last executing test programs: 19.947193442s ago: executing program 0 (id=14043): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010002000000fcdbdf25310000000c000180080001"], 0x20}}, 0x4000000) 19.898714744s ago: executing program 0 (id=14046): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x5, 0x2, 0x1, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 19.852743951s ago: executing program 0 (id=14047): sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdf25040000004000078008000100a40f00000c00040001000000000000000c00030002080000000000000c000400000c000080000000080001007400000008000100050000002c000580140002800800020004000800080001000100000014000280080002001000000007000100"], 0x80}, 0x1, 0x0, 0x0, 0x4004000}, 0xcc00) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 19.765024528s ago: executing program 0 (id=14050): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 19.764624959s ago: executing program 0 (id=14051): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 19.530729857s ago: executing program 0 (id=14055): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x1a1d, &(0x7f0000000180)={0x0, 0x755e, 0x13080, 0x3, 0x2b8, 0x0, 0x0}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0xb1d7, 0x1, 0x0, 0x0) 19.516432475s ago: executing program 32 (id=14055): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x1a1d, &(0x7f0000000180)={0x0, 0x755e, 0x13080, 0x3, 0x2b8, 0x0, 0x0}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0xb1d7, 0x1, 0x0, 0x0) 866.032581ms ago: executing program 2 (id=14888): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x401, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000500)={'comedi_test\x00', [0xa, 0x7fe, 0x1, 0x0, 0x0, 0x80000000, 0x8, 0xb, 0xa, 0xfc, 0x4000004, 0x8, 0xa, 0x4, 0x3, 0x80, 0xdf9, 0x1a449, 0x5, 0x40000007, 0x100, 0x2, 0xf27, 0x6, 0xa, 0x0, 0x5, 0x7, 0x4, 0x10000, 0x8]}) 834.713057ms ago: executing program 2 (id=14891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 787.711224ms ago: executing program 2 (id=14894): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x4}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_vlan\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) 723.51881ms ago: executing program 2 (id=14899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x4) 683.036753ms ago: executing program 2 (id=14903): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0)=0x4, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="91b882b09a5b", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @rand_addr=0x64010100}, "08000071ae9b1c43"}}}}}, 0x0) 625.534978ms ago: executing program 2 (id=14906): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sessionid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$eventfd(r0, 0x0, 0x0) 439.573411ms ago: executing program 4 (id=14919): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0x5f456000) syz_clone(0x20000, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 382.284575ms ago: executing program 4 (id=14922): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0480, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x15) close(0x3) 268.601777ms ago: executing program 1 (id=14925): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x54, r0, 0x4b35c65e9956e69f, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x9b}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) 266.338342ms ago: executing program 3 (id=14926): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x9315, 0x1d080, 0x0, 0x37a}) 262.834131ms ago: executing program 4 (id=14933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x64}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) 206.525814ms ago: executing program 1 (id=14927): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) 205.237196ms ago: executing program 1 (id=14929): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x4004af07, &(0x7f00000036c0)={&(0x7f0000003680), 0x0, 0xc95, 0x0, 0xffff, 0x7, 0xd, 0x4, 0x4bf}) 148.290108ms ago: executing program 3 (id=14930): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x0, "08000000000000000000000000000000000000b582000000010000000100"}) pselect6(0x40, &(0x7f0000000000)={0x10, 0x4, 0x9, 0x3, 0x0, 0x5, 0x5, 0x8f}, 0x0, 0x0, 0x0, 0x0) 146.845599ms ago: executing program 3 (id=14931): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x35}, 0x28) 145.34362ms ago: executing program 4 (id=14939): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0)=0x1, 0x4) 144.355792ms ago: executing program 1 (id=14932): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x300100, 0x0) 100.488442ms ago: executing program 3 (id=14934): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x2067, 0x1, 0x4, 0x1, 0x7f, 0x81}) 49.54884ms ago: executing program 4 (id=14935): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 49.41875ms ago: executing program 3 (id=14936): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x6}, 0x76e0}) 48.92814ms ago: executing program 3 (id=14937): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r0, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x2) 46.722325ms ago: executing program 1 (id=14944): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001700090025bd7000fddbdf25060000000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 324.382µs ago: executing program 4 (id=14938): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x1}, 0x6}) 0s ago: executing program 1 (id=14940): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000004c0), 0x0, 0x413f) kernel console output (not intermixed with test programs): media_entity: media entity 'dvb-demux' registered. [ 197.638722][ T50] usb 8-1: selecting invalid altsetting 3 [ 197.640679][ T50] ttusb2: set interface to alts=3 failed [ 197.659883][ T50] DVB: Unable to find symbol tda10086_attach() [ 197.661927][ T50] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 197.665795][ T50] dvb-usb: bulk message failed: -22 (4/0) [ 197.667671][ T50] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 197.671462][ T50] dvb-usb: bulk message failed: -22 (5/0) [ 197.673390][ T50] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 197.676935][ T50] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 197.774217][T28115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10729'. [ 197.799762][T28063] dvb-usb: bulk message failed: -22 (7/0) [ 197.803089][T28063] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 197.813502][T28063] ttusb2: i2c transfer failed. [ 197.817387][ T50] usb 8-1: USB disconnect, device number 3 [ 197.874571][ T50] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 198.037113][ T40] audit: type=1326 audit(2000000072.189:24592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28133 comm="syz.1.10736" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fcc code=0x0 [ 198.128182][T28152] digital: digital_start_poll: Unknown protocol [ 198.271892][T28172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10757'. [ 198.274825][T28172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10757'. [ 198.318910][ T1354] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 198.428282][T28196] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.10769'. [ 198.431494][T28196] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.10769'. [ 198.468484][ T1354] usb 6-1: Using ep0 maxpacket: 16 [ 198.471433][ T1354] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 198.474069][ T1354] usb 6-1: config 0 has no interface number 0 [ 198.476026][ T1354] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 198.482459][ T1354] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 198.487810][ T1354] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 198.491348][ T1354] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 198.494065][ T1354] usb 6-1: Product: syz [ 198.494075][ T1354] usb 6-1: SerialNumber: syz [ 198.495429][ T1354] usb 6-1: config 0 descriptor?? [ 198.501512][ T1354] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 198.502452][ T1354] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input37 [ 198.631458][T28218] netlink: 'syz.0.10780': attribute type 12 has an invalid length. [ 198.719023][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 198.719392][ T24] usb 6-1: USB disconnect, device number 7 [ 198.721585][ C3] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 198.729652][ T24] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 199.244013][T28230] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 199.246489][T28230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.372252][T28242] vlan0: entered allmulticast mode [ 199.430121][T28253] vimc link validate: Scaler:src:4096x16 (0x33424752, 1, 0, 0, 4) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 199.820548][T28333] tipc: Started in network mode [ 199.822261][T28333] tipc: Node identity ac14142f, cluster identity 4711 [ 199.824934][T28333] tipc: New replicast peer: 0.0.0.0 [ 199.827412][T28333] tipc: Enabled bearer , priority 10 [ 200.750301][T28419] syz.1.10876 (28419) used greatest stack depth: 18968 bytes left [ 200.831113][T15945] tipc: Node number set to 2886997039 [ 200.891936][T28444] __nla_validate_parse: 7 callbacks suppressed [ 200.891949][T28444] netlink: 184 bytes leftover after parsing attributes in process `syz.1.10887'. [ 200.901562][ C3] sr 2:0:0:0: [sr0] tag#21 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 200.906753][ C3] sr 2:0:0:0: [sr0] tag#21 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 201.019645][T28466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10898'. [ 201.065911][T28474] netlink: 766 bytes leftover after parsing attributes in process `syz.1.10902'. [ 201.097948][T28476] netlink: 'syz.1.10903': attribute type 21 has an invalid length. [ 201.100723][T28476] IPv6: NLM_F_CREATE should be specified when creating new route [ 201.103326][T28476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.105722][T28476] IPv6: NLM_F_CREATE should be set when creating new route [ 201.108109][T28476] IPv6: NLM_F_CREATE should be set when creating new route [ 201.110485][T28476] IPv6: NLM_F_CREATE should be set when creating new route [ 201.114697][T28476] netlink: 'syz.1.10903': attribute type 21 has an invalid length. [ 201.117525][T28476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.165398][T28478] syz.2.10904: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 201.171159][T28478] CPU: 2 UID: 0 PID: 28478 Comm: syz.2.10904 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.171177][T28478] Tainted: [L]=SOFTLOCKUP [ 201.171180][T28478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.171187][T28478] Call Trace: [ 201.171190][T28478] [ 201.171195][T28478] dump_stack_lvl+0x100/0x190 [ 201.171211][T28478] warn_alloc.cold+0x95/0x1c1 [ 201.171223][T28478] ? __pfx_warn_alloc+0x10/0x10 [ 201.171239][T28478] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 201.171257][T28478] ? _mutex_trylock_nest_lock+0x170/0x310 [ 201.171277][T28478] __alloc_frozen_pages_noprof+0xf25/0x2bc0 [ 201.171303][T28478] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 201.171320][T28478] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 201.171333][T28478] ? lockdep_hardirqs_on+0x78/0x100 [ 201.171347][T28478] ? stack_depot_save_flags+0x479/0x9d0 [ 201.171362][T28478] ? comedi_isadma_alloc+0xc6/0x620 [ 201.171377][T28478] ? kasan_save_stack+0x3f/0x50 [ 201.171387][T28478] ? kasan_save_stack+0x30/0x50 [ 201.171395][T28478] ? kasan_save_track+0x14/0x30 [ 201.171405][T28478] ? __kasan_kmalloc+0xaa/0xb0 [ 201.171416][T28478] ? __do_fast_syscall_32+0xe7/0x950 [ 201.171430][T28478] ? do_fast_syscall_32+0x32/0x70 [ 201.171444][T28478] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.171460][T28478] __alloc_pages_noprof+0xb/0x110 [ 201.171477][T28478] __dma_direct_alloc_pages.isra.0+0x47c/0x8f0 [ 201.171496][T28478] ? __pfx___dma_direct_alloc_pages.isra.0+0x10/0x10 [ 201.171512][T28478] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 201.171530][T28478] dma_direct_alloc+0x8f/0x590 [ 201.171544][T28478] dma_alloc_attrs+0x185/0x2b0 [ 201.171555][T28478] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 201.171566][T28478] ? dma_direct_supported+0xca/0x220 [ 201.171583][T28478] comedi_isadma_alloc+0x331/0x620 [ 201.171599][T28478] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 201.171614][T28478] ? request_threaded_irq+0x27b/0x3e0 [ 201.171633][T28478] pcl818_attach+0xffa/0x17d0 [ 201.171649][T28478] comedi_device_attach+0x40e/0x6b0 [ 201.171664][T28478] do_devconfig_ioctl+0x1b3/0x6d0 [ 201.171677][T28478] ? comedi_unlocked_ioctl+0x180/0x3310 [ 201.171694][T28478] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 201.171714][T28478] ? tomoyo_path_number_perm+0x46d/0x580 [ 201.171726][T28478] ? kasan_save_stack+0x3f/0x50 [ 201.171735][T28478] ? kasan_save_stack+0x30/0x50 [ 201.171744][T28478] ? kasan_save_track+0x14/0x30 [ 201.171753][T28478] ? kasan_save_free_info+0x3b/0x70 [ 201.171770][T28478] comedi_unlocked_ioctl+0x860/0x3310 [ 201.171789][T28478] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 201.171815][T28478] ? kasan_quarantine_put+0x104/0x240 [ 201.171832][T28478] ? lockdep_hardirqs_on+0x78/0x100 [ 201.171846][T28478] ? find_held_lock+0x2b/0x80 [ 201.171859][T28478] ? tomoyo_path_number_perm+0x28f/0x580 [ 201.171869][T28478] ? tomoyo_path_number_perm+0x28f/0x580 [ 201.171882][T28478] ? tomoyo_path_number_perm+0x188/0x580 [ 201.171895][T28478] comedi_compat_ioctl+0x438/0xe20 [ 201.171912][T28478] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 201.171928][T28478] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 201.171944][T28478] ? do_vfs_ioctl+0x226/0x13e0 [ 201.171955][T28478] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 201.171969][T28478] ? find_held_lock+0x2b/0x80 [ 201.171982][T28478] ? __fget_files+0x215/0x3d0 [ 201.171993][T28478] ? hook_file_ioctl_common+0x149/0x410 [ 201.172007][T28478] ? __fget_files+0x21f/0x3d0 [ 201.172026][T28478] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 201.172042][T28478] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 201.172054][T28478] __do_fast_syscall_32+0xe7/0x950 [ 201.172071][T28478] do_fast_syscall_32+0x32/0x70 [ 201.172085][T28478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.172098][T28478] RIP: 0023:0xf7f33fcc [ 201.172107][T28478] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 201.172117][T28478] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 201.172127][T28478] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 201.172134][T28478] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.172140][T28478] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.172145][T28478] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 201.172162][T28478] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.172177][T28478] [ 201.172244][T28478] Mem-Info: [ 201.203713][T28485] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 201.209361][T28478] active_anon:3234 inactive_anon:3029 isolated_anon:0 [ 201.209361][T28478] active_file:3085 inactive_file:16188 isolated_file:0 [ 201.209361][T28478] unevictable:1768 dirty:401 writeback:0 [ 201.209361][T28478] slab_reclaimable:6391 slab_unreclaimable:62505 [ 201.209361][T28478] mapped:23923 shmem:2013 pagetables:1245 [ 201.209361][T28478] sec_pagetables:306 bounce:0 [ 201.209361][T28478] kernel_misc_reclaimable:0 [ 201.209361][T28478] free:65404 free_pcp:0 free_cma:0 [ 201.210613][T28485] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 201.211140][T28485] vhci_hcd vhci_hcd.0: Device attached [ 201.212491][T28478] Node 0 active_anon:76kB inactive_anon:8kB active_file:0kB inactive_file:392kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8868kB pagetables:1844kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 201.220838][T28485] vhci_hcd vhci_hcd.0: port 0 already used [ 201.222906][T28478] Node 0 [ 201.230245][T28486] vhci_hcd: connection closed [ 201.231601][T28478] DMA free:2696kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 201.231630][T28478] lowmem_reserve[]: 0 285 [ 201.233804][ T58] vhci_hcd vhci_hcd.1: stop threads [ 201.235308][T28478] 285 285 285 [ 201.235324][T28478] Node 0 DMA: 34*4kB [ 