last executing test programs: 428.261114ms ago: executing program 2 (id=9670): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xf, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 387.793308ms ago: executing program 2 (id=9674): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 385.002272ms ago: executing program 2 (id=9677): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0105500, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0xd, 0x1}, 0x81, 0x80, 0x0, 0x0, 0x2, 0x8, 0x0, 0xa, 0x8, 0x0}) 204.982674ms ago: executing program 1 (id=9691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x28, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x100}, 0x0) 204.852327ms ago: executing program 1 (id=9693): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0xfffffffc, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 204.6318ms ago: executing program 1 (id=9696): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000400)=@ethtool_eeprom={0x43, 0x3, 0x1}}) 129.854915ms ago: executing program 0 (id=9701): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="00001a000000002ac7b04b1b980f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfd}, 0x50) 129.81258ms ago: executing program 1 (id=9702): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x356, 0x78, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, {}, {0x0, 0x2}, {}, {}, 0x0, 0x80, 0x0, 0x9, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x0, 0x202, 0x2, 0xc}) 129.760642ms ago: executing program 3 (id=9703): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0x3}, {&(0x7f0000000180)=""/172, 0x2000022c}], 0x2) 66.342378ms ago: executing program 0 (id=9704): r0 = syz_open_procfs(0x0, &(0x7f0000000e40)='ns\x00') getdents64(r0, &(0x7f0000000e80)=""/4096, 0x1000) 66.202951ms ago: executing program 1 (id=9705): modify_ldt$write(0x1, &(0x7f0000000000)={0x6a, 0x20001000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000002200)={0x1, 0x20000000, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x1}, 0x10) 66.134404ms ago: executing program 3 (id=9706): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000100)="0151f8e0", 0x4}], 0x1) 66.083891ms ago: executing program 1 (id=9707): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)="1515daf6667a1fb84e4e91e2e85d1debef12fa821399c0b30d3f3c46de80230b46282e4fecf74f43abd846e7da49546d69b9a328aee3b71a97d42150393b97dd9847951245bbf9429fa11b904e7e97ba0963fb6ab672d597269ec4e7", 0x5c}, {&(0x7f0000000280)="fcaa4615", 0x4}], 0x14) 66.009788ms ago: executing program 3 (id=9708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\b'}]}], {0x14, 0x11, 0x1, 0x4}}, 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) 65.951047ms ago: executing program 0 (id=9709): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x112, 0x3, 0x0, 0x0) 65.857314ms ago: executing program 3 (id=9710): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000181401000000000000000000080005"], 0x20}, 0x1, 0x0, 0x0, 0x4008885}, 0x0) 65.788905ms ago: executing program 2 (id=9711): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 814.226µs ago: executing program 0 (id=9712): r0 = fsopen(&(0x7f0000000140)='btrfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000000c0)='acl\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) 682.887µs ago: executing program 3 (id=9713): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4d25c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40) 612.107µs ago: executing program 2 (id=9714): syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000) 531.776µs ago: executing program 0 (id=9715): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x3c, 0x3e, 0x107, 0x0, 0x4000, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 357.252µs ago: executing program 3 (id=9716): r0 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000a00)={{0x2, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3af6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 306.54µs ago: executing program 2 (id=9717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x801, 0x6c, 0x87400, {0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}]}, 0x50}, 0x1, 0x40afc, 0x0, 0x8014}, 0x0) 0s ago: executing program 0 (id=9718): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x11, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @u32=0x9}]}, @generic='V']}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 0s ago: executing program 0 (id=9721): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) kernel console output (not intermixed with test programs): z-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 89.353272][ T40] audit: type=1326 audit(2000000254.037:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.1.2834" exe="/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 89.359871][ T40] audit: type=1326 audit(2000000254.037:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.1.2834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 89.460202][T11749] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 89.497511][T11757] openvswitch: netlink: Key type 29 is not supported [ 89.498371][T11758] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2849'. [ 89.504456][T11758] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2849'. [ 89.507744][T11758] vlan0: entered promiscuous mode [ 89.513466][ T6042] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 89.518930][T11760] netlink: 'syz.1.2850': attribute type 14 has an invalid length. [ 89.523564][ T6042] Bluetooth: hci2: command 0x206a tx timeout [ 89.558598][T11766] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2852'. [ 89.692128][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2868'. [ 89.693207][T11796] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 89.758466][T11809] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 89.954540][T11849] netlink: 'syz.3.2894': attribute type 11 has an invalid length. [ 89.987834][ T40] audit: type=1326 audit(2000000254.654:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11854 comm="syz.3.2897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 89.994589][ T40] audit: type=1326 audit(2000000254.654:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11854 comm="syz.3.2897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 90.002918][ T40] audit: type=1326 audit(2000000254.654:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11854 comm="syz.3.2897" exe="/syz-executor" sig=0 arch=40000003 syscall=460 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 90.007730][T11859] netlink: 'syz.2.2899': attribute type 1 has an invalid length. [ 90.107075][T11877] netlink: 'syz.3.2908': attribute type 4 has an invalid length. [ 90.113993][T11877] : renamed from bond0 (while UP) [ 90.455117][T11920] netlink: 'syz.3.2930': attribute type 1 has an invalid length. [ 90.457364][T11922] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.574889][T11947] ieee802154 phy0 wpan0: encryption failed: -22 [ 90.700128][T11981] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 90.702499][T11981] syz.1.2958: attempt to access beyond end of device [ 90.702499][T11981] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 90.828092][ T6042] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 90.879089][T12020] ip6t_srh: unknown srh match flags FF3F [ 90.944651][T12034] syz.2.2985: attempt to access beyond end of device [ 90.944651][T12034] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 90.953445][T12034] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 91.024031][T12051] 9pnet_fd: p9_fd_create_tcp (12051): problem connecting socket to 127.0.0.1 [ 91.079721][T12065] netlink: 'syz.2.2999': attribute type 25 has an invalid length. [ 91.128580][T12070] ntfs3(nbd2): try to read out of volume at offset 0x0 [ 91.149841][T12075] tc_dump_action: action bad kind [ 91.309991][T12104] netlink: 'syz.1.3016': attribute type 5 has an invalid length. [ 91.312432][T12104] netlink: 'syz.1.3016': attribute type 7 has an invalid length. [ 91.333092][T12107] kernel profiling enabled (shift: 63) [ 91.334967][T12107] profiling shift: 63 too large [ 91.391833][T12117] xt_hashlimit: overflow, rate too high: 0 [ 91.408714][T12123] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.413719][T12123] xt_hashlimit: Unknown mode mask 368, kernel too old? [ 91.522591][T12152] usb usb9: usbfs: process 12152 (syz.3.3042) did not claim interface 0 before use [ 91.589407][T12168] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.594745][T12168] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 91.676638][T12178] netlink: 'syz.2.3055': attribute type 21 has an invalid length. [ 91.701316][T12184] nr0: entered promiscuous mode [ 91.730752][T12190] overlayfs: conflicting options: userxattr,redirect_dir=on [ 91.762999][T12198] x_tables: ip_tables: DNAT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 91.798594][T12208] ip6t_srh: unknown srh invflags 6BE9 [ 91.850357][T12218] netlink: 'syz.2.3075': attribute type 21 has an invalid length. [ 92.109471][T12286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.142380][T12296] netlink: del zone limit has 4 unknown bytes [ 92.339851][T12350] can0: slcan on pty20. [ 92.354622][T12354] QAT: failed to copy from user. [ 92.412162][T12349] can0 (unregistered): slcan off pty20. [ 92.475937][T12383] binder: 12382:12383 ioctl c0046209 0 returned -22 [ 92.530208][T12399] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 92.677440][ T6042] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 92.680299][ T6042] Bluetooth: hci0: Injecting HCI hardware error event [ 92.683217][ T6042] Bluetooth: hci0: hardware error 0x00 [ 92.810290][T12473] Cannot find set identified by id 0 to match [ 93.069883][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 93.069893][ T40] audit: type=1326 audit(2000000257.535:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12538 comm="syz.2.3228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 93.078573][ T40] audit: type=1326 audit(2000000257.535:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12538 comm="syz.2.3228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 93.086917][ T40] audit: type=1326 audit(2000000257.545:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12538 comm="syz.2.3228" exe="/syz-executor" sig=0 arch=40000003 syscall=183 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 93.093442][ T40] audit: type=1326 audit(2000000257.545:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12538 comm="syz.2.3228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 93.155581][T12563] warning: `syz.0.3240' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.370674][T12615] can0: slcan on pty26. [ 93.384824][T12619] ata1.00: non-matching transfer count (1530558389/0) [ 93.437517][T12614] can0 (unregistered): slcan off pty26. [ 93.548790][T12658] bond1: entered promiscuous mode [ 93.550418][T12658] bond1: entered allmulticast mode [ 93.552338][T12658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.563787][T12663] misc userio: The device must be registered before sending interrupts [ 93.655806][T12682] block device autoloading is deprecated and will be removed. [ 93.679062][T12688] misc userio: The device must be registered before sending interrupts [ 93.695642][T12690] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 93.703591][ T1457] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 93.727455][T12696] ieee802154 phy0 wpan0: encryption failed: -22 [ 93.877445][ T1457] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 93.880293][ T1457] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.882771][ T1457] usb 5-1: Product: syz [ 93.884106][ T1457] usb 5-1: Manufacturer: syz [ 93.886893][ T1457] usb 5-1: SerialNumber: syz [ 93.896888][ T1457] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 93.920873][ T1457] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 93.959597][T12744] __nla_validate_parse: 20 callbacks suppressed [ 93.959607][T12744] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3321'. [ 93.995810][T12747] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 94.365299][ T1335] usb 5-1: USB disconnect, device number 6 [ 94.911704][ T6042] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 95.024436][T12812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3355'. [ 95.051638][T12818] cgroup: Name too long [ 95.083855][ T1457] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 95.086818][ T1457] ath9k_htc: Failed to initialize the device [ 95.089206][ T1335] usb 5-1: ath9k_htc: USB layer deinitialized [ 95.134721][T12842] validate_nla: 5 callbacks suppressed [ 95.134731][T12842] netlink: 'syz.0.3370': attribute type 11 has an invalid length. [ 95.154920][T12846] netlink: 'syz.2.3372': attribute type 10 has an invalid length. [ 95.158004][T12846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3372'. [ 95.162531][T12846] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 95.259138][T12869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3382'. [ 95.269854][T12872] netlink: 'syz.0.3385': attribute type 10 has an invalid length. [ 95.272328][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3385'. [ 95.282883][T12872] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 95.355027][T12893] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3394'. [ 95.388927][T12902] C: renamed from team_slave_0 (while UP) [ 95.392002][T12902] netlink: 'syz.0.3398': attribute type 3 has an invalid length. [ 95.394716][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3400'. [ 95.398632][T12902] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3398'. [ 95.401886][T12902] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 95.434152][T12910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3403'. [ 95.601719][T12948] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 95.663544][T12961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3429'. [ 96.029374][T13013] program syz.3.3455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.067204][T13017] vivid-000: ================= START STATUS ================= [ 96.069853][T13017] vivid-000: Test Pattern: 75% Colorbar [ 96.071639][T13017] vivid-000: Fill Percentage of Frame: 100 [ 96.073526][T13017] vivid-000: Horizontal Movement: No Movement [ 96.075426][T13017] vivid-000: Vertical Movement: No Movement [ 96.078283][T13017] vivid-000: OSD Text Mode: All [ 96.079826][T13017] vivid-000: Show Border: false [ 96.081471][T13017] vivid-000: Show Square: false [ 96.083011][T13017] vivid-000: Sensor Flipped Horizontally: false [ 96.084996][T13017] vivid-000: Sensor Flipped Vertically: false [ 96.086935][T13017] vivid-000: Insert SAV Code in Image: false [ 96.089520][T13017] vivid-000: Insert EAV Code in Image: false [ 96.091403][T13017] vivid-000: Insert Video Guard Band: false [ 96.093369][T13017] vivid-000: Reduced Framerate: false [ 96.095058][T13017] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 96.097455][T13017] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 96.102421][T13017] vivid-000: Enable Capture Cropping: true [ 96.104614][T13017] vivid-000: Enable Capture Composing: true [ 96.108936][T13017] vivid-000: Enable Capture Scaler: true [ 96.110947][T13017] vivid-000: Timestamp Source: End of Frame [ 96.112877][T13017] vivid-000: Colorspace: sRGB [ 96.114344][T13017] vivid-000: Transfer Function: Default [ 96.119024][T13017] vivid-000: Y'CbCr Encoding: Default [ 96.120859][T13017] vivid-000: HSV Encoding: Hue 0-179 [ 96.122547][T13017] vivid-000: Quantization: Default [ 96.124180][T13017] vivid-000: Apply Alpha To Red Only: false [ 96.126129][T13017] vivid-000: Standard Aspect Ratio: 4x3 [ 96.127886][T13017] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 96.136992][T13017] vivid-000: DV Timings: 640x480p59 inactive [ 96.139680][T13017] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 96.142829][T13017] vivid-000: Maximum EDID Blocks: 2 [ 96.145046][T13017] vivid-000: Limited RGB Range (16-235): false [ 96.147846][T13017] vivid-000: Rx RGB Quantization Range: Automatic [ 96.150146][T13017] vivid-000: Power Present: 0x00000001 [ 96.152627][T13017] tpg source WxH: 3840x2160 (Y'CbCr) [ 96.154357][T13017] tpg field: 1 [ 96.155573][T13017] tpg crop: (0,0)/3840x2160 [ 96.157148][T13017] tpg compose: (0,0)/3840x2160 [ 96.158759][T13017] tpg colorspace: 8 [ 96.160419][T13017] tpg transfer function: 0/0 [ 96.163044][T13017] tpg Y'CbCr encoding: 0/0 [ 96.165074][T13017] tpg quantization: 0/0 [ 96.166916][T13017] tpg RGB range: 0/2 [ 96.168656][T13017] vivid-000: ================== END STATUS ================== [ 96.405440][T13066] xt_ecn: cannot match TCP bits for non-tcp packets [ 96.479757][T13082] ipt_rpfilter: unknown options [ 96.484932][T13084] netlink: 'syz.1.3489': attribute type 32 has an invalid length. [ 96.487501][T13084] netlink: 'syz.1.3489': attribute type 32 has an invalid length. [ 96.961596][ T40] audit: type=1326 audit(95.737:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13162 comm="syz.0.3526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 96.969259][ T40] audit: type=1326 audit(95.737:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13162 comm="syz.0.3526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 96.975743][ T40] audit: type=1326 audit(95.737:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13162 comm="syz.0.3526" exe="/syz-executor" sig=0 arch=40000003 syscall=46 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 96.986933][ T40] audit: type=1326 audit(95.737:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13162 comm="syz.0.3526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 96.993916][ T40] audit: type=1326 audit(95.737:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13162 comm="syz.0.3526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 97.076520][T13187] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 97.107203][T13197] netlink: 'syz.3.3542': attribute type 21 has an invalid length. [ 97.155349][T13209] netlink: 'syz.0.3548': attribute type 29 has an invalid length. [ 97.202378][T13221] netlink: 'syz.2.3554': attribute type 6 has an invalid length. [ 97.332848][T13256] netlink: 'syz.1.3572': attribute type 1 has an invalid length. [ 97.340554][T13260] openvswitch: netlink: Missing key (keys=40, expected=80) [ 97.391866][T13263] random: crng reseeded on system resumption [ 97.437504][T13274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.516165][T13289] unsupported nla_type 256 [ 97.611861][T13316] libceph: resolve '0.' (ret=-3): failed [ 97.894432][ T1335] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 97.985839][T13401] kAFS: unable to lookup cell '/,' [ 98.065450][ T1335] usb 7-1: Using ep0 maxpacket: 16 [ 98.069582][ T1335] usb 7-1: config 0 has an invalid interface number: 145 but max is 0 [ 98.072231][ T1335] usb 7-1: config 0 has no interface number 0 [ 98.075736][ T1335] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 98.080863][ T1335] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.083444][ T1335] usb 7-1: Product: syz [ 98.084766][ T1335] usb 7-1: Manufacturer: syz [ 98.086320][ T1335] usb 7-1: SerialNumber: syz [ 98.090656][ T1335] usb 7-1: config 0 descriptor?? [ 98.096831][ T1335] hub 7-1:0.145: bad descriptor, ignoring hub [ 98.098950][ T1335] hub 7-1:0.145: probe with driver hub failed with error -5 [ 98.105400][ T1335] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.145/input/input7 [ 98.486052][T13492] xt_bpf: check failed: parse error [ 98.558865][ T59] usb 7-1: USB disconnect, device number 5 [ 98.681294][T13524] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.703150][T13526] wlan1: mtu less than device minimum [ 98.704924][T13526] : (slave wlan1): Error -22 calling dev_set_mtu [ 98.976926][T13572] 0XD: renamed from macvtap0 (while UP) [ 98.983646][T13572] 0XD: entered allmulticast mode [ 98.986422][T13572] veth0_macvtap: entered allmulticast mode [ 98.988611][T13572] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 99.059627][ T10] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 99.178075][T13600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.243737][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.246732][ T10] usb 6-1: config 0 has no interface number 0 [ 99.248706][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 99.252601][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 99.256545][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 99.257930][T13610] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.3747' sets config #1 [ 99.259301][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.264234][ T10] usb 6-1: config 0 descriptor?? [ 99.274218][ T10] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 99.326183][T13630] syz.3.3757: attempt to access beyond end of device [ 99.326183][T13630] loop3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 99.406747][T13650] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 99.477330][T13663] overlay: Bad value for 'workdir' [ 99.484163][T13550] iowarrior 6-1:0.1: Error -90 while submitting URB [ 99.487378][ T10] usb 6-1: USB disconnect, device number 3 [ 99.513032][ T40] audit: type=1326 audit(98.122:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13670 comm="syz.3.3775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 99.524424][ T40] audit: type=1326 audit(98.122:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13670 comm="syz.3.3775" exe="/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 99.533379][ T40] audit: type=1326 audit(98.122:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13670 comm="syz.3.3775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 99.543871][T13676] Unsupported ieee802154 address type: 0 [ 99.627633][T13682] __nla_validate_parse: 15 callbacks suppressed [ 99.627650][T13682] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3780'. [ 99.783904][T13696] block nbd2: NBD_DISCONNECT [ 99.807995][ T59] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 99.833495][T13702] dlm: no local IP address has been set [ 99.835358][T13702] dlm: cannot start dlm midcomms -107 [ 99.950046][T13718] macvtap0: entered allmulticast mode [ 99.951804][T13718] veth0_macvtap: entered allmulticast mode [ 99.991874][ T59] usb 8-1: unable to get BOS descriptor or descriptor too short [ 99.995802][ T59] usb 8-1: config 1 interface 0 altsetting 170 bulk endpoint 0x82 has invalid maxpacket 16 [ 99.998979][ T59] usb 8-1: config 1 interface 0 has no altsetting 0 [ 100.004146][ T59] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.006894][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.009315][ T59] usb 8-1: Product: syz [ 100.010671][ T59] usb 8-1: Manufacturer: syz [ 100.012693][ T59] usb 8-1: SerialNumber: syz [ 100.016108][T13677] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 100.089719][T13742] tmpfs: Bad value for 'mpol' [ 100.099052][T13744] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3811'. [ 100.102017][T13744] NCSI netlink: No device for ifindex 33022 [ 100.124541][T13748] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3813'. [ 100.245801][ T59] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 100.252731][ T59] usb 8-1: USB disconnect, device number 5 [ 100.305259][T13784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3831'. [ 100.371238][T13791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.398746][T13776] /dev/sr0: Can't open blockdev [ 100.523107][T13817] validate_nla: 12 callbacks suppressed [ 100.523118][T13817] netlink: 'syz.2.3844': attribute type 10 has an invalid length. [ 100.536622][T13817] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 100.574840][T13821] syz.2.3846: attempt to access beyond end of device [ 100.574840][T13821] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 100.579546][T13821] XFS (nbd2): SB validate failed with error -5. [ 100.680275][T13844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3855'. [ 100.683300][T13844] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3855'. [ 100.751445][T13856] bridge1: entered promiscuous mode [ 100.831079][T13872] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3869'. [ 100.915408][T13894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3880'. [ 101.096280][T13939] No source specified [ 101.153363][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3911'. [ 101.156327][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3911'. [ 101.256577][T13984] netlink: 'syz.1.3925': attribute type 1 has an invalid length. [ 101.395571][T14021] AppArmor: change_hat: Invalid input '~' [ 101.441341][T14032] usb usb8: usbfs: process 14032 (syz.0.3948) did not claim interface 0 before use [ 101.484515][T14046] cgroup: none used incorrectly [ 101.539804][T14058] program syz.3.3961 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.580143][T14070] Driver unsupported XDP return value 0 on prog (id 327) dev N/A, expect packet loss! [ 101.581042][T14072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.838310][T14128] netlink: 'syz.2.3996': attribute type 1 has an invalid length. [ 101.887266][T14141] netlink: 'syz.1.4002': attribute type 10 has an invalid length. [ 102.190332][T14215] binder: 14214:14215 ioctl 400c620e 80001180 returned -22 [ 102.258223][T14233] netlink: 'syz.1.4043': attribute type 1 has an invalid length. [ 102.357506][T14251] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.4050' sets config #0 [ 102.424713][T14270] i2c i2c-1: Invalid block write size 34 [ 102.455571][T14277] netlink: 'syz.1.4062': attribute type 1 has an invalid length. [ 102.628757][T14302] XFS (nullb0): Invalid superblock magic number [ 102.795383][T14342] netlink: 'syz.1.4083': attribute type 1 has an invalid length. [ 102.797781][T14342] netlink: 'syz.1.4083': attribute type 3 has an invalid length. [ 102.955993][T14368] SET target dimension over the limit! [ 103.315389][T14266] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 103.318875][T14266] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 103.991683][T14266] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 103.993682][T14266] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 104.086051][T14390] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 104.136910][T14405] tmpfs: Bad value for 'mpol' [ 104.140408][T14406] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 104.206048][T14417] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 104.208968][T14417] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 104.211681][T14417] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 104.214522][T14417] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 104.254296][T14426] netlink: 'syz.2.4119': attribute type 13 has an invalid length. [ 104.308053][T14435] pimreg: entered allmulticast mode [ 104.384041][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 104.544146][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 104.555531][ T10] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 104.558263][ T10] usb 5-1: config 0 has no interface number 0 [ 104.560199][ T10] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.563633][ T10] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 104.568555][ T10] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 104.572019][ T10] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 104.575185][ T10] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.582866][ T10] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 104.586114][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.589115][ T10] usb 5-1: Product: syz [ 104.590601][ T10] usb 5-1: Manufacturer: syz [ 104.592116][ T10] usb 5-1: SerialNumber: syz [ 104.598318][ T10] usb 5-1: config 0 descriptor?? [ 104.600531][T14400] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.605591][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 104.756501][T14491] netlink: 'syz.3.4149': attribute type 21 has an invalid length. [ 104.823672][ T10] usb 5-1: USB disconnect, device number 7 [ 104.828807][T14504] ebtables: wrong size: *len 120, entries_size 144, replsz 144 [ 104.951336][T14518] process 'syz.2.4165' launched '/dev/fd/3' with NULL argv: empty string added [ 105.182953][T14562] 9pnet_fd: p9_fd_create_unix (14562): address too long: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 105.368548][T14604] __nla_validate_parse: 10 callbacks suppressed [ 105.368559][T14604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4206'. [ 105.401694][T14604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4206'. [ 105.482978][T14631] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4219'. [ 105.592865][T14657] syz.2.4232: attempt to access beyond end of device [ 105.592865][T14657] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 105.598065][T14657] syz.2.4232: attempt to access beyond end of device [ 105.598065][T14657] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 105.837879][T14723] tmpfs: Bad value for 'nr_inodes' [ 106.064073][ T40] audit: type=1326 audit(104.259:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14774 comm="syz.1.4290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 106.070973][ T40] audit: type=1326 audit(104.259:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14774 comm="syz.1.4290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 106.078334][ T40] audit: type=1326 audit(104.259:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14774 comm="syz.1.4290" exe="/syz-executor" sig=0 arch=40000003 syscall=289 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 106.085833][ T40] audit: type=1326 audit(104.259:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14774 comm="syz.1.4290" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 106.201533][T14809] netlink: 300 bytes leftover after parsing attributes in process `syz.2.4307'. [ 106.516231][T14895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4349'. [ 106.881277][T14981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4388'. [ 107.046997][ T59] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 107.073054][T15020] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.218229][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 107.221639][ T59] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 107.224970][ T59] usb 6-1: config 0 has no interface number 0 [ 107.229183][ T59] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 107.233917][ T59] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 107.237457][T15047] random: crng reseeded on system resumption [ 107.240651][ T59] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 107.245915][ T59] usb 6-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 107.253073][ T59] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.261613][ T59] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 107.265240][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.268448][ T59] usb 6-1: Product: syz [ 107.270632][ T59] usb 6-1: Manufacturer: syz [ 107.272625][ T59] usb 6-1: SerialNumber: syz [ 107.276316][ T59] usb 6-1: config 0 descriptor?? [ 107.279450][T14961] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 107.283759][T15051] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 107.285166][ T59] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.312776][ T60] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 107.485018][ T60] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 107.487706][ T60] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 107.490280][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 107.492955][ T60] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 107.496302][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 107.499311][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 107.502236][ T60] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 107.504172][ T1335] usb 6-1: USB disconnect, device number 4 [ 107.509605][ T60] usb 7-1: string descriptor 0 read error: -22 [ 107.511512][ T60] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 107.514336][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.524525][ T60] usb 7-1: config 0 descriptor?? [ 107.527852][ T60] hub 7-1:0.0: bad descriptor, ignoring hub [ 107.529812][ T60] hub 7-1:0.0: probe with driver hub failed with error -5 [ 107.540552][ T60] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input12 [ 107.820833][ T10] usb 7-1: USB disconnect, device number 6 [ 108.142067][T15153] validate_nla: 2 callbacks suppressed [ 108.142077][T15153] netlink: 'syz.3.4472': attribute type 1 has an invalid length. [ 108.177361][T15160] tmpfs: Bad value for 'mpol' [ 108.259745][T15178] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4485'. [ 108.309693][T15186] veth3: entered promiscuous mode [ 108.311397][T15186] veth3: entered allmulticast mode [ 108.372581][T15201] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20003 [ 108.398733][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4499'. [ 108.401507][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4499'. [ 108.426988][T15213] netlink: 'syz.0.4502': attribute type 10 has an invalid length. [ 108.434064][T15213] team0: Device ipvlan1 failed to register rx_handler [ 108.449063][T15219] random: crng reseeded on system resumption [ 108.548022][T15241] openvswitch: netlink: IP tunnel dst address not specified [ 108.582578][T15251] netlink: 'syz.0.4521': attribute type 1 has an invalid length. [ 108.588689][T15251] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4521'. [ 108.631249][ T40] audit: type=1326 audit(106.653:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15262 comm="syz.1.4527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 108.640950][ T40] audit: type=1326 audit(106.653:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15262 comm="syz.1.4527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 108.647216][ T40] audit: type=1326 audit(106.653:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15262 comm="syz.1.4527" exe="/syz-executor" sig=0 arch=40000003 syscall=103 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 108.679422][ T40] audit: type=1326 audit(106.691:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15262 comm="syz.1.4527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 108.689048][ T40] audit: type=1326 audit(106.691:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15262 comm="syz.1.4527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 108.708796][T15277] netlink: 'syz.0.4534': attribute type 2 has an invalid length. [ 109.214696][T15413] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 109.225910][T15416] syz.2.4603: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 109.231369][T15416] CPU: 0 UID: 0 PID: 15416 Comm: syz.2.4603 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 109.231385][T15416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.231392][T15416] Call Trace: [ 109.231396][T15416] [ 109.231400][T15416] dump_stack_lvl+0x16c/0x1f0 [ 109.231421][T15416] warn_alloc+0x248/0x3a0 [ 109.231437][T15416] ? __pfx_warn_alloc+0x10/0x10 [ 109.231451][T15416] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 109.231466][T15416] ? stack_depot_save_flags+0x3e0/0xa40 [ 109.231484][T15416] ? kasan_save_stack+0x42/0x60 [ 109.231497][T15416] ? kasan_save_stack+0x33/0x60 [ 109.231510][T15416] ? kasan_save_track+0x14/0x30 [ 109.231524][T15416] ? xskq_create+0x52/0x1d0 [ 109.231536][T15416] ? xsk_setsockopt+0x640/0x840 [ 109.231546][T15416] ? do_sock_setsockopt+0x221/0x470 [ 109.231558][T15416] ? xskq_create+0xfb/0x1d0 [ 109.231571][T15416] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 109.231588][T15416] ? xskq_create+0xfb/0x1d0 [ 109.231603][T15416] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 109.231620][T15416] ? xskq_create+0xfb/0x1d0 [ 109.231633][T15416] vmalloc_user_noprof+0x9e/0xe0 [ 109.231645][T15416] ? xskq_create+0xfb/0x1d0 [ 109.231657][T15416] xskq_create+0xfb/0x1d0 [ 109.231671][T15416] xsk_setsockopt+0x640/0x840 [ 109.231683][T15416] ? __pfx_xsk_setsockopt+0x10/0x10 [ 109.231695][T15416] ? __pfx_aa_sk_perm+0x10/0x10 [ 109.231708][T15416] ? errseq_sample+0x53/0x70 [ 109.231725][T15416] ? __pfx_xsk_setsockopt+0x10/0x10 [ 109.231737][T15416] do_sock_setsockopt+0x221/0x470 [ 109.231747][T15416] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 109.231765][T15416] __sys_setsockopt+0x120/0x1a0 [ 109.231781][T15416] __ia32_sys_setsockopt+0xbc/0x160 [ 109.231794][T15416] ? lockdep_hardirqs_on+0x7c/0x110 [ 109.231807][T15416] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 109.231822][T15416] __do_fast_syscall_32+0x7c/0x3a0 [ 109.231839][T15416] do_fast_syscall_32+0x32/0x80 [ 109.231853][T15416] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.231866][T15416] RIP: 0023:0xf70de579 [ 109.231875][T15416] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 109.231884][T15416] RSP: 002b:00000000f50ce55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 109.231893][T15416] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 109.231899][T15416] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 109.231905][T15416] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.231910][T15416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.231915][T15416] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.231928][T15416] [ 109.231931][T15416] Mem-Info: [ 109.319694][T15416] active_anon:8358 inactive_anon:577 isolated_anon:0 [ 109.319694][T15416] active_file:6249 inactive_file:22718 isolated_file:0 [ 109.319694][T15416] unevictable:1768 dirty:278 writeback:0 [ 109.319694][T15416] slab_reclaimable:5600 slab_unreclaimable:55514 [ 109.319694][T15416] mapped:23067 shmem:2265 pagetables:1458 [ 109.319694][T15416] sec_pagetables:313 bounce:0 [ 109.319694][T15416] kernel_misc_reclaimable:0 [ 109.319694][T15416] free:68766 free_pcp:9242 free_cma:0 [ 109.333503][T15416] Node 0 active_anon:448kB inactive_anon:2308kB active_file:2644kB inactive_file:1768kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:1704kB dirty:96kB writeback:0kB shmem:3544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7944kB pagetables:2720kB sec_pagetables:1184kB all_unreclaimable? no Balloon:0kB [ 109.336073][T15436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.343323][T15416] Node 1 active_anon:32832kB inactive_anon:0kB active_file:22352kB inactive_file:89104kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:90564kB dirty:1016kB writeback:0kB shmem:5516kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4996kB pagetables:3264kB sec_pagetables:68kB all_unreclaimable? no Balloon:0kB [ 109.358027][T15416] Node 0 DMA free:2168kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:212kB free_cma:0kB [ 109.366922][T15416] lowmem_reserve[]: 0 289 289 289 289 [ 109.369005][T15416] Node 0 DMA32 free:20976kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:4096KB free_highatomic:2492KB active_anon:572kB inactive_anon:2308kB active_file:2644kB inactive_file:1768kB unevictable:3536kB writepending:96kB present:1032196kB managed:296412kB mlocked:0kB bounce:0kB free_pcp:2456kB local_pcp:580kB free_cma:0kB [ 109.379354][T15416] lowmem_reserve[]: 0 0 0 0 0 [ 109.380856][T15416] Node 1 DMA32 free:253360kB boost:18432kB min:65576kB low:77360kB high:89144kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32832kB inactive_anon:0kB active_file:22352kB inactive_file:89104kB unevictable:3536kB writepending:1016kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:34080kB local_pcp:17868kB free_cma:0kB [ 109.391479][T15416] lowmem_reserve[]: 0 0 0 0 0 [ 109.393224][T15416] Node 0 DMA: 18*4kB (UM) 22*8kB (UM) 12*16kB (UM) 4*32kB (UM) 3*64kB (UM) 3*128kB (UM) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2168kB [ 109.399536][T15416] Node 0 DMA32: 99*4kB (MH) 276*8kB (UMEH) 92*16kB (UMEH) 88*32kB (UMEH) 81*64kB (UMH) 22*128kB (UMH) 13*256kB (UMH) 3*512kB (UM) 1*1024kB (H) 0*2048kB 0*4096kB = 20780kB [ 109.402872][T15447] No source specified [ 109.404901][T15416] Node 1 DMA32: 1342*4kB (UME) 1447*8kB (UME) 782*16kB (UME) 453*32kB (UME) 356*64kB (UME) 162*128kB (UME) 90*256kB (UME) 69*512kB (UM) 43*1024kB (UM) 15*2048kB (UM) 8*4096kB (UM) = 253360kB [ 109.406645][T15442] xt_CONNSECMARK: invalid mode: 0 [ 109.411971][T15416] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.416400][T15416] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.419482][T15416] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.423516][T15416] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.426394][T15416] 31297 total pagecache pages [ 109.427922][T15416] 69 pages in swap cache [ 109.429295][T15416] Free swap = 118072kB [ 109.431674][T15416] Total swap = 124996kB [ 109.433526][T15416] 524155 pages RAM [ 109.434930][T15416] 0 pages HighMem/MovableOnly [ 109.436261][T15451] netdevsim netdevsim1: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 109.436468][T15416] 209141 pages reserved [ 109.436473][T15416] 0 pages cma reserved [ 109.638021][T15507] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 109.640204][T15507] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 109.668545][T15514] wg1 speed is unknown, defaulting to 1000 [ 109.669087][T15516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.670585][T15514] wg1 speed is unknown, defaulting to 1000 [ 109.678924][T15514] wg1 speed is unknown, defaulting to 1000 [ 109.683193][T15514] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.691096][T15514] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 109.707013][T15514] wg1 speed is unknown, defaulting to 1000 [ 109.714685][T15523] wireguard0: entered promiscuous mode [ 109.716346][T15523] wireguard0: entered allmulticast mode [ 109.719112][T15526] xt_TPROXY: Can be used only with -p tcp or -p udp [ 109.719323][T15514] wg1 speed is unknown, defaulting to 1000 [ 109.723718][T15514] wg1 speed is unknown, defaulting to 1000 [ 109.726880][T15514] wg1 speed is unknown, defaulting to 1000 [ 109.928872][T15572] netlink: 'syz.2.4680': attribute type 7 has an invalid length. [ 109.938636][T15572] : entered promiscuous mode [ 110.013029][T15594] 9pnet_fd: p9_fd_create_tcp (15594): problem connecting socket to 127.0.0.1 [ 110.603746][T15745] No such timeout policy "syz0" [ 110.706298][T15772] netlink: 'syz.1.4775': attribute type 3 has an invalid length. [ 110.778070][T15794] __nla_validate_parse: 11 callbacks suppressed [ 110.778080][T15794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4786'. [ 110.783658][T15794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4786'. [ 110.789734][T15794] IPv6: sit1: Disabled Multicast RS [ 110.791810][T15794] sit1: entered allmulticast mode [ 110.898114][T15825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4801'. [ 110.947087][T15837] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4807'. [ 111.017138][T15853] netlink: 'syz.1.4816': attribute type 16 has an invalid length. [ 111.019547][T15853] netlink: 'syz.1.4816': attribute type 3 has an invalid length. [ 111.021945][T15853] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4816'. [ 111.056889][T15865] netlink: 'syz.3.4821': attribute type 11 has an invalid length. [ 111.327682][T15942] dlm: no locking on control device [ 111.356715][T15950] netlink: 'syz.3.4863': attribute type 2 has an invalid length. [ 111.387004][T15961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4868'. [ 111.420131][T15969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.534052][T15998] trusted_key: encrypted_key: keylen parameter is missing [ 111.616511][T16017] tmpfs: Bad value for 'mpol' [ 111.619129][T16019] binder: 16018:16019 ioctl c0306201 80000540 returned -22 [ 111.631034][T16020] [U]  [ 111.735494][ T40] audit: type=1326 audit(109.553:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16045 comm="syz.0.4910" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 111.743879][ T40] audit: type=1326 audit(109.553:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16045 comm="syz.0.4910" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 111.750759][ T40] audit: type=1326 audit(109.562:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16045 comm="syz.0.4910" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 111.757195][ T40] audit: type=1326 audit(109.562:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16045 comm="syz.0.4910" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 111.766198][ T40] audit: type=1326 audit(109.562:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16045 comm="syz.0.4910" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 111.788202][T16053] usb usb9: check_ctrlrecip: process 16053 (syz.2.4914) requesting ep 01 but needs 81 [ 111.791184][T16053] usb usb9: usbfs: process 16053 (syz.2.4914) did not claim interface 0 before use [ 111.884465][T16073] binder: 16071:16073 unknown command 0 [ 111.886317][T16073] binder: 16071:16073 ioctl c0306201 800002c0 returned -22 [ 111.907296][T16078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4925'. [ 111.910192][T16078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4925'. [ 112.150499][T16140] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4956'. [ 112.209712][T16158] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 112.280574][T16166] netlink: 'syz.2.4969': attribute type 28 has an invalid length. [ 112.414767][T16204] program syz.0.4988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.690523][T16249] gretap0: refused to change device tx_queue_len [ 112.694918][T16249] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 112.796298][T16272] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5022'. [ 112.868817][T16285] wg1 speed is unknown, defaulting to 1000 [ 113.518194][T16371] validate_nla: 4 callbacks suppressed [ 113.518204][T16371] netlink: 'syz.0.5067': attribute type 5 has an invalid length. [ 113.551375][ T40] audit: type=1326 audit(111.255:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16378 comm="syz.2.5071" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 113.562728][ T40] audit: type=1326 audit(111.255:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16378 comm="syz.2.5071" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 113.571039][ T40] audit: type=1326 audit(111.255:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16378 comm="syz.2.5071" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 113.577921][ T40] audit: type=1326 audit(111.255:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16378 comm="syz.2.5071" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 113.584414][ T40] audit: type=1326 audit(111.255:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16378 comm="syz.2.5071" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 114.321464][T16515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.409539][T16540] __vm_enough_memory: pid: 16540, comm: syz.3.5149, bytes: 4294963200 not enough memory for the allocation [ 114.705119][T16578] Cannot find del_set index 3 as target [ 114.838248][T16607] netlink: ct family unspecified [ 114.841551][T16607] openvswitch: netlink: Actions may not be safe on all matching packets [ 115.076254][T16660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.248214][T16701] netlink: 'syz.2.5228': attribute type 303 has an invalid length. [ 115.398261][T16740] netlink: 'syz.1.5248': attribute type 10 has an invalid length. [ 115.405372][T16740] hsr_slave_0: left promiscuous mode [ 115.409819][T16740] hsr_slave_1: left promiscuous mode [ 115.437027][T16751] mmap: syz.3.5252 (16751): VmData 45764608 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 115.549846][T16775] openvswitch: netlink: Actions may not be safe on all matching packets [ 115.580769][T16783] CIFS mount error: No usable UNC path provided in device string! [ 115.580769][T16783] [ 115.584280][T16783] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 115.681707][T16809] netlink: 'syz.0.5282': attribute type 12 has an invalid length. [ 115.708578][T16815] tmpfs: Bad value for 'nr_blocks' [ 115.724645][T16820] netlink: 'syz.3.5288': attribute type 2 has an invalid length. [ 115.727328][T16820] netlink: 'syz.3.5288': attribute type 1 has an invalid length. [ 115.752311][T16826] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 