last executing test programs: 2.73506389s ago: executing program 0 (id=8559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x0) 2.734699815s ago: executing program 0 (id=8561): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864d0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.65719368s ago: executing program 0 (id=8566): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000040)=@usbdevfs_connect) 2.653447243s ago: executing program 0 (id=8567): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0aac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2.569639596s ago: executing program 0 (id=8572): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) 660.48113ms ago: executing program 0 (id=8605): futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 320.04934ms ago: executing program 2 (id=8624): syz_io_uring_setup(0x378e, &(0x7f00000008c0)={0x0, 0x0, 0x3000, 0xfffffffe, 0x224}, &(0x7f0000000080), 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 197.376267ms ago: executing program 3 (id=8629): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x30, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @u32=0x2892348f}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) 197.083074ms ago: executing program 1 (id=8630): r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f0000002440)=""/116, 0x74) 191.295838ms ago: executing program 2 (id=8631): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) 141.182371ms ago: executing program 3 (id=8632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x60}, 0x1, 0x20, 0x0, 0x8040}, 0x0) 141.022228ms ago: executing program 1 (id=8633): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000c40)={0xf8, 0x0, 0xff80}) 139.839558ms ago: executing program 2 (id=8634): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, &(0x7f00000002c0)='no,e\x00') 92.606718ms ago: executing program 1 (id=8635): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c40)={0x24, 0x25, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x3f, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) 92.321521ms ago: executing program 3 (id=8636): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x4, &(0x7f0000006680)) sysfs$1(0x1, &(0x7f0000000080)='ext4\x00') 91.958141ms ago: executing program 2 (id=8637): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000f00)) 91.868134ms ago: executing program 3 (id=8638): mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f00007fc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f00007fe000/0x3000)=nil) 91.355101ms ago: executing program 1 (id=8639): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='setgroups\x00') read$FUSE(r0, &(0x7f0000000800)={0x2020}, 0x2020) 8.717727ms ago: executing program 1 (id=8640): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 8.514755ms ago: executing program 3 (id=8641): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 8.449707ms ago: executing program 2 (id=8642): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3d, 0x8, 0x2}, 0x48) fgetxattr(r0, &(0x7f0000000380)=@known='system.posix_acl_access\x00', 0x0, 0x0) 4.961356ms ago: executing program 2 (id=8643): timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x1}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) 4.810137ms ago: executing program 3 (id=8644): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000940)) 0s ago: executing program 1 (id=8645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) kernel console output (not intermixed with test programs): ][T11436] Call Trace: [ 99.392627][T11436] [ 99.392631][T11436] dump_stack_lvl+0x100/0x190 [ 99.392649][T11436] warn_alloc.cold+0x95/0x1c1 [ 99.392667][T11436] ? __pfx_warn_alloc+0x10/0x10 [ 99.392680][T11436] ? find_held_lock+0x2b/0x80 [ 99.392690][T11436] ? psi_memstall_leave+0x19b/0x2e0 [ 99.392705][T11436] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 99.392719][T11436] ? rcu_is_watching+0x12/0xc0 [ 99.392729][T11436] ? psi_memstall_leave+0x1e2/0x2e0 [ 99.392741][T11436] ? lockdep_hardirqs_on+0x78/0x100 [ 99.392757][T11436] __alloc_frozen_pages_noprof+0x1442/0x2410 [ 99.392771][T11436] ? finish_task_switch.isra.0+0x204/0xb70 [ 99.392788][T11436] ? __schedule+0xff6/0x5e10 [ 99.392800][T11436] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 99.392819][T11436] ? __pfx___schedule+0x10/0x10 [ 99.392831][T11436] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.392843][T11436] ? policy_nodemask+0xed/0x4f0 [ 99.392860][T11436] alloc_pages_mpol+0x1fb/0x550 [ 99.392876][T11436] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 99.392895][T11436] alloc_pages_noprof+0x131/0x390 [ 99.392917][T11436] kimage_alloc_pages+0x72/0x380 [ 99.392930][T11436] kimage_alloc_control_pages+0x157/0xa20 [ 99.392945][T11436] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 99.392961][T11436] do_kexec_load+0x275/0x810 [ 99.392975][T11436] ? __pfx_do_kexec_load+0x10/0x10 [ 99.392991][T11436] __ia32_compat_sys_kexec_load+0x37f/0x400 [ 99.393007][T11436] ? __pfx___ia32_compat_sys_kexec_load+0x10/0x10 [ 99.393021][T11436] ? fput+0x79/0x100 [ 99.393038][T11436] __do_fast_syscall_32+0xde/0x660 [ 99.393053][T11436] do_fast_syscall_32+0x32/0x70 [ 99.393067][T11436] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 99.393081][T11436] RIP: 0023:0xf739d579 [ 99.393090][T11436] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 99.393100][T11436] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 000000000000011b [ 99.393111][T11436] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000003 [ 99.393117][T11436] RDX: 0000000080001080 RSI: 00000000003e0000 RDI: 0000000000000000 [ 99.393123][T11436] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.393129][T11436] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 99.393135][T11436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.393147][T11436] [ 99.393152][T11436] Mem-Info: [ 99.437826][ T112] ODEBUG: Out of memory. ODEBUG disabled [ 99.438668][T11436] active_anon:4903 inactive_anon:39 isolated_anon:0 [ 99.438668][T11436] active_file:3184 inactive_file:18355 isolated_file:0 [ 99.438668][T11436] unevictable:1768 dirty:308 writeback:0 [ 99.438668][T11436] slab_reclaimable:7352 slab_unreclaimable:50981 [ 99.438668][T11436] mapped:23708 shmem:2080 pagetables:1103 [ 99.438668][T11436] sec_pagetables:309 bounce:0 [ 99.438668][T11436] kernel_misc_reclaimable:0 [ 99.438668][T11436] free:19659 free_pcp:8 free_cma:0 [ 99.501622][T11436] Node 0 active_anon:72kB inactive_anon:80kB active_file:72kB inactive_file:516kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:352kB dirty:100kB writeback:0kB shmem:3540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9672kB pagetables:1572kB sec_pagetables:1144kB all_unreclaimable? yes Balloon:0kB [ 99.511583][T11436] Node 1 active_anon:19640kB inactive_anon:76kB active_file:12664kB inactive_file:54704kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:94456kB dirty:1132kB writeback:0kB shmem:4780kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:2900kB pagetables:2840kB sec_pagetables:92kB all_unreclaimable? no Balloon:0kB [ 99.521516][T11436] Node 0 DMA free:2700kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 99.530902][T11436] lowmem_reserve[]: 0 288 288 288 288 [ 99.532722][T11436] Node 0 DMA32 free:13128kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:0KB active_anon:72kB inactive_anon:80kB active_file:68kB inactive_file:516kB unevictable:3536kB writepending:100kB zspages:0kB present:1032196kB managed:295104kB mlocked:0kB bounce:0kB free_pcp:288kB local_pcp:0kB free_cma:0kB [ 99.544024][T11436] lowmem_reserve[]: 0 0 0 0 0 [ 99.545730][T11436] Node 1 DMA32 free:73924kB boost:18432kB min:65576kB low:77360kB high:89144kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19540kB inactive_anon:76kB active_file:12664kB inactive_file:45204kB unevictable:3536kB writepending:1132kB zspages:2764kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:2660kB local_pcp:32kB free_cma:0kB [ 99.556524][T11436] lowmem_reserve[]: 0 0 0 0 0 [ 99.558179][T11436] Node 0 DMA: 28*4kB (UM) 15*8kB (UM) 5*16kB (UM) 17*32kB (UM) 5*64kB (UM) 2*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2712kB [ 99.563510][T11436] Node 0 DMA32: 37*4kB (ME) 36*8kB (UME) 30*16kB (UME) 115*32kB (UME) 36*64kB (UME) 13*128kB (UME) 8*256kB (UM) 1*512kB (M) 0*1024kB 1*2048kB (M) 0*4096kB = 13172kB [ 99.569360][T11436] Node 1 DMA32: 517*4kB (UME) 357*8kB (ME) 213*16kB (ME) 178*32kB (ME) 110*64kB (ME) 85*128kB (UME) 35*256kB (UME) 25*512kB (UM) 6*1024kB (M) 3*2048kB (UM) 2*4096kB (M) = 74188kB [ 99.577942][T11436] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.581744][T11436] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.585098][T11436] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.588106][T11436] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.591053][T11436] 14607 total pagecache pages [ 99.593015][T11436] 343 pages in swap cache [ 99.594388][T11436] Free swap = 116968kB [ 99.595731][T11436] Total swap = 124996kB [ 99.597174][T11436] 524155 pages RAM [ 99.598322][T11436] 0 pages HighMem/MovableOnly [ 99.599813][T11436] 209486 pages reserved [ 99.601140][T11436] 0 pages cma reserved [ 99.838096][T11516] /dev/sr0: Can't open blockdev [ 100.006951][T11436] kexec: Could not allocate control_code_buffer [ 100.187256][T11568] FAT-fs (nullb0): bogus number of reserved sectors [ 100.195769][T11568] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 100.522016][ T40] audit: type=1326 audit(2000000286.517:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11597 comm="syz.1.2789" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x0 [ 100.911702][T11642] 9pnet_fd: Insufficient options for proto=fd [ 101.132883][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2827'. [ 101.199081][T11681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.322325][T11693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2838'. [ 101.421491][T11708] [U]  [ 101.445095][T11712] Illegal XDP return value 4294967274 on prog (id 241) dev N/A, expect packet loss! [ 101.583607][T11722] x_tables: ip_tables: udplite match: only valid for protocol 136 [ 101.937495][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2861'. [ 101.941335][T11744] netlink: 50 bytes leftover after parsing attributes in process `syz.1.2861'. [ 101.945414][T11744] netlink: 50 bytes leftover after parsing attributes in process `syz.1.2861'. [ 102.059100][T11748] 9pnet_fd: p9_fd_create_tcp (11748): problem connecting socket to 127.0.0.1 [ 102.728114][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2883'. [ 102.730988][T11788] netlink: 50 bytes leftover after parsing attributes in process `syz.2.2883'. [ 102.734315][T11788] netlink: 50 bytes leftover after parsing attributes in process `syz.2.2883'. [ 102.802219][T11796] netlink: 'syz.2.2886': attribute type 1 has an invalid length. [ 102.975442][T11821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2900'. [ 103.307717][T11861] netlink: 'syz.1.2916': attribute type 1 has an invalid length. [ 103.645184][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2930'. [ 103.715991][T11900] netlink: 'syz.3.2934': attribute type 2 has an invalid length. [ 103.790020][T11906] block device autoloading is deprecated and will be removed. [ 104.178219][T11951] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:1536 [ 104.274297][T11957] netlink: 'syz.2.2963': attribute type 1 has an invalid length. [ 104.274944][T11953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.355662][T11962] program syz.1.2965 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.593963][T11990] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 104.666169][T12000] overlayfs: missing 'lowerdir' [ 105.008332][ T40] audit: type=1326 audit(2000000290.717:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.0.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 105.025967][ T40] audit: type=1326 audit(2000000290.717:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.0.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 105.046922][ T40] audit: type=1326 audit(2000000290.726:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.0.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=183 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 105.063580][ T40] audit: type=1326 audit(2000000290.726:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.0.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 105.082474][ T40] audit: type=1326 audit(2000000290.726:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.0.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 105.151541][T12051] raw_sendmsg: syz.1.3007 forgot to set AF_INET. Fix it! [ 105.195447][T12053] bridge1: entered promiscuous mode [ 105.197765][T12053] bridge1: entered allmulticast mode [ 105.212183][T12056] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 105.229814][T12056] romfs: unable to set blocksize [ 105.229814][T12056] [ 105.321913][T12066] bond2 (unregistering): Released all slaves [ 105.355360][T12076] Device name not specified. [ 105.355360][T12076] [ 105.454762][T12087] warning: `syz.0.3024' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.672721][T12107] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.965598][T12140] netlink: zone id is out of range [ 105.968578][T12140] netlink: zone id is out of range [ 105.970828][T12140] netlink: zone id is out of range [ 105.973036][T12140] netlink: zone id is out of range [ 105.987619][T12140] netlink: get zone limit has 8 unknown bytes [ 106.114493][T12162] sctp: [Deprecated]: syz.2.3060 (pid 12162) Use of int in maxseg socket option. [ 106.114493][T12162] Use struct sctp_assoc_value instead [ 106.132172][T12163] netlink: 'syz.1.3061': attribute type 1 has an invalid length. [ 106.499005][T12220] tmpfs: User quota inode hardlimit too large. [ 106.668195][T12239] __nla_validate_parse: 10 callbacks suppressed [ 106.668214][T12239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3098'. [ 106.735824][T12247] FAT-fs (nbd0): unable to read boot sector [ 106.937800][T12282] netlink: 'syz.1.3117': attribute type 23 has an invalid length. [ 106.961821][T12286] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 106.963916][T12286] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 106.966540][T12286] vhci_hcd vhci_hcd.0: Device attached [ 106.970320][T12287] usbip_core: unknown command [ 106.971854][T12287] vhci_hcd: unknown pdu 3587178197 [ 106.973669][T12287] usbip_core: unknown command [ 106.979132][ T89] vhci_hcd vhci_hcd.0: stop threads [ 106.980852][ T89] vhci_hcd vhci_hcd.0: release socket [ 106.982593][ T89] vhci_hcd vhci_hcd.0: disconnect device [ 106.994180][T12292] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 106.996266][T12292] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 106.998650][T12292] vhci_hcd vhci_hcd.0: Device attached [ 107.010574][T12293] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 107.014730][ T1141] vhci_hcd vhci_hcd.3: stop threads [ 107.016985][ T1141] vhci_hcd vhci_hcd.3: release socket [ 107.019306][ T1141] vhci_hcd vhci_hcd.3: disconnect device [ 107.438507][T12320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3136'. [ 107.746192][T12358] overlayfs: missing 'lowerdir' [ 