6157] usb 8-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 385.714960][ T6157] usb 8-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 385.720456][ T6157] usb 8-1: config 129 interface 135 has no altsetting 0 [ 385.732989][ T6157] usb 8-1: config 129 interface 5 has no altsetting 0 [ 385.743189][ T6157] usb 8-1: string descriptor 0 read error: -22 [ 385.746654][ T6157] usb 8-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 385.750503][ T6157] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.772552][ T6157] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 385.780156][ T6157] usb 8-1: MIDIStreaming interface descriptor not found [ 385.983178][ T6142] usb 8-1: USB disconnect, device number 26 [ 386.083069][T14804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17468'. [ 386.498202][T14862] netlink: 'syz.0.17497': attribute type 1 has an invalid length. [ 386.501052][T14862] netlink: 756 bytes leftover after parsing attributes in process `syz.0.17497'. [ 386.563413][T14870] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 386.682112][T14890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17507'. [ 386.688016][T14890] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 386.717576][T14892] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 386.884644][T14916] No source specified [ 386.914190][T14922] exfat: Deprecated parameter 'debug' [ 386.916496][T14922] exFAT-fs (loop1): unable to read boot sector [ 386.918699][T14922] exFAT-fs (loop1): failed to read boot sector [ 386.921213][T14922] exFAT-fs (loop1): failed to recognize exfat type [ 386.980712][T14931] ip6tnl1: entered promiscuous mode [ 386.980740][T14931] ip6tnl1: entered allmulticast mode [ 387.094180][T14981] FAT-fs (nbd3): unable to read boot sector [ 387.258295][T15010] bridge_slave_0: entered promiscuous mode [ 387.428315][T15039] openvswitch: netlink: Missing key (keys=40, expected=100) [ 387.764228][T15088] bond13: option arp_interval: invalid value (18446744073709551615) [ 387.766780][T15088] bond13: option arp_interval: allowed values 0 - 2147483647 [ 387.770596][T15088] bond13 (unregistering): Released all slaves [ 387.971410][T15171] bridge_slave_0: entered promiscuous mode [ 388.101070][T15189] netlink: 'syz.0.17596': attribute type 1 has an invalid length. [ 388.143113][T15195] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 388.335569][T15221] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 388.441001][T15239] team_slave_1: entered allmulticast mode [ 388.483788][T15244] bond7: option arp_interval: invalid value (18446744073709551615) [ 388.486267][T15244] bond7: option arp_interval: allowed values 0 - 2147483647 [ 388.492659][T15244] bond7 (unregistering): Released all slaves [ 388.556177][T15320] trusted_key: encrypted_key: hex blob is missing [ 388.623023][T15330] binder: 15328:15330 ioctl c018620b 0 returned -14 [ 388.838797][T15371] usb usb8: check_ctrlrecip: process 15371 (syz.3.17654) requesting ep 01 but needs 81 [ 388.843567][T15371] usb usb8: usbfs: process 15371 (syz.3.17654) did not claim interface 0 before use [ 389.035607][T15399] overlayfs: empty lowerdir [ 389.412174][T15439] __nla_validate_parse: 7 callbacks suppressed [ 389.412192][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17687'. [ 389.443514][T15442] netlink: 'syz.2.17688': attribute type 1 has an invalid length. [ 389.970413][T15468] netlink: 'syz.2.17702': attribute type 8 has an invalid length. [ 390.403086][ T846] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 390.429498][T15530] netlink: 260 bytes leftover after parsing attributes in process `syz.3.17731'. [ 390.563102][ T846] usb 7-1: Using ep0 maxpacket: 32 [ 390.566158][ T846] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 390.569689][ T846] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 390.573140][ T846] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 390.580049][ T846] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 390.584860][ T846] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 390.587938][ T846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.590701][ T846] usb 7-1: Product: syz [ 390.592239][ T846] usb 7-1: Manufacturer: syz [ 390.593688][ T846] usb 7-1: SerialNumber: syz [ 390.597309][ T846] usb 7-1: config 0 descriptor?? [ 390.606358][ T846] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input60 [ 390.664486][T15565] cgroup: none used incorrectly [ 390.717352][T15573] netlink: 'syz.3.17749': attribute type 2 has an invalid length. [ 390.822824][ T9] usb 7-1: USB disconnect, device number 22 [ 390.891137][T15598] netdevsim netdevsim1: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 390.913426][T15602] netlink: 228 bytes leftover after parsing attributes in process `syz.3.17759'. [ 390.936910][ T42] audit: type=1326 audit(372.727:18623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.1.17760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 390.943825][ T42] audit: type=1326 audit(372.737:18625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.1.17760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 390.950959][ T42] audit: type=1326 audit(372.727:18624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.1.17760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 390.957667][ T42] audit: type=1326 audit(372.737:18627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.1.17760" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf704efec code=0x7ffc0000 [ 390.964394][ T42] audit: type=1326 audit(372.737:18628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.1.17760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 390.971897][ T42] audit: type=1326 audit(372.737:18629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.1.17760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 390.980200][ T42] audit: type=1326 audit(372.737:18626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.1.17760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 390.987852][ T42] audit: type=1326 audit(372.737:18630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.1.17760" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf704efec code=0x7ffc0000 [ 390.995429][ T42] audit: type=1326 audit(372.737:18631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15606 