last executing test programs: 3.720630576s ago: executing program 2 (id=16493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400003000f0800014000000000240005800c0001007061796c6f61e9fa65b4246f6ec00340000000b908000240000000020900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) 3.610836072s ago: executing program 2 (id=16495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x16c4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 3.511282584s ago: executing program 2 (id=16499): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 995.045697ms ago: executing program 3 (id=16573): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 939.001116ms ago: executing program 3 (id=16577): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') 937.882668ms ago: executing program 3 (id=16579): setreuid(0xffffffffffffffff, 0xee00) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 871.15787ms ago: executing program 3 (id=16580): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 498.286664ms ago: executing program 2 (id=16592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 455.547357ms ago: executing program 2 (id=16593): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x1e, 0x8, 0x0, 0x3, @multicast}, 0x10) 452.983787ms ago: executing program 2 (id=16594): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 229.180811ms ago: executing program 0 (id=16603): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x1000) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 228.383655ms ago: executing program 0 (id=16604): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x10, 0x4c0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 176.039918ms ago: executing program 0 (id=16605): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000340)=@chain) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="e2b499", 0x3, r0) 172.62849ms ago: executing program 1 (id=16606): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) 168.802488ms ago: executing program 0 (id=16607): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000780)={0x29e9c934, 0x3, 0x7f, 0x404}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a0000000000000000020000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 109.221885ms ago: executing program 1 (id=16608): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}, 0x1c) 109.001931ms ago: executing program 0 (id=16609): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[0x1b94]}, 0x8) 108.892701ms ago: executing program 1 (id=16610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 57.732696ms ago: executing program 0 (id=16611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) 56.434835ms ago: executing program 1 (id=16612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000008000000018130000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d1000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 533.501µs ago: executing program 3 (id=16613): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 287.893µs ago: executing program 1 (id=16614): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000040000000700000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x25) 158.72µs ago: executing program 3 (id=16615): r0 = socket(0x1d, 0x2, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) 0s ago: executing program 1 (id=16616): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$FE_GET_PROPERTY(r0, 0x80086f53, &(0x7f0000000080)={0x6, &(0x7f00000000c0)=[{0x40, '\x00', @data=0xfffeffff, 0x8001}]}) kernel console output (not intermixed with test programs): , kernel too old? [ 237.843673][T26975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10135'. [ 237.848022][T26975] unsupported nla_type 142 [ 238.276674][T27038] gfs2: gfs2 mount does not exist [ 238.735388][T27087] : renamed from veth0_vlan (while UP) [ 238.845990][T27099] tmpfs: Bad value for 'mpol' [ 239.008462][T27132] cgroup: Need name or subsystem set [ 239.018946][T27129] bond2: Removing last arp target with arp_interval on [ 239.046075][T27127] Process accounting paused [ 239.061841][T27137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10213'. [ 239.176608][T27158] bond3: entered allmulticast mode [ 239.178814][T27158] 8021q: adding VLAN 0 to HW filter on device bond3 [ 239.453929][T27195] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10241'. [ 239.602692][T27215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10251'. [ 239.663977][T27224] netlink: 'syz.3.10254': attribute type 3 has an invalid length. [ 239.789671][T27247] tmpfs: Bad value for 'mpol' [ 239.860663][T27256] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 239.974274][T27268] xt_CT: No such helper "pptp" [ 240.277681][T27315] Process accounting paused [ 240.360380][T27335] netlink: 'syz.0.10309': attribute type 13 has an invalid length. [ 240.364361][T27336] netlink: 'syz.1.10310': attribute type 32 has an invalid length. [ 240.367966][T27336] __nla_validate_parse: 2 callbacks suppressed [ 240.367981][T27336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10310'. [ 240.405567][T27336] bond2: Setting coupled_control to off (0) [ 240.557628][T27357] overlayfs: conflicting options: userxattr,redirect_dir=on [ 241.333435][T27465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10372'. [ 241.371322][ T41] kauditd_printk_skb: 81 callbacks suppressed [ 241.371334][ T41] audit: type=1326 audit(2000524691.113:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27467 comm="syz.1.10374" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 241.390384][ T41] audit: type=1326 audit(2000524691.113:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27467 comm="syz.1.10374" exe="/syz-executor" sig=0 arch=40000003 syscall=344 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 241.400245][ T41] audit: type=1326 audit(2000524691.113:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27467 comm="syz.1.10374" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 241.416322][ T41] audit: type=1326 audit(2000524691.113:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27467 comm="syz.1.10374" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 241.438247][T27475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10378'. [ 241.467953][T27482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10381'. [ 241.889343][T27533] vlan1: entered allmulticast mode [ 242.143057][T27568] XFS (nbd1): SB validate failed with error -5. [ 242.418123][ T54] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 242.560537][T27630] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 242.592908][ T54] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 242.595951][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.599191][ T54] usb 8-1: Product: syz [ 242.600563][ T54] usb 8-1: Manufacturer: syz [ 242.602053][ T54] usb 8-1: SerialNumber: syz [ 242.612460][ T54] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 242.634603][ T1023] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 242.684882][T27649] netlink: 'syz.1.10458': attribute type 23 has an invalid length. [ 242.861872][T27672] program syz.2.10470 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.037762][T27695] netlink: 'syz.2.10481': attribute type 1 has an invalid length. [ 243.059033][ T53] usb 8-1: USB disconnect, device number 12 [ 243.087031][T27701] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 243.141612][T27706] bond4: entered allmulticast mode [ 243.168044][T27712] netlink: 'syz.1.10489': attribute type 27 has an invalid length. [ 243.170666][T27712] netlink: 164 bytes leftover after parsing attributes in process `syz.1.10489'. [ 243.317913][T27731] netlink: 'syz.2.10498': attribute type 8 has an invalid length. [ 243.391651][T27738] netlink: 'syz.1.10502': attribute type 49 has an invalid length. [ 243.446314][T27746] netlink: 'syz.1.10504': attribute type 21 has an invalid length. [ 243.449620][T27746] netlink: 'syz.1.10504': attribute type 20 has an invalid length. [ 243.475632][T27750] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10507'. [ 243.501368][T27754] ptrace attach of "/syz-executor exec"[5940] was attempted by "/syz-executor exec"[27754] [ 243.539072][T27758] netlink: 'syz.1.10512': attribute type 4 has an invalid length. [ 243.731768][T27783] tmpfs: Bad value for 'mpol' [ 243.807540][T27791] vivid-007: disconnect [ 243.810621][T27790] vivid-007: reconnect [ 243.876262][ T1023] usb 8-1: Service connection timeout for: 256 [ 243.879353][ T1023] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 243.888880][ T1023] ath9k_htc: Failed to initialize the device [ 243.892892][ T53] usb 8-1: ath9k_htc: USB layer deinitialized [ 243.905702][T27801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.982846][T27807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.128951][T27827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10544'. [ 244.575102][T27884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10573'. [ 244.581008][T27884] netlink: 31 bytes leftover after parsing attributes in process `syz.2.10573'. [ 244.584338][T27884] netlink: 31 bytes leftover after parsing attributes in process `syz.2.10573'. [ 244.940639][ T41] audit: type=1326 audit(2000524694.683:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27946 comm="syz.2.10604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 244.947850][ T41] audit: type=1326 audit(2000524694.683:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27946 comm="syz.2.10604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 244.955574][ T41] audit: type=1326 audit(2000524694.683:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27946 comm="syz.2.10604" exe="/syz-executor" sig=0 arch=40000003 syscall=70 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 244.964999][ T41] audit: type=1326 audit(2000524694.683:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27946 comm="syz.2.10604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 244.973992][ T41] audit: type=1326 audit(2000524694.683:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27946 comm="syz.2.10604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 245.505471][T28035] program syz.0.10646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.549012][T28041] validate_nla: 6 callbacks suppressed [ 245.549030][T28041] netlink: 'syz.3.10649': attribute type 23 has an invalid length. [ 245.851604][T28084] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 245.976916][T28101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.158152][T28129] netlink: 'syz.0.10693': attribute type 1 has an invalid length. [ 246.256667][T28141] netlink: 'syz.3.10699': attribute type 2 has an invalid length. [ 246.390900][T28166] openvswitch: : Dropping previously announced user features [ 246.431460][T28170] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 246.853830][T28242] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 246.858446][T28242] overlayfs: overlapping lowerdir path [ 247.004387][T28268] MTD: Couldn't look up './file0': -15 [ 247.115994][T28281] nfs: Unknown parameter 'ntext' [ 247.150576][T28286] __nla_validate_parse: 2 callbacks suppressed [ 247.150588][T28286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10770'. [ 247.212834][T28295] Zero length message leads to an empty skb [ 247.256245][ T41] audit: type=1326 audit(2000000000.399:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28300 comm="syz.3.10778" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 247.266535][ T41] audit: type=1326 audit(2000000000.399:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28300 comm="syz.3.10778" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 247.275435][ T41] audit: type=1326 audit(2000000000.409:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28300 comm="syz.3.10778" exe="/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 247.284923][ T41] audit: type=1326 audit(2000000000.409:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28300 comm="syz.3.10778" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 247.294309][ T41] audit: type=1326 audit(2000000000.409:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28300 comm="syz.3.10778" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 247.413505][T28332] netlink: 'syz.1.10794': attribute type 3 has an invalid length. [ 247.432260][T28332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10794'. [ 247.465375][T28338] netlink: 'syz.2.10796': attribute type 1 has an invalid length. [ 247.504393][T28346] QAT: Invalid ioctl 21531 [ 247.628683][ T41] audit: type=1326 audit(2000000000.779:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28369 comm="syz.2.10812" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 247.639467][ T41] audit: type=1326 audit(2000000000.779:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28369 comm="syz.2.10812" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 247.656240][ T41] audit: type=1326 audit(2000000000.789:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28369 comm="syz.2.10812" exe="/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 247.665459][ T41] audit: type=1326 audit(2000000000.789:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28369 comm="syz.2.10812" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 247.675366][ T41] audit: type=1326 audit(2000000000.789:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28369 comm="syz.2.10812" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 247.764192][T28384] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 247.768733][T28384] overlayfs: overlapping lowerdir path [ 247.829676][T28394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10823'. [ 247.850463][T28398] netlink: 'syz.1.10826': attribute type 5 has an invalid length. [ 247.937935][T28416] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 247.942330][T28416] overlayfs: overlapping lowerdir path [ 248.057652][T28438] openvswitch: netlink: IPv6 tunnel dst address is zero [ 248.094831][T28444] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 248.175186][T28459] netlink: 'syz.1.10856': attribute type 1 has an invalid length. [ 248.178894][T28459] netlink: 228 bytes leftover after parsing attributes in process `syz.1.10856'. [ 248.182146][T28459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10856'. [ 248.223480][T28469] autofs4:pid:28469:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 248.229259][T28469] autofs4:pid:28469:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 248.311279][T28489] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10869'. [ 248.316309][T28488] netlink: 'syz.1.10870': attribute type 29 has an invalid length. [ 