last executing test programs: 365.143043ms ago: executing program 2 (id=6985): r0 = socket(0x840000000002, 0x3, 0xfa) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/3, &(0x7f0000000040)=0x3) 314.067561ms ago: executing program 2 (id=6989): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x4008630a, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 222.712282ms ago: executing program 2 (id=6994): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, 0x0) 222.510705ms ago: executing program 0 (id=6995): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=@bridge_getvlan={0x17, 0x72, 0x601}, 0x18}}, 0x0) 222.000506ms ago: executing program 2 (id=6998): mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f00000003c0)=@sr0, 0x0, 0x0) 221.793562ms ago: executing program 0 (id=6999): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 214.08876ms ago: executing program 1 (id=7000): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000000)={@loopback, @remote}) 147.973434ms ago: executing program 3 (id=7001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x84}}, 0x0) 147.755106ms ago: executing program 1 (id=7002): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xffffffffffffffc0, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_PROTO, @IFLA_IPTUN_ENCAP_DPORT, @IFLA_IPTUN_ENCAP_SPORT, @IFLA_IPTUN_LINK, @IFLA_IPTUN_PMTUDISC, @IFLA_IPTUN_TOS, @IFLA_IPTUN_FWMARK, @IFLA_IPTUN_REMOTE]}}}]}, 0x3c}}, 0x0) 147.558801ms ago: executing program 3 (id=7003): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x0) lseek(r0, 0x0, 0x0) 136.327269ms ago: executing program 1 (id=7004): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0x48000000}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xfdd6}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x50, 0x29, 0x3b}}, @ip_tos_u8={{0x11, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}], 0x50}, 0x0) 128.407148ms ago: executing program 0 (id=7005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000014000780080017400000000008000640000300000500010006000000050005000000000005000400000000000900020073797a31000000000d0003006c6973743a736574"], 0x5c}}, 0x0) 84.745031ms ago: executing program 3 (id=7006): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) 84.558396ms ago: executing program 1 (id=7007): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'local', '=relative'}}}]}) 84.484797ms ago: executing program 3 (id=7008): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x0) 84.395371ms ago: executing program 0 (id=7009): r0 = socket$inet6(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) 77.464393ms ago: executing program 2 (id=7010): prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x80ffd000) 2.613768ms ago: executing program 1 (id=7011): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x200, 0x2, 0x6, "140d5d075aab352ffdffffff00000b0300000000000000fbff00000000b28d10", 0x55595659}) 2.478009ms ago: executing program 3 (id=7012): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000340), 0x10) 2.392989ms ago: executing program 2 (id=7013): r0 = syz_open_dev$video(&(0x7f0000000040), 0x485, 0x42200) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x100, 0x2, {0x400e801, 0x2, 0x7ff, 0x1000}}) 2.132795ms ago: executing program 0 (id=7014): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='dvmrp1\x00', 0x10) 275.685µs ago: executing program 1 (id=7015): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000100)={{0xfd}, {0xe}, 0xbf00, 0xb8, 0x9}) 145.883µs ago: executing program 3 (id=7016): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e21, @multicast1}], 0x10) 0s ago: executing program 0 (id=7017): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r0, 0x58, &(0x7f0000000100)}, 0x87) kernel console output (not intermixed with test programs): rd PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.935324][ T7879] Call Trace: [ 71.935330][ T7879] [ 71.935337][ T7879] dump_stack_lvl+0x16c/0x1f0 [ 71.935370][ T7879] warn_alloc+0x248/0x3a0 [ 71.935399][ T7879] ? __pfx_warn_alloc+0x10/0x10 [ 71.935424][ T7879] ? psi_group_change+0x6dc/0xd20 [ 71.935453][ T7879] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 71.935478][ T7879] ? psi_memstall_leave+0x1e1/0x2d0 [ 71.935502][ T7879] ? psi_memstall_leave+0x1e6/0x2d0 [ 71.935527][ T7879] __alloc_frozen_pages_noprof+0xea2/0x23f0 [ 71.935566][ T7879] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 71.935610][ T7879] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.935639][ T7879] ? policy_nodemask+0xea/0x4e0 [ 71.935659][ T7879] alloc_pages_mpol+0x1fb/0x550 [ 71.935696][ T7879] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 71.935721][ T7879] alloc_pages_noprof+0x131/0x390 [ 71.935739][ T7879] kimage_alloc_pages+0x75/0x350 [ 71.935770][ T7879] kimage_alloc_control_pages+0x153/0xa00 [ 71.935805][ T7879] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 71.935842][ T7879] do_kexec_load+0x480/0x8d0 [ 71.935861][ T7879] ? __pfx_do_kexec_load+0x10/0x10 [ 71.935886][ T7879] __ia32_compat_sys_kexec_load+0x37f/0x400 [ 71.935913][ T7879] ? __pfx___ia32_compat_sys_kexec_load+0x10/0x10 [ 71.935936][ T7879] ? rcu_is_watching+0x12/0xc0 [ 71.935959][ T7879] __do_fast_syscall_32+0x7c/0x3a0 [ 71.935990][ T7879] do_fast_syscall_32+0x32/0x80 [ 71.936017][ T7879] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.936040][ T7879] RIP: 0023:0xf7fc2579 [ 71.936054][ T7879] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 71.936071][ T7879] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 000000000000011b [ 71.936089][ T7879] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000003 [ 71.936100][ T7879] RDX: 0000000080001080 RSI: 00000000003e0000 RDI: 0000000000000000 [ 71.936111][ T7879] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.936121][ T7879] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 71.936131][ T7879] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.936155][ T7879] [ 71.936176][ T7879] Mem-Info: [ 72.036871][ T7879] active_anon:300 inactive_anon:3977 isolated_anon:0 [ 72.036871][ T7879] active_file:1282 inactive_file:560 isolated_file:0 [ 72.036871][ T7879] unevictable:1768 dirty:187 writeback:0 [ 72.036871][ T7879] slab_reclaimable:5503 slab_unreclaimable:52830 [ 72.036871][ T7879] mapped:21946 shmem:2045 pagetables:1108 [ 72.036871][ T7879] sec_pagetables:301 bounce:0 [ 72.036871][ T7879] kernel_misc_reclaimable:0 [ 72.036871][ T7879] free:20261 free_pcp:173 free_cma:0 [ 72.060394][ T7879] Node 0 active_anon:324kB inactive_anon:0kB active_file:696kB inactive_file:168kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:468kB dirty:0kB writeback:0kB shmem:3544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8136kB pagetables:1428kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB [ 72.082505][ T7879] Node 1 active_anon:876kB inactive_anon:15208kB active_file:4432kB inactive_file:1772kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:87016kB dirty:748kB writeback:0kB shmem:4636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4400kB pagetables:3004kB sec_pagetables:80kB all_unreclaimable? no Balloon:0kB [ 72.103060][ T7879] Node 0 DMA free:1924kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 72.112208][ T7879] lowmem_reserve[]: 0 288 288 288 288 [ 72.124720][ T7879] Node 0 DMA32 free:16600kB boost:4096kB min:17316kB low:20620kB high:23924kB reserved_highatomic:2048KB free_highatomic:848KB active_anon:324kB inactive_anon:0kB active_file:696kB inactive_file:168kB unevictable:3536kB writepending:0kB present:1032196kB managed:295896kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 72.145919][ T7879] lowmem_reserve[]: 0 0 0 0 0 [ 72.147471][ T7879] Node 1 DMA32 free:64036kB boost:20480kB min:67624kB low:79408kB high:91192kB reserved_highatomic:2048KB free_highatomic:0KB active_anon:876kB inactive_anon:14408kB active_file:4432kB inactive_file:1372kB unevictable:3536kB writepending:748kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:1076kB local_pcp:220kB free_cma:0kB [ 72.160318][ T7879] lowmem_reserve[]: 0 0 0 0 0 [ 72.162270][ T7879] Node 0 DMA: 1*4kB (U) 0*8kB 3*16kB (U) 3*32kB (UM) 0*64kB 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 1940kB [ 72.188645][ T7879] Node 0 DMA32: 89*4kB (UME) 74*8kB (UME) 74*16kB (UMEH) 63*32kB (UMEH) 29*64kB (UME) 20*128kB (UME) 10*256kB (UME) 7*512kB (UMEH) 2*1024kB (U) 0*2048kB 0*4096kB = 16756kB [ 72.195448][ T7879] Node 1 DMA32: 858*4kB (UME) 580*8kB (UME) 295*16kB (UME) 275*32kB (UME) 134*64kB (UME) 69*128kB (UME) 40*256kB (UME) 22*512kB (UME) 5*1024kB (UM) 0*2048kB 0*4096kB = 65624kB [ 72.211091][ T7879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 72.215285][ T7879] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 72.219112][ T7879] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 72.235161][ T7879] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 72.238987][ T7879] 3652 total pagecache pages [ 72.240518][ T7879] 95 pages in swap cache [ 72.241887][ T7879] Free swap = 115100kB [ 72.256724][ T7879] Total swap = 124996kB [ 72.258471][ T7879] 524155 pages RAM [ 72.260036][ T7879] 0 pages HighMem/MovableOnly [ 72.262031][ T7879] 209270 pages reserved [ 72.263924][ T7879] 0 pages cma reserved [ 72.450804][ T7992] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 72.453526][ T7992] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 72.457978][ T7992] vhci_hcd vhci_hcd.0: Device attached [ 72.481902][ T7993] vhci_hcd: connection closed [ 72.482220][ T13] vhci_hcd: stop threads [ 72.488107][ T13] vhci_hcd: release socket [ 72.490043][ T13] vhci_hcd: disconnect device [ 72.821719][ T8013] affs: No valid root block on device sr0 [ 73.128418][ T7879] kexec: Could not allocate control_code_buffer [ 73.537908][ T40] audit: type=1326 audit(2000000782.373:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.3.1064" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x0 [ 73.545656][ T40] audit: type=1400 audit(2000000782.373:6): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8101 comm="syz.2.1062" [ 73.704337][ T40] audit: type=1326 audit(2000000782.541:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.1.1077" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x0 [ 73.746617][ T8134] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 73.746617][ T8134] Ue[%#s' [ 74.003213][ T8172] hfsplus: unable to find HFS+ superblock [ 74.011031][ T40] audit: type=1326 audit(2000000782.876:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8174 comm="syz.3.1100" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x0 [ 74.233502][ T8208] capability: warning: `syz.2.1116' uses deprecated v2 capabilities in a way that may be insecure [ 74.492747][ T8252] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 74.503583][ T8252] qnx6: wrong signature (magic) in superblock #1. [ 74.506576][ T8252] qnx6: unable to read the first superblock [ 74.635264][ T8273] syz.0.1149: attempt to access beyond end of device [ 74.635264][ T8273] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 74.642145][ T8273] FAT-fs (loop0): unable to read boot sector [ 75.138078][ T8336] syz.3.1180: attempt to access beyond end of device [ 75.138078][ T8336] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 75.145338][ T8336] hpfs: hpfs_map_sector(): read error [ 75.161995][ T8341] tmpfs: Bad value for 'mpol' [ 75.781245][ T34] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 75.953812][ T34] usb 5-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 75.958169][ T34] usb 5-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 75.962305][ T34] usb 5-1: config 1 interface 0 has no altsetting 0 [ 75.965782][ T34] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.968565][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 75.971237][ T34] usb 5-1: SerialNumber: syz [ 76.174485][ T1333] usb 5-1: USB disconnect, device number 3 [ 76.296274][ T53] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 76.449663][ T53] usb 6-1: not running at top speed; connect to a high speed hub [ 76.454570][ T53] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 76.462202][ T53] usb 6-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40 [ 76.465960][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.469539][ T53] usb 6-1: Product: syz [ 76.471247][ T53] usb 6-1: Manufacturer: syz [ 76.473203][ T53] usb 6-1: SerialNumber: syz [ 76.479114][ T8418] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 76.534613][ T8452] trusted_key: encrypted_key: master key parameter '' is invalid [ 76.708408][ T53] usbhid 6-1:1.0: can't add hid device: -71 [ 76.711067][ T53] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 76.726696][ T53] usb 6-1: USB disconnect, device number 2 [ 76.807041][ T8470] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 76.811669][ T8470] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 76.815583][ T8470] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 76.818830][ T8470] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 76.882297][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.885028][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.320903][ T8518] tmpfs: Bad value for 'mpol' [ 77.690161][ T8550] /dev/sr0: Can't open blockdev [ 77.773572][ T8442] kexec: Could not allocate control_code_buffer [ 78.314556][ T8670] ./cgroup: Can't lookup blockdev [ 78.681797][ T8739] Invalid ELF header type: 3 != 1 [ 78.813801][ T8741] /dev/sr0: Can't open blockdev [ 79.088582][ T8804] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 79.091533][ T8804] PKCS7: Only support pkcs7_signedData type [ 79.418645][ T8850] Invalid ELF header type: 3 != 1 [ 79.423481][ T8852] gfs2: not a GFS2 filesystem [ 79.597890][ T8878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.641025][ T8888] tmpfs: Bad value for 'size' [ 79.710729][ T8899] syz.3.1459: attempt to access beyond end of device [ 79.710729][ T8899] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 79.715345][ T8899] syz.3.1459: attempt to access beyond end of device [ 79.715345][ T8899] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 79.720848][ T8899] Mount JFS Failure: -5 [ 81.172259][ T9134] syz.2.1576 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 81.443184][ T9172] tmpfs: Unknown parameter 'hash' [ 81.549700][ T6134] Bluetooth: hci3: unexpected event 0x2f length: 1017 > 260 [ 81.765118][ T838] cfg80211: failed to load regulatory.db [ 82.467928][ T9281] syz.1.1649: attempt to access beyond end of device [ 82.467928][ T9281] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 82.476127][ T9281] qnx6: unable to read the first superblock [ 82.478153][ T9281] syz.1.1649: attempt to access beyond end of device [ 82.478153][ T9281] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 82.482276][ T9281] qnx6: unable to read the first superblock [ 82.484205][ T9281] qnx6: unable to read the first superblock [ 82.551674][ T9293] FAT-fs (nullb0): bogus number of reserved sectors [ 82.553920][ T9293] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 82.852244][ T9341] tmpfs: Bad value for 'mpol' [ 83.047934][ T9375] futex_wake_op: syz.1.1696 tries to shift op by -1; fix this program [ 83.137657][ T9372] /dev/sr0: Can't open blockdev [ 83.288311][ T9421] qnx6: unable to read the first superblock [ 83.472889][ T9457] mmap: syz.1.1737 (9457) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.504479][ T9459] hpfs: hpfs_map_sector(): read error [ 83.888106][ T53] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 83.938216][ T9537] hpfs: hpfs_map_sector(): read error [ 84.031680][ T53] usb 7-1: too many configurations: 178, using maximum allowed: 8 [ 84.042481][ T53] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 84.045663][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.048677][ T53] usb 7-1: Product: syz [ 84.051495][ T53] usb 7-1: Manufacturer: syz [ 84.053051][ T53] usb 7-1: SerialNumber: syz [ 84.068755][ T53] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 84.093571][ T29] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 84.209035][ T40] audit: type=1326 audit(2000000793.574:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9581 comm="syz.3.1799" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x0 [ 84.236840][ T40] audit: type=1326 audit(2000000793.605:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9583 