comm="syz.1.17760" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf704efec code=0x7ffc0000 [ 391.834351][T15628] netlink: 'syz.3.17765': attribute type 4 has an invalid length. [ 391.838148][T15628] netlink: 17 bytes leftover after parsing attributes in process `syz.3.17765'. [ 391.856486][T15613] veth1_vlan (unregistering): left allmulticast mode [ 391.873339][T15613] bond0: (slave macvlan1): Releasing backup interface [ 391.991329][T15666] netlink: 'syz.1.17772': attribute type 3 has an invalid length. [ 391.994530][T15666] netlink: 'syz.1.17772': attribute type 1 has an invalid length. [ 391.999348][T15666] netlink: 228 bytes leftover after parsing attributes in process `syz.1.17772'. [ 392.049545][ T860] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 392.068162][T15676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17777'. [ 392.071317][T15676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17777'. [ 392.096693][T15680] new mount options do not match the existing superblock, will be ignored [ 392.124089][T15684] netlink: 'syz.1.17781': attribute type 30 has an invalid length. [ 392.233122][ T860] usb 5-1: unable to get BOS descriptor or descriptor too short [ 392.237762][ T860] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 392.247518][ T860] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 392.251136][ T860] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 392.255411][ T860] usb 5-1: config 129 has no interface number 0 [ 392.258097][ T860] usb 5-1: config 129 has no interface number 1 [ 392.260707][ T860] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 392.268502][ T860] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 392.273391][ T860] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 392.278850][ T860] usb 5-1: config 129 interface 135 has no altsetting 0 [ 392.281729][ T860] usb 5-1: config 129 interface 5 has no altsetting 0 [ 392.291134][ T860] usb 5-1: string descriptor 0 read error: -22 [ 392.293873][ T860] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 392.298596][ T860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.324036][ T860] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 392.327633][ T860] usb 5-1: MIDIStreaming interface descriptor not found [ 392.336408][T15716] 9p: Unknown Cache mode or invalid value fscach [ 392.536414][ T50] usb 5-1: USB disconnect, device number 15 [ 392.541416][T15752] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 392.544638][T15752] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 392.547667][T15752] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 392.551250][T15752] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 393.138863][T15833] bond7: Unable to set down delay as MII monitoring is disabled [ 393.143407][T15833] bond7 (unregistering): Released all slaves [ 393.386578][T15937] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.17853'. [ 393.402294][T15937] Process accounting resumed [ 393.490288][T15947] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 393.509376][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17860'. [ 393.638507][T15973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17872'. [ 393.963311][T16027] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 394.177270][T16062] netlink: 'syz.3.17918': attribute type 1 has an invalid length. [ 394.282360][T16081] tc_dump_action: action bad kind [ 394.642244][ T42] audit: type=1400 audit(376.190:18632): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16137 comm="syz.0.17951" [ 394.745648][T16155] netlink: 'syz.1.17960': attribute type 9 has an invalid length. [ 394.823303][T16169] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 394.864139][T16178] __nla_validate_parse: 3 callbacks suppressed [ 394.864159][T16178] netlink: 224 bytes leftover after parsing attributes in process `syz.2.17969'. [ 394.962861][T16189] bond7: option ad_actor_sys_prio: invalid value (0) [ 394.965192][T16189] bond7: option ad_actor_sys_prio: allowed values 1 - 65535 [ 394.970569][T16189] bond7 (unregistering): Released all slaves [ 395.178413][T16287] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17991'. [ 395.213232][T16293] Cannot find add_set index 2 as target [ 395.318970][T16309] sctp: [Deprecated]: syz.1.18002 (pid 16309) Use of int in maxseg socket option. [ 395.318970][T16309] Use struct sctp_assoc_value instead [ 395.334306][T16312] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18001'. [ 395.403829][T16324] : renamed from virt_wifi0 [ 395.531790][T16343] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18017'. [ 395.540288][T16345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.725158][T16376] program syz.3.18031 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.891848][T16407] program syz.1.18047 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.935115][T16418] netlink: 'syz.1.18050': attribute type 21 has an invalid length. [ 395.973027][T16423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18054'. [ 396.029800][T16435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.053947][T16438] netlink: set zone limit has 4 unknown bytes [ 396.065865][T16440] openvswitch: netlink: Actions may not be safe on all matching packets [ 396.113141][T16447] ALSA: mixer_oss: invalid OSS volume 'u' [ 396.149159][T16458] tmpfs: Bad value for 'mpol' [ 396.241892][T16477] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 396.276200][T16474] bond10: option ad_actor_sys_prio: invalid value (0) [ 396.278958][T16474] bond10: option ad_actor_sys_prio: allowed values 1 - 65535 [ 396.284233][T16474] bond10 (unregistering): Released all slaves [ 396.367078][T16557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18089'. [ 396.376256][T16557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18089'. [ 396.378401][T16559] netlink: 'syz.0.18090': attribute type 3 has an invalid length. [ 396.382631][T16559] netlink: 'syz.0.18090': attribute type 3 has an invalid length. [ 396.495368][T16574] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 396.606308][T16585] bond7: option ad_actor_sys_prio: invalid value (0) [ 396.609066][T16585] bond7: option ad_actor_sys_prio: allowed values 1 - 65535 [ 396.617893][T16585] bond7 (unregistering): Released all slaves [ 