107.777901][T12362] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3157'. [ 107.865796][T12378] netlink: 'syz.1.3165': attribute type 2 has an invalid length. [ 107.869865][T12378] netlink: 'syz.1.3165': attribute type 3 has an invalid length. [ 107.923407][T12384] bridge_slave_0: left allmulticast mode [ 107.925836][T12384] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.936981][T12384] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 108.062957][T12396] new mount options do not match the existing superblock, will be ignored [ 108.166978][T12408] netlink: 'syz.0.3180': attribute type 11 has an invalid length. [ 108.217759][T12416] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.269171][T12422] bridge_slave_0: left allmulticast mode [ 108.272575][T12422] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.286749][T12422] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 108.387995][T12431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3191'. [ 108.460012][T12442] overlayfs: cannot append lower layer [ 108.650171][T12476] bridge_slave_0: left allmulticast mode [ 108.652150][T12476] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.680400][T12476] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 108.903680][T12519] netlink: 'syz.2.3234': attribute type 11 has an invalid length. [ 108.910097][T12520] binder: 12518:12520 ioctl c0306201 80000040 returned -22 [ 109.064876][T12550] Cannot find add_set index 2 as target [ 109.077925][ T40] audit: type=1326 audit(2000000294.524:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.1.3253" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 109.086942][ T40] audit: type=1326 audit(2000000294.524:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.1.3253" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 109.087633][T12553] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3252'. [ 109.096521][ T40] audit: type=1326 audit(2000000294.524:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.1.3253" exe="/syz-executor" sig=0 arch=40000003 syscall=344 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 109.099571][T12553] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3252'. [ 109.105412][T12556] bochs-drm 0000:00:01.0: [drm] Unknown color mode 65545; guessing buffer size. [ 109.115922][ T40] audit: type=1326 audit(2000000294.524:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.1.3253" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 109.118888][T12558] XFS (nbd1): no-recovery mounts must be read-only. [ 109.228436][T12573] : entered promiscuous mode [ 109.383885][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3273'. [ 109.674715][T12642] netlink: 'syz.2.3297': attribute type 2 has an invalid length. [ 109.677811][T12642] netlink: 'syz.2.3297': attribute type 1 has an invalid length. [ 109.692412][T12646] netlink: 'syz.0.3296': attribute type 1 has an invalid length. [ 109.696051][T12646] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3296'. [ 109.751396][T12654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.764041][ T60] IPVS: starting estimator thread 0... [ 109.852980][T12674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.865515][T12657] IPVS: using max 45 ests per chain, 108000 per kthread [ 109.895608][T12680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.019227][T12690] ALSA: mixer_oss: invalid OSS volume '' [ 110.305068][T12725] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3336'. [ 110.408671][T12735] netlink: 'syz.2.3340': attribute type 1 has an invalid length. [ 110.488003][T12741] bond2: entered promiscuous mode [ 110.491006][T12741] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.545173][T12746] ceph: Path missing in source [ 110.640269][T12760] openvswitch: netlink: Message has 4 unknown bytes. [ 110.754342][T12779] ip6_vti0: entered promiscuous mode [ 110.852080][T12799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3369'. [ 110.910230][T12809] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.015308][T12829] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 111.174768][ T40] audit: type=1326 audit(2000000296.488:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12857 comm="syz.0.3399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 111.191741][ T40] audit: type=1326 audit(2000000296.488:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12857 comm="syz.0.3399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 111.202143][ T40] audit: type=1326 audit(2000000296.488:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12857 comm="syz.0.3399" exe="/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 111.212287][ T40] audit: type=1326 audit(2000000296.488:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12857 comm="syz.0.3399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 111.221673][ T40] audit: type=1326 audit(2000000296.488:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12857 comm="syz.0.3399" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 111.276561][T12875] netlink: 'syz.1.3408': attribute type 2 has an invalid length. [ 111.288396][T12879] netlink: 'syz.2.3410': attribute type 5 has an invalid length. [ 111.520041][T12919] ALSA: mixer_oss: invalid OSS volume '' [ 111.520258][T12923] usb usb8: usbfs: process 12923 (syz.2.3432) did not claim interface 0 before use [ 111.522554][T12919] ALSA: mixer_oss: invalid OSS volume 'ұB;T`@$EcXMYd,' [ 111.522581][T12919] ALSA: mixer_oss: invalid OSS volume 'b@h#' [ 111.522618][T12919] ALSA: mixer_oss: invalid OSS volume 'h4XS4v=0_>&' [ 111.522629][T12919] ALSA: mixer_oss: invalid OSS volume '|/"tj' [ 111.522635][T12919] ALSA: mixer_oss: invalid OSS volume '-z5c^J6$' [ 111.522651][T12919] ALSA: mixer_oss: invalid OSS volume '0Ty󉴪jP&at' [ 111.522658][T12919] ALSA: mixer_oss: invalid OSS volume '|~\' [ 111.522680][T12919] ALSA: mixer_oss: invalid OSS volume '@^3bɜ}G$#\("/oL' [ 111.522686][T12919] ALSA: mixer_oss: invalid OSS volume 'I :' [ 111.522696][T12919] ALSA: mixer_oss: invalid OSS volume '%^vhcGJPr('⍯Q=' [ 111.522713][T12919] ALSA: mixer_oss: invalid OSS volume ' Gj;4Ìz3WҼ0F=%' [ 111.522727][T12919] ALSA: mixer_oss: invalid OSS volume ';4 4fh߇GIבQ5oJ' [ 111.522754][T12919] ALSA: mixer_oss: invalid OSS volume 'Wl]Y1-J<A>o' [ 111.603260][T12931] netlink: 'syz.3.3437': attribute type 3 has an invalid length. [ 111.720970][T12951] netlink: 'syz.3.3446': attribute type 1 has an invalid length. [ 111.960625][ T6110] Bluetooth: hci3: command 0x0406 tx timeout [ 112.482587][T13015] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 112.588730][T13021] No control pipe specified [ 112.628454][T13023] __nla_validate_parse: 3 callbacks suppressed [ 112.628472][T13023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3482'. [ 112.633809][T13023] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3482'. [ 112.967543][T13039] xt_cgroup: invalid path, errno=-2 [ 113.009459][T13045] binder: 13044:13045 ioctl c018620c 80000040 returned -1 [ 113.098204][T13059] openvswitch: netlink: IP tunnel dst address not specified [ 113.586745][T13141] random: crng reseeded on system resumption [ 113.624992][T13143] ip6t_srh: unknown srh invflags 7160 [ 113.768969][T13165] affs: No valid root block on device nbd1 [ 114.007969][T13197] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3568'. [ 114.010855][T13197] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 114.074122][T13205] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 114.080917][T13205] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 114.173864][T13219] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3580'. [ 114.231831][T13230] libceph: resolve ' [ 114.231831][T13230] -&fYǝa2i [ 114.231831][T13230] .?&*&' (ret=-3): failed [ 114.243077][ T6110] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 114.579288][T13283] batadv1: entered promiscuous mode [ 114.814076][T13315] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3622'. [ 115.138022][T13367] netlink: 'syz.1.3649': attribute type 29 has an invalid length. [ 115.141906][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3649'. [ 115.197096][T13377] libceph: resolve ' [ 115.197096][T13377] -&fYǝa2i [ 115.197096][T13377] .?&*&' (ret=-3): failed [ 115.250722][T13384] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 115.464619][T13423] random: crng reseeded on system resumption [ 115.522708][T13430] xt_cgroup: xt_cgroup: no path or classid specified [ 115.827134][T13483] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3701'. [ 116.368120][T13572] binder: 13571:13572 ioctl c018620c 80000380 returned -22 [ 116.554392][T13456] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 116.650825][T13607] warn_alloc: 1 callbacks suppressed [ 116.650836][T13607] syz.0.3763: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 116.659473][T13607] CPU: 3 UID: 0 PID: 13607 Comm: syz.0.3763 Not tainted syzkaller #0 PREEMPT(full) [ 116.659489][T13607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.659497][T13607] Call Trace: [ 116.659501][T13607] [ 116.659505][T13607] dump_stack_lvl+0x100/0x190 [ 116.659523][T13607] warn_alloc.cold+0x95/0x1c1 [ 116.659542][T13607] ? __pfx_warn_alloc+0x10/0x10 [ 116.659555][T13607] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 116.659568][T13607] ? lockdep_hardirqs_on+0x78/0x100 [ 116.659580][T13607] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 116.659596][T13607] ? kasan_save_stack+0x3f/0x50 [ 116.659609][T13607] ? kasan_save_stack+0x30/0x50 [ 116.659622][T13607] ? kasan_save_track+0x14/0x30 [ 116.659637][T13607] ? xskq_create+0xfb/0x1d0 [ 116.659648][T13607] __vmalloc_node_range_noprof+0x1252/0x1530 [ 116.659664][T13607] ? xskq_create+0xfb/0x1d0 [ 116.659679][T13607] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 116.659697][T13607] ? xskq_create+0xfb/0x1d0 [ 116.659707][T13607] vmalloc_user_noprof+0x9e/0xe0 [ 116.659718][T13607] ? xskq_create+0xfb/0x1d0 [ 116.659736][T13607] xskq_create+0xfb/0x1d0 [ 116.659748][T13607] xsk_setsockopt+0x725/0xa90 [ 116.659759][T13607] ? __pfx_xsk_setsockopt+0x10/0x10 [ 116.659770][T13607] ? find_held_lock+0x2b/0x80 [ 116.659783][T13607] ? aa_sock_opt_perm+0xfe/0x1b0 [ 116.659798][T13607] ? __pfx_xsk_setsockopt+0x10/0x10 [ 116.659810][T13607] do_sock_setsockopt+0xf3/0x1d0 [ 116.659823][T13607] __sys_setsockopt+0x119/0x190 [ 116.659841][T13607] __ia32_sys_setsockopt+0xbc/0x160 [ 116.659856][T13607] ? __do_fast_syscall_32+0x97/0x660 [ 116.659874][T13607] ? lockdep_hardirqs_on+0x78/0x100 [ 116.659890][T13607] __do_fast_syscall_32+0xde/0x660 [ 116.659910][T13607] do_fast_syscall_32+0x32/0x70 [ 116.659927][T13607] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.659946][T13607] RIP: 0023:0xf745d579 [ 116.659959][T13607] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 116.659975][T13607] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 116.659986][T13607] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 116.659993][T13607] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 116.660000][T13607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.660006][T13607] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 116.660012][T13607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.660027][T13607] [ 116.660032][T13607] Mem-Info: [ 116.744509][T13607] active_anon:1258 inactive_anon:300 isolated_anon:0 [ 116.744509][T13607] active_file:10909 inactive_file:4661 isolated_file:0 [ 116.744509][T13607] unevictable:1768 dirty:537 writeback:0 [ 116.744509][T13607] slab_reclaimable:5920 slab_unreclaimable:51720 [ 116.744509][T13607] mapped:23070 shmem:1846 pagetables:1222 [ 116.744509][T13607] sec_pagetables:311 bounce:0 [ 116.744509][T13607] kernel_misc_reclaimable:0 [ 116.744509][T13607] free:96690 free_pcp:7349 free_cma:0 [ 116.758384][T13607] Node 0 active_anon:364kB inactive_anon:80kB active_file:84kB inactive_file:520kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:404kB dirty:252kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9768kB pagetables:1544kB sec_pagetables:1144kB all_unreclaimable? yes Balloon:0kB [ 116.770412][T13607] Node 1 active_anon:4668kB inactive_anon:1120kB active_file:43552kB inactive_file:18124kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:91876kB dirty:1896kB writeback:0kB shmem:3848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:2984kB pagetables:3244kB sec_pagetables:100kB all_unreclaimable? no Balloon:0kB [ 116.780325][T13607] Node 0 DMA free:2716kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 116.789510][T13607] lowmem_reserve[]: 0 288 288 288 288 [ 116.791234][T13607] Node 0 DMA32 free:20700kB boost:4096kB min:17316kB low:20620kB high:23924kB reserved_highatomic:2048KB free_highatomic:192KB active_anon:364kB inactive_anon:80kB active_file:80kB inactive_file:520kB unevictable:3536kB writepending:248kB zspages:1300kB present:1032196kB managed:295104kB mlocked:0kB bounce:0kB free_pcp:6188kB local_pcp:1572kB free_cma:0kB [ 116.800871][T13607] lowmem_reserve[]: 0 0 0 0 0 [ 116.802430][T13607] Node 1 DMA32 free:363344kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4668kB inactive_anon:1120kB active_file:43552kB inactive_file:18124kB unevictable:3536kB writepending:1896kB zspages:4492kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:23288kB local_pcp:3108kB free_cma:0kB [ 116.812556][T13607] lowmem_reserve[]: 0 0 0 0 0 [ 116.814114][T13607] Node 0 DMA: 29*4kB (UM) 15*8kB (UM) 5*16kB (UM) 17*32kB (UM) 5*64kB (UM) 2*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2716kB [ 116.818807][T13607] Node 0 DMA32: 565*4kB (UMH) 337*8kB (UEH) 132*16kB (UMH) 144*32kB (UMEH) 53*64kB (UE) 14*128kB (UME) 7*256kB (U) 2*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 20700kB [ 116.824121][T13607] Node 1 DMA32: 2483*4kB (UE) 2144*8kB (UME) 1747*16kB (UM) 342*32kB (UM) 714*64kB (UME) 393*128kB (UME) 200*256kB (UME) 119*512kB (UM) 69*1024kB (UM) 3*2048kB (UM) 3*4096kB (UM) = 363196kB [ 116.830040][T13607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.833092][T13607] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 116.836194][T13607] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.839161][T13607] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 116.841941][T13607] 18123 total pagecache pages [ 116.843406][T13607] 710 pages in swap cache [ 116.844738][T13607] Free swap = 101668kB [ 116.846157][T13607] Total swap = 124996kB [ 116.847487][T13607] 524155 pages RAM [ 116.848681][T13607] 0 pages HighMem/MovableOnly [ 116.850274][T13607] 209486 pages reserved [ 116.852056][T13607] 0 pages cma reserved [ 116.928996][T13608] bond0: entered promiscuous mode [ 116.931241][T13608] bond_slave_0: entered promiscuous mode [ 116.942572][T13608] bond_slave_1: entered promiscuous mode [ 116.945151][T13608] bond0: entered allmulticast mode [ 116.947355][T13608] bond_slave_0: entered allmulticast mode [ 116.949839][T13608] bond_slave_1: entered allmulticast mode [ 117.392240][T13644] netlink: 'syz.0.3781': attribute type 1 has an invalid length. [ 117.497301][T13656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3787'. [ 117.562086][T13665] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 117.867804][ T6110] Bluetooth: hci0: command 0x0406 tx timeout [ 118.030334][ T40] audit: type=1326 