201.239143][ T58] vhci_hcd vhci_hcd.1: release socket [ 201.240505][T28478] (UM) [ 201.242265][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 201.244054][T28478] 17*8kB (UM) 12*16kB (UM) 12*32kB (UM) 1*64kB (M) 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2704kB [ 201.383507][T28478] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.386594][T28478] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 201.389767][T28478] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.392862][T28478] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 201.395855][T28478] 21677 total pagecache pages [ 201.397421][T28478] 390 pages in swap cache [ 201.398942][T28478] Free swap = 103856kB [ 201.400341][T28478] Total swap = 124996kB [ 201.401723][T28478] 524155 pages RAM [ 201.402943][T28478] 0 pages HighMem/MovableOnly [ 201.404454][T28478] 210105 pages reserved [ 201.405835][T28478] 0 pages cma reserved [ 201.563245][T28515] tipc: Started in network mode [ 201.565265][T28515] tipc: Node identity ac14142f, cluster identity 4711 [ 201.569472][T28515] tipc: New replicast peer: 0.0.0.0 [ 201.572327][T28515] tipc: Enabled bearer , priority 10 [ 201.788783][T28540] tipc: Started in network mode [ 201.791191][T28540] tipc: Node identity ac14142f, cluster identity 4711 [ 201.794274][T28540] tipc: Enabling of bearer rejected, failed to enable media [ 201.867321][T28548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10932'. [ 201.869421][T28547] nbd: must specify a device to reconfigure [ 201.872286][T28548] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 201.908467][ T1354] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 202.060111][ T1354] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.064374][ T1354] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 202.068058][ T1354] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 202.071293][ T1354] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.076510][ T1354] usb 5-1: config 0 descriptor?? [ 202.080445][ T1354] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 202.084508][ T1354] dvb-usb: bulk message failed: -22 (3/0) [ 202.089079][ T1354] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 202.092276][ T1354] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 202.095298][ T1354] usb 5-1: media controller created [ 202.097851][ T1354] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.105999][ T1354] dvb-usb: bulk message failed: -22 (6/0) [ 202.108622][ T1354] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 202.113827][ T1354] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input40 [ 202.118553][ T1354] dvb-usb: schedule remote query interval to 150 msecs. [ 202.120877][ T1354] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 202.280209][ T1354] dvb-usb: bulk message failed: -22 (1/0) [ 202.282258][ T1354] dvb-usb: error while querying for an remote control event. [ 202.288366][T15945] usb 5-1: USB disconnect, device number 8 [ 202.307406][T15945] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 202.568485][T15945] tipc: Node number set to 2886997039 [ 202.822410][T28588] vim2m vim2m.0: vidioc_s_fmt queue busy [ 202.859730][T28591] tmpfs: Cannot change global quota limit on remount [ 202.955170][T28604] ALSA: seq fatal error: cannot create timer (-22) [ 203.224578][ T24] kernel write not supported for file /dsp1 (pid: 24 comm: kworker/2:0) [ 203.367301][T28654] nbd: must specify an index to disconnect [ 203.588355][T28581] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 203.592417][T28673] xt_l2tp: missing protocol rule (udp|l2tpip) [ 203.793930][T28708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11012'. [ 203.798680][T28708] netlink: 120 bytes leftover after parsing attributes in process `syz.3.11012'. [ 203.801742][T28708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11012'. [ 204.068493][ T1354] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 204.108530][ T5849] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 204.219825][ T1354] usb 7-1: Using ep0 maxpacket: 8 [ 204.222943][ T1354] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 204.225692][ T1354] usb 7-1: config 0 has no interface number 0 [ 204.227745][ T1354] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 204.231334][ T1354] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 204.235108][ T1354] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 204.238835][ T1354] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 204.243069][ T1354] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 204.246050][ T1354] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.250095][ T1354] usb 7-1: config 0 descriptor?? [ 204.257681][ T1354] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 204.268952][ T5849] usb 8-1: Using ep0 maxpacket: 32 [ 204.272922][ T5849] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 204.278862][ T5849] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 204.282332][ T5849] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 204.285853][ T5849] usb 8-1: Product: syz [ 204.287433][ T5849] usb 8-1: Manufacturer: syz [ 204.289581][ T5849] usb 8-1: SerialNumber: syz [ 204.293424][ T5849] usb 8-1: config 0 descriptor?? [ 204.295922][T28732] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 204.300387][ T5849] hub 8-1:0.0: bad descriptor, ignoring hub [ 204.302590][ T5849] hub 8-1:0.0: probe with driver hub failed with error -5 [ 204.461527][ T1354] usb 7-1: USB disconnect, device number 5 [ 204.468106][ T1354] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 204.619068][ T5849] usb 8-1: USB disconnect, device number 4 [ 205.088137][T28757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11034'. [ 205.092719][T28757] netlink: 277 bytes leftover after parsing attributes in process `syz.0.11034'. [ 205.095962][T28757] netlink: 277 bytes leftover after parsing attributes in process `syz.0.11034'. [ 205.210112][T28782] binder: 28780:28782 ioctl 8004587d 0 returned -22 [ 206.707554][T28917] __nla_validate_parse: 1 callbacks suppressed [ 206.707567][T28917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11105'. [ 206.782556][T28929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11111'. [ 206.927201][T28955] fuseblk: block size(7680) > page size(4096) not supported by filesystem [ 206.952045][T28959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11125'. [ 206.955139][T28959] netlink: 11 bytes leftover after parsing attributes in process `syz.2.11125'. [ 206.984199][T28965] qrtr: Invalid version 255 [ 207.090793][T28981] netlink: 268 bytes leftover after parsing attributes in process `syz.0.11137'. [ 207.094082][T28981] netlink: 136 bytes leftover after parsing attributes in process `syz.0.11137'. [ 207.097348][T28981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11137'. [ 207.163653][T28995] No buffer was provided with the request [ 207.418533][ T5741] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 207.697832][T29013] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 208.627236][T29070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11178'. [ 208.828943][T29106] sg_read: process 5552 (syz.0.11195) changed security contexts after opening file descriptor, this is not allowed. [ 209.101297][T29150] netlink: 'syz.3.11216': attribute type 4 has an invalid length. [ 209.103857][T29150] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11216'. [ 209.635897][T29240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11259'. [ 209.676870][T29248] xt_l2tp: invalid flags combination: 0 [ 209.794923][T29267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.959008][T29285] netlink: 'syz.0.11281': attribute type 1 has an invalid length. [ 209.962221][T29285] netlink: 'syz.0.11281': attribute type 3 has an invalid length. [ 209.965298][T29285] NCSI netlink: No device for ifindex 813332851 [ 210.003607][T29289] Invalid source name [ 210.275881][T29316] netlink: 'syz.0.11296': attribute type 14 has an invalid length. [ 210.278898][T29316] netlink: 'syz.0.11296': attribute type 12 has an invalid length. [ 210.670443][T29347] netlink: 'syz.1.11317': attribute type 1 has an invalid length. [ 211.583362][ T40] audit: type=1326 audit(2000000086.745:24593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29398 comm="syz.1.11329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fcc code=0x7ffc0000 [ 211.603492][ T40] audit: type=1326 audit(2000000086.745:24594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29398 comm="syz.1.11329" exe="/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7ff6fcc code=0x7ffc0000 [ 211.615714][ T40] audit: type=1326 audit(2000000086.745:24595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29398 comm="syz.1.11329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fcc code=0x7ffc0000 [ 211.625768][ T40] audit: type=1326 audit(2000000086.745:24596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29398 comm="syz.1.11329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fcc code=0x7ffc0000 [ 211.635955][ T40] audit: type=1326 audit(2000000086.745:24597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29398 comm="syz.1.11329" exe="/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7ff6fcc code=0x7ffc0000 [ 211.653175][ T40] audit: type=1326 audit(2000000086.745:24598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29398 comm="syz.1.11329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fcc code=0x7ffc0000 [ 211.662685][ T40] audit: type=1326 audit(2000000086.745:24599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29398 comm="syz.1.11329" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fcc code=0x7ffc0000 [ 211.702025][T29410] nbd: must specify an index to disconnect [ 211.735072][T29414] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 211.737386][T29414] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 211.741045][T29414] vhci_hcd vhci_hcd.0: Device attached [ 211.749050][T29414] vhci_hcd vhci_hcd.0: port 0 already used [ 211.755823][T29416] vhci_hcd: connection closed [ 211.757872][ T1162] vhci_hcd vhci_hcd.3: stop threads [ 211.765557][ T1162] vhci_hcd vhci_hcd.3: release socket [ 211.767392][ T1162] vhci_hcd vhci_hcd.3: disconnect device [ 212.096962][T29447] __nla_validate_parse: 8 callbacks suppressed [ 212.096996][T29447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11353'. [ 212.105659][T29447] netlink: 120 bytes leftover after parsing attributes in process `syz.1.11353'. [ 212.109929][T29447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11353'. [ 212.280732][ T40] audit: type=1326 audit(2000000087.435:24600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29472 comm="syz.0.11368" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fcc code=0x7ffc0000 [ 212.302963][ T40] audit: type=1326 audit(2000000087.445:24601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29472 comm="syz.0.11368" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fcc code=0x7ffc0000 [ 212.312627][ T40] audit: type=1326 audit(2000000087.445:24602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29472 comm="syz.0.11368" exe="/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f72fcc code=0x7ffc0000 [ 212.392222][ T50] kernel write not supported for file /dsp1 (pid: 50 comm: kworker/1:1) [ 212.523699][T29509] lo speed is unknown, defaulting to 1000 [ 212.601767][T29509] wlan0 speed is unknown, defaulting to 1000 [ 212.637060][T29525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11392'. [ 212.641377][T29525] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 213.357381][T29542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11400'. [ 213.358125][T29540] vlan0: entered promiscuous mode [ 213.361317][T29542] netlink: 277 bytes leftover after parsing attributes in process `syz.1.11400'. [ 213.362230][T29540] bridge0: entered promiscuous mode [ 213.365232][T29542] netlink: 277 bytes leftover after parsing attributes in process `syz.1.11400'. [ 213.491745][T29556] binder: 29555:29556 ioctl 8004587d 0 returned -22 [ 213.673708][T29593] Bluetooth: MGMT ver 1.23 [ 214.194250][T29681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11463'. [ 215.239215][T29714] fuseblk: block size(7680) > page size(4096) not supported by filesystem [ 216.138569][T29676] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 216.217016][T29749] netlink: 766 bytes leftover after parsing attributes in process `syz.1.11496'. [ 216.468583][ T1354] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 216.498468][ T50] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 216.618459][ T1354] usb 8-1: Using ep0 maxpacket: 8 [ 216.621515][ T1354] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 216.624208][ T1354] usb 8-1: config 0 has no interface number 0 [ 216.626225][ T1354] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 216.630188][ T1354] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 216.634397][ T1354] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 216.638326][ T1354] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 216.642948][ T1354] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 216.646719][ T1354] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.651574][ T1354] usb 8-1: config 0 descriptor?? [ 216.659837][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 216.663131][ T1354] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 216.666201][ T50] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 216.673209][ T50] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 216.676309][ T50] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 216.680032][ T50] usb 5-1: Product: syz [ 216.681506][ T50] usb 5-1: Manufacturer: syz [ 216.683175][ T50] usb 5-1: SerialNumber: syz [ 216.685935][ T50] usb 5-1: config 0 descriptor?? [ 216.688223][T29757] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 216.692005][ T50] hub 5-1:0.0: bad descriptor, ignoring hub [ 216.694135][ T50] hub 5-1:0.0: probe with driver hub failed with error -5 [ 216.719829][T29780] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11511'. [ 216.869258][ T1354] usb 8-1: USB disconnect, device number 5 [ 216.874863][ T1354] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 217.009622][ T9] usb 5-1: USB disconnect, device number 9 [ 217.747244][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 217.747255][ T40] audit: type=1326 audit(2000000092.905:24609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29852 comm="syz.0.11545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fcc code=0x7ffc0000 [ 217.756633][ T40] audit: type=1326 audit(2000000092.905:24610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29852 comm="syz.0.11545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fcc code=0x7ffc0000 [ 217.766804][ T40] audit: type=1326 audit(2000000092.915:24611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29852 comm="syz.0.11545" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f72fcc code=0x7ffc0000 [ 217.766830][ T40] audit: type=1326 audit(2000000092.915:24612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29852 comm="syz.0.11545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fcc code=0x7ffc0000 [ 217.766851][ T40] audit: type=1326 audit(2000000092.915:24613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29852 comm="syz.0.11545" exe="/syz-executor" sig=0 arch=40000003 syscall=52 compat=1 ip=0xf7f72fcc code=0x7ffc0000 [ 217.766873][ T40] audit: type=1326 audit(2000000092.915:24614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29852 comm="syz.0.11545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fcc code=0x7ffc0000 [ 217.853384][ T40] audit: type=1326 audit(2000000093.005:24615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29874 comm="syz.2.11556" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x0 [ 218.130342][T29905] vivid-000: disconnect [ 218.132334][T29904] vivid-000: reconnect [ 218.942256][T29930] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 219.053228][T29944] lo speed is unknown, defaulting to 1000 [ 219.129421][T29944] wlan0 speed is unknown, defaulting to 1000 [ 219.665840][T29983] lo speed is unknown, defaulting to 1000 [ 