396.725044][T16665] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.788789][T16672] No source specified [ 396.801350][T16674] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 396.844496][T16680] netlink: 'syz.1.18119': attribute type 3 has an invalid length. [ 396.847104][T16680] netlink: 224 bytes leftover after parsing attributes in process `syz.1.18119'. [ 396.988969][T16702] autofs4:pid:16702:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 396.994101][T16702] autofs4:pid:16702:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 397.217560][T16735] bond13: option ad_actor_sys_prio: invalid value (0) [ 397.220455][T16735] bond13: option ad_actor_sys_prio: allowed values 1 - 65535 [ 397.225199][T16735] bond13 (unregistering): Released all slaves [ 397.516021][T16854] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 397.518711][T16854] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 397.524902][T16854] vhci_hcd vhci_hcd.0: Device attached [ 397.533158][T16855] usbip_core: unknown command [ 397.534606][T16855] vhci_hcd: unknown pdu 0 [ 397.538714][T16855] usbip_core: unknown command [ 397.543668][ T13] vhci_hcd vhci_hcd.2: stop threads [ 397.546002][ T13] vhci_hcd vhci_hcd.2: release socket [ 397.548204][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 397.641481][T16871] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 397.727329][T16884] syz.1.18185: vmalloc error: size 2147483264, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 397.736855][T16884] CPU: 1 UID: 0 PID: 16884 Comm: syz.1.18185 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.736890][T16884] Tainted: [L]=SOFTLOCKUP [ 397.736898][T16884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 397.736912][T16884] Call Trace: [ 397.736918][T16884] [ 397.736927][T16884] dump_stack_lvl+0x100/0x190 [ 397.736956][T16884] warn_alloc.cold+0x94/0xa8 [ 397.736978][T16884] ? __pfx_warn_alloc+0x10/0x10 [ 397.736999][T16884] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 397.737030][T16884] ? __lock_acquire+0x49f/0x1a40 [ 397.737065][T16884] __vmalloc_node_range_noprof+0x136c/0x1630 [ 397.737098][T16884] ? find_held_lock+0x2b/0x80 [ 397.737119][T16884] ? __might_fault+0xc5/0x140 [ 397.737149][T16884] ? __might_fault+0xc5/0x140 [ 397.737178][T16884] ? compat_do_replace+0x1b1/0x7a0 [ 397.737218][T16884] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 397.737245][T16884] ? compat_copy_ebt_replace_from_user+0x299/0x3b0 [ 397.737276][T16884] ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10 [ 397.737314][T16884] ? compat_do_replace+0x1b1/0x7a0 [ 397.737349][T16884] __vmalloc_node_noprof+0xad/0xf0 [ 397.737375][T16884] ? compat_do_replace+0x1b1/0x7a0 [ 397.737407][T16884] compat_do_replace+0x1b1/0x7a0 [ 397.737441][T16884] ? __pfx_compat_do_replace+0x10/0x10 [ 397.737492][T16884] ? bpf_lsm_capable+0x9/0x10 [ 397.737513][T16884] ? security_capable+0x80/0x260 [ 397.737568][T16884] do_ebt_set_ctl+0x3ef/0x4a0 [ 397.737616][T16884] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 397.737654][T16884] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 397.737677][T16884] ? futex_wake+0x4ea/0x5e0 [ 397.737704][T16884] ? nf_sockopt_find.isra.0+0x222/0x290 [ 397.737728][T16884] nf_setsockopt+0x8d/0xf0 [ 397.737748][T16884] ip_setsockopt+0xcb/0xf0 [ 397.737772][T16884] tcp_setsockopt+0xa7/0x100 [ 397.737801][T16884] smc_setsockopt+0x1b6/0xa40 [ 397.737827][T16884] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 397.737859][T16884] ? __pfx_smc_setsockopt+0x10/0x10 [ 397.737886][T16884] ? aa_sock_opt_perm+0xfe/0x1b0 [ 397.737916][T16884] ? __pfx_smc_setsockopt+0x10/0x10 [ 397.737943][T16884] do_sock_setsockopt+0xf3/0x1d0 [ 397.737971][T16884] __sys_setsockopt+0x119/0x190 [ 397.737998][T16884] __ia32_sys_setsockopt+0xbc/0x160 [ 397.738017][T16884] ? __do_fast_syscall_32+0x98/0x970 [ 397.738036][T16884] ? lockdep_hardirqs_on+0x78/0x100 [ 397.738064][T16884] __do_fast_syscall_32+0xe7/0x970 [ 397.738086][T16884] do_fast_syscall_32+0x32/0x70 [ 397.738104][T16884] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 397.738129][T16884] RIP: 0023:0xf704efec [ 397.738151][T16884] Code: Unable to access opcode bytes at 0xf704efc2. [ 397.738159][T16884] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 397.738177][T16884] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 397.738188][T16884] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 00000000000000e0 [ 397.738200][T16884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 397.738211][T16884] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 397.738222][T16884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 397.738248][T16884] [ 397.738315][T16884] Mem-Info: [ 397.851576][T16884] active_anon:4025 inactive_anon:10675 isolated_anon:0 [ 397.851576][T16884] active_file:2323 inactive_file:8216 isolated_file:0 [ 397.851576][T16884] unevictable:1768 dirty:503 writeback:0 [ 397.851576][T16884] slab_reclaimable:6516 slab_unreclaimable:73444 [ 397.851576][T16884] mapped:22498 shmem:1819 pagetables:1355 [ 397.851576][T16884] sec_pagetables:323 bounce:0 [ 397.851576][T16884] kernel_misc_reclaimable:0 [ 397.851576][T16884] free:52386 free_pcp:12199 free_cma:0 [ 397.867318][T16884] Node 0 active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:12kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8096kB pagetables:1452kB sec_pagetables:1116kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 397.879647][T16884] Node 1 active_anon:16100kB inactive_anon:42696kB active_file:9292kB inactive_file:32852kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:89964kB dirty:2008kB writeback:0kB shmem:3740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6344kB pagetables:3968kB sec_pagetables:176kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 397.891366][T16884] Node 0 DMA free:3232kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 397.901952][T16884] lowmem_reserve[]: 0 280 280 280 280 [ 397.904385][T16884] Node 0 DMA32 free:37212kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:3536kB writepending:4kB zspages:1272kB present:1032196kB managed:287152kB mlocked:0kB bounce:0kB free_pcp:3268kB local_pcp:3152kB free_cma:0kB [ 397.915481][T16884] lowmem_reserve[]: 0 0 0 0 0 [ 397.917540][T16884] Node 1 DMA32 