comm="syz.1.1800" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x0 [ 84.293350][ T9591] tmpfs: Bad value for 'mpol' [ 84.309139][ T53] usb 7-1: USB disconnect, device number 4 [ 84.425795][ T9606] hpfs: hpfs_map_sector(): read error [ 85.107445][ T29] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 85.110806][ T29] ath9k_htc: Failed to initialize the device [ 85.126613][ T53] usb 7-1: ath9k_htc: USB layer deinitialized [ 85.168767][ T6206] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 85.184474][ T836] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 85.337957][ T836] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 85.347411][ T6206] usb 8-1: Using ep0 maxpacket: 16 [ 85.350566][ T836] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.353604][ T6206] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 85.354346][ T836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.354366][ T836] usb 6-1: Product: syz [ 85.354379][ T836] usb 6-1: Manufacturer: syz [ 85.356400][ T836] usb 6-1: SerialNumber: syz [ 85.358968][ T6206] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.370949][ T6206] usb 8-1: Product: syz [ 85.372757][ T6206] usb 8-1: Manufacturer: syz [ 85.375548][ T6206] usb 8-1: SerialNumber: syz [ 85.391748][ T9684] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 85.395017][ T6206] r8152-cfgselector 8-1: Unknown version 0x0000 [ 85.409337][ T6206] r8152-cfgselector 8-1: config 0 descriptor?? [ 85.603014][ T836] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 85.612948][ T836] usb 6-1: USB disconnect, device number 3 [ 85.628898][ T6206] r8152-cfgselector 8-1: Unknown version 0x0000 [ 85.632541][ T6206] r8152-cfgselector 8-1: bad CDC descriptors [ 85.639269][ T6206] r8152-cfgselector 8-1: USB disconnect, device number 3 [ 85.948835][ T40] audit: type=1326 audit(2000001024.404:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.2.1898" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x0 [ 86.374131][ T9832] exFAT-fs (nullb0): invalid boot record signature [ 86.376925][ T9832] exFAT-fs (nullb0): failed to read boot sector [ 86.379552][ T9832] exFAT-fs (nullb0): failed to recognize exfat type [ 86.672426][ T9861] /dev/sr0: Can't open blockdev [ 86.856388][ T9899] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 87.496541][ T40] audit: type=1326 audit(2000001026.021:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9988 comm="syz.1.2001" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x0 [ 87.847564][T10050] tmpfs: Bad value for 'mpol' [ 88.119802][T10092] tmpfs: Bad value for 'mpol' [ 88.175645][T10102] Can't find a SQUASHFS superblock on nullb0 [ 88.176091][T10103] ptrace attach of "/syz-executor exec"[6136] was attempted by "/syz-executor exec"[10103] [ 88.270942][T10116] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 88.508125][T10154] kAFS: unparsable volume name [ 88.818409][T10204] futex_wake_op: syz.3.2108 tries to shift op by -1; fix this program [ 88.893512][T10216] syz.0.2115: attempt to access beyond end of device [ 88.893512][T10216] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 88.898147][T10216] qnx4: unable to read the superblock [ 89.476999][T10311] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 89.618841][T10331] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 89.642084][ T54] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 89.794310][ T54] usb 8-1: Using ep0 maxpacket: 16 [ 89.801440][ T54] usb 8-1: config 63 has an invalid interface number: 171 but max is 0 [ 89.806639][ T54] usb 8-1: config 63 has no interface number 0 [ 89.809113][ T54] usb 8-1: config 63 interface 171 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 89.813573][ T54] usb 8-1: config 63 interface 171 has no altsetting 0 [ 89.818421][ T54] usb 8-1: New USB device found, idVendor=0c45, idProduct=607c, bcdDevice=c5.ad [ 89.827612][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.830793][ T54] usb 8-1: Product: syz [ 89.841334][ T54] usb 8-1: Manufacturer: syz [ 89.843260][ T54] usb 8-1: SerialNumber: syz [ 89.861063][T10298] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 89.925772][T10375] tmpfs: Bad value for 'mpol' [ 90.082968][ T54] gspca_main: sonixj-2.14.0 probing 0c45:607c [ 90.087862][ T54] gspca_sonixj: reg_w1 err -71 [ 90.090399][ T54] sonixj 8-1:63.171: probe with driver sonixj failed with error -71 [ 90.096232][ T54] usb 8-1: USB disconnect, device number 4 [ 90.271131][T10415] tmpfs: Bad value for 'mpol' [ 91.219639][T10520] futex_wake_op: syz.3.2264 tries to shift op by 32; fix this program [ 91.249188][T10522] Malformed UNC in devname [ 91.249188][T10522] [ 91.253684][T10522] CIFS: VFS: Malformed UNC in devname [ 91.335410][T10533] omfs: Invalid superblock (0) [ 92.060982][T10645] 9pnet: Unknown protocol version 9p20\++} [ 92.141363][T10655] overlayfs: missing 'lowerdir' [ 92.202865][T10667] IPv6: addrconf: prefix option has invalid lifetime [ 92.651911][T10740] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 92.842112][ T40] audit: type=1326 audit(2000001031.648:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.1.2389" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x0 [ 93.090971][T10830] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 93.736212][T10926] binder: Bad value for 'max' [ 93.889803][T10828] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.892375][T10828] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.922893][T10828] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.936252][T10828] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.940279][T10828] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.976701][T10828] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.989604][T10828] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.992255][T10828] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 94.298285][T10978] zonefs (nullb0) ERROR: Not a zoned block device [ 94.442006][T10996] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 94.821299][T11050] 9pnet_fd: Insufficient options for proto=fd [ 95.090084][ T6134] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.405761][T11128] IPv6: addrconf: prefix option has invalid lifetime [ 95.508212][T11138] syz.2.2563: attempt to access beyond end of device [ 95.508212][T11138] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 95.513397][T11138] SQUASHFS error: Failed to read block 0x0: -5 [ 95.515883][T11138] unable to read squashfs_super_block [ 95.608723][ T40] audit: type=1326 audit(2000001034.545:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.3.2568" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff3579 code=0x0 [ 95.705139][T11160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.861202][ T6134] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.927900][ T6134] Bluetooth: hci3: command 0x0406 tx timeout [ 96.013478][T11112] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 96.015953][T11112] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 96.018788][T11112] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 96.226801][T11190] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 96.230876][T11190] cramfs: wrong magic [ 96.319728][T11202] random: crng reseeded on system resumption [ 96.452013][T11224] ufs: You didn't specify the type of your ufs filesystem [ 96.452013][T11224] [ 96.452013][T11224] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 96.452013][T11224] [ 96.452013][T11224] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 96.466128][T11224] ufs: ufs_fill_super(): bad magic number [ 96.473100][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2608'. [ 96.527275][T11234] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 96.661729][ T29] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 96.717759][T11262] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2625'. [ 96.722121][T11262] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2625'. [ 96.747121][ T6134] Bluetooth: hci3: unexpected event for opcode 0x200d [ 96.772120][T11270] netlink: 'syz.2.2628': attribute type 1 has an invalid length. [ 96.808381][ T29] usb 5-1: not running at top speed; connect to a high speed hub [ 96.812003][ T29] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 96.816268][ T29] usb 5-1: config 1 interface 0 has no altsetting 0 [ 96.821228][ T29] usb 5-1: string descriptor 0 read error: -22 [ 96.825803][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 96.833191][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.846666][T11222] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 96.935535][T11294] binder: 11293:11294 ioctl 400c620e 80001180 returned -22 [ 97.014572][T11306] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 97.051784][T11310] netlink: 'syz.3.2649': attribute type 1 has an invalid length. [ 97.057450][ T29] usb 5-1: USB disconnect, device number 4 [ 97.223801][ T6134] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.291521][T11340] QAT: Stopping all acceleration devices. [ 97.423559][T11356] xt_TCPMSS: Only works on TCP SYN packets [ 97.475956][T11364] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2675'. [ 97.514464][T11368] xt_policy: too many policy elements [ 97.617734][T11382] IPv6: Can't replace route, no match found [ 97.664573][T11388] ufs: You didn't specify the type of your ufs filesystem [ 97.664573][T11388] [ 97.664573][T11388] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 97.664573][T11388] [ 97.664573][T11388] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 97.679446][T11388] ufs: ufs_fill_super(): bad magic number [ 97.745708][T11398] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2693'. [ 97.751874][T11398] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2693'. [ 97.755954][T11398] unsupported nlmsg_type 40 [ 97.985849][ T6134] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.017480][T11439] random: crng reseeded on system resumption [ 98.038308][T11441] netlink: 'syz.2.2714': attribute type 30 has an invalid length. [ 98.308176][T11487] netlink: 'syz.1.2736': attribute type 10 has an invalid length. [ 98.315227][T11487] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.319333][T11487] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.335025][T11487] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.338030][T11487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.341839][T11487] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.344863][T11487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.351546][T11487] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 98.397543][T11497] /dev/nullb0: Can't open blockdev [ 98.400714][T11496] netlink: 'syz.3.2739': attribute type 2 has an invalid length. [ 98.413320][T11496] : entered promiscuous mode [ 98.428741][T11502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2743'. [ 98.467603][T11509] delete_channel: no stack [ 98.518595][ T40] audit: type=1326 audit(2000001037.600:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11518 comm="syz.1.2750" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 98.532822][ T40] audit: type=1326 audit(2000001037.611:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11518 comm="syz.1.2750" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 98.546788][ T40] audit: type=1326 audit(2000001037.611:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11518 comm="syz.1.2750" exe="/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 98.553396][ T40] audit: type=1326 audit(2000001037.611:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11518 comm="syz.1.2750" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 98.556234][T11525] Cannot find set identified by id 0 to match [ 98.560648][T11526] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 98.566110][T11526] /dev/nullb0: Can't open blockdev [ 98.684636][T11553] mmap: syz.1.2762 (11553): VmData 37404672 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 99.081010][T11620] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2800'. [ 99.090291][T11623] netlink: 'syz.2.2793': attribute type 10 has an invalid length. [ 99.093703][T11624] netlink: 'syz.0.2795': attribute type 1 has an invalid length. [ 99.101777][T11623] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.102666][T11624] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2795'. [ 99.104418][T11623] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.116733][T11623] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.119357][T11623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.122378][T11623] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.124884][T11623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.129822][T11623] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 99.214317][ T6134] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.259170][ C0] sd 0:0:0:0: [sda] tag#27 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 99.263476][ C0] sd 0:0:0:0: [sda] tag#27 CDB: Test Unit Ready [ 99.345042][T11671] erspan0: entered promiscuous mode [ 99.347804][T11671] erspan0: entered allmulticast mode [ 99.706639][T11748] netlink: 'syz.2.2858': attribute type 11 has an invalid length. [ 99.751191][T11760] Illegal XDP return value 4294967282 on prog (id 269) dev N/A, expect packet loss! [ 99.817060][T11771] wireguard0: entered promiscuous mode [ 99.818856][T11771] wireguard0: entered allmulticast mode [ 99.902718][T11792] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 99.905629][T11792] syz.0.2879: attempt to access beyond end of device [ 99.905629][T11792] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 99.968833][ T6134] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.055012][ T34] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 100.224203][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 100.227732][ T34] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 100.231060][ T34] usb 6-1: config 0 has no interface number 0 [ 100.235579][ T34] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 100.239325][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.248928][T11837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.253118][ T34] usb 6-1: config 0 descriptor?? [ 100.338000][T11849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2907'. [ 100.367949][ T34] viperboard 6-1:0.143: version 0.00 found at bus 006 address 004 [ 100.394235][ T34] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 100.402876][ T34] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 100.454832][ T837] usb 6-1: USB disconnect, device number 4 [ 100.516954][T11873] IPv6: NLM_F_CREATE should be specified when creating new route [ 100.826437][T11923] netlink: 'syz.0.2943': attribute type 10 has an invalid length. [ 100.830439][T11923] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.833551][T11923] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.838504][T11923] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.840786][T11923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.843261][T11923] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.846341][T11923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.851601][T11923] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 101.124417][T11980] ip6t_srh: unknown srh match flags FF3F [ 101.128557][T11982] netlink: 'syz.1.2973': attribute type 12 has an invalid length. [ 101.253090][ T34] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 101.406959][ T34] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 101.406982][ T34] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 101.406997][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 101.407035][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 101.407058][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 101.408767][ T34] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 101.408787][ T34] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 101.408802][ T34] usb 8-1: Product: syz [ 101.408813][ T34] usb 8-1: Manufacturer: syz [ 101.417611][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 101.445899][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 101.450597][ T34] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 101.450613][ T34] cdc_wdm 8-1:1.0: Unknown control protocol [ 101.616590][ T837] usb 8-1: USB disconnect, device number 5 [ 101.774465][T12042] __nla_validate_parse: 