116.072210][T16886] openvswitch: netlink: IP tunnel dst address not specified [ 116.105412][T16891] netlink: 'syz.1.5323': attribute type 8 has an invalid length. [ 116.222021][T16919] netlink: 'syz.2.5337': attribute type 11 has an invalid length. [ 116.224494][T16919] __nla_validate_parse: 6 callbacks suppressed [ 116.224504][T16919] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5337'. [ 116.304377][T16942] netlink: 'syz.3.5348': attribute type 1 has an invalid length. [ 116.306864][T16942] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5348'. [ 116.332666][T16951] random: crng reseeded on system resumption [ 116.354552][T16957] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5356'. [ 116.435599][T16978] overlay: Unknown parameter 'obj_role' [ 116.488429][T16992] xt_policy: output policy not valid in PREROUTING and INPUT [ 116.789130][T17069] netlink: 'syz.3.5410': attribute type 10 has an invalid length. [ 116.793301][T17069] hsr_slave_0: left promiscuous mode [ 116.796994][T17069] hsr_slave_1: left promiscuous mode [ 117.000412][T17115] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 117.103966][T17136] bridge3: entered promiscuous mode [ 117.214056][T17149] xt_CT: No such helper "syz1" [ 117.405076][T17187] netlink: 'syz.2.5468': attribute type 21 has an invalid length. [ 117.488912][T17207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5478'. [ 117.631400][T17244] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 117.692372][T17261] netlink: 396 bytes leftover after parsing attributes in process `syz.0.5504'. [ 117.695699][T17261] NCSI netlink: No device for ifindex 0 [ 118.017918][T17348] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5546'. [ 118.119946][T17377] hpfs: Bad magic ... probably not HPFS [ 118.158780][T17386] wlan1: mtu less than device minimum [ 118.160585][T17386] : (slave wlan1): Error -22 calling dev_set_mtu [ 118.172757][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 118.172767][ T40] audit: type=1326 audit(115.577:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.1.5567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 118.181351][ T40] audit: type=1326 audit(115.577:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.1.5567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 118.188477][ T40] audit: type=1326 audit(115.586:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.1.5567" exe="/syz-executor" sig=0 arch=40000003 syscall=280 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 118.194825][ T40] audit: type=1326 audit(115.586:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.1.5567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 118.194848][ T40] audit: type=1326 audit(115.586:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.1.5567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 118.202666][T17396] netlink: 216 bytes leftover after parsing attributes in process `syz.0.5569'. [ 118.202680][T17396] netlink: 216 bytes leftover after parsing attributes in process `syz.0.5569'. [ 118.226765][T17402] vivid-001: ================= START STATUS ================= [ 118.245289][T17402] vivid-001: Radio HW Seek Mode: Bounded [ 118.247239][T17402] vivid-001: Radio Programmable HW Seek: false [ 118.249895][T17402] vivid-001: RDS Rx I/O Mode: Block I/O [ 118.251890][T17402] vivid-001: Generate RBDS Instead of RDS: false [ 118.253909][T17402] vivid-001: RDS Reception: true [ 118.255495][T17402] vivid-001: RDS Program Type: 0 inactive [ 118.257303][T17402] vivid-001: RDS PS Name: inactive [ 118.258960][T17402] vivid-001: RDS Radio Text: inactive [ 118.261130][T17402] vivid-001: RDS Traffic Announcement: false inactive [ 118.263293][T17402] vivid-001: RDS Traffic Program: false inactive [ 118.265320][T17402] vivid-001: RDS Music: false inactive [ 118.266993][T17402] vivid-001: ================== END STATUS ================== [ 118.392244][T17438] ip6erspan0: entered promiscuous mode [ 118.455517][T17450] overlayfs: unescaped trailing colons in lowerdir mount option. [ 118.508270][T17462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5603'. [ 118.617363][ T40] audit: type=1326 audit(115.998:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17491 comm="syz.1.5618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 118.624850][ T40] audit: type=1326 audit(115.998:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17491 comm="syz.1.5618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 118.631034][ T40] audit: type=1326 audit(116.007:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17491 comm="syz.1.5618" exe="/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 118.638332][ T40] audit: type=1326 audit(116.007:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17491 comm="syz.1.5618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 118.646882][ T40] audit: type=1326 audit(116.007:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17491 comm="syz.1.5618" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 118.687883][T17508] affs: No valid root block on device nbd0 [ 118.730287][T17520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5631'. [ 119.725322][T17581] random: crng reseeded on system resumption [ 119.806475][T17603] tmpfs: Bad value for 'size' [ 119.840444][T17611] validate_nla: 5 callbacks suppressed [ 119.840455][T17611] netlink: 'syz.0.5675': attribute type 4 has an invalid length. [ 120.100987][T17641] netlink: zone id is out of range [ 120.102663][T17641] netlink: zone id is out of range [ 120.104294][T17641] netlink: zone id is out of range [ 120.107813][T17641] netlink: zone id is out of range [ 120.109536][T17641] netlink: zone id is out of range [ 120.111161][T17641] netlink: zone id is out of range [ 120.112877][T17641] netlink: zone id is out of range [ 120.114495][T17641] netlink: zone id is out of range [ 120.116163][T17641] netlink: zone id is out of range [ 120.118118][T17641] netlink: zone id is out of range [ 120.265235][T17627] syz.3.5686 (17627): drop_caches: 3 [ 120.288812][T17656] program syz.1.5700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.300337][T17658] libceph: resolve '0' (ret=-3): failed [ 120.411482][T17684] dummy0: entered promiscuous mode [ 120.413426][T17684] dummy0: entered allmulticast mode [ 120.420284][T17686] bridge1: entered promiscuous mode [ 120.453449][T17694] program syz.0.5717 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.504557][T17709] CIFS mount error: No usable UNC path provided in device string! [ 120.504557][T17709] [ 120.507952][T17709] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 120.593614][ C3] sr 2:0:0:0: [sr0] tag#11 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 120.597119][ C3] sr 2:0:0:0: [sr0] tag#11 CDB: Write(16) 8a 3e bc a3 6f 6d 46 81 da 12 15 46 [ 120.784326][T17769] ip6t_srh: unknown srh match flags E506 [ 120.834691][T17777] program syz.3.5759 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.838737][T17777] ata1.00: invalid transfer count 0 [ 120.973265][T17807] netlink: 'syz.2.5774': attribute type 1 has an invalid length. [ 121.399336][T17895] 9p: Unknown Cache mode or invalid value fscach [ 121.540916][T17927] xt_connbytes: Forcing CT accounting to be enabled [ 121.611722][T17945] overlay: Bad value for 'workdir' [ 121.624752][T17948] syz.3.5844: attempt to access beyond end of device [ 121.624752][T17948] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 121.630329][T17948] efs: cannot read volume header [ 121.642890][T17953] netlink: 'syz.0.5846': attribute type 1 has an invalid length. [ 121.645403][T17953] __nla_validate_parse: 11 callbacks suppressed [ 121.645410][T17953] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5846'. [ 121.884323][T18018] netlink: 'syz.0.5879': attribute type 1 has an invalid length. [ 121.886850][T18018] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5879'. [ 121.889825][T18018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5879'. [ 121.947719][T18028] xt_TCPMSS: Only works on TCP SYN packets [ 122.090154][T18051] No source specified [ 122.207861][T18065] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5902'. [ 122.407915][ T6080] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 122.536147][ T59] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 122.589663][ T6080] usb 6-1: Using ep0 maxpacket: 16 [ 122.592667][ T6080] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 122.597805][ T6080] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 122.600613][ T6080] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.603060][ T6080] usb 6-1: Product: syz [ 122.604407][ T6080] usb 6-1: Manufacturer: syz [ 122.605852][ T6080] usb 6-1: SerialNumber: syz [ 122.609073][ T6080] usb 6-1: config 0 descriptor?? [ 122.612079][ T6080] hub 6-1:0.0: bad descriptor, ignoring hub [ 122.613948][ T6080] hub 6-1:0.0: probe with driver hub failed with error -5 [ 122.617974][ T6080] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input18 [ 122.719934][ T59] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.724091][ T59] usb 7-1: config 0 has no interfaces? [ 122.727104][ T59] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 122.730111][ T59] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 122.732626][ T59] usb 7-1: Manufacturer: syz [ 122.738468][ T59] usb 7-1: config 0 descriptor?? [ 122.907383][T18106] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.960539][T18071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.963637][T18071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.968483][ T60] usb 7-1: USB disconnect, device number 7 [ 123.035783][T18117] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5927'. [ 123.061774][ T820] usb 6-1: USB disconnect, device number 5 [ 123.294129][T18156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5946'. [ 123.323086][T18162] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5949'. [ 123.368059][T18167] netlink: 'syz.0.5951': attribute type 1 has an invalid length. [ 123.461722][T18185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5958'. [ 123.536504][T18198] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5964'. [ 123.545827][T18200] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 123.597547][T18208] netlink: 'syz.0.5970': attribute type 10 has an invalid length. [ 123.612696][T18208] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.616365][T18208] bond0: (slave team0): Enslaving as an active interface with an up link [ 123.636678][T18216] netlink: 'syz.3.5972': attribute type 11 has an invalid length. [ 123.641533][T18216] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5972'. [ 123.768634][T18250] wg1 speed is unknown, defaulting to 1000 [ 123.802004][T18259] netlink: 'syz.0.5994': attribute type 21 has an invalid length. [ 123.804512][T18259] netlink: 'syz.0.5994': attribute type 1 has an invalid length. [ 123.888492][T18278] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 124.098159][T18329] netlink: 'syz.0.6026': attribute type 1 has an invalid length. [ 124.100811][T18329] netlink: 'syz.0.6026': attribute type 1 has an invalid length. [ 124.621581][T18458] mac80211_hwsim hwsim7 : renamed from wlan1 [ 124.912252][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 124.912263][ T40] audit: type=1800 audit(121.882:83): pid=18526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.6123" name="/newroot/1528/file0" dev="tmpfs" ino=7686 res=0 errno=0 [ 124.956186][T18549] ip6gre1: entered allmulticast mode [ 125.130875][ T40] audit: type=1326 audit(122.087:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18585 comm="syz.1.6152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 125.139509][ T40] audit: type=1326 audit(122.087:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18585 comm="syz.1.6152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 125.146830][ T40] audit: type=1326 audit(122.087:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18585 comm="syz.1.6152" exe="/syz-executor" sig=0 arch=40000003 syscall=162 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 125.153680][ T40] audit: type=1326 audit(122.097:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18585 comm="syz.1.6152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 125.162308][ T40] audit: type=1326 audit(122.097:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18585 comm="syz.1.6152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 125.235761][T18601] overlayfs: empty lowerdir [ 125.578533][ T40] audit: type=1326 audit(122.508:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18659 comm="syz.0.6189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 125.592897][ T40] audit: type=1326 audit(122.508:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18659 comm="syz.0.6189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 125.604480][ T40] audit: type=1326 audit(122.518:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18659 comm="syz.0.6189" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 125.611580][ T40] audit: type=1326 audit(122.518:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18659 comm="syz.0.6189" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 125.631191][T18668] sctp: [Deprecated]: syz.0.6192 (pid 18668) Use of int in max_burst socket option. [ 125.631191][T18668] Use struct sctp_assoc_value instead [ 125.792670][T18702] netlink: 'syz.0.6210': attribute type 6 has an invalid length. [ 125.826999][T18712] bridge_slave_1: left allmulticast mode [ 125.829003][T18712] bridge_slave_1: left promiscuous mode [ 125.831527][T18712] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.835785][T18712] bridge_slave_0: left allmulticast mode [ 125.837729][T18712] bridge_slave_0: left promiscuous mode [ 125.841367][T18712] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.874918][T18724] netlink: 'syz.1.6221': attribute type 11 has an invalid length. [ 126.112010][T18762] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 126.244906][T18796] netlink: 'syz.1.6256': attribute type 6 has an invalid length. [ 126.365494][T18824] xt_TPROXY: Can be used only with -p tcp or -p udp [ 126.547898][T18864] netlink: 'syz.2.6290': attribute type 6 has an invalid length. [ 126.634372][T18878] ip6t_rpfilter: unknown options [ 126.793379][T18909] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 126.949099][T18938] netlink: 'syz.1.6326': attribute type 39 has an invalid length. [ 127.099435][T18963] __nla_validate_parse: 22 callbacks suppressed [ 127.099446][T18963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6338'. [ 127.236652][T18987] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 127.289861][T18995] delete_channel: no stack [ 127.328435][T19007] net_ratelimit: 13 callbacks suppressed [ 127.328447][T19007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.427480][T19031] /dev/sg0: Can't lookup blockdev [ 127.541520][T19055] PM: Enabling pm_trace changes system date and time during resume. [ 127.541520][T19055] PM: Correct system time has to be restored manually after resume. [ 127.842952][T19131] netlink: zone id is out of range [ 127.844695][T19131] netlink: zone id is out of range [ 127.846370][T19131] netlink: zone id is out of range [ 127.848032][T19131] netlink: zone id is out of range [ 127.852071][T19131] netlink: zone id is out of range [ 127.853732][T19131] netlink: zone id is out of range [ 127.855350][T19131] netlink: zone id is out of range [ 127.856969][T19131] netlink: zone id is out of range [ 127.858584][T19131] netlink: zone id is out of range [ 127.911852][T19150] IPv6: NLM_F_CREATE should be specified when creating new route [ 128.065695][T19192] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6449'. [ 128.096963][T19198] efs: device does not support 512 byte blocks [ 128.098971][T19198] device does not support 512 byte blocks [ 128.098971][T19198] [ 128.136960][T19207] netlink: 'syz.2.6457': attribute type 8 has an invalid length. [ 128.207800][T19223] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6465'. [ 128.309077][ T24] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 