free:169100kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16100kB inactive_anon:42696kB active_file:9292kB inactive_file:32852kB unevictable:3536kB writepending:2008kB zspages:3248kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:45396kB local_pcp:16752kB free_cma:0kB [ 397.931038][T16884] lowmem_reserve[]: 0 0 0 0 0 [ 397.933119][T16884] Node 0 DMA: 260*4kB (UE) 18*8kB (UE) 6*16kB (UE) 15*32kB (UE) 11*64kB (UE) 2*128kB (E) 2*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3232kB [ 397.938748][T16884] Node 0 DMA32: 1375*4kB (UME) 330*8kB (UME) 187*16kB (UME) 319*32kB (UME) 74*64kB (UME) 43*128kB (UME) 16*256kB (UM) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 37212kB [ 397.945103][T16884] Node 1 DMA32: 198*4kB (UME) 67*8kB (UM) 55*16kB (U) 24*32kB (UME) 5*64kB (UME) 105*128kB (UM) 164*256kB (UME) 92*512kB (UME) 38*1024kB (UM) 8*2048kB (UM) 2*4096kB (UM) = 169312kB [ 397.953143][T16884] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 397.957258][T16884] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 397.961111][T16884] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 397.964770][T16884] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 397.967873][T16884] 13923 total pagecache pages [ 397.969564][T16884] 1567 pages in swap cache [ 397.971339][T16884] Free swap = 103716kB [ 397.972655][T16884] Total swap = 124996kB [ 397.974317][T16884] 524155 pages RAM [ 397.975530][T16884] 0 pages HighMem/MovableOnly [ 397.977358][T16884] 211474 pages reserved [ 397.979101][T16884] 0 pages cma reserved [ 398.052557][T16911] gfs2: error -5 reading superblock [ 398.284738][T16953] IPv6: sit3: Disabled Multicast RS [ 398.288380][T16953] sit3: entered allmulticast mode [ 398.349318][T16968] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.437865][T16979] : renamed from bridge_slave_1 (while UP) [ 398.470068][T16983] IPv6: sit3: Disabled Multicast RS [ 398.475338][T16983] sit3: entered allmulticast mode [ 398.523699][T16993] new mount options do not match the existing superblock, will be ignored [ 398.577018][T16999] ipip1: entered allmulticast mode [ 398.651423][T17009] 9pnet_fd: p9_fd_create_tcp (17009): problem connecting socket to 127.0.0.1 [ 398.879942][T17025] validate_nla: 2 callbacks suppressed [ 398.879958][T17025] netlink: 'syz.3.18252': attribute type 1 has an invalid length. [ 398.885194][T17025] netlink: 'syz.3.18252': attribute type 2 has an invalid length. [ 398.960051][T17032] 9pnet_fd: p9_fd_create_tcp (17032): problem connecting socket to 127.0.0.1 [ 399.136382][T17056] 9pnet_fd: p9_fd_create_tcp (17056): problem connecting socket to 127.0.0.1 [ 399.189347][T17066] NILFS (nullb0): couldn't find nilfs on the device [ 399.310861][T17088] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 399.351827][T17094] IPVS: length: 191 != 8 [ 399.429918][T17104] JFS: charset not found [ 399.458427][T17109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18292'. [ 399.531865][T17119] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 399.884085][T17169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18322'. [ 399.909324][T17173] NILFS (nullb0): couldn't find nilfs on the device [ 400.026385][T17191] netlink: 'syz.3.18333': attribute type 11 has an invalid length. [ 400.126221][T17204] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 400.129333][T17204] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 400.136706][T17204] vhci_hcd vhci_hcd.0: Device attached [ 400.148502][T17205] vhci_hcd: unknown pdu 2 [ 400.150617][ T6018] vhci_hcd vhci_hcd.0: stop threads [ 400.152599][ T6018] vhci_hcd vhci_hcd.0: release socket [ 400.152613][ T6018] vhci_hcd vhci_hcd.0: disconnect device [ 400.192750][T17084] 9pnet_fd: p9_fd_create_tcp (17084): problem connecting socket to 127.0.0.1 [ 400.255228][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 400.283814][T17223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.344932][T17233] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 400.572068][T17261] netlink: 'syz.2.18362': attribute type 1 has an invalid length. [ 400.576407][T17261] __nla_validate_parse: 1 callbacks suppressed [ 400.576468][T17261] netlink: 224 bytes leftover after parsing attributes in process `syz.2.18362'. [ 400.727994][T17281] netlink: 'syz.2.18372': attribute type 29 has an invalid length. [ 400.782955][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18375'. [ 400.873504][T17308] netlink: 'syz.2.18384': attribute type 6 has an invalid length. [ 401.179057][T17365] netlink: 6 bytes leftover after parsing attributes in process `syz.1.18413'. [ 401.425957][T17400] netlink: 156 bytes leftover after parsing attributes in process `syz.3.18431'. [ 401.444015][T17402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18433'. [ 401.510683][T17412] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 401.564774][T17424] netlink: 'syz.1.18443': attribute type 2 has an invalid length. [ 401.568176][T17424] netlink: 228 bytes leftover after parsing attributes in process `syz.1.18443'. [ 401.730556][T17451] netlink: 'syz.0.18457': attribute type 12 has an invalid length. [ 401.732654][T17452] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 401.778488][T17460] overlay: Bad value for 'workdir' [ 401.953953][T17498] tipc: Trying to set illegal importance in message [ 402.123059][T17527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18494'. [ 402.187707][T17542] tmpfs: Bad value for 'mpol' [ 402.297494][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 402.324869][T17567] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 402.394824][T17583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18521'. [ 402.452467][T17593] FAT-fs (sr0): bogus number of reserved sectors [ 402.455387][T17593] FAT-fs (sr0): Can't find a valid FAT filesystem [ 402.497453][T17599] netlink: 'syz.0.18528': attribute type 4 has an invalid length. [ 402.599874][T17613] Sensor A: ================= START STATUS ================= [ 402.603147][T17613] Sensor A: Test Pattern: 100% Red [ 402.605246][T17613] Sensor A: Show Information: None [ 402.609139][T17613] Sensor A: Vertical Flip: true [ 402.611523][T17613] Sensor A: Horizontal Flip: true [ 402.613088][T17613] Sensor A: Brightness: 128 [ 402.614649][T17613] Sensor A: Contrast: 255 [ 