2 callbacks suppressed [ 101.774481][T12042] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3002'. [ 101.852122][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3007'. [ 101.868077][T12054] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3008'. [ 101.898014][T12058] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3010'. [ 101.959760][T12068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3015'. [ 102.133073][T12102] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.3032'. [ 102.222518][T12122] warning: `syz.2.3041' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.288309][T12101] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 102.290338][T12101] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.292990][T12101] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.318056][T12141] netlink: 'syz.3.3051': attribute type 2 has an invalid length. [ 102.321841][T12141] netlink: 'syz.3.3051': attribute type 1 has an invalid length. [ 102.325585][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3052'. [ 102.438142][T12156] bond0: option ad_select: unable to set because the bond device is up [ 102.471233][T12163] netlink: 'syz.1.3062': attribute type 1 has an invalid length. [ 102.504224][T12173] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 102.563725][T12184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3072'. [ 102.584077][T12187] pim6reg: entered allmulticast mode [ 102.595537][T12190] x_tables: ip6_tables: cgroup match: used from hooks FORWARD, but only valid from INPUT/OUTPUT/POSTROUTING [ 102.658217][T12198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3077'. [ 102.687388][T12203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3078'. [ 103.098812][T12249] syz.3.3100 uses obsolete (PF_INET,SOCK_PACKET) [ 103.367338][T12194] /dev/sr0: Can't open blockdev [ 103.451570][T12273] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 103.455597][T12273] overlayfs: missing 'lowerdir' [ 103.572235][T12297] usb usb9: check_ctrlrecip: process 12297 (syz.3.3123) requesting ep 01 but needs 81 [ 103.577382][T12297] usb usb9: usbfs: process 12297 (syz.3.3123) did not claim interface 0 before use [ 103.689388][T12316] NILFS (nullb0): couldn't find nilfs on the device [ 104.158436][ T6134] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.234684][ T6137] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.237224][ T6134] Bluetooth: hci3: command 0x0406 tx timeout [ 104.584173][T12423] netlink: 'syz.2.3184': attribute type 10 has an invalid length. [ 104.591049][T12423] team0: Cannot enslave team device to itself [ 104.619450][T12427] openvswitch: netlink: Missing key (keys=40, expected=80) [ 104.639979][T12431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.716216][T12443] netlink: 'syz.3.3194': attribute type 1 has an invalid length. [ 105.146934][T12509] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.691178][T12613] netlink: 'syz.1.3279': attribute type 1 has an invalid length. [ 105.695601][T12612] netlink: 'syz.0.3278': attribute type 1 has an invalid length. [ 105.800059][T12631] netlink: 'syz.1.3288': attribute type 16 has an invalid length. [ 105.803017][T12631] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.060393][T12684] tmpfs: Bad value for 'mpol' [ 106.444685][ T24] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 106.602620][T12774] overlay: Bad value for 'workdir' [ 106.631130][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 106.635744][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 106.640376][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 106.645319][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 106.649253][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.674073][ T24] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 106.677840][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.684849][ T24] usb 7-1: Product: syz [ 106.686626][ T24] usb 7-1: Manufacturer: syz [ 106.688580][ T24] usb 7-1: SerialNumber: syz [ 106.693402][ T24] usb 7-1: config 0 descriptor?? [ 106.705637][ T24] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input6 [ 106.712439][T12792] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 106.796013][T12805] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 106.846746][T12815] netlink: 'syz.0.3373': attribute type 10 has an invalid length. [ 106.849084][T12815] __nla_validate_parse: 12 callbacks suppressed [ 106.849093][T12815] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3373'. [ 106.857576][T12815] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 106.956289][T12835] netlink: 'syz.0.3383': attribute type 16 has an invalid length. [ 106.960352][T12835] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3383'. [ 106.963527][T12835] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.964500][ T24] usb 7-1: USB disconnect, device number 5 [ 107.036743][T12849] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 107.038809][T12849] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 107.041816][T12849] vhci_hcd vhci_hcd.0: Device attached [ 107.045508][T12852] vhci_hcd: cannot find a urb of seqnum 941 max seqnum 0 [ 107.047930][ T82] vhci_hcd: stop threads [ 107.049406][ T82] vhci_hcd: release socket [ 107.050890][ T82] vhci_hcd: disconnect device [ 107.078893][T12860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.193198][T12870] process 'syz.3.3394' launched './file0' with NULL argv: empty string added [ 107.241098][T12872] netlink: 512 bytes leftover after parsing attributes in process `syz.3.3395'. [ 107.309406][T12878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.345990][T12882] netlink: 'syz.1.3401': attribute type 10 has an invalid length. [ 107.368452][T12882] team0: Port device wlan1 added [ 107.412627][T12888] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3404'. [ 107.456756][T12891] AppArmor: change_hat: Invalid input '0x' [ 107.487185][T12894] netlink: 'syz.2.3407': attribute type 6 has an invalid length. [ 107.590303][T12910] net veth1_virt_wifi : renamed from virt_wifi0 [ 107.612582][T12913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3416'. [ 107.665580][T12921] netlink: 'syz.0.3420': attribute type 11 has an invalid length. [ 107.698021][T12925] xt_HMARK: spi-set and port-set can't be combined [ 107.980645][T12969] can0: slcan on pty22. [ 108.002234][T12974] netlink: 'syz.2.3447': attribute type 10 has an invalid length. [ 108.004155][T12975] ip6t_srh: unknown srh invflags 6BE9 [ 108.029166][T12974] team0: Port device wlan1 added [ 108.033595][T12977] netlink: 'syz.3.3448': attribute type 2 has an invalid length. [ 108.056285][T12968] can0 (unregistered): slcan off pty22. [ 108.119942][T12989] program syz.1.3454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.136964][T12993] ntfs3(nbd2): try to read out of volume at offset 0x0 [ 108.339181][T13029] Mount JFS Failure: -22 [ 108.341903][T13029] jfs_mount failed w/return code = -22 [ 108.468823][T13050] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3484'. [ 108.594008][T13075] netlink: 'syz.2.3494': attribute type 2 has an invalid length. [ 108.663516][T13087] tmpfs: User quota block hardlimit too large. [ 108.746984][T13105] hpfs: Bad magic ... probably not HPFS [ 108.775585][T13111] netlink: 'syz.0.3513': attribute type 1 has an invalid length. [ 108.779666][T13111] netlink: 'syz.0.3513': attribute type 1 has an invalid length. [ 108.888943][T13134] netlink: 'syz.1.3524': attribute type 63 has an invalid length. [ 109.013294][T13154] No source specified [ 109.105138][T13171] xt_connbytes: Forcing CT accounting to be enabled [ 109.198460][T13190] Invalid source name [ 109.228145][T13197] netlink: 'syz.2.3555': attribute type 3 has an invalid length. [ 109.301529][ T40] audit: type=1326 audit(2000001048.917:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.1.3562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 109.308444][ T40] audit: type=1326 audit(2000001048.917:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.1.3562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 109.308535][ T40] audit: type=1326 audit(2000001048.927:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.1.3562" exe="/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 109.323031][ T40] audit: type=1326 audit(2000001048.927:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.1.3562" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 109.446581][ T40] audit: type=1326 audit(2000001049.074:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13231 comm="syz.0.3572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 109.455310][ T40] audit: type=1326 audit(2000001049.074:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13231 comm="syz.0.3572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 109.464228][ T40] audit: type=1326 audit(2000001049.074:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13231 comm="syz.0.3572" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 109.470820][ T40] audit: type=1326 audit(2000001049.074:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13231 comm="syz.0.3572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 109.477912][ T40] audit: type=1326 audit(2000001049.074:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13231 comm="syz.0.3572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 109.589619][T13254] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 109.888240][T13297] binder: BC_ACQUIRE_RESULT not supported [ 109.890740][T13297] binder: 13296:13297 ioctl c0306201 80000040 returned -22 [ 110.073800][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 110.101188][T13319] program syz.1.3615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.235664][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 110.239631][ T29] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 110.242752][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.246982][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 110.253558][ T29] usb 5-1: config 0 has no interface number 0 [ 110.257211][ T29] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 110.261218][ T29] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 110.267179][ T29] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 210 [ 110.270441][ T29] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.277560][ T29] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 110.281076][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.285447][ T29] usb 5-1: Product: syz [ 110.286719][ T29] usb 5-1: Manufacturer: syz [ 110.288202][ T29] usb 5-1: SerialNumber: syz [ 110.291692][ T29] usb 5-1: config 0 descriptor?? [ 110.297139][T13292] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 110.303205][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.311211][T13343] comedi comedi0: pcl730: I/O port conflict (0x2f00,4) [ 110.402437][T13352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3631'. [ 110.483143][T13364] CIFS: iocharset name too long [ 110.506475][ T837] usb 5-1: USB disconnect, device number 5 [ 110.601978][T13380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3646'. [ 110.659058][T13392] Cannot find add_set index 0 as target [ 110.705313][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3654'. [ 110.945117][T13446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.068589][T13471] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.185512][T13491] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 111.194051][T13493] syz.3.3697 (13493): /proc/13493/oom_adj is deprecated, please use /proc/13493/oom_score_adj instead. [ 111.906895][T13582] program syz.1.3727 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.212196][T13628] validate_nla: 3 callbacks suppressed [ 112.212207][T13628] netlink: 'syz.2.3751': attribute type 2 has an invalid length. [ 112.216293][T13628] netlink: 'syz.2.3751': attribute type 1 has an invalid length. [ 112.509095][T13650] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 112.512206][T13650] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 112.520686][T13650] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 112.523808][T13650] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 112.665489][T13668] MTD: Couldn't look up './file0': -15 [ 112.705734][T13678] netlink: 'syz.3.3777': attribute type 4 has an invalid length. [ 112.863830][T13708] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3792'. [ 113.160685][T13752] netlink: 'syz.3.3813': attribute type 1 has an invalid length. [ 113.163483][T13752] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3813'. [ 113.700274][T13804] netlink: 'syz.0.3837': attribute type 21 has an invalid length. [ 113.704482][T13804] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3837'. [ 113.708380][T13804] netlink: 'syz.0.3837': attribute type 4 has an invalid length. [ 113.711677][T13804] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3837'. [ 113.862215][T13817] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 114.185826][T13779] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.189699][T13779] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.437735][T13865] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 114.442341][T13865] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 114.496367][T13873] netlink: 512 bytes leftover after parsing attributes in process `syz.3.3871'. [ 114.501854][T13877] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3873'. [ 114.515900][T13879] netlink: 'syz.1.3874': attribute type 1 has an invalid length. [ 114.690992][T13907] binder: 13906:13907 ioctl c018620c 80000000 returned -1 [ 114.730223][T13912] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 114.732212][T13913] unsupported nla_type 256 [ 114.976389][T13953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.014967][T13957] xfrm0: entered promiscuous mode [ 115.016996][T13957] xfrm0: entered allmulticast mode [ 115.066283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.071003][T13965] openvswitch: netlink: Key type 177 is out of range max 32 [ 115.138351][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3923'. [ 115.152490][T13983] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 115.190534][T13986] tipc: Can't bind to reserved service type 0 [ 115.214286][T13992] Invalid ELF header magic: != ELF [ 115.245285][T13999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3932'. [ 115.252372][T14001] netlink: 'syz.3.3933': attribute type 6 has an invalid length. [ 115.256584][T14001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3933'. [ 115.360642][ T6134] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.362885][T14020] netlink: 'syz.2.3942': attribute type 10 has an invalid length. [ 115.365644][T14020] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3942'. [ 115.369174][T14020] dummy0: entered promiscuous mode [ 115.375444][T14020] bridge0: port 3(dummy0) entered blocking state [ 115.377700][T14020] bridge0: port 3(dummy0) entered disabled state [ 115.379841][T14020] dummy0: entered allmulticast mode [ 115.383220][T14020] bridge0: port 3(dummy0) entered blocking state [ 115.385273][T14020] bridge0: port 3(dummy0) entered forwarding state [ 115.443238][T14032] overlay: Unknown parameter 'obj_role' [ 115.597088][T14057] netlink: 'syz.1.3956': attribute type 10 has an invalid length. [ 115.600472][T14057] dummy0: entered promiscuous mode [ 115.603239][T14057] bridge0: port 3(dummy0) entered blocking state [ 115.606030][T14057] bridge0: port 3(dummy0) entered disabled state [ 115.611611][T14057] dummy0: entered allmulticast mode [ 115.615789][T14057] bridge0: port 3(dummy0) entered blocking state [ 115.618811][T14057] bridge0: port 3(dummy0) entered forwarding state [ 115.944373][T14113] xt_nat: multiple ranges no longer supported [ 116.017090][T14122] dummy0: entered promiscuous mode [ 116.021958][T14122] bridge0: port 3(dummy0) entered blocking state [ 116.024897][T14122] bridge0: port 3(dummy0) entered disabled state [ 116.027936][T14122] dummy0: entered allmulticast mode [ 116.032040][T14122] bridge0: port 3(dummy0) entered blocking state [ 116.034757][T14122] bridge0: port 3(dummy0) entered forwarding state [ 116.038760][T14126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.128876][ T6134] Bluetooth: hci3: command 0x0406 tx timeout [ 116.189849][T14142] SET target dimension