audit(2000000302.896:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13731 comm="syz.0.3825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 118.041429][ T40] audit: type=1326 audit(2000000302.896:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13731 comm="syz.0.3825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 118.051326][ T40] audit: type=1326 audit(2000000302.914:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13731 comm="syz.0.3825" exe="/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 118.070530][ T40] audit: type=1326 audit(2000000302.914:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13731 comm="syz.0.3825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 118.081413][ T40] audit: type=1326 audit(2000000302.914:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13731 comm="syz.0.3825" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 118.083253][T13741] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 118.096958][T13741] /dev/nullb0: Can't open blockdev [ 118.165752][T13752] efs: device does not support 512 byte blocks [ 118.167696][T13752] device does not support 512 byte blocks [ 118.167696][T13752] [ 118.438756][T13798] ip6t_srh: unknown srh invflags 4000 [ 118.602244][T13819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3869'. [ 118.776906][T13846] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3880'. [ 118.893698][T13866] netlink: 'syz.3.3891': attribute type 12 has an invalid length. [ 118.975959][T13879] netlink: 'syz.2.3895': attribute type 5 has an invalid length. [ 119.025166][T13887] netlink: 'syz.2.3900': attribute type 10 has an invalid length. [ 119.030166][T13887] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3900'. [ 119.034125][T13887] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 119.038607][T13887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.116460][T13904] netlink: 'syz.3.3910': attribute type 1 has an invalid length. [ 119.118935][T13904] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3910'. [ 119.121712][T13904] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3910'. [ 119.125866][T13904] netlink: 658 bytes leftover after parsing attributes in process `syz.3.3910'. [ 119.308379][T13935] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3927'. [ 119.558001][T13975] overlayfs: conflicting options: userxattr,metacopy=on [ 119.602756][T13981] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3948'. [ 120.086900][T14054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3985'. [ 120.260830][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3997'. [ 120.317184][ T40] audit: type=1326 audit(2000000305.038:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14084 comm="syz.0.4001" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 120.327289][ T40] audit: type=1326 audit(2000000305.038:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14084 comm="syz.0.4001" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 120.346543][ T40] audit: type=1326 audit(2000000305.047:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14084 comm="syz.0.4001" exe="/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 120.357371][ T40] audit: type=1326 audit(2000000305.047:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14084 comm="syz.0.4001" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 120.374115][ T40] audit: type=1326 audit(2000000305.047:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14084 comm="syz.0.4001" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 120.493421][T14110] IPv6: sit1: Disabled Multicast RS [ 120.669683][T14141] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 120.867637][T14169] bond1: option arp_interval: invalid value (18446744073709551615) [ 120.871037][T14169] bond1: option arp_interval: allowed values 0 - 2147483647 [ 120.875818][T14169] bond1 (unregistering): Released all slaves [ 121.287617][T14228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 121.293745][T14228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 121.298797][T14228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 121.303411][T14228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 121.310880][T14228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 121.315415][T14228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 121.319874][T14228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 121.323887][T14228] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 121.329351][T14228] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 121.347255][ T29] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 121.522964][ T29] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.525521][ T29] usb 5-1: config 0 has no interface number 0 [ 121.527328][ T29] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 121.532780][ T29] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.535628][ T29] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 121.539179][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.541312][T14255] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 121.547229][T14255] overlayfs: overlapping lowerdir path [ 121.547870][ T29] usb 5-1: config 0 descriptor?? [ 121.559056][ T29] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 121.650392][T14269] tmpfs: Bad value for 'mpol' [ 121.775511][T14204] iowarrior 5-1:0.1: Error -90 while submitting URB [ 121.790224][ T34] usb 5-1: USB disconnect, device number 4 [ 121.823836][T14291] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.4102' sets config #1 [ 121.872323][T14295] netlink: 'syz.1.4104': attribute type 4 has an invalid length. [ 122.139671][T14325] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 122.543566][T14378] netlink: 'syz.1.4146': attribute type 1 has an invalid length. [ 122.558048][T14381] program syz.0.4145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.575631][T14385] openvswitch: netlink: nsh attribute has 446 unknown bytes. [ 122.706541][T14398] xt_CT: No such helper "pptp" [ 122.818259][T14425] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 122.909338][T14440] dvmrp1: entered allmulticast mode [ 123.178635][T14479] netlink: 'syz.2.4192': attribute type 1 has an invalid length. [ 123.441349][T14526] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 123.443825][T14526] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 123.448769][T14526] vhci_hcd vhci_hcd.0: Device attached [ 123.454075][T14527] vhci_hcd: unknown pdu 2 [ 123.460349][ T1141] vhci_hcd vhci_hcd.3: stop threads [ 123.462765][ T1141] vhci_hcd vhci_hcd.3: release socket [ 123.464877][T14531] libceph: resolve '400' (ret=-3): failed [ 123.466791][ T1141] vhci_hcd vhci_hcd.3: disconnect device [ 123.843842][T14591] netlink: 'syz.2.4246': attribute type 2 has an invalid length. [ 123.907324][T14599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.957640][T14606] netlink: 'syz.1.4253': attribute type 5 has an invalid length. [ 123.960950][T14606] __nla_validate_parse: 12 callbacks suppressed [ 123.960966][T14606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4253'. [ 124.106416][T14630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4265'. [ 124.169273][T14639] nft_compat: unsupported protocol 0 [ 124.209627][T14649] netlink: 'syz.0.4273': attribute type 1 has an invalid length. [ 124.235809][T14652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4276'. [ 124.278984][T14661] openvswitch: netlink: IPv6 tunnel dst address is zero [ 124.563699][T14709] netlink: 'syz.1.4304': attribute type 10 has an invalid length. [ 124.578019][T14709] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 124.624206][T14720] SET target dimension over the limit! [ 124.884810][T14772] Cannot find del_set index 8 as target [ 125.105258][T14819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.362597][T14867] ptrace attach of "/syz-executor exec"[14869] was attempted by "/syz-executor exec"[14867] [ 125.627145][T14903] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 125.727617][ C2] sr 2:0:0:0: [sr0] tag#7 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 125.730904][ C2] sr 2:0:0:0: [sr0] tag#7 CDB: Recover Buffered Data [ 125.733005][ C2] sr 2:0:0:0: [sr0] tag#7 CDB[00]: 14 b0 d9 f0 eb 69 52 0d 64 19 83 60 e1 0c 8d 37 [ 125.735873][ C2] sr 2:0:0:0: [sr0] tag#7 CDB[10]: d5 [ 125.869874][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4420'. [ 125.892158][T14950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4422'. [ 125.896494][T14950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4422'. [ 125.984307][T14962] QAT: Device 253 not found [ 125.988168][T14964] nftables ruleset with unbound chain [ 126.168213][T14999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4446'. [ 126.207899][T15003] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 126.213576][T15003] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 126.260684][T15007] gtp0: entered promiscuous mode [ 126.262869][T15007] gtp0: entered allmulticast mode [ 126.268036][T15009] vlan0: entered promiscuous mode [ 126.359293][T15026] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 126.724984][T15082] netlink: 'syz.0.4486': attribute type 9 has an invalid length. [ 126.728929][T15082] netlink: 191164 bytes leftover after parsing attributes in process `syz.0.4486'. [ 126.842257][T15104] bond0: (slave dummy0): Releasing backup interface [ 126.853713][T15104] bridge_slave_1: left allmulticast mode [ 126.855799][T15104] bridge_slave_1: left promiscuous mode [ 126.857735][T15104] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.869741][T15104] bond0: (slave bond_slave_0): Releasing backup interface [ 126.881849][T15104] bond0: (slave bond_slave_1): Releasing backup interface [ 126.898749][T15104] team0: Port device team_slave_0 removed [ 126.910850][T15104] team0: Port device team_slave_1 removed [ 126.913451][T15104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.915786][T15104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.920304][T15104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.923400][T15104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.928511][T15104] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 127.363990][T15167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4526'. [ 127.754912][T15211] Process accounting paused [ 127.960338][T15250] dlm: plock device version mismatch: kernel (1.2.0), user (1.1792.0) [ 128.323632][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4584'. [ 128.482874][T15334] netlink: 'syz.0.4595': attribute type 10 has an invalid length. [ 128.485790][T15336] netlink: 'syz.3.4598': attribute type 12 has an invalid length. [ 128.487178][T15334] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.500506][T15334] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.503705][T15334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.511304][T15334] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 128.537750][T15342] xt_nat: multiple ranges no longer supported [ 128.785196][T15382] 8021q: VLANs not supported on lo [ 128.929632][T15399] : renamed from dummy0 (while UP) [ 128.971569][T15402] netlink: 'syz.2.4631': attribute type 1 has an invalid length. [ 128.993968][T15406] netlink: 'syz.3.4633': attribute type 3 has an invalid length. [ 129.018469][T15408] bridge_slave_0: left allmulticast mode [ 129.020333][T15408] bridge_slave_0: left promiscuous mode [ 129.023244][T15408] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.036825][T15408] bridge_slave_1: left allmulticast mode [ 129.039714][T15408] bridge_slave_1: left promiscuous mode [ 129.042591][T15408] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.081767][T15408] bond0: (slave bond_slave_0): Releasing backup interface [ 129.102767][T15408] bond0: (slave bond_slave_1): Releasing backup interface [ 129.114661][T15408] team0: Port device team_slave_0 removed [ 129.123481][T15408] team0: Port device team_slave_1 removed [ 129.127114][T15408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.130924][T15408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.136014][T15408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.139622][T15408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.152584][T15408] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 129.342216][T15442] netlink: 'syz.2.4651': attribute type 10 has an invalid length. [ 129.359406][T15442] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 129.426415][T15452] bridge_slave_1: left allmulticast mode [ 129.428913][T15452] bridge_slave_1: left promiscuous mode [ 129.431323][T15452] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.442382][T15452] bond0: (slave bond_slave_0): Releasing backup interface [ 129.447188][T15452] bond_slave_0: left promiscuous mode [ 129.449625][T15452] bond_slave_0: left allmulticast mode [ 129.455991][T15452] bond0: (slave bond_slave_1): Releasing backup interface [ 129.459780][T15452] bond_slave_1: left promiscuous mode [ 129.462958][T15452] bond_slave_1: left allmulticast mode [ 129.477147][T15452] team0: Port device team_slave_0 removed [ 129.489339][T15452] team0: Port device team_slave_1 removed [ 129.492232][T15452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.500169][T15452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.506552][T15452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.510250][T15452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.517313][T15452] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 129.530411][T15457] __nla_validate_parse: 5 callbacks suppressed [ 129.530433][T15457] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4659'. [ 129.581407][T15466] netlink: 288 bytes leftover after parsing attributes in process `syz.0.4663'. [ 129.599155][T15470] netlink: 'syz.1.4665': attribute type 1 has an invalid length. [ 129.604124][T15470] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4665'. [ 129.652017][T15476] program syz.2.4668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.881625][T15510] netlink: 'syz.2.4685': attribute type 12 has an invalid length. [ 129.884865][T15510] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4685'. [ 129.971943][T15518] usb usb2: usbfs: process 15518 (syz.1.4690) did not claim interface 0 before use [ 130.091570][T15543] syz.2.4700 uses obsolete (PF_INET,SOCK_PACKET) [ 130.164501][T15552] netlink: 'syz.2.4705': attribute type 1 has an invalid length. [ 130.205250][T15558] IPv6: Can't replace route, no match found [ 130.341163][ T40] audit: type=1326 audit(2000000314.420:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15574 comm="syz.0.4716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 130.344812][T15577] program syz.3.4717 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.349678][ T40] audit: type=1326 audit(2000000314.420:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15574 comm="syz.0.4716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 130.349716][ T40] audit: type=1326 audit(2000000314.420:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15574 comm="syz.0.4716" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 130.349756][ T40] audit: type=1326 audit(2000000314.420:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15574 comm="syz.0.4716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 