402.616013][T17613] Sensor A: Hue: 0 [ 402.618236][T17613] Sensor A: Saturation: 7 [ 402.620542][T17613] Sensor A: Pixel Rate: 160000000 [ 402.622768][T17613] Sensor A: Horizontal Blanking: 800 [ 402.625144][T17613] Sensor A: Vertical Blanking: 3223 [ 402.628011][T17613] Sensor A: ================== END STATUS ================== [ 402.803862][T17639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18549'. [ 402.803986][T17642] netlink: 15678 bytes leftover after parsing attributes in process `syz.1.18548'. [ 403.071442][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 403.071459][ T42] audit: type=1326 audit(384.088:18643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17670 comm="syz.0.18565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 403.083293][ T42] audit: type=1326 audit(384.088:18644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17670 comm="syz.0.18565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 403.092785][ T42] audit: type=1326 audit(384.097:18645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17670 comm="syz.0.18565" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf706efec code=0x7ffc0000 [ 403.102587][ T42] audit: type=1326 audit(384.097:18646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17670 comm="syz.0.18565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 403.252290][T17689] tmpfs: Bad value for 'mpol' [ 403.452912][T17716] bond0: Error: CAN devices cannot be enslaved [ 403.894465][T17776] No source specified [ 404.031884][ T42] audit: type=1326 audit(384.986:18647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17796 comm="syz.2.18626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 404.050425][ T42] audit: type=1326 audit(384.996:18648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17796 comm="syz.2.18626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 404.055761][T17801] AppArmor: change_hat: Invalid input '0' [ 404.065596][ T42] audit: type=1326 audit(384.996:18649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17796 comm="syz.2.18626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 404.075155][ T42] audit: type=1326 audit(384.996:18650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17796 comm="syz.2.18626" exe="/syz-executor" sig=0 arch=40000003 syscall=275 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 404.082692][ T42] audit: type=1326 audit(384.996:18651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17796 comm="syz.2.18626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 404.089869][ T42] audit: type=1326 audit(384.996:18652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17796 comm="syz.2.18626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75fec code=0x7ffc0000 [ 404.192860][T17821] netlink: 'syz.3.18638': attribute type 8 has an invalid length. [ 404.210735][T17827] vlan0: left promiscuous mode [ 404.277061][T17837] SET target dimension over the limit! [ 405.229735][T17992] netlink: 'syz.1.18723': attribute type 1 has an invalid length. [ 405.356027][T18013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.461568][T18028] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 405.511342][T18040] [U] [ 405.512509][T18040] [U] [ 405.513409][T18040] [U] [ 405.514499][T18040] [U] [ 405.516063][T18040] [U] [ 405.517085][T18040] [U] [ 405.518099][T18040] [U] [ 405.519042][T18040] [U] [ 405.520058][T18040] [U] [ 405.520972][T18040] [U] [ 405.521884][T18040] [U] [ 405.522808][T18040] [U] [ 405.524774][T18040] [U] [ 405.526007][T18040] [U] [ 405.527217][T18040] [U] [ 405.528395][T18040] [U] [ 405.529813][T18040] [U] [ 405.531023][T18040] [U] [ 405.532177][T18040] [U] [ 405.533309][T18040] [U] [ 405.535036][T18040] [U] [ 405.536289][T18040] [U] [ 405.537700][T18040] [U] [ 405.538932][T18040] [U] [ 405.540268][T18040] [U] [ 405.541387][T18040] [U] [ 405.542336][T18040] [U] [ 405.543257][T18040] [U] [ 405.544225][T18040] [U] [ 405.545189][T18040] [U] [ 405.546077][T18040] [U] [ 405.546961][T18040] [U] [ 405.548153][T18040] [U] [ 405.549081][T18040] [U] [ 405.549942][T18040] [U] [ 405.550868][T18040] [U] [ 405.551868][T18040] [U] [ 405.552795][T18040] [U] [ 405.553694][T18040] [U] [ 405.554662][T18040] [U] [ 405.556135][T18040] [U] [ 405.557073][T18040] [U] [ 405.558018][T18040] [U] [ 405.559000][T18040] [U] [ 405.560300][T18040] [U] [ 405.561260][T18040] [U] [ 405.562225][T18040] [U] [ 405.563192][T18040] [U] [ 405.564340][T18040] [U] [ 405.565264][T18040] [U] [ 405.566165][T18040] [U] [ 405.567064][T18040] [U] [ 405.568341][T18040] [U] [ 405.569270][T18040] [U] [ 405.570170][T18040] [U] [ 405.571075][T18040] [U] [ 405.572180][T18040] [U] [ 405.573095][T18040] [U] [ 405.573997][T18040] [U] [ 405.574957][T18040] [U] [ 405.576038][T18040] [U] [ 405.576969][T18040] [U] [ 405.577858][T18040] [U] [ 405.578790][T18040] [U] [ 405.580230][T18040] [U] [ 405.581187][T18040] [U] [ 405.582079][T18040] [U] [ 405.582988][T18040] [U] [ 405.584641][T18040] [U] [ 405.585572][T18040] [U] [ 405.586435][T18040] [U] [ 405.587332][T18040] [U] [ 405.588828][T18040] [U] [ 405.590549][T18040] [U] [ 405.591782][T18040] [U] [ 405.593050][T18040] [U] [ 405.594475][T18040] [U] [ 405.595711][T18040] [U] [ 405.596902][T18040] [U] [ 405.598111][T18040] [U] [ 405.600446][T18040] [U] [ 405.601693][T18040] [U] [ 405.602889][T18040] [U] [ 405.604086][T18040] [U] [ 405.605533][T18040] [U] [ 405.606769][T18040] [U] [ 405.607965][T18040] [U] [ 405.609294][T18040] [U] [ 405.611790][T18040] [U] [ 405.613010][T18040] [U] [ 405.614173][T18040] [U] [ 405.615488][T18040] [U] [ 405.616908][T18040] [U] [ 405.618150][T18040] [U] [ 405.619476][T18040] [U] [ 405.620655][T18040] [U] [ 405.622788][T18040] [U] [ 405.624085][T18040] [U] [ 405.625325][T18040] [U] [ 405.626544][T18040] [U] [ 405.628010][T18040] [U] [ 405.629215][T18040] [U] [ 405.630408][T18040] [U] [ 405.631606][T18040] [U] [ 405.633555][T18040] [U] [ 405.634782][T18040] [U] [ 405.635966][T18040] [U] [ 405.637088][T18040] [U] [ 405.638521][T18040] [U] [ 405.639789][T18040] [U] [ 405.641014][T18040] [U] [ 405.642328][T18040] [U] [ 405.644704][T18040] [U] [ 405.645920][T18040] [U] [ 405.647038][T18040] [U] [ 405.648202][T18040] [U] [ 405.649619][T18040] [U] [ 405.650866][T18040] [U] [ 405.652092][T18040] [U] [ 405.653427][T18040] [U] [ 