over the limit! [ 116.226439][T14148] dvmrp9: entered allmulticast mode [ 116.241732][T14154] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 116.425108][T14179] dummy0: entered promiscuous mode [ 116.430025][T14179] bridge0: port 3(dummy0) entered blocking state [ 116.433256][T14179] bridge0: port 3(dummy0) entered disabled state [ 116.436296][T14179] dummy0: entered allmulticast mode [ 116.440987][T14179] bridge0: port 3(dummy0) entered blocking state [ 116.443706][T14179] bridge0: port 3(dummy0) entered forwarding state [ 116.752336][T14223] xt_CONNSECMARK: invalid mode: 0 [ 116.840919][T14242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.012799][ T9] IPVS: starting estimator thread 0... [ 117.115038][T14269] IPVS: using max 23 ests per chain, 55200 per kthread [ 117.217201][T14299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.917742][T14410] Cannot find del_set index 2 as target [ 117.948829][T14414] ieee802154 phy0 wpan0: encryption failed: -22 [ 118.218074][T14443] netlink: 'syz.2.4150': attribute type 11 has an invalid length. [ 118.269973][T14449] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 118.542477][T14477] validate_nla: 3 callbacks suppressed [ 118.542490][T14477] netlink: 'syz.1.4167': attribute type 21 has an invalid length. [ 118.644057][T14494] overlayfs: unescaped trailing colons in lowerdir mount option. [ 118.773174][ T40] audit: type=1326 audit(2000001058.869:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14518 comm="syz.2.4188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ff00000 [ 118.781970][ T40] audit: type=1326 audit(2000001058.869:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14518 comm="syz.2.4188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ff00000 [ 118.792571][ T40] audit: type=1326 audit(2000001058.869:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14518 comm="syz.2.4188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ff00000 [ 118.802955][ T40] audit: type=1326 audit(2000001058.869:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14518 comm="syz.2.4188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ff00000 [ 118.811716][ T40] audit: type=1326 audit(2000001058.869:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14518 comm="syz.2.4188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ff00000 [ 118.820469][ T40] audit: type=1326 audit(2000001058.869:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14518 comm="syz.2.4188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ff00000 [ 118.827491][ T40] audit: type=1326 audit(2000001058.869:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14518 comm="syz.2.4188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ff00000 [ 118.835935][ T40] audit: type=1326 audit(2000001058.869:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14518 comm="syz.2.4188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ff00000 [ 118.845159][ T40] audit: type=1326 audit(2000001058.869:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14518 comm="syz.2.4188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ff00000 [ 118.852558][ T40] audit: type=1326 audit(2000001058.869:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14518 comm="syz.2.4188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ff00000 [ 118.885540][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 119.058368][ T9] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 119.062552][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 119.071581][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 119.075448][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 119.081140][ T9] usb 6-1: Product: syz [ 119.082961][ T9] usb 6-1: Manufacturer: syz [ 119.088435][ T9] usb 6-1: SerialNumber: syz [ 119.097660][ T9] usb 6-1: config 0 descriptor?? [ 119.113587][ T9] usb 6-1: selecting invalid altsetting 0 [ 119.273196][T14549] netlink: 'syz.0.4203': attribute type 2 has an invalid length. [ 119.277287][T14549] netlink: 'syz.0.4203': attribute type 11 has an invalid length. [ 119.280451][T14549] __nla_validate_parse: 5 callbacks suppressed [ 119.280461][T14549] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4203'. [ 119.302140][ T9] usb 6-1: USB disconnect, device number 5 [ 119.481875][T14557] macvtap0: entered allmulticast mode [ 119.484255][T14557] veth0_macvtap: entered allmulticast mode [ 120.035196][T14579] netlink: 'syz.3.4218': attribute type 21 has an invalid length. [ 120.186772][T14592] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4224'. [ 120.542881][T14617] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.744556][T14639] netlink: 'syz.0.4247': attribute type 1 has an invalid length. [ 120.976600][T14663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4259'. [ 120.998798][T14663] bond1: entered promiscuous mode [ 121.001602][T14663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.359519][T14700] netlink: 'syz.0.4277': attribute type 1 has an invalid length. [ 121.440675][T14708] 9pnet_fd: p9_fd_create_tcp (14708): problem connecting socket to 127.0.0.1 [ 121.801184][ T1107] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 121.804049][ T1107] ata1: failed to read log page 10h (errno=-5) [ 121.806639][ T1107] ata1.00: exception Emask 0x1 SAct 0x2 SErr 0x0 action 0x0 [ 121.810187][ T1107] ata1.00: irq_stat 0x40000000 [ 121.812213][ T1107] ata1.00: failed command: WRITE FPDMA QUEUED [ 121.814769][ T1107] ata1.00: cmd 61/18:08:6e:09:10/00:00:00:00:00/40 tag 1 ncq dma 12288 out [ 121.814769][ T1107] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 121.822098][ T1107] ata1.00: status: { DRDY } [ 121.824974][ T1107] ata1.00: configured for UDMA/100 [ 121.827419][ T1107] ata1: EH complete [ 121.903216][T14760] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 122.225703][T14810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4331'. [ 122.254929][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4333'. [ 122.258847][T14814] netlink: 50 bytes leftover after parsing attributes in process `syz.2.4333'. [ 122.262424][T14814] netlink: 50 bytes leftover after parsing attributes in process `syz.2.4333'. [ 122.266122][T14817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4335'. [ 122.415829][T14836] netlink: 'syz.2.4344': attribute type 28 has an invalid length. [ 122.457793][T14840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4347'. [ 122.461074][T14840] netlink: 'syz.0.4347': attribute type 1 has an invalid length. [ 122.490507][T14844] kAFS: unable to lookup cell 'mSjQ=ȠA4Z1ˡ8' [ 122.590087][ T9] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 122.754884][ T9] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 122.758246][ T9] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 122.761508][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 122.765158][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 122.769037][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.773607][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 122.778364][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 122.783149][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 122.792312][ T9] usb 6-1: string descriptor 0 read error: -22 [ 122.795365][ T9] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 122.799142][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.804684][ T9] usb 6-1: config 0 descriptor?? [ 122.808223][T14827] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.813409][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 122.815957][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 122.823333][ T9] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input10 [ 123.027079][ C3] usb_acecad 6-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -1 [ 123.080175][T14874] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4363'. [ 123.089466][ T9] usb 6-1: USB disconnect, device number 6 [ 123.126382][T14879] xt_TPROXY: Can be used only with -p tcp or -p udp [ 123.236825][T14899] netlink: 'syz.3.4374': attribute type 28 has an invalid length. [ 123.523778][T14940] binder: 14939:14940 ioctl 80489439 0 returned -22 [ 123.630747][T14956] xt_hashlimit: invalid interval [ 123.783425][T14987] netlink: 'syz.2.4418': attribute type 21 has an invalid length. [ 123.911007][T15000] netlink: 'syz.1.4424': attribute type 1 has an invalid length. [ 123.944908][T15004] netlink: 'syz.1.4427': attribute type 7 has an invalid length. [ 124.141878][T15043] __nla_validate_parse: 5 callbacks suppressed [ 124.141895][T15043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4446'. [ 124.187101][T15052] tmpfs: Bad value for 'mpol' [ 124.214140][T15059] nbd: couldn't find a device at index -1605786504 [ 124.241946][T15067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4458'. [ 124.539386][ T40] kauditd_printk_skb: 21999 callbacks suppressed [ 124.539398][ T40] audit: type=1326 audit(2000001064.916:22037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15120 comm="syz.3.4485" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 124.548418][ T40] audit: type=1326 audit(2000001064.916:22038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15120 comm="syz.3.4485" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 124.556263][ T40] audit: type=1326 audit(2000001064.916:22039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15120 comm="syz.3.4485" exe="/syz-executor" sig=0 arch=40000003 syscall=447 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 124.563235][ T40] audit: type=1326 audit(2000001064.916:22040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15120 comm="syz.3.4485" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 124.569992][ T40] audit: type=1326 audit(2000001064.916:22041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15120 comm="syz.3.4485" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 124.586116][T15129] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4489'. [ 124.686334][ T29] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 124.697151][T15151] program syz.2.4500 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.843560][ T29] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 124.846355][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.849086][ T29] usb 6-1: Product: syz [ 124.850401][ T29] usb 6-1: Manufacturer: syz [ 124.851864][ T29] usb 6-1: SerialNumber: syz [ 124.856950][ T29] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 124.880685][ T29] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 124.969188][T15204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4526'. [ 124.972138][T15204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4526'. [ 125.098882][ T53] usb 6-1: USB disconnect, device number 7 [ 125.125211][T15230] openvswitch: netlink: Flow key attribute not present in set flow. [ 125.266815][T15259] netlink: 'syz.0.4553': attribute type 1 has an invalid length. [ 125.269296][T15259] netlink: 'syz.0.4553': attribute type 3 has an invalid length. [ 125.271719][T15259] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4553'. [ 125.291035][T15262] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 125.294570][T15262] overlayfs: missing 'lowerdir' [ 125.489716][ T40] audit: type=1326 audit(2000001065.913:22042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15281 comm="syz.3.4564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 125.505409][ T40] audit: type=1326 audit(2000001065.913:22043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15281 comm="syz.3.4564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 125.511751][ T40] audit: type=1326 audit(2000001065.913:22044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15281 comm="syz.3.4564" exe="/syz-executor" sig=0 arch=40000003 syscall=165 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 125.518398][ T40] audit: type=1326 audit(2000001065.913:22045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15281 comm="syz.3.4564" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 125.876601][ T29] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 125.878882][ T29] ath9k_htc: Failed to initialize the device [ 125.880976][ T53] usb 6-1: ath9k_htc: USB layer deinitialized [ 126.024498][T15315] xt_policy: neither incoming nor outgoing policy selected [ 126.026544][T15318] xt_hashlimit: Unknown mode mask 368, kernel too old? [ 126.069047][T15322] syz.2.4583: attempt to access beyond end of device [ 126.069047][T15322] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 126.073720][T15322] XFS (nbd2): SB validate failed with error -5. [ 126.211994][T15353] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4596'. [ 126.273633][T15365] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 126.372849][T15375] netlink: 'syz.3.4607': attribute type 4 has an invalid length. [ 126.404984][T15382] sctp: [Deprecated]: syz.2.4611 (pid 15382) Use of int in maxseg socket option. [ 126.404984][T15382] Use struct sctp_assoc_value instead [ 126.413390][T15385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4612'. [ 126.416149][T15385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4612'. [ 126.465386][T15395] overlayfs: conflicting options: userxattr,redirect_dir=on [ 126.469729][T15399] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 126.510978][T15407] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4623'. [ 126.578233][T15423] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 126.629416][T15433] vxcan3: entered promiscuous mode [ 126.631063][T15433] vxcan3: entered allmulticast mode [ 126.674537][T15442] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 126.762931][ T6206] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 126.925989][T15489] xt_CT: No such helper "syz1" [ 126.934309][ T6206] usb 6-1: Using ep0 maxpacket: 32 [ 126.937251][ T6206] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 126.939746][ T6206] usb 6-1: config 0 has no interface number 0 [ 126.941621][ T6206] usb 6-1: config 0 interface 12 has no altsetting 0 [ 126.955332][ T6206] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 126.959887][ T6206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.962349][ T6206] usb 6-1: Product: syz [ 126.964112][ T6206] usb 6-1: Manufacturer: syz [ 126.965577][ T6206] usb 6-1: SerialNumber: syz [ 126.968704][ T6206] usb 6-1: config 0 descriptor?? [ 126.971686][ T6206] f81534 6-1:0.12: required endpoints missing [ 127.173974][ T53] usb 6-1: USB disconnect, device number 8 [ 127.174274][ T6137] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 127.274233][T15554] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 127.353011][T15564] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 127.666941][T15604] xt_connbytes: Forcing CT accounting to be enabled [ 127.677251][ T6206] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.853826][ T6206] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 127.858563][ T6206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.862040][ T6206] usb 5-1: Product: syz [ 127.864618][ T6206] usb 5-1: Manufacturer: syz [ 127.867122][ T6206] usb 5-1: SerialNumber: syz [ 127.886545][ T6206] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 127.907483][ T24] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 128.082156][T15638] netlink: 'syz.3.4738': attribute type 2 has an invalid length. [ 128.174709][T15646] kAFS: Can only specify source 'none' with -o dyn [ 128.297511][ T1333] usb 5-1: USB disconnect, device number 6 [ 128.474279][T15681] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 128.527453][T15687] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 128.584818][T15697] xt_TPROXY: Can be used only with -p tcp or -p udp [ 128.610185][T15603] comedi comedi3: reset error (fatal) [ 128.821578][T15743] NILFS (nbd3): device size too small [ 128.925062][ T24] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 128.928766][ T24] ath9k_htc: Failed to initialize the device [ 128.934514][ T1333] usb 5-1: ath9k_htc: USB layer deinitialized [ 129.059829][T15789] netlink: 'syz.2.4813': attribute type 10 has an invalid length. [ 129.063070][T15789] hsr_slave_0: left promiscuous mode [ 129.065246][T15789] hsr_slave_1: left promiscuous mode [ 129.161339][T15805] __nla_validate_parse: 6 callbacks suppressed [ 129.161355][T15805] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4821'. [ 