248.318886][T28488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10870'. [ 248.388328][T28496] netlink: 'syz.2.10875': attribute type 21 has an invalid length. [ 248.388919][T28497] netlink: 'syz.1.10874': attribute type 1 has an invalid length. [ 248.391790][T28496] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10875'. [ 248.512720][T28508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10880'. [ 248.580448][T28518] program syz.1.10886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.634819][T28529] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 248.784919][T28557] autofs4:pid:28557:validate_dev_ioctl: invalid path supplied for cmd(0xc0189374) [ 248.929685][T28580] SET target dimension over the limit! [ 249.322803][T28640] x_tables: duplicate underflow at hook 2 [ 249.645433][T28700] overlayfs: conflicting options: userxattr,metacopy=on [ 249.743117][T28716] tmpfs: Group quota inode hardlimit too large. [ 249.769185][T28718] program syz.0.10985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.903559][T28744] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10998'. [ 250.328853][T28796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.402451][ T6025] IPVS: starting estimator thread 0... [ 250.414020][T28807] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 250.418269][T28807] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 250.422248][T28807] bridge5: entered promiscuous mode [ 250.431459][ T1337] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 250.471386][T28817] dlm: non-version read from control device 36 [ 250.486381][T28805] IPVS: using max 44 ests per chain, 105600 per kthread [ 250.602400][ T1337] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 250.608034][T28835] validate_nla: 3 callbacks suppressed [ 250.608045][T28835] netlink: 'syz.0.11042': attribute type 21 has an invalid length. [ 250.610157][ T1337] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 250.617887][ T1337] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.620967][ T1337] usb 8-1: Product: syz [ 250.622258][ T1337] usb 8-1: Manufacturer: syz [ 250.623726][ T1337] usb 8-1: SerialNumber: syz [ 250.626841][ T1337] usb 8-1: config 0 descriptor?? [ 250.636612][ T1337] hub 8-1:0.0: bad descriptor, ignoring hub [ 250.639225][ T1337] hub 8-1:0.0: probe with driver hub failed with error -5 [ 250.648484][ T1337] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input41 [ 250.735987][T28853] netlink: 'syz.0.11051': attribute type 3 has an invalid length. [ 250.826990][T28871] openvswitch: netlink: IP tunnel dst address not specified [ 251.093668][T28897] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 251.227861][ T1337] usb 8-1: USB disconnect, device number 13 [ 251.404819][T28935] netdevsim netdevsim1: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 251.438329][T28939] EXT4-fs (nbd2): unable to read superblock [ 251.652219][T28966] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.809687][T28994] 0{X: renamed from gretap0 (while UP) [ 251.829206][T28998] netlink: 'syz.3.11123': attribute type 1 has an invalid length. [ 251.847204][T28994] 0{X: entered allmulticast mode [ 251.849132][T28994] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 251.964915][T29013] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 251.969231][T29013] block device autoloading is deprecated and will be removed. [ 252.462267][T29092] netlink: 'syz.0.11170': attribute type 11 has an invalid length. [ 252.499974][T29096] __nla_validate_parse: 12 callbacks suppressed [ 252.499994][T29096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11172'. [ 252.641815][T29120] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 252.739920][T29136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11192'. [ 252.877331][T29159] IPv6: Can't replace route, no match found [ 252.911827][T29164] CIFS mount error: No usable UNC path provided in device string! [ 252.911827][T29164] [ 252.915986][T29164] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 252.930349][T29166] openvswitch: netlink: IP tunnel dst address not specified [ 253.012725][T29176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11212'. [ 253.210720][T29208] netlink: 'syz.3.11227': attribute type 7 has an invalid length. [ 253.214177][T29208] netlink: 'syz.3.11227': attribute type 8 has an invalid length. [ 253.424199][T29243] syz.1.11244: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 253.491387][T29251] netlink: 'syz.3.11248': attribute type 2 has an invalid length. [ 254.568108][T29309] 9pnet_fd: p9_fd_create_tcp (29309): problem connecting socket to 127.0.0.1 [ 254.705125][T29333] 9pnet_fd: p9_fd_create_tcp (29333): problem connecting socket to 127.0.0.1 [ 254.791985][T29347] netlink: 'syz.1.11296': attribute type 1 has an invalid length. [ 254.794928][T29347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.829454][T29353] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11298'. [ 254.842790][T29357] netlink: 'syz.3.11300': attribute type 1 has an invalid length. [ 254.862871][T29359] netlink: ct family unspecified [ 254.864968][T29359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.988821][T29380] netlink: 'syz.2.11310': attribute type 2 has an invalid length. [ 255.022804][T29384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11312'. [ 255.038114][T29386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.422244][T29439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.422641][T29440] netlink: 480 bytes leftover after parsing attributes in process `syz.1.11341'. [ 255.429096][T29440] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.11341'. [ 255.490617][T29450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11345'. [ 255.629171][T29462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11352'. [ 255.633553][T29466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.740876][T29480] random: crng reseeded on system resumption [ 255.911913][T29498] random: crng reseeded on system resumption [ 256.126831][T29532] netlink: 288 bytes leftover after parsing attributes in process `syz.1.11386'. [ 256.349240][T29559] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 256.672781][T29590] netlink: 'syz.1.11415': attribute type 11 has an invalid length. [ 256.779507][T29602] validate_nla: 1 callbacks suppressed [ 256.779520][T29602] netlink: 'syz.3.11421': attribute type 21 has an invalid length. [ 256.995835][T29629] netlink: 'syz.3.11434': attribute type 1 has an invalid length. [ 257.057911][T29635] team0: Port device dummy0 removed [ 257.060015][T29635] bridge_slave_0: left allmulticast mode [ 257.061933][T29635] bridge_slave_0: left promiscuous mode [ 257.064062][T29635] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.137963][T29635] bridge_slave_1: left allmulticast mode [ 257.140357][T29635] bridge_slave_1: left promiscuous mode [ 257.142909][T29635] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.236740][T29635] bond0: (slave bond_slave_0): Releasing backup interface [ 257.316840][T29635] bond0: (slave bond_slave_1): Releasing backup interface [ 257.327348][T29655] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 257.407085][T29635] team0: Port device team_slave_0 removed [ 257.468728][T29635] team0: Port device team_slave_1 removed [ 257.471777][T29635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.507206][T29635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.557036][T29635] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 257.612110][T29663] ALSA: mixer_oss: invalid OSS volume '' [ 257.614525][T29663] ALSA: mixer_oss: invalid OSS volume 'ұB;T`@$EcXMYd,' [ 257.617849][T29663] ALSA: mixer_oss: invalid OSS volume 'b@h#' [ 257.620293][T29663] ALSA: mixer_oss: invalid OSS volume 'h4XS4v=0_>&' [ 257.623434][T29663] ALSA: mixer_oss: invalid OSS volume '|/"tj' [ 257.625978][T29663] ALSA: mixer_oss: invalid OSS volume '-z5c^J6$' [ 257.629083][T29663] ALSA: mixer_oss: invalid OSS volume '0Ty󉴪jP&at' [ 257.635097][T29663] ALSA: mixer_oss: invalid OSS volume '|~\' [ 257.638178][T29663] ALSA: mixer_oss: invalid OSS volume '@^3bɜ}G$#\("/oL' [ 257.641602][T29663] ALSA: mixer_oss: invalid OSS volume 'I :' [ 257.644294][T29663] ALSA: mixer_oss: invalid OSS volume '%^vhcGJPr('⍯Q=' [ 257.648587][T29663] ALSA: mixer_oss: invalid OSS volume ' Gj;4Ìz3WҼ0F=%' [ 257.652170][T29663] ALSA: mixer_oss: invalid OSS volume ';4 4fh߇GIבQ5oJ' [ 257.655666][T29663] ALSA: mixer_oss: invalid OSS volume 'Wl]Y1-J<A>o' [ 257.658588][T29674] __nla_validate_parse: 9 callbacks suppressed [ 257.658605][T29674] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11456'. [ 257.665432][T29674] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 257.853817][T29704] QAT: failed to copy from user. [ 258.062865][T29737] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11487'. [ 258.131827][T29750] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 258.232678][T29764] CIFS mount error: No usable UNC path provided in device string! [ 258.232678][T29764] [ 258.241425][T29764] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 258.334320][T29775] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 258.361789][T29777] sctp: [Deprecated]: syz.2.11506 (pid 29777) Use of int in maxseg socket option. [ 258.361789][T29777] Use struct sctp_assoc_value instead [ 258.397920][T29785] netlink: 84 bytes leftover after parsing attributes in process `syz.2.11510'. [ 258.486567][T29799] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 258.622769][T29816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.956420][ T1337] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 259.014891][T29861] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 259.122075][ T1337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 259.128420][ T1337] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 259.131431][ T1337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.134160][ T1337] usb 5-1: Product: syz [ 259.135519][ T1337] usb 5-1: Manufacturer: syz [ 259.140147][ T1337] usb 5-1: SerialNumber: syz [ 259.149924][ T1337] usb 5-1: config 0 descriptor?? [ 259.153439][ T1337] hub 5-1:0.0: bad descriptor, ignoring hub [ 259.155921][ T1337] hub 5-1:0.0: probe with driver hub failed with error -5 [ 259.169353][ T1337] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input43 [ 259.189553][T29882] bond10: entered promiscuous mode [ 259.191804][T29882] bond10: entered allmulticast mode [ 259.194540][T29882] 8021q: adding VLAN 0 to HW filter on device bond10 [ 259.363007][T29907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11570'. [ 259.420302][T29915] dummy0: entered allmulticast mode [ 259.422851][T29914] dummy0: left allmulticast mode [ 259.806527][ T1337] usb 5-1: USB disconnect, device number 9 [ 260.125662][T30010] xt_TCPMSS: Only works on TCP SYN packets [ 260.172564][T30014] xt_bpf: check failed: parse error [ 260.292981][T30033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11633'. [ 260.296850][T30033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11633'. [ 260.299295][T30034] /dev/sg0: Can't lookup blockdev [ 260.484455][T30061] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11647'. [ 260.502261][T30064] gfs2: error -5 reading superblock [ 260.730019][T30100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11665'. [ 261.067773][T30138] nfs4: Bad value for 'source' [ 261.075163][T30134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.412918][T30180] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 261.764102][T30220] program syz.2.11722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.768821][T30221] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11723'. [ 261.834601][T30232] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 262.199665][T30292] nr0: entered promiscuous mode [ 262.244658][T30299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11762'. [ 262.335553][T30310] bond0: (slave bridge0): Releasing backup interface [ 262.382546][T30310] bridge_slave_0: left allmulticast mode [ 262.385243][T30310] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.499681][T30310] bridge_slave_1: left allmulticast mode [ 262.504594][T30310] bridge_slave_1: left promiscuous mode [ 262.507154][T30310] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.747724][T30310] bond0: (slave bond_slave_0): Releasing backup interface [ 262.817277][T30310] bond0: (slave bond_slave_1): Releasing backup interface [ 262.909675][T30310] team0: Port device team_slave_0 removed [ 262.951223][T30310] team0: Port device team_slave_1 removed [ 262.959917][T30310] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 262.963268][T30310] bridge0: port 3(netdevsim0) entered disabled state [ 263.108343][T30339] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 263.145601][T30342] gtp0: entered promiscuous mode [ 263.148985][T30342] gtp0: entered allmulticast mode [ 263.465824][T30389] __nla_validate_parse: 2 callbacks suppressed [ 263.465836][T30389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11806'. [ 263.479431][T30392] i2c i2c-1: Invalid block write size 34 [ 263.485961][T30395] netlink: 'syz.2.11807': attribute type 10 has an invalid length. [ 263.489349][T30395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11807'. [ 263.495211][T30395] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 263.509354][T30395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.524697][T30397] bridge10: entered promiscuous mode [ 263.527432][T30397] bridge10: entered allmulticast mode [ 263.684945][T30425] netlink: 392 bytes leftover after parsing attributes in process `syz.2.11824'. [ 264.091120][T30484] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 264.175196][T30492] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 264.240024][T30471] /dev/sr0: Can't open blockdev [ 264.583932][T30546] ipt_REJECT: TCP_RESET invalid for non-tcp [ 264.697228][T30561] bond0: (slave bond_slave_1): Releasing backup interface [ 265.299534][T30650] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 265.373115][T30656] netlink: 868 bytes leftover after parsing attributes in process `syz.1.11937'. [ 265.499652][T30668] netlink: 'syz.2.11942': attribute type 5 has an invalid length. [ 265.507937][T30668] ip6erspan0: entered promiscuous mode [ 265.702401][T30691] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 265.777752][T30703] new mount options do not match the existing superblock, will be ignored [ 266.138895][T30741] netlink: 'syz.0.11978': attribute type 2 has an invalid length. [ 266.142275][T30741] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11978'. [ 266.189382][T30747] trusted_key: encrypted_key: hex blob is missing [ 266.319039][T30764] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11990'. [ 266.394154][T30775] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11995'. [ 266.398201][T30775] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11995'. [ 266.449318][T30783] SET target dimension over the limit! [ 266.488714][T30789] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12002'. [ 266.492469][T30789] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12002'. [ 266.512944][T30793] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 266.515141][T30793] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 266.519377][T30793] vhci_hcd vhci_hcd.0: Device attached [ 266.545499][T30794] vhci_hcd: unknown pdu 1 [ 266.547937][ T12] vhci_hcd vhci_hcd.2: stop threads [ 266.550198][ T12] vhci_hcd vhci_hcd.2: release socket [ 266.552558][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 266.712018][T30821] fuse: Bad value for 'fd' [ 267.056695][T30859] openvswitch: netlink: Missing key (keys=40, expected=100) [ 267.104058][T30866] netlink: 'syz.1.12038': attribute type 1 has an invalid length. [ 267.128972][ T41] audit: type=1326 audit(267.000:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30867 comm="syz.2.12041" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f43579 code=0x0 [ 267.368468][T30897] netlink: 'syz.1.12054': attribute type 3 has an invalid length. [ 267.505036][T30913] ALSA: mixer_oss: invalid OSS volume '' [ 267.541601][T30918] program syz.1.12064 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.665905][T30928] netlink: 'syz.1.12069': attribute type 1 has an invalid length. [ 267.731825][ T41] audit: type=1400 audit(267.600:236): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A04 pid=30934 comm="syz.0.12072" [ 268.170467][T30995] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.230802][T31004] SET target dimension over the limit! [ 268.468585][T31038] __nla_validate_parse: 4 callbacks suppressed [ 268.468606][T31038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12123'. [ 268.510433][T31043] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 268.513128][T31043] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 268.517202][T31043] vhci_hcd vhci_hcd.0: Device attached [ 268.524436][T31044] usbip_core: unknown command [ 268.526853][T31044] vhci_hcd: unknown pdu 3587178197 [ 268.529089][T31044] usbip_core: unknown command [ 268.531142][ T74] vhci_hcd vhci_hcd.0: stop threads [ 268.533470][ T74] vhci_hcd vhci_hcd.0: release socket [ 268.535683][ T74] vhci_hcd vhci_hcd.0: disconnect device [ 269.063959][T31051] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12129'. [ 269.067587][T31051] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12129'. [ 269.092286][T31050] Process accounting resumed [ 269.327359][ T41] audit: type=1326 audit(269.200:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31064 comm="syz.1.12137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 269.335672][ T41] audit: type=1326 audit(269.200:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31064 comm="syz.1.12137" exe="/syz-executor" sig=0 arch=40000003 syscall=183 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 269.346022][ T41] audit: type=1326 audit(269.200:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31064 comm="syz.1.12137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 269.356316][ T41] audit: type=1326 audit(269.200:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31064 comm="syz.1.12137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 269.370502][T31067] Cannot find add_set index 0 as target [ 269.379930][T31073] : renamed from dummy0 (while UP) [ 269.621147][T31099] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 269.690153][T31107] netlink: 228 bytes leftover after parsing attributes in process `syz.0.12157'. [ 269.815994][T31119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.866595][T31124] Unknown options in mask b7f2 [ 270.079462][T31137] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 270.119780][T31139] random: crng reseeded on system resumption [ 270.231918][T31143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12175'. [ 270.290463][T31149] Process accounting resumed [ 270.375754][T31165] erofs (device nbd0): cannot find valid erofs superblock [ 270.559821][T31196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12201'. [ 270.739556][T31225] netlink: 6 bytes leftover after parsing attributes in process `syz.0.12215'. [ 270.839863][T31236] netlink: 'syz.2.12221': attribute type 3 has an invalid length. [ 270.844293][T31236] netlink: 3 bytes leftover after parsing attributes in process `syz.2.12221'. [ 270.844405][T31238] xt_connbytes: Forcing CT accounting to be enabled [ 270.851391][T31238] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 271.285239][T31309] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 271.439887][T31324] xt_CT: No such helper "pptp" [ 271.469896][T31309] /dev/sr0: Can't open blockdev [ 271.512749][T31337] netlink: 7 bytes leftover after parsing attributes in process `syz.0.12271'. [ 271.544062][T31337] netlink: 7 bytes leftover after parsing attributes in process `syz.0.12271'. [ 271.741876][T31367] fuse: Invalid rootmode [ 272.273844][T31448] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 272.276472][T31448] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 272.281543][T31448] vhci_hcd vhci_hcd.0: Device attached [ 272.288593][T31449] usbip_core: unknown command [ 272.291358][T31449] vhci_hcd: unknown pdu 3587178197 [ 272.293871][T31449] usbip_core: unknown command [ 272.295652][ T1152] vhci_hcd vhci_hcd.3: stop threads [ 272.298813][ T1152] vhci_hcd vhci_hcd.3: release socket [ 272.301220][ T1152] vhci_hcd vhci_hcd.3: disconnect device [ 272.307972][T31454] binder: 31453:31454 ioctl c00c6211 ffffffff returned -14 [ 272.719243][T31491] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 272.887543][T31491] /dev/sr0: Can't open blockdev [ 272.899867][ T41] audit: type=1326 audit(272.770:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31497 comm="syz.3.12340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 272.908420][ T41] audit: type=1326 audit(272.770:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31497 comm="syz.3.12340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 272.917703][ T41] audit: type=1326 audit(272.770:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31497 comm="syz.3.12340" exe="/syz-executor" sig=0 arch=40000003 syscall=47 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 272.925609][ T41] audit: type=1326 audit(272.770:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31497 comm="syz.3.12340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 273.028598][T31437] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 273.031494][T31437] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 273.036778][T31437] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 273.038740][T31437] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 273.311615][T31512] 8021q: adding VLAN 0 to HW filter on device bond4 [ 273.433270][ T41] audit: type=1326 audit(273.300:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31532 comm="syz.2.12357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 273.443731][ T41] audit: type=1326 audit(273.300:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31532 comm="syz.2.12357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 273.456458][ T41] audit: type=1326 audit(273.300:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31532 comm="syz.2.12357" exe="/syz-executor" sig=0 arch=40000003 syscall=162 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 273.463662][ T41] audit: type=1326 audit(273.300:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31532 comm="syz.2.12357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 273.472486][ T41] audit: type=1326 audit(273.300:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31532 comm="syz.2.12357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 273.476716][T31536] comedi comedi3: comedi_config --init_data is deprecated [ 273.641333][T31554] [U]  [ 273.829228][T31575] ata1.00: invalid multi_count 1 ignored [ 274.118972][T31612] __nla_validate_parse: 1 callbacks suppressed [ 274.118992][T31612] netlink: 17 bytes leftover after parsing attributes in process `syz.2.12394'. [ 274.124338][T31612] openvswitch: netlink: Tunnel attr 0 has unexpected len 65 expected 8 [ 274.226666][T31627] befs: (loop3): No write support. Marking filesystem read-only [ 274.229361][T31627] befs: (loop3): unable to read superblock [ 274.310174][T31638] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 274.363312][T31646] netlink: 'syz.1.12407': attribute type 1 has an invalid length. [ 274.364599][T31619] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.12397'. [ 274.447552][T31649] usb usb3: usbfs: process 31649 (syz.3.12408) did not claim interface 0 before use [ 274.620656][T31687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.772664][T31716] TCP: TCP_TX_DELAY enabled [ 274.818403][T31722] overlayfs: workdir and upperdir must be separate subtrees [ 274.988011][T31750] netlink: 1544 bytes leftover after parsing attributes in process `syz.0.12446'. [ 275.226370][T31790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12462'. [ 275.229475][T31790] netlink: 68 bytes leftover after parsing attributes in process `syz.1.12462'. [ 275.259672][T31795] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 275.393255][T31818] 9pnet_fd: p9_fd_create_unix (31818): problem connecting socket: ./file0/file0: -2 [ 275.980356][T31874] /dev/sr0: Can't open blockdev [ 276.194033][ T13] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20001 - 0 [ 276.198197][ T13] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20001 - 0 [ 276.209553][ T13] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20001 - 0 [ 276.213418][T31945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12523'. [ 276.256362][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 276.266210][T31952] tmpfs: Bad value for 'mpol' [ 276.406311][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 276.418016][ T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 276.420796][ T10] usb 5-1: config 179 has no interface number 0 [ 276.423267][ T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 276.436243][ T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 276.440053][ T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 276.444533][ T10] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 276.449258][ T10] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 276.453515][ T10] usb 5-1: config 179 interface 65 has no altsetting 0 [ 276.455878][ T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 276.459046][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.498447][ T10] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input46 [ 276.539167][T31976] cgroup: Name too long [ 276.547306][ T5334] input input46: unable to receive magic message: -110 [ 276.632709][T31440] input input46: unable to receive magic message: -32 [ 276.725549][T32002] libceph: resolve '400' (ret=-3): failed [ 276.776700][T31915] input input46: unable to receive magic message: -32 [ 276.777171][ T41] audit: type=1326 audit(276.650:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32007 comm="syz.2.12550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 276.819212][ T10] usb 5-1: USB disconnect, device number 10 [ 276.821364][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 277.157865][T32056] openvswitch: netlink: IP tunnel dst address not specified [ 277.237841][T32070] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12580'. [ 277.241639][T32070] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12580'. [ 277.389004][T32086] IPVS: length: 191 != 8 [ 277.627541][T32118] rdma_rxe: rxe_newlink: failed to add vcan0 [ 277.649756][T32122] CIFS mount error: No usable UNC path provided in device string! [ 277.649756][T32122] [ 277.653951][T32122] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 277.898646][T32142] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 277.943159][T32146] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 277.962644][T32148] xt_ecn: cannot match TCP bits for non-tcp packets [ 278.043513][T32066] orangefs_mount: mount request failed with -4 [ 278.131756][T32168] sctp: [Deprecated]: syz.1.12629 (pid 32168) Use of int in max_burst socket option. [ 278.131756][T32168] Use struct sctp_assoc_value instead [ 278.276926][T32185] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12637'. [ 278.553458][T32209] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12650'. [ 278.558921][T32211] kAFS: unable to lookup cell '(,c' [ 278.641574][T32221] netlink: 'syz.2.12655': attribute type 2 has an invalid length. [ 278.728617][T32233] netlink: 'syz.1.12661': attribute type 8 has an invalid length. [ 278.775997][T32241] xt_hashlimit: invalid interval [ 278.883890][T32255] netlink: 'syz.0.12671': attribute type 10 has an invalid length. [ 278.960737][T32255] bridge0: port 3() entered disabled state [ 278.963863][T32255] netdevsim netdevsim0 : left promiscuous mode [ 278.966085][T32255] bridge0: port 3() entered disabled state [ 279.030357][T32255] team0: Port device  added [ 279.041896][T32259] vxcan3: entered promiscuous mode [ 279.044055][T32259] vxcan3: entered allmulticast mode [ 279.280687][T32292] netlink: 'syz.2.12691': attribute type 75 has an invalid length. [ 279.380738][T32310] ntfs3(nbd2): try to read out of volume at offset 0x0 [ 279.401829][T32313] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 279.466385][T32316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.471476][T32318] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 279.510185][T32324] netlink: 'syz.2.12706': attribute type 13 has an invalid length. [ 279.557603][T32324] gretap0: refused to change device tx_queue_len [ 279.561095][T32324] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 279.680748][T32344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12715'. [ 279.684478][T32344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12715'. [ 279.810526][T32363] bond0: option ad_select: unable to set because the bond device is up [ 279.885405][T32369] random: crng reseeded on system resumption [ 279.962278][T32378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12731'. [ 280.398594][T32436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12761'. [ 280.589579][T32466] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12776'. [ 280.632758][T32473] program