219.682058][T29989] xt_l2tp: invalid flags combination: 0 [ 219.788231][T29983] wlan0 speed is unknown, defaulting to 1000 [ 219.863408][T30010] netlink: 'syz.0.11625': attribute type 4 has an invalid length. [ 219.868556][T30010] __nla_validate_parse: 1 callbacks suppressed [ 219.868566][T30010] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11625'. [ 219.960422][T30026] netlink: 236 bytes leftover after parsing attributes in process `syz.3.11624'. [ 219.994085][T30031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11634'. [ 220.109676][T30048] netlink: 'syz.2.11636': attribute type 1 has an invalid length. [ 220.112460][T30048] netlink: 'syz.2.11636': attribute type 3 has an invalid length. [ 220.115992][T30048] netlink: 172 bytes leftover after parsing attributes in process `syz.2.11636'. [ 220.120517][T30048] NCSI netlink: No device for ifindex 813332851 [ 220.228608][T30058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11640'. [ 220.597386][T30105] Invalid source name [ 221.507821][T30142] vivid-004: disconnect [ 221.510597][T30141] vivid-004: reconnect [ 221.679253][T30156] netlink: 216 bytes leftover after parsing attributes in process `syz.1.11686'. [ 221.683193][T30156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11686'. [ 221.686711][T30156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11686'. [ 221.970632][T30196] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 222.112493][T30227] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 222.223990][T30250] netlink: 216 bytes leftover after parsing attributes in process `syz.3.11732'. [ 222.227461][T30250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11732'. [ 222.376026][T30272] veth0_to_bond: default FDB implementation only supports local addresses [ 222.440259][T30280] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 223.076539][T30303] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 225.158506][ T1354] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 225.308445][ T1354] usb 6-1: Using ep0 maxpacket: 8 [ 225.311393][ T1354] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 225.313983][ T1354] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 225.317591][ T1354] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 225.321449][ T1354] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 225.325337][ T1354] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 225.329067][ T1354] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 225.332904][ T1354] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 225.337296][ T1354] usb 6-1: config 168 interface 0 has no altsetting 0 [ 225.340615][ T1354] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 225.343175][ T1354] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 225.346836][ T1354] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 225.350674][ T1354] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 225.354575][ T1354] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 225.358186][ T1354] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 225.361958][ T1354] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 225.366363][ T1354] usb 6-1: config 168 interface 0 has no altsetting 0 [ 225.369496][ T1354] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 225.372021][ T1354] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 225.375646][ T1354] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 225.379509][ T1354] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 225.383349][ T1354] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 225.386928][ T1354] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 225.390762][ T1354] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 225.395131][ T1354] usb 6-1: config 168 interface 0 has no altsetting 0 [ 225.400676][ T1354] usb 6-1: string descriptor 0 read error: -22 [ 225.402828][ T1354] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 225.405849][ T1354] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.414038][ T1354] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 225.618201][ T50] usb 6-1: USB disconnect, device number 8 [ 225.945650][T30461] __nla_validate_parse: 3 callbacks suppressed [ 225.945664][T30461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11831'. [ 226.068452][ T5741] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 226.198182][T30487] ptrace attach of "/syz-executor exec"[5746] was attempted by " [ 226.406586][T30519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11861'. [ 226.407000][T30519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11861'. [ 226.417817][T30522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11862'. [ 226.581079][T30547] netlink: 208 bytes leftover after parsing attributes in process `syz.1.11874'. [ 226.733290][T30562] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11881'. [ 227.769467][T30601] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 227.904980][T30619] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11905'. [ 228.171068][T30650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11921'. [ 228.175080][T30652] IPVS: ip_vs_add_dest(): server weight less than zero [ 228.281378][T30662] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.11926'. [ 228.713528][T30679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11940'. [ 229.099626][ T1354] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 229.248508][ T1354] usb 8-1: Using ep0 maxpacket: 8 [ 229.253326][ T1354] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 229.257321][ T1354] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 229.261239][ T1354] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 229.264906][ T1354] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.269022][ T1354] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 229.272627][ T1354] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 229.276248][ T1354] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 229.281148][ T1354] usb 8-1: config 168 interface 0 has no altsetting 0 [ 229.284349][ T1354] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 229.286777][ T1354] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 229.290789][ T1354] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 229.294495][ T1354] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.298329][ T1354] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 229.302142][ T1354] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 229.306106][ T1354] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 229.310478][ T1354] usb 8-1: config 168 interface 0 has no altsetting 0 [ 229.313587][ T1354] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 229.316062][ T1354] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 229.319630][ T1354] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 229.323225][ T1354] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.327093][ T1354] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 229.331259][ T1354] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 229.335158][ T1354] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 229.339659][ T1354] usb 8-1: config 168 interface 0 has no altsetting 0 [ 229.344197][ T1354] usb 8-1: string descriptor 0 read error: -22 [ 229.346199][ T1354] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 229.349296][ T1354] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.362046][ T1354] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 229.567475][ T5529] usb 8-1: USB disconnect, device number 6 [ 230.402868][T30816] netlink: 'syz.2.11997': attribute type 4 has an invalid length. [ 231.132922][T30844] __nla_validate_parse: 5 callbacks suppressed [ 231.132933][T30844] netlink: 35 bytes leftover after parsing attributes in process `syz.3.12007'. [ 231.281032][T30870] loop6: detected capacity change from 0 to 524287999 [ 231.284113][T30870] Buffer I/O error on dev loop6, logical block 0, async page read [ 231.287158][T30870] Buffer I/O error on dev loop6, logical block 0, async page read [ 231.291828][T30870] Buffer I/O error on dev loop6, logical block 0, async page read [ 231.294505][T30870] Buffer I/O error on dev loop6, logical block 0, async page read [ 231.297220][T30870] Buffer I/O error on dev loop6, logical block 0, async page read [ 231.299871][T30870] Buffer I/O error on dev loop6, logical block 0, async page read [ 231.300962][T30872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12024'. [ 231.302461][T30870] Buffer I/O error on dev loop6, logical block 0, async page read [ 231.306336][T30872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12024'. [ 231.307966][T30870] Buffer I/O error on dev loop6, logical block 0, async page read [ 231.313682][T30870] ldm_validate_partition_table(): Disk read failed. [ 231.315927][T30870] Buffer I/O error on dev loop6, logical block 0, async page read [ 231.319021][T30870] Buffer I/O error on dev loop6, logical block 0, async page read [ 231.321704][T30870] Dev loop6: unable to read RDB block 0 [ 231.323935][T30870] loop6: unable to read partition table [ 231.327652][T30870] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 231.355604][T30876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12026'. [ 231.358693][T30876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12026'. [ 231.427393][T30890] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12032'. [ 231.899789][ T1354] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 231.983995][T30970] loop6: detected capacity change from 0 to 524287999 [ 231.987245][T30970] ldm_validate_partition_table(): Disk read failed. [ 231.991668][T30970] Dev loop6: unable to read RDB block 0 [ 231.993945][T30970] loop6: unable to read partition table [ 231.995979][T30970] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 232.048991][ T1354] usb 5-1: Using ep0 maxpacket: 8 [ 232.051955][ T1354] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 232.054586][ T1354] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 232.058264][ T1354] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 232.062624][ T1354] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 232.071114][ T1354] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 232.075123][ T1354] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 232.079220][ T1354] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 232.081982][T30978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12069'. [ 232.083501][ T1354] usb 5-1: config 168 interface 0 has no altsetting 0 [ 232.086410][T30978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12069'. [ 232.090809][ T1354] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 232.094515][ T1354] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 232.098136][ T1354] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 232.102408][ T1354] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 232.106136][ T1354] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 232.110283][ T1354] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 232.114648][ T1354] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 232.119528][ T1354] usb 5-1: config 168 interface 0 has no altsetting 0 [ 232.122540][ T1354] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 232.125213][ T1354] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 232.129274][ T1354] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 232.132946][ T1354] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 232.136919][ T1354] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 232.141043][ T1354] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 232.144777][ T1354] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 232.149247][ T1354] usb 5-1: config 168 interface 0 has no altsetting 0 [ 232.153895][ T1354] usb 5-1: string descriptor 0 read error: -22 [ 232.155997][ T1354] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 232.159018][ T1354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.173123][ T1354] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 232.239087][T30990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12075'. [ 232.249406][T30990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12075'. [ 232.371196][ T5529] usb 5-1: USB disconnect, device number 10 [ 232.894629][T31017] netlink: 'syz.2.12095': attribute type 7 has an invalid length. [ 232.902314][T31017] netlink: 'syz.2.12095': attribute type 13 has an invalid length. [ 233.855652][T31055] syz.3.12108 (31055): drop_caches: 4 [ 233.869149][T31059] warn_alloc: 2 callbacks suppressed [ 233.869162][T31059] syz.2.12110: page allocation failure: order:10, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 233.877134][T31059] CPU: 1 UID: 0 PID: 31059 Comm: syz.2.12110 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.877160][T31059] Tainted: [L]=SOFTLOCKUP [ 233.877166][T31059] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.877174][T31059] Call Trace: [ 233.877180][T31059] [ 233.877188][T31059] dump_stack_lvl+0x100/0x190 [ 233.877213][T31059] warn_alloc.cold+0x95/0x1c1 [ 233.877232][T31059] ? __pfx_warn_alloc+0x10/0x10 [ 233.877265][T31059] ? __pfx___might_resched+0x10/0x10 [ 233.877297][T31059] __alloc_frozen_pages_noprof+0xf25/0x2bc0 [ 233.877337][T31059] ? __lock_acquire+0x4a5/0x2630 [ 233.877348][T31059] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 233.877378][T31059] ? find_held_lock+0x2b/0x80 [ 233.877405][T31059] ? find_held_lock+0x2b/0x80 [ 233.877424][T31059] ? aa_file_perm+0x7e4/0x14d0 [ 233.877437][T31059] ? aa_file_perm+0x7e4/0x14d0 [ 233.877452][T31059] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 233.877468][T31059] ? policy_nodemask+0xed/0x4f0 [ 233.877482][T31059] alloc_pages_mpol+0x1fb/0x540 [ 233.877495][T31059] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 233.877510][T31059] ? qrtr_tun_write_iter+0xc1/0x1b0 [ 233.877521][T31059] ___kmalloc_large_node+0xe5/0x120 [ 233.877538][T31059] __kmalloc_large_node_noprof+0x1c/0x70 [ 233.877552][T31059] __kmalloc_noprof+0x5be/0x850 [ 233.877571][T31059] qrtr_tun_write_iter+0xc1/0x1b0 [ 233.877583][T31059] aio_write+0x3ba/0x920 [ 233.877599][T31059] ? __pfx_aio_write+0x10/0x10 [ 233.877614][T31059] ? __lock_acquire+0x4a5/0x2630 [ 233.877633][T31059] ? __might_fault+0xc5/0x140 [ 233.877652][T31059] ? io_submit_one+0x1142/0x1fb0 [ 233.877666][T31059] io_submit_one+0x1142/0x1fb0 [ 233.877682][T31059] ? __lock_acquire+0x4a5/0x2630 [ 233.877694][T31059] ? __pfx_io_submit_one+0x10/0x10 [ 233.877713][T31059] ? __might_fault+0xc5/0x140 [ 233.877731][T31059] ? __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 233.877748][T31059] __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 233.877765][T31059] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 233.877781][T31059] ? xfd_validate_state+0x129/0x190 [ 233.877796][T31059] ? rcu_is_watching+0x12/0xc0 [ 233.877810][T31059] __do_fast_syscall_32+0xe7/0x950 [ 233.877827][T31059] do_fast_syscall_32+0x32/0x70 [ 233.877842][T31059] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 233.877856][T31059] RIP: 0023:0xf7f33fcc [ 233.877865][T31059] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 233.877875][T31059] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 00000000000000f8 [ 233.877886][T31059] RAX: ffffffffffffffda RBX: 00000000f7f2b000 RCX: 00000000000000e7 [ 233.877892][T31059] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 233.877898][T31059] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 233.877904][T31059] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 233.877910][T31059] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 233.877923][T31059] [ 233.877927][T31059] Mem-Info: [ 233.888258][T31061] overlayfs: conflicting options: nfs_export=on,index=off [ 233.889675][T31059] active_anon:1051 inactive_anon:3716 isolated_anon:0 [ 233.889675][T31059] active_file:1797 inactive_file:17238 isolated_file:0 [ 233.889675][T31059] unevictable:1768 dirty:326 writeback:0 [ 233.889675][T31059] slab_reclaimable:6477 slab_unreclaimable:67165 [ 233.889675][T31059] mapped:23934 shmem:1908 pagetables:1302 [ 233.889675][T31059] sec_pagetables:307 bounce:0 [ 