last executing test programs: 50.605303714s ago: executing program 3 (id=12278): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x13}, 0x1, 0x4, 0x88, {}, 0x0, 0x4000ffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x3}}) 50.55282422s ago: executing program 3 (id=12281): r0 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000300)={0x2, {{0x2, 0x2, @multicast2}}, 0x1}, 0x8c) 50.500799672s ago: executing program 3 (id=12282): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x24000044) 50.49250114s ago: executing program 3 (id=12284): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x7) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x0}) 50.424480548s ago: executing program 3 (id=12286): mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 50.417458272s ago: executing program 3 (id=12288): r0 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f00000004c0)={0x0, 0xff, 0x10, 0x0, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) 35.400110118s ago: executing program 32 (id=12288): r0 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f00000004c0)={0x0, 0xff, 0x10, 0x0, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) 4.231930558s ago: executing program 1 (id=14020): r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r0, 0x0}]) 4.102847357s ago: executing program 1 (id=14027): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x3) ppoll(&(0x7f0000003840)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) 4.05046239s ago: executing program 1 (id=14029): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, "4a349800000000806913220909000909000a48"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002880)=0x9) 3.994189041s ago: executing program 1 (id=14032): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 3.978578945s ago: executing program 1 (id=14036): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r1, 0x1, 0xffffffff, 0x400000}, 0x14}, 0x1, 0x620b}, 0x0) 3.881487574s ago: executing program 1 (id=14041): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0xffffffff, @remote, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000), 0x4) 3.816267569s ago: executing program 33 (id=14041): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0xffffffff, @remote, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000), 0x4) 1.880820335s ago: executing program 0 (id=14111): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 1.217503926s ago: executing program 2 (id=14143): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) 1.168673327s ago: executing program 2 (id=14139): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4001af84, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 1.115090554s ago: executing program 5 (id=14141): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x8601}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 1.111148116s ago: executing program 2 (id=14142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xf, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffefff1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.110762318s ago: executing program 4 (id=14144): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.067635713s ago: executing program 2 (id=14145): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x6f}, &(0x7f0000000180)=0x8) 1.020270969s ago: executing program 2 (id=14146): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendto$netrom(r0, 0x0, 0x11000, 0x0, &(0x7f0000000240)={{0x6, @rose}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x48) 1.015450084s ago: executing program 5 (id=14147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x34, r1, 0x7, 0x0, 0xfffffffe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d1}, 0x0) 941.918519ms ago: executing program 5 (id=14148): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000040)=r1, 0x4) 941.095813ms ago: executing program 5 (id=14149): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f00000000c0)) 714.206253ms ago: executing program 2 (id=14150): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080"], 0x26}, 0x1, 0x0, 0x0, 0x4044844}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) 207.044024ms ago: executing program 4 (id=14151): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000feffffff00000000040000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000012000000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 204.319843ms ago: executing program 0 (id=14159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x13, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x44}}, 0x0) 137.519505ms ago: executing program 0 (id=14152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 110.930716ms ago: executing program 4 (id=14153): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 107.673622ms ago: executing program 0 (id=14154): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_wakeup_irq', 0x40, 0x101) 96.308406ms ago: executing program 4 (id=14155): ioprio_set$uid(0x3, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) 56.896879ms ago: executing program 5 (id=14156): r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000040)) 56.301927ms ago: executing program 4 (id=14157): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x13, r0, 0x0, 0x6) 3.161495ms ago: executing program 0 (id=14158): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) llistxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) 2.707216ms ago: executing program 5 (id=14160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=ANY=[@ANYBLOB="140000001000170000000000000000000000000a60000000060a0b0400000000000000000200fffe34000480300001800a0001006d6174636800000020000280080003000522191e08000240000000000a00010073746174650000000900010073797a30000000000900020073797a3200"], 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.988237ms ago: executing program 4 (id=14161): r0 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=14162): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x14, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xa0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) kernel console output (not intermixed with test programs): gretap0: left allmulticast mode [ 229.956029][T26053] ip6gretap0: left promiscuous mode [ 230.173449][T26067] program syz.1.9567 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.254450][T26077] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9571'. [ 230.437250][T26093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9577'. [ 230.458896][T26093] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 230.462022][T26093] team0: Device ipvlan3 is already an upper device of the team interface [ 231.283882][T26128] tipc: Bearer : already 2 bearers with priority 10 [ 231.287254][T26128] tipc: Bearer : trying with adjusted priority [ 231.289615][T26128] tipc: Enabling of bearer rejected, failed to enable media [ 231.582326][ T842] kernel read not supported for file /rfkill (pid: 842 comm: kworker/1:2) [ 231.763502][T26179] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9618'. [ 232.037779][T26210] netlink: 'syz.0.9633': attribute type 11 has an invalid length. [ 232.037802][T26210] netlink: 'syz.0.9633': attribute type 4 has an invalid length. [ 232.037814][T26210] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.9633'. [ 232.377365][T26226] rtc_cmos 00:05: Alarms can be up to one day in the future [ 232.563975][ T1141] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.626075][ T1466] rtc_cmos 00:05: Alarms can be up to one day in the future [ 232.629787][ T1466] rtc_cmos 00:05: Alarms can be up to one day in the future [ 232.633953][ T1466] rtc_cmos 00:05: Alarms can be up to one day in the future [ 232.638571][ T1466] rtc_cmos 00:05: Alarms can be up to one day in the future [ 232.641497][ T1466] rtc rtc0: __rtc_set_alarm: err=-22 [ 233.206206][ T5944] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 233.209803][ T5944] Bluetooth: hci1: Injecting HCI hardware error event [ 233.214810][ T5944] Bluetooth: hci1: hardware error 0x00 [ 233.436924][T26354] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 233.442294][T26353] sp0: Synchronizing with TNC [ 233.447959][T26356] trusted_key: encrypted_key: key trusted:syz not found [ 233.615119][T26381] mkiss: ax0: crc mode is auto. [ 234.067362][T26429] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9745'. [ 234.070273][T26429] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9745'. [ 234.106450][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 234.106460][ T40] audit: type=1326 audit(1770623643.906:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26436 comm="syz.2.9741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 234.123164][ T40] audit: type=1326 audit(1770623643.916:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26436 comm="syz.2.9741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 234.133086][ T40] audit: type=1326 audit(1770623643.916:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26436 comm="syz.2.9741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 234.142031][ T40] audit: type=1326 audit(1770623643.916:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26436 comm="syz.2.9741" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 234.151641][ T40] audit: type=1326 audit(1770623643.916:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26436 comm="syz.2.9741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 234.161818][ T40] audit: type=1326 audit(1770623643.916:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26436 comm="syz.2.9741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 234.172213][ T40] audit: type=1326 audit(1770623643.916:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26436 comm="syz.2.9741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 234.181526][ T40] audit: type=1326 audit(1770623643.916:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26436 comm="syz.2.9741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 234.191733][ T40] audit: type=1326 audit(1770623643.916:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26436 comm="syz.2.9741" exe="/syz-executor" sig=0 arch=40000003 syscall=378 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 234.201125][ T40] audit: type=1326 audit(1770623643.916:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26436 comm="syz.2.9741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 235.085906][T26453] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 235.282722][ T5944] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 236.122648][T26619] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 236.194514][T26628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9834'. [ 236.474667][T26665] digital: digital_start_poll: Unknown protocol [ 236.688229][T26684] vxcan1: entered promiscuous mode [ 236.695246][T26684] team0: Refused to change device type [ 236.744449][T26691] netlink: 296 bytes leftover after parsing attributes in process `syz.2.9865'. [ 236.941595][T26712] netlink: 'syz.0.9875': attribute type 4 has an invalid length. [ 236.945474][T26712] netlink: 17 bytes leftover after parsing attributes in process `syz.0.9875'. [ 236.974571][T26714] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 236.977994][T26714] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 236.983541][T26714] vhci_hcd vhci_hcd.0: Device attached [ 236.995001][T26715] vhci_hcd: connection closed [ 236.995635][ T61] vhci_hcd vhci_hcd.1: stop threads [ 236.999410][ T61] vhci_hcd vhci_hcd.1: release socket [ 237.001545][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 237.273236][T26749] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9892'. [ 238.165617][ T1328] kernel read not supported for file /vga_arbiter (pid: 1328 comm: kworker/3:2) [ 238.538825][T26901] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 238.896738][T26921] comedi: valid board names for 8255 driver are: [ 238.899641][T26921] 8255 [ 238.900970][T26921] comedi: valid board names for vmk80xx driver are: [ 238.903997][T26921] vmk80xx [ 238.905513][T26921] comedi: valid board names for usbduxsigma driver are: [ 238.908585][T26921] usbduxsigma [ 238.910231][T26921] comedi: valid board names for usbduxfast driver are: [ 238.913426][T26921] usbduxfast [ 238.916687][T26921] comedi: valid board names for usbdux driver are: [ 238.918851][T26921] usbdux [ 238.919814][T26921] comedi: valid board names for ni6501 driver are: [ 238.922062][T26921] ni6501 [ 238.923163][T26921] comedi: valid board names for dt9812 driver are: [ 238.927604][T26921] dt9812 [ 238.928967][T26921] comedi: valid board names for ni_labpc_cs driver are: [ 238.932140][T26921] ni_labpc_cs [ 238.933616][T26921] comedi: valid board names for ni_daq_700 driver are: [ 238.936401][T26921] ni_daq_700 [ 238.937812][T26921] comedi: valid board names for labpc_pci driver are: [ 238.940485][T26921] labpc_pci [ 238.942476][T26921] comedi: valid board names for adl_pci9118 driver are: [ 238.945011][T26921] pci9118dg [ 238.946059][T26921] pci9118hg [ 238.947134][T26921] pci9118hr [ 238.948290][T26921] comedi: valid board names for 8255_pci driver are: [ 238.950438][T26921] 8255_pci [ 238.951540][T26921] comedi: valid board names for s526 driver are: [ 238.953452][T26921] s526 [ 238.954408][T26921] comedi: valid board names for multiq3 driver are: [ 238.956428][T26921] multiq3 [ 238.957387][T26921] comedi: valid board names for pcmuio driver are: [ 238.959421][T26921] pcmuio48 [ 238.960434][T26921] pcmuio96 [ 238.961809][T26921] comedi: valid board names for pcmmio driver are: [ 238.964377][T26921] pcmmio [ 238.965342][T26921] comedi: valid board names for pcmda12 driver are: [ 238.967469][T26921] pcmda12 [ 238.968442][T26921] comedi: valid board names for pcmad driver are: [ 238.970427][T26921] pcmad12 [ 238.971415][T26921] pcmad16 [ 238.972558][T26921] comedi: valid board names for ni_labpc driver are: [ 238.975069][T26921] lab-pc-1200 [ 238.976446][T26921] lab-pc-1200ai [ 238.977921][T26921] lab-pc+ [ 238.979192][T26921] comedi: valid board names for atmio16 driver are: [ 238.981993][T26921] atmio16 [ 238.983014][T26921] atmio16d [ 238.984134][T26921] comedi: valid board names for ni_at_ao driver are: [ 238.986894][T26921] at-ao-6 [ 238.988234][T26921] at-ao-10 [ 238.989588][T26921] comedi: valid board names for ni_at_a2150 driver are: [ 238.992274][T26921] ni_at_a2150 [ 238.993353][T26921] comedi: valid board names for adq12b driver are: [ 238.995671][T26921] adq12b [ 238.996603][T26921] comedi: valid board names for mpc624 driver are: [ 238.998647][T26921] mpc624 [ 238.999595][T26921] comedi: valid board names for c6xdigio driver are: [ 239.001748][T26921] c6xdigio [ 239.002772][T26921] comedi: valid board names for aio_iiro_16 driver are: [ 239.005332][T26921] aio_iiro_16 [ 239.006813][T26921] comedi: valid board names for aio_aio12_8 driver are: [ 239.009676][T26921] aio_aio12_8 [ 239.011175][T26921] aio_ai12_8 [ 239.012760][T26921] aio_ao12_4 [ 239.014262][T26921] comedi: valid board names for fl512 driver are: [ 239.017057][T26921] fl512 [ 239.018279][T26921] comedi: valid board names for dmm32at driver are: [ 239.020639][T26921] dmm32at [ 239.021739][T26921] comedi: valid board names for dt282x driver are: [ 239.023764][T26921] dt2821 [ 239.025040][T26921] dt2821-f [ 239.026433][T26921] dt2821-g [ 239.027792][T26921] dt2823 [ 239.028787][T26921] dt2824-pgh [ 239.029879][T26921] dt2824-pgl [ 239.030992][T26921] dt2825 [ 239.032060][T26921] dt2827 [ 239.033023][T26921] dt2828 [ 239.034116][T26921] dt2829 [ 239.035362][T26921] dt21-ez [ 239.036578][T26921] dt23-ez [ 239.037863][T26921] dt24-ez [ 239.039169][T26921] dt24-ez-pgl [ 239.040597][T26921] comedi: valid board names for dt2817 driver are: [ 239.043402][T26921] dt2817 [ 239.044459][T26921] comedi: valid board names for dt2815 driver are: [ 239.046817][T26921] dt2815 [ 239.048093][T26921] comedi: valid board names for dt2814 driver are: [ 239.050838][T26921] dt2814 [ 239.052324][T26921] comedi: valid board names for dt2811 driver are: [ 239.055003][T26921] dt2811-pgh [ 239.056410][T26921] dt2811-pgl [ 239.057950][T26921] comedi: valid board names for dt2801 driver are: [ 239.060669][T26921] dt2801 [ 239.062129][T26921] comedi: valid board names for das6402 driver are: [ 239.065044][T26921] das6402-12 [ 239.066143][T26921] das6402-16 [ 