129.167362][T15805] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 129.239520][T15825] nfs: Deprecated parameter 'nointr' [ 129.388702][T15865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4850'. [ 129.408854][T15871] program syz.1.4853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.478565][T15892] program syz.0.4863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.505108][T15900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4867'. [ 129.530238][T15907] IPv6: Can't replace route, no match found [ 129.590209][T15921] IPVS: length: 143 != 24 [ 129.616912][T15925] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4879'. [ 129.781032][T15942] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 129.786923][T15942] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 129.867791][ T1333] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 130.014970][ T1333] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.019411][ T1333] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 130.026070][ T1333] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.030112][ T1333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.036903][T15929] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 130.043769][ T1333] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.297722][ T1333] usb 6-1: USB disconnect, device number 9 [ 130.344655][T16002] bridge4: entered promiscuous mode [ 130.448872][T16016] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4925'. [ 130.457633][T16016] gretap0: entered promiscuous mode [ 130.635405][T16039] netlink: 'syz.0.4936': attribute type 1 has an invalid length. [ 130.711881][T16049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4941'. [ 130.932021][T16083] netlink: 'syz.0.4958': attribute type 11 has an invalid length. [ 130.936537][T16083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4958'. [ 130.982096][T16092] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 131.068403][ T6137] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 131.077060][ T6137] Bluetooth: hci3: Injecting HCI hardware error event [ 131.083773][T16109] netlink: 'syz.0.4971': attribute type 17 has an invalid length. [ 131.089718][T16109] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4971'. [ 131.094566][T16109] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 131.101458][T16113] netlink: 'syz.3.4972': attribute type 21 has an invalid length. [ 131.103990][T16113] netlink: 'syz.3.4972': attribute type 1 has an invalid length. [ 131.106513][T16113] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4972'. [ 131.297136][T16142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.300534][T16146] netlink: 'syz.3.4989': attribute type 10 has an invalid length. [ 131.308379][T16146] macvlan0: entered promiscuous mode [ 131.315392][T16146] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 131.397285][T16156] netdevsim netdevsim1: Direct firmware load for . [ 131.397285][T16156] failed with error -2 [ 131.401293][T16156] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 131.401293][T16156] [ 131.416154][T16158] netlink: 'syz.3.4995': attribute type 8 has an invalid length. [ 131.809306][T16192] netlink: 'syz.3.5012': attribute type 5 has an invalid length. [ 131.822371][T16196] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 131.873565][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5016'. [ 131.992230][T16215] openvswitch: : Dropping previously announced user features [ 132.136039][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 132.215203][T16237] tc_dump_action: action bad kind [ 132.290551][ T29] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.294289][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.299200][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.302924][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.308448][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.314326][ T29] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 132.325367][ T29] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.329141][ T29] usb 5-1: Product: syz [ 132.331178][ T29] usb 5-1: Manufacturer: syz [ 132.341013][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 132.343217][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 132.359730][ T29] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 132.362248][ T29] cdc_wdm 5-1:1.0: Unknown control protocol [ 132.537776][T16207] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 132.546712][ T29] usb 5-1: USB disconnect, device number 7 [ 132.708503][T16297] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 132.730795][T16301] netlink: 'syz.1.5062': attribute type 1 has an invalid length. [ 132.978148][ T6137] Bluetooth: hci2: unexpected event for opcode 0x0405 [ 133.178049][T16356] overlayfs: empty lowerdir [ 133.197622][T16360] : renamed from hsr0 (while UP) [ 133.238094][T16365] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 133.321697][T16380] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 133.408298][T16391] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 133.808907][T16467] : entered promiscuous mode [ 133.862782][T16479] libceph: resolve '0.' (ret=-3): failed [ 134.016910][T16509] new mount options do not match the existing superblock, will be ignored [ 134.070608][T16520] dns_resolver: Unsupported content type (5) [ 134.115873][T16531] openvswitch: netlink: IP tunnel dst address not specified [ 134.232908][T16555] deleting an unspecified loop device is not supported. [ 134.360227][T16583] Cannot find add_set index 2 as target [ 134.378725][T16585] exFAT-fs (nbd0): mounting with "discard" option, but the device does not support discard [ 134.382027][T16585] syz.0.5204: attempt to access beyond end of device [ 134.382027][T16585] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 134.386305][T16585] exFAT-fs (nbd0): unable to read boot sector [ 134.388254][T16585] exFAT-fs (nbd0): failed to read boot sector [ 134.390184][T16585] exFAT-fs (nbd0): failed to recognize exfat type [ 134.467218][ T40] audit: type=1326 audit(2000001075.340:22046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.1.5213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 134.475759][ T40] audit: type=1326 audit(2000001075.340:22047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.1.5213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 134.485513][ T40] audit: type=1326 audit(2000001075.351:22048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.1.5213" exe="/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 134.494472][ T40] audit: type=1326 audit(2000001075.351:22049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.1.5213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 134.540765][T16613] binder: 16612:16613 ioctl c0046209 0 returned -22 [ 134.560477][T16617] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 134.576244][T16621] tmpfs: Bad value for 'mpol' [ 134.642810][ T6137] Bluetooth: hci0: command tx timeout [ 134.667260][T16636] validate_nla: 1 callbacks suppressed [ 134.667272][T16636] netlink: 'syz.3.5230': attribute type 1 has an invalid length. [ 134.672413][T16636] __nla_validate_parse: 3 callbacks suppressed [ 134.672422][T16636] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5230'. [ 134.752814][T16649] binder: 16648:16649 unknown command 128 [ 134.757933][T16649] binder: 16648:16649 ioctl c0306201 80000440 returned -22 [ 134.833269][T16667] comedi comedi3: dt2814: I/O port conflict (0xcf7,2) [ 135.025098][T16700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.104758][T16711] No such timeout policy "syz1" [ 135.108760][ T40] audit: type=1400 audit(2000001076.012:22050): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A06 pid=16713 comm="syz.3.5268" [ 135.412122][T16751] bond0: entered promiscuous mode [ 135.414421][T16751] bond_slave_0: entered promiscuous mode [ 135.417540][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.420360][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.428259][T16751] bond_slave_1: entered promiscuous mode [ 135.431705][T16751] bridge0: entered promiscuous mode [ 135.434637][T16751] bond0: entered allmulticast mode [ 135.437364][T16751] bond_slave_0: entered allmulticast mode [ 135.440649][T16751] bond_slave_1: entered allmulticast mode [ 135.443112][T16751] bridge0: entered allmulticast mode [ 136.134539][T16811] tmpfs: Bad value for 'mpol' [ 136.137516][T16812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5310'. [ 136.353434][T16844] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 136.418901][T16851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5329'. [ 136.429151][T16856] program syz.3.5331 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.433490][T16851] : entered promiscuous mode [ 136.703781][T16893] netlink: 'syz.1.5348': attribute type 3 has an invalid length. [ 136.709398][T16893] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5348'. [ 136.856531][T16899] syz.2.5352: page allocation failure: order:10, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 136.862570][T16899] CPU: 2 UID: 0 PID: 16899 Comm: syz.2.5352 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 136.862599][T16899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.862611][T16899] Call Trace: [ 136.862617][T16899] [ 136.862624][T16899] dump_stack_lvl+0x16c/0x1f0 [ 136.862657][T16899] warn_alloc+0x248/0x3a0 [ 136.862684][T16899] ? __pfx_warn_alloc+0x10/0x10 [ 136.862709][T16899] ? psi_memstall_leave+0x1e6/0x2d0 [ 136.862733][T16899] ? __alloc_pages_direct_compact+0x466/0x580 [ 136.862761][T16899] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 136.862787][T16899] ? psi_memstall_leave+0x1e1/0x2d0 [ 136.862809][T16899] ? psi_memstall_leave+0x1e6/0x2d0 [ 136.862835][T16899] __alloc_frozen_pages_noprof+0xea2/0x23f0 [ 136.862874][T16899] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 136.862914][T16899] ? __lock_acquire+0xb8a/0x1c90 [ 136.862942][T16899] ? kasan_quarantine_put+0x10a/0x240 [ 136.862972][T16899] ? comedi_compat_ioctl+0x3e9/0x910 [ 136.862995][T16899] __alloc_pages_noprof+0xb/0x1b0 [ 136.863021][T16899] ___kmalloc_large_node+0x84/0x1e0 [ 136.863046][T16899] ? comedi_compat_ioctl+0x3e9/0x910 [ 136.863074][T16899] __kmalloc_large_node_noprof+0x1c/0x70 [ 136.863099][T16899] __kmalloc_noprof.cold+0xc/0x61 [ 136.863132][T16899] comedi_compat_ioctl+0x3e9/0x910 [ 136.863155][T16899] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 136.863195][T16899] ? find_held_lock+0x2b/0x80 [ 136.863213][T16899] ? hook_file_ioctl_common+0x145/0x410 [ 136.863239][T16899] ? __fget_files+0x20e/0x3c0 [ 136.863263][T16899] ? __ia32_compat_sys_openat+0x120/0x210 [ 136.863289][T16899] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 136.863312][T16899] __ia32_compat_sys_ioctl+0x242/0x370 [ 136.863337][T16899] __do_fast_syscall_32+0x7c/0x3a0 [ 136.863368][T16899] do_fast_syscall_32+0x32/0x80 [ 136.863394][T16899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.863417][T16899] RIP: 0023:0xf7fc2579 [ 136.863431][T16899] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 136.863449][T16899] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 136.863468][T16899] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008008640b [ 136.863480][T16899] RDX: 0000000080113800 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.863491][T16899] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.863502][T16899] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 136.863513][T16899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.863537][T16899] [ 136.863543][T16899] Mem-Info: [ 136.988038][T16899] active_anon:2049 inactive_anon:1389 isolated_anon:25 [ 136.988038][T16899] active_file:5444 inactive_file:5606 isolated_file:0 [ 136.988038][T16899] unevictable:1743 dirty:195 writeback:0 [ 136.988038][T16899] slab_reclaimable:5511 slab_unreclaimable:55985 [ 136.988038][T16899] mapped:22560 shmem:1877 pagetables:1356 [ 136.988038][T16899] sec_pagetables:318 bounce:0 [ 136.988038][T16899] kernel_misc_reclaimable:0 [ 136.988038][T16899] free:96958 free_pcp:1468 free_cma:0 [ 137.008786][T16899] Node 0 active_anon:376kB inactive_anon:1224kB active_file:208kB inactive_file:236kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:292kB dirty:112kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8448kB pagetables:2384kB sec_pagetables:1164kB all_unreclaimable? no Balloon:0kB [ 137.024541][T16899] Node 1 active_anon:7896kB inactive_anon:4332kB active_file:21568kB inactive_file:22188kB unevictable:3436kB isolated(anon):100kB isolated(file):0kB mapped:89948kB dirty:668kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4492kB pagetables:3116kB sec_pagetables:108kB all_unreclaimable? no Balloon:0kB [ 137.039137][T16899] Node 0 DMA free:2284kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 137.051774][T16899] lowmem_reserve[]: 0 288 288 288 288 [ 137.054222][T16899] Node 0 DMA32 free:19592kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:864KB active_anon:308kB inactive_anon:1512kB active_file:468kB inactive_file:48kB unevictable:3536kB writepending:112kB present:1032196kB managed:295896kB mlocked:0kB bounce:0kB free_pcp:1504kB local_pcp:372kB free_cma:0kB [ 137.066019][T16931] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 137.068429][T16899] lowmem_reserve[]: 0 0 0 0 0 [ 137.077743][T16899] Node 1 DMA32 free:365272kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB free_highatomic:672KB active_anon:7896kB inactive_anon:4332kB active_file:21568kB inactive_file:22188kB unevictable:3436kB writepending:668kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:4828kB local_pcp:36kB free_cma:0kB [ 137.090402][T16899] lowmem_reserve[]: 0 0 0 0 0 [ 137.092074][T16899] Node 0 DMA: 22*4kB (U) 1*8kB (U) 8*16kB (UM) 6*32kB (UM) 1*64kB (M) 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2272kB [ 137.099400][T16899] Node 0 DMA32: 22*4kB (UME) 227*8kB (UME) 190*16kB (UMEH) 89*32kB (UMEH) 60*64kB (UME) 26*128kB (UME) 7*256kB (UE) 1*512kB (H) 2*1024kB (UM) 0*2048kB 0*4096kB = 19312kB [ 137.106525][T16899] Node 1 DMA32: 2823*4kB (UME) 1563*8kB (UME) 960*16kB (UME) 863*32kB (UMEH) 488*64kB (UMEH) 293*128kB (UME) 224*256kB (UME) 149*512kB (UME) 82*1024kB (UM) 6*2048kB (UM) 0*4096kB = 365396kB [ 137.113971][T16899] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 137.117756][T16899] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 137.121340][T16899] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 137.124994][T16899] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 137.128782][T16899] 13792 total pagecache pages [ 137.129100][T16935] ipt_ECN: cannot use operation on non-tcp rule [ 137.130627][T16899] 820 pages in swap cache [ 137.138651][T16899] Free swap = 98788kB [ 137.140731][T16899] Total swap = 124996kB [ 137.142699][T16899] 524155 pages RAM [ 137.144529][T16899] 0 pages HighMem/MovableOnly [ 137.149229][T16899] 209270 pages reserved [ 137.151045][T16899] 0 pages cma reserved [ 137.224249][T16945] Cannot find del_set index 3 as target [ 137.248763][T16953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5379'. [ 137.252563][T16953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5379'. [ 137.361372][T16965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.373475][T16965] bond0: (slave rose0): Enslaving as an active interface with an up link [ 137.377405][T16972] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.502505][T16984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5393'. [ 137.628560][T17004] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.879131][T17034] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 138.353773][T17101] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 138.412064][T17111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.471407][T17117] block device autoloading is deprecated and will be removed. [ 138.476062][T17117] syz.0.5454: attempt to access beyond end of device [ 138.476062][T17117] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 138.503900][T17123] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5456'. [ 138.552382][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5459'. [ 138.574068][T17133] SET target dimension over the limit! [ 138.746358][T17162] netlink: 'syz.3.5475': attribute type 2 has an invalid length. [ 138.996241][T17202] netlink: 