233.889675][T31059] kernel_misc_reclaimable:0 [ 233.889675][T31059] free:63566 free_pcp:407 free_cma:0 [ 233.995504][T31059] Node 0 active_anon:116kB inactive_anon:8kB active_file:24kB inactive_file:220kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8856kB pagetables:1692kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 234.006208][T31059] Node 1 active_anon:4088kB inactive_anon:14856kB active_file:7164kB inactive_file:68732kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:95660kB dirty:1300kB writeback:0kB shmem:4096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5544kB pagetables:3416kB sec_pagetables:96kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 234.018787][T31059] Node 0 DMA free:2704kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 234.031150][T31059] lowmem_reserve[]: 0 285 285 285 285 [ 234.033521][T31059] Node 0 DMA32 free:28516kB boost:10240kB min:23332kB low:26604kB high:29876kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:8kB active_file:24kB inactive_file:220kB unevictable:3536kB writepending:4kB zspages:112kB present:1032196kB managed:292628kB mlocked:0kB bounce:0kB free_pcp:560kB local_pcp:0kB free_cma:0kB [ 234.046877][T31059] lowmem_reserve[]: 0 0 0 0 0 [ 234.048961][T31059] Node 1 DMA32 free:222612kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:3988kB inactive_anon:14856kB active_file:7164kB inactive_file:68732kB unevictable:3536kB writepending:1300kB zspages:4568kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:1744kB local_pcp:192kB free_cma:0kB [ 234.062477][T31059] lowmem_reserve[]: 0 0 0 0 0 [ 234.064467][T31059] Node 0 DMA: 34*4kB (UM) 17*8kB (UM) 12*16kB (UM) 12*32kB (UM) 1*64kB (M) 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2704kB [ 234.070769][T31059] Node 0 DMA32: 917*4kB (UME) 470*8kB (UE) 180*16kB (UM) 155*32kB (UME) 53*64kB (UME) 22*128kB (UME) 9*256kB (UM) 6*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 27876kB [ 234.071241][T31070] binder: 31069:31070 ioctl c018620c 80000240 returned -22 [ 234.077622][T31059] Node 1 DMA32: 3778*4kB (UME) 4959*8kB (UME) 4185*16kB (UME) 322*32kB (UME) 124*64kB (UME) 38*128kB (UME) 28*256kB (UME) 34*512kB (UM) 46*1024kB (UM) 3*2048kB (M) 0*4096kB = 222672kB [ 234.087653][T31059] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.092006][T31059] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 234.095578][T31059] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.099115][T31059] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 234.102381][T31059] 21526 total pagecache pages [ 234.103992][T31059] 562 pages in swap cache [ 234.105772][T31059] Free swap = 96508kB [ 234.107222][T31059] Total swap = 124996kB [ 234.109030][T31059] 524155 pages RAM [ 234.110369][T31059] 0 pages HighMem/MovableOnly [ 234.112039][T31059] 210105 pages reserved [ 234.113517][T31059] 0 pages cma reserved [ 234.169081][T31081] Bluetooth: MGMT ver 1.23 [ 234.328303][T31104] netlink: 'syz.1.12130': attribute type 11 has an invalid length. [ 234.409769][T31116] overlayfs: conflicting lowerdir path [ 234.465506][T31125] CUSE: unknown device info "xKJ H+ۤ2LhnL1`Ccn80(3նi" [ 234.470070][T31125] CUSE: unknown device info "ٮ,<_eF" [ 234.472246][T31125] CUSE: unknown device info "3ܟ,̘" [ 234.474222][T31125] CUSE: unknown device info "J2S Z !e/J+-na4\N4" [ 234.477141][T31125] CUSE: unknown device info " [ 234.477141][T31125] fzXS! [ 234.477141][T31125] AxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 234.483801][T31125] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TM_/V{" [ 234.487935][T31125] CUSE: unknown device info "whU~V߶ݸFsX,xkq/Q]3H" [ 234.491193][T31125] CUSE: zero length info key specified [ 234.680223][ T1354] kernel read not supported for file /vcs (pid: 1354 comm: kworker/3:2) [ 234.711129][T31157] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 234.757392][ T40] audit: type=1326 audit(2000000109.915:24616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31164 comm="syz.0.12163" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fcc code=0x7ffc0000 [ 234.764222][ T40] audit: type=1326 audit(2000000109.915:24617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31164 comm="syz.0.12163" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fcc code=0x7ffc0000 [ 234.764247][ T40] audit: type=1326 audit(2000000109.915:24618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31164 comm="syz.0.12163" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fcc code=0x7ffc0000 [ 234.764268][ T40] audit: type=1326 audit(2000000109.915:24620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31164 comm="syz.0.12163" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f72fcc code=0x7ffc0000 [ 234.764294][ T40] audit: type=1326 audit(2000000109.915:24621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31164 comm="syz.0.12163" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fcc code=0x7ffc0000 [ 234.764313][ T40] audit: type=1326 audit(2000000109.915:24622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31164 comm="syz.0.12163" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fcc code=0x7ffc0000 [ 234.764333][ T40] audit: type=1326 audit(2000000109.915:24619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31164 comm="syz.0.12163" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fcc code=0x7ffc0000 [ 234.764353][ T40] audit: type=1326 audit(2000000109.915:24623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31164 comm="syz.0.12163" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fcc code=0x7ffc0000 [ 234.764373][ T40] audit: type=1326 audit(2000000109.915:24624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31164 comm="syz.0.12163" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f72fcc code=0x7ffc0000 [ 234.764392][ T40] audit: type=1326 audit(2000000109.915:24625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31164 comm="syz.0.12163" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f72fcc code=0x7ffc0000 [ 234.940365][T31190] CUSE: unknown device info "xKJ H+ۤ2LhnL1`Ccn80(3նi" [ 234.946792][T31190] CUSE: unknown device info "ٮ,<_eF" [ 234.951655][T31190] CUSE: unknown device info "3ܟ,̘" [ 234.953654][T31190] CUSE: unknown device info "J2S Z !e/J+-na4\N4" [ 234.958848][T31190] CUSE: unknown device info " [ 234.958848][T31190] fzXS! [ 234.958848][T31190] AxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 234.964477][T31190] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TM_/V{" [ 234.968760][T31190] CUSE: unknown device info "whU~V߶ݸFsX,xkq/Q]3H" [ 234.972058][T31190] CUSE: zero length info key specified [ 235.588808][T31263] netlink: 'syz.2.12209': attribute type 11 has an invalid length. [ 236.510191][T31443] __nla_validate_parse: 11 callbacks suppressed [ 236.510204][T31443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12298'. [ 236.563628][T31455] netlink: 'syz.0.12304': attribute type 7 has an invalid length. [ 236.566229][T31455] netlink: 'syz.0.12304': attribute type 8 has an invalid length. [ 236.592342][T31460] netem: change failed [ 236.613403][T31462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12308'. [ 236.641304][T31468] netlink: 'syz.3.12309': attribute type 83 has an invalid length. [ 237.320502][T31505] netlink: 'syz.2.12328': attribute type 3 has an invalid length. [ 237.360489][T31514] [U] k [ 237.607120][T31539] [U] k [ 237.654110][T31549] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.12349' resets device [ 237.824983][T31576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12362'. [ 238.005098][T31599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12372'. [ 238.990794][T31717] netlink: 'syz.3.12429': attribute type 1 has an invalid length. [ 239.084948][T31733] 9pnet_virtio: no channels available for device syz [ 239.700448][T31808] netlink: 'syz.1.12472': attribute type 10 has an invalid length. [ 240.416491][T31839] netlink: 'syz.1.12487': attribute type 1 has an invalid length. [ 240.744104][T31873] random: crng reseeded on system resumption [ 241.624499][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 241.624511][ T40] audit: type=1326 audit(2000000118.784:24630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31920 comm="syz.2.12527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 241.636207][ T40] audit: type=1326 audit(2000000118.784:24631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31920 comm="syz.2.12527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 241.644242][ T40] audit: type=1326 audit(2000000118.784:24632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31920 comm="syz.2.12527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 241.651066][ T40] audit: type=1326 audit(2000000118.784:24633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31920 comm="syz.2.12527" exe="/syz-executor" sig=0 arch=40000003 syscall=270 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 241.658057][ T40] audit: type=1326 audit(2000000118.784:24634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31920 comm="syz.2.12527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 241.667727][ T40] audit: type=1326 audit(2000000118.784:24635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31920 comm="syz.2.12527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 241.674664][ T40] audit: type=1326 audit(2000000118.784:24636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31920 comm="syz.2.12527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 241.685244][ T40] audit: type=1326 audit(2000000118.784:24637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31920 comm="syz.2.12527" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 241.692068][ T40] audit: type=1326 audit(2000000118.784:24638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31920 comm="syz.2.12527" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 241.770581][T31936] vlan1: entered allmulticast mode [ 241.772325][T31936] team0: entered allmulticast mode [ 241.774086][T31936] team_slave_0: entered allmulticast mode [ 241.775827][T31936] team_slave_1: entered allmulticast mode [ 242.169560][T31973] tipc: Enabled bearer , priority 5 [ 242.246674][T31983] netlink: 268 bytes leftover after parsing attributes in process `syz.0.12551'. [ 242.249841][T31983] netlink: 136 bytes leftover after parsing attributes in process `syz.0.12551'. [ 242.607832][T32038] IPVS: Scheduler module ip_vs_sip not found [ 242.680332][T32052] tipc: Enabled bearer , priority 5 [ 242.694888][T32058] netlink: 256 bytes leftover after parsing attributes in process `syz.0.12588'. [ 242.970094][T32099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12608'. [ 242.973005][T32099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12608'. [ 242.975902][T32099] netlink: 'syz.0.12608': attribute type 14 has an invalid length. [ 243.064604][T32116] ALSA: mixer_oss: invalid OSS volume '' [ 243.183382][T32130] IPVS: Scheduler module ip_vs_sip not found [ 243.245649][T32147] sg_write: data in/out 12582877/14 bytes for SCSI command 0x0-- guessing data in; [ 243.245649][T32147] program syz.1.12630 not setting count and/or reply_len properly [ 243.292458][T32158] netlink: 256 bytes leftover after parsing attributes in process `syz.2.12635'. [ 243.405534][T32176] ALSA: mixer_oss: invalid OSS volume '' [ 243.902267][ T40] audit: type=1326 audit(2000000121.064:24639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32221 comm="syz.1.12665" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff6fcc code=0x0 [ 244.029233][ T34] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 244.178540][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 244.182606][ T34] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 244.186509][ T34] usb 8-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 244.191261][ T34] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 244.195675][ T34] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 244.200293][ T34] usb 8-1: config 0 interface 0 has no altsetting 0 [ 244.205037][ T34] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 244.208815][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.212300][ T34] usb 8-1: Product: syz [ 244.214031][ T34] usb 8-1: Manufacturer: syz [ 244.215979][ T34] usb 8-1: SerialNumber: syz [ 244.222198][ T34] usb 8-1: config 0 descriptor?? [ 244.226697][T32214] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 244.435089][T32214] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 244.443325][ T34] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input43 [ 244.610675][T32238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12672'. [ 244.613755][T32238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12672'. [ 244.621489][T32238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12672'. [ 244.624459][T32238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12672'. [ 244.714514][ T34] usb 8-1: USB disconnect, device number 7 [ 244.876194][ T5749] udevd[5749]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 245.163195][T32306] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 245.353595][ T50] kernel write not supported for file /uhid (pid: 50 comm: kworker/1:1) [ 246.575062][T32530] bond0: (slave bridge0): Releasing backup interface [ 246.585023][T32530] bridge0: left promiscuous mode [ 246.586783][T32530] bridge0: left allmulticast mode [ 246.593876][T32530] bridge_slave_0: left allmulticast mode [ 246.595769][T32530] bridge_slave_0: left promiscuous mode [ 246.597719][T32530] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.602908][T32530] bridge_slave_1: left allmulticast mode [ 246.605042][T32530] bridge_slave_1: left promiscuous mode [ 246.607069][T32530] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.613161][T32530] bond0: (slave bond_slave_0): Releasing backup interface [ 246.616081][T32530] bond_slave_0: left promiscuous mode [ 246.617968][T32530] bond_slave_0: left allmulticast mode [ 246.621393][T32530] team0: Port device team_slave_0 removed [ 246.625513][T32530] team0: Port device team_slave_1 removed [ 246.630925][T32530] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 247.545323][T32657] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 247.596632][T32669] __nla_validate_parse: 6 callbacks suppressed [ 247.596643][T32669] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12874'. [ 247.703396][T32687] tipc: Enabling of bearer rejected, failed to enable media [ 248.076178][ T40] audit: type=1326 audit(2000000125.234:24640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32744 comm="syz.2.12914" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 248.083470][ T40] audit: type=1326 audit(2000000125.234:24641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32744 comm="syz.2.12914" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 248.090747][ T40] audit: type=1326 audit(2000000125.234:24642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32744 comm="syz.2.12914" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 248.098192][ T40] audit: type=1326 audit(2000000125.234:24643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32744 comm="syz.2.12914" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 248.105460][ T40] audit: type=1326 audit(2000000125.234:24644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32744 comm="syz.2.12914" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 248.113110][ T40] audit: type=1326 audit(2000000125.244:24645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32744 comm="syz.2.12914" exe="/syz-executor" sig=0 arch=40000003 syscall=326 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 248.115792][T32747] comedi comedi1: adq12b: I/O base address or length out of range [ 248.121322][ T40] audit: type=1326 audit(2000000125.244:24646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32744 comm="syz.2.12914" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 248.128456][T15945] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 248.131716][ T40] audit: type=1326 audit(2000000125.244:24647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32744 comm="syz.2.12914" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 248.308465][T15945] usb 8-1: Using ep0 maxpacket: 32 [ 248.315080][T15945] usb 8-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 248.328418][T15945] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.331477][T15945] usb 8-1: Product: syz [ 248.332916][T15945] usb 8-1: Manufacturer: syz [ 248.334857][T15945] usb 8-1: SerialNumber: syz [ 248.340438][T15945] usb 8-1: config 0 descriptor?? [ 248.345967][T32753] .