syz.2.12779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.994090][T32523] bond7: option ad_actor_sys_prio: invalid value (0) [ 280.996835][T32523] bond7: option ad_actor_sys_prio: allowed values 1 - 65535 [ 281.027898][T32523] bond7 (unregistering): Released all slaves [ 281.141654][T32541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12812'. [ 281.217105][ T41] kauditd_printk_skb: 3 callbacks suppressed [ 281.217116][ T41] audit: type=1326 audit(281.090:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32548 comm="syz.1.12815" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 281.234035][ T41] audit: type=1326 audit(281.090:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32548 comm="syz.1.12815" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 281.244511][ T41] audit: type=1326 audit(281.090:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32548 comm="syz.1.12815" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 281.253710][ T41] audit: type=1326 audit(281.090:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32548 comm="syz.1.12815" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 281.262566][ T41] audit: type=1326 audit(281.090:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32548 comm="syz.1.12815" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 281.294890][T32560] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 281.414541][ T41] audit: type=1800 audit(281.280:259): pid=32577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12830" name="bus" dev="tmpfs" ino=16156 res=0 errno=0 [ 282.003292][T32649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12866'. [ 282.319939][T32682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.524847][T32716] netlink: 'syz.3.12898': attribute type 2 has an invalid length. [ 282.715737][T32748] netlink: 'syz.3.12912': attribute type 29 has an invalid length. [ 282.795782][T32760] netlink: 'syz.2.12920': attribute type 1 has an invalid length. [ 282.799418][T32760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.923186][ T318] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12933'. [ 282.927496][ T318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12933'. [ 282.968396][ T322] comedi comedi0: Minor 2147483647 is invalid! [ 283.154570][ T348] netlink: 188 bytes leftover after parsing attributes in process `syz.2.12948'. [ 283.359786][ T380] NILFS (nullb0): couldn't find nilfs on the device [ 283.410818][ T387] syz.1.12966: vmalloc error: size 4294967294, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 283.418006][ T387] CPU: 0 UID: 0 PID: 387 Comm: syz.1.12966 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.418026][ T387] Tainted: [L]=SOFTLOCKUP [ 283.418031][ T387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 283.418038][ T387] Call Trace: [ 283.418042][ T387] [ 283.418047][ T387] dump_stack_lvl+0x100/0x190 [ 283.418065][ T387] warn_alloc.cold+0x95/0x1c1 [ 283.418084][ T387] ? __pfx_warn_alloc+0x10/0x10 [ 283.418109][ T387] __vmalloc_node_range_noprof+0x1252/0x1530 [ 283.418120][ T387] ? __pfx___might_resched+0x10/0x10 [ 283.418137][ T387] ? rcu_is_watching+0x12/0xc0 [ 283.418148][ T387] ? trace_contention_end+0xd6/0x110 [ 283.418163][ T387] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 283.418182][ T387] ? dvb_demux_do_ioctl+0x929/0x1200 [ 283.418199][ T387] ? find_held_lock+0x2b/0x80 [ 283.418210][ T387] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 283.418223][ T387] ? tomoyo_path_number_perm+0x188/0x580 [ 283.418243][ T387] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 283.418259][ T387] __vmalloc_node_noprof+0xad/0xf0 [ 283.418270][ T387] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 283.418288][ T387] dvb_demux_do_ioctl+0x9e0/0x1200 [ 283.418305][ T387] ? do_vfs_ioctl+0x226/0x13e0 [ 283.418324][ T387] dvb_usercopy+0x167/0x340 [ 283.418337][ T387] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 283.418357][ T387] ? __pfx_dvb_usercopy+0x10/0x10 [ 283.418376][ T387] ? __fget_files+0x21f/0x3d0 [ 283.418391][ T387] dvb_demux_ioctl+0x29/0x40 [ 283.418406][ T387] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 283.418419][ T387] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 283.418431][ T387] __do_fast_syscall_32+0xde/0x660 [ 283.418448][ T387] do_fast_syscall_32+0x32/0x70 [ 283.418463][ T387] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.418476][ T387] RIP: 0023:0xf746d579 [ 283.418485][ T387] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 283.418495][ T387] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 283.418509][ T387] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000006f2d [ 283.418519][ T387] RDX: 00000000fffffffe RSI: 0000000000000000 RDI: 0000000000000000 [ 283.418528][ T387] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.418536][ T387] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 283.418545][ T387] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.418564][ T387] [ 283.418568][ T387] Mem-Info: [ 283.516950][ T387] active_anon:424 inactive_anon:907 isolated_anon:0 [ 283.516950][ T387] active_file:8062 inactive_file:7386 isolated_file:0 [ 283.516950][ T387] unevictable:1768 dirty:339 writeback:0 [ 283.516950][ T387] slab_reclaimable:6633 slab_unreclaimable:60416 [ 283.516950][ T387] mapped:21670 shmem:1774 pagetables:1316 [ 283.516950][ T387] sec_pagetables:331 bounce:0 [ 283.516950][ T387] kernel_misc_reclaimable:0 [ 283.516950][ T387] free:67508 free_pcp:2734 free_cma:0 [ 283.534606][ T387] Node 0 active_anon:344kB inactive_anon:212kB active_file:2524kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:188kB dirty:44kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9312kB pagetables:1508kB sec_pagetables:1144kB all_unreclaimable? yes Balloon:0kB [ 283.546352][ T387] Node 1 active_anon:1352kB inactive_anon:3416kB active_file:29724kB inactive_file:29344kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:86492kB dirty:1312kB writeback:0kB shmem:3560kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4116kB pagetables:3456kB sec_pagetables:180kB all_unreclaimable? no Balloon:0kB [ 283.558398][ T387] Node 0 DMA free:2696kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:120kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.571318][ T387] lowmem_reserve[]: 0 288 288 288 288 [ 283.573550][ T387] Node 0 DMA32 free:16384kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:0KB free_highatomic:0KB active_anon:344kB inactive_anon:212kB active_file:2524kB inactive_file:200kB unevictable:3536kB writepending:44kB zspages:1176kB present:1032196kB managed:295104kB mlocked:0kB bounce:0kB free_pcp:5104kB local_pcp:1668kB free_cma:0kB [ 283.587743][ T387] lowmem_reserve[]: 0 0 0 0 0 [ 283.589996][ T387] Node 1 DMA32 free:250824kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1452kB inactive_anon:3416kB active_file:29724kB inactive_file:29344kB unevictable:3536kB writepending:1312kB zspages:3892kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:6296kB local_pcp:864kB free_cma:0kB [ 283.606246][ T387] lowmem_reserve[]: 0 0 0 0 0 [ 283.607913][ T387] Node 0 DMA: 40*4kB (UM) 25*8kB (UM) 12*16kB (UM) 13*32kB (UM) 5*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2696kB [ 283.614048][ T387] Node 0 DMA32: 84*4kB (UME) 476*8kB (UME) 255*16kB (UME) 33*32kB (UME) 49*64kB (UME) 21*128kB (UME) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16384kB [ 283.620503][ T387] Node 1 DMA32: 3538*4kB (UME) 4266*8kB (UME) 3359*16kB (UME) 682*32kB (UME) 381*64kB (UME) 177*128kB (UME) 35*256kB (UME) 92*512kB (U) 17*1024kB (UM) 3*2048kB (M) 0*4096kB = 250504kB [ 283.628385][ T387] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.631736][ T387] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 283.634612][ T387] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.637690][ T387] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 283.641692][ T387] 18090 total pagecache pages [ 283.643309][ T387] 872 pages in swap cache [ 283.644804][ T387] Free swap = 52892kB [ 283.646633][ T387] Total swap = 124996kB [ 283.648292][ T387] 524155 pages RAM [ 283.649716][ T387] 0 pages HighMem/MovableOnly [ 283.651712][ T387] 209486 pages reserved [ 283.653097][ T387] 0 pages cma reserved [ 283.963073][ T458] ata1.00: invalid cdb length 6 [ 284.014146][ T465] netlink: 'syz.3.13004': attribute type 1 has an invalid length. [ 284.288439][ T502] /dev/sg0: Can't lookup blockdev [ 285.542174][ T571] Timeout policy `syz1' can only be used by L3 protocol number 9 [ 285.648893][ T584] __nla_validate_parse: 9 callbacks suppressed [ 285.648911][ T584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13059'. [ 285.655510][ T584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13059'. [ 285.858552][ T609] ip6t_rpfilter: unknown options [ 286.038577][ T637] dlm: no locking on control device [ 286.616525][ T713] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 286.680396][ T726] netlink: 'syz.2.13129': attribute type 33 has an invalid length. [ 286.683986][ T726] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13129'. [ 286.914270][ T763] misc userio: The device must be registered before sending interrupts [ 287.072063][ T787] comedi comedi0: Minor 3 specified more than once! [ 287.132733][ T41] audit: type=1400 audit(287.000:260): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 'syz.3.13169': attribute type 1 has an invalid length. [ 287.212808][ C3] sd 0:0:0:0: [sda] tag#20 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 287.218329][ C3] sd 0:0:0:0: [sda] tag#20 CDB: Test Unit Ready [ 287.290583][ T824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13176'. [ 287.578268][ T869] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 287.888346][ T910] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 287.892689][ T910] exFAT-fs (nbd2): unable to read boot sector [ 287.894833][ T910] exFAT-fs (nbd2): failed to read boot sector [ 287.896929][ T910] exFAT-fs (nbd2): failed to recognize exfat type [ 288.267866][ T953] netlink: 'syz.2.13235': attribute type 32 has an invalid length. [ 288.271143][ T953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13235'. [ 288.274909][ T953] netlink: 'syz.2.13235': attribute type 32 has an invalid length. [ 288.388428][ T968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13240'. [ 288.523829][ T993] kAFS: unable to lookup cell '.' [ 288.788644][ T1043] netlink: 'syz.1.13270': attribute type 1 has an invalid length. [ 288.844609][ T1049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13273'. [ 289.148119][ T1111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13294'. [ 289.355095][ T1159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.429464][ T1173] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.13313'. [ 289.450364][ T41] audit: type=1107 audit(289.320:261): pid=1177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 289.569353][ T1202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13325'. [ 289.793110][ T1223] xt_CT: No such helper "pptp" [ 289.828645][ T1234] netlink: 'syz.0.13341': attribute type 11 has an invalid length. [ 290.107986][ T1278] 8021q: adding VLAN 0 to HW filter on device bond13 [ 290.255901][ T41] audit: type=1400 audit(290.120:262): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=1303 comm="syz.1.13374" [ 291.332236][ T1345] netlink: 'syz.3.13391': attribute type 21 has an invalid length. [ 291.335458][ T1345] __nla_validate_parse: 2 callbacks suppressed [ 291.335473][ T1345] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13391'. [ 291.338025][ T1342] nvme_fabrics: unknown parameter or missing value 'full 00000000000000000009 00000000000000000008' in ctrl creation request [ 291.346032][ T1345] netlink: 'syz.3.13391': attribute type 4 has an invalid length. [ 291.351575][ T1345] netlink: 'syz.3.13391': attribute type 3 has an invalid length. [ 291.354955][ T1345] netlink: 3 bytes leftover after parsing attributes in process `syz.3.13391'. [ 291.367033][ T1347] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 291.569563][ T1379] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 291.771202][ T1407] new mount options do not match the existing superblock, will be ignored [ 291.801885][ T1410] netlink: 'syz.1.13424': attribute type 16 has an invalid length. [ 291.804792][ T1410] netlink: 'syz.1.13424': attribute type 3 has an invalid length. [ 291.809635][ T1410] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13424'. [ 291.872001][ T1424] netlink: 'syz.0.13429': attribute type 1 has an invalid length. [ 292.199122][ T1470] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 292.238129][ T1476] netlink: 'syz.1.13455': attribute type 4 has an invalid length. [ 292.302289][ T1489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13461'. [ 292.404933][ T1507] ip6_vti0: entered promiscuous mode [ 292.533273][ T1524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13478'. [ 292.875437][ T1581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13505'. [ 292.985264][ T1596] netlink: 72 bytes leftover after parsing attributes in process `syz.1.13513'. [ 293.019920][ T1600] netlink: 'syz.2.13515': attribute type 1 has an invalid length. [ 293.059700][ T1608] netlink: 'syz.2.13519': attribute type 2 has an invalid length. [ 293.166588][ T1620] trusted_key: encrypted_key: keyword 'load|ʓ.V' not recognized [ 293.240230][ T1630] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 293.243054][ T1630] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 293.247349][ T1630] vhci_hcd vhci_hcd.0: Device attached [ 293.249774][ T1631] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 293.255086][ T12] vhci_hcd vhci_hcd.2: stop threads [ 293.257333][ T12] vhci_hcd vhci_hcd.2: release socket [ 293.259091][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 293.660393][ T1694] binder: 1693:1694 ioctl c0306201 80000180 returned -14 [ 293.801392][ T1717] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 293.877215][ T1726] veth0_macvtap: left allmulticast mode [ 293.879647][ T1726] veth0_macvtap: left promiscuous mode [ 293.926633][ T1736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13582'. [ 294.002503][ T1750] netlink: 200 bytes leftover after parsing attributes in process `syz.2.13590'. [ 294.202594][ T1783] netlink: 256 bytes leftover after parsing attributes in process `syz.0.13604'. [ 294.414063][ T1812] 9pnet_fd: Insufficient options for proto=fd [ 294.464425][ T1819] kAFS: unable to lookup cell '/,' [ 294.883058][ T1883] tipc: Trying to set illegal importance in message [ 294.922539][ T1890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.012763][ T1907] No source specified [ 295.053413][ T1915] SET target dimension