128.341788][T19251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6479'. [ 128.394973][T19261] netlink: 'syz.1.6484': attribute type 10 has an invalid length. [ 128.402968][T19261] team0: Device veth1_vlan failed to register rx_handler [ 128.414994][T19263] netlink: 'syz.2.6485': attribute type 33 has an invalid length. [ 128.419247][T19263] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6485'. [ 128.460386][T19272] Invalid source name [ 128.461779][T19272] UBIFS error (pid: 19272): cannot open "./file0", error -22 [ 128.471135][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 128.476975][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 128.481478][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 30768, setting to 64 [ 128.484672][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.490382][ T24] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 128.495473][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.497955][ T24] usb 8-1: Product: syz [ 128.499257][ T24] usb 8-1: Manufacturer: syz [ 128.500754][ T24] usb 8-1: SerialNumber: syz [ 128.507494][ T24] usb 8-1: config 0 descriptor?? [ 128.511588][ T24] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input20 [ 128.557096][ C0] kbtab 8-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 128.800931][ T5320] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 128.815085][ T10] usb 8-1: USB disconnect, device number 6 [ 128.875234][T19322] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6514'. [ 128.889245][T19322] bond6: entered promiscuous mode [ 128.891049][T19322] 8021q: adding VLAN 0 to HW filter on device bond6 [ 128.967581][T19335] netlink: 'syz.2.6521': attribute type 3 has an invalid length. [ 128.973435][ T5320] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 128.976563][ T5320] usb 6-1: config 0 interface 0 has no altsetting 0 [ 128.980931][ T5320] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.985410][ T5320] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 128.988295][ T5320] usb 6-1: Product: syz [ 128.989779][ T5320] usb 6-1: Manufacturer: syz [ 128.991342][ T5320] usb 6-1: SerialNumber: syz [ 128.999489][ T5320] usb 6-1: config 0 descriptor?? [ 129.004896][ T5320] usb 6-1: selecting invalid altsetting 0 [ 129.199347][T19371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.203046][T19371] batadv_slave_0: entered promiscuous mode [ 129.223708][ T10] usb 6-1: USB disconnect, device number 6 [ 129.370722][T19397] XFS (nbd0): no-recovery mounts must be read-only. [ 129.421954][T19409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6555'. [ 129.535483][T19431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.538839][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 129.587679][T19441] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6572'. [ 129.809047][T19480] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 129.922695][T19502] syz.3.6601: attempt to access beyond end of device [ 129.922695][T19502] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 129.927040][T19502] FAT-fs (nbd3): unable to read boot sector [ 130.187428][T19554] tmpfs: Bad value for 'mpol' [ 130.218133][T19562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6631'. [ 130.228000][T19566] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 130.256579][T19572] netlink: 'syz.0.6636': attribute type 1 has an invalid length. [ 130.259063][T19572] netlink: 'syz.0.6636': attribute type 1 has an invalid length. [ 130.310265][T19586] usb usb8: usbfs: process 19586 (syz.3.6643) did not claim interface 0 before use [ 130.412731][T19614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6657'. [ 130.582902][T19648] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 131.140669][T19784] unsupported nlmsg_type 40 [ 131.153681][ T820] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 131.317595][ T820] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 131.320569][ T820] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.323002][ T820] usb 8-1: Product: syz [ 131.325730][ T820] usb 8-1: Manufacturer: syz [ 131.327435][ T820] usb 8-1: SerialNumber: syz [ 131.332158][ T820] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 131.341508][ C3] ata1: illegal qc_active transition (00000000->20000000) [ 131.690077][ T1108] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 131.695133][ T1108] ata1.00: configured for UDMA/100 [ 131.699255][T19898] program syz.1.6799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.711235][ T820] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 131.779811][T19918] misc userio: No port type given on /dev/userio [ 131.810245][T19923] validate_nla: 1 callbacks suppressed [ 131.810256][T19923] netlink: 'syz.0.6812': attribute type 15 has an invalid length. [ 131.813134][T19924] netlink: 'syz.2.6811': attribute type 7 has an invalid length. [ 131.894848][T19936] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 131.897561][T19936] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 131.900142][T19936] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 132.150304][ T24] usb 8-1: USB disconnect, device number 7 [ 132.229382][T19989] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 132.280574][T19997] team0: entered promiscuous mode [ 132.282436][T19997] team_slave_0: entered promiscuous mode [ 132.284514][T19997] team_slave_1: entered promiscuous mode [ 132.319176][T20003] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 132.322009][T20003] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 132.726270][T20053] __nla_validate_parse: 12 callbacks suppressed [ 132.726286][T20053] netlink: 45 bytes leftover after parsing attributes in process `syz.3.6875'. [ 132.793977][ T820] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 132.796987][ T820] ath9k_htc: Failed to initialize the device [ 132.800179][ T24] usb 8-1: ath9k_htc: USB layer deinitialized [ 132.845342][T20072] mkiss: ax0: crc mode is auto. [ 132.884196][T20083] program syz.2.6890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.025689][T20118] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6907'. [ 133.096508][T20139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6918'. [ 133.138810][T20149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6922'. [ 133.233442][T20175] tc_dump_action: action bad kind [ 133.407485][T20217] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 133.409532][T20217] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 133.413439][T20217] vhci_hcd vhci_hcd.0: Device attached [ 133.582717][T20257] netlink: 'syz.1.6974': attribute type 10 has an invalid length. [ 133.585219][T20257] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6974'. [ 133.588042][T20257] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 133.590680][T20257] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 133.595550][T20257] net_ratelimit: 10 callbacks suppressed [ 133.595558][T20257] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 133.622351][ T6040] vhci_hcd: vhci_device speed not set [ 133.630679][T20267] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6978'. [ 133.631368][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 133.631380][ T40] audit: type=1107 audit(130.038:104): pid=20263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 133.633922][T20267] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6978'. [ 133.695113][ T6040] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 133.701819][T20218] vhci_hcd: connection closed [ 133.702276][ T1223] vhci_hcd: stop threads [ 133.706108][ T1223] vhci_hcd: release socket [ 133.708613][ T1223] vhci_hcd: disconnect device [ 133.734326][T20285] netlink: 'syz.3.6987': attribute type 1 has an invalid length. [ 133.787718][T20297] random: crng reseeded on system resumption [ 133.838090][T20307] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.883434][T20317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7003'. [ 133.949395][T20333] netlink: 172 bytes leftover after parsing attributes in process `syz.3.7009'. [ 133.980066][T20339] tmpfs: User quota block hardlimit too large. [ 134.021466][T20347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7015'. [ 134.085036][T20361] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 134.366020][T20420] netlink: 'syz.1.7052': attribute type 1 has an invalid length. [ 134.468908][T20442] random: crng reseeded on system resumption [ 134.511184][ T59] IPVS: starting estimator thread 0... [ 134.576703][T20470] random: crng reseeded on system resumption [ 134.591060][T20474] netlink: 'syz.0.7078': attribute type 7 has an invalid length. [ 134.596233][T20474] netlink: 'syz.0.7078': attribute type 8 has an invalid length. [ 134.605986][T20450] IPVS: using max 47 ests per chain, 112800 per kthread [ 134.642354][T20486] bpf: Bad value for 'mode' [ 134.843190][T20542] xt_hashlimit: size too large, truncated to 1048576 [ 135.104337][T20604] program syz.2.7143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.109302][ C3] sr 2:0:0:0: [sr0] tag#31 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 135.112681][ C3] sr 2:0:0:0: [sr0] tag#31 CDB: opcode=0x94 94 a2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 135.281859][T20634] xt_NFQUEUE: number of total queues is 0 [ 135.350510][ T40] audit: type=1326 audit(131.647:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20647 comm="syz.2.7165" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 135.357152][ T40] audit: type=1326 audit(131.647:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20647 comm="syz.2.7165" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 135.363625][ T40] audit: type=1326 audit(131.656:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20647 comm="syz.2.7165" exe="/syz-executor" sig=0 arch=40000003 syscall=327 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 135.371597][ T40] audit: type=1326 audit(131.656:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20647 comm="syz.2.7165" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 135.378273][ T40] audit: type=1326 audit(131.656:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20647 comm="syz.2.7165" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 135.466186][T20673] netlink: 'syz.3.7177': attribute type 5 has an invalid length. [ 135.601796][T20692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.772058][T20553] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.869391][T20745] netlink: 'syz.3.7213': attribute type 1 has an invalid length. [ 135.947323][T20765] netlink: 'syz.2.7223': attribute type 11 has an invalid length. [ 135.954940][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.030466][T20785] netlink: 'syz.1.7233': attribute type 11 has an invalid length. [ 136.102210][T20804] Cannot find add_set index 3 as target [ 136.232931][T20840] ubi0: attaching mtd0 [ 136.234385][T20840] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 136.326489][ T40] audit: type=1326 audit(132.554:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20862 comm="syz.2.7272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 136.334062][ T40] audit: type=1326 audit(132.554:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20862 comm="syz.2.7272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 136.340825][ T40] audit: type=1326 audit(132.564:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20862 comm="syz.2.7272" exe="/syz-executor" sig=0 arch=40000003 syscall=13 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 136.347149][ T40] audit: type=1326 audit(132.564:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20862 comm="syz.2.7272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 136.387989][T20875] wg1 speed is unknown, defaulting to 1000 [ 136.398127][T20881] batman_adv: batadv0: Adding interface: vlan1 [ 136.400141][T20881] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.408495][T20881] batman_adv: batadv0: Interface activated: vlan1 [ 136.839973][T20986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.860710][T20990] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 136.976525][T21022] sit0: entered promiscuous mode [ 137.107277][T21056] xt_time: unknown flags 0xf0 [ 137.317156][T21116] overlayfs: missing 'lowerdir' [ 137.452617][T21147] validate_nla: 5 callbacks suppressed [ 137.452628][T21147] netlink: 'syz.1.7407': attribute type 10 has an invalid length. [ 137.515626][T21164] netlink: 'syz.3.7415': attribute type 3 has an invalid length. [ 137.520795][T21167] netlink: 'syz.2.7416': attribute type 9 has an invalid length. [ 137.857181][T21245] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 137.859403][T21245] /dev/nullb0: Can't open blockdev [ 137.910982][T21259] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 137.912976][T21259] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 137.917018][T21259] vhci_hcd vhci_hcd.0: Device attached [ 137.923161][T21259] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 137.925233][T21259] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 137.927908][T21259] vhci_hcd vhci_hcd.0: Device attached [ 137.930823][T21264] vhci_hcd: connection closed [ 137.930870][T21260] vhci_hcd: connection closed [ 137.933394][ T61] vhci_hcd: stop threads [ 137.936291][ T61] vhci_hcd: release socket [ 137.937702][ T61] vhci_hcd: disconnect device [ 137.939278][ T61] vhci_hcd: stop threads [ 137.940628][ T61] vhci_hcd: release socket [ 137.942546][ T61] vhci_hcd: disconnect device [ 138.039670][T21293] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 138.043849][T21293] Error validating options; rc = [-22] [ 138.113759][T21309] __nla_validate_parse: 25 callbacks suppressed [ 138.113771][T21309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7485'. [ 138.118508][T21309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7485'. [ 138.150977][T21319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7489'. [ 138.174180][T21322] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7491'. [ 138.218393][T21333] netlink: 'syz.0.7497': attribute type 1 has an invalid length. [ 138.330533][T21359] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7509'. [ 138.348674][T21362] openvswitch: netlink: IP tunnel dst address not specified [ 138.409532][T21372] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7516'. [ 138.521250][T21398] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 138.538640][T21403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7531'. [ 138.573498][T21410] netlink: 'syz.2.7535': attribute type 3 has an invalid length. [ 138.575997][T21410] netlink: 'syz.2.7535': attribute type 3 has an invalid length. [ 138.578597][T21410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7535'. [ 138.682088][T21441] gfs2: gfs2 mount does not exist [ 138.685130][T21444] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7552'. [ 138.700388][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 138.854325][T21486] overlayfs: missing 'lowerdir' [ 138.935302][T21506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7583'. [ 139.203066][ T6040] vhci_hcd: vhci_device speed not set [ 139.257477][T21566] netlink: 'syz.2.7612': attribute type 11 has an invalid length. [ 139.437811][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 139.437822][ T40] audit: type=1326 audit(135.464:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21588 comm="syz.2.7619" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 139.448358][ T40] audit: type=1326 audit(135.464:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21588 comm="syz.2.7619" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 139.457508][ T40] audit: type=1326 audit(135.473:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21588 comm="syz.2.7619" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 139.465936][ T40] audit: type=1326 audit(135.473:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21588 comm="syz.2.7619" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 139.474142][ T40] audit: type=1326 audit(135.473:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21588 