`: (slave 30): Releasing backup interface [ 248.348278][T15945] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 248.358449][T15945] dvb-usb: bulk message failed: -22 (4/0) [ 248.360586][T15945] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 248.364357][T15945] dvb-usb: bulk message failed: -22 (5/0) [ 248.366375][T15945] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 248.379680][T15945] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 248.385281][T15945] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 248.398442][T15945] usb 8-1: media controller created [ 248.406067][T15945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 248.415329][T32753] .`: (slave bond_slave_1): Releasing backup interface [ 248.429494][T15945] usb 8-1: selecting invalid altsetting 3 [ 248.431614][T15945] ttusb2: set interface to alts=3 failed [ 248.436455][T32753] team_slave_0: left allmulticast mode [ 248.449409][T15945] DVB: Unable to find symbol tda10086_attach() [ 248.450002][T32753] team0: Port device team_slave_0 removed [ 248.453161][T15945] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 248.454280][T32753] team_slave_1: left allmulticast mode [ 248.459312][T15945] dvb-usb: bulk message failed: -22 (4/0) [ 248.461248][T15945] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 248.478464][T15945] dvb-usb: bulk message failed: -22 (5/0) [ 248.480387][T15945] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 248.483836][T15945] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 248.489006][T32753] team0: Port device team_slave_1 removed [ 248.491175][T32753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.496528][T32753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.549012][T32721] ttusb2: i2c rd len=58 too high [ 248.551394][ T5849] usb 8-1: USB disconnect, device number 8 [ 248.567210][ T5849] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 248.774018][T32753] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 248.894190][ T301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12919'. [ 249.094787][ T327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12939'. [ 249.149967][ T335] tipc: Enabling of bearer rejected, already enabled [ 249.320968][ T372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12960'. [ 249.360608][ T380] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12964'. [ 249.375314][ T40] audit: type=1326 audit(2000000126.534:24648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=382 comm="syz.1.12965" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fcc code=0x7ffc0000 [ 249.384553][ T40] audit: type=1326 audit(2000000126.534:24649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=382 comm="syz.1.12965" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6fcc code=0x7ffc0000 [ 249.453486][ T399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12974'. [ 249.456487][ T399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12974'. [ 249.498328][ T408] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12977'. [ 249.502313][ T409] tipc: Enabling of bearer rejected, failed to enable media [ 249.532146][ T414] comedi comedi1: adq12b: I/O base address or length out of range [ 249.594311][ T428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12987'. [ 249.701589][ T447] netlink: 'syz.2.12997': attribute type 14 has an invalid length. [ 250.003368][ T499] netlink: 'syz.1.13021': attribute type 2 has an invalid length. [ 250.005950][ T499] netlink: 'syz.1.13021': attribute type 1 has an invalid length. [ 250.008652][ T499] netlink: 'syz.1.13021': attribute type 1 has an invalid length. [ 250.058124][ T509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13028'. [ 250.257870][ T543] program syz.3.13039 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.628199][ T593] syz_tun: refused to change device tx_queue_len [ 250.630524][ T593] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 250.743025][ T607] program syz.2.13067 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.842162][ T623] syz_tun: refused to change device tx_queue_len [ 250.844313][ T623] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 250.900922][ T635] program syz.1.13083 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.058857][T15945] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 251.208470][T15945] usb 5-1: Using ep0 maxpacket: 16 [ 251.211809][T15945] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 251.215010][T15945] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.218823][T15945] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 251.222484][T15945] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 251.226112][T15945] usb 5-1: config 0 interface 0 has no altsetting 0 [ 251.232180][T15945] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 251.235421][T15945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.238090][T15945] usb 5-1: Product: syz [ 251.241553][T15945] usb 5-1: Manufacturer: syz [ 251.243150][T15945] usb 5-1: SerialNumber: syz [ 251.249472][T15945] usb 5-1: config 0 descriptor?? [ 251.254033][ T619] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 251.374833][ T711] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 251.377488][ T711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.468740][ T619] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 251.475727][T15945] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input44 [ 252.308694][ T34] usb 5-1: USB disconnect, device number 11 [ 253.308592][ T5849] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 253.458578][ T5849] usb 7-1: Using ep0 maxpacket: 16 [ 253.461547][ T5849] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 253.464724][ T5849] usb 7-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 253.468480][ T5849] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 253.471968][ T5849] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 253.475538][ T5849] usb 7-1: config 0 interface 0 has no altsetting 0 [ 253.479233][ T5849] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 253.482359][ T5849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.484972][ T5849] usb 7-1: Product: syz [ 253.486350][ T5849] usb 7-1: Manufacturer: syz [ 253.487876][ T5849] usb 7-1: SerialNumber: syz [ 253.491421][ T5849] usb 7-1: config 0 descriptor?? [ 253.493706][ T803] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 253.703831][ T803] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 253.709692][ T5849] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input45 [ 253.974203][T15945] usb 7-1: USB disconnect, device number 6 [ 254.555014][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 254.555026][ T40] audit: type=1326 audit(2000000131.714:24656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=870 comm="syz.3.13194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fcc code=0x7ffc0000 [ 254.568611][ T40] audit: type=1326 audit(2000000131.714:24657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=870 comm="syz.3.13194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fcc code=0x7ffc0000 [ 254.575812][ T40] audit: type=1326 audit(2000000131.714:24658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=870 comm="syz.3.13194" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f84fcc code=0x7ffc0000 [ 254.583037][ T40] audit: type=1326 audit(2000000131.724:24659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=870 comm="syz.3.13194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fcc code=0x7ffc0000 [ 254.590346][ T40] audit: type=1326 audit(2000000131.724:24660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=870 comm="syz.3.13194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fcc code=0x7ffc0000 [ 254.597455][ T40] audit: type=1326 audit(2000000131.724:24661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=872 comm="syz.3.13194" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf718616b code=0x7ffc0000 [ 254.604709][ T40] audit: type=1326 audit(2000000131.724:24662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=870 comm="syz.3.13194" exe="/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf7f84fcc code=0x7ffc0000 [ 254.710711][ T40] audit: type=1326 audit(2000000131.874:24663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=872 comm="syz.3.13194" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7f84fcc code=0x7ffc0000 [ 254.718334][ T40] audit: type=1326 audit(2000000131.874:24664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=870 comm="syz.3.13194" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f84fe8 code=0x7ffc0000 [ 254.725814][ T40] audit: type=1326 audit(2000000131.874:24665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=870 comm="syz.3.13194" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fcc code=0x7ffc0000 [ 254.785281][ T889] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 254.950883][ T901] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 255.078516][ T5849] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 255.178510][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.232518][ T921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.238575][ T5849] usb 7-1: Using ep0 maxpacket: 32 [ 255.247001][ T5849] usb 7-1: unable to get BOS descriptor or descriptor too short [ 255.250802][ T5849] usb 7-1: config 8 has an invalid interface number: 188 but max is 0 [ 255.253827][ T5849] usb 7-1: config 8 has no interface number 0 [ 255.255936][ T5849] usb 7-1: config 8 interface 188 has no altsetting 0 [ 255.258234][ T923] __nla_validate_parse: 5 callbacks suppressed [ 255.258243][ T923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13221'. [ 255.266805][ T5849] usb 7-1: string descriptor 0 read error: -22 [ 255.271653][ T5849] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 255.278603][ T5849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.294359][ T5849] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 255.297146][ T5849] dw2102: su3000_power_ctrl: 1, initialized 0 [ 255.299548][ T5849] dvb-usb: bulk message failed: -22 (2/0) [ 255.305538][ T5849] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 255.309766][ T5849] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 255.312703][ T5849] usb 7-1: media controller created [ 255.314542][ T5849] dvb-usb: bulk message failed: -22 (6/0) [ 255.316638][ T5849] dw2102: i2c transfer failed. [ 255.318340][ T5849] dvb-usb: bulk message failed: -22 (6/0) [ 255.321411][ T5849] dw2102: i2c transfer failed. [ 255.323860][ T5849] dvb-usb: bulk message failed: -22 (6/0) [ 255.325777][ T5849] dw2102: i2c transfer failed. [ 255.327302][ T5849] dvb-usb: bulk message failed: -22 (6/0) [ 255.329663][ T5849] dw2102: i2c transfer failed. [ 255.331289][ T5849] dvb-usb: bulk message failed: -22 (6/0) [ 255.334123][ T5849] dw2102: i2c transfer failed. [ 255.335753][ T5849] dvb-usb: bulk message failed: -22 (6/0) [ 255.337703][ T5849] dw2102: i2c transfer failed. [ 255.340125][ T5849] dvb-usb: MAC address: 02:02:02:02:02:02 [ 255.347915][ T5849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 255.360129][ T5849] dvb-usb: bulk message failed: -22 (3/0) [ 255.362106][ T5849] dw2102: command 0x0e transfer failed. [ 255.364134][ T5849] dvb-usb: bulk message failed: -22 (3/0) [ 255.366027][ T5849] dw2102: command 0x0e transfer failed. [ 255.528692][ T34] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 255.671948][ T5849] dvb-usb: bulk message failed: -22 (3/0) [ 255.674419][ T5849] dw2102: command 0x0e transfer failed. [ 255.676715][ T5849] dvb-usb: bulk message failed: -22 (3/0) [ 255.680073][ T34] usb 8-1: config 1 interface 0 has no altsetting 0 [ 255.681895][ T5849] dw2102: command 0x0e transfer failed. [ 255.684109][ T34] usb 8-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 255.684650][ T5849] dvb-usb: bulk message failed: -22 (1/0) [ 255.688177][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.690166][ T5849] dw2102: command 0x51 transfer failed. [ 255.693193][ T34] usb 8-1: Product: syz [ 255.695717][ T893] dvb-usb: bulk message failed: -22 (7/0) [ 255.696669][ T34] usb 8-1: Manufacturer: syz [ 255.701501][ T34] usb 8-1: SerialNumber: syz [ 255.702306][ T893] dw2102: i2c transfer failed. [ 255.717825][ T5849] DVB: Unable to find symbol ds3000_attach() [ 255.720446][ T5849] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 255.768459][ T5849] rc_core: IR keymap rc-su3000 not found [ 255.770372][ T5849] Registered IR keymap rc-empty [ 255.772913][ T5849] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 255.777234][ T5849] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input46 [ 255.782505][ T5849] dvb-usb: schedule remote query interval to 150 msecs. [ 255.784909][ T5849] dw2102: su3000_power_ctrl: 0, initialized 1 [ 255.787014][ T5849] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 255.793626][ T5849] usb 7-1: USB disconnect, device number 7 [ 255.816895][ T5849] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 255.919595][ T34] usbhid 8-1:1.0: can't add hid device: -71 [ 255.922126][ T34] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 255.926557][ T34] usb 8-1: USB disconnect, device number 9 [ 256.176700][ T951] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13234'. [ 256.243506][ T960] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13244'. [ 257.375206][ T1354] kernel read not supported for file 6783/task/6784/cmdline (pid: 1354 comm: kworker/3:2) [ 257.468708][ T34] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 257.618644][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 257.624574][ T34] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 257.638546][ T34] usb 6-1: config 0 has no interface number 0 [ 257.643052][ T34] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 257.646747][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.658576][ T34] usb 6-1: Product: syz [ 257.660293][ T34] usb 6-1: Manufacturer: syz [ 257.662299][ T34] usb 6-1: SerialNumber: syz [ 257.665482][ T34] usb 6-1: config 0 descriptor?? [ 257.671390][ T34] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 257.688548][ T34] usb 6-1: selecting invalid altsetting 1 [ 257.690924][ T34] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 257.699622][ T34] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 257.718673][ T34] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 257.722086][ T34] usb 6-1: media controller created [ 257.737507][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.894427][ T1024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13259'. [ 258.319384][ T1035] pimreg3: entered allmulticast mode [ 258.751015][ T1090] pimreg3: entered allmulticast mode [ 258.860352][ T34] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 258.864321][ T34] zl10353_read_register: readreg error (reg=127, ret==-110) [ 258.893777][ T1111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13295'. [ 258.894261][ T990] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 258.913122][ T34] usb 6-1: USB disconnect, device number 9 [ 259.047819][ T1144] program syz.2.13306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.074811][ T1148] netlink: 180 bytes leftover after parsing attributes in process `syz.2.13307'. [ 259.428094][ T1156] Bluetooth: MGMT ver 1.23 [ 259.792373][ T1210] CUSE: DEVNAME unspecified [ 260.040366][ T1230] nbd: must specify a size in bytes for the device [ 260.076285][ T1234] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 260.163615][ T1243] binder: 1241:1243 ioctl c0306201 0 returned -14 [ 260.262875][ T1250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13347'. [ 260.492950][ T1280] binder: 1278:1280 ioctl c0306201 0 returned -14 [ 260.589152][ T1297] netlink: 292 bytes leftover after parsing attributes in process `syz.2.13374'. [ 260.705664][ T1314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13382'. [ 260.735924][ T1320] netlink: 292 bytes leftover after parsing attributes in process `syz.3.13384'. [ 260.977574][ T1348] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 261.205727][ T1367] nbd: must specify a size in bytes for the device [ 262.022470][ T1435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13438'. [ 262.211184][ T1475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13457'. [ 262.374677][ T1495] netlink: 348 bytes leftover after parsing attributes in process `syz.1.13465'. [ 262.888448][ T5849] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 263.048584][ T5849] usb 7-1: Using ep0 maxpacket: 32 [ 263.051763][ T5849] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 263.054554][ T5849] usb 7-1: config 0 has no interface number 0 [ 263.058167][ T5849] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 263.061438][ T5849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.064266][ T5849] usb 7-1: Product: syz [ 263.065730][ T5849] usb 7-1: Manufacturer: syz [ 263.067327][ T5849] usb 7-1: SerialNumber: syz [ 263.074300][ T5849] usb 7-1: config 0 descriptor?? [ 263.078826][ T5849] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 263.081875][ T5849] usb 7-1: selecting invalid altsetting 1 [ 263.083833][ T5849] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 263.089573][ T5849] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 263.093232][ T5849] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 263.096142][ T5849] usb 7-1: media controller created [ 263.102885][ T5849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 263.786936][ T1551] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 263.865437][ T1558] use of bytesused == 0 is deprecated and will be removed in the future, [ 263.868230][ T1558] use the actual size instead. [ 264.010598][ T1579] netlink: 'syz.3.13506': attribute type 1 has an invalid length. [ 264.072526][ T1586] netlink: 'syz.3.13509': attribute type 1 has an invalid length. [ 264.101274][ T1588] EXT4-fs: Conflicting test_dummy_encryption options [ 264.130683][ T1590] netlink: 'syz.3.13511': attribute type 58 has an invalid length. [ 264.133547][ T1590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13511'. [ 264.139113][ T5849] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 264.143019][ T5849] zl10353_read_register: readreg error (reg=127, ret==-110) [ 264.168730][ T1510] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 264.175148][ T5849] usb 7-1: USB disconnect, device number 8 [ 264.307808][ T1604] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 264.319628][ T1606] EXT4-fs: Conflicting test_dummy_encryption options [ 264.346293][ T1608] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13520'. [ 264.540317][ T1632] tipc: MTU too low for tipc bearer [ 264.572685][ T1636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13531'. [ 265.447016][ T1698] netlink: 'syz.1.13556': attribute type 11 has an invalid length. [ 265.449985][ T1698] netlink: 'syz.1.13556': attribute type 4 has an invalid length. [ 265.457143][ T1698] netlink: 199768 bytes leftover after parsing attributes in process `syz.1.13556'. [ 265.716705][ T1734] binder: 1733:1734 ioctl 4018620d 0 returned -22 [ 265.722025][ T1734] binder: 1733:1734 ioctl c0306201 80000180 returned -11 [ 265.727485][ T1736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13569'. [ 266.052183][ T1762] netlink: 'syz.3.13580': attribute type 11 has an invalid length. [ 266.054878][ T1762] netlink: 'syz.3.13580': attribute type 4 has an invalid length. [ 266.057779][ T1762] netlink: 199768 bytes leftover after parsing attributes in process `syz.3.13580'. [ 266.242932][ T1768] netlink: 'syz.1.13582': attribute type 58 has an invalid length. [ 266.245694][ T1768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13582'. [ 266.462173][ T1788] netlink: 'syz.0.13591': attribute type 11 has an invalid length. [ 266.465991][ T1788] netlink: 'syz.0.13591': attribute type 4 has an invalid length. [ 266.471257][ T1788] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.13591'. [ 266.545978][ T1796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13603'. [ 267.030689][ T1868] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 267.968614][ T1965] netlink: 'syz.3.13663': attribute type 29 has an invalid length. [ 267.971806][ T1958] netlink: 'syz.3.13663': attribute type 29 has an invalid length. [ 268.304678][ T1991] xt_l2tp: missing protocol rule (udp|l2tpip) [ 268.358822][ T1993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13679'. [ 268.365750][ T1993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13679'. [ 269.051817][ T2020] xt_l2tp: missing protocol rule (udp|l2tpip) [ 269.086264][ T2023] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 270.215594][ T2077] devpts: Bad value for 'max' [ 270.662921][ T2161] comedi comedi1: dt2817: I/O base address or length out of range [ 270.706147][ T2173] netlink: 'syz.1.13763': attribute type 1 has an invalid length. [ 270.709559][ T2173] netlink: 216 bytes leftover after parsing attributes in process `syz.1.13763'. [ 271.847367][ T2239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13794'. [ 271.918510][T15945] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 272.080092][T15945] usb 8-1: Using ep0 maxpacket: 16 [ 272.087545][T15945] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 272.091810][T15945] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 272.094458][T15945] usb 8-1: Product: syz [ 272.095970][T15945] usb 8-1: Manufacturer: syz [ 272.097609][T15945] usb 8-1: SerialNumber: syz [ 272.101088][T15945] usb 8-1: config 0 descriptor?? [ 272.311511][ T50] usb 8-1: USB disconnect, device number 10 [ 272.736003][ T2374] netlink: 'syz.1.13858': attribute type 1 has an invalid length. [ 272.739836][ T2374] nbd: error processing sock list [ 272.946810][ T2394] IPVS: Error connecting to the multicast addr [ 273.243045][ T2427] netlink: 120 bytes leftover after parsing attributes in process `syz.3.13883'. [ 273.248262][ T2427] netlink: 'syz.3.13883': attribute type 1 has an invalid length. [ 273.253142][ T2427] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13883'. [ 273.296974][ T2433] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13886'. [ 273.301097][ T2433] netlink: 'syz.1.13886': attribute type 6 has an invalid length. [ 273.305832][ T2433] netlink: 'syz.1.13886': attribute type 5 has an invalid length. [ 273.308555][ T2433] netlink: 'syz.1.13886': attribute type 4 has an invalid length. [ 273.489443][ T2457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13899'. [ 273.492390][ T2457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13899'. [ 273.615043][ T2475] veth1_to_bridge: entered allmulticast mode [ 273.620086][ T2475] bridge0: port 1(veth1_to_bridge) entered blocking state [ 273.626507][ T2475] bridge0: port 1(veth1_to_bridge) entered disabled state [ 273.631641][ T2475] veth1_to_bridge: entered promiscuous mode [ 273.787168][ T2493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13916'. [ 273.859138][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 273.859149][ T40] audit: type=1800 audit(2000000151.024:24667): pid=2503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.13920" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 273.924676][ T2514] netlink: 'syz.2.13925': attribute type 1 has an invalid length. [ 273.927332][ T2514] netlink: 96 bytes leftover after parsing attributes in process `syz.2.13925'. [ 273.930825][ T2514] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13925'. [ 273.933849][ T2514] netlink: 'syz.2.13925': attribute type 1 has an invalid length. [ 274.644841][ T2576] comedi comedi3: rti800: I/O base address or length out of range [ 275.163259][ T2620] autofs: Bad value for 'fd' [ 275.507265][ T40] audit: type=1326 audit(2000000152.664:24668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2580 comm="syz.3.13953" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84fcc code=0x7fc00000 [ 275.595044][ T2661] dvmrp1: entered allmulticast mode [ 275.604063][ T2656] dvmrp1: left allmulticast mode [ 275.671748][ T2666] tipc: Enabling of bearer rejected, failed to enable media [ 275.953563][ T2712] sch_fq: defrate 4294967295 ignored. [ 276.009222][ T5845] kernel write not supported for file /amidi2 (pid: 5845 comm: kworker/3:4) [ 276.059316][ T2728] __nla_validate_parse: 3 callbacks suppressed [ 276.059327][ T2728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14010'. [ 276.362510][ T2791] block nbd2: not configured, cannot reconfigure [ 276.568889][ T2826] netlink: 220 bytes leftover after parsing attributes in process `syz.0.14047'. [ 276.578729][ T2826] netlink: 'syz.0.14047': attribute type 2 has an invalid length. [ 276.589117][ T2826] netlink: 'syz.0.14047': attribute type 1 has an invalid length. [ 276.796131][ T2843] ALSA: mixer_oss: invalid OSS volume 'Y{UDD ' [ 276.801463][ T2843] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 276.801481][ T2843] ALSA: mixer_oss: invalid OSS volume 'lg' [ 276.801494][ T2843] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 276.801515][ T2843] ALSA: mixer_oss: invalid OSS volume 'kO0$g{pl{y;_ARW' [ 276.812040][ T2843] ALSA: mixer_oss: invalid OSS volume '' [ 276.813875][ T2843] ALSA: mixer_oss: invalid OSS volume 'sv Fu{Qby>h%w]' [ 276.816441][ T2843] ALSA: mixer_oss: invalid OSS volume 'E= v?@48@hL' [ 276.819207][ T2843] ALSA: mixer_oss: invalid OSS volume '+?>3Iq0:iq|UDř' [ 276.822045][ T2843] ALSA: mixer_oss: invalid OSS volume 'vӷ*xrN0ܗcAdh' [ 276.824782][ T2843] ALSA: mixer_oss: invalid OSS volume 'JM %HJ[~S' [ 276.854595][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.858199][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.977324][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.980906][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.007729][ T5753] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.030667][ T24] libceph: connect (1)[c::]:6789 error -101 [ 277.034043][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 277.035216][ T5753] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.044868][ T5753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.049986][ T5753] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.055978][ T5753] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.081323][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.086094][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.179053][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.184085][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.295301][ T5529] libceph: connect (1)[c::]:6789 error -101 [ 277.297988][ T5529] libceph: mon0 (1)[c::]:6789 connect error [ 277.342969][T15945] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 277.356741][T15945] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 277.362614][T15945] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 277.366886][T15945] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 277.368152][ T2860] lo speed is unknown, defaulting to 1000 [ 277.370288][T15945] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 277.370305][T15945] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 277.370317][T15945] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 277.370329][T15945] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 277.370341][T15945] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 277.370353][T15945] hid-generic 0006:0008:0001.0004: unknown main item tag 0x0 [ 277.381412][T15945] hid-generic 0006:0008:0001.0004: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 277.484100][ T2888] fido_id[2888]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 277.809631][ T24] libceph: connect (1)[c::]:6789 error -101 [ 277.848563][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 277.871280][ T2857] ceph: No mds server is up or the cluster is laggy [ 278.004010][ T2919] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 278.244124][ T46] bond0 (unregistering): Released all slaves [ 278.250341][ T46] bond1 (unregistering): Released all slaves [ 278.258343][ T46] bond2 (unregistering): Released all slaves [ 278.265601][ T46] bond3 (unregistering): Released all slaves [ 278.273337][ T46] bond4 (unregistering): Released all slaves [ 278.281852][ T46] bond5 (unregistering): Released all slaves [ 278.290454][ T46] bond6 (unregistering): Released all slaves [ 278.304661][ T46] bond7 (unregistering): Released all slaves [ 278.311657][ T46] bond8 (unregistering): Released all slaves [ 278.327272][ T2860] wlan0 speed is unknown, defaulting to 1000 [ 278.380164][ T2933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14081'. [ 278.443235][ T46] : left promiscuous mode [ 278.667955][ T2968] program syz.2.14091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.701497][ T5452] 8021q: adding VLAN 0 to HW filter on device eth2 [ 278.705255][ T46] IPVS: stopping backup sync thread 6318 ... [ 278.944526][ T2860] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.947062][ T2860] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.950445][ T2860] bridge_slave_0: entered allmulticast mode [ 278.953402][ T2860] bridge_slave_0: entered promiscuous mode [ 278.973036][ T2860] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.975711][ T2860] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.978148][ T2860] bridge_slave_1: entered allmulticast mode [ 278.981917][ T2860] bridge_slave_1: entered promiscuous mode [ 279.003945][ T2860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.016266][ T2860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.075327][ T2860] team0: Port device team_slave_0 added [ 279.080250][ T2860] team0: Port device team_slave_1 added [ 279.099293][ T5753] Bluetooth: hci3: command tx timeout [ 279.125867][ T2860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.128542][ T2860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.140250][ T2860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.148218][ T3010] dvmrp1: entered allmulticast mode [ 279.150820][ T2860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.153370][ T2860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.162142][ T2860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.166237][ T3009] dvmrp1: left allmulticast mode [ 279.193997][ T5452] 8021q: adding VLAN 0 to HW filter on device eth3 [ 279.238969][ T2860] hsr_slave_0: entered promiscuous mode [ 279.241597][ T2860] hsr_slave_1: entered promiscuous mode [ 279.244045][ T2860] debugfs: 'hsr0' already exists in 'hsr' [ 279.246181][ T2860] Cannot create hsr debugfs directory [ 279.397544][ T5452] 8021q: adding VLAN 0 to HW filter on device eth4 [ 279.465351][ T2860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 279.664641][ T3057] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.14115'. [ 279.692603][ T2860] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 279.695625][ T2860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 279.701334][ T2860] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.717839][ T2860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 279.727443][ T2860] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 279.731308][ T2860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 279.736102][ T2860] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 279.824853][ T2860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.837465][ T2860] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.850292][ T2908] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.853328][ T2908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.888975][ T1247] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.891896][ T1247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.904586][ T5452] 8021q: adding VLAN 0 to HW filter on device eth5 [ 279.945310][ T46] hsr_slave_0: left promiscuous mode [ 279.947669][ T46] hsr_slave_1: left promiscuous mode [ 279.952838][ T46] veth1_macvtap: left promiscuous mode [ 279.957007][ T46] veth0_macvtap: left promiscuous mode [ 279.973478][ T3084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14123'. [ 279.999503][ T46] pim6reg (unregistering): left allmulticast mode [ 280.373045][ T2860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.493130][ T46] IPVS: stop unused estimator thread 0... [ 280.545096][ T3122] tmpfs: Cannot retroactively limit inodes [ 280.545133][ T2860] veth0_vlan: entered promiscuous mode [ 280.560646][ T2860] veth1_vlan: entered promiscuous mode [ 280.587359][ T2860] veth0_macvtap: entered promiscuous mode [ 280.593931][ T2860] veth1_macvtap: entered promiscuous mode [ 280.612024][ T2860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.623596][ T2860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.634385][ T1247] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.638028][ T1247] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.646077][ T1247] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.650257][ T1247] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.664781][ T3138] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 280.667320][ T3138] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 280.755309][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.767117][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.799310][ T1247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.801971][ T1247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.932344][ T3171] netlink: 220 bytes leftover after parsing attributes in process `syz.4.14153'. [ 280.935453][ T3171] netlink: 'syz.4.14153': attribute type 2 has an invalid length. [ 280.940720][ T3172] can0: slcan on ptm0. [ 280.993720][ T3179] veth1_macvtap: left promiscuous mode [ 281.009636][ T3170] can0 (unregistered): slcan off ptm0. [ 281.178460][ T5753] Bluetooth: hci3: command tx timeout [ 281.226849][ T3203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14166'. [ 281.246950][ T5452] veth1_macvtap: entered promiscuous mode [ 282.078595][ T5845] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 282.230244][ T5845] usb 9-1: Using ep0 maxpacket: 32 [ 282.235753][ T5845] usb 9-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 282.239959][ T5845] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.242659][ T5845] usb 9-1: Product: syz [ 282.244019][ T5845] usb 9-1: Manufacturer: syz [ 282.245465][ T5845] usb 9-1: SerialNumber: syz [ 282.248278][ T5845] usb 9-1: config 0 descriptor?? [ 282.253948][ T5845] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 282.259106][ T5845] dvb-usb: bulk message failed: -22 (4/0) [ 282.261221][ T5845] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 282.264886][ T5845] dvb-usb: bulk message failed: -22 (5/0) [ 282.268029][ T5845] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 282.275254][ T5845] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 282.278916][ T5845] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 282.281504][ T5845] usb 9-1: media controller created [ 282.287838][ T5845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.300522][ T5845] usb 9-1: selecting invalid altsetting 3 [ 282.303181][ T5845] ttusb2: set interface to alts=3 failed [ 282.323977][ T5845] DVB: Unable to find symbol tda10086_attach() [ 282.325966][ T5845] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 282.330781][ T5845] dvb-usb: bulk message failed: -22 (4/0) [ 282.332730][ T5845] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 282.335972][ T5845] dvb-usb: bulk message failed: -22 (5/0) [ 282.337826][ T5845] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 282.341287][ T5845] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 282.460108][ T3319] 9pnet_fd: p9_fd_create_tcp (3319): problem binding to privport [ 282.460597][ T3270] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 282.466053][ T3270] dvb-usb: bulk message failed: -22 (7/0) [ 282.467934][ T3270] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 282.471554][ T3270] ttusb2: i2c transfer failed. [ 282.477443][ T5845] usb 9-1: USB disconnect, device number 2 [ 282.499862][ T5845] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 282.569685][ T3331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14218'. [ 282.702799][ T3356] netlink: 'syz.3.14228': attribute type 1 has an invalid length. [ 282.705639][ T3356] netlink: 216 bytes leftover after parsing attributes in process `syz.3.14228'. [ 283.260968][ T5753] Bluetooth: hci3: command tx timeout [ 283.306858][ T3448] program syz.4.14266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.336477][ T3454] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 283.340152][ T3454] @0: renamed from bond_slave_1 [ 283.529640][ T3482] ptrace attach of "/syz-executor exec"[5746] was attempted by ""[3482] [ 283.856473][ T3516] input input53: cannot allocate more than FF_MAX_EFFECTS effects [ 284.253174][ T3553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.256545][ T3553] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.261139][ T3557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14318'. [ 284.279918][ T3553] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 284.283644][ T3553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.293541][ T3553] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 284.296703][ T3553] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 284.300709][ T3553] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 284.303654][ T3553] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 284.317995][ T3553] 8021q: adding VLAN 0 to HW filter on device bond1 [ 284.322946][ T3553] 8021q: adding VLAN 0 to HW filter on device bond2 [ 284.326313][ T3553] 8021q: adding VLAN 0 to HW filter on device bond3 [ 284.331178][ T3553] 8021q: adding VLAN 0 to HW filter on device bond4 [ 284.335962][ T3553] 8021q: adding VLAN 0 to HW filter on device bond5 [ 284.353466][ T3553] 8021q: adding VLAN 0 to HW filter on device bond9 [ 284.361989][ T3553] 8021q: adding VLAN 0 to HW filter on device bond10 [ 284.365691][ T3572] netlink: 'syz.3.14324': attribute type 1 has an invalid length. [ 284.367732][ T842] lo speed is unknown, defaulting to 1000 [ 284.374630][ T842] syz0: Port: 1 Link ACTIVE [ 284.386335][ T1247] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.391775][ T1247] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.403107][ T842] lo speed is unknown, defaulting to 1000 [ 284.403147][ T1247] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.413792][ T1247] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.474643][ T3581] lo speed is unknown, defaulting to 1000 [ 284.515220][ T3592] Bluetooth: MGMT ver 1.23 [ 284.570571][ T3601] netlink: 'syz.4.14338': attribute type 5 has an invalid length. [ 284.578092][ T3581] wlan0 speed is unknown, defaulting to 1000 [ 284.610140][ T3605] IPVS: Unknown mcast interface: veth1_vlan [ 285.119983][ T3665] loop2: detected capacity change from 0 to 128 [ 285.163151][ T5845] libceph: connect (1)[c::]:6789 error -22 [ 285.165478][ T5845] libceph: mon0 (1)[c::]:6789 connect error [ 285.178478][ T3673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14373'. [ 285.202622][ T3675] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 285.205288][ T3675] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 285.281141][ T5743] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 285.349491][ T5753] Bluetooth: hci3: command tx timeout [ 285.422375][ T5845] libceph: connect (1)[c::]:6789 error -22 [ 285.425335][ T5845] libceph: mon0 (1)[c::]:6789 connect error [ 285.929204][ T5845] libceph: connect (1)[c::]:6789 error -22 [ 285.931417][ T5845] libceph: mon0 (1)[c::]:6789 connect error [ 285.978282][ T3669] ceph: No mds server is up or the cluster is laggy [ 286.095752][ T3764] : entered promiscuous mode [ 286.233684][ T1354] libceph: connect (1)[c::]:6789 error -101 [ 286.235877][ T1354] libceph: mon0 (1)[c::]:6789 connect error [ 286.492491][ T1354] libceph: connect (1)[c::]:6789 error -101 [ 286.495757][ T1354] libceph: mon0 (1)[c::]:6789 connect error [ 286.538366][ T3825] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14442'. [ 286.546456][ T3825] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14442'. [ 286.581660][ T3829] sctp: [Deprecated]: syz.4.14434 (pid 3829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 286.581660][ T3829] Use struct sctp_sack_info instead [ 286.607985][ T3829] sctp: [Deprecated]: syz.4.14434 (pid 3829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 286.607985][ T3829] Use struct sctp_sack_info instead [ 286.882537][ T3849] xt_l2tp: invalid flags combination: 8 [ 287.010534][ T1354] libceph: connect (1)[c::]:6789 error -101 [ 287.019505][ T1354] libceph: mon0 (1)[c::]:6789 connect error [ 287.046254][ T3787] ceph: No mds server is up or the cluster is laggy [ 287.377288][ T3884] netlink: 220 bytes leftover after parsing attributes in process `syz.1.14468'. [ 287.380479][ T3884] netlink: 'syz.1.14468': attribute type 2 has an invalid length. [ 287.409456][ T3888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14470'. [ 287.515119][ T3901] can0: slcan on ptm0. [ 287.575308][ T3910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14480'. [ 287.580532][ T3900] can0 (unregistered): slcan off ptm0. [ 287.582870][ T3910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14480'. [ 287.586265][ T3910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14480'. [ 287.711333][ T3932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14488'. [ 287.966804][ T3974] netlink: 'syz.1.14505': attribute type 1 has an invalid length. [ 287.971504][ T3974] netlink: 96 bytes leftover after parsing attributes in process `syz.1.14505'. [ 287.974544][ T3974] netlink: 1 bytes leftover after parsing attributes in process `syz.1.14505'. [ 287.977489][ T3974] netlink: 'syz.1.14505': attribute type 1 has an invalid length. [ 287.980450][ T3974] netlink: 'syz.1.14505': attribute type 8 has an invalid length. [ 289.113502][ T4110] ucma_write: process 7491 (syz.3.14567) changed security contexts after opening file descriptor, this is not allowed. [ 289.145944][ T4114] tc_dump_action: action bad kind [ 289.759868][ T4191] netlink: 'syz.1.14603': attribute type 11 has an invalid length. [ 289.762559][ T4191] netlink: 'syz.1.14603': attribute type 12 has an invalid length. [ 289.786734][ T4194] tmpfs: Cannot change global quota limit on remount [ 290.024133][ T5845] hid-generic FFFF:0008:0003.0005: item fetching failed at offset 0/1 [ 290.027389][ T5845] hid-generic FFFF:0008:0003.0005: probe with driver hid-generic failed with error -22 [ 290.108591][ T4238] xt_l2tp: unknown flags: 51 [ 290.148901][ T4240] atomic_op ffff88802ae61198 conn xmit_atomic 0000000000000000 [ 290.247088][ C1] sr 2:0:0:0: [sr0] tag#25 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 290.250525][ C1] sr 2:0:0:0: [sr0] tag#25 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 290.369419][ T4270] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 290.444625][ T4276] batman_adv: batadv0: Adding interface: gretap3 [ 290.446768][ T4276] batman_adv: batadv0: The MTU of interface gretap3 is too small (1498) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.455833][ T4276] batman_adv: batadv0: Interface activated: gretap3 [ 290.657902][ T4304] can0: slcan on ttyprintk. [ 290.731026][ T4303] can0 (unregistered): slcan off ttyprintk. [ 291.129067][ T5529] Process accounting resumed [ 291.139559][ T4365] Process accounting resumed [ 291.508658][ T5741] Bluetooth: hci3: command 0x0405 tx timeout [ 291.537810][ T4406] bridge0: port 1(netdevsim1) entered blocking state [ 291.540135][ T4406] bridge0: port 1(netdevsim1) entered forwarding state [ 291.545804][ T4406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.553436][ T4406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.580824][ T4406] 8021q: adding VLAN 0 to HW filter on device bond4 [ 291.584418][ T4406] 8021q: adding VLAN 0 to HW filter on device bond5 [ 291.597917][ T4406] 8021q: adding VLAN 0 to HW filter on device bond6 [ 291.682601][ T2906] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 291.693976][ T2906] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 292.398958][ T4515] netlink: 'syz.4.14736': attribute type 7 has an invalid length. [ 292.403271][ T4515] netlink: 'syz.4.14736': attribute type 8 has an invalid length. [ 292.618140][ T4552] lo speed is unknown, defaulting to 1000 [ 292.731164][ T4552] wlan0 speed is unknown, defaulting to 1000 [ 292.875580][ T4572] vivid-004: disconnect [ 292.880039][ T4571] vivid-004: reconnect [ 292.987977][ T4586] hugetlbfs: Bad value '' for mount option 'size' [ 292.987977][ T4586] [ 293.301136][ T4606] __nla_validate_parse: 7 callbacks suppressed [ 293.301147][ T4606] netlink: 88 bytes leftover after parsing attributes in process `syz.3.14776'. [ 293.718491][ T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 293.878493][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 293.883028][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 293.888951][ T9] usb 8-1: config 8 has an invalid interface number: 188 but max is 0 [ 293.891950][ T9] usb 8-1: config 8 has no interface number 0 [ 293.894007][ T9] usb 8-1: config 8 interface 188 has no altsetting 0 [ 293.900621][ T9] usb 8-1: string descriptor 0 read error: -22 [ 293.903585][ T9] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 293.906468][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.914588][ T9] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 293.920099][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 293.922271][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 293.927879][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 293.931696][ T9] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 293.934459][ T9] usb 8-1: media controller created [ 293.936175][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 293.938135][ T9] dw2102: i2c transfer failed. [ 293.939873][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 293.941857][ T9] dw2102: i2c transfer failed. [ 293.943507][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 293.945429][ T9] dw2102: i2c transfer failed. [ 293.947023][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 293.952527][ T9] dw2102: i2c transfer failed. [ 293.954150][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 293.956093][ T9] dw2102: i2c transfer failed. [ 293.957698][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 293.960425][ T9] dw2102: i2c transfer failed. [ 293.962089][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 293.970329][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.980368][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 293.982358][ T9] dw2102: command 0x0e transfer failed. [ 293.984213][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 293.986182][ T9] dw2102: command 0x0e transfer failed. [ 294.300038][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 294.306673][ T9] dw2102: command 0x0e transfer failed. [ 294.320253][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 294.323136][ T9] dw2102: command 0x0e transfer failed. [ 294.327028][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 294.332584][ T9] dw2102: command 0x51 transfer failed. [ 294.335028][ T4628] dvb-usb: bulk message failed: -22 (4/0) [ 294.338785][ T4628] dw2102: i2c transfer failed. [ 294.352231][ T9] DVB: Unable to find symbol ds3000_attach() [ 294.354026][ T9] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 294.400552][ T9] rc_core: IR keymap rc-su3000 not found [ 294.404815][ T9] Registered IR keymap rc-empty [ 294.406874][ T9] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 294.412146][ T9] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input55 [ 294.419706][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 294.422409][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 294.424296][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 294.430297][ T9] usb 8-1: USB disconnect, device number 11 [ 294.462779][ T9] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 294.512137][ T4681] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14812'. [ 294.516613][ T4681] netlink: 43 bytes leftover after parsing attributes in