'syz.2.5493': attribute type 1 has an invalid length. [ 138.999526][T17202] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5493'. [ 139.221901][T17234] netlink: 'syz.3.5511': attribute type 5 has an invalid length. [ 139.399663][T17263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.446667][T17273] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967293 > 32) [ 139.457865][T17277] netlink: 'syz.0.5532': attribute type 3 has an invalid length. [ 139.462794][T17277] netlink: 'syz.0.5532': attribute type 1 has an invalid length. [ 139.466273][T17277] __nla_validate_parse: 1 callbacks suppressed [ 139.466285][T17277] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5532'. [ 139.534214][ T6137] Bluetooth: hci2: unexpected event for opcode 0x0411 [ 139.547478][T17294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5540'. [ 139.629476][T17311] pim6reg: left allmulticast mode [ 139.673037][T17317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5552'. [ 139.734355][T17326] dvmrp0: entered allmulticast mode [ 139.761546][T17328] netlink: 'syz.2.5558': attribute type 5 has an invalid length. [ 139.943664][T17360] netlink: 'syz.1.5571': attribute type 11 has an invalid length. [ 139.999338][T17367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.001112][T17368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5575'. [ 140.122286][T17385] QAT: Invalid ioctl 21531 [ 140.125675][T17386] ebtables: wrong size: *len 120, entries_size 144, replsz 144 [ 140.290330][ T6083] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 140.370434][T17417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5599'. [ 140.432940][ T6083] usb 5-1: Using ep0 maxpacket: 8 [ 140.438151][ T6083] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 140.440957][ T6083] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 140.445363][ T6083] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.449005][ T6083] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.453247][ T6083] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 140.458418][ T6083] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 140.462337][ T6083] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 140.466648][ T6083] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.471533][ T6083] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.475638][ T6083] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 140.484675][ T6083] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 140.487053][ T6083] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 140.492622][ T6083] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.496196][ T6083] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.500088][ T6083] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 140.505892][ T6083] usb 5-1: string descriptor 0 read error: -22 [ 140.508090][ T6083] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 140.510956][ T6083] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.522566][ T6083] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 140.539675][T17439] gtp0: entered promiscuous mode [ 140.541875][T17439] gtp0: entered allmulticast mode [ 140.646322][ T40] audit: type=1800 audit(2000001081.828:22051): pid=17449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.5615" name="/newroot/1278/file0" dev="tmpfs" ino=6424 res=0 errno=0 [ 140.715619][ T9] usb 5-1: USB disconnect, device number 8 [ 140.934631][T17497] macsec0: entered promiscuous mode [ 140.937600][T17497] macsec0: entered allmulticast mode [ 140.939927][T17497] veth1_macvtap: entered allmulticast mode [ 141.041616][T17512] xt_limit: Overflow, try lower: 0/0 [ 141.187510][ T40] audit: type=1326 audit(2000001082.395:22052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17532 comm="syz.2.5656" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 141.199346][ T40] audit: type=1326 audit(2000001082.395:22053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17532 comm="syz.2.5656" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 141.219210][ T40] audit: type=1326 audit(2000001082.405:22054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17532 comm="syz.2.5656" exe="/syz-executor" sig=0 arch=40000003 syscall=249 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 141.231947][ T40] audit: type=1326 audit(2000001082.405:22055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17532 comm="syz.2.5656" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 141.240637][ T40] audit: type=1326 audit(2000001082.405:22056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17532 comm="syz.2.5656" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 141.669117][T17604] netlink: 'syz.3.5690': attribute type 46 has an invalid length. [ 141.715703][T17609] netlink: 'syz.2.5693': attribute type 3 has an invalid length. [ 141.719547][T17609] netlink: 'syz.2.5693': attribute type 3 has an invalid length. [ 141.723358][T17609] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5693'. [ 141.732022][T17613] : renamed from lo (while UP) [ 141.769369][T17615] syz.3.5696: attempt to access beyond end of device [ 141.769369][T17615] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 141.776570][T17615] (syz.3.5696,17615,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 141.779764][T17615] (syz.3.5696,17615,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 141.784023][T17615] (syz.3.5696,17615,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 141.789468][T17615] (syz.3.5696,17615,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 141.844721][T17625] netlink: 'syz.3.5701': attribute type 10 has an invalid length. [ 141.859456][T17625] bridge0: port 3(dummy0) entered disabled state [ 141.862593][T17625] dummy0: left allmulticast mode [ 141.864198][T17625] dummy0: left promiscuous mode [ 141.865859][T17625] bridge0: port 3(dummy0) entered disabled state [ 141.879014][T17625] team0: Port device dummy0 added [ 141.955297][T17639] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 142.270678][T17683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5729'. [ 142.359951][T17695] netlink: 532 bytes leftover after parsing attributes in process `syz.1.5735'. [ 142.379202][T17697] netlink: 'syz.2.5736': attribute type 11 has an invalid length. [ 142.382673][T17697] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5736'. [ 142.412511][T17701] netlink: 'syz.3.5738': attribute type 1 has an invalid length. [ 142.416192][T17701] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5738'. [ 142.634360][T17726] netlink: 'syz.2.5750': attribute type 10 has an invalid length. [ 142.641545][T17726] bridge0: port 3(dummy0) entered disabled state [ 142.645874][T17726] dummy0: left allmulticast mode [ 142.648159][T17726] dummy0: left promiscuous mode [ 142.650589][T17726] bridge0: port 3(dummy0) entered disabled state [ 142.660924][T17726] team0: Port device dummy0 added [ 142.714911][T17728] openvswitch: netlink: Actions may not be safe on all matching packets [ 143.320574][T17769] xt_recent: Unsupported userspace flags (000000fe) [ 143.494030][T17798] netlink: 'syz.3.5785': attribute type 11 has an invalid length. [ 143.682112][T17827] xt_socket: unknown flags 0x4 [ 143.728594][T17837] openvswitch: netlink: Tunnel attr 294 out of range max 16 [ 144.221067][T17900] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551615) [ 144.277868][T17910] netlink: 'syz.1.5840': attribute type 1 has an invalid length. [ 144.284836][T17910] __nla_validate_parse: 4 callbacks suppressed [ 144.284848][T17910] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5840'. [ 144.407862][T17929] netlink: 'syz.0.5850': attribute type 1 has an invalid length. [ 144.468377][ C3] ata1: illegal qc_active transition (00000000->00000800) [ 144.522790][T17942] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.790382][ T1107] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 144.796364][ T1107] ata1.00: configured for UDMA/100 [ 144.824903][T17955] CIFS: VFS: Malformed UNC in devname [ 144.887854][T17966] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 145.076334][T17987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5879'. [ 145.395003][ T29] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 145.424141][ T40] audit: type=1800 audit(2000000003.369:22057): pid=18034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5902" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 145.519469][T18046] autofs4:pid:18046:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.32), cmd(0xc018937e) [ 145.525308][T18046] autofs4:pid:18046:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 145.555532][ T29] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 145.559518][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.563674][ T29] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 145.567735][ T29] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.579366][ T29] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 145.583187][ T29] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 145.586721][ T29] usb 7-1: Product: syz [ 145.588497][ T29] usb 7-1: Manufacturer: syz [ 145.604800][ T29] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 145.629943][T18061] netlink: 'syz.0.5914': attribute type 3 has an invalid length. [ 145.636300][T18061] netlink: 236 bytes leftover after parsing attributes in process `syz.0.5914'. [ 145.753136][T18076] random: crng reseeded on system resumption [ 145.795038][T18001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.803198][T18001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.811895][ T54] usb 7-1: USB disconnect, device number 6 [ 146.192545][T18128] dlm: plock device version mismatch: kernel (1.2.0), user (1.230.0) [ 146.355700][T18154] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5958'. [ 146.684918][T18217] xt_TCPMSS: Only works on TCP SYN packets [ 146.780696][T18236] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 146.783671][T18236] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 146.788481][T18236] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 146.928433][ T34] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 147.072933][ T34] usb 6-1: unable to get BOS descriptor or descriptor too short [ 147.081144][ T34] usb 6-1: config 1 interface 0 altsetting 170 bulk endpoint 0x82 has invalid maxpacket 16 [ 147.084818][ T34] usb 6-1: config 1 interface 0 has no altsetting 0 [ 147.089462][ T34] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.099755][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.102194][ T34] usb 6-1: Product: syz [ 147.103479][ T34] usb 6-1: Manufacturer: syz [ 147.104911][ T34] usb 6-1: SerialNumber: syz [ 147.110727][T18224] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 147.328663][ T34] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 147.333477][ T34] usb 6-1: USB disconnect, device number 10 [ 147.667074][T18279] ipt_REJECT: TCP_RESET invalid for non-tcp [ 147.678292][T18281] openvswitch: netlink: Message has 24 unknown bytes. [ 147.680858][T18281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.764936][T18289] netlink: 'syz.3.6024': attribute type 1 has an invalid length. [ 147.796792][T18293] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 147.801898][T18293] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 147.807482][T18293] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 147.847713][T18299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6029'. [ 147.986947][T18314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6036'. [ 148.006132][T18316] netlink: 'syz.1.6037': attribute type 5 has an invalid length. [ 148.009628][T18316] netlink: 'syz.1.6037': attribute type 7 has an invalid length. [ 148.446148][T18353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.451999][T18353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.459520][T18353] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 148.463585][T18353] bridge0: port 3(dummy0) entered disabled state [ 148.465676][T18353] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.469488][T18353] bond0 (unregistering): Released all slaves [ 148.633533][T18377] AppArmor: change_hat: Invalid input '~' [ 148.638131][T18379] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6066'. [ 148.705381][T18389] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6070'. [ 148.977574][T18423] lo speed is unknown, defaulting to 1000 [ 148.981069][T18423] lo speed is unknown, defaulting to 1000 [ 148.984934][T18423] lo speed is unknown, defaulting to 1000 [ 149.142255][T18423] infiniband syz0: set active [ 149.145107][ T6206] lo speed is unknown, defaulting to 1000 [ 149.147795][T18423] infiniband syz0: added lo [ 149.177434][T18423] RDS/IB: syz0: added [ 149.179412][T18423] smc: adding ib device syz0 with port count 1 [ 149.181508][T18423] smc: ib device syz0 port 1 has pnetid [ 149.189341][ T29] lo speed is unknown, defaulting to 1000 [ 149.193515][T18423] lo speed is unknown, defaulting to 1000 [ 149.306308][T18423] lo speed is unknown, defaulting to 1000 [ 149.428317][T18423] lo speed is unknown, defaulting to 1000 [ 149.551487][T18482] netlink: 'syz.2.6116': attribute type 1 has an invalid length. [ 149.559459][T18423] lo speed is unknown, defaulting to 1000 [ 149.664002][T18496] nft_compat: unsupported protocol 0 [ 149.774435][T18516] ip6tnl1: entered promiscuous mode [ 149.776661][T18516] ip6tnl1: entered allmulticast mode [ 149.780951][T18518] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 149.784997][T18518] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 149.789858][T18518] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 149.791581][T18520] No source specified [ 150.127096][T18564] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6157'. [ 150.252095][T18585] netlink: 'syz.1.6163': attribute type 1 has an invalid length. [ 150.255523][T18585] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6163'. [ 150.606721][T18611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6175'. [ 150.649883][T18617] vivid-007: disconnect [ 150.654993][T18616] vivid-007: reconnect [ 150.685943][T18622] openvswitch: netlink: IP tunnel dst address not specified [ 150.726089][T18628] netlink: 'syz.1.6182': attribute type 21 has an invalid length. [ 150.738696][T18628] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6182'. [ 150.742446][T18628] netlink: 'syz.1.6182': attribute type 5 has an invalid length. [ 150.745756][T18628] netlink: 'syz.1.6182': attribute type 6 has an invalid length. [ 150.756380][T18628] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6182'. [ 151.124725][T18657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6193'. [ 151.129049][T18657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6193'. [ 151.195211][T18661] Invalid option length (1048180) for dns_resolver key [ 151.392565][T18677] syz.0.6206: attempt to access beyond end of device [ 151.392565][T18677] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 151.405791][T18663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.413989][T18663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.419193][T18681] netlink: 'syz.1.6208': attribute type 11 has an invalid length. [ 151.429063][T18663] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 151.439069][T18663] bond0 (unregistering): Released all slaves [ 151.537692][T18691] mkiss: ax0: crc mode is auto. [ 151.675557][T18707] PM: Enabling pm_trace changes system date and time during resume. [ 151.675557][T18707] PM: Correct system time has to be restored manually after resume. [ 151.726699][T18714] netlink: 'syz.0.6224': attribute type 1 has an invalid length. [ 151.730166][T18714] netlink: 'syz.0.6224': attribute type 2 has an invalid length. [ 151.745532][T18717] netlink: 'syz.2.6226': attribute type 6 has an invalid length. [ 152.048066][T18762] [U]  [ 152.075326][ T40] audit: type=1326 audit(2000000010.361:22058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18765 comm="syz.2.6252" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 152.085178][T18769] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 152.088631][ T40] audit: type=1326 audit(2000000010.372:22059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18765 comm="syz.2.6252" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 152.088748][T18769] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 