over the limit! [ 295.125098][ T1923] validate_nla: 2 callbacks suppressed [ 295.125116][ T1923] netlink: 'syz.0.13674': attribute type 10 has an invalid length. [ 295.169728][ T41] audit: type=1326 audit(295.040:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1932 comm="syz.2.13679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 295.177669][ T41] audit: type=1326 audit(295.040:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1932 comm="syz.2.13679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 295.184098][ T41] audit: type=1326 audit(295.040:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1932 comm="syz.2.13679" exe="/syz-executor" sig=0 arch=40000003 syscall=62 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 295.193580][ T41] audit: type=1326 audit(295.040:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1932 comm="syz.2.13679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 295.205148][ T41] audit: type=1326 audit(295.040:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1932 comm="syz.2.13679" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 295.391425][ T1959] (syz.3.13692,1959,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 295.393929][ T1959] (syz.3.13692,1959,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 295.397532][ T1959] (syz.3.13692,1959,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 295.401041][ T1959] (syz.3.13692,1959,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 295.645130][ T1993] ip6tnl2: entered promiscuous mode [ 295.648201][ T1993] ip6tnl2: entered allmulticast mode [ 295.783611][ T41] audit: type=1326 audit(295.650:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2015 comm="syz.1.13720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 295.795475][ T41] audit: type=1326 audit(295.650:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2015 comm="syz.1.13720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 295.806902][ T41] audit: type=1326 audit(295.650:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2015 comm="syz.1.13720" exe="/syz-executor" sig=0 arch=40000003 syscall=46 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 295.815631][ T41] audit: type=1326 audit(295.650:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2015 comm="syz.1.13720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 295.817833][ T2019] openvswitch: netlink: Flow key attr not present in new flow. [ 295.846298][ T41] audit: type=1326 audit(295.650:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2015 comm="syz.1.13720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 295.990500][ T2044] IPv6: sit3: Disabled Multicast RS [ 295.993525][ T2044] sit3: entered allmulticast mode [ 296.032967][ T2052] netlink: 'syz.0.13738': attribute type 1 has an invalid length. [ 296.173423][ T2077] nft_compat: unsupported protocol 0 [ 296.398395][ T2114] No source specified [ 296.716574][ T2171] dlm: no locking on control device [ 296.753483][ T2178] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 296.755756][ T2178] /dev/nullb0: Can't open blockdev [ 296.964673][ T2219] sctp: [Deprecated]: syz.1.13820 (pid 2219) Use of int in max_burst socket option deprecated. [ 296.964673][ T2219] Use struct sctp_assoc_value instead [ 297.105396][ T2245] __nla_validate_parse: 5 callbacks suppressed [ 297.105410][ T2245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13833'. [ 297.170574][ T2255] netlink: 160 bytes leftover after parsing attributes in process `syz.3.13839'. [ 297.210937][ T2264] netlink: 'syz.0.13842': attribute type 21 has an invalid length. [ 297.214315][ T2264] netlink: 'syz.0.13842': attribute type 1 has an invalid length. [ 297.219824][ T2264] netlink: 100 bytes leftover after parsing attributes in process `syz.0.13842'. [ 298.443379][ T2316] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13865'. [ 298.478016][ T2318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13867'. [ 299.346490][ T2336] Process accounting paused [ 299.413085][ T2346] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 299.431140][ T2348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13881'. [ 299.483657][ T2356] overlayfs: missing 'lowerdir' [ 299.822022][ T2403] macvtap0: entered promiscuous mode [ 300.203719][ T2451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13929'. [ 300.215974][ T2454] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 300.298809][ T2459] Process accounting paused [ 300.401834][ T2483] netlink: 'syz.0.13945': attribute type 1 has an invalid length. [ 300.510756][ T2501] QAT: failed to copy from user cfg_data. [ 300.732055][ T2527] netlink: 72 bytes leftover after parsing attributes in process `syz.0.13965'. [ 300.735098][ T2528] netlink: 220 bytes leftover after parsing attributes in process `syz.1.13964'. [ 301.092606][ T2583] openvswitch: netlink: Missing key (keys=40, expected=80) [ 301.201989][ T2599] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 301.249063][ T2608] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13997'. [ 301.685104][ T2679] overlay: Bad value for 'workdir' [ 301.812428][ T2692] random: crng reseeded on system resumption [ 301.876588][ T2675] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 301.879359][ T2675] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 302.222207][ T2758] QAT: failed to copy from user cfg_data. [ 302.309577][ T2773] netlink: 'syz.3.14062': attribute type 4 has an invalid length. [ 302.450618][ T2756] /dev/sr0: Can't open blockdev [ 302.561803][ T2816] __nla_validate_parse: 3 callbacks suppressed [ 302.561816][ T2816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14079'. [ 302.569372][ T2816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14079'. [ 302.797250][ T2858] netlink: 'syz.2.14093': attribute type 21 has an invalid length. [ 302.800728][ T2858] netlink: 128 bytes leftover after parsing attributes in process `syz.2.14093'. [ 302.804877][ T2858] netlink: 'syz.2.14093': attribute type 5 has an invalid length. [ 302.808984][ T2858] netlink: 'syz.2.14093': attribute type 6 has an invalid length. [ 302.812260][ T2858] netlink: 3 bytes leftover after parsing attributes in process `syz.2.14093'. [ 302.888027][ T2865] bond5 (unregistering): Released all slaves [ 302.936983][ T2880] ./bus: Can't lookup blockdev [ 303.106125][ T2899] netlink: 'syz.0.14107': attribute type 3 has an invalid length. [ 303.112125][ T2899] netlink: 'syz.0.14107': attribute type 3 has an invalid length. [ 303.423055][ T2945] netlink: 'syz.3.14126': attribute type 4 has an invalid length. [ 303.542717][ T2966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14135'. [ 303.546339][ T2966] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14135'. [ 303.549844][ T2966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14135'. [ 303.553804][ T2966] netlink: 60 bytes leftover after parsing attributes in process `syz.1.14135'. [ 303.555281][ T2970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 303.558070][ T2966] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14135'. [ 303.559986][ T2970] IPv6: NLM_F_CREATE should be set when creating new route [ 303.814230][ T3020] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 303.816609][ T3020] IPv6: NLM_F_CREATE should be set when creating new route [ 303.820836][ T3022] sctp: [Deprecated]: syz.2.14155 (pid 3022) Use of int in maxseg socket option. [ 303.820836][ T3022] Use struct sctp_assoc_value instead [ 304.009563][ T3049] netlink: 'syz.1.14168': attribute type 11 has an invalid length. [ 304.038752][ T3055] ipvlan0: left allmulticast mode [ 304.283362][ T3092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14189'. [ 304.559362][ T3132] xt_cgroup: path and classid specified [ 304.700624][ T3152] tmpfs: Bad value for 'mpol' [ 304.733150][ T3159] ipt_ECN: cannot use operation on non-tcp rule [ 304.798533][ T3166] bond14: entered promiscuous mode [ 304.800799][ T3166] 8021q: adding VLAN 0 to HW filter on device bond14 [ 304.872463][ T3177] block nbd2: NBD_DISCONNECT [ 304.945060][ T3181] netlink: 'syz.2.14233': attribute type 1 has an invalid length. [ 305.186014][ T3202] random: crng reseeded on system resumption [ 305.193819][ T3202] Hibernate inconsistent memory map detected! [ 305.196489][ T3202] PM: hibernation: Image mismatch: architecture specific data [ 305.709782][ T41] kauditd_printk_skb: 10 callbacks suppressed [ 305.709798][ T41] audit: type=1400 audit(305.580:283): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=3262 comm="syz.3.14271" [ 305.841195][ T3276] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 305.845880][ T3277] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 1 [ 305.854262][ T3278] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 2 [ 305.858665][ T3279] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 3 [ 306.013258][ T3303] netlink: 'syz.1.14287': attribute type 1 has an invalid length. [ 306.078484][ T3313] netlink: 'syz.0.14293': attribute type 1 has an invalid length. [ 306.101470][ T3317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.362155][ T3367] xt_ecn: cannot match TCP bits for non-tcp packets [ 306.539485][ T3397] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 306.635674][ T3411] rtc_cmos 00:05: Alarms can be up to one day in the future [ 306.662678][ T3415] deleting an unspecified loop device is not supported. [ 306.927121][ T41] audit: type=1326 audit(306.800:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3458 comm="syz.2.14363" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 306.935261][ T41] audit: type=1326 audit(306.800:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3458 comm="syz.2.14363" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 306.946404][ T41] audit: type=1326 audit(306.800:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3458 comm="syz.2.14363" exe="/syz-executor" sig=0 arch=40000003 syscall=447 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 306.953942][ T41] audit: type=1326 audit(306.800:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3458 comm="syz.2.14363" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 306.960734][ T41] audit: type=1326 audit(306.800:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3458 comm="syz.2.14363" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 307.056879][ T3474] program syz.3.14370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.385187][ T41] audit: type=1400 audit(307.250:289): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=3508 comm="syz.1.14385" [ 307.443884][ T3514] : entered promiscuous mode [ 307.478916][ T41] audit: type=1326 audit(307.350:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3519 comm="syz.0.14392" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 307.490263][ T41] audit: type=1326 audit(307.360:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3519 comm="syz.0.14392" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 307.506638][ T41] audit: type=1326 audit(307.360:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3519 comm="syz.0.14392" exe="/syz-executor" sig=0 arch=40000003 syscall=450 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 307.548829][ T3528] xt_hashlimit: invalid rate [ 307.929889][ T3591] netlink: 'syz.0.14418': attribute type 4 has an invalid length. [ 307.933623][ T3591] __nla_validate_parse: 9 callbacks suppressed [ 307.933637][ T3591] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14418'. [ 307.941887][ T3590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14417'. [ 308.196662][ T3617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14431'. [ 309.341411][ T3660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14453'. [ 309.501434][ T3679] usb usb9: usbfs: process 3679 (syz.0.14461) did not claim interface 16 before use [ 309.545380][ T3683] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 309.691472][ T3693] netlink: 1072 bytes leftover after parsing attributes in process `syz.3.14469'. [ 309.742347][ T3703] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14473'. [ 309.745463][ T3703] netlink: 43 bytes leftover after parsing attributes in process `syz.2.14473'. [ 309.755569][ T3703] netlink: 'syz.2.14473': attribute type 6 has an invalid length. [ 309.762337][ T3703] netlink: 'syz.2.14473': attribute type 5 has an invalid length. [ 309.765753][ T3703] netlink: 43 bytes leftover after parsing attributes in process `syz.2.14473'. [ 309.950889][ T3729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14486'. [ 309.987827][ T3733] mkiss: ax0: crc mode is auto. [ 310.906895][ T3753] virt_wifi0 speed is unknown, defaulting to 1000 [ 310.910332][ T3753] wg1 speed is unknown, defaulting to 1000 [ 311.266002][ T41] kauditd_printk_skb: 2 callbacks suppressed [ 311.266013][ T41] audit: type=1326 audit(311.130:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3785 comm="syz.3.14510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 311.275821][ T41] audit: type=1326 audit(311.130:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3785 comm="syz.3.14510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 311.282485][ T41] audit: type=1326 audit(311.140:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3785 comm="syz.3.14510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 311.296337][ T41] audit: type=1326 audit(311.140:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3785 comm="syz.3.14510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 311.303859][ T41] audit: type=1326 audit(311.140:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3785 comm="syz.3.14510" exe="/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 311.315952][ T41] audit: type=1326 audit(311.140:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3785 comm="syz.3.14510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 311.323204][ T41] audit: type=1326 audit(311.140:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3785 comm="syz.3.14510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 311.330604][ T41] audit: type=1326 audit(311.150:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3785 comm="syz.3.14510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 311.339467][ T41] audit: type=1326 audit(311.150:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3785 comm="syz.3.14510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 311.345995][ T41] audit: type=1326 audit(311.150:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3785 comm="syz.3.14510" exe="/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 312.493703][ T3840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14536'. [ 313.667954][ T3894] can0: slcan on ptm0. [ 