239.067260][T26921] comedi: valid board names for das1800 driver are: [ 239.069953][T26921] das-1701st [ 239.071286][T26921] das-1701st-da [ 239.072562][T26921] das-1702st [ 239.073644][T26921] das-1702st-da [ 239.074853][T26921] das-1702hr [ 239.075935][T26921] das-1702hr-da [ 239.077090][T26921] das-1701ao [ 239.078157][T26921] das-1702ao [ 239.079259][T26921] das-1801st [ 239.080348][T26921] das-1801st-da [ 239.081623][T26921] das-1802st [ 239.082712][T26921] das-1802st-da [ 239.083901][T26921] das-1802hr [ 239.085133][T26921] das-1802hr-da [ 239.086272][T26921] das-1801hc [ 239.087347][T26921] das-1802hc [ 239.088412][T26921] das-1801ao [ 239.089497][T26921] das-1802ao [ 239.090682][T26921] comedi: valid board names for das800 driver are: [ 239.092866][T26921] das-800 [ 239.093925][T26921] cio-das800 [ 239.095442][T26921] das-801 [ 239.096855][T26921] cio-das801 [ 239.098182][T26921] das-802 [ 239.099571][T26921] cio-das802 [ 239.101067][T26921] cio-das802/16 [ 239.102690][T26921] comedi: valid board names for isa-das08 driver are: [ 239.105272][T26921] isa-das08 [ 239.106635][T26921] das08-pgm [ 239.108081][T26921] das08-pgh [ 239.109493][T26921] das08-pgl [ 239.110964][T26921] das08-aoh [ 239.112452][T26921] das08-aol [ 239.113840][T26921] das08-aom [ 239.115279][T26921] das08/jr-ao [ 239.116777][T26921] das08jr-16-ao [ 239.118241][T26921] pc104-das08 [ 239.119687][T26921] das08jr/16 [ 239.121058][T26921] comedi: valid board names for das16m1 driver are: [ 239.124871][T26921] das16m1 [ 239.125914][T26921] comedi: valid board names for dac02 driver are: [ 239.128315][T26921] dac02 [ 239.129561][T26921] comedi: valid board names for rti802 driver are: [ 239.132130][T26921] rti802 [ 239.133080][T26921] comedi: valid board names for rti800 driver are: [ 239.135245][T26921] rti800 [ 239.136193][T26921] rti815 [ 239.137132][T26921] comedi: valid board names for pcm3724 driver are: [ 239.139201][T26921] pcm3724 [ 239.140254][T26921] comedi: valid board names for pcl818 driver are: [ 239.142854][T26921] pcl818l [ 239.144170][T26921] pcl818h [ 239.145419][T26921] pcl818hd [ 239.146720][T26921] pcl818hg [ 239.148023][T26921] pcl818 [ 239.149256][T26921] pcl718 [ 239.150524][T26921] pcm3718 [ 239.151987][T26921] comedi: valid board names for pcl816 driver are: [ 239.154474][T26921] pcl816 [ 239.155719][T26921] pcl814b [ 239.156984][T26921] comedi: valid board names for pcl812 driver are: [ 239.159626][T26921] pcl812 [ 239.160874][T26921] pcl812pg [ 239.162522][T26921] acl8112pg [ 239.163902][T26921] acl8112dg [ 239.165224][T26921] acl8112hg [ 239.166312][T26921] a821pgl [ 239.167716][T26921] a821pglnda [ 239.169089][T26921] a821pgh [ 239.170431][T26921] a822pgl [ 239.171783][T26921] a822pgh [ 239.173078][T26921] a823pgl [ 239.174402][T26921] a823pgh [ 239.178866][T26921] pcl813 [ 239.180143][T26921] pcl813b [ 239.181665][T26921] acl8113 [ 239.183060][T26921] iso813 [ 239.184344][T26921] acl8216 [ 239.185695][T26921] a826pg [ 239.186977][T26921] comedi: valid board names for pcl730 driver are: [ 239.196275][T26921] pcl730 [ 239.197596][T26921] iso730 [ 239.198878][T26921] acl7130 [ 239.200247][T26921] pcm3730 [ 239.201761][T26921] pcl725 [ 239.203059][T26921] p8r8dio [ 239.204403][T26921] acl7225b [ 239.205765][T26921] p16r16dio [ 239.207150][T26921] pcl733 [ 239.208432][T26921] pcl734 [ 239.209707][T26921] opmm-1616-xt [ 239.211284][T26921] pearl-mm-p [ 239.212994][T26921] ir104-pbf [ 239.214413][T26921] comedi: valid board names for pcl726 driver are: [ 239.216822][T26921] pcl726 [ 239.217928][T26921] pcl727 [ 239.219049][T26921] pcl728 [ 239.220163][T26921] acl6126 [ 239.221426][T26921] acl6128 [ 239.222599][T26921] comedi: valid board names for pcl724 driver are: [ 239.225095][T26921] pcl724 [ 239.226315][T26921] pcl722 [ 239.227432][T26921] pcl731 [ 239.228720][T26921] acl7122 [ 239.230060][T26921] acl7124 [ 239.231098][T26921] pet48dio [ 239.232328][T26921] pcmio48 [ 239.233603][T26921] onyx-mm-dio [ 239.236060][T26921] comedi: valid board names for pcl711 driver are: [ 239.238324][T26921] pcl711 [ 239.239638][T26921] pcl711b [ 239.240900][T26921] acl8112hg [ 239.242318][T26921] acl8112dg [ 239.243582][T26921] comedi: valid board names for amplc_pc263 driver are: [ 239.246163][T26921] pc263 [ 239.247360][T26921] comedi: valid board names for amplc_pc236 driver are: [ 239.250173][T26921] pc36at [ 239.251656][T26921] comedi: valid board names for amplc_dio200 driver are: [ 239.254360][T26921] pc212e [ 239.255640][T26921] pc214e [ 239.256618][T26921] pc215e [ 239.257560][T26921] pc218e [ 239.258478][T26921] pc272e [ 239.259471][T26921] comedi: valid board names for comedi_parport driver are: [ 239.262115][T26921] comedi_parport [ 239.263425][T26921] comedi: valid board names for comedi_test driver are: [ 239.265652][T26921] comedi_test [ 239.266762][T26921] comedi: valid board names for comedi_bond driver are: [ 239.269052][T26921] comedi_bond [ 239.558592][ T5944] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 239.630045][T26960] PKCS8: Unsupported PKCS#8 version [ 239.907102][T26983] [U] v3f"S/4:XTzWtlW= [ 239.909648][T26983] [U] J"e:" [ 240.002716][T26990] vivid-001: disconnect [ 240.011920][T26988] vivid-001: reconnect [ 240.045281][T26993] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 240.048793][T26993] overlayfs: missing 'lowerdir' [ 240.420189][T27034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10024'. [ 240.434212][T27037] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 240.534139][T27051] xt_bpf: check failed: parse error [ 241.506139][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 241.506151][ T40] audit: type=1326 audit(1770623651.298:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27123 comm="syz.3.10068" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 241.515645][ T40] audit: type=1326 audit(1770623651.298:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27123 comm="syz.3.10068" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 241.522789][ T40] audit: type=1326 audit(1770623651.298:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27123 comm="syz.3.10068" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 241.533064][ T40] audit: type=1326 audit(1770623651.298:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27123 comm="syz.3.10068" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 241.541824][ T40] audit: type=1326 audit(1770623651.298:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27123 comm="syz.3.10068" exe="/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 241.549843][ T40] audit: type=1326 audit(1770623651.298:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27123 comm="syz.3.10068" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 241.558675][ T40] audit: type=1326 audit(1770623651.298:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27123 comm="syz.3.10068" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 241.568942][ T40] audit: type=1326 audit(1770623651.298:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27123 comm="syz.3.10068" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 241.579038][ T40] audit: type=1326 audit(1770623651.298:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27123 comm="syz.3.10068" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 241.589098][ T40] audit: type=1326 audit(1770623651.298:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27123 comm="syz.3.10068" exe="/syz-executor" sig=0 arch=40000003 syscall=94 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 242.352798][T27150] mkiss: ax0: crc mode is auto. [ 242.426839][T27154] bond0: (slave macsec2): Error -34 calling dev_set_mtu [ 243.258967][T27215] 9pnet_virtio: no channels available for device 3$~VP [ 243.367739][T27226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10124'. [ 244.154774][T27284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10146'. [ 245.092954][T27337] ata1.00: invalid command format 189 [ 245.292653][ T1328] hid-generic FFFF:0008:0003.0003: item fetching failed at offset 0/1 [ 245.298299][ T1328] hid-generic FFFF:0008:0003.0003: probe with driver hid-generic failed with error -22 [ 245.372812][T27361] sp0: Synchronizing with TNC [ 246.078859][T27418] tmpfs: Cannot change global quota limit on remount [ 246.647582][ T1328] kernel write not supported for file /uinput (pid: 1328 comm: kworker/3:2) [ 246.678767][T27476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.129105][T27523] sp0: Synchronizing with TNC [ 247.141796][T27523] [U] [ 247.412330][T27544] program syz.0.10274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.515990][T27628] sp0: Synchronizing with TNC [ 248.669130][T27642] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 248.672100][T27642] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 248.677565][T27642] vhci_hcd vhci_hcd.0: Device attached [ 248.682495][T27643] vhci_hcd: connection closed [ 248.683942][ T13] vhci_hcd vhci_hcd.0: stop threads [ 248.688304][ T13] vhci_hcd vhci_hcd.0: release socket [ 248.691172][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 248.721036][T27646] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10329'. [ 249.118008][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 249.118023][ T40] audit: type=1326 audit(1770623658.909:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27676 comm="syz.2.10337" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f96579 code=0x0 [ 249.496326][T27707] macvtap1: entered promiscuous mode [ 249.498711][T27707] macvtap1: entered allmulticast mode [ 249.501100][T27707] veth1_vlan: entered allmulticast mode [ 249.962505][ T1328] kernel read not supported for file /vga_arbiter (pid: 1328 comm: kworker/3:2) [ 250.058160][T27745] syz.2.10368 (27745) used obsolete PPPIOCDETACH ioctl [ 250.122514][T27751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10371'. [ 250.190816][T27755] mkiss: ax0: crc mode is auto. [ 250.541546][T27793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10392'. [ 250.547799][T27793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10392'. [ 250.702311][T27816] MPI: mpi too large (30216 bits) [ 250.796372][ T829] kernel write not supported for file /input/mouse0 (pid: 829 comm: kworker/0:2) [ 250.894051][T27840] program syz.2.10414 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.557064][T27861] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 251.795374][T27874] PKCS8: Unsupported PKCS#8 version [ 251.869808][T27884] [U] v3f"S/4:XTzWtlW= [ 251.871994][T27884] [U] J"e:" [ 251.971167][T27896] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 251.974936][T27896] overlayfs: missing 'lowerdir' [ 252.074079][T27907] mkiss: ax0: crc mode is auto. [ 252.124882][T27913] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 252.294874][T27936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10459'. [ 252.299665][T27936] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10459'. [ 252.302739][T27936] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10459'. [ 252.555565][T27976] comedi: valid board names for 8255 driver are: [ 252.558346][T27976] 8255 [ 252.567298][T27976] comedi: valid board names for vmk80xx driver are: [ 252.572822][T27976] vmk80xx [ 252.574312][T27976] comedi: valid board names for usbduxsigma driver are: [ 252.574985][T27982] vlan3: entered allmulticast mode [ 252.576808][T27976] usbduxsigma [ 252.582302][T27976] comedi: valid board names for usbduxfast driver are: [ 252.585439][T27976] usbduxfast [ 252.587040][T27976] comedi: valid board names for usbdux driver are: [ 252.590799][T27976] usbdux [ 252.592191][T27976] comedi: valid board names for ni6501 driver are: [ 252.595396][T27976] ni6501 [ 252.596806][T27976] comedi: valid board names for dt9812 driver are: [ 252.600498][T27976] dt9812 [ 252.601517][T27976] comedi: valid board names for ni_labpc_cs driver are: [ 252.604317][T27976] ni_labpc_cs [ 252.605834][T27976] comedi: valid board names for ni_daq_700 driver are: [ 252.610602][T27976] ni_daq_700 [ 252.612123][T27976] comedi: valid board names for labpc_pci driver are: [ 252.615159][T27976] labpc_pci [ 252.616536][T27976] comedi: valid board names for adl_pci9118 driver are: [ 252.619764][T27976] pci9118dg [ 252.621250][T27976] pci9118hg [ 252.622531][T27976] pci9118hr [ 252.628518][T27976] comedi: valid board names for 8255_pci driver are: [ 252.634475][T27976] 8255_pci [ 252.635861][T27976] comedi: valid board names for s526 driver are: [ 252.638564][T27976] s526 [ 252.640613][T27976] comedi: valid board names for multiq3 driver are: [ 252.644578][T27976] multiq3 [ 252.646004][T27976] comedi: valid board names for pcmuio driver are: [ 252.648769][T27976] pcmuio48 [ 252.651141][T27976] pcmuio96 [ 252.652274][T27976] comedi: valid board names for pcmmio driver are: [ 252.654496][T27976] pcmmio [ 252.655449][T27976] comedi: valid board names for pcmda12 driver are: [ 252.657650][T27976] pcmda12 [ 252.658767][T27976] comedi: valid board names for pcmad driver are: [ 252.661619][T27976] pcmad12 [ 252.662958][T27976] pcmad16 [ 252.664181][T27976] comedi: valid board names for ni_labpc driver are: [ 252.666982][T27976] lab-pc-1200 [ 252.668316][T27976] lab-pc-1200ai [ 252.670492][T27976] lab-pc+ [ 252.671507][T27976] comedi: valid board names for atmio16 driver are: [ 252.671663][T27990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10487'. [ 252.674086][T27976] atmio16 [ 252.678912][T27976] atmio16d [ 252.680812][T27976] comedi: valid board names for ni_at_ao driver are: [ 252.683689][T27976] at-ao-6 [ 252.685123][T27976] at-ao-10 [ 252.686509][T27976] comedi: valid board names for ni_at_a2150 driver are: [ 252.692086][T27976] ni_at_a2150 [ 252.693576][T27976] comedi: valid board names for adq12b driver are: [ 252.696823][T27976] adq12b [ 252.698050][T27976] comedi: valid board names for mpc624 driver are: [ 252.701456][T27976] mpc624 [ 252.703120][T27976] comedi: valid board names for c6xdigio driver are: [ 252.705796][T27976] c6xdigio [ 252.707226][T27976] comedi: valid board names for aio_iiro_16 driver are: [ 252.719329][T27976] aio_iiro_16 [ 252.720750][T27976] comedi: valid board names for aio_aio12_8 driver are: [ 252.726143][T27976] aio_aio12_8 [ 252.727871][T27976] aio_ai12_8 [ 252.729739][T27976] aio_ao12_4 [ 252.731111][T27976] comedi: valid board names for fl512 driver are: [ 252.733565][T27976] fl512 [ 252.734742][T27976] comedi: valid board names for dmm32at driver are: [ 252.737372][T27976] dmm32at [ 252.738604][T27976] comedi: valid board names for dt282x driver are: [ 252.741784][T27976] dt2821 [ 252.743037][T27976] dt2821-f [ 252.744295][T27976] dt2821-g [ 252.745548][T27976] dt2823 [ 252.746737][T27976] dt2824-pgh [ 252.748060][T27976] dt2824-pgl [ 252.749922][T27976] dt2825 [ 252.751143][T27976] dt2827 [ 252.752303][T27976] dt2828 [ 252.753524][T27976] dt2829 [ 252.754736][T27976] dt21-ez [ 252.755962][T27976] dt23-ez [ 252.757241][T27976] dt24-ez [ 252.761581][T27976] dt24-ez-pgl [ 252.763084][T27976] comedi: valid board names for dt2817 driver are: [ 252.765708][T27976] dt2817 [ 252.766908][T27976] comedi: valid board names for dt2815 driver are: [ 252.770223][T27976] dt2815 [ 252.771414][T27976] comedi: valid board names for dt2814 driver are: [ 252.773938][T27976] dt2814 [ 252.775224][T27976] comedi: valid board names for dt2811 driver are: [ 252.777750][T27976] dt2811-pgh [ 252.779660][T27976] dt2811-pgl [ 252.781031][T27976] comedi: valid board names for dt2801 driver are: [ 252.783601][T27976] dt2801 [ 252.785028][T27976] comedi: valid board names for das6402 driver are: [ 252.788148][T27976] das6402-12 [ 252.790917][T27976] das6402-16 [ 252.792408][T27976] comedi: valid board names for das1800 driver are: [ 252.795228][T27976] das-1701st [ 252.797051][T27976] das-1701st-da [ 252.798523][T27976] das-1702st [ 252.801161][T27976] das-1702st-da [ 252.802748][T27976] das-1702hr [ 252.804251][T27976] das-1702hr-da [ 252.805789][T27976] das-1701ao [ 252.807240][T27976] das-1702ao [ 252.808671][T27976] das-1801st [ 252.811014][T27976] das-1801st-da [ 252.812627][T27976] das-1802st [ 252.813879][T27976] das-1802st-da [ 252.815400][T27976] das-1802hr [ 252.816895][T27976] das-1802hr-da [ 252.818376][T27976] das-1801hc [ 252.820030][T27976] das-1802hc [ 252.821468][T27976] das-1801ao [ 252.822872][T27976] das-1802ao [ 252.824289][T27976] comedi: valid board names for das800 driver are: [ 252.827005][T27976] das-800 [ 252.828397][T27976] cio-das800 [ 252.831722][T27976] das-801 [ 252.833268][T27976] cio-das801 [ 252.834770][T27976] das-802 [ 252.836094][T27976] cio-das802 [ 252.837755][T27976] cio-das802/16 [ 252.839396][T27976] comedi: valid board names for isa-das08 driver are: [ 252.842498][T27976] isa-das08 [ 252.843569][T27976] das08-pgm [ 252.844966][T27976] das08-pgh [ 252.846130][T27976] das08-pgl [ 252.847228][T27976] das08-aoh [ 252.848299][T27976] das08-aol [ 252.849865][T27976] das08-aom [ 252.850985][T27976] das08/jr-ao [ 252.852082][T27976] das08jr-16-ao [ 252.853326][T27976] pc104-das08 [ 252.854530][T27976] das08jr/16 [ 252.855602][T27976] comedi: valid board names for das16m1 driver are: [ 252.857710][T27976] das16m1 [ 252.858767][T27976] comedi: valid board names for dac02 driver are: [ 252.860898][T27976] dac02 [ 252.861829][T27976] comedi: valid board names for rti802 driver are: [ 252.863984][T27976] rti802 [ 252.864946][T27976] comedi: valid board names for rti800 driver are: [ 252.866997][T27976] rti800 [ 252.868583][T27976] rti815 [ 252.869949][T27976] comedi: valid board names for pcm3724 driver are: [ 252.872107][T27976] pcm3724 [ 252.873022][T28005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10494'. [ 252.874123][T27976] comedi: valid board names for pcl818 driver are: [ 252.878613][T27976] pcl818l [ 252.879706][T27976] pcl818h [ 252.880709][T27976] pcl818hd [ 252.881733][T27976] pcl818hg [ 252.882764][T27976] pcl818 [ 252.883684][T27976] pcl718 [ 252.884689][T27976] pcm3718 [ 252.885670][T27976] comedi: valid board names for pcl816 driver are: [ 252.888151][T27976] pcl816 [ 252.889545][T27976] pcl814b [ 252.890613][T27976] comedi: valid board names for pcl812 driver are: [ 252.892682][T27976] pcl812 [ 252.893631][T27976] pcl812pg [ 252.894681][T27976] acl8112pg [ 252.895824][T27976] acl8112dg [ 252.896871][T27976] acl8112hg [ 252.898297][T27976] a821pgl [ 252.899637][T27976] a821pglnda [ 252.900761][T27976] a821pgh [ 252.901759][T27976] a822pgl [ 252.902755][T27976] a822pgh [ 252.903755][T27976] a823pgl [ 252.904805][T27976] a823pgh [ 252.905848][T27976] pcl813 [ 252.906944][T27976] pcl813b [ 252.907970][T27976] acl8113 [ 252.908976][T27976] iso813 [ 252.910635][T27976] acl8216 [ 252.911640][T27976] a826pg [ 252.912598][T27976] comedi: valid board names for pcl730 driver are: [ 252.914575][T27976] pcl730 [ 252.915528][T27976] iso730 [ 252.916492][T27976] acl7130 [ 252.917582][T27976] pcm3730 [ 252.918603][T27976] pcl725 [ 252.920517][T27976] p8r8dio [ 252.921570][T27976] acl7225b [ 252.922581][T27976] p16r16dio [ 252.923595][T27976] pcl733 [ 252.924536][T27976] pcl734 [ 252.925550][T27976] opmm-1616-xt [ 252.926884][T27976] pearl-mm-p [ 252.928051][T27976] ir104-pbf [ 252.929138][T27976] comedi: valid board names for pcl726 driver are: [ 252.931218][T27976] pcl726 [ 252.932143][T27976] pcl727 [ 252.933057][T27976] pcl728 [ 252.933982][T27976] acl6126 [ 252.935306][T27976] acl6128 [ 252.936333][T27976] comedi: valid board names for pcl724 driver are: [ 252.938484][T27976] pcl724 [ 252.939685][T27976] pcl722 [ 252.941120][T27976] pcl731 [ 252.942118][T27976] acl7122 [ 252.943291][T27976] acl7124 [ 252.944324][T27976] pet48dio [ 252.945343][T27976] pcmio48 [ 252.946343][T27976] onyx-mm-dio [ 252.947434][T27976] comedi: valid board names for pcl711 driver are: [ 252.950056][T27976] pcl711 [ 252.951146][T27976] pcl711b [ 252.952176][T27976] acl8112hg [ 252.953349][T27976] acl8112dg [ 252.954407][T27976] comedi: valid board names for amplc_pc263 driver are: [ 252.956565][T27976] pc263 [ 252.957489][T27976] comedi: valid board names for amplc_pc236 driver are: [ 252.960016][T27976] pc36at [ 252.961064][T27976] comedi: valid board names for amplc_dio200 driver are: [ 252.963263][T27976] pc212e [ 252.964212][T27976] pc214e [ 252.965160][T27976] pc215e [ 252.966107][T27976] pc218e [ 252.967087][T27976] pc272e [ 252.968079][T27976] comedi: valid board names for comedi_parport driver are: [ 252.970902][T27976] comedi_parport [ 252.972133][T27976] comedi: valid board names for comedi_test driver are: [ 252.974089][T27976] comedi_test [ 252.975193][T27976] comedi: valid board names for comedi_bond driver are: [ 252.977354][T27976] comedi_bond [ 253.200112][T28029] new mount options do not match the existing superblock, will be ignored [ 253.204785][T28029] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 254.524738][T28079] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 254.792440][T28100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10536'. [ 254.912338][T28108] xt_bpf: check failed: parse error [ 255.020548][T28116] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 255.225109][ T40] audit: type=1326 audit(1770623665.020:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28146 comm="syz.2.10562" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f96579 code=0x0 [ 255.482228][T28161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10569'. [ 256.089698][T28177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10578'. [ 256.189295][T28190] smc: net device ip6_vti0 applied user defined pnetid SYZ1 [ 256.272791][T28200] netlink: 'syz.2.10589': attribute type 5 has an invalid length. [ 256.458125][T28219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10598'. [ 256.493585][T28223] ata1.00: invalid command format 189 [ 256.756253][T28261] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10614'. [ 256.812521][T28270] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10622'. [ 256.818882][ T40] audit: type=1400 audit(1770623666.610:301): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=28269 comm="syz.2.10623" [ 256.943562][ T829] kernel read not supported for file /media3 (pid: 829 comm: kworker/0:2) [ 256.998539][T28289] ALSA: seq fatal error: cannot create timer (-22) [ 257.204029][T28313] bond0: (slave macsec2): Error -34 calling dev_set_mtu [ 257.214989][T28312] mkiss: ax0: crc mode is auto. [ 257.493270][T28342] netlink: 'syz.0.10656': attribute type 4 has an invalid length. [ 257.496998][T28342] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10656'. [ 257.593059][T28353] tmpfs: Cannot enable quota on remount [ 258.018810][T28385] tmpfs: Cannot change global quota limit on remount [ 258.118300][T28399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.328279][ T1328] kernel write not supported for file /uinput (pid: 1328 comm: kworker/3:2) [ 258.626167][T28459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10713'. [ 258.732762][T28471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10719'. [ 259.321506][T28522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10741'. [ 259.465115][T28539] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 259.488739][T28541] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 259.491670][T28541] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 259.496414][T28541] vhci_hcd vhci_hcd.0: Device attached [ 259.507277][T28542] vhci_hcd: connection closed [ 259.507526][ T1204] vhci_hcd vhci_hcd.2: stop threads [ 259.512587][ T1204] vhci_hcd vhci_hcd.2: release socket [ 259.515043][ T1204] vhci_hcd vhci_hcd.2: disconnect device [ 259.657415][T28553] CUSE: DEVNAME unspecified [ 260.185797][T28579] program syz.2.10768 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.538030][T28604] netlink: 'syz.3.10780': attribute type 1 has an invalid length. [ 261.479509][T28685] sp0: Synchronizing with TNC [ 261.486373][T28685] [U] [ 261.620722][T28695] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 261.624410][T28695] overlayfs: missing 'lowerdir' [ 261.687414][T28703] vlan3: entered promiscuous mode [ 261.691109][T28703] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 262.109887][T28760] xt_l2tp: v2 tid > 0xffff: 37482740 [ 262.190598][T28761] block nbd1: shutting down sockets [ 262.394985][T28774] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 263.427961][T28844] wg1 speed is unknown, defaulting to 1000 [ 263.652792][T28874] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 263.698285][T28883] vlan2: entered allmulticast mode [ 263.700042][T28883] bond0: entered allmulticast mode [ 263.813748][ T40] audit: type=1326 audit(1770623673.611:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28896 comm="syz.1.10909" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 263.822372][ T40] audit: type=1326 audit(1770623673.611:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28896 comm="syz.1.10909" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 263.833483][ T40] audit: type=1326 audit(1770623673.631:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28896 comm="syz.1.10909" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 263.843009][ T40] audit: type=1326 audit(1770623673.631:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28896 comm="syz.1.10909" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 263.855393][ T40] audit: type=1326 audit(1770623673.631:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28896 comm="syz.1.10909" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 263.868399][ T40] audit: type=1326 audit(1770623673.641:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28896 comm="syz.1.10909" exe="/syz-executor" sig=0 arch=40000003 syscall=301 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 263.877558][ T40] audit: type=1326 audit(1770623673.641:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28896 comm="syz.1.10909" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 263.886103][ T40] audit: type=1326 audit(1770623673.641:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28896 comm="syz.1.10909" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 264.602690][T28999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10943'. [ 265.338093][ T842] kernel read not supported for file /media3 (pid: 842 comm: kworker/1:2) [ 265.465683][T29073] CIFS: Unable to determine destination address [ 265.571867][T29083] openvswitch: netlink: Duplicate or invalid key (type 1). [ 265.574683][T29083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.759092][T29103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10989'. [ 266.129887][T29148] tmpfs: Cannot change global quota limit on remount [ 266.194792][T29156] vlan4: entered promiscuous mode [ 266.196430][T29156] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 266.421423][T29171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11022'. [ 266.586818][T29187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11031'. [ 266.591473][T29187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11031'. [ 267.119305][ T829] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 267.233696][T29237] CUSE: DEVNAME unspecified [ 267.279590][ T829] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 267.283431][ T829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.286861][ T829] usb 5-1: Product: syz [ 267.290794][ T829] usb 5-1: Manufacturer: syz [ 267.292821][ T829] usb 5-1: SerialNumber: syz [ 267.303456][ T829] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 267.317398][ T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 268.408353][ T10] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 268.413094][ T10] ath9k_htc: Failed to initialize the device [ 268.437106][ T10] usb 5-1: ath9k_htc: USB layer deinitialized [ 269.897407][ T842] usb 5-1: USB disconnect, device number 8 [ 270.081216][T29306] vivid-007: disconnect [ 270.083934][T29298] vivid-007: reconnect [ 270.584414][T29389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11120'. [ 270.880478][T29420] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 271.051242][T29430] tmpfs: Too few inodes for current use [ 271.348073][ T40] audit: type=1326 audit(1770623682.137:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29458 comm="syz.2.11156" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 271.356929][ T40] audit: type=1326 audit(1770623682.137:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29458 comm="syz.2.11156" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 271.365178][ T40] audit: type=1326 audit(1770623682.147:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29458 comm="syz.2.11156" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 271.385687][ T40] audit: type=1326 audit(1770623682.147:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29458 comm="syz.2.11156" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 271.398332][ T40] audit: type=1326 audit(1770623682.147:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29458 comm="syz.2.11156" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 271.407235][ T40] audit: type=1326 audit(1770623682.147:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29458 comm="syz.2.11156" exe="/syz-executor" sig=0 arch=40000003 syscall=178 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 271.415549][ T40] audit: type=1326 audit(1770623682.147:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29458 comm="syz.2.11156" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 271.426698][ T40] audit: type=1326 audit(1770623682.147:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29458 comm="syz.2.11156" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f965a7 code=0x7ffc0000 [ 271.435828][ T40] audit: type=1326 audit(1770623682.147:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29458 comm="syz.2.11156" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 271.445327][ T40] audit: type=1326 audit(1770623682.147:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29458 comm="syz.2.11156" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 271.561887][T29489] autofs: Bad value for 'fd' [ 271.790092][T29515] mkiss: ax0: crc mode is auto. [ 272.374250][T29578] CIFS: Unable to determine destination address [ 272.516033][T29595] IPVS: ip_vs_edit_dest(): server weight less than zero [ 272.553109][T29600] netlink: 'syz.0.11224': attribute type 3 has an invalid length. [ 272.652589][T29614] tmpfs: Cannot change global quota limit on remount [ 273.140257][ T842] kernel read not supported for file /5779/attr/prev (pid: 842 comm: kworker/1:2) [ 273.241890][T29677] tipc: Enabled bearer , priority 0 [ 273.558425][ T842] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 273.609276][T29717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11280'. [ 273.719958][ T842] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 273.723671][ T842] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.731316][ T842] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 273.734812][ T842] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 273.738087][ T842] usb 8-1: Manufacturer: syz [ 273.748730][ T842] usb 8-1: config 0 descriptor?? [ 273.829651][ T842] rc_core: IR keymap rc-hauppauge not found [ 273.832046][ T842] Registered IR keymap rc-empty [ 273.837213][ T842] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 273.848316][ T842] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input28 [ 273.934136][T29746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11291'. [ 273.960811][ T842] usb 8-1: USB disconnect, device number 6 [ 274.199253][T29767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11297'. [ 274.744046][T29804] ALSA: mixer_oss: invalid OSS volume 'Y{UDD ' [ 274.747918][T29804] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 274.753434][T29804] ALSA: mixer_oss: invalid OSS volume 'lg' [ 274.756013][T29804] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 274.759888][T29804] ALSA: mixer_oss: invalid OSS volume 'kO0$g{pl{y;_ARW' [ 274.763371][T29804] ALSA: mixer_oss: invalid OSS volume '' [ 274.765753][T29804] ALSA: mixer_oss: invalid OSS volume 'sv Fu{Qby>h%w]' [ 274.768797][T29804] ALSA: mixer_oss: invalid OSS volume 'E= v?@48@hL' [ 274.771570][T29804] ALSA: mixer_oss: invalid OSS volume '+?