130.349785][ T40] audit: type=1326 audit(2000000314.420:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15574 comm="syz.0.4716" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 130.500173][ T6083] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 130.659979][ T6083] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 130.663341][ T6083] usb 7-1: config 0 has no interface number 0 [ 130.679173][ T6083] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 130.690986][ T6083] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.694297][ T6083] usb 7-1: Product: syz [ 130.695945][ T6083] usb 7-1: Manufacturer: syz [ 130.697907][ T6083] usb 7-1: SerialNumber: syz [ 130.700972][ T6083] usb 7-1: config 0 descriptor?? [ 130.707969][ T6083] hub 7-1:0.132: bad descriptor, ignoring hub [ 130.710513][ T6083] hub 7-1:0.132: probe with driver hub failed with error -5 [ 130.716636][ T6083] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.132/input/input12 [ 130.884881][T15622] ip6erspan0: entered promiscuous mode [ 130.887402][T15622] ip6erspan0: entered allmulticast mode [ 131.067220][T15647] netlink: 'syz.3.4751': attribute type 1 has an invalid length. [ 131.081752][T15649] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 131.110646][T15651] netlink: 'syz.0.4755': attribute type 3 has an invalid length. [ 131.114340][T15651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4755'. [ 131.637198][T15714] SET target dimension over the limit! [ 131.772048][T15728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4792'. [ 131.862883][T15736] bond1: entered promiscuous mode [ 131.864957][T15736] bond1: entered allmulticast mode [ 131.867751][T15736] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.908460][T15740] gretap0: refused to change device tx_queue_len [ 131.912026][T15740] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 132.154770][ T60] usb 7-1: USB disconnect, device number 5 [ 132.157652][T15761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.343867][T15795] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 132.463199][T15812] tipc: Trying to set illegal importance in message [ 132.601206][T15836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.887915][T15875] random: crng reseeded on system resumption [ 133.076284][T15904] overlayfs: conflicting options: userxattr,redirect_dir=on [ 133.140328][T15913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4884'. [ 133.181566][ T6110] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 133.306823][T15939] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 133.366328][T15947] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 133.369015][T15947] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 133.372342][T15947] vhci_hcd vhci_hcd.0: Device attached [ 133.386902][T15948] vhci_hcd: unknown pdu 1 [ 133.390383][ T1141] vhci_hcd vhci_hcd.3: stop threads [ 133.392691][ T1141] vhci_hcd vhci_hcd.3: release socket [ 133.394951][ T1141] vhci_hcd vhci_hcd.3: disconnect device [ 133.461771][T15962] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 133.733144][T15999] binder: 15997:15999 ioctl c00c620f 800005c0 returned -22 [ 133.783407][T16005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4929'. [ 133.923920][T16026] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4939'. [ 134.144823][T16057] netlink: 532 bytes leftover after parsing attributes in process `syz.0.4954'. [ 134.616065][T16127] debugfs: '1^!l1*$pOcɔr$G' already exists in 'ieee80211' [ 134.846441][T16158] overlayfs: failed to resolve './file1': -2 [ 134.969142][T16176] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 134.989258][T16179] __nla_validate_parse: 2 callbacks suppressed [ 134.989269][T16179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5014'. [ 135.034284][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5017'. [ 135.156055][T16198] xt_CT: No such helper "snmp" [ 135.278294][T16216] Cannot find add_set index 3 as target [ 135.329188][T16226] gre1: entered promiscuous mode [ 135.338805][T16228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5038'. [ 135.391356][T16234] netlink: del zone limit has 4 unknown bytes [ 135.431914][T16240] validate_nla: 6 callbacks suppressed [ 135.431932][T16240] netlink: 'syz.3.5043': attribute type 1 has an invalid length. [ 135.437613][T16240] netlink: 'syz.3.5043': attribute type 1 has an invalid length. [ 135.579123][T16264] debugfs: '1^!l1*$pOcɔr$G' already exists in 'ieee80211' [ 135.657403][T16147] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.708456][T16280] netlink: 'syz.1.5061': attribute type 5 has an invalid length. [ 136.152990][T16348] Unknown options in mask b7f2 [ 136.352131][T16374] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5108'. [ 136.361235][T16376] QAT: failed to copy from user cfg_data. [ 136.572074][T16410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5124'. [ 136.596592][T16412] netlink: 45 bytes leftover after parsing attributes in process `syz.3.5127'. [ 136.642654][T16420] netlink: 'syz.0.5130': attribute type 3 has an invalid length. [ 136.645287][T16420] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5130'. [ 136.770493][T16438] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5139'. [ 136.838689][T16446] netlink: 'syz.1.5143': attribute type 21 has an invalid length. [ 136.842038][T16446] netlink: 'syz.1.5143': attribute type 1 has an invalid length. [ 136.845227][T16446] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5143'. [ 136.903040][ T1121] sr 2:0:0:0: [sr0] tag#20 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 136.907235][ T1121] sr 2:0:0:0: [sr0] tag#20 Sense Key : Illegal Request [current] [ 136.911063][ T1121] sr 2:0:0:0: [sr0] tag#20 Add. Sense: Invalid command operation code [ 136.914591][ T1121] sr 2:0:0:0: [sr0] tag#20 CDB: Write(10) 2a 00 00 00 00 00 00 00 04 00 [ 136.917822][ T1121] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 2 prio class 2 [ 136.922345][ T1121] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 136.927124][ T1121] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 136.934547][ T6110] Bluetooth: hci0: command 0x0406 tx timeout [ 137.096545][T16490] netlink: 'syz.1.5165': attribute type 1 has an invalid length. [ 137.099848][T16490] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5165'. [ 137.116034][T16494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.412513][T16543] openvswitch: netlink: Message has 4 unknown bytes. [ 137.414807][T16543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.430112][T16547] openvswitch: netlink: Flow key attribute not present in set flow. [ 137.507619][T16564] PKCS8: Unsupported PKCS#8 version [ 137.712201][T16597] xt_hashlimit: size too large, truncated to 1048576 [ 137.716239][T16597] xt_hashlimit: max too large, truncated to 1048576 [ 137.803626][T16601] wireguard0: entered promiscuous mode [ 137.806137][T16601] wireguard0: entered allmulticast mode [ 137.808014][ T40] audit: type=1400 audit(2000000321.398:46): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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xt_bpf: check failed: parse error [ 138.145059][T16670] sctp: [Deprecated]: syz.2.5254 (pid 16670) Use of int in max_burst socket option deprecated. [ 138.145059][T16670] Use struct sctp_assoc_value instead [ 138.180813][T16678] random: crng reseeded on system resumption [ 138.276262][T16699] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 138.410543][T16723] ./bus: Can't lookup blockdev [ 138.657440][T16763] QAT: failed to copy from user cfg_data. [ 138.695099][T16771] openvswitch: netlink: Actions may not be safe on all matching packets [ 138.913895][T16809] netlink: 'syz.3.5323': attribute type 12 has an invalid length. [ 138.975399][T16814] tc_dump_action: action bad kind [ 139.054014][T16823] ubi31: attaching mtd0 [ 139.056840][T16823] ubi31: scanning is finished [ 139.058644][T16823] ubi31: empty MTD device detected [ 139.210225][T16837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.839005][T16823] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 139.842146][T16823] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 139.844930][T16823] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 139.847729][T16823] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 139.850904][T16823] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 139.854224][T16823] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 139.857463][T16823] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3458753204 [ 139.861168][T16823] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 139.865556][T16867] ubi31: background thread "ubi_bgt31d" started, PID 16867 [ 139.892409][T16874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.253665][T16921] random: crng reseeded on system resumption [ 140.255580][T16922] binder: 16920:16922 ioctl 4018620d 0 returned -22 [ 140.263150][T16921] Unrecognized hibernate image header format! [ 140.265984][T16921] PM: hibernation: Image mismatch: architecture specific data [ 140.332286][T16932] openvswitch: netlink: Duplicate or invalid key (type 0). [ 140.337614][T16932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.389800][T16940] netlink: 'syz.0.5387': attribute type 1 has an invalid length. [ 140.395894][T16940] __nla_validate_parse: 7 callbacks suppressed [ 140.395910][T16940] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5387'. [ 140.802684][T16986] mmap: syz.0.5409 (16986): VmData 37376000 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 140.929001][T17004] overlayfs: empty lowerdir [ 141.078461][T17024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.502047][T17083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5452'. [ 141.620730][T16976] orangefs_mount: mount request failed with -4 [ 141.725190][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.727553][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.884318][T17125] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5473'. [ 141.890485][T17127] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5474'. [ 141.898259][T17129] netlink: 'syz.1.5475': attribute type 21 has an invalid length. [ 141.901073][T17129] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5475'. [ 141.905482][T17129] netlink: 'syz.1.5475': attribute type 5 has an invalid length. [ 141.908741][T17129] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5475'. [ 142.180719][T17162] netlink: 'syz.3.5491': attribute type 10 has an invalid length. [ 142.185821][T17162] team0: Device ipvlan0 failed to register rx_handler [ 142.357815][T17193] netlink: 'syz.0.5506': attribute type 1 has an invalid length. [ 142.416046][T17206] netlink: zone id is out of range [ 142.448496][T17206] netlink: set zone limit has 4 unknown bytes [ 142.609816][T17239] sctp: [Deprecated]: syz.2.5530 (pid 17239) Use of int in max_burst socket option. [ 142.609816][T17239] Use struct sctp_assoc_value instead [ 142.650725][T17245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.657300][T17248] netlink: 'syz.1.5533': attribute type 1 has an invalid length. [ 142.660543][T17248] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5533'. [ 142.966273][T17288] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5554'. [ 142.969441][T17288] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5554'. [ 143.068426][T17310] : renamed from veth0_vlan (while UP) [ 143.152362][T17322] QAT: Stopping all acceleration devices. [ 143.285950][T17343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5580'. [ 143.291464][T17345] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 143.294392][T17345] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 143.618486][T17401] netlink: 'syz.1.5609': attribute type 2 has an invalid length. [ 143.674780][T17414] netlink: 'syz.3.5615': attribute type 11 has an invalid length. [ 143.742444][T17423] Cannot find add_set index 2 as target [ 143.769565][T17427] gfs2: gfs2 mount does not exist [ 143.907075][T17455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.975249][T17466] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 144.153947][T17493] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 144.163855][T17495] usb usb8: usbfs: process 17495 (syz.0.5656) did not claim interface 0 before use [ 144.391447][T17527] netlink: 'syz.3.5672': attribute type 12 has an invalid length. [ 144.544500][T17554] netlink: 'syz.0.5683': attribute type 1 has an invalid length. [ 144.662145][T17568] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.980913][T17619] netlink: 'syz.0.5716': attribute type 10 has an invalid length. [ 144.983997][T17619] : entered promiscuous mode [ 144.986467][T17619] bridge0: port 1() entered blocking state [ 144.988503][T17619] bridge0: port 1() entered disabled state [ 144.991065][T17619] : entered allmulticast mode [ 144.995029][T17619] bridge0: port 1() entered blocking state [ 144.996986][T17619] bridge0: port 1() entered forwarding state [ 144.999001][T17621] netlink: 'syz.3.5717': attribute type 2 has an invalid length. [ 145.093225][T17636] bridge4: entered allmulticast mode [ 145.330923][T17680] random: crng reseeded on system resumption [ 145.446167][T17703] xt_connbytes: Forcing CT accounting to be enabled [ 145.449200][T17703] xt_TPROXY: Can be used only with -p tcp or -p udp [ 145.505777][T17711] 9pnet_fd: Insufficient options for proto=fd [ 145.750430][ T40] audit: type=1326 audit(2000000328.825:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz.2.5786" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 145.758075][ T40] audit: type=1326 audit(2000000328.825:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz.2.5786" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 145.766171][ T40] audit: type=1326 audit(2000000328.825:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz.2.5786" exe="/syz-executor" sig=0 arch=40000003 syscall=401 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 145.916813][T17790] __nla_validate_parse: 10 callbacks suppressed [ 145.916833][T17790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5801'. [ 145.967515][T17798] net_ratelimit: 2 callbacks suppressed [ 145.967532][T17798] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 146.009668][T17804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5808'. [ 146.062620][T17811] sock: sock_set_timeout: `syz.3.5812' (pid 17811) tries to set negative timeout [ 146.104745][T17817] openvswitch: netlink: Flow key attr not present in new flow. [ 146.268331][T17843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5827'. [ 146.271537][T17843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5827'. [ 146.338104][T17852] bridge1: entered promiscuous mode [ 146.339922][T17852] bridge1: entered allmulticast mode [ 146.634431][T17894] program syz.0.5851 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.674039][T17900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.753206][T17915] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 146.911949][T17943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5875'. [ 146.963885][T17954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.005375][T17961] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5882'. [ 147.065419][T17971] tmpfs: Bad value for 'mpol' [ 147.520915][T18046] ieee802154 phy0 wpan0: encryption failed: -22 [ 147.526752][ T40] audit: type=1326 audit(2000000330.490:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18047 comm="syz.1.5927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 147.532789][T18041] bond2: Removing last ns target with arp_interval on [ 147.539283][ T40] audit: type=1326 audit(2000000330.490:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18047 comm="syz.1.5927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 147.546550][ T40] audit: type=1326 audit(2000000330.509:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18047 comm="syz.1.5927" exe="/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 147.556868][ T40] audit: type=1326 audit(2000000330.509:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18047 comm="syz.1.5927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 147.574107][ T40] audit: type=1326 audit(2000000330.509:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18047 comm="syz.1.5927" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 147.620434][T18062] validate_nla: 7 callbacks suppressed [ 147.620446][T18062] netlink: 'syz.2.5934': attribute type 16 has an invalid length. [ 147.625194][T18062] netlink: 'syz.2.5934': attribute type 3 has an invalid length. [ 147.627685][T18062] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5934'. [ 147.787038][T18093] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 147.968025][T18117] program syz.3.5961 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.972543][T18117] ata1.00: invalid transfer count 0 [ 148.940551][T18184] netlink: 'syz.3.5993': attribute type 12 has an invalid length. [ 149.243865][T18206] sp0: Synchronizing with TNC [ 149.443603][T18223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6012'. [ 149.565243][T18235] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6018'. [ 149.569108][T18235] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 149.736579][T18253] netlink: 'syz.3.6028': attribute type 11 has an invalid length. [ 149.740282][T18253] netlink: 448 bytes leftover after parsing attributes in process `syz.3.6028'. [ 149.763773][T18256] netlink: 'syz.2.6029': attribute type 4 has an invalid length. [ 150.185807][T18306] netlink: 'syz.3.6053': attribute type 21 has an invalid length. [ 150.189244][T18306] netlink: 'syz.3.6053': attribute type 1 has an invalid length. [ 150.396612][T18308] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 150.405202][T18312] geneve3: entered promiscuous mode [ 150.407338][T18312] geneve3: entered allmulticast mode [ 151.275509][T18415] fuse: Invalid rootmode [ 151.615612][T18443] 9pnet_fd: p9_fd_create_tcp (18443): problem connecting socket to 127.0.0.1 [ 151.765589][T18461] netlink: 'syz.2.6129': attribute type 1 has an invalid length. [ 151.776290][T18463] openvswitch: netlink: Actions may not be safe on all matching packets [ 151.929941][T18482] __nla_validate_parse: 4 callbacks suppressed [ 151.929954][T18482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6139'. [ 151.934763][T18482] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6139'. [ 151.937546][T18482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6139'. [ 151.940389][T18482] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6139'. [ 151.943307][T18482] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6139'. [ 151.955944][T18485] EXT4-fs (nbd3): unable to read superblock [ 151.983756][T18489] binder: 18487:18489 ioctl 40046210 0 returned -14 [ 152.070736][T18497] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 152.109388][T18503] netlink: 'syz.3.6150': attribute type 1 has an invalid length. [ 152.111899][T18503] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6150'. [ 152.153587][T18510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.267316][T18517] 9p: Unknown Cache mode or invalid value fscach [ 152.297902][T18519] nfs: Unknown parameter 'ntext' [ 152.300839][T18521] netlink: 'syz.2.6159': attribute type 1 has an invalid length. [ 152.391312][T18529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6163'. [ 152.535327][ T40] audit: type=1326 audit(2000000335.176:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18544 comm="syz.2.6171" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 152.559285][ T40] audit: type=1326 audit(2000000335.176:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18544 comm="syz.2.6171" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 152.569316][ T40] audit: type=1326 audit(2000000335.186:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18544 comm="syz.2.6171" exe="/syz-executor" sig=0 arch=40000003 syscall=243 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 152.578674][ T40] audit: type=1326 audit(2000000335.186:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18544 comm="syz.2.6171" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 152.579172][T18550] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 152.589067][ T40] audit: type=1326 audit(2000000335.186:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18544 comm="syz.2.6171" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 152.651412][T18554] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6175'. [ 152.655399][T18554] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 153.279354][T18599] bond3: Removing last arp target with arp_interval on [ 153.358655][T18614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6203'. [ 153.562455][T18646] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.6219'. [ 153.565956][T18646] openvswitch: netlink: Missing key (keys=40, expected=100) [ 153.701598][ T40] audit: type=1326 audit(2000000336.271:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.1.6228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 153.718517][ T40] audit: type=1326 audit(2000000336.271:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.1.6228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 153.725135][ T40] audit: type=1326 audit(2000000336.271:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.1.6228" exe="/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 153.732508][ T40] audit: type=1326 audit(2000000336.271:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.1.6228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 153.739160][ T40] audit: type=1326 audit(2000000336.271:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.1.6228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 153.806772][T18683] openvswitch: netlink: Key type 31 is not supported [ 154.368850][T18774] netlink: 'syz.3.6282': attribute type 3 has an invalid length. [ 154.371544][T18774] netlink: 'syz.3.6282': attribute type 3 has an invalid length. [ 154.452890][T18791] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 154.764518][T18836] tmpfs: Bad value for 'mpol' [ 154.887190][T18852] set match dimension is over the limit! [ 155.383456][T18938] tmpfs: Bad value for 'mpol' [ 155.667513][T18987] tmpfs: Bad value for 'mpol' [ 155.805443][T19007] tunl0: entered promiscuous mode [ 155.809808][T19007] netlink: 'syz.0.6396': attribute type 4 has an invalid length. [ 156.425416][T19109] netlink: 'syz.0.6447': attribute type 4 has an invalid length. [ 156.805967][T19169] xt_hashlimit: overflow, try lower: 2251799813685252/32768 [ 157.217535][T19233] Invalid source name [ 157.218879][T19233] UBIFS error (pid: 19233): cannot open "./file0", error -22 [ 157.383858][T19264] __nla_validate_parse: 7 callbacks suppressed [ 157.383872][T19264] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6524'. [ 157.388997][T19266] netlink: 'syz.0.6525': attribute type 2 has an invalid length. [ 157.392285][T19266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6525'. [ 157.506405][T19287] netlink: 1076 bytes leftover after parsing attributes in process `syz.1.6536'. [ 157.815347][T19336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6559'. [ 157.963601][T19354] netlink: 'syz.2.6568': attribute type 61 has an invalid length. [ 157.963633][T19354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6568'. [ 157.993749][T19360] netlink: 'syz.2.6571': attribute type 1 has an invalid length. [ 158.299780][T19400] kernel profiling enabled (shift: 5) [ 158.383259][T19410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6596'. [ 158.391604][T19414] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6599'. [ 158.691161][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 158.849791][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 158.849956][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 158.855340][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 158.859523][ T24] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 158.863045][ T24] usb 7-1: config 0 has no interface number 0 [ 158.865682][ T24] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 158.868680][T19468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6625'. [ 158.870224][ T24] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 158.878360][ T24] usb 7-1: config 0 interface 88 has no altsetting 0 [ 158.884249][ T24] usb 7-1: string descriptor 0 read error: -22 [ 158.887000][ T24] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 158.890979][ T24] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 158.907770][ T24] usb 7-1: config 0 descriptor?? [ 158.914182][ T24] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.88/input/input21 [ 158.949743][T19478] nbd: illegal input index 2958377 [ 159.034142][ T29] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 159.037643][ T29] usb 8-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 159.040455][ T29] usb 8-1: config 220 interface 0 has no altsetting 0 [ 159.045291][ T29] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 159.048104][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.052304][T19490] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6636'. [ 159.052734][ T29] usb 8-1: Product: syz [ 159.057934][ T29] usb 8-1: Manufacturer: syz [ 159.059410][ T29] usb 8-1: SerialNumber: syz [ 159.117039][T18209] udevd[18209]: Error opening device "/dev/input/event4": Input/output error [ 159.121220][T18209] udevd[18209]: Unable to EVIOCGABS device "/dev/input/event4" [ 159.124379][T18209] udevd[18209]: Unable to EVIOCGABS device "/dev/input/event4" [ 159.173423][T19504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6643'. [ 159.212379][ T53] usb 7-1: USB disconnect, device number 6 [ 159.279702][ T6110] Bluetooth: hci3: Malformed LE Event: 0x1b [ 159.285935][ T29] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 159.288466][ T29] uvcvideo 8-1:220.0: No valid video chain found. [ 159.294368][ T29] usb 8-1: USB disconnect, device number 5 [ 159.780880][T19566] process 'syz.2.6673' launched '/dev/fd/3' with NULL argv: empty string added [ 159.830719][T19568] Process accounting resumed [ 159.834200][T19572] netlink: 'syz.0.6675': attribute type 1 has an invalid length. [ 160.319220][T19642] gfs2: error -5 reading superblock [ 160.399889][T19648] netlink: 'syz.3.6714': attribute type 1 has an invalid length. [ 160.402881][T19648] netlink: 'syz.3.6714': attribute type 2 has an invalid length. [ 160.614819][T19684] netlink: 'syz.0.6732': attribute type 11 has an invalid length. [ 160.619341][T19686] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.704362][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 160.704375][ T40] audit: type=1326 audit(2000000342.819:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19693 comm="syz.1.6738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 160.718038][ T40] audit: type=1326 audit(2000000342.819:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19693 comm="syz.1.6738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 160.726586][ T40] audit: type=1326 audit(2000000342.819:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19693 comm="syz.1.6738" exe="/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 160.733789][ T40] audit: type=1326 audit(2000000342.819:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19693 comm="syz.1.6738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 160.740723][ T40] audit: type=1326 audit(2000000342.819:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19693 comm="syz.1.6738" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 161.046908][T19728] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 161.199827][T19745] binder: BC_ACQUIRE_RESULT not supported [ 161.209281][T19745] binder: 19744:19745 ioctl c0306201 80004a40 returned -22 [ 161.292046][T19751] random: crng reseeded on system resumption [ 161.441300][T19773] IPv6: NLM_F_CREATE should be specified when creating new route [ 161.444978][T19773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.448185][T19773] IPv6: NLM_F_CREATE should be set when creating new route [ 161.488526][T19778] xt_hashlimit: overflow, rate too high: 0 [ 161.679361][ T40] audit: type=1326 audit(2000000343.726:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19805 comm="syz.3.6792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 161.689826][ T40] audit: type=1326 audit(2000000343.726:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19805 comm="syz.3.6792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 161.699087][ T40] audit: type=1326 audit(2000000343.726:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19805 comm="syz.3.6792" exe="/syz-executor" sig=0 arch=40000003 syscall=402 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 161.708309][ T40] audit: type=1326 audit(2000000343.726:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19805 comm="syz.3.6792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 161.717966][ T40] audit: type=1326 audit(2000000343.726:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19805 comm="syz.3.6792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 161.821461][T19827] netlink: 'syz.1.6803': attribute type 10 has an invalid length. [ 161.824588][T19827] : entered allmulticast mode [ 161.847391][T19827] : left promiscuous mode [ 161.850847][T19827] : entered promiscuous mode [ 161.859652][T19827] team0: Device  failed to register rx_handler [ 162.249255][T19883] syz.1.6830 (19883): /proc/19882/oom_adj is deprecated, please use /proc/19882/oom_score_adj instead. [ 162.323885][T19891] netlink: 'syz.2.6834': attribute type 4 has an invalid length. [ 162.566645][T19933] netlink: 'syz.2.6855': attribute type 10 has an invalid length. [ 162.570161][T19933] veth0_vlan: entered allmulticast mode [ 162.588501][T19933] team0: Device veth0_vlan failed to register rx_handler [ 162.621948][T19939] xt_hashlimit: invalid interval [ 162.753533][T19957] vivid-002: ================= START STATUS ================= [ 162.757550][T19957] vivid-002: RDS Tx I/O Mode: Controls [ 162.760235][T19957] vivid-002: RDS Program ID: 32904 [ 162.764204][T19957] vivid-002: RDS Program Type: 3 [ 162.766412][T19957] vivid-002: RDS PS Name: VIVID-TX [ 162.768369][T19957] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 162.772043][T19957] vivid-002: RDS Stereo: true [ 162.774186][T19957] vivid-002: RDS Artificial Head: false [ 162.775999][T19957] vivid-002: RDS Compressed: false [ 