comm="syz.2.7619" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 140.081825][T21619] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.861878][T21678] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 140.997221][T21713] netlink: 'syz.1.7679': attribute type 8 has an invalid length. [ 141.142087][T21745] netlink: 'syz.0.7696': attribute type 2 has an invalid length. [ 141.144546][T21745] netlink: 'syz.0.7696': attribute type 11 has an invalid length. [ 141.153727][T21747] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 141.204610][T21762] BIDI support in bsg has been removed. [ 141.284195][T21783] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 141.307454][T21787] AppArmor: change_hat: Invalid input '0x' [ 141.585343][T21846] syz.1.7746: attempt to access beyond end of device [ 141.585343][T21846] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 141.592452][T21846] EXT4-fs (nbd1): unable to read superblock [ 141.664051][T21863] CIFS: iocharset name too long [ 141.717628][T21875] vxcan1 speed is unknown, defaulting to 1000 [ 141.721639][T21875] vxcan1 speed is unknown, defaulting to 1000 [ 141.724163][T21875] vxcan1 speed is unknown, defaulting to 1000 [ 141.803105][T21875] infiniband syz1: set active [ 141.805815][T16493] vxcan1 speed is unknown, defaulting to 1000 [ 141.807899][T21875] infiniband syz1: added vxcan1 [ 141.831160][T21875] RDS/IB: syz1: added [ 141.835213][T21875] smc: adding ib device syz1 with port count 1 [ 141.837328][T21875] smc: ib device syz1 port 1 has pnetid [ 141.840668][T16493] vxcan1 speed is unknown, defaulting to 1000 [ 141.843691][T21875] vxcan1 speed is unknown, defaulting to 1000 [ 141.937547][T21875] vxcan1 speed is unknown, defaulting to 1000 [ 142.004800][T21918] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 142.049710][T21928] : entered promiscuous mode [ 142.056233][T21875] vxcan1 speed is unknown, defaulting to 1000 [ 142.149498][T21946] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 142.168110][T21875] vxcan1 speed is unknown, defaulting to 1000 [ 142.190963][T21954] bond0: entered promiscuous mode [ 142.212170][T21960] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 142.215278][T21960] overlayfs: missing 'lowerdir' [ 142.431143][T22008] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 142.894392][T22133] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 142.946052][T22141] validate_nla: 5 callbacks suppressed [ 142.946063][T22141] netlink: 'syz.0.7882': attribute type 2 has an invalid length. [ 142.950224][T22141] netlink: 'syz.0.7882': attribute type 1 has an invalid length. [ 142.967484][T22145] netlink: 'syz.3.7884': attribute type 5 has an invalid length. [ 143.018508][T22157] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 143.022694][T22157] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 143.243402][T22194] @: renamed from veth0_vlan (while UP) [ 143.347670][T22207] NILFS (nbd3): device size too small [ 143.504410][T22228] netlink: 'syz.3.7925': attribute type 1 has an invalid length. [ 143.516878][T22230] netlink: 'syz.0.7926': attribute type 2 has an invalid length. [ 143.519362][T22230] netlink: 'syz.0.7926': attribute type 8 has an invalid length. [ 143.521866][T22230] __nla_validate_parse: 12 callbacks suppressed [ 143.521873][T22230] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7926'. [ 143.552379][T22234] dns_resolver: Unsupported content type (5) [ 143.826438][T22276] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967293 > 32) [ 143.937941][T22296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7957'. [ 143.941206][T22296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7957'. [ 144.017168][T22175] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 144.180142][T22352] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7988'. [ 144.199920][T22356] wg1 speed is unknown, defaulting to 1000 [ 144.201107][T22356] vxcan1 speed is unknown, defaulting to 1000 [ 144.437626][T22405] Invalid ELF header magic: != ELF [ 144.478695][T22415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8017'. [ 144.482224][T22417] x_tables: ip_tables: ah match: only valid for protocol 51 [ 144.553915][T22431] Invalid ELF header magic: != ELF [ 144.623756][T22449] snd_dummy snd_dummy.0: control 1:0:0:syz0:-3 is already present [ 144.659748][T22457] bond3: entered allmulticast mode [ 144.720159][T22474] program syz.0.8046 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.757230][T22486] netlink: 'syz.2.8052': attribute type 11 has an invalid length. [ 144.767176][T22488] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8053'. [ 144.812697][T22500] set match dimension is over the limit! [ 144.981636][T22545] program syz.1.8081 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.120363][T22575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8096'. [ 145.212108][T22595] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8106'. [ 145.374785][T22629] program syz.2.8122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.451534][T22645] netlink: 'syz.2.8129': attribute type 1 has an invalid length. [ 145.454002][T22645] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8129'. [ 145.604347][ T40] audit: type=1326 audit(370.235:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22680 comm="syz.2.8148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 145.617178][ T40] audit: type=1326 audit(370.235:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22680 comm="syz.2.8148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 145.623978][ T40] audit: type=1326 audit(370.244:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22680 comm="syz.2.8148" exe="/syz-executor" sig=0 arch=40000003 syscall=249 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 145.633368][ T40] audit: type=1326 audit(370.244:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22680 comm="syz.2.8148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 145.639957][ T40] audit: type=1326 audit(370.244:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22680 comm="syz.2.8148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 145.705141][T22705] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 145.790585][T22726] netlink: 'syz.3.8171': attribute type 4 has an invalid length. [ 145.868926][T22747] netlink: 'syz.2.8181': attribute type 1 has an invalid length. [ 145.871344][T22747] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8181'. [ 145.942646][T22769] deleting an unspecified loop device is not supported. [ 145.981951][T22777] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 146.085079][T22809] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 146.101972][T22811] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 146.104524][T22811] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 146.122023][T22815] Invalid source name [ 146.143470][T22819] usb 2-1: USB disconnect, device number 2 [ 146.219681][T22837] 9pnet_virtio: no channels available for device syz [ 146.594909][T22934] ceph: Path missing in source [ 146.764344][T22972] IPv6: sit3: Disabled Multicast RS [ 146.766499][T22972] sit3: entered allmulticast mode [ 147.104614][T23053] tmpfs: Bad value for 'mpol' [ 147.114416][T23055] sctp: [Deprecated]: syz.3.8320 (pid 23055) Use of int in max_burst socket option deprecated. [ 147.114416][T23055] Use struct sctp_assoc_value instead [ 147.131351][T23059] netlink: 'syz.2.8323': attribute type 11 has an invalid length. [ 147.181153][T23069] random: crng reseeded on system resumption [ 147.322147][T23107] xt_socket: unknown flags 0x46 [ 147.444138][T23137] mkiss: ax0: crc mode is auto. [ 147.453674][T23141] binder: 23140:23141 ioctl c018620b 0 returned -14 [ 147.462532][T23139] geneve3: entered promiscuous mode [ 147.464252][T23139] geneve3: entered allmulticast mode [ 147.592510][T23174] dummy0: left promiscuous mode [ 147.594547][T23174] dummy0: left allmulticast mode [ 147.610111][T23174] team0: Port device dummy0 added [ 147.621315][T23176] vxcan3: entered promiscuous mode [ 147.622906][T23176] vxcan3: entered allmulticast mode [ 148.055999][T23260] dummy0: entered promiscuous mode [ 148.058122][T23260] bridge0: port 3(dummy0) entered blocking state [ 148.063997][T23260] bridge0: port 3(dummy0) entered disabled state [ 148.067333][T23260] dummy0: entered allmulticast mode [ 148.070223][T23260] bridge0: port 3(dummy0) entered blocking state [ 148.072262][T23260] bridge0: port 3(dummy0) entered forwarding state [ 148.158429][T23280] Cannot find del_set index 320 as target [ 148.173893][T23282] NCSI netlink: No device for ifindex 0 [ 148.213230][ T40] audit: type=1400 audit(372.676:125): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=23291 comm="syz.3.8438" [ 148.262607][T23302] xt_TCPMSS: Only works on TCP SYN packets [ 148.305745][T23312] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 148.343332][ T5320] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 148.444693][T23336] sock: sock_timestamping_bind_phc: sock not bind to device [ 148.508442][ T5320] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 148.511319][ T5320] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 148.513994][ T5320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.519078][T23266] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 148.535628][ T5320] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 148.550030][T23354] delete_channel: no stack [ 148.608076][ T40] audit: type=1326 audit(373.041:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23363 comm="syz.3.8474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 148.615089][ T40] audit: type=1326 audit(373.041:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23363 comm="syz.3.8474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 148.621884][ T40] audit: type=1326 audit(373.041:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23363 comm="syz.3.8474" exe="/syz-executor" sig=0 arch=40000003 syscall=258 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 148.628632][ T40] audit: type=1326 audit(373.041:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23363 comm="syz.3.8474" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 148.778786][T23402] validate_nla: 7 callbacks suppressed [ 148.778797][T23402] netlink: 'syz.0.8493': attribute type 21 has an invalid length. [ 148.779679][ T5320] usb 6-1: USB disconnect, device number 7 [ 148.780625][T23402] netlink: 'syz.0.8493': attribute type 4 has an invalid length. [ 148.789725][T23402] netlink: 'syz.0.8493': attribute type 3 has an invalid length. [ 148.886781][T23424] __nla_validate_parse: 20 callbacks suppressed [ 148.886792][T23424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8504'. [ 148.905819][T23428] netlink: 'syz.2.8506': attribute type 2 has an invalid length. [ 149.031452][T23456] netlink: 201660 bytes leftover after parsing attributes in process `syz.0.8520'. [ 149.078281][T23466] netlink: 'syz.2.8525': attribute type 3 has an invalid length. [ 149.080795][T23466] netlink: 'syz.2.8525': attribute type 1 has an invalid length. [ 149.084462][T23466] netlink: 220 bytes leftover after parsing attributes in process `syz.2.8525'. [ 149.134959][T23477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8530'. [ 149.324910][T23517] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 149.329577][T23517] overlayfs: overlapping lowerdir path [ 149.364819][T23525] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551615) [ 149.568178][T23580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8581'. [ 149.572099][T23581] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.683475][T23604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.717856][T23609] cgroup: Unknown subsys name 'fowner>00000000000000000000' [ 149.746574][T23617] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 149.747696][T23618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8598'. [ 149.797215][T16493] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 149.918842][T23654] syz.2.8617 (23654): /proc/23652/oom_adj is deprecated, please use /proc/23652/oom_score_adj instead. [ 149.979649][T16493] usb 5-1: Using ep0 maxpacket: 32 [ 149.991964][T16493] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 149.995079][T16493] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.997705][T16493] usb 5-1: Product: syz [ 150.011173][T16493] usb 5-1: Manufacturer: syz [ 150.012835][T16493] usb 5-1: SerialNumber: syz [ 150.015537][T16493] usb 5-1: config 0 descriptor?? [ 150.032529][T16493] as10x_usb: device has been detected [ 150.034700][T16493] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 150.054253][T16493] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 150.071086][T16493] as10x_usb: error during firmware upload part1 [ 150.073831][T16493] Registered device Abilis Systems DVB-Titan [ 150.131511][T23696] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 150.178667][T23703] netlink: 'syz.2.8641': attribute type 11 has an invalid length. [ 150.230535][T23711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8645'. [ 150.238965][T16493] usb 5-1: USB disconnect, device number 8 [ 150.251799][T16493] Unregistered device Abilis Systems DVB-Titan [ 150.257231][T16493] as10x_usb: device has been disconnected [ 150.311442][T23719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.457236][T23750] cgroup: Unknown subsys name 'noxattr' [ 150.584400][T23777] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8677'. [ 150.668533][T23795] syz.1.8685: attempt to access beyond end of device [ 150.668533][T23795] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 150.900541][T23844] netlink: 'syz.3.8710': attribute type 2 has an invalid length. [ 150.902992][T23844] netlink: 'syz.3.8710': attribute type 1 has an invalid length. [ 150.942024][T23855] cgroup: noprefix used incorrectly [ 150.993206][T23868] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.8721'. [ 151.003584][T23870] syz.3.8722: attempt to access beyond end of device [ 151.003584][T23870] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 151.011261][T23870] syz.3.8722: attempt to access beyond end of device [ 151.011261][T23870] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 151.015249][T23870] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 151.019885][T23870] syz.3.8722: attempt to access beyond end of device [ 151.019885][T23870] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 151.023727][T23870] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 151.026462][T23870] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 151.029057][T23870] UDF-fs: Scanning with blocksize 512 failed [ 151.031152][T23870] syz.3.8722: attempt to access beyond end of device [ 151.031152][T23870] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 151.035087][T23870] syz.3.8722: attempt to access beyond end of device [ 151.035087][T23870] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 151.039363][T23870] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 151.042087][T23870] syz.3.8722: attempt to access beyond end of device [ 151.042087][T23870] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 151.046053][T23870] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 151.048948][T23870] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 151.051094][T23870] UDF-fs: Scanning with blocksize 1024 failed [ 151.053071][T23870] syz.3.8722: attempt to access beyond end of device [ 151.053071][T23870] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 151.057888][T23870] syz.3.8722: attempt to access beyond end of device [ 151.057888][T23870] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 151.061867][T23870] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 151.063412][T23882] kAFS: unable to lookup cell 'mSjQ=ȠA4Z1ˡ8' [ 151.064583][T23870] syz.3.8722: attempt to access beyond end of device [ 151.064583][T23870] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 151.067586][T23884] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 151.070539][T23870] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 