152.100811][ T40] audit: type=1326 audit(2000000010.372:22060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18765 comm="syz.2.6252" exe="/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 152.116210][ T40] audit: type=1326 audit(2000000010.372:22061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18765 comm="syz.2.6252" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 152.125800][ T40] audit: type=1326 audit(2000000010.372:22062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18765 comm="syz.2.6252" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x7ffc0000 [ 152.178605][T18781] snd_dummy snd_dummy.0: control 1:0:0:syz0:-3 is already present [ 152.349927][T18803] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 152.411206][T18815] netlink: 'syz.3.6274': attribute type 11 has an invalid length. [ 152.414850][T18815] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6274'. [ 152.438398][T18818] random: crng reseeded on system resumption [ 152.462508][T18823] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6278'. [ 152.595049][T18847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6290'. [ 152.985848][T18905] netlink: 'syz.1.6319': attribute type 3 has an invalid length. [ 153.031983][T18909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.750130][T19026] xt_SECMARK: invalid mode: 0 [ 153.813308][T19037] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 153.861771][T19044] netlink: 'syz.1.6383': attribute type 1 has an invalid length. [ 154.079996][T19081] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 154.330478][T19111] bond0: (slave gre0): Error: Device can not be enslaved while up [ 154.411072][T19115] netlink: 'syz.2.6420': attribute type 10 has an invalid length. [ 154.434120][T19115] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.444487][T19115] bridge_slave_1: left allmulticast mode [ 154.446947][T19115] bridge_slave_1: left promiscuous mode [ 154.449471][T19115] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.468637][T19115] bridge_slave_1: entered promiscuous mode [ 154.471375][T19115] bridge_slave_1: entered allmulticast mode [ 154.481089][T19115] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 154.997338][T19165] netlink: 'syz.3.6444': attribute type 15 has an invalid length. [ 155.000519][T19165] __nla_validate_parse: 6 callbacks suppressed [ 155.000531][T19165] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6444'. [ 155.101244][T19077] syz.0.6399: vmalloc error: size 655695872, failed to allocated page array size 1280656, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 155.108721][T19077] CPU: 0 UID: 0 PID: 19077 Comm: syz.0.6399 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 155.108749][T19077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.108760][T19077] Call Trace: [ 155.108766][T19077] [ 155.108773][T19077] dump_stack_lvl+0x16c/0x1f0 [ 155.108806][T19077] warn_alloc+0x248/0x3a0 [ 155.108835][T19077] ? __pfx_warn_alloc+0x10/0x10 [ 155.108872][T19077] ? drm_property_create_blob+0x74/0x330 [ 155.108897][T19077] ? __vmalloc_node_noprof+0xad/0xf0 [ 155.108925][T19077] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 155.108958][T19077] ? drm_property_create_blob+0x74/0x330 [ 155.108990][T19077] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 155.109014][T19077] ? __alloc_pages_noprof+0xb/0x1b0 [ 155.109040][T19077] ? ___kmalloc_large_node+0x84/0x1e0 [ 155.109067][T19077] __kvmalloc_node_noprof+0x30a/0x620 [ 155.109093][T19077] ? drm_property_create_blob+0x74/0x330 [ 155.109120][T19077] ? drm_property_create_blob+0x74/0x330 [ 155.109158][T19077] ? drm_property_create_blob+0x74/0x330 [ 155.109182][T19077] drm_property_create_blob+0x74/0x330 [ 155.109207][T19077] ? find_held_lock+0x2b/0x80 [ 155.109229][T19077] drm_mode_createblob_ioctl+0x10d/0x450 [ 155.109258][T19077] drm_ioctl_kernel+0x1f1/0x3e0 [ 155.109286][T19077] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 155.109314][T19077] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 155.109347][T19077] drm_ioctl+0x5c9/0xc30 [ 155.109378][T19077] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 155.109405][T19077] ? __pfx_drm_ioctl+0x10/0x10 [ 155.109450][T19077] drm_compat_ioctl+0x327/0x460 [ 155.109473][T19077] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 155.109494][T19077] __ia32_compat_sys_ioctl+0x242/0x370 [ 155.109521][T19077] __do_fast_syscall_32+0x7c/0x3a0 [ 155.109550][T19077] do_fast_syscall_32+0x32/0x80 [ 155.109577][T19077] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.109599][T19077] RIP: 0023:0xf7f12579 [ 155.109614][T19077] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 155.109632][T19077] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 155.109650][T19077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01064bd [ 155.109662][T19077] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.109673][T19077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.109711][T19077] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 155.109723][T19077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.109747][T19077] [ 155.109754][T19077] Mem-Info: [ 155.209961][T19077] active_anon:524 inactive_anon:2462 isolated_anon:0 [ 155.209961][T19077] active_file:884 inactive_file:6637 isolated_file:0 [ 155.209961][T19077] unevictable:1768 dirty:327 writeback:0 [ 155.209961][T19077] slab_reclaimable:5731 slab_unreclaimable:59668 [ 155.209961][T19077] mapped:22638 shmem:1807 pagetables:1354 [ 155.209961][T19077] sec_pagetables:322 bounce:0 [ 155.209961][T19077] kernel_misc_reclaimable:0 [ 155.209961][T19077] free:72886 free_pcp:3827 free_cma:0 [ 155.228806][T19077] Node 0 active_anon:212kB inactive_anon:208kB active_file:8kB inactive_file:16kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:12kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8236kB pagetables:1524kB sec_pagetables:1176kB all_unreclaimable? yes Balloon:0kB [ 155.240831][T19077] Node 1 active_anon:1920kB inactive_anon:9604kB active_file:3528kB inactive_file:26532kB unevictable:3536kB isolated(anon):28kB isolated(file):0kB mapped:90548kB dirty:1388kB writeback:0kB shmem:3692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4672kB pagetables:4032kB sec_pagetables:112kB all_unreclaimable? no Balloon:0kB [ 155.254995][T19077] Node 0 DMA free:2084kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:148kB local_pcp:128kB free_cma:0kB [ 155.266608][T19077] lowmem_reserve[]: 0 288 288 288 288 [ 155.268963][T19077] Node 0 DMA32 free:17228kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:864KB active_anon:212kB inactive_anon:208kB active_file:8kB inactive_file:16kB unevictable:3536kB writepending:12kB present:1032196kB managed:295896kB mlocked:0kB bounce:0kB free_pcp:5852kB local_pcp:2720kB free_cma:0kB [ 155.283923][T19077] lowmem_reserve[]: 0 0 0 0 0 [ 155.286018][T19077] Node 1 DMA32 free:271564kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB free_highatomic:672KB active_anon:2020kB inactive_anon:9604kB active_file:3528kB inactive_file:26532kB unevictable:3536kB writepending:1388kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:9192kB local_pcp:1116kB free_cma:0kB [ 155.307025][T19077] lowmem_reserve[]: 0 0 0 0 0 [ 155.309142][T19077] Node 0 DMA: 0*4kB 2*8kB (UM) 3*16kB (U) 5*32kB (UM) 1*64kB (M) 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2080kB [ 155.313920][T19202] netlink: 'syz.2.6461': attribute type 2 has an invalid length. [ 155.318632][T19077] Node 0 DMA32: [ 155.318762][T19202] netlink: 'syz.2.6461': attribute type 1 has an invalid length. [ 155.326413][T19077] 2*4kB (ME) 38*8kB (UME) 84*16kB (UMEH) 89*32kB (UMEH) 72*64kB (UME) 29*128kB (UME) 13*256kB (UME) 2*512kB (MH) 0*1024kB 0*2048kB 0*4096kB = 17176kB [ 155.333165][T19077] Node 1 DMA32: 245*4kB (ME) 221*8kB (ME) 124*16kB (UME) 118*32kB (UMEH) 84*64kB (UMEH) 93*128kB (UME) 231*256kB (UME) 154*512kB (UME) 98*1024kB (UM) 4*2048kB (UM) 0*4096kB = 272316kB [ 155.343518][T19077] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 155.347551][T19077] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 155.352003][T19077] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 155.355962][T19077] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 155.361825][T19077] 9984 total pagecache pages [ 155.363830][T19077] 686 pages in swap cache [ 155.365728][T19077] Free swap = 97088kB [ 155.367539][T19077] Total swap = 124996kB [ 155.369933][T19077] 524155 pages RAM [ 155.371886][T19077] 0 pages HighMem/MovableOnly [ 155.373902][T19077] 209270 pages reserved [ 155.375639][T19077] 0 pages cma reserved [ 155.467974][T19222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6472'. [ 155.713649][T19249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6485'. [ 155.808386][T19262] netlink: 'syz.0.6492': attribute type 1 has an invalid length. [ 155.811630][T19262] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6492'. [ 155.922637][T19274] kernel profiling enabled (shift: 7) [ 156.033531][T19281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6501'. [ 156.040324][T19281] netlink: 472 bytes leftover after parsing attributes in process `syz.2.6501'. [ 156.215175][T19297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.264816][T19303] netlink: 'syz.2.6512': attribute type 7 has an invalid length. [ 156.267960][T19303] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6512'. [ 156.554349][T19321] netlink: 'syz.3.6521': attribute type 7 has an invalid length. [ 156.630341][T19327] netlink: 'syz.3.6524': attribute type 7 has an invalid length. [ 156.633468][T19327] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6524'. [ 156.774886][T19341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6531'. [ 156.871718][T19353] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6537'. [ 156.974765][T19361] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 156.977254][T19361] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 157.058344][T19377] netlink: 'syz.1.6548': attribute type 3 has an invalid length. [ 157.094447][T19381] netlink: 'syz.0.6550': attribute type 1 has an invalid length. [ 157.512081][T19434] syz.0.6575: attempt to access beyond end of device [ 157.512081][T19434] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 157.573125][ T40] audit: type=1326 audit(2000000016.124:22063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19440 comm="syz.3.6578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 157.582690][ T40] audit: type=1326 audit(2000000016.135:22064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19440 comm="syz.3.6578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 157.593900][ T40] audit: type=1326 audit(2000000016.145:22065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19440 comm="syz.3.6578" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 157.616222][ T40] audit: type=1326 audit(2000000016.145:22066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19440 comm="syz.3.6578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 157.625342][ T40] audit: type=1326 audit(2000000016.145:22067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19440 comm="syz.3.6578" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 158.853906][T19607] libceph: resolve '400' (ret=-3): failed [ 159.053729][T19638] wg1: entered promiscuous mode [ 159.056127][T19638] wg1: entered allmulticast mode [ 159.208829][T19657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.390563][T19683] validate_nla: 4 callbacks suppressed [ 159.390576][T19683] netlink: 'syz.2.6691': attribute type 32 has an invalid length. [ 159.394693][T19683] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 159.450665][T19692] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 159.485871][T19694] usb usb9: usbfs: process 19694 (syz.2.6696) did not claim interface 0 before use [ 159.496300][T19698] bridge3: entered promiscuous mode [ 159.497991][T19698] bridge3: entered allmulticast mode [ 159.527977][T19700] veth3: entered promiscuous mode [ 159.529990][T19700] veth3: entered allmulticast mode [ 159.561280][T19708] netlink: 'syz.3.6703': attribute type 2 has an invalid length. [ 159.565515][T19710] SET target dimension over the limit! [ 159.663200][ T40] audit: type=1400 audit(2000000018.319:22068): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=19724 comm="syz.0.6712" [ 159.810317][T19754] dlm: no locking on control device [ 159.847684][T19758] __nla_validate_parse: 6 callbacks suppressed [ 159.847702][T19758] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.6724'. [ 159.930453][T19773] xt_time: unknown flags 0xf0 [ 159.952045][T19775] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 159.963297][T19777] CIFS mount error: No usable UNC path provided in device string! [ 159.963297][T19777] [ 159.967959][T19777] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 159.981041][T19779] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6734'. [ 159.998005][T19783] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6736'. [ 160.052429][T19791] xt_TCPMSS: Only works on TCP SYN packets [ 160.119266][T19801] bridge5: entered promiscuous mode [ 160.185914][T19809] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 160.306962][T19831] tmpfs: Bad value for 'mpol' [ 160.359390][T19839] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6762'. [ 160.452324][T19851] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6770'. [ 160.591606][T19878] netlink: 'syz.3.6783': attribute type 2 has an invalid length. [ 160.594731][T19878] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6783'. [ 160.669524][T19892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6791'. [ 160.761188][T19908] QAT: failed to copy from user. [ 160.773216][T19910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.948186][T19943] program syz.2.6815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.383745][T20009] ata1.00: invalid multi_count 128 ignored [ 161.412546][T20012] netlink: 'syz.3.6848': attribute type 1 has an invalid length. [ 161.415796][T20012] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6848'. [ 161.560101][T20034] overlay: Bad value for 'workdir' [ 161.645935][T20049] CIFS mount error: No usable UNC path provided in device string! [ 161.645935][T20049] [ 161.650697][T20049] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 161.704802][T20061] tmpfs: Bad value for 'mpol' [ 161.787646][T20075] team0: entered promiscuous mode [ 161.789963][T20075] team_slave_0: entered promiscuous mode [ 161.792498][T20075] team_slave_1: entered promiscuous mode [ 161.795031][T20075] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 161.831386][T20081] netlink: 'syz.2.6883': attribute type 1 has an invalid length. [ 161.963073][T20099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6892'. [ 162.172588][T20136] mac80211_hwsim hwsim5 : renamed from wlan1 (while UP) [ 162.418360][ T6206] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 162.473410][T20173] netlink: zone id is out of range [ 162.475927][T20173] netlink: zone id is out of range [ 162.478059][T20173] netlink: zone id is out of range [ 162.480324][T20173] netlink: zone id is out of range [ 162.482452][T20173] netlink: zone id is out of range [ 162.486135][T20173] netlink: zone id is out of range [ 162.488332][T20173] netlink: zone id is out of range [ 162.542866][T20179] sp0: Synchronizing with TNC [ 162.589195][ T6206] usb 8-1: Using ep0 maxpacket: 32 [ 162.592804][ T6206] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 162.601064][ T6206] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 162.604844][ T6206] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.610577][ T6206] usb 8-1: Product: syz [ 162.612383][ T6206] usb 8-1: Manufacturer: syz [ 162.614329][ T6206] usb 8-1: SerialNumber: syz [ 162.627168][ T6206] usb 8-1: config 0 descriptor?? [ 162.630739][T20132] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 162.647058][ T6206] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input19 [ 162.673264][T20183] usb usb8: usbfs: process 20183 (syz.1.6931) did not claim interface 0 before use [ 162.925362][ T836] usb 8-1: USB disconnect, device number 6 [ 162.925451][ C2] usbtouchscreen 8-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 163.035254][T20219] binder: 20217:20219 ioctl c018620b 0 returned -14 [ 