162.777658][T19957] vivid-002: RDS Dynamic PTY: false [ 162.779344][T19957] vivid-002: RDS Traffic Announcement: false [ 162.781338][T19957] vivid-002: RDS Traffic Program: true [ 162.783138][T19957] vivid-002: RDS Music: true [ 162.785100][T19957] vivid-002: ================== END STATUS ================== [ 162.841533][T19969] __nla_validate_parse: 3 callbacks suppressed [ 162.841547][T19969] netlink: 288 bytes leftover after parsing attributes in process `syz.1.6873'. [ 162.992438][T19995] autofs4:pid:19995:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 163.099986][ C0] sd 0:0:0:0: [sda] tag#17 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 163.103299][ C0] sd 0:0:0:0: [sda] tag#17 CDB: Test Unit Ready [ 163.103374][T20013] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6895'. [ 163.109884][T20013] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6895'. [ 163.114028][T20013] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6895'. [ 163.117382][T20013] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6895'. [ 164.044339][T20039] netlink: 'syz.1.6908': attribute type 1 has an invalid length. [ 164.401506][T20084] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.457758][T20092] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6934'. [ 164.461608][T20092] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6934'. [ 164.660535][T20129] dlm: no locking on control device [ 165.049017][T20183] batadv0: entered promiscuous mode [ 165.088814][T20189] xt_TCPMSS: Only works on TCP SYN packets [ 165.164498][T20204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.628650][T20278] openvswitch: netlink: IP tunnel dst address not specified [ 165.997238][T20317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7045'. [ 166.181775][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 166.181788][ T40] audit: type=1326 audit(2000000347.935:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.0.7054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 166.192430][ T40] audit: type=1326 audit(2000000347.935:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.0.7054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 166.200195][ T40] audit: type=1326 audit(2000000347.945:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.0.7054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 166.207935][ T40] audit: type=1326 audit(2000000347.945:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.0.7054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 166.214884][ T40] audit: type=1326 audit(2000000347.945:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.0.7054" exe="/syz-executor" sig=0 arch=40000003 syscall=258 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 166.224214][ T40] audit: type=1326 audit(2000000347.945:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.0.7054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 166.233259][ T40] audit: type=1326 audit(2000000347.945:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.0.7054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 166.241593][ T40] audit: type=1326 audit(2000000347.945:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.0.7054" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 166.250686][ T40] audit: type=1326 audit(2000000347.945:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.0.7054" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 166.300984][T20249] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 166.303617][T20249] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 166.313115][T20345] sctp: [Deprecated]: syz.0.7059 (pid 20345) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.313115][T20345] Use struct sctp_sack_info instead [ 166.371976][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.375199][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.394331][T20249] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 166.394945][T20352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.437049][T20362] netlink: 'syz.3.7067': attribute type 7 has an invalid length. [ 166.466623][T20366] netlink: 'syz.3.7069': attribute type 2 has an invalid length. [ 166.476901][T20249] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 166.479451][T20249] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 166.558271][T20249] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 166.654407][T20249] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 166.656643][T20249] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 166.757916][T20386] netlink: 'syz.3.7078': attribute type 10 has an invalid length. [ 166.856063][T20386] team0: Port device netdevsim0 added [ 166.984137][ T40] audit: type=1326 audit(2000000348.684:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20409 comm="syz.0.7089" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 167.018232][T20414] nbd: must specify at least one socket [ 167.185621][T20445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.495930][T20461] syz.3.7112 (20461): drop_caches: 3 [ 167.648827][ T6110] Bluetooth: hci1: command 0x0c1a tx timeout [ 167.718752][T20532] netlink: 'syz.2.7147': attribute type 3 has an invalid length. [ 167.722166][T20532] netlink: 'syz.2.7147': attribute type 3 has an invalid length. [ 167.727351][T20536] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7148'. [ 167.730908][T20536] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7148'. [ 167.746311][T20539] netlink: 'syz.1.7151': attribute type 16 has an invalid length. [ 167.852937][T20560] gfs2: error -5 reading superblock [ 168.007108][T20592] MTD: Couldn't look up './file0': -15 [ 168.066873][T20599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.136285][T20612] random: crng reseeded on system resumption [ 168.145006][T20612] Hibernate inconsistent memory map detected! [ 168.147642][T20612] PM: hibernation: Image mismatch: architecture specific data [ 168.205681][T20623] netlink: 'syz.3.7192': attribute type 4 has an invalid length. [ 168.206831][T20624] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 168.208213][T20623] __nla_validate_parse: 4 callbacks suppressed [ 168.208222][T20623] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7192'. [ 168.219451][T20623] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 168.416280][T20661] netlink: 'syz.3.7211': attribute type 11 has an invalid length. [ 168.566750][T20693] program syz.0.7227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.660198][T20709] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 168.674315][ T6110] Bluetooth: hci2: command 0x0c1a tx timeout [ 168.845540][ T6110] Bluetooth: hci3: command 0x0406 tx timeout [ 169.035231][T20757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.041549][T20757] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 169.046458][T20757] bond0: (slave gre0): Error -95 calling set_mac_address [ 169.212660][T20786] Cannot find add_set index 2 as target [ 169.313735][T20802] xt_connbytes: Forcing CT accounting to be enabled [ 169.317251][T20802] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 169.444167][T20823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.453838][T20821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.803574][T20848] netlink: 'syz.1.7297': attribute type 1 has an invalid length. [ 169.852509][T20854] ip6t_rpfilter: unknown options [ 169.861004][ T6110] Bluetooth: hci1: command 0x0c1a tx timeout [ 169.913193][T20864] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 170.045111][T20877] netlink: 7 bytes leftover after parsing attributes in process `syz.3.7311'. [ 170.048955][T20877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7311'. [ 170.226583][T20895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.396446][T20907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.801552][T20923] netlink: 'syz.1.7334': attribute type 1 has an invalid length. [ 170.804983][T20923] netlink: 396 bytes leftover after parsing attributes in process `syz.1.7334'. [ 170.834580][T20925] xt_CT: No such helper "syz1" [ 170.890449][T20935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7339'. [ 170.896426][T20938] /dev/sg0: Can't lookup blockdev [ 170.898627][ T6110] Bluetooth: hci2: command 0x0c1a tx timeout [ 171.058356][ T6110] Bluetooth: hci3: command 0x0406 tx timeout [ 171.379011][T21016] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 172.084633][ T6110] Bluetooth: hci1: command 0x0c1a tx timeout [ 172.519597][T21134] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 172.979836][T21214] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 172.982865][T21214] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 173.047019][T21226] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.7476'. [ 173.110890][ T6110] Bluetooth: hci2: command 0x0c1a tx timeout [ 173.182961][T21251] random: crng reseeded on system resumption [ 173.307404][T21278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7502'. [ 173.368505][T21288] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 173.370520][T21288] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 173.372792][T21288] vhci_hcd vhci_hcd.0: Device attached [ 173.378302][T21290] vhci_hcd: connection closed [ 173.379020][ T46] vhci_hcd vhci_hcd.0: stop threads [ 173.383173][ T46] vhci_hcd vhci_hcd.0: release socket [ 173.385445][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 173.393277][T21296] ipt_ECN: cannot use operation on non-tcp rule [ 173.421770][T21298] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.424245][T21298] IPv6: NLM_F_CREATE should be set when creating new route [ 173.510087][T21312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7518'. [ 173.540969][T21314] kAFS: unable to lookup cell '(,cL' [ 173.611095][T21325] netlink: 'syz.1.7524': attribute type 11 has an invalid length. [ 173.615444][T21325] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7524'. [ 173.749704][T21344] bridge3: entered promiscuous mode [ 173.944830][ T6083] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 174.001951][T21377] nfs: Deprecated parameter 'nointr' [ 174.021502][T21370] bond4 (unregistering): Released all slaves [ 174.105175][ T6083] usb 7-1: Using ep0 maxpacket: 16 [ 174.109024][ T6083] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.113011][ T6083] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 174.116606][ T6083] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.120869][ T6083] usb 7-1: config 1 interface 0 has no altsetting 0 [ 174.128561][ T6083] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 174.132249][ T6083] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.134862][ T6083] usb 7-1: Product: syz [ 174.136275][ T6083] usb 7-1: Manufacturer: syz [ 174.139302][ T6083] usb 7-1: SerialNumber: syz [ 174.311895][T21405] validate_nla: 2 callbacks suppressed [ 174.311914][T21405] netlink: 'syz.1.7563': attribute type 10 has an invalid length. [ 174.317146][T21405] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7563'. [ 174.365977][ T64] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 174.374770][ T6083] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 174.385535][ T6083] usb 7-1: USB disconnect, device number 7 [ 174.390054][ T6083] usblp0: removed [ 175.221162][T21451] SET target dimension over the limit! [ 175.343217][T21477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7586'. [ 175.380288][T21481] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7588'. [ 175.421277][ T6187] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 175.440304][T21491] netlink: 196 bytes leftover after parsing attributes in process `syz.2.7593'. [ 175.444358][T21491] netlink: 196 bytes leftover after parsing attributes in process `syz.2.7593'. [ 175.447231][T21491] netlink: 19 bytes leftover after parsing attributes in process `syz.2.7593'. [ 175.471176][T21495] random: crng reseeded on system resumption [ 175.483587][T21497] comedi comedi3: ni_at_a2150: I/O port conflict (0x24,28) [ 175.512216][T21499] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.592393][ T6187] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 175.598455][ T6187] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 175.601507][ T6187] usb 6-1: config 220 interface 0 has no altsetting 0 [ 175.611663][ T6187] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 175.615614][ T6187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.618161][ T6187] usb 6-1: Product: syz [ 175.619490][ T6187] usb 6-1: Manufacturer: syz [ 175.621678][ T6187] usb 6-1: SerialNumber: syz [ 175.782623][T21538] openvswitch: netlink: IPv4 tunnel dst address is zero [ 175.822112][T21541] netlink: get zone limit has 4 unknown bytes [ 175.861409][ T6187] uvcvideo 6-1:220.0: probe with driver uvcvideo failed with error -22 [ 175.872769][ T6187] usb 6-1: USB disconnect, device number 4 [ 175.928529][T21555] netlink: 188 bytes leftover after parsing attributes in process `syz.0.7625'. [ 176.151920][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 176.151937][ T40] audit: type=1326 audit(2000000357.271:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21590 comm="syz.3.7643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 176.168421][ T40] audit: type=1326 audit(2000000357.271:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21590 comm="syz.3.7643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 176.177297][ T40] audit: type=1326 audit(2000000357.280:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21590 comm="syz.3.7643" exe="/syz-executor" sig=0 arch=40000003 syscall=10 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 176.187030][ T40] audit: type=1326 audit(2000000357.280:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21590 comm="syz.3.7643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 176.210064][ T40] audit: type=1326 audit(2000000357.280:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21590 comm="syz.3.7643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739d579 code=0x7ffc0000 [ 176.322458][T21615] netlink: 'syz.2.7652': attribute type 6 has an invalid length. [ 176.368108][T21625] netlink: 'syz.0.7657': attribute type 2 has an invalid length. [ 176.373039][T21625] netlink: 232 bytes leftover after parsing attributes in process `syz.0.7657'. [ 176.513806][ T40] audit: type=1400 audit(2000000357.607:124): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=21650 comm="syz.0.7669" [ 176.652903][T21672] FAT-fs (sr0): unable to read boot sector [ 176.718092][T21681] openvswitch: netlink: Multiple metadata blocks provided [ 176.792467][T21691] random: crng reseeded on system resumption [ 176.820546][ T6083] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 176.970233][ T40] audit: type=1326 audit(2000000358.028:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21715 comm="syz.1.7701" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 176.978446][ T40] audit: type=1326 audit(2000000358.028:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21715 comm="syz.1.7701" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 176.994989][ T40] audit: type=1326 audit(2000000358.028:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21715 comm="syz.1.7701" exe="/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 