313.772316][ T3902] tipc: Started in network mode [ 313.774436][ T3902] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 313.778726][ T3902] tipc: Enabled bearer , priority 10 [ 313.779869][ T3904] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 313.796463][ T3893] can0 (unregistered): slcan off ptm0. [ 313.973941][ T3920] __nla_validate_parse: 1 callbacks suppressed [ 313.973959][ T3920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14575'. [ 313.982091][ T3920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14575'. [ 313.987315][ T3920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14575'. [ 313.992007][ T3920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14575'. [ 313.995985][ T3920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14575'. [ 314.272352][ T3957] x_tables: ip6_tables: DNAT target: only valid in nat table, not syz1 [ 314.707344][ T3995] mkiss: ax0: crc mode is auto. [ 314.886532][ T1337] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 314.908626][ T5942] tipc: Node number set to 4269801488 [ 315.048396][ T1337] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 315.051285][ T1337] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 315.055535][ T1337] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 315.062208][ T1337] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 315.065810][ T1337] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 315.074044][ T1337] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 315.077672][ T1337] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 315.080203][ T1337] usb 8-1: Product: syz [ 315.081596][ T1337] usb 8-1: Manufacturer: syz [ 315.086602][ T1337] cdc_wdm 8-1:1.0: skipping garbage [ 315.088526][ T1337] cdc_wdm 8-1:1.0: skipping garbage [ 315.091705][ T1337] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 315.093898][ T1337] cdc_wdm 8-1:1.0: Unknown control protocol [ 315.212788][ T4025] virt_wifi0 speed is unknown, defaulting to 1000 [ 315.215512][ T4025] wg1 speed is unknown, defaulting to 1000 [ 315.305226][ T1337] usb 8-1: USB disconnect, device number 14 [ 315.319125][ T4035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.990458][ T4092] ip6tnl2: entered promiscuous mode [ 315.992493][ T4092] ip6tnl2: entered allmulticast mode [ 315.995906][ T4092] team0: Device ip6tnl2 is up. Set it down before adding it as a team port [ 316.125400][ T4111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14660'. [ 316.527725][ T4127] virt_wifi0 speed is unknown, defaulting to 1000 [ 316.531904][ T4127] wg1 speed is unknown, defaulting to 1000 [ 316.648425][ T4139] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 317.163476][ T4172] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 317.198403][ T4180] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14691'. [ 317.245639][ T4188] raw_sendmsg: syz.0.14696 forgot to set AF_INET. Fix it! [ 317.548499][ T4220] IPv6: sit1: Disabled Multicast RS [ 317.551573][ T4220] sit1: entered allmulticast mode [ 318.094923][ T4276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14737'. [ 319.185297][ T4389] Bluetooth: MGMT ver 1.23 [ 319.348304][ T4406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14799'. [ 319.607316][ T4418] mkiss: ax0: crc mode is auto. [ 319.946822][ T4434] smc: net device bond0 applied user defined pnetid SYZ2 [ 320.342476][ T4489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14839'. [ 320.349303][ T4489] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14839'. [ 320.352896][ T4489] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14839'. [ 320.467289][ T1164] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 320.636408][ T1164] usb 7-1: Using ep0 maxpacket: 32 [ 320.639797][ T1164] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 320.643411][ T1164] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 320.647817][ T1164] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 320.651516][ T1164] usb 7-1: config 1 has no interface number 0 [ 320.654129][ T1164] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 320.659518][ T1164] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 320.664894][ T1164] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 320.669547][ T1164] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.679001][ T1164] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 320.881729][ T1164] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 320.963717][ T4536] ptrace attach of "/syz-executor exec"[5941] was attempted by ""[4536] [ 321.011673][ T4541] xt_l2tp: v2 tid > 0xffff: 37482740 [ 321.292635][ T1164] usb 7-1: USB disconnect, device number 10 [ 321.299165][ T1164] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 322.684494][ T4650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14915'. [ 322.810959][ T4658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14919'. [ 322.818636][ T4658] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 322.821091][ T4658] team0: Device ipvlan2 is already an upper device of the team interface [ 323.220116][ T4680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14929'. [ 324.186897][ T4738] program syz.1.14962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.675317][ T1023] hid_parser_main: 7 callbacks suppressed [ 324.675331][ T1023] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 324.683068][ T1023] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 324.686582][ T1023] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 324.689683][ T1023] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 324.694092][ T1023] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 324.697746][ T1023] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 324.704158][ T1023] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 324.707484][ T1023] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 324.710484][ T1023] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 324.713004][ T4781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14972'. [ 324.713578][ T1023] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 324.723933][ T4781] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 324.725188][ T1023] hid-generic 0103:0004:0000.0003: hidraw1: HID v0.02 Device [syz0] on syz1 [ 324.729150][ T4781] team0: Device ipvlan2 is already an upper device of the team interface [ 324.790716][ T4782] fido_id[4782]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 325.569534][ T4818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14988'. [ 325.572667][ T4818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14988'. [ 325.767429][ T4832] pim6reg: entered allmulticast mode [ 325.775429][ T4832] pim6reg: left allmulticast mode [ 325.778247][ T5942] kernel write not supported for file /sg0 (pid: 5942 comm: kworker/3:3) [ 325.992835][ T4853] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15005'. [ 326.083568][ T4865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15011'. [ 326.107440][ T4865] 8021q: adding VLAN 0 to HW filter on device bond5 [ 326.125181][ T4871] comedi comedi3: aio_iiro_16: I/O port conflict (0x4f27,8) [ 326.265788][ T4890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15022'. [ 326.300553][ T4897] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_1, syncid = 0, id = 0 [ 326.939305][ T4970] binder: 4969:4970 ioctl c018620c 80000140 returned -22 [ 327.201779][ T5001] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 327.204488][ T5001] @0: renamed from bond_slave_1 [ 327.292050][ T5009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15079'. [ 327.318495][ T5011] support for cryptoloop has been removed. Use dm-crypt instead. [ 327.406331][ T5021] mkiss: ax0: crc mode is auto. [ 327.492337][ T5029] Bluetooth: MGMT ver 1.23 [ 327.680520][ T5046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15097'. [ 328.759889][ T5054] netlink: 27 bytes leftover after parsing attributes in process `syz.3.15101'. [ 329.317104][ T5114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15126'. [ 329.409194][ T5123] Process accounting resumed [ 329.514773][ T5136] lo: MTU too low for tipc bearer [ 329.516567][ T5136] tipc: Enabling of bearer rejected, failed to enable media [ 330.219872][ T5214] __nla_validate_parse: 1 callbacks suppressed [ 330.219883][ T5214] netlink: 68 bytes leftover after parsing attributes in process `syz.1.15173'. [ 330.224816][ T5214] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15173'. [ 330.359472][ T5218] Process accounting resumed [ 330.393055][ T5236] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 330.437074][ T54] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 330.605097][ T54] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 330.608070][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.612187][ T54] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 330.615062][ T54] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 330.618458][ T54] usb 8-1: Manufacturer: syz [ 330.621702][ T54] usb 8-1: config 0 descriptor?? [ 330.666283][ T54] rc_core: IR keymap rc-hauppauge not found [ 330.668691][ T54] Registered IR keymap rc-empty [ 330.671760][ T54] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 330.675987][ T54] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input50 [ 330.877519][ T41] kauditd_printk_skb: 4 callbacks suppressed [ 330.877536][ T41] audit: type=1326 audit(330.740:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5278 comm="syz.2.15200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 330.882013][ T1337] usb 8-1: USB disconnect, device number 15 [ 330.893446][ T41] audit: type=1326 audit(330.740:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5278 comm="syz.2.15200" exe="/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 330.902491][ T41] audit: type=1326 audit(330.740:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5278 comm="syz.2.15200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 330.910792][ T41] audit: type=1326 audit(330.740:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5278 comm="syz.2.15200" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 330.971742][ T5288] netlink: 'syz.1.15203': attribute type 49 has an invalid length. [ 330.975639][ T5288] netlink: 'syz.1.15203': attribute type 49 has an invalid length. [ 330.994466][ T41] audit: type=1326 audit(330.860:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5291 comm="syz.2.15204" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f43579 code=0x0 [ 331.451892][ T5335] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 331.634818][ T41] audit: type=1326 audit(331.500:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5353 comm="syz.0.15227" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f26579 code=0x0 [ 331.809895][ T5373] binder: 5371:5373 ioctl 541b 0 returned -22 [ 331.867098][ T41] audit: type=1326 audit(331.740:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.1.15240" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 331.874926][ T41] audit: type=1326 audit(331.740:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.1.15240" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 331.882238][ T41] audit: type=1326 audit(331.740:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.1.15240" exe="/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 331.896214][ T41] audit: type=1326 audit(331.740:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5380 comm="syz.1.15240" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 332.169053][ T5405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15250'. [ 332.199120][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15251'. [ 332.391605][ T5423] netlink: 'syz.3.15260': attribute type 4 has an invalid length. [ 332.601373][ T5439] tipc: Started in network mode [ 332.603381][ T5439] tipc: Node identity , cluster identity 4711 [ 332.605302][ T5439] tipc: Failed to obtain node identity [ 332.607480][ T5439] tipc: Enabling of bearer rejected, failed to enable media [ 332.706927][ T5451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.815348][ T5391] ceph: No mds server is up or the cluster is laggy [ 332.863037][ T5466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15282'. [ 332.991419][ T5481] Invalid source name [ 332.993164][ T5481] UBIFS error (pid: 5481): cannot open "usrquota", error -22 [ 333.075263][ T5495] netlink: 'syz.3.15294': attribute type 1 has an invalid length. [ 333.086412][ T5495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.098844][ T5498] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15295'. [ 333.102788][ T5498] netlink: 6 bytes leftover after parsing attributes in process `syz.1.15295'. [ 333.210919][ T5519] netlink: zone id is out of range [ 333.240944][ T5519] netlink: set zone limit has 4 unknown bytes [ 333.253381][ T5519] netlink: zone id is out of range [ 333.359107][ T5545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.538034][ T5572] IPVS: persistence engine module ip_vs_pe_sir not found [ 333.715573][ T5597] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15341'. [ 334.036479][ T5634] nbd: must specify a size in bytes for the device [ 334.162360][ T5656] vim2m vim2m.0: vidioc_s_fmt queue busy [ 334.203249][ T5661] netlink: zone id is out of range [ 334.236232][ T5661] netlink: set zone limit has 4 unknown bytes [ 334.247416][ T5661] netlink: zone id is out of range [ 334.389730][ T1023] kernel write not supported for file /uhid (pid: 1023 comm: kworker/1:3) [ 334.434447][ T5688] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 334.471055][ T5694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15381'. [ 334.531332][ T5701] blktrace: Concurrent blktraces are not allowed on sg0 [ 334.813988][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15402'. [ 336.500649][ T3182] udevd[3182]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 337.018529][ T5884] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 337.069120][ T5893] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 337.071638][ T5893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.266347][ T5911] syz.1.15475 (5911) used obsolete PPPIOCDETACH ioctl [ 337.323224][ T5924] __nla_validate_parse: 1 callbacks suppressed [ 337.323236][ T5924] netlink: 39 bytes leftover after parsing attributes in process `syz.0.15480'. [ 337.356574][ T5924] netlink: 1 bytes leftover after parsing attributes in process `syz.0.15480'. [ 337.407834][ T5948] tmpfs: Cannot change global quota limit on remount [ 337.607523][ T1023] libceph: connect (1)[c::]:6789 error -1 [ 337.607788][ T1023] libceph: mon0 (1)[c::]:6789 connect error [ 337.878673][ T1023] libceph: connect (1)[c::]:6789 error -1 [ 337.878799][ T1023] libceph: mon0 (1)[c::]:6789 connect error [ 338.010533][ T41] kauditd_printk_skb: 12 callbacks suppressed [ 338.010549][ T41] audit: type=1326 audit(337.880:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.3.15511" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73fd579 code=0x0 [ 338.396095][ T1023] libceph: connect (1)[c::]:6789 error -1 [ 338.398397][ T1023] libceph: mon0 (1)[c::]:6789 connect error [ 338.419034][ T6010] ceph: No mds server is up or the cluster is laggy [ 338.660144][ T6070] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.663514][ T6070] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 338.668938][ T6070] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20001 - 0 [ 338.990605][ T6070] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.994243][ T6070] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 338.999560][ T6070] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20001 - 0 [ 339.267403][ T6070] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.271550][ T6070] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 339.275262][ T6070] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20001 - 0 [ 339.322573][ T6127] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.326125][ T6127] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.343928][ T6129] sctp: [Deprecated]: syz.1.15552 (pid 6129) Use of struct sctp_assoc_value in delayed_ack socket option. [ 339.343928][ T6129] Use struct sctp_sack_info instead [ 339.515794][ T6149] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 339.662137][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 339.664855][ T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 339.670730][ T13] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 339.690779][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 339.693468][ T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 339.697215][ T13] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 339.708322][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 339.711855][ T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 339.715227][ T13] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 339.734451][ T10] libceph: connect (1)[c::]:6789 error -22 [ 339.736655][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 339.739031][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 339.741877][ T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 339.744468][ T13] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 340.014423][ T10] libceph: connect (1)[c::]:6789 error -22 [ 340.014560][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 340.132418][ T6198] loop5: detected capacity change from 0 to 7 [ 340.146916][ T6198] Dev loop5: unable to read RDB block 7 [ 340.146958][ T6198] loop5: unable to read partition table [ 340.147059][ T6198] loop5: partition table beyond EOD, truncated [ 340.147094][ T6198] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 340.526595][ T6025] libceph: connect (1)[c::]:6789 error -22 [ 340.526737][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 340.542094][ T6170] ceph: No mds server is up or the cluster is laggy [ 340.623450][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15593'. [ 340.719528][ T6228] program syz.0.15597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.816226][ T6236] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 341.505136][ T6302] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15633'. [ 341.510157][ T6302] netlink: 56 bytes leftover after parsing attributes in process `syz.1.15633'. [ 342.317058][ T6384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15671'. [ 342.624485][ T6415] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15683'. [ 342.635905][ T6416] can0: slcan on ptm0. [ 342.678155][ T6418] syz.2.15685 (6418): drop_caches: 4 [ 342.753817][ T6424] : entered promiscuous mode [ 342.769905][ T6414] can0 (unregistered): slcan off ptm0. [ 343.001562][ T6447] loop5: detected capacity change from 0 to 7 [ 343.009903][ T6447] Dev loop5: unable to read RDB block 7 [ 343.012335][ T6447] loop5: unable to read partition table [ 343.014402][ T6447] loop5: partition table beyond EOD, truncated [ 343.018405][ T6447] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 343.270039][ T6455] binder: 6454:6455 ioctl c00c620f 80000080 returned -22 [ 343.596061][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15717'. [ 343.696823][ T6493] netlink: 184 bytes leftover after parsing attributes in process `syz.1.15722'. [ 344.066616][ T55] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 344.238137][ T55] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 344.241808][ T55] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.259495][ T55] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 344.262954][ T55] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 344.265425][ T55] usb 8-1: Manufacturer: syz [ 344.270255][ T55] usb 8-1: config 0 descriptor?? [ 344.329932][ T55] rc_core: IR keymap rc-hauppauge not found [ 344.331914][ T55] Registered IR keymap rc-empty [ 344.334162][ T55] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 344.342434][ T55] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input52 [ 344.526706][ T5942] usb 8-1: USB disconnect, device number 16 [ 344.767541][ T6568] netlink: 'syz.0.15754': attribute type 5 has an invalid length. [ 345.307323][ T6605] openvswitch: netlink: Missing valid actions attribute. [ 345.307351][ T6605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.531150][ T6627] netlink: 'syz.0.15784': attribute type 1 has an invalid length. [ 345.534141][ T6627] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.15784'. [ 345.992796][ T6671] netlink: 'syz.3.15805': attribute type 1 has an invalid length. [ 345.995920][ T6671] netlink: 216 bytes leftover after parsing attributes in process `syz.3.15805'. [ 346.226682][ T6705] vivid-000: disconnect [ 346.656899][ T6717] sp0: Synchronizing with TNC [ 346.964868][ T6734] i2c i2c-1: Invalid block read size 34 [ 346.999790][ T6739] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 347.004498][ T6737] IPVS: stopping master sync thread 6739 ... [ 347.007416][ T6699] vivid-000: reconnect [ 347.047703][ T6743] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15839'. [ 347.051142][ T6743] block nbd0: not configured, cannot reconfigure [ 347.145362][ T6757] netlink: 96 bytes leftover after parsing attributes in process `syz.0.15845'. [ 348.503965][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15878'. [ 348.815095][ T6849] Invalid logical block size (53355) [ 348.921891][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15894'. [ 349.455876][ T6898] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.15911'. [ 349.697603][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15925'. [ 349.700539][ T6927] tipc: Enabling of bearer rejected, failed to enable media [ 349.921622][ T6957] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 349.976340][ T6964] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 350.832134][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15974'. [ 350.868089][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15975'. [ 351.006102][ T7041] comedi comedi3: pcl812: I/O port conflict (0x4f27,16) [ 351.189841][ T7055] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 351.193286][ T7055] binder: 7054:7055 ioctl 4018620d 800000c0 returned -1 [ 351.655125][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16004'. [ 351.658397][ T7092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16004'. [ 351.997277][ T7130] loop6: detected capacity change from 0 to 2560 [ 352.000760][ T7130] Buffer I/O error on dev loop6, logical block 0, async page read [ 352.016314][ T7130] Buffer I/O error on dev loop6, logical block 0, async page read [ 352.019871][ T7130] Buffer I/O error on dev loop6, logical block 0, async page read [ 352.023302][ T7130] Buffer I/O error on dev loop6, logical block 0, async page read [ 352.027821][ T7130] Buffer I/O error on dev loop6, logical block 0, async page read [ 352.031592][ T7130] Buffer I/O error on dev loop6, logical block 0, async page read [ 352.035241][ T7130] Buffer I/O error on dev loop6, logical block 0, async page read [ 352.038829][ T7130] Buffer I/O error on dev loop6, logical block 0, async page read [ 352.042104][ T7130] ldm_validate_partition_table(): Disk read failed. [ 352.047086][ T7130] Buffer I/O error on dev loop6, logical block 0, async page read [ 352.050516][ T7130] Buffer I/O error on dev loop6, logical block 0, async page read [ 352.054001][ T7130] Dev loop6: unable to read RDB block 0 [ 352.057802][ T7130] loop6: unable to read partition table [ 352.061069][ T7130] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 352.107778][ T41] audit: type=1326 audit(351.980:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm=22 exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 352.115369][ T41] audit: type=1326 audit(351.980:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm=22 exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 352.123156][ T41] audit: type=1326 audit(351.980:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.0.16029" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 352.141761][ T41] audit: type=1326 audit(351.980:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.0.16029" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 352.149555][ T41] audit: type=1326 audit(351.980:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm=22 exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 352.159712][ T41] audit: type=1326 audit(351.980:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm=22 exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 352.170809][ T41] audit: type=1326 audit(351.980:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm=22 exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 352.184744][ T41] audit: type=1326 audit(351.980:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.0.16029" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 352.191715][ T41] audit: type=1326 audit(351.980:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.0.16029" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 352.339432][ T7167] autofs: Bad value for 'fd' [ 352.408651][ T7171] netlink: 512 bytes leftover after parsing attributes in process `syz.1.16043'. [ 353.144398][ T7199] use of bytesused == 0 is deprecated and will be removed in the future, [ 353.148874][ T7199] use the actual size instead. [ 353.527212][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16077'. [ 353.616959][ T7255] netlink: 'syz.3.16083': attribute type 178 has an invalid length. [ 353.783187][ T7272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16091'. [ 353.889455][ T7272] veth5: entered promiscuous mode [ 354.211761][ T7326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16116'. [ 354.321269][ T7332] tmpfs: Cannot retroactively limit inodes [ 354.691865][ T7354] netlink: 'syz.3.16129': attribute type 1 has an invalid length. [ 354.695367][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16129'. [ 354.701902][ T7354] netlink: 658 bytes leftover after parsing attributes in process `syz.3.16129'. [ 354.705875][ T7354] netlink: 'syz.3.16129': attribute type 1 has an invalid length. [ 355.033242][ T7389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.094586][ T7395] xt_socket: unknown flags 0x50 [ 355.199255][ T7401] macvtap1: entered promiscuous mode [ 355.201911][ T7401] macvtap1: entered allmulticast mode [ 355.204224][ T7401] veth1_vlan: entered allmulticast mode [ 355.484525][ T7419] netlink: 536 bytes leftover after parsing attributes in process `syz.1.16161'. [ 355.488063][ T7419] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16161'. [ 355.792942][ T7447] MTD: Couldn't look up 'mountinfo': -2 [ 356.130561][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16182'. [ 356.421678][ T41] audit: type=1326 audit(356.290:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7500 comm="syz.1.16199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 356.660324][ T7519] vivid-002: disconnect [ 356.663198][ T7518] vivid-002: reconnect [ 356.872289][ T7538] Option ' ' to dns_resolver key: bad/missing value [ 357.100396][ T7564] random: crng reseeded on system resumption [ 357.115178][ T7564] Restarting kernel threads ... [ 357.117960][ T7564] Done restarting kernel threads. [ 357.469232][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16246'. [ 357.473905][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16246'. [ 357.582678][ T7613] netlink: 'syz.2.16252': attribute type 1 has an invalid length. [ 357.585909][ T7613] netlink: 'syz.2.16252': attribute type 1 has an invalid length. [ 357.865225][ C1] sr 2:0:0:0: [sr0] tag#22 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 357.868467][ C1] sr 2:0:0:0: [sr0] tag#22 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 359.218737][ T7721] vivid-007: disconnect [ 359.221055][ T7720] vivid-007: reconnect [ 359.252314][ T7723] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 359.414548][ T7737] Process accounting paused [ 359.547936][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16320'. [ 359.550946][ T7752] netlink: 'syz.0.16320': attribute type 5 has an invalid length. [ 359.553933][ T7752] netlink: 'syz.0.16320': attribute type 9 has an invalid length. [ 359.556645][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16320'. [ 359.565716][ T7752] geneve0: entered promiscuous mode [ 359.567678][ T7752] geneve0: entered allmulticast mode [ 359.570292][ T74] netdevsim netdevsim0 : set [1, 1] type 2 family 0 port 256 - 0 [ 359.572857][ T74] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 359.578506][ T74] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 359.581240][ T74] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 359.791150][ T7771] netlink: 'syz.3.16328': attribute type 2 has an invalid length. [ 359.913033][ T7779] mkiss: ax0: crc mode is auto. [ 359.954616][ T7784] sg_write: data in/out 12582877/14 bytes for SCSI command 0x0-- guessing data in; [ 359.954616][ T7784] program syz.1.16334 not setting count and/or reply_len properly [ 360.230548][ T7807] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16345'. [ 360.329719][ T7817] sp0: Synchronizing with TNC [ 360.454588][ T7823] Process accounting paused [ 360.975179][ T5942] kernel write not supported for file /amidi2 (pid: 5942 comm: kworker/3:3) [ 361.363778][ T41] kauditd_printk_skb: 3 callbacks suppressed [ 361.363795][ T41] audit: type=1326 