405.655729][T18040] [U] [ 405.656940][T18040] [U] [ 405.658118][T18040] [U] [ 405.659341][T18040] [U] [ 405.660745][T18040] [U] [ 405.662002][T18040] [U] [ 405.663253][T18040] [U] [ 405.674478][T18039] [U] [ 406.417349][T18088] __nla_validate_parse: 19 callbacks suppressed [ 406.417365][T18088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18775'. [ 406.424762][T18088] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18775'. [ 406.428633][T18088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18775'. [ 406.432755][T18088] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18775'. [ 406.436936][T18088] netlink: 104 bytes leftover after parsing attributes in process `syz.0.18775'. [ 406.549915][T18102] binder: BC_ATTEMPT_ACQUIRE not supported [ 406.552884][T18102] binder: 18101:18102 ioctl c0306201 80000000 returned -22 [ 406.566175][T18106] AppArmor: change_hat: Invalid input '' [ 406.603962][T18109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18778'. [ 406.938101][T18149] 8021q: adding VLAN 0 to HW filter on device bond7 [ 407.121097][T18215] SET target dimension over the limit! [ 407.130851][T18213] block device autoloading is deprecated and will be removed. [ 407.139159][T18219] xt_CT: You must specify a L4 protocol and not use inversions on it [ 407.731032][T18275] netlink: 'syz.3.18840': attribute type 5 has an invalid length. [ 407.735494][T18277] random: crng reseeded on system resumption [ 407.900314][T18306] kAFS: unable to lookup cell '(,c' [ 408.070071][T18329] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 408.073615][T18329] UDF-fs: Scanning with blocksize 2048 failed [ 408.077226][T18329] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 408.080970][T18329] UDF-fs: Scanning with blocksize 4096 failed [ 408.212360][T18359] xt_CT: You must specify a L4 protocol and not use inversions on it [ 408.388698][T18389] sit0: entered promiscuous mode [ 408.392607][T18389] netlink: 'syz.0.18897': attribute type 1 has an invalid length. [ 408.396133][T18389] netlink: 1 bytes leftover after parsing attributes in process `syz.0.18897'. [ 408.630189][T18428] block device autoloading is deprecated and will be removed. [ 408.663262][T18439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18923'. [ 408.806814][T18457] netlink: 'syz.1.18931': attribute type 2 has an invalid length. [ 408.810328][T18457] netlink: 'syz.1.18931': attribute type 1 has an invalid length. [ 408.878170][T18472] erspan0: entered allmulticast mode [ 408.967342][T18488] openvswitch: netlink: Tunnel attr 116 out of range max 16 [ 409.158295][T18524] netlink: 14 bytes leftover after parsing attributes in process `syz.0.18959'. [ 409.336639][T18593] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 409.708144][T18634] misc userio: The device must be registered before sending interrupts [ 409.753926][T18637] xt_CT: You must specify a L4 protocol and not use inversions on it [ 410.015345][T18686] netlink: 'syz.1.19012': attribute type 1 has an invalid length. [ 410.020259][T18686] netlink: 'syz.1.19012': attribute type 1 has an invalid length. [ 410.095471][T18702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19018'. [ 410.272810][T18733] netlink: 'syz.3.19033': attribute type 1 has an invalid length. [ 410.371812][T18751] overlayfs: conflicting options: userxattr,redirect_dir=on [ 410.586171][T18795] netlink: 'syz.1.19061': attribute type 10 has an invalid length. [ 410.588422][T18797] 9pnet: Found fid 0 not clunked [ 410.653392][T18806] ================================================================== [ 410.656171][T18806] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x209a/0x4160 [ 410.659401][T18806] Write of size 1280 at addr ffffc90007a0db10 by task vivid-000-vid-c/18806 [ 410.664595][T18806] [ 410.665669][T18806] CPU: 0 UID: 0 PID: 18806 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 410.665686][T18806] Tainted: [L]=SOFTLOCKUP [ 410.665690][T18806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 410.665697][T18806] Call Trace: [ 410.665702][T18806] [ 410.665706][T18806] dump_stack_lvl+0x100/0x190 [ 410.665720][T18806] print_report+0x13d/0x4b0 [ 410.665735][T18806] ? _raw_spin_lock_irqsave+0x52/0x60 [ 410.665751][T18806] ? tpg_fill_plane_buffer+0x209a/0x4160 [ 410.665768][T18806] kasan_report+0xdf/0x1c0 [ 410.665783][T18806] ? tpg_fill_plane_buffer+0x209a/0x4160 [ 410.665798][T18806] kasan_check_range+0x10f/0x1e0 [ 410.665812][T18806] __asan_memcpy+0x3c/0x60 [ 410.665822][T18806] tpg_fill_plane_buffer+0x209a/0x4160 [ 410.665841][T18806] ? tpg_calc_text_basep+0x22d/0x2c0 [ 410.665855][T18806] vivid_fillbuff+0x963/0x3ff0 [ 410.665874][T18806] ? __lock_acquire+0x49f/0x1a40 [ 410.665892][T18806] ? __pfx_pick_task_fair+0x10/0x10 [ 410.665905][T18806] ? __pfx_vivid_fillbuff+0x10/0x10 [ 410.665921][T18806] ? __lock_acquire+0x49f/0x1a40 [ 410.665939][T18806] ? v4l2_ctrl_request_setup+0x45a/0xa60 [ 410.665957][T18806] ? lockdep_hardirqs_on+0x78/0x100 [ 410.665973][T18806] ? vivid_thread_vid_cap_tick+0x81b/0x1470 [ 410.665990][T18806] vivid_thread_vid_cap_tick+0x81b/0x1470 [ 410.666010][T18806] vivid_thread_vid_cap+0x454/0xd70 [ 410.666021][T18806] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 410.666032][T18806] ? do_raw_spin_lock+0x128/0x260 [ 410.666042][T18806] ? find_held_lock+0x2b/0x80 [ 410.666052][T18806] ? __kthread_parkme+0xbb/0x230 [ 410.666063][T18806] ? rcu_is_watching+0x12/0xc0 [ 410.666074][T18806] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 410.666088][T18806] ? lockdep_hardirqs_on+0x78/0x100 [ 410.666104][T18806] ? __kthread_parkme+0x18c/0x230 [ 410.666114][T18806] ? kthread+0x13a/0x450 [ 410.666126][T18806] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 410.666135][T18806] kthread+0x370/0x450 [ 410.666146][T18806] ? __pfx_kthread+0x10/0x10 [ 410.666159][T18806] ret_from_fork+0x72b/0xd50 [ 410.666170][T18806] ? __pfx_ret_from_fork+0x10/0x10 [ 410.666182][T18806] ? __switch_to+0x800/0x10f0 [ 410.666196][T18806] ? __pfx_kthread+0x10/0x10 [ 410.666209][T18806] ret_from_fork_asm+0x1a/0x30 [ 410.666226][T18806] [ 410.666230][T18806] [ 410.745597][T18806] The buggy address belongs to a 3-page vmalloc region starting at 0xffffc90007a0b000 allocated at vb2_vmalloc_alloc+0x135/0x410 [ 410.750569][T18806] The buggy address belongs to the