177.005239][ T40] audit: type=1326 audit(2000000358.028:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21715 comm="syz.1.7701" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000 [ 177.014473][ T6083] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 177.018235][ T6083] usb 8-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 177.028390][ T6083] usb 8-1: config 220 interface 0 has no altsetting 0 [ 177.033567][ T6083] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 177.038225][ T6083] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.041019][ T6083] usb 8-1: Product: syz [ 177.042385][ T6083] usb 8-1: Manufacturer: syz [ 177.043828][ T6083] usb 8-1: SerialNumber: syz [ 177.120608][T21733] netlink: 'syz.2.7709': attribute type 1 has an invalid length. [ 177.124033][T21733] netlink: 'syz.2.7709': attribute type 3 has an invalid length. [ 177.127226][T21733] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7709'. [ 177.278239][ T6083] uvcvideo 8-1:220.0: probe with driver uvcvideo failed with error -22 [ 177.287959][ T6083] usb 8-1: USB disconnect, device number 6 [ 177.321804][T21760] Zero length message leads to an empty skb [ 177.677654][T21814] netlink: 'syz.0.7748': attribute type 11 has an invalid length. [ 178.436755][T21923] xt_HMARK: proto mask must be zero with L3 mode [ 178.541811][ T60] IPVS: starting estimator thread 0... [ 178.649508][T21945] IPVS: using max 45 ests per chain, 108000 per kthread [ 178.828779][T21993] netlink: 'syz.3.7837': attribute type 7 has an invalid length. [ 178.863894][T21997] netlink: 'syz.1.7839': attribute type 10 has an invalid length. [ 178.867182][T21997] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 178.872978][T21997] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 178.876832][T21997] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 179.050352][T22026] __nla_validate_parse: 7 callbacks suppressed [ 179.050371][T22026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7853'. [ 179.157303][T22042] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 179.246080][T22055] netlink: 172 bytes leftover after parsing attributes in process `syz.0.7867'. [ 179.346483][T22069] cgroup: name respecified [ 179.482942][T22093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.567648][T22107] XFS (nbd3): SB validate failed with error -5. [ 179.652500][T22117] dlm: Unknown command passed to DLM device : 3 [ 179.652500][T22117] [ 179.694187][T22125] openvswitch: netlink: Key type 195 is out of range max 32 [ 179.736511][T22134] overlay: Unknown parameter 'fsname' [ 180.125560][T22207] NILFS (nbd2): device size too small [ 180.134141][T22210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7940'. [ 180.149492][T22213] SET target dimension over the limit! [ 180.349474][T22239] ata1.00: invalid multi_count 1 ignored [ 180.756214][T22304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7988'. [ 180.758218][T22305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7987'. [ 180.929852][T22327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7999'. [ 181.200464][T22351] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8012'. [ 181.534517][T22402] netlink: 'syz.2.8035': attribute type 2 has an invalid length. [ 181.591288][T22412] netlink: 512 bytes leftover after parsing attributes in process `syz.3.8042'. [ 181.819510][T22442] XFS (nbd2): SB validate failed with error -5. [ 181.837213][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 181.837226][ T40] audit: type=1400 audit(2000000362.584:140): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=22450 comm="syz.1.8058" [ 181.887152][T22461] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8063'. [ 181.937812][T22471] IPv6: NLM_F_CREATE should be specified when creating new route [ 182.126785][T22498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8081'. [ 182.217136][T22512] netlink: 'syz.0.8087': attribute type 5 has an invalid length. [ 182.254596][T22517] dlm: plock device version mismatch: kernel (1.2.0), user (2227959591.3024829116.1683162433) [ 182.406938][T22531] Cannot find add_set index 3 as target [ 182.544834][T22544] cgroup: subsys name conflicts with all [ 183.975625][T22738] batadv0: left promiscuous mode [ 183.991941][T22769] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 183.994769][T22769] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 183.998534][T22769] vhci_hcd vhci_hcd.0: Device attached [ 184.002763][T22770] vhci_hcd: connection closed [ 184.003749][ T1141] vhci_hcd vhci_hcd.3: stop threads [ 184.008290][ T1141] vhci_hcd vhci_hcd.3: release socket [ 184.010269][ T1141] vhci_hcd vhci_hcd.3: disconnect device [ 184.588078][T22774] kAFS: unable to lookup cell '/,' [ 184.616176][T22776] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 184.778688][T22738] veth0_vlan: left allmulticast mode [ 184.781156][T22738] vlan0: left promiscuous mode [ 186.121633][T22738] wireguard0: left promiscuous mode [ 186.123297][T22738] wireguard0: left allmulticast mode [ 186.126477][T22738] bridge4: left allmulticast mode [ 186.142727][ T62] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.145866][ T62] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.150086][ T62] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.156193][ T62] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.275799][T22810] __nla_validate_parse: 6 callbacks suppressed [ 186.275812][T22810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8233'. [ 186.337630][T22819] netlink: 'syz.2.8237': attribute type 21 has an invalid length. [ 186.340962][T22819] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.375276][T22825] netlink: 6 bytes leftover after parsing attributes in process `syz.0.8239'. [ 186.400668][T22828] vivid-000: ================= START STATUS ================= [ 186.403962][T22828] vivid-000: Test Pattern: 100% Color Squares [ 186.407554][T22828] vivid-000: Fill Percentage of Frame: 100 [ 186.424346][T22828] vivid-000: Horizontal Movement: Move Right Fast [ 186.427117][T22828] vivid-000: Vertical Movement: Move Up Fast [ 186.429750][T22828] vivid-000: OSD Text Mode: Counters Only [ 186.438025][T22828] vivid-000: Show Border: true [ 186.439719][T22828] vivid-000: Show Square: false [ 186.442245][T22828] vivid-000: Sensor Flipped Horizontally: false [ 186.444430][T22828] vivid-000: Sensor Flipped Vertically: true [ 186.446382][T22828] vivid-000: Insert SAV Code in Image: false [ 186.448326][T22828] vivid-000: Insert EAV Code in Image: false [ 186.450886][T22828] vivid-000: Insert Video Guard Band: false [ 186.453903][T22828] vivid-000: Reduced Framerate: true [ 186.456095][T22828] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 015-0 [ 186.462958][T22828] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 186.466011][T22828] vivid-000: Enable Capture Cropping: true [ 186.466046][T22828] vivid-000: Enable Capture Composing: true [ 186.466060][T22828] vivid-000: Enable Capture Scaler: true [ 186.466073][T22828] vivid-000: Timestamp Source: End of Frame [ 186.466086][T22828] vivid-000: Colorspace: SMPTE 170M [ 186.466098][T22828] vivid-000: Transfer Function: Default [ 186.466111][T22828] vivid-000: Y'CbCr Encoding: xvYCC 709 [ 186.466123][T22828] vivid-000: HSV Encoding: Hue 0-179 [ 186.466135][T22828] vivid-000: Quantization: Limited Range [ 186.466147][T22828] vivid-000: Apply Alpha To Red Only: false [ 186.466160][T22828] vivid-000: Standard Aspect Ratio: 4x3 [ 186.466172][T22828] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 186.466188][T22828] vivid-000: DV Timings: 640x480p59 inactive [ 186.466203][T22828] vivid-000: DV Timings Aspect Ratio: 4x3 [ 186.466215][T22828] vivid-000: Maximum EDID Blocks: 2 [ 186.466227][T22828] vivid-000: Limited RGB Range (16-235): false [ 186.466239][T22828] vivid-000: Rx RGB Quantization Range: Automatic [ 186.466250][T22828] vivid-000: Power Present: 0x00000001 [ 186.466268][T22828] tpg source WxH: 720x480 (HSV) [ 186.466279][T22828] tpg field: 4 [ 186.466284][T22828] tpg crop: (0,0)/64x64 [ 186.466292][T22828] tpg compose: (0,8)/16x16 [ 186.466299][T22828] tpg colorspace: 2 [ 186.466304][T22828] tpg transfer function: 0/2 [ 186.466310][T22828] tpg HSV encoding: 0/0 [ 186.466316][T22828] tpg quantization: 2/1 [ 186.466321][T22828] tpg RGB range: 0/2 [ 186.466326][T22828] vivid-000: ================== END STATUS ================== [ 186.546819][T22848] CIFS mount error: No usable UNC path provided in device string! [ 186.546819][T22848] [ 186.546842][T22848] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 186.573646][T22850] ipt_ECN: cannot use operation on non-tcp rule [ 186.664158][T22862] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 186.715988][T22868] netlink: 'syz.2.8261': attribute type 21 has an invalid length. [ 186.716004][T22868] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8261'. [ 186.716039][T22868] netlink: 'syz.2.8261': attribute type 4 has an invalid length. [ 186.716048][T22868] netlink: 'syz.2.8261': attribute type 3 has an invalid length. [ 186.716055][T22868] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8261'. [ 186.757696][T22874] ata1.00: invalid cdb length 6 [ 186.823367][T22885] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 186.868489][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 186.878529][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 186.882446][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 186.885641][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 186.913924][T22900] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8277'. [ 187.014604][T22922] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 187.109429][T22940] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8298'. [ 187.179575][T22952] netlink: 'syz.0.8302': attribute type 1 has an invalid length. [ 187.185975][T22952] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8302'. [ 187.253498][T22964] overlayfs: unescaped trailing colons in lowerdir mount option. [ 187.295784][ T6083] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 187.299404][ T6083] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 187.302151][ T6083] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 187.304451][ T6083] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 187.309740][ T6083] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 187.312540][ T6083] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 187.315522][ T6083] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 187.317897][ T6083] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 187.321314][ T6083] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 187.323658][ T6083] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 187.330920][ T6083] hid-generic 0006:0004:0009.0002: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 187.454773][T22976] fido_id[22976]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 187.482363][T23000] netlink: 'syz.0.8324': attribute type 27 has an invalid length. [ 187.485672][T23000] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8324'. [ 187.568033][T23016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8329'. [ 187.570801][T23016] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 187.603033][T23021] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 187.826309][T23064] block nbd3: NBD_DISCONNECT [ 187.963966][T23086] TCP: TCP_TX_DELAY enabled [ 188.015918][T23094] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 188.164561][T23122] netlink: 'syz.0.8378': attribute type 7 has an invalid length. [ 188.174870][T23122] netlink: 'syz.0.8378': attribute type 8 has an invalid length. [ 188.201930][T23126] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 188.219305][T23129] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 188.588440][ T40] audit: type=1326 audit(2000000368.898:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23172 comm="syz.0.8403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 188.612258][ T40] audit: type=1326 audit(2000000368.898:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23172 comm="syz.0.8403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 188.619587][ T40] audit: type=1326 audit(2000000368.907:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23172 comm="syz.0.8403" exe="/syz-executor" sig=0 arch=40000003 syscall=116 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 188.628212][ T40] audit: type=1326 audit(2000000368.907:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23172 comm="syz.0.8403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 188.635784][ T40] audit: type=1326 audit(2000000368.907:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23172 comm="syz.0.8403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 188.720828][T23185] ipvlan0: entered promiscuous mode [ 188.722606][T23185] ipvlan0: entered allmulticast mode [ 188.725339][T23185] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 188.959093][T23211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8421'. [ 188.991720][T23213] ip6gre1: entered promiscuous mode [ 188.993483][T23213] ip6gre1: entered allmulticast mode [ 189.947571][T23301] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 190.153581][T23330] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 190.242939][T23342] netlink: 'syz.1.8487': attribute type 1 has an invalid length. [ 190.315033][ T6110] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 190.545324][T23399] warn_alloc: 2 callbacks suppressed [ 190.545339][T23399] syz.0.8514: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 190.554408][T23399] CPU: 3 UID: 0 PID: 23399 Comm: syz.0.8514 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.554440][T23399] Tainted: [L]=SOFTLOCKUP [ 190.554446][T23399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.554457][T23399] Call Trace: [ 190.554464][T23399] [ 190.554472][T23399] dump_stack_lvl+0x100/0x190 [ 190.554498][T23399] warn_alloc.cold+0x95/0x1c1 [ 190.554530][T23399] ? __pfx_warn_alloc+0x10/0x10 [ 190.554559][T23399] ? lock_acquire+0x17c/0x330 [ 190.554584][T23399] ? do_raw_spin_lock+0x128/0x260 [ 190.554612][T23399] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 190.554645][T23399] __vmalloc_node_range_noprof+0x1252/0x1530 [ 190.554671][T23399] ? do_replace+0x1c6/0x490 [ 190.554697][T23399] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 190.554717][T23399] ? __lock_acquire+0x4a5/0x2630 [ 190.554749][T23399] ? do_replace+0x1c6/0x490 [ 190.554766][T23399] __vmalloc_node_noprof+0xad/0xf0 [ 190.554783][T23399] ? do_replace+0x1c6/0x490 [ 190.554804][T23399] __vmalloc_noprof+0xa3/0x120 [ 190.554820][T23399] ? __pfx___vmalloc_noprof+0x10/0x10 [ 190.554843][T23399] do_replace+0x1c6/0x490 [ 190.554859][T23399] ? __pfx_do_replace+0x10/0x10 [ 190.554885][T23399] ? register_lock_class+0x40/0x560 [ 190.554914][T23399] compat_do_replace+0x589/0x7a0 [ 190.554931][T23399] ? lock_acquire+0x17c/0x330 [ 190.554954][T23399] ? __pfx_compat_do_replace+0x10/0x10 [ 190.554973][T23399] ? rcu_is_watching+0x12/0xc0 [ 190.555000][T23399] ? bpf_lsm_capable+0x9/0x10 [ 190.555015][T23399] ? security_capable+0x80/0x260 [ 190.555039][T23399] do_ebt_set_ctl+0x2f5/0x3f0 [ 190.555058][T23399] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 