>3Iq0:iq|UDř' [ 274.774459][T29804] ALSA: mixer_oss: invalid OSS volume 'vӷ*xrN0ܗcAdh' [ 274.777354][T29804] ALSA: mixer_oss: invalid OSS volume 'JM %HJ[~S' [ 275.003660][T29828] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 275.156485][T29845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11333'. [ 276.575311][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 276.575327][ T40] audit: type=1326 audit(1770623687.367:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29890 comm="syz.3.11355" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7fc00000 [ 276.701874][T29946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11382'. [ 276.725566][T29946] veth3: entered promiscuous mode [ 277.053110][T29985] support for cryptoloop has been removed. Use dm-crypt instead. [ 277.266644][T30003] binder_alloc: binder_alloc_mmap_handler: 30002 80ffd000-80fff000 already mapped failed -16 [ 277.383478][T30013] netlink: 264 bytes leftover after parsing attributes in process `syz.1.11415'. [ 277.971199][T30070] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 279.019293][T30148] can0: slcan on ptm0. [ 279.089051][T30147] can0 (unregistered): slcan off ptm0. [ 279.387245][T30185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11491'. [ 279.396999][T30185] vlan4: entered promiscuous mode [ 279.399358][T30185] gretap0: entered promiscuous mode [ 279.642854][T30198] overlayfs: workdir and upperdir must be separate subtrees [ 280.362212][T30285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11537'. [ 280.366721][T30285] netlink: 277 bytes leftover after parsing attributes in process `syz.3.11537'. [ 280.369954][T30285] netlink: 277 bytes leftover after parsing attributes in process `syz.3.11537'. [ 280.468942][T30296] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11541'. [ 280.511620][T30302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11543'. [ 280.895799][T30344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11558'. [ 281.071601][T30367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11567'. [ 281.468277][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 281.581796][T30426] wg1 speed is unknown, defaulting to 1000 [ 281.625850][ T10] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 281.630302][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.633273][ T10] usb 8-1: Product: syz [ 281.634699][ T10] usb 8-1: Manufacturer: syz [ 281.636219][ T10] usb 8-1: SerialNumber: syz [ 281.640552][ T10] usb 8-1: config 0 descriptor?? [ 281.859053][ T10] usb-storage 8-1:0.0: USB Mass Storage device detected [ 282.019457][ T10] usb 8-1: USB disconnect, device number 7 [ 282.228862][ T40] audit: type=1326 audit(1770623693.027:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30489 comm="syz.1.11615" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 282.236539][ T40] audit: type=1326 audit(1770623693.027:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30489 comm="syz.1.11615" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 282.243681][ T40] audit: type=1326 audit(1770623693.027:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30489 comm="syz.1.11615" exe="/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 282.250784][ T40] audit: type=1326 audit(1770623693.037:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30489 comm="syz.1.11615" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 282.259931][ T40] audit: type=1326 audit(1770623693.037:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30489 comm="syz.1.11615" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 282.266940][ T40] audit: type=1326 audit(1770623693.037:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30491 comm="syz.1.11615" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71e572b code=0x7ffc0000 [ 282.282391][ T40] audit: type=1326 audit(1770623693.077:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30489 comm="syz.1.11615" exe="/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 282.291664][ T40] audit: type=1326 audit(1770623693.077:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30489 comm="syz.1.11615" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 282.301052][ T40] audit: type=1326 audit(1770623693.077:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30489 comm="syz.1.11615" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 282.448209][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 282.598208][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 282.602057][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 282.605547][ T10] usb 5-1: config 0 has no interface number 0 [ 282.608563][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 282.613113][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 282.628484][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 282.633178][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 282.638047][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 282.642324][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.647699][ T10] usb 5-1: config 0 descriptor?? [ 282.657749][ T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 282.876634][ T6020] usb 5-1: USB disconnect, device number 9 [ 282.882951][ T6020] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 282.969578][T30554] __nla_validate_parse: 1 callbacks suppressed [ 282.969590][T30554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11645'. [ 283.015114][T30560] netlink: 'syz.1.11648': attribute type 21 has an invalid length. [ 283.017965][T30560] IPv6: NLM_F_CREATE should be specified when creating new route [ 283.022421][T30560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.025268][T30560] IPv6: NLM_F_CREATE should be set when creating new route [ 283.028193][T30560] IPv6: NLM_F_CREATE should be set when creating new route [ 283.031140][T30560] IPv6: NLM_F_CREATE should be set when creating new route [ 283.034670][T30560] netlink: 'syz.1.11648': attribute type 21 has an invalid length. [ 283.037199][T30560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.381130][T30609] netlink: 'syz.1.11672': attribute type 10 has an invalid length. [ 283.383709][T30609] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 283.387745][T30609] team0: Port device netdevsim0 added [ 283.394459][T30609] netlink: 'syz.1.11672': attribute type 10 has an invalid length. [ 283.411634][T30609] team0: Port device netdevsim0 removed [ 283.416818][T30609] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 283.589198][T30637] Cannot find add_set index 46338 as target [ 283.701326][T30655] [U] V3Fپ"S/4:XTZWTLW= [ 283.949426][T30685] sctp: [Deprecated]: syz.2.11702 (pid 30685) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.949426][T30685] Use struct sctp_sack_info instead [ 284.205778][ T1328] Process accounting resumed [ 284.216799][T30715] Process accounting resumed [ 284.350784][T30725] atomic_op ffff888027d57998 conn xmit_atomic 0000000000000000 [ 284.936590][T30748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11721'. [ 285.137034][T30764] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 285.239636][ T40] audit: type=1326 audit(1770623696.037:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30773 comm="syz.0.11746" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 285.571220][T30790] x_tables: ip6_tables: DNAT target: only valid in nat table, not syz1 [ 285.615475][T30793] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 285.615475][T30793] program syz.0.11756 not setting count and/or reply_len properly [ 286.527160][T30846] netlink: 156 bytes leftover after parsing attributes in process `syz.3.11781'. [ 286.531029][T30846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11781'. [ 286.874150][T30881] loop6: detected capacity change from 0 to 524287999 [ 287.014250][T30896] tipc: Enabling not permitted [ 287.016588][T30896] tipc: Enabling of bearer rejected, failed to enable media [ 287.048923][T30901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11808'. [ 287.051834][T30901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11808'. [ 287.054729][T30901] netlink: 'syz.0.11808': attribute type 12 has an invalid length. [ 287.057584][T30901] netlink: 'syz.0.11808': attribute type 11 has an invalid length. [ 287.104539][T30906] netlink: 'syz.3.11809': attribute type 83 has an invalid length. [ 287.193462][T30920] random: crng reseeded on system resumption [ 287.497477][T30949] sg_write: data in/out 12582877/14 bytes for SCSI command 0x0-- guessing data in; [ 287.497477][T30949] program syz.3.11832 not setting count and/or reply_len properly [ 287.592864][T30955] "syz.1.11830" (30955) uses obsolete ecb(arc4) skcipher [ 287.629354][T30967] usb usb8: usbfs: process 30967 (syz.1.11838) did not claim interface 0 before use [ 287.684444][T30971] syz.3.11836 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 287.915277][T30997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11853'. [ 287.919947][T31000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11854'. [ 287.923765][T31000] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11854'. [ 287.997005][T31007] binder: 31006:31007 ioctl 400c620e 80000480 returned -22 [ 288.055995][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 288.056009][ T40] audit: type=1326 audit(1770623698.847:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31012 comm="syz.1.11859" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe2579 code=0x0 [ 288.276023][T31035] wg1 speed is unknown, defaulting to 1000 [ 288.510632][T31058] Option ' ' to dns_resolver key: bad/missing value [ 288.600763][T31070] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11885'. [ 288.721819][T31084] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11893'. [ 288.727581][T31084] tipc: Invalid UDP bearer configuration [ 288.727611][T31084] tipc: Enabling of bearer rejected, failed to enable media [ 288.773684][T31091] nbd: must specify an index to disconnect [ 288.871353][T31104] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 289.190320][T31148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11925'. [ 289.274792][T31156] wg1 speed is unknown, defaulting to 1000 [ 289.280491][T31160] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 289.282695][T31160] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 289.291669][T31160] vhci_hcd vhci_hcd.0: Device attached [ 289.305628][T31161] vhci_hcd: connection closed [ 289.305934][ T1141] vhci_hcd vhci_hcd.2: stop threads [ 289.311166][ T1141] vhci_hcd vhci_hcd.2: release socket [ 289.313378][ T1141] vhci_hcd vhci_hcd.2: disconnect device [ 290.248651][ T842] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 290.409723][ T842] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 290.412894][ T842] usb 5-1: config 0 has no interface number 0 [ 290.415200][ T842] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 290.419672][ T842] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 290.423701][ T842] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 290.428177][ T842] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 290.434950][ T842] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 290.440014][ T842] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 290.444841][ T842] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 290.448742][ T842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.453910][ T842] usb 5-1: config 0 descriptor?? [ 290.456540][T31203] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 290.459197][T31203] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 290.468616][ T842] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 290.670499][ T54] usb 5-1: USB disconnect, device number 10 [ 290.675297][ T54] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 290.891112][T31224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11958'. [ 291.214025][T31241] loop5: detected capacity change from 0 to 7 [ 291.230722][T31241] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 291.232551][T31241] loop5: partition table partially beyond EOD, truncated [ 291.235128][T31241] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 291.261045][T18778] udevd[18778]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 291.588411][T31278] xt_socket: unknown flags 0xe4 [ 291.958986][T31318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12004'. [ 292.075203][T31334] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.12010'. [ 292.273423][T31363] binder: 31360:31363 ioctl c00c620f 80000080 returned -22 [ 292.293328][T31365] IPVS: stopping backup sync thread 9283 ... [ 292.339760][T31371] bridge_slave_1: default FDB implementation only supports local addresses [ 292.584463][T31406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12048'. [ 292.677351][T31420] wg1 speed is unknown, defaulting to 1000 [ 293.665183][T31536] program syz.1.12107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.350108][T31593] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 294.352173][T31593] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 294.354765][T31593] vhci_hcd vhci_hcd.0: Device attached [ 294.388530][ T6020] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 294.481359][T31597] netlink: 96 bytes leftover after parsing attributes in process `syz.3.12135'. [ 294.540317][ T6020] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 294.543301][ T6020] usb 5-1: config 0 has no interface number 0 [ 294.545549][ T6020] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 294.549669][ T6020] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 294.553148][ T6020] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 294.556225][ T6020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.562474][ T6020] usb 5-1: config 0 descriptor?? [ 294.564571][T31586] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 294.573702][ T6020] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 294.628612][ T6031] usb 40-1: SetAddress Request (6) to port 0 [ 294.631709][ T6031] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 294.757600][ T40] audit: type=1326 audit(1770623705.547:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31569 comm="syz.2.12124" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7fc00000 [ 294.782798][ C3] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 294.786298][ T1328] usb 5-1: USB disconnect, device number 11 [ 294.956309][T31625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.129834][T31594] vhci_hcd: connection reset by peer [ 295.132378][ T41] vhci_hcd vhci_hcd.1: stop threads [ 295.134654][ T41] vhci_hcd vhci_hcd.1: release socket [ 295.137198][ T41] vhci_hcd vhci_hcd.1: disconnect device [ 295.176005][T31643] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12156'. [ 295.346848][T31656] netlink: 'syz.2.12163': attribute type 11 has an invalid length. [ 295.795146][T31711] i2c i2c-1: Invalid block read size 34 [ 295.872161][T31723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12194'. [ 296.171917][T31753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12210'. [ 296.220179][T31763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12213'. [ 296.312254][T31779] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 296.402513][T31788] batadv_slave_0: entered promiscuous mode [ 296.405525][T31786] batadv_slave_0: left promiscuous mode [ 296.579541][T31813] Invalid source name [ 296.580968][T31813] UBIFS error (pid: 31813): cannot open "usrquota", error -22 [ 296.589235][T31815] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12241'. [ 296.733816][T31829] vlan2: entered allmulticast mode [ 296.735595][T31829] team0: entered allmulticast mode [ 296.799882][ T54] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 296.959904][ T54] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.970227][ T54] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.975540][ T54] usb 5-1: config 0 interface 0 has no altsetting 0 [ 296.978931][ T54] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 296.982723][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.987203][ T54] usb 5-1: config 0 descriptor?? [ 297.201444][T31808] netlink: 666 bytes leftover after parsing attributes in process `syz.0.12238'. [ 297.206269][ T54] usbhid 5-1:0.0: can't add hid device: -71 [ 297.208494][ T54] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 297.217149][ T54] usb 5-1: USB disconnect, device number 12 [ 297.534982][T31900] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12282'. [ 297.540225][T31900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12282'. [ 298.335404][T31969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12316'. [ 299.678229][ T6031] usb 40-1: device