physical page: [ 410.752727][T18806] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x70473 [ 410.755531][T18806] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 410.758349][T18806] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 410.761248][T18806] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 410.764312][T18806] page dumped because: kasan: bad access detected [ 410.766776][T18806] page_owner tracks the page as allocated [ 410.768525][T18806] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 18805, tgid 18804 (syz.2.19064), ts 410637440216, free_ts 410637409039 [ 410.775302][T18806] post_alloc_hook+0xfd/0x120 [ 410.776941][T18806] get_page_from_freelist+0xf48/0x3530 [ 410.779104][T18806] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 410.781219][T18806] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 410.783074][T18806] alloc_pages_bulk_mempolicy_noprof+0x255/0x1270 [ 410.785597][T18806] __vmalloc_node_range_noprof+0x69d/0x1630 [ 410.787817][T18806] vmalloc_user_noprof+0x9e/0xe0 [ 410.789725][T18806] vb2_vmalloc_alloc+0x135/0x410 [ 410.791706][T18806] __vb2_queue_alloc+0x8d5/0x1160 [ 410.793481][T18806] vb2_core_reqbufs+0x899/0xf30 [ 410.794993][T18806] __vb2_init_fileio+0x32d/0x1000 [ 410.796846][T18806] __vb2_perform_fileio+0x9ba/0x1380 [ 410.798858][T18806] vb2_fop_read+0x211/0x520 [ 410.800262][T18806] v4l2_read+0x229/0x2c0 [ 410.801532][T18806] vfs_readv+0x5d8/0x8d0 [ 410.803192][T18806] do_preadv+0x1ac/0x270 [ 410.804895][T18806] page last free pid 18805 tgid 18804 stack trace: [ 410.807435][T18806] __free_frozen_pages+0x79f/0x1090 [ 410.809058][T18806] __kasan_populate_vmalloc+0x1ea/0x210 [ 410.810876][T18806] alloc_vmap_area+0x95d/0x2bb0 [ 410.812782][T18806] __get_vm_area_node+0x1ca/0x330 [ 410.814658][T18806] __vmalloc_node_range_noprof+0x228/0x1630 [ 410.816478][T18806] vmalloc_user_noprof+0x9e/0xe0 [ 410.818143][T18806] vb2_vmalloc_alloc+0x135/0x410 [ 410.820081][T18806] __vb2_queue_alloc+0x8d5/0x1160 [ 410.822103][T18806] vb2_core_reqbufs+0x899/0xf30 [ 410.824045][T18806] __vb2_init_fileio+0x32d/0x1000 [ 410.825633][T18806] __vb2_perform_fileio+0x9ba/0x1380 [ 410.827616][T18806] vb2_fop_read+0x211/0x520 [ 410.829438][T18806] v4l2_read+0x229/0x2c0 [ 410.831059][T18806] vfs_readv+0x5d8/0x8d0 [ 410.832388][T18806] do_preadv+0x1ac/0x270 [ 410.833726][T18806] __do_fast_syscall_32+0xe7/0x970 [ 410.835631][T18806] [ 410.836512][T18806] Memory state around the buggy address: [ 410.838260][T18806] ffffc90007a0df00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.840867][T18806] ffffc90007a0df80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 410.843846][T18806] >ffffc90007a0e000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 410.846837][T18806] ^ [ 410.848444][T18806] ffffc90007a0e080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 410.850957][T18806] ffffc90007a0e100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 410.853848][T18806] ================================================================== [ 410.857297][T18806] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 410.860479][T18806] CPU: 1 UID: 0 PID: 18806 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 410.865113][T18806] Tainted: [L]=SOFTLOCKUP [ 410.866921][T18806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 410.870907][T18806] Call Trace: [ 410.872301][T18806] [ 410.873585][T18806] dump_stack_lvl+0x100/0x190 [ 410.875584][T18806] vpanic+0x552/0x970 [ 410.877280][T18806] ? __pfx_vpanic+0x10/0x10 [ 410.879206][T18806] ? mark_held_locks+0x40/0x70 [ 410.880952][T18806] ? tpg_fill_plane_buffer+0x209a/0x4160 [ 410.882644][T18806] panic+0xd1/0xe0 [ 410.883795][T18806] ? __pfx_panic+0x10/0x10 [ 410.885291][T18806] ? tpg_fill_plane_buffer+0x209a/0x4160 [ 410.887084][T18806] ? preempt_schedule_common+0x42/0xc0 [ 410.888886][T18806] ? check_panic_on_warn+0x1f/0x90 [ 410.890561][T18806] check_panic_on_warn.cold+0x19/0x34 [ 410.892334][T18806] end_report.part.0+0x3a/0x90 [ 410.894118][T18806] kasan_report.cold+0xe/0x18 [ 410.895772][T18806] ? tpg_fill_plane_buffer+0x209a/0x4160 [ 410.897608][T18806] kasan_check_range+0x10f/0x1e0 [ 410.899265][T18806] __asan_memcpy+0x3c/0x60 [ 410.900727][T18806] tpg_fill_plane_buffer+0x209a/0x4160 [ 410.902667][T18806] ? tpg_calc_text_basep+0x22d/0x2c0 [ 410.904346][T18806] vivid_fillbuff+0x963/0x3ff0 [ 410.905809][T18806] ? __lock_acquire+0x49f/0x1a40 [ 410.907321][T18806] ? __pfx_pick_task_fair+0x10/0x10 [ 410.908919][T18806] ? __pfx_vivid_fillbuff+0x10/0x10 [ 410.910568][T18806] ? __lock_acquire+0x49f/0x1a40 [ 410.911956][T18806] ? v4l2_ctrl_request_setup+0x45a/0xa60 [ 410.913528][T18806] ? lockdep_hardirqs_on+0x78/0x100 [ 410.914982][T18806] ? vivid_thread_vid_cap_tick+0x81b/0x1470 [ 410.916699][T18806] vivid_thread_vid_cap_tick+0x81b/0x1470 [ 410.918522][T18806] vivid_thread_vid_cap+0x454/0xd70 [ 410.920403][T18806] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 410.922445][T18806] ? do_raw_spin_lock+0x128/0x260 [ 410.924139][T18806] ? find_held_lock+0x2b/0x80 [ 410.925586][T18806] ? __kthread_parkme+0xbb/0x230 [ 410.927089][T18806] ? rcu_is_watching+0x12/0xc0 [ 410.928543][T18806] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 410.930266][T18806] ? lockdep_hardirqs_on+0x78/0x100 [ 410.932205][T18806] ? __kthread_parkme+0x18c/0x230 [ 410.934026][T18806] ? kthread+0x13a/0x450 [ 410.935439][T18806] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 410.937181][T18806] kthread+0x370/0x450 [ 410.938807][T18806] ? __pfx_kthread+0x10/0x10 [ 410.940598][T18806] ret_from_fork+0x72b/0xd50 [ 410.942053][T18806] ? __pfx_ret_from_fork+0x10/0x10 [ 410.943759][T18806] ? __switch_to+0x800/0x10f0 [ 410.945554][T18806] ? __pfx_kthread+0x10/0x10 [ 410.947387][T18806] ret_from_fork_asm+0x1a/0x30 [ 410.948960][T18806] [ 410.950662][T18806] Kernel Offset: disabled [ 410.952352][T18806] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:41:21 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a035c5 RDI=ffffffff9b9e11a0 RBP=ffffffff9b9e1160 RSP=ffffc900044ef188 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000074 R14=ffffffff9b6e1226 R15=ffffffff85a03560 RIP=ffffffff85a035ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bf5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7446288 