process `syz.2.14812'. [ 294.521766][ T4681] netlink: 'syz.2.14812': attribute type 5 has an invalid length. [ 294.524146][ T4681] netlink: 43 bytes leftover after parsing attributes in process `syz.2.14812'. [ 295.085934][ T4762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14851'. [ 295.119020][ T4768] netlink: 'syz.2.14854': attribute type 2 has an invalid length. [ 295.154018][ T4772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14856'. [ 295.157085][ T4772] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14856'. [ 295.160540][ T4772] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14856'. [ 295.392737][ T4805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14870'. [ 295.547386][ T4837] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 295.578512][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 295.653285][ T4853] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14894'. [ 295.768041][ T4871] sch_tbf: peakrate 1 is lower than or equals to rate 13370017219913373684 ! [ 295.782983][ T40] audit: type=1326 audit(2000000019.319:24669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4873 comm="syz.2.14906" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f33fcc code=0x0 [ 295.920276][ T4896] usb usb9: usbfs: process 4896 (syz.3.14914) did not claim interface 0 before use [ 296.058638][ C2] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 296.466031][ T4956] ================================================================== [ 296.469031][ T4956] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4c/0xd0 [ 296.471579][ T4956] Write of size 4 at addr ffff888028199708 by task syz.1.14940/4956 [ 296.475482][ T4956] [ 296.476995][ T4956] CPU: 0 UID: 0 PID: 4956 Comm: syz.1.14940 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.477015][ T4956] Tainted: [L]=SOFTLOCKUP [ 296.477019][ T4956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 296.477026][ T4956] Call Trace: [ 296.477030][ T4956] [ 296.477035][ T4956] dump_stack_lvl+0x100/0x190 [ 296.477050][ T4956] print_report+0x13d/0x4b0 [ 296.477067][ T4956] ? __virt_addr_valid+0x239/0x430 [ 296.477086][ T4956] ? try_module_get+0x4c/0xd0 [ 296.477101][ T4956] kasan_report+0xdf/0x1d0 [ 296.477113][ T4956] ? try_module_get+0x4c/0xd0 [ 296.477128][ T4956] kasan_check_range+0x10f/0x1e0 [ 296.477142][ T4956] try_module_get+0x4c/0xd0 SYZFAIL: failed to recv rpc [ 296.477156][ T4956] dvb_device_open+0x124/0x3b0 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 296.477168][ T4956] ? __pfx_dvb_device_open+0x10/0x10 [ 296.477178][ T4956] chrdev_open+0x234/0x6a0 [ 296.477191][ T4956] ? __pfx_apparmor_file_open+0x10/0x10 [ 296.477209][ T4956] ? __pfx_chrdev_open+0x10/0x10 [ 296.477223][ T4956] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 296.477240][ T4956] do_dentry_open+0x6d8/0x1660 [ 296.477252][ T4956] ? __pfx_chrdev_open+0x10/0x10 [ 296.477266][ T4956] vfs_open+0x82/0x3f0 [ 296.477281][ T4956] path_openat+0x208c/0x31a0 [ 296.477296][ T4956] ? asm_int80_emulation+0x1a/0x20 [ 296.477308][ T4956] ? __pfx_path_openat+0x10/0x10 [ 296.477323][ T4956] do_file_open+0x20e/0x430 [ 296.477336][ T4956] ? __pfx_do_file_open+0x10/0x10 [ 296.477354][ T4956] ? _raw_spin_unlock+0x28/0x50 [ 296.477365][ T4956] ? alloc_fd+0x476/0x790 [ 296.477379][ T4956] do_sys_openat2+0x10d/0x1e0 [ 296.477401][ T4956] ? __pfx_do_sys_openat2+0x10/0x10 [ 296.477421][ T4956] __ia32_compat_sys_openat+0x12d/0x210 [ 296.477438][ T4956] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 296.477456][ T4956] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 296.477469][ T4956] ? rcu_is_watching+0x12/0xc0 [ 296.477483][ T4956] do_int80_emulation+0x141/0x700 [ 296.477499][ T4956] asm_int80_emulation+0x1a/0x20 [ 296.477509][ T4956] RIP: 0023:0xf71f616b [ 296.477518][ T4956] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 296.477529][ T4956] RSP: 002b:00000000f54b603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 296.477539][ T4956] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54b6100 [ 296.477547][ T4956] RDX: 000000000000413f RSI: 0000000000000000 RDI: 0000000000000000 [ 296.477553][ T4956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 296.477559][ T4956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.477565][ T4956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 296.477574][ T4956] [ 296.477578][ T4956] [ 296.566674][ T4956] Allocated by task 1: [ 296.568040][ T4956] kasan_save_stack+0x30/0x50 [ 296.569592][ T4956] kasan_save_track+0x14/0x30 [ 296.571122][ T4956] __kasan_kmalloc+0xaa/0xb0 [ 296.572703][ T4956] bus_add_driver+0x92/0x5b0 [ 296.574236][ T4956] driver_register+0x1e2/0x360 [ 296.575829][ T4956] i2c_register_driver+0xd9/0x1f0 [ 296.577482][ T4956] do_one_initcall+0x121/0x750 [ 296.579048][ T4956] kernel_init_freeable+0x6ea/0x7b0 [ 296.580775][ T4956] kernel_init+0x1f/0x1e0 [ 296.582235][ T4956] ret_from_fork+0x72b/0xd50 [ 296.583780][ T4956] ret_from_fork_asm+0x1a/0x30 [ 296.585350][ T4956] [ 296.586157][ T4956] The buggy address belongs to the object at ffff888028199600 [ 296.586157][ T4956] which belongs to the cache kmalloc-256 of size 256 [ 296.590948][ T4956] The buggy address is located 56 bytes to the right of [ 296.590948][ T4956] allocated 208-byte region [ffff888028199600, ffff8880281996d0) [ 296.595644][ T4956] [ 296.596452][ T4956] The buggy address belongs to the physical page: [ 296.598554][ T4956] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28198 [ 296.601809][ T4956] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 296.605179][ T4956] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 296.607722][ T4956] page_type: f5(slab) [ 296.609053][ T4956] raw: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 296.611869][ T4956] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 296.614682][ T4956] head: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 296.617513][ T4956] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 296.620337][ T4956] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 296.623177][ T4956] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 296.626009][ T4956] page dumped because: kasan: bad access detected [ 296.628059][ T4956] page_owner tracks the page as allocated [ 296.629904][ T4956] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17637877451, free_ts 17609753031 [ 296.636479][ T4956] post_alloc_hook+0x153/0x170 [ 296.638068][ T4956] get_page_from_freelist+0x11a6/0x33b0 [ 296.639881][ T4956] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 296.641848][ T4956] new_slab+0xa6/0x6c0 [ 296.643187][ T4956] refill_objects+0x277/0x420 [ 296.644746][ T4956] __pcs_replace_empty_main+0x375/0x650 [ 296.646567][ T4956] __kmalloc_cache_noprof+0x493/0x6f0 [ 296.648361][ T4956] bus_add_driver+0x92/0x5b0 [ 296.649898][ T4956] driver_register+0x1e2/0x360 [ 296.651490][ T4956] usb_register_driver+0x21c/0x3e0 [ 296.653195][ T4956] uvc_init+0x24/0x50 [ 296.654603][ T4956] do_one_initcall+0x121/0x750 [ 296.656319][ T4956] kernel_init_freeable+0x6ea/0x7b0 [ 296.658032][ T4956] kernel_init+0x1f/0x1e0 [ 296.659479][ T4956] ret_from_fork+0x72b/0xd50 [ 296.661111][ T4956] ret_from_fork_asm+0x1a/0x30 [ 296.662808][ T4956] page last free pid 1 tgid 1 stack trace: [ 296.664756][ T4956] __free_frozen_pages+0x747/0x1040 [ 296.666474][ T4956] qlist_free_all+0x47/0xf0 [ 296.667998][ T4956] kasan_quarantine_reduce+0x1a0/0x1f0 [ 296.669792][ T4956] __kasan_slab_alloc+0x69/0x90 [ 296.671409][ T4956] __kmalloc_cache_noprof+0x243/0x6f0 [ 296.673191][ T4956] bus_add_driver+0x92/0x5b0 [ 296.674788][ T4956] driver_register+0x1e2/0x360 [ 296.676371][ T4956] usb_register_driver+0x21c/0x3e0 [ 296.678021][ T4956] do_one_initcall+0x121/0x750 [ 296.679870][ T4956] kernel_init_freeable+0x6ea/0x7b0 [ 296.681587][ T4956] kernel_init+0x1f/0x1e0 [ 296.683019][ T4956] ret_from_fork+0x72b/0xd50 [ 296.684560][ T4956] ret_from_fork_asm+0x1a/0x30 [ 296.686141][ T4956] [ 296.686919][ T4956] Memory state around the buggy address: [ 296.688808][ T4956] ffff888028199600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 296.691442][ T4956] ffff888028199680: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 296.694051][ T4956] >ffff888028199700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 296.696667][ T4956] ^ [ 296.698093][ T4956] ffff888028199780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 296.700768][ T4956] ffff888028199800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 296.703362][ T4956] ================================================================== [ 296.711406][ T4956] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 296.713890][ T4956] CPU: 0 UID: 0 PID: 4956 Comm: syz.1.14940 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.717605][ T4956] Tainted: [L]=SOFTLOCKUP [ 296.719087][ T4956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 296.722494][ T4956] Call Trace: [ 296.723613][ T4956] [ 296.724603][ T4956] dump_stack_lvl+0x100/0x190 [ 296.726148][ T4956] vpanic+0x552/0x970 [ 296.727493][ T4956] ? __pfx_vpanic+0x10/0x10 [ 296.729022][ T4956] ? try_module_get+0x4c/0xd0 [ 296.730535][ T4956] panic+0xd1/0xe0 [ 296.731794][ T4956] ? __pfx_panic+0x10/0x10 [ 296.733280][ T4956] ? try_module_get+0x4c/0xd0 [ 296.734843][ T4956] ? preempt_schedule_common+0x42/0xc0 [ 296.736647][ T4956] check_panic_on_warn.cold+0x19/0x34 [ 296.738472][ T4956] end_report.part.0+0x3a/0x90 [ 296.740063][ T4956] kasan_report.cold+0xe/0x18 [ 296.741638][ T4956] ? try_module_get+0x4c/0xd0 [ 296.743276][ T4956] kasan_check_range+0x10f/0x1e0 [ 296.744912][ T4956] try_module_get+0x4c/0xd0 [ 296.746423][ T4956] dvb_device_open+0x124/0x3b0 [ 296.747981][ T4956] ? __pfx_dvb_device_open+0x10/0x10 [ 296.749710][ T4956] chrdev_open+0x234/0x6a0 [ 296.751159][ T4956] ? __pfx_apparmor_file_open+0x10/0x10 [ 296.753006][ T4956] ? __pfx_chrdev_open+0x10/0x10 [ 296.754643][ T4956] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 296.756760][ T4956] do_dentry_open+0x6d8/0x1660 [ 296.758768][ T4956] ? __pfx_chrdev_open+0x10/0x10 [ 296.760539][ T4956] vfs_open+0x82/0x3f0 [ 296.761848][ T4956] path_openat+0x208c/0x31a0 [ 296.763347][ T4956] ? asm_int80_emulation+0x1a/0x20 [ 296.764969][ T4956] ? __pfx_path_openat+0x10/0x10 [ 296.766583][ T4956] do_file_open+0x20e/0x430 [ 296.768065][ T4956] ? __pfx_do_file_open+0x10/0x10 [ 296.769805][ T4956] ? _raw_spin_unlock+0x28/0x50 [ 296.771469][ T4956] ? alloc_fd+0x476/0x790 [ 296.772948][ T4956] do_sys_openat2+0x10d/0x1e0 [ 296.774521][ T4956] ? __pfx_do_sys_openat2+0x10/0x10 [ 296.776266][ T4956] __ia32_compat_sys_openat+0x12d/0x210 [ 296.778120][ T4956] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 296.780133][ T4956] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 296.782239][ T4956] ? rcu_is_watching+0x12/0xc0 [ 296.783838][ T4956] do_int80_emulation+0x141/0x700 [ 296.785501][ T4956] asm_int80_emulation+0x1a/0x20 [ 296.787134][ T4956] RIP: 0023:0xf71f616b [ 296.788507][ T4956] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 296.794734][ T4956] RSP: 002b:00000000f54b603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 296.797459][ T4956] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54b6100 [ 296.800052][ T4956] RDX: 000000000000413f RSI: 0000000000000000 RDI: 0000000000000000 [ 296.802642][ T4956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 296.805219][ T4956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.807767][ T4956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 296.810344][ T4956] [ 296.812067][ T4956] Kernel Offset: disabled [ 296.813517][ T4956] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:14:47 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff857bd8d5 RDI=ffffffff9b45c7a0 RBP=ffffffff9b45c760 RSP=ffffc90023be72b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666657 R12=0000000000000000 R13=0000000000000074 R14=0000000000000010 R15=ffffffff857bd870 RIP=ffffffff857bd8ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809717d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f4a190 CR3=000000004a2d3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000016f351 RBX=ffff88801c32a500 RCX=ffffffff8b877045 RDX=0000000000000000 RSI=ffffffff8df1b194 RDI=ffffffff8c1c2480 RBP=0000000000000000 RSP=ffffc9000046fdf0 R8 =0000000000000001 R9 =ffffed10056667b5 R10=ffff88802b333dab R11=0000000000000000 R12=0000000000000001 R13=ffffed10038654a0 R14=0000000000000001 R15=ffffffff90d7c850 RIP=ffffffff8b87587f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809727d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000033a22ff8 CR3=000000004a2d3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000003 RBX=ffffc90004517d50 RCX=ffffffff8b833fec RDX=00000045012a82e6 RSI=0000004500feae5a RDI=ffff888028ef8000 RBP=00000045012a82e6 RSP=ffffc90002d8f3b8 R8 =0000000000000006 R9 =0000004500feae5a R10=00000045012a82e6 R11=0000000000000000 R12=ffff88802b43c100 R13=dffffc0000000000 R14=0000004500feae5a R15=ffff88802b4285d8 RIP=ffffffff8207e7eb RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809737d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f746c1e0 CR3=0000000052404000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff9b380f40 RBP=ffffffff9b380f40 RSP=ffffc90003ed7000 R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff90d7c857 R11=0000000000000000 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e3eb0a RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe9ce073300 ffffffff 00c00000 GS =0000 ffff88809747d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005560092ebf40 CR3=000000004c953000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3b9965e4bf04f6d2 f47563b5f4d9ff25 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fc12ae858444dbbf 129abeeda5fa0580 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cfe987a3f19188ec 53e6512320166367 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 64ee53a1f069903c f85c1e93e715f344 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000012b80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00b4a79cc2900080 00b4a9211c480080 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000014401000000 010000001d3a0080 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00b4a91001000000 52be000030f60000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000000b4a943 00b4a932f8580000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 feaac18d381dcfa9 1fe1e2eebdb9f25a ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 438334e109847c46 eff2bddad6b762b0 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=63101c10444785d9 c036929200b366f4 63101c10444785d9 c036929200b366f4 63101c10444785d9 c036929200b366f4 63101c10444785d9 c036929200b366f4 ZMM18=c4e6e9a81685316d f068a7d4e78d7755 c4e6e9a81685316d f068a7d4e78d7755 c4e6e9a81685316d f068a7d4e78d7755 c4e6e9a81685316d f068a7d4e78d7755 ZMM19=4848000000000000 0000000000000004 4848000000000000 0000000000000003 4848000000000000 0000000000000002 4848000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 622f2e01ffffffff fffffffff3080a80 0316080004800201 080006017fd21402 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004940330656c69 662f2e01ffffffff fffffffff1080486 0320212301ffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffff90804 800305a808000280 02040104be007375 622f2e01ffffffff ZMM24=75647b5a75647b5a 75647b5a75647b5a 75647b5a75647b5a 75647b5a75647b5a 75647b5a75647b5a 75647b5a75647b5a 75647b5a75647b5a 75647b5a75647b5a ZMM25=90e5eb3e90e5eb3e 90e5eb3e90e5eb3e 90e5eb3e90e5eb3e 90e5eb3e90e5eb3e 90e5eb3e90e5eb3e 90e5eb3e90e5eb3e 90e5eb3e90e5eb3e 90e5eb3e90e5eb3e ZMM26=3caeecb23caeecb2 3caeecb23caeecb2 3caeecb23caeecb2 3caeecb23caeecb2 3caeecb23caeecb2 3caeecb23caeecb2 3caeecb23caeecb2 3caeecb23caeecb2 ZMM27=dd8fd80bdd8fd80b dd8fd80bdd8fd80b dd8fd80bdd8fd80b dd8fd80bdd8fd80b dd8fd80bdd8fd80b dd8fd80bdd8fd80b dd8fd80bdd8fd80b dd8fd80bdd8fd80b ZMM28=000001900000018f 0000018e0000018d 0000018c0000018b 0000018a00000189 0000018800000187 0000018600000185 0000018400000183 0000018200000181 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=3143000031430000 3143000031430000 3143000031430000 3143000031430000 3143000031430000 3143000031430000 3143000031430000 3143000031430000