163.229244][T20236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6955'. [ 163.233195][T20236] netlink: 'syz.0.6955': attribute type 5 has an invalid length. [ 163.242164][T20236] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 163.247711][T20236] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 163.251297][T20236] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 163.255028][T20236] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 163.258729][T20236] geneve3: entered promiscuous mode [ 163.261197][T20236] geneve3: entered allmulticast mode [ 163.512454][T20273] Unknown options in mask 7 [ 163.714210][T20303] binder: BC_ATTEMPT_ACQUIRE not supported [ 163.716852][T20303] binder: 20302:20303 ioctl c0306201 800001c0 returned -22 [ 163.802439][T20319] nr0: entered promiscuous mode [ 163.830874][T20325] netlink: 'syz.0.6999': attribute type 1 has an invalid length. [ 163.905319][T20321] /dev/sr0: Can't open blockdev [ 163.933010][T20342] tmpfs: Bad value for 'mpol' [ 163.953271][T20347] netlink: 'syz.0.7009': attribute type 12 has an invalid length. [ 164.048041][T20366] QAT: failed to copy from user cfg_data. [ 164.055672][ T6134] Bluetooth: hci3: hardware error 0x00 [ 164.071275][ T1333] ================================================================== [ 164.074585][ T1333] BUG: KASAN: slab-use-after-free in __mutex_lock+0xa65/0xb90 [ 164.077992][ T1333] Read of size 8 at addr ffff888062b0f320 by task kworker/0:3/1333 [ 164.082429][ T1333] [ 164.083741][ T1333] CPU: 0 UID: 0 PID: 1333 Comm: kworker/0:3 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 164.083757][ T1333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.083765][ T1333] Workqueue: events l2cap_chan_timeout [ 164.083785][ T1333] Call Trace: [ 164.083789][ T1333] [ 164.083794][ T1333] dump_stack_lvl+0x116/0x1f0 [ 164.083813][ T1333] print_report+0xcd/0x680 [ 164.083824][ T1333] ? __virt_addr_valid+0x81/0x610 [ 164.083836][ T1333] ? __phys_addr+0xe8/0x180 [ 164.083848][ T1333] ? __mutex_lock+0xa65/0xb90 [ 164.083864][ T1333] kasan_report+0xe0/0x110 [ 164.083873][ T1333] ? __mutex_lock+0xa65/0xb90 [ 164.083890][ T1333] __mutex_lock+0xa65/0xb90 [ 164.083905][ T1333] ? add_lock_to_list+0x9d/0x130 [ 164.083919][ T1333] ? l2cap_chan_timeout+0x6d/0x310 [ 164.083935][ T1333] ? __pfx___mutex_lock+0x10/0x10 [ 164.083951][ T1333] ? debug_object_deactivate+0x1ec/0x3a0 [ 164.083966][ T1333] ? l2cap_chan_timeout+0x6d/0x310 [ 164.083980][ T1333] l2cap_chan_timeout+0x6d/0x310 [ 164.083996][ T1333] process_one_work+0x9cf/0x1b70 [ 164.084015][ T1333] ? __pfx_process_one_work+0x10/0x10 [ 164.084034][ T1333] ? assign_work+0x1a0/0x250 [ 164.084056][ T1333] worker_thread+0x6c8/0xf10 [ 164.084074][ T1333] ? __kthread_parkme+0x19e/0x250 [ 164.084088][ T1333] ? __pfx_worker_thread+0x10/0x10 [ 164.084104][ T1333] kthread+0x3c2/0x780 [ 164.084120][ T1333] ? __pfx_kthread+0x10/0x10 [ 164.084135][ T1333] ? rcu_is_watching+0x12/0xc0 [ 164.084147][ T1333] ? __pfx_kthread+0x10/0x10 [ 164.084162][ T1333] ret_from_fork+0x5d7/0x6f0 [ 164.084177][ T1333] ? __pfx_kthread+0x10/0x10 [ 164.084192][ T1333] ret_from_fork_asm+0x1a/0x30 [ 164.084207][ T1333] [ 164.084211][ T1333] [ 164.155411][ T1333] Allocated by task 15289: [ 164.157220][ T1333] kasan_save_stack+0x33/0x60 [ 164.159265][ T1333] kasan_save_track+0x14/0x30 [ 164.161285][ T1333] __kasan_kmalloc+0xaa/0xb0 [ 164.163184][ T1333] l2cap_conn_add.part.0+0x60/0xa60 [ 164.165263][ T1333] l2cap_chan_connect+0x15e5/0x2020 [ 164.167398][ T1333] l2cap_sock_connect+0x3b7/0x740 [ 164.169533][ T1333] kernel_connect+0x104/0x180 [ 164.171573][ T1333] rfcomm_dlc_open+0x821/0xaa0 [ 164.173546][ T1333] rfcomm_sock_connect+0x423/0x670 [ 164.175758][ T1333] __sys_connect_file+0x141/0x1a0 [ 164.177886][ T1333] __sys_connect+0x13b/0x160 [ 164.179854][ T1333] __ia32_sys_connect+0x71/0xb0 [ 164.181983][ T1333] __do_fast_syscall_32+0x7c/0x3a0 [ 164.184058][ T1333] do_fast_syscall_32+0x32/0x80 [ 164.186141][ T1333] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.188852][ T1333] [ 164.189907][ T1333] Freed by task 6134: [ 164.191674][ T1333] kasan_save_stack+0x33/0x60 [ 164.193702][ T1333] kasan_save_track+0x14/0x30 [ 164.195722][ T1333] kasan_save_free_info+0x3b/0x60 [ 164.197891][ T1333] __kasan_slab_free+0x51/0x70 [ 164.199918][ T1333] kfree+0x2b4/0x4d0 [ 164.201567][ T1333] l2cap_conn_del+0x59c/0x730 [ 164.203529][ T1333] l2cap_disconn_cfm+0x96/0xd0 [ 164.205587][ T1333] hci_conn_hash_flush+0x10b/0x260 [ 164.207780][ T1333] hci_dev_close_sync+0x602/0x11d0 [ 164.209978][ T1333] hci_dev_do_close+0x2e/0x90 [ 164.211954][ T1333] hci_error_reset+0xbf/0x320 [ 164.213979][ T1333] process_one_work+0x9cf/0x1b70 [ 164.216080][ T1333] worker_thread+0x6c8/0xf10 [ 164.218091][ T1333] kthread+0x3c2/0x780 [ 164.219826][ T1333] ret_from_fork+0x5d7/0x6f0 [ 164.221853][ T1333] ret_from_fork_asm+0x1a/0x30 [ 164.223894][ T1333] [ 164.224947][ T1333] The buggy address belongs to the object at ffff888062b0f000 [ 164.224947][ T1333] which belongs to the cache kmalloc-1k of size 1024 [ 164.230703][ T1333] The buggy address is located 800 bytes inside of [ 164.230703][ T1333] freed 1024-byte region [ffff888062b0f000, ffff888062b0f400) [ 164.236359][ T1333] [ 164.237400][ T1333] The buggy address belongs to the physical page: [ 164.240056][ T1333] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888062b0d800 pfn:0x62b08 [ 164.244433][ T1333] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 164.248017][ T1333] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 164.251620][ T1333] page_type: f5(slab) [ 164.253360][ T1333] raw: 04fff00000000240 ffff88801b842dc0 ffffea0001469210 ffffea0001b0ec10 [ 164.256962][ T1333] raw: ffff888062b0d800 0000000000100005 00000000f5000000 0000000000000000 [ 164.260617][ T1333] head: 04fff00000000240 ffff88801b842dc0 ffffea0001469210 ffffea0001b0ec10 [ 164.264346][ T1333] head: ffff888062b0d800 0000000000100005 00000000f5000000 0000000000000000 [ 164.268002][ T1333] head: 04fff00000000003 ffffea00018ac201 00000000ffffffff 00000000ffffffff [ 164.271605][ T1333] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 164.275166][ T1333] page dumped because: kasan: bad access detected [ 164.277913][ T1333] page_owner tracks the page as allocated [ 164.280295][ T1333] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 46, tgid 46 (kworker/u32:2), ts 56994620339, free_ts 56969035993 [ 164.287954][ T1333] post_alloc_hook+0x1c0/0x230 [ 164.290017][ T1333] get_page_from_freelist+0x1321/0x3890 [ 164.292339][ T1333] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 164.294892][ T1333] alloc_pages_mpol+0x1fb/0x550 [ 164.296967][ T1333] new_slab+0x23b/0x330 [ 164.298752][ T1333] ___slab_alloc+0xd9c/0x1940 [ 164.300760][ T1333] __slab_alloc.constprop.0+0x56/0xb0 [ 164.303005][ T1333] __kmalloc_noprof+0x2f2/0x510 [ 164.305105][ T1333] ieee802_11_parse_elems_full+0x1d7/0x3780 [ 164.307431][ T1333] ieee80211_ibss_rx_queued_mgmt+0xc69/0x2fd0 [ 164.309860][ T1333] ieee80211_iface_work+0xbf4/0x1020 [ 164.312103][ T1333] cfg80211_wiphy_work+0x3df/0x550 [ 164.314366][ T1333] process_one_work+0x9cf/0x1b70 [ 164.316613][ T1333] worker_thread+0x6c8/0xf10 [ 164.318533][ T1333] kthread+0x3c2/0x780 [ 164.320172][ T1333] ret_from_fork+0x5d7/0x6f0 [ 164.322149][ T1333] page last free pid 6136 tgid 6136 stack trace: [ 164.324817][ T1333] __free_frozen_pages+0x7fe/0x1180 [ 164.326969][ T1333] __put_partials+0x16d/0x1c0 [ 164.328891][ T1333] qlist_free_all+0x4d/0x120 [ 164.330786][ T1333] kasan_quarantine_reduce+0x195/0x1e0 [ 164.333038][ T1333] __kasan_slab_alloc+0x69/0x90 [ 164.335105][ T1333] __kmalloc_cache_node_noprof+0x217/0x420 [ 164.337504][ T1333] __get_vm_area_node+0x101/0x330 [ 164.339599][ T1333] __vmalloc_node_range_noprof+0x271/0x14b0 [ 164.342071][ T1333] __vmalloc_node_noprof+0xad/0xf0 [ 164.344189][ T1333] xt_counters_alloc+0x4c/0x70 [ 164.346266][ T1333] __do_replace+0x97/0x9f0 [ 164.348188][ T1333] compat_do_replace+0x2a6/0x3c0 [ 164.350316][ T1333] do_ip6t_set_ctl+0x55d/0xa70 [ 164.352374][ T1333] nf_setsockopt+0x8d/0xf0 [ 164.354282][ T1333] ipv6_setsockopt+0x135/0x170 [ 164.356255][ T1333] tcp_setsockopt+0xa7/0x100 [ 164.358164][ T1333] [ 164.359105][ T1333] Memory state around the buggy address: [ 164.361515][ T1333] ffff888062b0f200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.364872][ T1333] ffff888062b0f280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.368266][ T1333] >ffff888062b0f300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.371657][ T1333] ^ [ 164.373989][ T1333] ffff888062b0f380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 164.377347][ T1333] ffff888062b0f400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 164.380668][ T1333] ================================================================== [ 164.384406][ T1333] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 164.387354][ T1333] CPU: 0 UID: 0 PID: 1333 Comm: kworker/0:3 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 164.392398][ T1333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.397011][ T1333] Workqueue: events l2cap_chan_timeout [ 164.399506][ T1333] Call Trace: [ 164.400968][ T1333] [ 164.402286][ T1333] dump_stack_lvl+0x3d/0x1f0 [ 164.404301][ T1333] panic+0x71c/0x800 [ 164.406021][ T1333] ? __pfx_panic+0x10/0x10 [ 164.407879][ T1333] ? mark_held_locks+0x49/0x80 [ 164.409929][ T1333] ? __mutex_lock+0xa65/0xb90 [ 164.411946][ T1333] ? check_panic_on_warn+0x1f/0xb0 [ 164.414208][ T1333] ? __mutex_lock+0xa65/0xb90 [ 164.416283][ T1333] check_panic_on_warn+0xab/0xb0 [ 164.418573][ T1333] end_report+0x107/0x170 [ 164.420487][ T1333] kasan_report+0xee/0x110 [ 164.422388][ T1333] ? __mutex_lock+0xa65/0xb90 [ 164.424362][ T1333] __mutex_lock+0xa65/0xb90 [ 164.426344][ T1333] ? add_lock_to_list+0x9d/0x130 [ 164.428537][ T1333] ? l2cap_chan_timeout+0x6d/0x310 [ 164.430816][ T1333] ? __pfx___mutex_lock+0x10/0x10 [ 164.433038][ T1333] ? debug_object_deactivate+0x1ec/0x3a0 [ 164.435429][ T1333] ? l2cap_chan_timeout+0x6d/0x310 [ 164.437588][ T1333] l2cap_chan_timeout+0x6d/0x310 [ 164.439698][ T1333] process_one_work+0x9cf/0x1b70 [ 164.441854][ T1333] ? __pfx_process_one_work+0x10/0x10 [ 164.444123][ T1333] ? assign_work+0x1a0/0x250 [ 164.446122][ T1333] worker_thread+0x6c8/0xf10 [ 164.448135][ T1333] ? __kthread_parkme+0x19e/0x250 [ 164.450289][ T1333] ? __pfx_worker_thread+0x10/0x10 [ 164.452381][ T1333] kthread+0x3c2/0x780 [ 164.454115][ T1333] ? __pfx_kthread+0x10/0x10 [ 164.456101][ T1333] ? rcu_is_watching+0x12/0xc0 [ 164.458179][ T1333] ? __pfx_kthread+0x10/0x10 [ 164.460173][ T1333] ret_from_fork+0x5d7/0x6f0 [ 164.462192][ T1333] ? __pfx_kthread+0x10/0x10 [ 164.464183][ T1333] ret_from_fork_asm+0x1a/0x30 [ 164.466250][ T1333] [ 164.468320][ T1333] Kernel Offset: disabled [ 164.470182][ T1333] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:43:52 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85583d15 RDI=ffffffff9b0ab980 RBP=ffffffff9b0ab940 RSP=ffffc900074af540 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3630383838666666 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b0ab940 R15=ffffffff85583cb0 RIP=ffffffff85583d3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097521000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000032d1affc CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 70e1838228b42111 b8b302eebb41c0cb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 816bd33f8ca08935 77893d0425851e3e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 87314f3bd635eb13 cdcf8cd739053cc8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6a2fde8ea91e6481 457f5101f40c7a52 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a60ade21a49f66da 66b2042aedb98bf2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f95d7aada48c46fb 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 677fa90a96491f09 2bd15847ca9c3d12 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fbb929d600000000 647e55b43fd9e6c7 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d529da461b5d6511 79aeb99e43cb52b9 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4caa6934e9fc496c 38285a5d6442b8c8 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffea0001938440 RCX=ffffffff82058c21 RDX=1ffffd4000327088 RSI=0000000000000008 RDI=ffffea0001938440 RBP=ffffea0001938440 RSP=ffffc90003d2f508 R8 =0000000000000000 R9 =fffff94000327088 R10=ffffea0001938447 R11=0000000000000001 R12=0000000000000000 R13=00000000f6462000 R14=ffffc90003d2f8a8 R15=ffffc90003d2f5f0 RIP=ffffffff82058c36 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097621000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7330630 CR3=000000006b312000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c752968458773cf 4ca5fa58a0e8213e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 85d42179c772572b 7188986100e18703 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4596d9704665bec6 9f4c071fbff4cb1b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a58d5914aa76b53a 0f018438712da982 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000009d00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001034f6492e7f1 2700000014000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6491b2630000651f 6494c4036494c13b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6492ba9efc000000 3c000000c0000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0e00000080000000 64942f5860000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 76eb25c33acf0c00 31cb09287da73613 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dc67070a9d9446e3 90c17e799b05793a ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000007f5bb7ff RBX=000000000000002b RCX=ffffc90000537fa4 RDX=00000000c4dbd72f RSI=000000000000002f RDI=000000005ee50fd0 RBP=0000000000000001 RSP=ffffc90000537ea0 R8 =0000000000000001 R9 =000000005ee50fd0 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=000000008793b666 R14=ffffc90000537f08 R15=000000000000002b RIP=ffffffff850a8097 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f8cdec47300 ffffffff 00c00000 GS =0000 ffff888097721000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73d6188 CR3=000000004af61000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bac5ffffffff848b d43dffffffff848b d110ffffffff8498 99a1ffffffff8498 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ae32ffffffff848a a151ffffffff848a a815ffffffff848a a35bffffffff848a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a3a3ffffffff848a ab63ffffffff848a becaffffffff848a ae35ffffffff848a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bbc9ffffffff8238 b962ffffffff8238 cc9cffffffff8238 c44effffffff854d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b699ffffffff854d c392ffffffff854d c14cffffffff854d cc21ffffffff854d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c82affffffff8552 22d5ffffffff8552 2273ffffffff817d cf0fffffffff817d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c275ffffffff848b d7c9ffffffff848b eaf4ffffffff848a a444ffffffff848a ZMM24=69e9dcbe69e9dcbe 69e9dcbe69e9dcbe 69e9dcbe69e9dcbe 69e9dcbe69e9dcbe 69e9dcbe69e9dcbe 69e9dcbe69e9dcbe 69e9dcbe69e9dcbe 69e9dcbe69e9dcbe ZMM25=d7a4f872d7a4f872 d7a4f872d7a4f872 d7a4f872d7a4f872 d7a4f872d7a4f872 d7a4f872d7a4f872 d7a4f872d7a4f872 d7a4f872d7a4f872 d7a4f872d7a4f872 ZMM26=c6800ee2c6800ee2 c6800ee2c6800ee2 c6800ee2c6800ee2 c6800ee2c6800ee2 c6800ee2c6800ee2 c6800ee2c6800ee2 c6800ee2c6800ee2 c6800ee2c6800ee2 ZMM27=8cc1edc18cc1edc1 8cc1edc18cc1edc1 8cc1edc18cc1edc1 8cc1edc18cc1edc1 8cc1edc18cc1edc1 8cc1edc18cc1edc1 8cc1edc18cc1edc1 8cc1edc18cc1edc1 ZMM28=000001600000015f 0000015e0000015d 0000015c0000015b 0000015a00000159 0000015800000157 0000015600000155 0000015400000153 0000015200000151 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=891d0000891d0000 891d0000891d0000 891d0000891d0000 891d0000891d0000 891d0000891d0000 891d0000891d0000 891d0000891d0000 891d0000891d0000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802b241f60 RCX=ffffffff81af4e5d RDX=ffff88805c532440 RSI=ffffffff81af4e39 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc90003897648 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed10056483ed R15=ffff88802b53b6c0 RIP=ffffffff81af4e3b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097821000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000577e44c0 CR3=000000006a3c6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000