CR3=000000000e992000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=000000000000001f Opmask02=00000000ffff7fdf Opmask03=0000000002082001 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6623a0e8845609b8 4f854579b7bd6c8c ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 24d24e616cb9a176 30e70328d6f3891f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1bb9c29a0d39f815 33071a795494876f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 51faa1414be52ce6 404a409c73a86fca ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003280 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8d9200003b840000 00f9f2b400f9f2d7 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a080000427e0000 27fb00001f300000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfe2000000f9f23a 00f9f13d00000005 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000f9f2df 0000000000f9f0c1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ccdff3116713c6a0 53c083fbd00badd8 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0572e730d79514eb efbd15d440a856e9 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d8ea403720 000055d8ea402ab0 000055d8ea3f7730 000055d8ea40a040 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000303032662f66 3132372f30343032 0000000000000021 00000000352e3932 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772c30362c41352c 39352c38352c3135 2c303566736c6d2c 31312c30312c352c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 342c332c322c312c 3061722c4533312c 4433312c4333312c 4233312c4133312c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3733312c3633312c 3433312c3333312c 3133312c3033316b 2c35312c332c312c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30652d3836313365 4332383570463645 307633303030623a 7475706e693d5341 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 31312c3432312c33 33312c3033312c30 30313a2c35312c33 2c312c304c2d3836 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c312c30322c2c33 2c312c2c30312c30 30312c2c312c2c31 2c312c302c2d2c32 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff96699550 RBX=ffff888029e2d698 RCX=0000000000000000 RDX=000000003859f686 RSI=0000000023c1c774 RDI=00000000b66e08d4 RBP=ffff888029e2ca80 RSP=ffffc90007127590 R8 =0000000042053a21 R9 =000000000000001e R10=0000000000000000 R11=0000000000000000 R12=a8d0d3fca5adb526 R13=0000000000000003 R14=0000000000000000 R15=0000000000000003 RIP=ffffffff81e4c530 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cf5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c24046a CR3=00000000632e6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000202 RBX=0000000000000009 RCX=ffffffff85258b1f RDX=ffff888024eba540 RSI=ffffffff85258a09 RDI=ffff888024eba540 RBP=0000000000000014 RSP=ffffc90003d3f190 R8 =0000000000000005 R9 =0000000000000004 R10=0000000000000003 R11=0000000000000000 R12=ffffffff8c402b67 R13=0000000000000000 R14=0000000000000003 R15=0000000000000a80 RIP=ffffffff82092c99 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f79c077b300 ffffffff 00c00000 GS =0000 ffff888096df5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b88c2acec8 CR3=000000004dcca000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=95b7aee410f84507 382b2216a78f70f9 95b7aee410f84507 382b2216a78f70f9 95b7aee410f84507 382b2216a78f70f9 95b7aee410f84507 382b2216a78f70f9 ZMM18=1f8f97e504904c79 59c66119b641e6b8 1f8f97e504904c79 59c66119b641e6b8 1f8f97e504904c79 59c66119b641e6b8 1f8f97e504904c79 59c66119b641e6b8 ZMM19=8259000000000000 0000000000000004 8259000000000000 0000000000000003 8259000000000000 0000000000000002 8259000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 803cffffffff81ad 8030ffffffff81ad 7fdbffffffff8175 b618ffffffff8175 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b5efffffffff8175 b5d30000024c0300 0000000012700000 000cffffda9c0000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03e6000000080004 0000000800080000 0014000025880000 0002000000000000 ZMM24=d09adbfdd09adbfd d09adbfdd09adbfd d09adbfdd09adbfd d09adbfdd09adbfd d09adbfdd09adbfd d09adbfdd09adbfd d09adbfdd09adbfd d09adbfdd09adbfd ZMM25=2244fdfd2244fdfd 2244fdfd2244fdfd 2244fdfd2244fdfd 2244fdfd2244fdfd 2244fdfd2244fdfd 2244fdfd2244fdfd 2244fdfd2244fdfd 2244fdfd2244fdfd ZMM26=efd95caaefd95caa efd95caaefd95caa efd95caaefd95caa efd95caaefd95caa efd95caaefd95caa efd95caaefd95caa efd95caaefd95caa efd95caaefd95caa ZMM27=96a6b60a96a6b60a 96a6b60a96a6b60a 96a6b60a96a6b60a 96a6b60a96a6b60a 96a6b60a96a6b60a 96a6b60a96a6b60a 96a6b60a96a6b60a 96a6b60a96a6b60a ZMM28=000001100000010f 0000010e0000010d 0000010c0000010b 0000010a00000109 0000010800000107 0000010600000105 0000010400000103 0000010200000101 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=2b5000002b500000 2b5000002b500000 2b5000002b500000 2b5000002b500000 2b5000002b500000 2b5000002b500000 2b5000002b500000 2b5000002b500000 info registers vcpu 3 CPU#3 RAX=0000000080000200 RBX=ffff888013e343c0 RCX=ffffffff8995470b RDX=0000000000000004 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000004 RSP=ffffc9000634f718 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=1ffff92000c69ef9 R13=ffffc90007203000 R14=ffffc9000634f898 R15=dffffc0000000000 RIP=ffffffff82092517 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ef5000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f72ae817 CR3=0000000070abc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4eaab6ff2df34502 667ed97c87b1f1b8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 900366a37e6d18ae 26ce0c2530ce7041 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d2b37be3bb69653 dfea212a8fbea455 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 78d4b8e26077fc61 30bdfff378c9ca2b ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003340 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00f9f84c00f9f860 64520000908c0000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a5c008000000007 01000000a1ce0080 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000048120080 00f9f85b01000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000000f9f88f 00f9f8819afc0080 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ddf9b8c795045357 6bfea99690992e57 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7e5066c52b6684fa cc3a2baa3705d3f2 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000