151.072224][T23884] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 151.074873][T23870] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 151.079796][T23870] UDF-fs: Scanning with blocksize 2048 failed [ 151.081835][T23884] vhci_hcd vhci_hcd.0: Device attached [ 151.083931][T23870] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 151.086703][T23870] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 151.089365][T23870] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 151.091882][T23870] UDF-fs: Scanning with blocksize 4096 failed [ 151.093743][T23870] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 151.094664][T23885] vhci_hcd: unknown pdu 2 [ 151.099208][ T1145] vhci_hcd: stop threads [ 151.100595][ T1145] vhci_hcd: release socket [ 151.103471][ T1145] vhci_hcd: disconnect device [ 151.116358][T23892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8732'. [ 151.214643][T23906] netlink: 'syz.2.8739': attribute type 1 has an invalid length. [ 151.379693][T23930] program syz.0.8751 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.601854][T23978] bond2: entered allmulticast mode [ 151.788314][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 151.788325][ T40] audit: type=1326 audit(376.025:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24018 comm="syz.3.8794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 151.798887][ T40] audit: type=1326 audit(376.025:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24018 comm="syz.3.8794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 151.805571][ T40] audit: type=1326 audit(376.034:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24018 comm="syz.3.8794" exe="/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 151.812300][ T40] audit: type=1326 audit(376.034:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24018 comm="syz.3.8794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 151.818740][ T40] audit: type=1326 audit(376.034:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24018 comm="syz.3.8794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 151.852397][T24035] sit0: left promiscuous mode [ 151.875347][T24035] 8021q: adding VLAN 0 to HW filter on device  [ 151.879347][T24035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.187441][T24116] autofs4:pid:24116:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 152.191726][T24116] autofs4:pid:24116:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 152.262359][T24134] binfmt_misc: register: failed to install interpreter file ./file0 [ 152.393025][T24170] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 152.411493][T24173] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 152.468421][T24189] xt_SECMARK: invalid mode: 0 [ 152.486014][T24193] ufs: You didn't specify the type of your ufs filesystem [ 152.486014][T24193] [ 152.486014][T24193] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 152.486014][T24193] [ 152.486014][T24193] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 152.496706][T24193] ufs: ufs_fill_super(): bad magic number [ 152.514210][T24200] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.579278][T24215] befs: (loop7): No write support. Marking filesystem read-only [ 152.585546][T24215] befs: (loop7): unable to read superblock [ 152.632296][T24232] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.678099][T24245] overlayfs: failed to resolve './file0': -2 [ 153.279762][T24307] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 153.694032][T24339] sp0: Synchronizing with TNC [ 153.825394][ T40] audit: type=1326 audit(606.923:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24342 comm="syz.0.8953" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 153.832993][ T40] audit: type=1326 audit(606.923:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24342 comm="syz.0.8953" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 153.846188][ T40] audit: type=1326 audit(606.923:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24342 comm="syz.0.8953" exe="/syz-executor" sig=0 arch=40000003 syscall=317 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 153.856404][ T40] audit: type=1326 audit(606.923:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24342 comm="syz.0.8953" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 153.864468][ T40] audit: type=1326 audit(606.923:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24342 comm="syz.0.8953" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa8579 code=0x7ffc0000 [ 153.878081][T24352] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 154.048847][T24392] xt_hashlimit: overflow, try lower: 5/0 [ 154.129946][T24414] IPv6: Can't replace route, no match found [ 154.337513][T24462] __nla_validate_parse: 13 callbacks suppressed [ 154.337524][T24462] netlink: 532 bytes leftover after parsing attributes in process `syz.3.9014'. [ 154.532049][T24512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.699358][T24556] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 154.701512][T24556] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 154.768991][T24575] Invalid source name [ 154.770333][T24575] UBIFS error (pid: 24575): cannot open "./file0", error -22 [ 154.802954][T24585] ALSA: mixer_oss: invalid OSS volume '' [ 154.807299][T24585] ALSA: mixer_oss: invalid OSS volume 'ұB;T`@$EcXMYd,' [ 154.810053][T24585] ALSA: mixer_oss: invalid OSS volume 'b@h#' [ 154.812061][T24585] ALSA: mixer_oss: invalid OSS volume 'h4XS4v=0_>&' [ 154.814371][T24585] ALSA: mixer_oss: invalid OSS volume '|/"tj' [ 154.816226][T24585] ALSA: mixer_oss: invalid OSS volume '-z5c^J6$' [ 154.818392][T24585] ALSA: mixer_oss: invalid OSS volume '0Ty󉴪jP&at' [ 154.820877][T24585] ALSA: mixer_oss: invalid OSS volume '|~\' [ 154.823648][T24585] ALSA: mixer_oss: invalid OSS volume '@^3bɜ}G$#\("/oL' [ 154.826315][T24585] ALSA: mixer_oss: invalid OSS volume 'I :' [ 154.828371][T24585] ALSA: mixer_oss: invalid OSS volume '%^vhcGJPr('⍯Q=' [ 154.830947][T24585] ALSA: mixer_oss: invalid OSS volume ' Gj;4Ìz3WҼ0F=%' [ 154.836531][T24585] ALSA: mixer_oss: invalid OSS volume ';4 4fh߇GIבQ5oJ' [ 154.839608][T24585] ALSA: mixer_oss: invalid OSS volume 'Wl]Y1-J<A>o' [ 154.916717][ T59] IPVS: starting estimator thread 0... [ 155.014229][T24615] IPVS: using max 47 ests per chain, 112800 per kthread [ 155.156070][T24675] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9119'. [ 155.289820][T24708] netlink: 'syz.2.9133': attribute type 21 has an invalid length. [ 155.293327][T24708] netlink: 'syz.2.9133': attribute type 1 has an invalid length. [ 155.295625][T24708] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9133'. [ 155.345183][T24725] PM: Enabling pm_trace changes system date and time during resume. [ 155.345183][T24725] PM: Correct system time has to be restored manually after resume. [ 155.563517][T24787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9171'. [ 155.566369][T24787] netlink: 312 bytes leftover after parsing attributes in process `syz.0.9171'. [ 155.569183][T24787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9171'. [ 155.698122][T24824] tmpfs: Bad value for 'mpol' [ 155.729148][T24833] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 155.765472][T24839] dvmrp9: entered allmulticast mode [ 155.793039][T24846] netlink: 'syz.1.9201': attribute type 1 has an invalid length. [ 155.796762][T24846] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9201'. [ 155.955176][ T1457] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 156.127814][ T1457] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4 [ 156.131227][ T1457] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023 [ 156.136333][ T1457] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 156.139429][ T1457] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.141894][ T1457] usb 7-1: Product: syz [ 156.143217][ T1457] usb 7-1: Manufacturer: syz [ 156.144657][ T1457] usb 7-1: SerialNumber: syz [ 156.147994][ T1457] usb 7-1: config 0 descriptor?? [ 156.152024][ T1457] hub 7-1:0.0: bad descriptor, ignoring hub [ 156.153944][ T1457] hub 7-1:0.0: probe with driver hub failed with error -5 [ 156.157631][ T1457] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input27 [ 156.190189][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 156.371973][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 156.376568][ T10] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 156.379292][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.381782][ T10] usb 8-1: Product: syz [ 156.383432][ T10] usb 8-1: Manufacturer: syz [ 156.384924][ T10] usb 8-1: SerialNumber: syz [ 156.387873][ T10] usb 8-1: config 0 descriptor?? [ 156.392180][ T10] as10x_usb: device has been detected [ 156.394278][ T10] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 156.404012][ T10] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 156.409323][ T10] as10x_usb: error during firmware upload part1 [ 156.411538][ T10] Registered device Abilis Systems DVB-Titan [ 156.615046][ T10] usb 8-1: USB disconnect, device number 8 [ 156.627463][ T10] Unregistered device Abilis Systems DVB-Titan [ 156.628606][ T10] as10x_usb: device has been disconnected [ 156.878996][ T1457] usb 7-1: USB disconnect, device number 8 [ 156.887729][T24879] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 156.890076][T24879] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 156.956562][T24885] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 156.973492][T24887] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9220'. [ 157.006007][T24892] usb usb8: usbfs: process 24892 (syz.1.9223) did not claim interface 0 before use [ 157.096036][T24902] dvmrp9: entered allmulticast mode [ 157.163185][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 157.214517][T24922] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9238'. [ 157.215870][T24920] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 157.289482][T24922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.296026][T24922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.300241][T24922] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 157.303707][T24922] bond0 (unregistering): (slave team0): Releasing backup interface [ 157.307401][T24922] bond0 (unregistering): Released all slaves [ 157.474511][T24944] nvme_fabrics: missing parameter 'transport=%s' [ 157.476765][T24944] nvme_fabrics: missing parameter 'nqn=%s' [ 157.517812][ T59] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 157.525381][T24958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9256'. [ 157.647146][T24983] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 157.676354][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 157.678048][T24989] netlink: 'syz.2.9272': attribute type 21 has an invalid length. [ 157.682283][ T59] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 157.684946][ T59] usb 6-1: config 179 has no interface number 0 [ 157.687416][T24991] netlink: 'syz.0.9273': attribute type 8 has an invalid length. [ 157.687434][ T59] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 157.693927][ T59] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 157.697655][ T59] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 157.701116][ T59] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 157.704219][ T59] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 157.709360][ T59] usb 6-1: config 179 interface 65 has no altsetting 0 [ 157.711989][ T59] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 157.715154][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.729926][ T59] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input28 [ 157.854617][T25007]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.861831][T25007]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.865976][T25007]  (unregistering): Released all slaves [ 157.940594][ T59] usb 6-1: USB disconnect, device number 8 [ 157.943381][ T59] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 158.013994][T25041] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 158.120614][T25065] bio_check_eod: 4 callbacks suppressed [ 158.120625][T25065] syz.2.9310: attempt to access beyond end of device [ 158.120625][T25065] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 158.126806][T25065] gfs2: error -5 reading superblock [ 158.133812][T25067] usb usb8: usbfs: process 25067 (syz.0.9311) did not claim interface 0 before use [ 158.356444][T25096] nvme_fabrics: missing parameter 'transport=%s' [ 158.358486][T25096] nvme_fabrics: missing parameter 'nqn=%s' [ 158.656833][T25131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.662776][T25131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.666640][T25131] bond0 (unregistering): Released all slaves [ 158.767410][T25152] IPv6: Can't replace route, no match found [ 158.820101][T25162] sp0: Synchronizing with TNC [ 159.005029][T25189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.066069][T25199] netlink: 'syz.3.9369': attribute type 21 has an invalid length. [ 159.212021][T25234] geneve1: entered allmulticast mode [ 159.333847][T25231] /dev/sr0: Can't open blockdev [ 159.419274][T25235] /dev/sr0: Can't open blockdev [ 159.492140][T25249] binder: 25248:25249 ioctl c0306201 80000180 returned -14 [ 159.602276][T25273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.822206][T25321] __nla_validate_parse: 9 callbacks suppressed [ 159.822217][T25321] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9430'. [ 159.828825][T25321] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9430'. [ 160.045823][T25361] IPv6: sit1: Disabled Multicast RS [ 160.321885][T25425] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9483'. [ 160.427400][ T40] audit: type=1326 audit(613.106:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25451 comm="syz.3.9493" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 160.437469][ T40] audit: type=1326 audit(613.106:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25451 comm="syz.3.9493" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 160.444406][ T40] audit: type=1326 audit(613.115:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25451 comm="syz.3.9493" exe="/syz-executor" sig=0 arch=40000003 syscall=81 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 160.453377][ T40] audit: type=1326 audit(613.115:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25451 comm="syz.3.9493" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 160.460250][ T40] audit: type=1326 audit(613.115:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25451 comm="syz.3.9493" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 160.633429][T16493] IPVS: starting estimator thread 0... [ 160.643663][T25493] Invalid source name [ 160.643673][T25493] UBIFS error (pid: 25493): cannot open "./file0", error -22 [ 160.686013][T25499] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.9515'. [ 160.723594][T25491] IPVS: using max 47 ests per chain, 112800 per kthread [ 160.759371][T25515] netdevsim netdevsim3: Direct firmware load for 0PqD"2NktTWj%N failed with error -2 [ 160.763220][T25515] netdevsim netdevsim3: Falling back to sysfs fallback for: 0PqD"2NktTWj%N [ 160.775603][T25519] netlink: zone id is out of range [ 160.778877][T25519] netlink: zone id is out of range [ 160.780534][T25519] netlink: zone id is out of range [ 160.782647][T25519] netlink: del zone limit has 8 unknown bytes [ 161.164500][T25581] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9553'. [ 161.199459][T25588] xt_policy: neither incoming nor outgoing policy selected [ 161.395323][T25626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9575'. [ 161.466876][T25644] random: crng reseeded on system resumption [ 161.478787][T25644] Unrecognized hibernate image header format! [ 161.480887][T25644] PM: hibernation: Image mismatch: architecture specific data [ 161.811272][T25721] dlm: no locking on control device [ 161.836988][T25727] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 161.864384][T25734] netlink: 'syz.0.9629': attribute type 3 has an