descriptor read/8, error -110 [ 300.078914][ T6031] usb usb40-port1: attempt power cycle [ 300.658723][ T6031] usb usb40-port1: unable to enumerate USB device [ 301.139624][T32106] __nla_validate_parse: 1 callbacks suppressed [ 301.139641][T32106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12380'. [ 301.146181][T32106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12380'. [ 301.151142][T32106] netlink: 'syz.0.12380': attribute type 13 has an invalid length. [ 301.552240][T32137] qrtr: Invalid version 255 [ 302.006761][T32160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12406'. [ 302.195972][T32174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12414'. [ 302.199109][T32174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12414'. [ 304.232533][T32309] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 304.290853][T32316] netlink: 'syz.2.12478': attribute type 2 has an invalid length. [ 305.520887][T32374] netlink: 68 bytes leftover after parsing attributes in process `syz.0.12506'. [ 305.524111][T32374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12506'. [ 305.653264][T32380] 9pnet_fd: p9_fd_create_tcp (32380): problem binding to privport [ 306.511437][T32445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12539'. [ 306.520461][T32445] gretap0: entered promiscuous mode [ 306.712039][T32461] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12547'. [ 307.020559][ T5944] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 307.064032][ C2] sr 2:0:0:0: [sr0] tag#15 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 307.068486][ C2] sr 2:0:0:0: [sr0] tag#15 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 307.247673][T32511] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12572'. [ 307.890082][T32575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12603'. [ 307.906186][T32575] 8021q: adding VLAN 0 to HW filter on device bond5 [ 308.006083][T32587] mkiss: ax0: crc mode is auto. [ 308.262816][T32601] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 308.264950][T32601] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 308.267459][T32601] vhci_hcd vhci_hcd.0: Device attached [ 308.276186][T32602] vhci_hcd: connection closed [ 308.276436][ T1141] vhci_hcd vhci_hcd.2: stop threads [ 308.284436][ T1141] vhci_hcd vhci_hcd.2: release socket [ 308.286638][ T1141] vhci_hcd vhci_hcd.2: disconnect device [ 308.453444][T32615] xt_socket: unknown flags 0x50 [ 309.055246][T32646] netlink: 512 bytes leftover after parsing attributes in process `syz.0.12638'. [ 309.091890][T32652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12641'. [ 309.096081][T32652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12641'. [ 309.188741][T32660] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 309.253851][T32664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12647'. [ 309.267871][T32660] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 309.325625][T32660] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 309.375036][T32670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12650'. [ 309.379971][T32670] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12650'. [ 309.429533][T32660] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 309.529543][ T41] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 309.539856][ T41] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 309.547284][ T72] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 309.558095][ T41] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 309.649216][T32684] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 309.729007][T32690] sp0: Synchronizing with TNC [ 309.737780][T32690] sp0: Found TNC [ 309.967443][T32708] tipc: Enabling of bearer rejected, failed to enable media [ 310.128474][T32721] syz.2.12675 (32721): drop_caches: 4 [ 310.321336][T32737] EXT4-fs: Conflicting test_dummy_encryption options [ 311.429846][ T341] fuse: blksize only supported for fuseblk [ 311.436041][ T40] audit: type=1326 audit(1770623722.227:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=342 comm="syz.0.12717" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb7579 code=0x0 [ 312.029024][ T360] __nla_validate_parse: 2 callbacks suppressed [ 312.029043][ T360] netlink: 176 bytes leftover after parsing attributes in process `syz.1.12726'. [ 312.062789][ T362] xt_l2tp: wrong L2TP version: 0 [ 312.116186][ T368] netlink: 'syz.2.12730': attribute type 2 has an invalid length. [ 312.477419][ T406] trusted_key: encrypted_key: key user:syz not found [ 312.830883][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 312.837017][ T442] block nbd0: NBD_DISCONNECT [ 312.837719][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 312.843861][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 312.848401][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 312.851299][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 312.889931][ T439] wg1 speed is unknown, defaulting to 1000 [ 312.933093][ T1149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 313.043059][ T1149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 313.050093][ T439] chnl_net:caif_netlink_parms(): no params data found [ 313.106282][ T1149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 313.118691][ T439] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.122133][ T439] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.125069][ T439] bridge_slave_0: entered allmulticast mode [ 313.129320][ T439] bridge_slave_0: entered promiscuous mode [ 313.132756][ T439] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.135023][ T439] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.137270][ T439] bridge_slave_1: entered allmulticast mode [ 313.140666][ T439] bridge_slave_1: entered promiscuous mode [ 313.156221][ T439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.161523][ T439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.178948][ T1149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 313.205021][ T439] team0: Port device team_slave_0 added [ 313.208083][ T439] team0: Port device team_slave_1 added [ 313.240315][ T439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.242626][ T439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.250893][ T439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.255601][ T439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.258741][ T439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.266978][ T439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.294145][ T439] hsr_slave_0: entered promiscuous mode [ 313.296822][ T439] hsr_slave_1: entered promiscuous mode [ 313.299213][ T439] debugfs: 'hsr0' already exists in 'hsr' [ 313.301467][ T439] Cannot create hsr debugfs directory [ 313.364071][ T485] netlink: 88 bytes leftover after parsing attributes in process `syz.0.12784'. [ 313.435439][ T1149] ip6gretap0 (unregistering): left allmulticast mode [ 313.471356][ T497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12790'. [ 313.472433][ T498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12791'. [ 313.665026][ T516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12799'. [ 314.424036][ T536] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 314.524159][ T1149] bond0 (unregistering): Released all slaves [ 314.530528][ T1149] bond1 (unregistering): Released all slaves [ 314.537402][ T1149] bond2 (unregistering): Released all slaves [ 314.544231][ T1149] bond3 (unregistering): Released all slaves [ 314.620435][ T1149] bond4 (unregistering): Released all slaves [ 314.626760][ T1149] bond5 (unregistering): Released all slaves [ 314.632972][ T1149] bond6 (unregistering): Released all slaves [ 314.716174][ T439] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 314.724281][ T439] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 314.739137][ T439] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 314.754064][ T439] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 314.780007][ T1149] IPVS: stopping backup sync thread 9197 ... [ 314.821093][ T439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.838435][ T439] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.845056][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.847378][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.859908][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.862191][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.879139][ T64] Bluetooth: hci4: command tx timeout [ 315.036031][ T439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.177512][ T439] veth0_vlan: entered promiscuous mode [ 315.184304][ T439] veth1_vlan: entered promiscuous mode [ 315.197761][ T439] veth0_macvtap: entered promiscuous mode [ 315.203022][ T439] veth1_macvtap: entered promiscuous mode [ 315.230543][ T439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.237394][ T439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.244602][ T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.247696][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.252685][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.255677][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.362306][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.365631][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.401973][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.406007][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.418245][ T1149] hsr_slave_0: left promiscuous mode [ 315.423572][ T1149] hsr_slave_1: left promiscuous mode [ 315.447321][ T1149] pim6reg9 (unregistering): left allmulticast mode [ 315.693009][ T615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12825'. [ 316.585550][ T670] netlink: 'syz.1.12849': attribute type 1 has an invalid length. [ 316.609146][ T1149] IPVS: stop unused estimator thread 0... [ 316.679217][ T682] [U] bmtk}UH\؉Hn;} [ 316.822455][ T700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12863'. [ 316.958272][ T64] Bluetooth: hci4: command tx timeout [ 317.089069][ T54] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 317.154717][ T40] audit: type=1326 audit(1770623727.947:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=730 comm="syz.1.12879" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 317.164287][ T40] audit: type=1326 audit(1770623727.947:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=730 comm="syz.1.12879" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 317.173840][ T729] program syz.0.12878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.178192][ T40] audit: type=1326 audit(1770623727.947:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=730 comm="syz.1.12879" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 317.184879][ T40] audit: type=1326 audit(1770623727.947:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=730 comm="syz.1.12879" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 317.191812][ T40] audit: type=1326 audit(1770623727.947:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=730 comm="syz.1.12879" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 317.199135][ T40] audit: type=1326 audit(1770623727.947:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=730 comm="syz.1.12879" exe="/syz-executor" sig=0 arch=40000003 syscall=250 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 317.207219][ T40] audit: type=1326 audit(1770623727.947:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=730 comm="syz.1.12879" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 317.219089][ T40] audit: type=1326 audit(1770623727.947:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=730 comm="syz.1.12879" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 317.248625][ T54] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 317.251891][ T54] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.254715][ T54] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.260681][ T54] usb 9-1: config 0 interface 0 has no altsetting 0 [ 317.263557][ T54] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.266419][ T54] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.273870][ T54] usb 9-1: config 0 interface 0 has no altsetting 0 [ 317.276859][ T54] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.279863][ T54] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.283237][ T54] usb 9-1: config 0 interface 0 has no altsetting 0 [ 317.286096][ T54] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.295698][ T54] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.299742][ T54] usb 9-1: config 0 interface 0 has no altsetting 0 [ 317.305874][ T54] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.316320][ T54] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.320955][ T54] usb 9-1: config 0 interface 0 has no altsetting 0 [ 317.324205][ T54] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.327032][ T54] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.330651][ T54] usb 9-1: config 0 interface 0 has no altsetting 0 [ 317.333487][ T54] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.339930][ T54] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.343344][ T54] usb 9-1: config 0 interface 0 has no altsetting 0 [ 317.346177][ T54] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.349192][ T54] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.352574][ T54] usb 9-1: config 0 interface 0 has no altsetting 0 [ 317.356179][ T54] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 317.359239][ T54] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 317.361840][ T54] usb 9-1: Product: syz [ 317.363174][ T54] usb 9-1: Manufacturer: syz [ 317.364645][ T54] usb 9-1: SerialNumber: syz [ 317.368376][ T54] usb 9-1: config 0 descriptor?? [ 317.376344][ T54] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 317.403080][ T751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12889'. [ 317.583946][ T762] vivid-000: disconnect [ 317.586756][ T761] vivid-000: reconnect [ 317.589017][ T842] usb 9-1: USB disconnect, device number 2 [ 317.600120][ T842] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 317.767510][ T777] binder: 775:777 ioctl 4018620d 0 returned -22 [ 317.771705][ T777] binder: 775:777 ioctl c0306201 80000180 returned -11 [ 317.994721][ T800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12911'. [ 318.318449][ T40] audit: type=1326 audit(1770623729.117:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=832 comm="syz.4.12926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 318.332039][ T40] audit: type=1326 audit(1770623729.117:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=832 comm="syz.4.12926" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 319.023496][ T854] 9p: Invalid gid '0x00000000ffffffff' [ 319.043808][ T64] Bluetooth: hci4: command tx timeout [ 319.128680][ T864] overlayfs: conflicting options: nfs_export=on,index=off [ 319.316222][ T887] tipc: Enabling of bearer rejected, media not registered [ 319.433662][ T6020] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 319.436764][ T6020] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 319.441128][ T6020] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 319.444147][ T6020] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 319.446950][ T6020] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 319.453923][ T6020] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 319.457231][ T6020] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 319.461591][ T6020] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 319.464614][ T6020] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 319.467169][ T6020] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 319.478308][ T6020] hid-generic 00A0:0006:0003.0004: hidraw0: HID v0.05 Device [syz1] on syz0 [ 319.519982][ T919] netlink: 'syz.1.12966': attribute type 62 has an invalid length. [ 319.541683][ T916] fido_id[916]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 319.580142][ T929] netlink: 504 bytes leftover after parsing attributes in process `syz.2.12970'. [ 319.585860][ T932] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 319.750575][ T960] fuse: blksize only supported for fuseblk [ 319.837483][ T981] loop2: detected capacity change from 0 to 7 [ 319.844250][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 319.848235][ C2] buffer_io_error: 32 callbacks suppressed [ 319.848248][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 319.853844][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 319.857400][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 319.860230][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 319.863675][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 319.866379][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 319.869399][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 319.873057][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 319.876506][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 319.879404][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 319.882351][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 319.884919][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 319.887965][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 319.890559][ T981] ldm_validate_partition_table(): Disk read failed. [ 319.892744][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 319.895856][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 319.899132][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 319.902260][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 319.905073][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 319.908287][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 319.912326][ T981] Dev loop2: unable to read RDB block 0 [ 319.914721][ T981] loop2: unable to read partition table [ 319.916669][ T981] loop2: partition table beyond EOD, truncated [ 319.928297][ T981] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 320.222370][ T1031] netlink: 'syz.1.13014': attribute type 1 has an invalid length. [ 320.224803][ T1031] netlink: 96 bytes leftover after parsing attributes in process `syz.1.13014'. [ 320.227752][ T1031] netlink: 1 bytes leftover after parsing attributes in process `syz.1.13014'. [ 320.248823][ T1031] netlink: 'syz.1.13014': attribute type 1 has an invalid length. [ 320.252006][ T1031] netlink: 634 bytes leftover after parsing attributes in process `syz.1.13014'. [ 320.306320][ T1042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13020'. [ 320.310553][ T1042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13020'. [ 320.367731][ T1048] trusted_key: encrypted_key: key user:syz not found [ 320.426610][ T1061] macsec2: entered promiscuous mode [ 320.431162][ T1061] macsec2: entered allmulticast mode [ 320.724248][ T1104] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.13045'. [ 321.119852][ T64] Bluetooth: hci4: command tx timeout [ 321.138257][ T1170] input input30: cannot allocate more than FF_MAX_EFFECTS effects [ 321.399970][ T1210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13087'. [ 321.534039][ T1227] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 322.034000][ T1300] CUSE: unknown device info "" [ 322.036401][ T1300] CUSE: unknown device info "`" [ 322.039082][ T1300] CUSE: unknown device info "" [ 322.041005][ T1300] CUSE: unknown device info "" [ 322.042950][ T1300] CUSE: DEVNAME unspecified [ 322.554643][ T1323] __nla_validate_parse: 1 callbacks suppressed [ 322.554655][ T1323] netlink: 88 bytes leftover after parsing attributes in process `syz.1.13139'. [ 322.992428][ T1375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13162'. [ 323.198567][ T1405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13176'. [ 323.201462][ T1405] netlink: 'syz.0.13176': attribute type 5 has an invalid length. [ 323.208724][ T1405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13176'. [ 323.653804][ T1440] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13190'. [ 323.914777][ T1462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13201'. [ 323.924192][ T1462] macsec2: entered allmulticast mode [ 323.926346][ T1462] veth1_macvtap: entered allmulticast mode [ 323.930401][ T1462] veth1_macvtap: left allmulticast mode [ 324.336141][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 324.336159][ T40] audit: type=1800 audit(1770623735.127:378): pid=1481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.13210" name="/newroot/3241/bus/#16354//deleted" dev="tmpfs" ino=16354 res=0 errno=0 [ 324.498507][ T1494] [U] bmtk}UH\؉Hn;} [ 324.789968][ T1515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13225'. [ 324.882680][ T40] audit: type=1326 audit(1770623735.677:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1524 comm="syz.0.13230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 324.900133][ T40] audit: type=1326 audit(1770623735.677:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1524 comm="syz.0.13230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 324.907392][ T40] audit: type=1326 audit(1770623735.677:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1524 comm="syz.0.13230" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 324.910435][ T1527] vivid-008: disconnect [ 324.914578][ T40] audit: type=1326 audit(1770623735.677:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1524 comm="syz.0.13230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 324.922805][ T40] audit: type=1326 audit(1770623735.677:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1524 comm="syz.0.13230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 324.927188][ T1526] vivid-008: reconnect [ 324.933988][ T40] audit: type=1326 audit(1770623735.687:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1524 comm="syz.0.13230" exe="/syz-executor" sig=0 arch=40000003 syscall=250 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 324.945463][ T40] audit: type=1326 audit(1770623735.687:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1524 comm="syz.0.13230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 324.954031][ T40] audit: type=1326 audit(1770623735.687:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1524 comm="syz.0.13230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 325.028878][ T1537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13235'. [ 325.032485][ T1537] tipc: Enabling of bearer rejected, failed to enable media [ 325.476471][ T1571] F2FS-fs: Conflicting test_dummy_encryption options [ 325.885965][ T1618] loop2: detected capacity change from 0 to 7 [ 325.890064][ C1] blk_print_req_error: 10 callbacks suppressed [ 325.890079][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.895915][ C1] buffer_io_error: 10 callbacks suppressed [ 325.895925][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 325.904145][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.908064][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 325.911689][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.915829][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 325.920320][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.924484][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 325.927527][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.930645][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 325.933305][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.936278][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 325.939262][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.941396][ T1626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13276'. [ 325.942287][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 325.945526][ T1626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13276'. [ 325.948015][ T1618] ldm_validate_partition_table(): Disk read failed. [ 325.952059][ T1626] netlink: 'syz.1.13276': attribute type 13 has an invalid length. [ 325.956839][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.957129][ T1626] netlink: 'syz.1.13276': attribute type 14 has an invalid length. [ 325.960081][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 325.960404][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.970269][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 325.973729][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 325.976722][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 325.979812][ T1618] Dev loop2: unable to read RDB block 0 [ 325.982144][ T1618] loop2: unable to read partition table [ 325.985682][ T1618] loop2: partition table beyond EOD, truncated [ 325.987776][ T1618] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 326.023212][ T1630] netlink: 'syz.1.13277': attribute type 6 has an invalid length. [ 326.025966][ T1630] netlink: 'syz.1.13277': attribute type 5 has an invalid length. [ 326.029940][ T1630] netlink: 'syz.1.13277': attribute type 4 has an invalid length. [ 326.114554][ T1641] netlink: 'syz.1.13282': attribute type 178 has an invalid length. [ 326.265394][ T1656] 9p: Invalid gid '0x00000000ffffffff' [ 326.276084][ T1658] IPv6: sit1: Disabled Multicast RS [ 326.281578][ T1658] sit1: entered allmulticast mode [ 326.641281][ T5944] Bluetooth: hci4: command 0x0405 tx timeout [ 327.200411][ T1708] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 327.505322][ T829] IPVS: starting estimator thread 0... [ 327.601770][ T1758] xt_limit: Overflow, try lower: 271964/0 [ 327.609277][ T1750] IPVS: using max 43 ests per chain, 103200 per kthread [ 328.130562][ T1833] netlink: 'syz.4.13369': attribute type 1 has an invalid length. [ 328.133896][ T1833] __nla_validate_parse: 2 callbacks suppressed [ 328.133911][ T1833] netlink: 96 bytes leftover after parsing attributes in process `syz.4.13369'. [ 328.142662][ T1833] netlink: 1 bytes leftover after parsing attributes in process `syz.4.13369'. [ 328.146336][ T1833] netlink: 'syz.4.13369': attribute type 1 has an invalid length. [ 328.149957][ T1833] netlink: 634 bytes leftover after parsing attributes in process `syz.4.13369'. [ 328.240712][ T40] audit: type=1326 audit(1770623739.037:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1843 comm="syz.4.13373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 328.440032][ T1867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13385'. [ 328.923290][ T1927] program syz.4.13411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.928687][ T1927] ata1.00: invalid multi_count 1 ignored [ 328.970865][ T1931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13413'. [ 328.973792][ T1931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13413'. [ 329.111211][ T1947] [U] k43 [ 329.244836][ T1969] CUSE: unknown device info "" [ 329.247006][ T1969] CUSE: unknown device info "`" [ 329.249712][ T1969] CUSE: unknown device info "" [ 329.252678][ T1969] CUSE: unknown device info "" [ 329.254616][ T1969] CUSE: DEVNAME unspecified [ 329.511879][ T2005] vlan3: entered promiscuous mode [ 329.698648][ T842] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 329.826943][ T2034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13461'. [ 329.831310][ T2034] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13461'. [ 329.834172][ T2034] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13461'. [ 329.869756][ T842] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 329.873060][ T842] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 329.875718][ T842] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 329.879067][ T842] usb 9-1: config 250 has no interface number 0 [ 329.887009][ T842] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 64 [ 329.891055][ T842] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 329.898334][ T842] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 329.902417][ T842] usb 9-1: config 250 interface 228 has no altsetting 0 [ 329.914720][ T842] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 329.917718][ T842] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 329.921149][ T842] usb 9-1: Product: syz [ 329.922521][ T842] usb 9-1: SerialNumber: syz [ 329.928982][ T842] hub 9-1:250.228: bad descriptor, ignoring hub [ 329.931070][ T842] hub 9-1:250.228: probe with driver hub failed with error -5 [ 329.970633][ T2049] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13468'. [ 330.132088][ T842] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 330.256516][ T2068] netlink: 'syz.2.13477': attribute type 1 has an invalid length. [ 330.449876][ T1466] usb 9-1: USB disconnect, device number 3 [ 330.454804][ T1466] usblp0: removed [ 330.688238][ T2093] xt_socket: unknown flags 0xd0 [ 330.727207][ T2099] program syz.0.13492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.070461][ T2140] binder: 2138:2140 unknown command 1853191215 [ 331.073044][ T2140] binder: 2138:2140 ioctl c0306201 80000080 returned -22 [ 331.121857][ T2142] ipvlan2: entered promiscuous mode [ 331.124421][ T2142] bridge0: port 3(ipvlan2) entered blocking state [ 331.126583][ T2142] bridge0: port 3(ipvlan2) entered disabled state [ 331.130345][ T2142] ipvlan2: entered allmulticast mode [ 331.132238][ T2142] bridge0: entered allmulticast mode [ 331.134978][ T2142] ipvlan2: left allmulticast mode [ 331.136611][ T2142] bridge0: left allmulticast mode [ 331.147559][ T2139] syz.2.13511 (2139) used greatest stack depth: 18584 bytes left [ 331.321610][ T2159] netlink: 'syz.1.13521': attribute type 1 has an invalid length. [ 331.324142][ T2159] netlink: 'syz.1.13521': attribute type 1 has an invalid length. [ 331.327073][ T2159] netlink: 'syz.1.13521': attribute type 8 has an invalid length. [ 331.624756][ T2198] IPVS: Error connecting to the multicast addr [ 332.269147][ T2254] ucma_write: process 306 (syz.4.13563) changed security contexts after opening file descriptor, this is not allowed. [ 332.279886][ T2253] mkiss: ax0: crc mode is auto. [ 332.306253][ T2256] tc_dump_action: action bad kind [ 332.312506][ T2258] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 332.314601][ T2258] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 332.321232][ T2258] vhci_hcd vhci_hcd.0: Device attached [ 332.326207][ T2260] vhci_hcd: connection closed [ 332.326557][ T13] vhci_hcd vhci_hcd.4: stop threads [ 332.331337][ T13] vhci_hcd vhci_hcd.4: release socket [ 332.333530][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 332.419340][ T2267] F2FS-fs: Conflicting test_dummy_encryption options [ 332.733941][ T2310] netlink: 'syz.2.13590': attribute type 2 has an invalid length. [ 333.151978][ T2359] __nla_validate_parse: 9 callbacks suppressed [ 333.151997][ T2359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13614'. [ 333.158637][ T2359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13614'. [ 333.162453][ T2359] netlink: 'syz.0.13614': attribute type 14 has an invalid length. [ 333.298195][ T1466] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 333.448182][ T1466] usb 9-1: Using ep0 maxpacket: 32 [ 333.459070][ T1466] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 333.463954][ T1466] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 333.466739][ T1466] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 333.469361][ T1466] usb 9-1: Product: syz [ 333.470706][ T1466] usb 9-1: Manufacturer: syz [ 333.472167][ T1466] usb 9-1: SerialNumber: syz [ 333.478726][ T1466] usb 9-1: config 0 descriptor?? [ 333.481289][ T2355] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 333.692603][ T842] usb 9-1: USB disconnect, device number 4 [ 334.324572][ T2429] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13648'. [ 334.575891][ T2457] CIFS: VFS: Malformed UNC in devname [ 334.651761][ T2470] netlink: 'syz.4.13667': attribute type 49 has an invalid length. [ 334.655173][ T2470] netlink: 'syz.4.13667': attribute type 49 has an invalid length. [ 334.751028][ T2480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13672'. [ 334.761783][ T2480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13672'. [ 335.064123][ T2511] openvswitch: netlink: Missing valid actions attribute. [ 335.066463][ T2511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.723045][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.729759][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.738374][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.742207][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.745718][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.774123][ T2590] wg1 speed is unknown, defaulting to 1000 [ 335.852070][ T2605] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 335.861063][ T2590] chnl_net:caif_netlink_parms(): no params data found [ 335.919302][ T2590] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.922443][ T2590] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.925222][ T2590] bridge_slave_0: entered allmulticast mode [ 335.928427][ T2590] bridge_slave_0: entered promiscuous mode [ 335.932031][ T2590] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.935181][ T2590] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.938103][ T2590] bridge_slave_1: entered allmulticast mode [ 335.941007][ T2590] bridge_slave_1: entered promiscuous mode [ 335.970841][ T2590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.977248][ T2590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.003207][ T2590] team0: Port device team_slave_0 added [ 336.006869][ T2590] team0: Port device team_slave_1 added [ 336.030926][ T2590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.033874][ T2590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.044513][ T2590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.051588][ T2590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.054077][ T2590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.063674][ T2590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.111365][ T2590] hsr_slave_0: entered promiscuous mode [ 336.113891][ T2590] hsr_slave_1: entered promiscuous mode [ 336.193693][ T2590] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.197094][ T2590] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 336.289528][ T2590] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.294922][ T2590] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 336.354513][ T2590] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.359280][ T2590] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 336.444011][ T2590] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.448187][ T2590] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 336.592850][ T2590] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 336.597367][ T2590] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 336.601869][ T2590] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 336.606142][ T2590] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 336.623811][ T2590] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.626825][ T2590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.629991][ T2590] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.632710][ T2590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.661387][ T2590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.671670][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.675882][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.686032][ T2590] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.692433][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.695369][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.702654][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.705371][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.802537][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 336.802549][ T40] audit: type=1326 audit(1770623747.597:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2629 comm="syz.2.13723" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 336.813502][ T40] audit: type=1326 audit(1770623747.597:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2629 comm="syz.2.13723" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 336.820336][ T40] audit: type=1326 audit(1770623747.597:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2629 comm="syz.2.13723" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 336.826967][ T40] audit: type=1326 audit(1770623747.597:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2629 comm="syz.2.13723" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 336.834192][ T40] audit: type=1326 audit(1770623747.597:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2629 comm="syz.2.13723" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 336.844684][ T2590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.845088][ T40] audit: type=1326 audit(1770623747.597:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2629 comm="syz.2.13723" exe="/syz-executor" sig=0 arch=40000003 syscall=439 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 336.860110][ T40] audit: type=1326 audit(1770623747.597:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2629 comm="syz.2.13723" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 336.862723][ T2638] binder: 2637:2638 ioctl c0306201 80000080 returned -22 [ 336.867942][ T40] audit: type=1326 audit(1770623747.597:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2629 comm="syz.2.13723" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 336.875159][ T2590] veth0_vlan: entered promiscuous mode [ 336.888903][ T2590] veth1_vlan: entered promiscuous mode [ 336.907064][ T2590] veth0_macvtap: entered promiscuous mode [ 336.913337][ T2590] veth1_macvtap: entered promiscuous mode [ 336.927931][ T2590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.937773][ T2590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.951583][ T1141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.957227][ T1141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.962713][ T1141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.967814][ T1141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.020889][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.026768][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.052908][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.056987][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.192329][ T2660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13736'. [ 337.195929][ T2660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13736'. [ 337.196084][ T2662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.199628][ T2660] netlink: 'syz.1.13736': attribute type 11 has an invalid length. [ 337.838426][ T64] Bluetooth: hci0: command tx timeout [ 338.107291][ T2740] [U] k43 [ 339.502266][ T2831] xt_socket: unknown flags 0xd0 [ 339.763175][ T2848] program syz.4.13805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.918398][ T64] Bluetooth: hci0: command tx timeout [ 340.218793][ T2902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13830'. [ 340.230884][ T2903] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13829'. [ 340.334832][ T2923] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 340.352598][ T2922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13837'. [ 340.592361][ T40] audit: type=1326 audit(1770623751.387:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2956 comm="syz.1.13850" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 340.603028][ T40] audit: type=1326 audit(1770623751.387:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2956 comm="syz.1.13850" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 340.930478][ T2991] mkiss: ax0: crc mode is auto. [ 340.937813][ T2995] bridge_slave_0: default FDB implementation only supports local addresses [ 341.237009][ T3047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13882'. [ 341.495173][ T3078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13897'. [ 341.518659][ T3078] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13897'. [ 341.612925][ T3085] binder: 3084:3085 ioctl 541b 0 returned -22 [ 341.791871][ T3109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13910'. [ 341.794773][ T3109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13910'. [ 341.800355][ T3109] netlink: 'syz.0.13910': attribute type 13 has an invalid length. [ 341.802913][ T3109] netlink: 'syz.0.13910': attribute type 11 has an invalid length. [ 341.973884][ T3130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13919'. [ 341.998307][ T5944] Bluetooth: hci0: command tx timeout [ 342.234759][ T3162] ptrace attach of "/syz-executor exec"[3165] was attempted by "/syz-executor exec"[3162] [ 342.287616][ T3171] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13940'. [ 342.511441][ T3187] binder: 3186:3187 ioctl 541b 0 returned -22 [ 342.689773][ T3206] netlink: 'syz.4.13955': attribute type 1 has an invalid length. [ 342.692741][ T3206] netlink: 'syz.4.13955': attribute type 1 has an invalid length. [ 342.696035][ T3206] netlink: 'syz.4.13955': attribute type 8 has an invalid length. [ 343.059448][ T3248] netlink: 'syz.4.13976': attribute type 1 has an invalid length. [ 343.062808][ T3248] netlink: 'syz.4.13976': attribute type 1 has an invalid length. [ 343.144895][ T3260] bridge_slave_0: left allmulticast mode [ 343.146895][ T3260] bridge_slave_0: left promiscuous mode [ 343.149251][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.156423][ T3260] bridge_slave_1: left allmulticast mode [ 343.158831][ T3260] bridge_slave_1: left promiscuous mode [ 343.160833][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.167042][ T3260] bond0: (slave bond_slave_0): Releasing backup interface [ 343.171071][ T3262] overlayfs: regular lower layers cannot follow data lower layers [ 343.185421][ T3260] bond0: (slave bond_slave_1): Releasing backup interface [ 343.198721][ T3260] team0: Port device team_slave_0 removed [ 343.204244][ T3260] team0: Port device team_slave_1 removed [ 343.207281][ T3260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.211606][ T3260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.216254][ T3260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.221778][ T3260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.226997][ T3260] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 343.281535][ T3270] netlink: 'syz.1.13988': attribute type 49 has an invalid length. [ 343.290995][ T3270] netlink: 'syz.1.13988': attribute type 49 has an invalid length. [ 343.408349][ T3280] IPVS: persistence engine module ip_vs_pe_sir not found [ 343.780788][ T3334] Bluetooth: MGMT ver 1.23 [ 344.078834][ T64] Bluetooth: hci0: command tx timeout [ 344.263415][ T3390] IPVS: Unknown mcast interface: pim6reg [ 344.304963][ T5944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.310686][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.314916][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.321952][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.325487][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.331214][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 344.331224][ T40] audit: type=1326 audit(1770623755.127:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3402 comm="syz.4.14050" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa6579 code=0x0 [ 344.363043][ T3397] wg1 speed is unknown, defaulting to 1000 [ 344.363646][ T3407] comedi comedi3: rti800: I/O port conflict (0x24,16) [ 344.468729][ T3397] chnl_net:caif_netlink_parms(): no params data found [ 344.511474][ T3397] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.513858][ T3397] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.516562][ T3397] bridge_slave_0: entered allmulticast mode [ 344.521272][ T3397] bridge_slave_0: entered promiscuous mode [ 344.524452][ T3397] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.526772][ T3397] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.529431][ T3397] bridge_slave_1: entered allmulticast mode [ 344.532131][ T3397] bridge_slave_1: entered promiscuous mode [ 344.547238][ T3397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.553142][ T3397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.567983][ T3397] team0: Port device team_slave_0 added [ 344.571587][ T3397] team0: Port device team_slave_1 added [ 344.586144][ T3397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.588559][ T3397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.596705][ T3397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.602551][ T3397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.604983][ T3397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.613601][ T3397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.638912][ T3397] hsr_slave_0: entered promiscuous mode [ 344.641170][ T3397] hsr_slave_1: entered promiscuous mode [ 344.643234][ T3397] debugfs: 'hsr0' already exists in 'hsr' [ 344.645160][ T3397] Cannot create hsr debugfs directory [ 344.739426][ T3397] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 344.743845][ T3397] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 344.748508][ T3397] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 344.754394][ T3397] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 344.777044][ T3397] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.779467][ T3397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.781829][ T3397] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.784916][ T3397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.800657][ T3442] netlink: 'syz.0.14062': attribute type 11 has an invalid length. [ 344.830329][ T3397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.843829][ T1204] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.847920][ T1204] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.859918][ T3397] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.869855][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.872131][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.878053][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.880388][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.902080][ T3397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.981064][ T40] audit: type=1326 audit(1770623755.777:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3455 comm="syz.0.14067" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa5579 code=0x0 [ 344.997057][ T3397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.148278][ T3397] veth0_vlan: entered promiscuous mode [ 345.156371][ T3397] veth1_vlan: entered promiscuous mode [ 345.169920][ T3397] veth0_macvtap: entered promiscuous mode [ 345.177518][ T3397] veth1_macvtap: entered promiscuous mode [ 345.186634][ T3397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.193262][ T3397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.200339][ T61] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.204496][ T1141] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.208041][ T1141] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.212275][ T1141] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.256007][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.261903][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.275315][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.278751][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.598266][ T1466] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 345.633746][ T3495] vlan3: entered promiscuous mode [ 345.635490][ T3495] bridge0: entered promiscuous mode [ 345.748339][ T1466] usb 10-1: Using ep0 maxpacket: 8 [ 345.751711][ T1466] usb 10-1: unable to get BOS descriptor or descriptor too short [ 345.755020][ T1466] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 345.759619][ T1466] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 345.762655][ T1466] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 345.766108][ T1466] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 345.769670][ T1466] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 345.773286][ T1466] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 345.777071][ T1466] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 345.783513][ T1466] usb 10-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 345.798363][ T1466] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.801553][ T1466] usb 10-1: Product: syz [ 345.803239][ T1466] usb 10-1: Manufacturer: syz [ 345.804848][ T1466] usb 10-1: SerialNumber: syz [ 345.808218][ T1466] usb 10-1: config 0 descriptor?? [ 345.811417][ T3471] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 345.814292][ T3471] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 345.819170][ T1466] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 345.887211][ T3517] __nla_validate_parse: 8 callbacks suppressed [ 345.887223][ T3517] netlink: 332 bytes leftover after parsing attributes in process `syz.0.14092'. [ 345.892414][ T3517] netlink: 160 bytes leftover after parsing attributes in process `syz.0.14092'. [ 346.001429][ T3531] program syz.2.14099 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.044379][ T6031] usb 10-1: USB disconnect, device number 2 [ 346.399304][ T5944] Bluetooth: hci1: command tx timeout [ 346.800514][ T3610] netlink: 1072 bytes leftover after parsing attributes in process `syz.2.14134'. [ 346.979564][ T6031] libceph: connect (1)[c::]:6789 error -101 [ 346.981805][ T6031] libceph: mon0 (1)[c::]:6789 connect error [ 346.987056][ T6031] libceph: connect (1)[c::]:6789 error -101 [ 346.989127][ T6031] libceph: mon0 (1)[c::]:6789 connect error [ 347.250389][ T6031] libceph: connect (1)[c::]:6789 error -101 [ 347.252404][ T6031] libceph: mon0 (1)[c::]:6789 connect error [ 347.759212][ T6031] libceph: connect (1)[c::]:6789 error -101 [ 347.762890][ T6031] libceph: mon0 (1)[c::]:6789 connect error [ 347.802710][ T3631] ceph: No mds server is up or the cluster is laggy [ 347.915805][ T3653] tipc: Started in network mode [ 347.917447][ T3653] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 347.920772][ T3653] tipc: Enabling of bearer rejected, failed to enable media [ 348.036365][ T40] audit: type=1326 audit(1770623758.827:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3665 comm="syz.0.14158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 348.044062][ T40] audit: type=1326 audit(1770623758.827:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3665 comm="syz.0.14158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 348.051469][ T40] audit: type=1326 audit(1770623758.827:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3665 comm="syz.0.14158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 348.062127][ T40] audit: type=1326 audit(1770623758.827:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3665 comm="syz.0.14158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 348.070913][ T40] audit: type=1326 audit(1770623758.837:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3665 comm="syz.0.14158" exe="/syz-executor" sig=0 arch=40000003 syscall=233 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 348.078915][ T40] audit: type=1326 audit(1770623758.837:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3665 comm="syz.0.14158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 348.085937][ T40] audit: type=1326 audit(1770623758.837:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3665 comm="syz.0.14158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 348.093088][ T40] audit: type=1326 audit(1770623758.837:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3665 comm="syz.0.14158" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fa5579 code=0x7ffc0000 [ 348.100404][ T3670] ================================================================== [ 348.103546][ T3670] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 348.106805][ T3670] Read of size 8 at addr ffff8880422d1618 by task syz.4.14161/3670 [ 348.111580][ T3670] [ 348.112930][ T3670] CPU: 2 UID: 0 PID: 3670 Comm: syz.4.14161 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.112960][ T3670] Tainted: [L]=SOFTLOCKUP [ 348.112967][ T3670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 348.112980][ T3670] Call Trace: [ 348.112988][ T3670] [ 348.112996][ T3670] dump_stack_lvl+0x100/0x190 [ 348.113021][ T3670] print_report+0x156/0x4c9 [ 348.113049][ T3670] ? __virt_addr_valid+0x81/0x620 [ 348.113077][ T3670] ? __phys_addr+0xe8/0x180 [ 348.113106][ T3670] ? dvb_device_open+0x33f/0x3b0 [ 348.113131][ T3670] kasan_report+0xdf/0x1a0 [ 348.113158][ T3670] ? dvb_device_open+0x33f/0x3b0 [ 348.113183][ T3670] ? __pfx_dvb_device_open+0x10/0x10 [ 348.113208][ T3670] dvb_device_open+0x33f/0x3b0 [ 348.113232][ T3670] ? __pfx_dvb_device_open+0x10/0x10 [ 348.113254][ T3670] chrdev_open+0x234/0x6a0 [ 348.113276][ T3670] ? __pfx_apparmor_file_open+0x10/0x10 [ 348.113300][ T3670] ? __pfx_chrdev_open+0x10/0x10 [ 348.113347][ T3670] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 348.113374][ T3670] do_dentry_open+0x73e/0x1570 [ 348.113396][ T3670] ? __pfx_chrdev_open+0x10/0x10 [ 348.113418][ T3670] ? security_inode_permission+0xbf/0x250 [ 348.113448][ T3670] vfs_open+0x82/0x3f0 [ 348.113475][ T3670] path_openat+0x21dc/0x3120 [ 348.113501][ T3670] ? __pfx_path_openat+0x10/0x10 [ 348.113527][ T3670] do_filp_open+0x1f7/0x420 [ 348.113550][ T3670] ? __pfx_do_filp_open+0x10/0x10 [ 348.113579][ T3670] ? _raw_spin_unlock+0x28/0x50 [ 348.113599][ T3670] ? alloc_fd+0x476/0x790 [ 348.113623][ T3670] do_sys_openat2+0x12e/0x220 [ 348.113655][ T3670] ? __pfx_do_sys_openat2+0x10/0x10 [ 348.113682][ T3670] ? lock_acquire+0x17c/0x330 [ 348.113709][ T3670] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 348.113739][ T3670] __ia32_compat_sys_openat+0x12d/0x210 [ 348.113757][ T3670] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 348.113790][ T3670] do_int80_emulation+0x101/0x470 [ 348.113814][ T3670] asm_int80_emulation+0x1a/0x20 [ 348.113832][ T3670] RIP: 0023:0xf71a572b [ 348.113846][ T3670] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 348.113863][ T3670] RSP: 002b:00000000f546603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 348.113881][ T3670] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5466100 [ 348.113894][ T3670] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 348.113904][ T3670] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 348.113915][ T3670] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 348.113925][ T3670] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 348.113943][ T3670] [ 348.113949][ T3670] [ 348.215543][ T3670] Allocated by task 1: [ 348.217181][ T3670] kasan_save_stack+0x30/0x50 [ 348.219061][ T3670] kasan_save_track+0x14/0x30 [ 348.221099][ T3670] __kasan_kmalloc+0xaa/0xb0 [ 348.223102][ T3670] dvb_register_device+0x1d6/0x1e60 [ 348.225326][ T3670] dvb_register_frontend+0x5a8/0x8a0 [ 348.227551][ T3670] vidtv_bridge_probe+0x44b/0xa30 [ 348.229738][ T3670] platform_probe+0x106/0x1d0 [ 348.231748][ T3670] really_probe+0x241/0xa60 [ 348.233698][ T3670] __driver_probe_device+0x1de/0x400 [ 348.235933][ T3670] driver_probe_device+0x4c/0x1b0 [ 348.238117][ T3670] __driver_attach+0x217/0x5c0 [ 348.240151][ T3670] bus_for_each_dev+0x13e/0x1d0 [ 348.242238][ T3670] bus_add_driver+0x305/0x5b0 [ 348.244228][ T3670] driver_register+0x1e2/0x360 [ 348.246296][ T3670] vidtv_bridge_init+0x38/0x70 [ 348.248287][ T3670] do_one_initcall+0x11d/0x690 [ 348.250440][ T3670] kernel_init_freeable+0x6e5/0x790 [ 348.252629][ T3670] kernel_init+0x1f/0x1e0 [ 348.254082][ T3670] ret_from_fork+0x754/0xaf0 [ 348.255555][ T3670] ret_from_fork_asm+0x1a/0x30 [ 348.257296][ T3670] [ 348.258094][ T3670] Freed by task 3596: [ 348.259568][ T3670] kasan_save_stack+0x30/0x50 [ 348.261496][ T3670] kasan_save_track+0x14/0x30 [ 348.263506][ T3670] kasan_save_free_info+0x3b/0x70 [ 348.265697][ T3670] __kasan_slab_free+0x5f/0x80 [ 348.267750][ T3670] kfree+0x1c7/0x690 [ 348.269423][ T3670] dvb_device_put.part.0+0x57/0x90 [ 348.271594][ T3670] dvb_device_open+0x2ba/0x3b0 [ 348.273633][ T3670] chrdev_open+0x234/0x6a0 [ 348.275528][ T3670] do_dentry_open+0x73e/0x1570 [ 348.277554][ T3670] vfs_open+0x82/0x3f0 [ 348.279323][ T3670] path_openat+0x21dc/0x3120 [ 348.281289][ T3670] do_filp_open+0x1f7/0x420 [ 348.283274][ T3670] do_sys_openat2+0x12e/0x220 [ 348.285018][ T3670] __ia32_compat_sys_openat+0x12d/0x210 [ 348.286768][ T3670] do_int80_emulation+0x101/0x470 [ 348.288364][ T3670] asm_int80_emulation+0x1a/0x20 [ 348.290293][ T3670] [ 348.291303][ T3670] The buggy address belongs to the object at ffff8880422d1600 [ 348.291303][ T3670] which belongs to the cache kmalloc-256 of size 256 [ 348.297115][ T3670] The buggy address is located 24 bytes inside of [ 348.297115][ T3670] freed 256-byte region [ffff8880422d1600, ffff8880422d1700) [ 348.301656][ T3670] [ 348.302427][ T3670] The buggy address belongs to the physical page: [ 348.304775][ T3670] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x422d0 [ 348.308147][ T3670] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 348.311541][ T3670] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 348.314580][ T3670] page_type: f5(slab) [ 348.316120][ T3670] raw: 04fff00000000040 ffff88801b842b40 dead000000000122 0000000000000000 [ 348.319435][ T3670] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 348.322857][ T3670] head: 04fff00000000040 ffff88801b842b40 dead000000000122 0000000000000000 [ 348.326242][ T3670] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 348.329105][ T3670] head: 04fff00000000001 ffffea000108b401 00000000ffffffff 00000000ffffffff [ 348.331923][ T3670] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 348.334606][ T3670] page dumped because: kasan: bad access detected [ 348.336610][ T3670] page_owner tracks the page as allocated [ 348.338395][ T3670] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 21576274566, free_ts 0 [ 348.344837][ T3670] post_alloc_hook+0x1e1/0x250 [ 348.346358][ T3670] get_page_from_freelist+0xe3d/0x2e10 [ 348.348065][ T3670] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 348.350190][ T3670] alloc_pages_mpol+0x1fb/0x550 [ 348.351722][ T3670] new_slab+0x2c4/0x440 [ 348.353078][ T3670] ___slab_alloc+0xda3/0x1ca0 [ 348.354575][ T3670] __slab_alloc.isra.0+0x63/0x110 [ 348.356159][ T3670] __kmalloc_cache_noprof+0x531/0x810 [ 348.357858][ T3670] bus_add_driver+0x92/0x5b0 [ 348.359448][ T3670] driver_register+0x1e2/0x360 [ 348.361130][ T3670] usb_register_driver+0x21c/0x3e0 [ 348.362769][ T3670] do_one_initcall+0x11d/0x690 [ 348.364494][ T3670] kernel_init_freeable+0x6e5/0x790 [ 348.366152][ T3670] kernel_init+0x1f/0x1e0 [ 348.367523][ T3670] ret_from_fork+0x754/0xaf0 [ 348.369013][ T3670] ret_from_fork_asm+0x1a/0x30 [ 348.370591][ T3670] page_owner free stack trace missing [ 348.372283][ T3670] [ 348.373058][ T3670] Memory state around the buggy address: [ 348.374828][ T3670] ffff8880422d1500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 348.377347][ T3670] ffff8880422d1580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 348.379892][ T3670] >ffff8880422d1600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 348.382389][ T3670] ^ [ 348.383946][ T3670] ffff8880422d1680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 348.386434][ T3670] ffff8880422d1700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 348.388962][ T3670] ================================================================== [ 348.393334][ T3670] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 348.395790][ T3670] CPU: 3 UID: 0 PID: 3670 Comm: syz.4.14161 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.399354][ T3670] Tainted: [L]=SOFTLOCKUP [ 348.400882][ T3670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 348.404894][ T3670] Call Trace: [ 348.406253][ T3670] [ 348.407442][ T3670] dump_stack_lvl+0x100/0x190 [ 348.409359][ T3670] vpanic+0x20d/0x630 [ 348.410961][ T3670] panic+0xd1/0xd1 [ 348.412473][ T3670] ? __pfx_panic+0x10/0x10 [ 348.414261][ T3670] ? dvb_device_open+0x33f/0x3b0 [ 348.416242][ T3670] ? preempt_schedule_common+0x42/0xc0 [ 348.418432][ T3670] check_panic_on_warn.cold+0x19/0x34 [ 348.420588][ T3670] end_report.part.0+0x3a/0x90 [ 348.422539][ T3670] kasan_report.cold+0xe/0x18 [ 348.424430][ T3670] ? dvb_device_open+0x33f/0x3b0 [ 348.426203][ T3670] ? __pfx_dvb_device_open+0x10/0x10 [ 348.428327][ T3670] dvb_device_open+0x33f/0x3b0 [ 348.430064][ T3670] ? __pfx_dvb_device_open+0x10/0x10 [ 348.431771][ T3670] chrdev_open+0x234/0x6a0 [ 348.433219][ T3670] ? __pfx_apparmor_file_open+0x10/0x10 [ 348.435324][ T3670] ? __pfx_chrdev_open+0x10/0x10 [ 348.437328][ T3670] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 348.439881][ T3670] do_dentry_open+0x73e/0x1570 [ 348.441685][ T3670] ? __pfx_chrdev_open+0x10/0x10 [ 348.443294][ T3670] ? security_inode_permission+0xbf/0x250 [ 348.445204][ T3670] vfs_open+0x82/0x3f0 [ 348.446580][ T3670] path_openat+0x21dc/0x3120 [ 348.448091][ T3670] ? __pfx_path_openat+0x10/0x10 [ 348.449958][ T3670] do_filp_open+0x1f7/0x420 [ 348.451683][ T3670] ? __pfx_do_filp_open+0x10/0x10 [ 348.453332][ T3670] ? _raw_spin_unlock+0x28/0x50 [ 348.455269][ T3670] ? alloc_fd+0x476/0x790 [ 348.457019][ T3670] do_sys_openat2+0x12e/0x220 [ 348.458944][ T3670] ? __pfx_do_sys_openat2+0x10/0x10 [ 348.460718][ T3670] ? lock_acquire+0x17c/0x330 [ 348.462263][ T3670] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 348.464226][ T3670] __ia32_compat_sys_openat+0x12d/0x210 [ 348.466437][ T3670] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 348.468750][ T3670] do_int80_emulation+0x101/0x470 [ 348.470542][ T3670] asm_int80_emulation+0x1a/0x20 [ 348.472142][ T3670] RIP: 0023:0xf71a572b [ 348.473489][ T3670] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 348.480038][ T3670] RSP: 002b:00000000f546603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 348.482715][ T3670] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5466100 [ 348.485264][ T3670] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 348.487855][ T3670] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 348.490665][ T3670] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 348.493196][ T3670] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 348.495784][ T3670] [ 348.497293][ T3670] Kernel Offset: disabled [ 348.498723][ T3670] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:55:57 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff916333fa RBX=ffffffff90d8ef9c RCX=dffffc0000000000 RDX=0000000000000000 RSI=000000000000000c RDI=ffffffff90d8ef90 RBP=ffffffff90d8efa0 RSP=ffffc900049ef308 R8 =ffffffff9163342a R9 =0000000000000007 R10=0000000000000200 R11=0000000000016ca3 R12=ffffffff90d8efac R13=ffffffff826ca385 R14=ffffffff90d8ef90 R15=ffffffff90d8ef9c RIP=ffffffff81b63846 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880973e2000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000080000044 CR3=000000005c96f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000004007 RBX=ffff8880281e2ff0 RCX=0000000000000000 RDX=00000000fffffffe RSI=00000000ffffffff RDI=00000000ffffffff RBP=ffff8880281e24c0 RSP=ffffc90003357150 R8 =00000000ffffffff R9 =0000000000000007 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000007 R14=0000000000020000 R15=0000000000000005 RIP=ffffffff81e26533 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974e2000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f5465ff4 CR3=000000005d85c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c8f7333d21b2b52 6c8f7333d21b2b52 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 65b4aca7195f7392 3dcdbefdb11ae452 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 63923b5472024588 24ebd5d1d2a5ed91 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fecae16a4e13ed6d 87dc394c83760e4e ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 32b756a5c06238f0 74ab704d4e9aee59 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9eeb1191a2439017 522195cfb27a6781 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a61dfa411321875b 8d708732c158d99a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d2a5ed9124ebd5d1 b11ae4523dcdbefd ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c0d0e0f08090a0b 0405060700010203 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2fc61a6d76681bea 588e76e1ce004ee0 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 79dac863c084d518 f004e47a14dd7a76 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff856744f0 RDI=ffffffff9b1f3260 RBP=ffffffff9b1f3220 RSP=ffffc9000424f290 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3430383838666666 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff363e69e R15=dffffc0000000000 RIP=ffffffff85674517 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975e2000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002fc22ff8 CR3=00000000589f8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001bc09b RBX=ffff88801dea0000 RCX=ffffffff8b7424b5 RDX=0000000000000000 RSI=ffffffff8dc41f2c RDI=ffffffff8bfa35a0 RBP=0000000000000003 RSP=ffffc9000048fdf0 R8 =0000000000000001 R9 =ffffed10056a673d R10=ffff88802b5339eb R11=0000000000000000 R12=ffffed1003bd4000 R13=0000000000000003 R14=ffffffff90b774d0 R15=0000000000000000 RIP=ffffffff8b740e1f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976e2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73286b4 CR3=000000005d85c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000