190.555092][T23399] ? nf_sockopt_find.isra.0+0x222/0x290 [ 190.555114][T23399] nf_setsockopt+0x8d/0xf0 [ 190.555135][T23399] ip_setsockopt+0xcb/0xf0 [ 190.555155][T23399] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 190.555177][T23399] do_sock_setsockopt+0xf3/0x1d0 [ 190.555198][T23399] __sys_setsockopt+0x119/0x190 [ 190.555227][T23399] __ia32_sys_setsockopt+0xbc/0x160 [ 190.555251][T23399] ? __do_fast_syscall_32+0x97/0x660 [ 190.555273][T23399] ? lockdep_hardirqs_on+0x78/0x100 [ 190.555293][T23399] __do_fast_syscall_32+0xde/0x660 [ 190.555317][T23399] do_fast_syscall_32+0x32/0x70 [ 190.555338][T23399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.555360][T23399] RIP: 0023:0xf745d579 [ 190.555373][T23399] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 190.555390][T23399] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 190.555409][T23399] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 190.555419][T23399] RDX: 0000000000000080 RSI: 0000000080000200 RDI: 0000000000000108 [ 190.555431][T23399] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.555442][T23399] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 190.555452][T23399] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.555477][T23399] [ 190.555483][T23399] Mem-Info: [ 190.596999][T23407] CIFS mount error: No usable UNC path provided in device string! [ 190.596999][T23407] [ 190.598608][T23399] active_anon:691 inactive_anon:876 isolated_anon:0 [ 190.598608][T23399] active_file:11135 inactive_file:3407 isolated_file:37 [ 190.598608][T23399] unevictable:1768 dirty:123 writeback:0 [ 190.598608][T23399] slab_reclaimable:5802 slab_unreclaimable:55355 [ 190.598608][T23399] mapped:22113 shmem:1773 pagetables:1199 [ 190.598608][T23399] sec_pagetables:321 bounce:0 [ 190.598608][T23399] kernel_misc_reclaimable:0 [ 190.598608][T23399] free:78141 free_pcp:16677 free_cma:0 [ 190.601584][T23407] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 190.602519][T23399] Node 0 active_anon:140kB inactive_anon:24kB active_file:208kB inactive_file:32kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:144kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9832kB pagetables:1348kB sec_pagetables:1148kB all_unreclaimable? yes Balloon:0kB [ 190.714598][T23399] Node 1 active_anon:2624kB inactive_anon:3480kB active_file:44332kB inactive_file:13596kB unevictable:3536kB isolated(anon):0kB isolated(file):148kB mapped:88308kB dirty:492kB writeback:0kB shmem:3556kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3276kB pagetables:3648kB sec_pagetables:136kB all_unreclaimable? no Balloon:0kB [ 190.727713][T23399] Node 0 DMA free:2100kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:484kB local_pcp:28kB free_cma:0kB [ 190.741157][T23399] lowmem_reserve[]: 0 288 288 288 288 [ 190.743584][T23399] Node 0 DMA32 free:16116kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:0KB free_highatomic:0KB active_anon:104kB inactive_anon:24kB active_file:204kB inactive_file:36kB unevictable:3536kB writepending:20kB zspages:1048kB present:1032196kB managed:295104kB mlocked:0kB bounce:0kB free_pcp:11580kB local_pcp:3504kB free_cma:0kB [ 190.757144][T23399] lowmem_reserve[]: 0 0 0 0 0 [ 190.758694][T23399] Node 1 DMA32 free:294220kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2636kB inactive_anon:3480kB active_file:44348kB inactive_file:13592kB unevictable:3536kB writepending:540kB zspages:3784kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:56036kB local_pcp:7860kB free_cma:0kB [ 190.770333][T23399] lowmem_reserve[]: 0 0 0 0 0 [ 190.771968][T23399] Node 0 DMA: 17*4kB (UM) 0*8kB 3*16kB (UM) 8*32kB (UM) 3*64kB (UM) 2*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2100kB [ 190.777665][T23399] Node 0 DMA32: 539*4kB (UME) 247*8kB (UME) 23*16kB (UME) 75*32kB (UME) 58*64kB (UME) 23*128kB (UME) 8*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 16116kB [ 190.784672][T23399] Node 1 DMA32: 3147*4kB (UME) 2542*8kB (UME) 1587*16kB (UME) 121*32kB (UME) 241*64kB (UM) 316*128kB (UME) 216*256kB (UM) 106*512kB (UM) 53*1024kB (UM) 2*2048kB (M) 2*4096kB (M) = 294188kB [ 190.792624][T23399] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 190.795847][T23399] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 190.799671][T23399] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 190.803710][T23399] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 190.807743][T23399] 17272 total pagecache pages [ 190.809782][T23399] 984 pages in swap cache [ 190.811640][T23399] Free swap = 103728kB [ 190.813435][T23399] Total swap = 124996kB [ 190.815412][T23399] 524155 pages RAM [ 190.817046][T23399] 0 pages HighMem/MovableOnly [ 190.819052][T23399] 209486 pages reserved [ 190.820843][T23399] 0 pages cma reserved [ 191.068723][T23466] netlink: 'syz.3.8549': attribute type 21 has an invalid length. [ 191.093606][T23469] netlink: 'syz.1.8550': attribute type 9 has an invalid length. [ 191.097207][T23469] netlink: 'syz.1.8550': attribute type 7 has an invalid length. [ 191.099950][T23469] netlink: 'syz.1.8550': attribute type 8 has an invalid length. [ 191.136483][T23477] binder: 23476:23477 ioctl c0046209 0 returned -22 [ 191.152481][T23479] tmpfs: Bad value for 'mpol' [ 191.333600][T23508] netlink: 'syz.3.8569': attribute type 10 has an invalid length. [ 191.338128][T23508] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 191.393545][T23514] tunl0: left promiscuous mode [ 191.419197][T23517] Sensor A: ================= START STATUS ================= [ 191.421948][T23517] Sensor A: Test Pattern: 75% Colorbar [ 191.426820][T23517] Sensor A: Show Information: None [ 191.429208][T23517] Sensor A: Vertical Flip: false [ 191.430713][T23517] Sensor A: Horizontal Flip: false [ 191.432323][T23517] Sensor A: Brightness: 128 [ 191.433705][T23517] Sensor A: Contrast: 128 [ 191.435125][T23517] Sensor A: Hue: 0 [ 191.444439][T23517] Sensor A: Saturation: 3 [ 191.446752][T23517] Sensor A: ================== END STATUS ================== [ 191.481307][T23524] IPv6: NLM_F_CREATE should be specified when creating new route [ 191.504763][T23526] cgroup: none used incorrectly [ 191.576311][T23514] bridge0: port 1() entered disabled state [ 191.578441][T23514] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.907938][T23554] Process accounting paused [ 191.967993][T23560] openvswitch: netlink: IP tunnel dst address not specified [ 192.050449][T23514] bridge_slave_0: left promiscuous mode [ 192.083923][T23514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.096438][T23514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.901324][T23514] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 193.178156][T23514] bridge1: left promiscuous mode [ 193.179734][T23514] bridge1: left allmulticast mode [ 193.243345][T23514] gtp0: left promiscuous mode [ 193.245523][T23514] gtp0: left allmulticast mode [ 193.249138][T23514] ip6erspan0: left promiscuous mode [ 193.250850][T23514] ip6erspan0: left allmulticast mode [ 193.346979][T23587] validate_nla: 4 callbacks suppressed [ 193.346999][T23587] netlink: 'syz.2.8608': attribute type 1 has an invalid length. [ 193.436394][T23578] bond0: option ad_select: unable to set because the bond device is up [ 193.440806][ T1227] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.443809][ T1227] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.447241][ T1227] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.450250][ T1227] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.552908][T23607] __nla_validate_parse: 5 callbacks suppressed [ 193.552949][T23607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8618'. [ 193.571792][ T40] audit: type=1800 audit(2000000373.556:146): pid=23610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8620" name="bus" dev="tmpfs" ino=11023 res=0 errno=0 [ 193.640662][T23621] autofs4:pid:23621:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 193.645055][T23621] autofs4:pid:23621:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 194.000557][ T60] ================================================================== [ 194.000571][ T60] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 194.000594][ T60] Write of size 8 at addr ffffc90004ee9040 by task kworker/2:1/60 [ 194.000608][ T60] [ 194.000619][ T60] CPU: 2 UID: 0 PID: 60 Comm: kworker/2:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.000642][ T60] Tainted: [L]=SOFTLOCKUP [ 194.000648][ T60] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.000659][ T60] Workqueue: events_power_efficient fb_flashcursor [ 194.000682][ T60] Call Trace: [ 194.000688][ T60] [ 194.000695][ T60] dump_stack_lvl+0x100/0x190 [ 194.000716][ T60] print_report+0x156/0x4c9 [ 194.000739][ T60] ? __virt_addr_valid+0x81/0x620 [ 194.000765][ T60] ? sys_imageblit+0x19fb/0x1d60 [ 194.000781][ T60] kasan_report+0xdf/0x1a0 [ 194.000805][ T60] ? sys_imageblit+0x19fb/0x1d60 [ 194.000824][ T60] sys_imageblit+0x19fb/0x1d60 [ 194.000843][ T60] ? __pfx_sys_imageblit+0x10/0x10 [ 194.000860][ T60] ? trace_kmalloc+0x83/0xb0 [ 194.000882][ T60] ? __kmalloc_noprof+0x365/0x9c0 [ 194.000898][ T60] ? kfree+0x2a9/0x690 [ 194.000939][ T60] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 194.000960][ T60] soft_cursor+0x524/0xa10 [ 194.000987][ T60] bit_cursor+0xe58/0x16f0 [ 194.001011][ T60] ? __pfx_bit_cursor+0x10/0x10 [ 194.001043][ T60] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 194.001062][ T60] ? get_color+0x1da/0x450 [ 194.001082][ T60] ? __pfx_bit_cursor+0x10/0x10 [ 194.001103][ T60] fb_flashcursor+0x338/0x430 [ 194.001124][ T60] process_one_work+0x9c2/0x1840 [ 194.001154][ T60] ? __pfx_process_one_work+0x10/0x10 [ 194.001182][ T60] ? assign_work+0x19c/0x250 [ 194.001207][ T60] worker_thread+0x5da/0xe40 [ 194.001236][ T60] ? kthread+0x17d/0x730 [ 194.001258][ T60] ? __pfx_worker_thread+0x10/0x10 [ 194.001282][ T60] kthread+0x3b3/0x730 [ 194.001304][ T60] ? __pfx_kthread+0x10/0x10 [ 194.001326][ T60] ? ret_from_fork+0x79/0xaf0 [ 194.001341][ T60] ? ret_from_fork+0x79/0xaf0 [ 194.001356][ T60] ? rcu_is_watching+0x12/0xc0 [ 194.001372][ T60] ? __pfx_kthread+0x10/0x10 [ 194.001396][ T60] ret_from_fork+0x754/0xaf0 [ 194.001412][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 194.001429][ T60] ? __switch_to+0x7b9/0x10c0 [ 194.001450][ T60] ? __pfx_kthread+0x10/0x10 [ 194.001473][ T60] ret_from_fork_asm+0x1a/0x30 [ 194.001502][ T60] [ 194.001508][ T60] [ 194.001513][ T60] The buggy address belongs to a vmalloc virtual mapping [ 194.001539][ T60] Memory state around the buggy address: [ 194.001549][ T60] ffffc90004ee8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 194.001561][ T60] ffffc90004ee8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 194.001573][ T60] >ffffc90004ee9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 194.001582][ T60] ^ [ 194.001592][ T60] ffffc90004ee9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 194.001603][ T60] ffffc90004ee9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 194.001612][ T60] ================================================================== [ 194.001702][ T60] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 194.001715][ T60] CPU: 2 UID: 0 PID: 60 Comm: kworker/2:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.001740][ T60] Tainted: [L]=SOFTLOCKUP [ 194.001747][ T60] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.001758][ T60] Workqueue: events_power_efficient fb_flashcursor [ 194.001779][ T60] Call Trace: [ 194.001785][ T60] [ 194.001792][ T60] dump_stack_lvl+0x100/0x190 [ 194.001813][ T60] vpanic+0x20d/0x630 [ 194.001830][ T60] panic+0xd1/0xd1 [ 194.001845][ T60] ? __pfx_panic+0x10/0x10 [ 194.001861][ T60] ? sys_imageblit+0x19fb/0x1d60 [ 194.001877][ T60] ? preempt_schedule_common+0x42/0xc0 [ 194.001898][ T60] ? check_panic_on_warn+0x1f/0x90 [ 194.001926][ T60] check_panic_on_warn.cold+0x19/0x34 [ 194.001943][ T60] end_report.part.0+0x3a/0x90 [ 194.001966][ T60] kasan_report.cold+0xe/0x18 [ 194.001989][ T60] ? sys_imageblit+0x19fb/0x1d60 [ 194.002008][ T60] sys_imageblit+0x19fb/0x1d60 [ 194.002028][ T60] ? __pfx_sys_imageblit+0x10/0x10 [ 194.002049][ T60] ? trace_kmalloc+0x83/0xb0 [ 194.002071][ T60] ? __kmalloc_noprof+0x365/0x9c0 [ 194.002088][ T60] ? kfree+0x2a9/0x690 [ 194.002105][ T60] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 194.002123][ T60] soft_cursor+0x524/0xa10 [ 194.002150][ T60] bit_cursor+0xe58/0x16f0 [ 194.002175][ T60] ? __pfx_bit_cursor+0x10/0x10 [ 194.002202][ T60] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 194.002221][ T60] ? get_color+0x1da/0x450 [ 194.002240][ T60] ? __pfx_bit_cursor+0x10/0x10 [ 194.002262][ T60] fb_flashcursor+0x338/0x430 [ 194.002282][ T60] process_one_work+0x9c2/0x1840 [ 194.002312][ T60] ? __pfx_process_one_work+0x10/0x10 [ 194.002341][ T60] ? assign_work+0x19c/0x250 [ 194.002376][ T60] worker_thread+0x5da/0xe40 [ 194.002405][ T60] ? kthread+0x17d/0x730 [ 194.002427][ T60] ? __pfx_worker_thread+0x10/0x10 [ 194.002451][ T60] kthread+0x3b3/0x730 [ 194.002475][ T60] ? __pfx_kthread+0x10/0x10 [ 194.002496][ T60] ? ret_from_fork+0x79/0xaf0 [ 194.002511][ T60] ? ret_from_fork+0x79/0xaf0 [ 194.002527][ T60] ? rcu_is_watching+0x12/0xc0 [ 194.002544][ T60] ? __pfx_kthread+0x10/0x10 [ 194.002568][ T60] ret_from_fork+0x754/0xaf0 [ 194.002584][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 194.002601][ T60] ? __switch_to+0x7b9/0x10c0 [ 194.002622][ T60] ? __pfx_kthread+0x10/0x10 [ 194.002645][ T60] ret_from_fork_asm+0x1a/0x30 [ 194.002674][ T60] [ 194.003467][ T60] Kernel Offset: disabled VM DIAGNOSIS: 18:20:45 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81abf9a3 RDX=ffff888058108000 RSI=ffffffff81abf9eb RDI=ffffffff93e8ffe0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27d1ffc R10=ffffffff93e8ffe7 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81abf9ec RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880973e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f71eb040 CR3=000000000e392000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81abf9a3 RDX=ffff88801dada4c0 RSI=ffffffff81abf9eb RDI=ffffffff93e8ffe0 RBP=0000000000000000 RSP=ffffc90000590fd0 R8 =0000000000000001 R9 =fffffbfff27d1ffc R10=ffffffff93e8ffe7 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81abf9ec RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f6a190 CR3=000000004e587000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85673cf5 RDI=ffffffff9b1f2260 RBP=ffffffff9b1f2220 RSP=ffffc900007bf330 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000036 R14=0000000000000010 R15=ffffffff85673c90 RIP=ffffffff85673d1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975e3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f5426da4 CR3=000000004b16d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000009800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81abf9a3 RDX=ffff88802958c980 RSI=ffffffff81abf9eb RDI=ffffffff93e8ffe0 RBP=0000000000000000 RSP=ffffc900005e8fd0 R8 =0000000000000001 R9 =fffffbfff27d1ffc R10=ffffffff93e8ffe7 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81abf9ec RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976e3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f71b9df0 CR3=000000006f49e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000