invalid length. [ 161.949114][T25752] netlink: 'syz.2.9638': attribute type 1 has an invalid length. [ 161.951620][T25752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9638'. [ 161.968701][T25754] sctp: [Deprecated]: syz.0.9639 (pid 25754) Use of int in max_burst socket option deprecated. [ 161.968701][T25754] Use struct sctp_assoc_value instead [ 162.022272][T25766] netlink: 'syz.1.9645': attribute type 3 has an invalid length. [ 162.024747][T25766] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9645'. [ 162.123161][T25796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.126934][T25796] batadv_slave_0: entered promiscuous mode [ 162.128777][T25796] batadv_slave_0: entered allmulticast mode [ 162.253121][ T40] audit: type=1326 audit(614.818:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25830 comm="syz.3.9679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 162.259665][ T40] audit: type=1326 audit(614.818:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25830 comm="syz.3.9679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 162.266670][ T40] audit: type=1326 audit(614.818:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25830 comm="syz.3.9679" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 162.273042][ T40] audit: type=1326 audit(614.818:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25830 comm="syz.3.9679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 162.279589][ T40] audit: type=1326 audit(614.818:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25830 comm="syz.3.9679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 162.287664][T25838] random: crng reseeded on system resumption [ 162.593457][T25905] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 162.596124][T25905] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 162.606096][T25909] openvswitch: netlink: Message has 16 unknown bytes. [ 162.632937][T25915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.686628][T25921] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.689390][T25921] [ 162.690217][T25921] ====================================================== [ 162.692343][T25921] WARNING: possible circular locking dependency detected [ 162.694545][T25921] 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 Not tainted [ 162.698199][T25921] ------------------------------------------------------ [ 162.700391][T25921] syz.0.9721/25921 is trying to acquire lock: [ 162.702308][T25921] ffff88805f8e0e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_device_event+0x5d4/0x770 [ 162.705419][T25921] [ 162.705419][T25921] but task is already holding lock: [ 162.707755][T25921] ffff88804eebed30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink.constprop.0+0x2e9/0x4380 [ 162.711096][T25921] [ 162.711096][T25921] which lock already depends on the new lock. [ 162.711096][T25921] [ 162.714333][T25921] [ 162.714333][T25921] the existing dependency chain (in reverse order) is: [ 162.717178][T25921] [ 162.717178][T25921] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 162.719847][T25921] __mutex_lock+0x199/0xb90 [ 162.721455][T25921] dev_set_mtu+0xa2/0x260 [ 162.723019][T25921] team_add_slave+0x90f/0x21a0 [ 162.724722][T25921] do_set_master+0x40c/0x730 [ 162.726380][T25921] do_setlink.constprop.0+0xbd8/0x4380 [ 162.728318][T25921] rtnl_newlink+0x1446/0x2000 [ 162.729981][T25921] rtnetlink_rcv_msg+0x95b/0xe90 [ 162.731732][T25921] netlink_rcv_skb+0x158/0x420 [ 162.733434][T25921] netlink_unicast+0x53a/0x7f0 [ 162.735121][T25921] netlink_sendmsg+0x8d1/0xdd0 [ 162.736826][T25921] ____sys_sendmsg+0xa98/0xc70 [ 162.738528][T25921] ___sys_sendmsg+0x134/0x1d0 [ 162.740220][T25921] __sys_sendmsg+0x16d/0x220 [ 162.741853][T25921] __do_fast_syscall_32+0x7c/0x3a0 [ 162.743671][T25921] do_fast_syscall_32+0x32/0x80 [ 162.745396][T25921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.747558][T25921] [ 162.747558][T25921] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 162.750164][T25921] __lock_acquire+0x126f/0x1c90 [ 162.751904][T25921] lock_acquire+0x179/0x350 [ 162.753507][T25921] __mutex_lock+0x199/0xb90 [ 162.755167][T25921] team_device_event+0x5d4/0x770 [ 162.756938][T25921] notifier_call_chain+0xb9/0x410 [ 162.758702][T25921] call_netdevice_notifiers_info+0xbe/0x140 [ 162.760752][T25921] __dev_notify_flags+0x2a8/0x2e0 [ 162.762508][T25921] netif_change_flags+0x108/0x160 [ 162.764304][T25921] do_setlink.constprop.0+0xb53/0x4380 [ 162.766235][T25921] rtnl_newlink+0x18e0/0x2000 [ 162.767906][T25921] rtnetlink_rcv_msg+0x95b/0xe90 [ 162.769637][T25921] netlink_rcv_skb+0x158/0x420 [ 162.771333][T25921] netlink_unicast+0x53a/0x7f0 [ 162.773049][T25921] netlink_sendmsg+0x8d1/0xdd0 [ 162.774741][T25921] ____sys_sendmsg+0xa98/0xc70 [ 162.776539][T25921] ___sys_sendmsg+0x134/0x1d0 [ 162.778210][T25921] __sys_sendmsg+0x16d/0x220 [ 162.779859][T25921] __do_fast_syscall_32+0x7c/0x3a0 [ 162.781651][T25921] do_fast_syscall_32+0x32/0x80 [ 162.783370][T25921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.785578][T25921] [ 162.785578][T25921] other info that might help us debug this: [ 162.785578][T25921] [ 162.788808][T25921] Possible unsafe locking scenario: [ 162.788808][T25921] [ 162.791165][T25921] CPU0 CPU1 [ 162.792888][T25921] ---- ---- [ 162.794543][T25921] lock(&dev_instance_lock_key#3); [ 162.796220][T25921] lock(team->team_lock_key#2); [ 162.798645][T25921] lock(&dev_instance_lock_key#3); [ 162.801063][T25921] lock(team->team_lock_key#2); [ 162.802670][T25921] [ 162.802670][T25921] *** DEADLOCK *** [ 162.802670][T25921] [ 162.805244][T25921] 2 locks held by syz.0.9721/25921: [ 162.806835][T25921] #0: ffffffff9034e2a8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 162.809687][T25921] #1: ffff88804eebed30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink.constprop.0+0x2e9/0x4380 [ 162.813176][T25921] [ 162.813176][T25921] stack backtrace: [ 162.815062][T25921] CPU: 1 UID: 0 PID: 25921 Comm: syz.0.9721 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 162.815076][T25921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.815083][T25921] Call Trace: [ 162.815089][T25921] [ 162.815093][T25921] dump_stack_lvl+0x116/0x1f0 [ 162.815110][T25921] print_circular_bug+0x275/0x350 [ 162.815124][T25921] check_noncircular+0x14c/0x170 [ 162.815138][T25921] __lock_acquire+0x126f/0x1c90 [ 162.815152][T25921] lock_acquire+0x179/0x350 [ 162.815164][T25921] ? team_device_event+0x5d4/0x770 [ 162.815175][T25921] ? __pfx___might_resched+0x10/0x10 [ 162.815187][T25921] ? fib_rebalance+0x86/0xef0 [ 162.815201][T25921] __mutex_lock+0x199/0xb90 [ 162.815216][T25921] ? team_device_event+0x5d4/0x770 [ 162.815226][T25921] ? fib_sync_up+0x3a0/0xd10 [ 162.815238][T25921] ? team_device_event+0x5d4/0x770 [ 162.815248][T25921] ? __pfx___mutex_lock+0x10/0x10 [ 162.815265][T25921] ? team_device_event+0x5d4/0x770 [ 162.815274][T25921] team_device_event+0x5d4/0x770 [ 162.815284][T25921] notifier_call_chain+0xb9/0x410 [ 162.815295][T25921] ? __pfx_team_device_event+0x10/0x10 [ 162.815306][T25921] call_netdevice_notifiers_info+0xbe/0x140 [ 162.815318][T25921] __dev_notify_flags+0x2a8/0x2e0 [ 162.815333][T25921] ? __pfx___dev_notify_flags+0x10/0x10 [ 162.815346][T25921] ? __dev_change_flags+0x3d5/0x720 [ 162.815362][T25921] ? __pfx_validate_linkmsg+0x10/0x10 [ 162.815378][T25921] netif_change_flags+0x108/0x160 [ 162.815393][T25921] do_setlink.constprop.0+0xb53/0x4380 [ 162.815410][T25921] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 162.815426][T25921] ? stack_trace_save+0x8e/0xc0 [ 162.815436][T25921] ? __pfx_stack_trace_save+0x10/0x10 [ 162.815447][T25921] ? __lock_acquire+0xb8a/0x1c90 [ 162.815460][T25921] ? kasan_save_stack+0x42/0x60 [ 162.815474][T25921] ? kasan_save_stack+0x33/0x60 [ 162.815487][T25921] ? __kasan_kmalloc+0xaa/0xb0 [ 162.815503][T25921] ? __pfx___might_resched+0x10/0x10 [ 162.815513][T25921] ? rcu_is_watching+0x12/0xc0 [ 162.815522][T25921] ? trace_contention_end+0xdd/0x130 [ 162.815536][T25921] ? __mutex_lock+0x1ca/0xb90 [ 162.815550][T25921] ? rcu_is_watching+0x12/0xc0 [ 162.815559][T25921] ? rtnl_newlink+0x600/0x2000 [ 162.815573][T25921] ? trace_cap_capable+0x18d/0x200 [ 162.815590][T25921] ? __pfx___mutex_lock+0x10/0x10 [ 162.815627][T25921] ? apparmor_capable+0x114/0x1d0 [ 162.815639][T25921] ? netlink_ns_capable+0xfa/0x130 [ 162.815655][T25921] rtnl_newlink+0x18e0/0x2000 [ 162.815672][T25921] ? __pfx_rtnl_newlink+0x10/0x10 [ 162.815686][T25921] ? kasan_quarantine_put+0x10a/0x240 [ 162.815700][T25921] ? lockdep_hardirqs_on+0x7c/0x110 [ 162.815714][T25921] ? kmem_cache_free+0x2d1/0x4d0 [ 162.815728][T25921] ? kfree_skbmem+0x1a4/0x1f0 [ 162.815741][T25921] ? __lock_acquire+0x622/0x1c90 [ 162.815754][T25921] ? rcu_is_watching+0x12/0xc0 [ 162.815763][T25921] ? trace_cap_capable+0x18d/0x200 [ 162.815780][T25921] ? find_held_lock+0x2b/0x80 [ 162.815790][T25921] ? __pfx_rtnl_newlink+0x10/0x10 [ 162.815805][T25921] ? __pfx_rtnl_newlink+0x10/0x10 [ 162.815819][T25921] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 162.815834][T25921] ? __pfx_rtnl_newlink+0x10/0x10 [ 162.815849][T25921] rtnetlink_rcv_msg+0x95b/0xe90 [ 162.815864][T25921] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 162.815882][T25921] ? ref_tracker_free+0x37c/0x830 [ 162.815906][T25921] netlink_rcv_skb+0x158/0x420 [ 162.815919][T25921] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 162.815935][T25921] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 162.815947][T25921] ? netlink_deliver_tap+0x1ae/0xd30 [ 162.815957][T25921] netlink_unicast+0x53a/0x7f0 [ 162.815967][T25921] ? __pfx_netlink_unicast+0x10/0x10 [ 162.815979][T25921] netlink_sendmsg+0x8d1/0xdd0 [ 162.815989][T25921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.816006][T25921] ? __import_iovec+0x1dd/0x650 [ 162.816035][T25921] ____sys_sendmsg+0xa98/0xc70 [ 162.816047][T25921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.816058][T25921] ? get_compat_msghdr+0x11a/0x170 [ 162.816074][T25921] ? __pfx_futex_wake_mark+0x10/0x10 [ 162.816089][T25921] ___sys_sendmsg+0x134/0x1d0 [ 162.816104][T25921] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.816121][T25921] ? find_held_lock+0x2b/0x80 [ 162.816133][T25921] __sys_sendmsg+0x16d/0x220 [ 162.816147][T25921] ? __pfx___sys_sendmsg+0x10/0x10 [ 162.816161][T25921] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 162.816177][T25921] ? rcu_is_watching+0x12/0xc0 [ 162.816187][T25921] __do_fast_syscall_32+0x7c/0x3a0 [ 162.816202][T25921] do_fast_syscall_32+0x32/0x80 [ 162.816217][T25921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.816230][T25921] RIP: 0023:0xf7fa8579 [ 162.816238][T25921] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 162.816248][T25921] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 162.816258][T25921] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 162.816264][T25921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.816270][T25921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.816275][T25921] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 162.816281][T25921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.816290][T25921] [ 162.975777][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.979635][T25921] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 162.982298][T25921] caif:caif_disconnect_client(): nothing to disconnect [ 162.984627][T25921] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 162.987106][T25921] chnl_net:chnl_net_open(): state disconnected [ 162.989023][T25921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. VM DIAGNOSIS: 08:25:07 Registers: info registers vcpu 0 CPU#0 RAX=000000000006ec8c RBX=0000000000000000 RCX=ffffffff8b7cbc29 RDX=ffffed1005646646 RSI=ffffffff8c156520 RDI=ffffffff81918571 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed1005646645 R10=ffff88802b23322b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a82d50 R15=0000000000000000 RIP=ffffffff8b7ca78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097560000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c2d2286 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85582a95 RDI=ffffffff9b06ca00 RBP=ffffffff9b06c9c0 RSP=ffffc9002080e668 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e36312e36 R12=0000000000000000 R13=0000000000000066 R14=ffffffff9b06c9c0 R15=ffffffff85582a30 RIP=ffffffff85582abf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097660000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f71d3800 CR3=00000000597f9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c90e282195fdc669 389a1057171a02f0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dc2fd2d2b77b431a f5f9b7852d2b69fb ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3464d28909654917 cce873a311a63561 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fef39bb00c3c9b94 748112c01a15de82 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000880 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bae09faebbcc9bae ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006300000063 aaaa0000b82e10aa ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006300c089b8 baabe63eba882648 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 aaaaaaaa0063bc67 0000006300000063 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5e2ff9e74465be71 e7b8df969dc60987 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bb89f92ac18b27c0 d5d7e1d7d1779c32 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffff888027b44880 RCX=ffffffff9141b901 RDX=0000000000000000 RSI=ffffffff822b6100 RDI=ffff888027b44cc4 RBP=ffffc900208272c0 RSP=ffffc900208271f0 R8 =ffffffff9141b9de R9 =0000000000000000 R10=ffffc90020827278 R11=000000000000a70c R12=ffffffff81a708c0 R13=ffffc90020827278 R14=0000000000000000 R15=ffff888027b44880 RIP=ffffffff81a0cfda RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097760000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005630d0a70000 CR3=000000004c4ef000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=363b4796200cf9e5 f904af5034fc9a40 363b4796200cf9e5 f904af5034fc9a40 363b4796200cf9e5 f904af5034fc9a40 363b4796200cf9e5 f904af5034fc9a40 ZMM18=d6d6a7a0d1efd86b 194ade7a0bbde39a d6d6a7a0d1efd86b 194ade7a0bbde39a d6d6a7a0d1efd86b 194ade7a0bbde39a d6d6a7a0d1efd86b 194ade7a0bbde39a ZMM19=d42c000000000000 0000000000000004 d42c000000000000 0000000000000003 d42c000000000000 0000000000000002 d42c000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000008ffff ffe2000003e60000 0008000400000008 0008000000140000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0040000000020000 0000000000000000 09b40000000001ba 8140000000140000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 001c0000000e0014 000c000000080004 001c000e00000000 0000000000000000 ZMM24=ca4dde82ca4dde82 ca4dde82ca4dde82 ca4dde82ca4dde82 ca4dde82ca4dde82 ca4dde82ca4dde82 ca4dde82ca4dde82 ca4dde82ca4dde82 ca4dde82ca4dde82 ZMM25=185db63b185db63b 185db63b185db63b 185db63b185db63b 185db63b185db63b 185db63b185db63b 185db63b185db63b 185db63b185db63b 185db63b185db63b ZMM26=25afd87525afd875 25afd87525afd875 25afd87525afd875 25afd87525afd875 25afd87525afd875 25afd87525afd875 25afd87525afd875 25afd87525afd875 ZMM27=354ae606354ae606 354ae606354ae606 354ae606354ae606 354ae606354ae606 354ae606354ae606 354ae606354ae606 354ae606354ae606 354ae606354ae606 ZMM28=000001200000011f 0000011e0000011d 0000011c0000011b 0000011a00000119 0000011800000117 0000011600000115 0000011400000113 0000011200000111 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4023000040230000 4023000040230000 4023000040230000 4023000040230000 4023000040230000 4023000040230000 4023000040230000 4023000040230000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802b341f60 RCX=ffffffff81af76fd RDX=ffff888020610000 RSI=ffffffff81af76d9 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc900007cf8a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed10056683ed R15=ffff88802b53b6c0 RIP=ffffffff81af76db RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097860000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000056a8c4c0 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000