audit(361.230:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.3.16392" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7fc00000 [ 361.580071][ T7935] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 361.626104][ T7948] trusted_key: encrypted_key: key trusted:syz not found [ 362.027194][ T41] audit: type=1326 audit(361.890:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.3.16392" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73fd598 code=0x7fc00000 [ 362.107290][ T8018] vcan1: entered promiscuous mode [ 362.236279][ T1164] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 362.312089][ T8037] overlayfs: conflicting lowerdir path [ 362.386292][ T1164] usb 5-1: Using ep0 maxpacket: 32 [ 362.396639][ T1164] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 362.410526][ T1164] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 362.417182][ T1164] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 362.420728][ T1164] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 362.425810][ T1164] usb 5-1: config 0 interface 0 has no altsetting 0 [ 362.430526][ T1164] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 362.433956][ T1164] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 362.437492][ T1164] usb 5-1: Product: syz [ 362.438874][ T1164] usb 5-1: Manufacturer: syz [ 362.440439][ T1164] usb 5-1: SerialNumber: syz [ 362.443538][ T1164] usb 5-1: config 0 descriptor?? [ 362.447563][ T1164] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 362.452738][ T1164] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 362.558506][ T8053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16444'. [ 362.712748][ T1164] usb 5-1: USB disconnect, device number 11 [ 362.720777][ T1164] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 362.835000][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16450'. [ 363.031183][ T8085] IPVS: Scheduler module ip_vs_sip not found [ 363.151079][ T8094] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16459'. [ 363.616789][ T5942] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 363.639271][ T8108] sp1: Synchronizing with TNC [ 363.758592][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16470'. [ 363.771950][ T5942] usb 5-1: Using ep0 maxpacket: 16 [ 363.785873][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.791210][ T5942] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 363.797714][ T5942] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 363.800639][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.805503][ T5942] usb 5-1: config 0 descriptor?? [ 364.220471][ T5942] usbhid 5-1:0.0: can't add hid device: -71 [ 364.222500][ T5942] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 364.228129][ T5942] usb 5-1: USB disconnect, device number 12 [ 364.721825][ T8174] syz.3.16498: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 364.733702][ T8174] CPU: 0 UID: 0 PID: 8174 Comm: syz.3.16498 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.733721][ T8174] Tainted: [L]=SOFTLOCKUP [ 364.733725][ T8174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 364.733731][ T8174] Call Trace: [ 364.733736][ T8174] [ 364.733740][ T8174] dump_stack_lvl+0x100/0x190 [ 364.733758][ T8174] warn_alloc.cold+0x95/0x1c1 [ 364.733776][ T8174] ? __pfx_warn_alloc+0x10/0x10 [ 364.733788][ T8174] ? __mutex_unlock_slowpath+0x15c/0x790 [ 364.733812][ T8174] __alloc_frozen_pages_noprof+0x1442/0x2410 [ 364.733831][ T8174] ? lockdep_hardirqs_on+0x78/0x100 [ 364.733857][ T8174] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 364.733870][ T8174] ? stack_depot_save_flags+0x3f8/0x9c0 [ 364.733891][ T8174] ? comedi_isadma_alloc+0x10c/0x6e0 [ 364.733904][ T8174] ? pcl818_attach+0x1103/0x15b0 [ 364.733916][ T8174] ? comedi_device_attach+0x3d2/0x660 [ 364.733925][ T8174] ? do_devconfig_ioctl+0x1b3/0x6d0 [ 364.733937][ T8174] ? comedi_unlocked_ioctl+0x44c/0x2e70 [ 364.733958][ T8174] __alloc_pages_noprof+0xb/0x1b0 [ 364.733970][ T8174] __dma_direct_alloc_pages.isra.0+0x47c/0x8f0 [ 364.733987][ T8174] ? __pfx___dma_direct_alloc_pages.isra.0+0x10/0x10 [ 364.734001][ T8174] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 364.734016][ T8174] dma_direct_alloc+0x8f/0x590 [ 364.734052][ T8174] dma_alloc_attrs+0x185/0x2b0 [ 364.734068][ T8174] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 364.734083][ T8174] ? dma_direct_supported+0xca/0x220 [ 364.734098][ T8174] comedi_isadma_alloc+0x3dc/0x6e0 [ 364.734115][ T8174] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 364.734130][ T8174] ? request_threaded_irq+0x27b/0x3e0 [ 364.734145][ T8174] pcl818_attach+0x1103/0x15b0 [ 364.734161][ T8174] comedi_device_attach+0x3d2/0x660 [ 364.734176][ T8174] do_devconfig_ioctl+0x1b3/0x6d0 [ 364.734188][ T8174] ? comedi_unlocked_ioctl+0x163/0x2e70 [ 364.734204][ T8174] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 364.734224][ T8174] ? kasan_save_stack+0x3f/0x50 [ 364.734236][ T8174] ? kasan_save_stack+0x30/0x50 [ 364.734248][ T8174] ? kasan_save_track+0x14/0x30 [ 364.734260][ T8174] ? kasan_save_free_info+0x3b/0x70 [ 364.734269][ T8174] ? __kasan_slab_free+0x5f/0x80 [ 364.734282][ T8174] ? kfree+0x1c7/0x690 [ 364.734290][ T8174] ? tomoyo_path_number_perm+0x46d/0x580 [ 364.734305][ T8174] ? security_file_ioctl_compat+0xd3/0x230 [ 364.734323][ T8174] comedi_unlocked_ioctl+0x44c/0x2e70 [ 364.734343][ T8174] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 364.734367][ T8174] ? kasan_quarantine_put+0x104/0x240 [ 364.734380][ T8174] ? lockdep_hardirqs_on+0x78/0x100 [ 364.734394][ T8174] ? find_held_lock+0x2b/0x80 [ 364.734404][ T8174] ? tomoyo_path_number_perm+0x28f/0x580 [ 364.734419][ T8174] ? tomoyo_path_number_perm+0x28f/0x580 [ 364.734437][ T8174] ? tomoyo_path_number_perm+0x188/0x580 [ 364.734455][ T8174] comedi_compat_ioctl+0x438/0xe20 [ 364.734471][ T8174] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 364.734487][ T8174] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 364.734500][ T8174] ? do_vfs_ioctl+0x226/0x13e0 [ 364.734516][ T8174] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 364.734537][ T8174] ? find_held_lock+0x2b/0x80 [ 364.734546][ T8174] ? hook_file_ioctl_common+0x146/0x410 [ 364.734565][ T8174] ? __fget_files+0x21f/0x3d0 [ 364.734580][ T8174] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 364.734595][ T8174] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 364.734607][ T8174] __do_fast_syscall_32+0xde/0x660 [ 364.734622][ T8174] do_fast_syscall_32+0x32/0x70 [ 364.734636][ T8174] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.734649][ T8174] RIP: 0023:0xf73fd579 [ 364.734658][ T8174] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 364.734668][ T8174] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 364.734679][ T8174] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 364.734685][ T8174] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 364.734691][ T8174] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 364.734697][ T8174] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 364.734703][ T8174] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 364.734717][ T8174] [ 364.734752][ T8174] Mem-Info: [ 364.879076][ T8174] active_anon:145 inactive_anon:1886 isolated_anon:0 [ 364.879076][ T8174] active_file:889 inactive_file:10022 isolated_file:0 [ 364.879076][ T8174] unevictable:1768 dirty:420 writeback:0 [ 364.879076][ T8174] slab_reclaimable:6806 slab_unreclaimable:62102 [ 364.879076][ T8174] mapped:22247 shmem:1776 pagetables:1720 [ 364.879076][ T8174] sec_pagetables:335 bounce:0 [ 364.879076][ T8174] kernel_misc_reclaimable:0 [ 364.879076][ T8174] free:69435 free_pcp:0 free_cma:0 [ 364.893685][ T8174] Node 0 active_anon:0kB inactive_anon:860kB active_file:0kB inactive_file:2992kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:320kB dirty:92kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9204kB pagetables:1452kB sec_pagetables:1144kB all_unreclaimable? no Balloon:0kB [ 364.904016][ T8174] Node 0 DMA free:2732kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:120kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 364.914006][ T8174] lowmem_reserve[]: 0 288 288 288 288 [ 364.915900][ T8174] Node 0 DMA: 41*4kB (UM) 25*8kB (UM) 12*16kB (UM) 14*32kB (UM) 5*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2732kB [ 364.920948][ T8174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 364.924164][ T8174] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 364.927240][ T8174] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 364.930275][ T8174] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 364.934365][ T8174] 13725 total pagecache pages [ 364.936038][ T8174] 1005 pages in swap cache [ 364.937979][ T8174] Free swap = 52412kB [ 364.939433][ T8174] Total swap = 124996kB [ 364.940820][ T8174] 524155 pages RAM [ 364.942098][ T8174] 0 pages HighMem/MovableOnly [ 364.943625][ T8174] 209486 pages reserved [ 364.944976][ T8174] 0 pages cma reserved [ 365.456952][ T8208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16513'. [ 365.828064][ T8233] bond6 (unregistering): Released all slaves [ 365.831593][ T8240] fuse: blksize only supported for fuseblk [ 366.061738][ T8259] vlan0: entered allmulticast mode [ 366.063433][ T8259] bond0: entered allmulticast mode [ 366.361557][ T8286] netlink: 'syz.3.16546': attribute type 4 has an invalid length. [ 366.365042][ T8286] netlink: 224 bytes leftover after parsing attributes in process `syz.3.16546'. [ 366.968772][ T8325] sp1: Synchronizing with TNC [ 367.128290][ T8342] ip6gre4: entered promiscuous mode [ 367.130564][ T8342] ip6gre4: entered allmulticast mode [ 367.216482][ T8353] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16579'. [ 367.705633][ T41] audit: type=1326 audit(367.570:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.2.16594" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f43579 code=0x0 [ 368.161158][ T8429] ================================================================== [ 368.163760][ T8429] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 368.166217][ T8429] Read of size 8 at addr ffff88801ca92e18 by task syz.1.16616/8429 [ 368.170090][ T8429] [ 368.171637][ T8429] CPU: 1 UID: 0 PID: 8429 Comm: syz.1.16616 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.171655][ T8429] Tainted: [L]=SOFTLOCKUP [ 368.171659][ T8429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 368.171666][ T8429] Call Trace: [ 368.171670][ T8429] [ 368.171675][ T8429] dump_stack_lvl+0x100/0x190 [ 368.171691][ T8429] print_report+0x156/0x4c9 [ 368.171707][ T8429] ? __virt_addr_valid+0x81/0x620 [ 368.171724][ T8429] ? __phys_addr+0xe8/0x180 [ 368.171741][ T8429] ? dvb_device_open+0x33f/0x3b0 [ 368.171754][ T8429] kasan_report+0xdf/0x1a0 [ 368.171769][ T8429] ? dvb_device_open+0x33f/0x3b0 [ 368.171783][ T8429] ? __pfx_dvb_device_open+0x10/0x10 [ 368.171797][ T8429] dvb_device_open+0x33f/0x3b0 [ 368.171811][ T8429] ? __pfx_dvb_device_open+0x10/0x10 [ 368.171825][ T8429] chrdev_open+0x234/0x6a0 [ 368.171838][ T8429] ? __pfx_apparmor_file_open+0x10/0x10 [ 368.171852][ T8429] ? __pfx_chrdev_open+0x10/0x10 [ 368.171865][ T8429] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 368.171879][ T8429] do_dentry_open+0x73e/0x1570 [ 368.171892][ T8429] ? __pfx_chrdev_open+0x10/0x10 [ 368.171904][ T8429] ? security_inode_permission+0xbf/0x250 [ 368.171923][ T8429] vfs_open+0x82/0x3f0 [ 368.171939][ T8429] path_openat+0x21dc/0x3120 [ 368.171955][ T8429] ? __pfx_path_openat+0x10/0x10 [ 368.171970][ T8429] do_filp_open+0x1f7/0x420 [ 368.171983][ T8429] ? __pfx_do_filp_open+0x10/0x10 [ 368.172000][ T8429] ? _raw_spin_unlock+0x28/0x50 [ 368.172011][ T8429] ? alloc_fd+0x476/0x790 [ 368.172025][ T8429] do_sys_openat2+0x12e/0x220 [ 368.172040][ T8429] ? __pfx_do_sys_openat2+0x10/0x10 [ 368.172056][ T8429] ? rcu_is_watching+0x12/0xc0 [ 368.172067][ T8429] ? kfree+0x2a9/0x690 [ 368.172077][ T8429] ? kcov_ioctl+0x162/0x720 [ 368.172088][ T8429] ? kcov_ioctl+0x162/0x720 [ 368.172099][ T8429] __ia32_compat_sys_openat+0x12d/0x210 [ 368.172110][ T8429] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 368.172126][ T8429] ? kcov_ioctl+0x16a/0x720 [ 368.172136][ T8429] ? fput+0x79/0x100 [ 368.172152][ T8429] do_int80_emulation+0x101/0x470 [ 368.172166][ T8429] asm_int80_emulation+0x1a/0x20 [ 368.172176][ T8429] RIP: 0023:0xf71d572b [ 368.172185][ T8429] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 368.172195][ T8429] RSP: 002b:00000000f549603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 368.172206][ T8429] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5496100 [ 368.172213][ T8429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 368.172219][ T8429] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 368.172226][ T8429] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 368.172232][ T8429] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 368.172242][ T8429] [ 368.172246][ T8429] [ 368.276740][ T8429] Allocated by task 1: [ 368.278371][ T8429] kasan_save_stack+0x30/0x50 [ 368.280036][ T8429] kasan_save_track+0x14/0x30 [ 368.282027][ T8429] __kasan_kmalloc+0xaa/0xb0 [ 368.284046][ T8429] dvb_register_device+0x1d6/0x1e60 [ 368.286044][ T8429] dvb_register_frontend+0x5a8/0x8a0 [ 368.287541][ T8429] vidtv_bridge_probe+0x44b/0xa30 [ 368.288971][ T8429] platform_probe+0x106/0x1d0 [ 368.290379][ T8429] really_probe+0x241/0xa60 [ 368.292058][ T8429] __driver_probe_device+0x1de/0x400 [ 368.294318][ T8429] driver_probe_device+0x4c/0x1b0 [ 368.296478][ T8429] __driver_attach+0x217/0x5c0 [ 368.298564][ T8429] bus_for_each_dev+0x13e/0x1d0 [ 368.300590][ T8429] bus_add_driver+0x305/0x5b0 [ 368.302624][ T8429] driver_register+0x1e2/0x360 [ 368.304692][ T8429] vidtv_bridge_init+0x38/0x70 [ 368.306715][ T8429] do_one_initcall+0x11d/0x690 [ 368.308757][ T8429] kernel_init_freeable+0x6e5/0x790 [ 368.311024][ T8429] kernel_init+0x1f/0x1e0 [ 368.312776][ T8429] ret_from_fork+0x754/0xaf0 [ 368.314289][ T8429] ret_from_fork_asm+0x1a/0x30 [ 368.315960][ T8429] [ 368.316861][ T8429] Freed by task 8396: [ 368.318355][ T8429] kasan_save_stack+0x30/0x50 [ 368.320404][ T8429] kasan_save_track+0x14/0x30 [ 368.322477][ T8429] kasan_save_free_info+0x3b/0x70 [ 368.324664][ T8429] __kasan_slab_free+0x5f/0x80 [ 368.326760][ T8429] kfree+0x1c7/0x690 [ 368.328455][ T8429] dvb_device_put.part.0+0x57/0x90 [ 368.330677][ T8429] dvb_device_open+0x2ba/0x3b0 [ 368.332708][ T8429] chrdev_open+0x234/0x6a0 [ 368.334649][ T8429] do_dentry_open+0x73e/0x1570 [ 368.336712][ T8429] vfs_open+0x82/0x3f0 [ 368.338435][ T8429] path_openat+0x21dc/0x3120 [ 368.340397][ T8429] do_filp_open+0x1f7/0x420 [ 368.342368][ T8429] do_sys_openat2+0x12e/0x220 [ 368.344404][ T8429] __ia32_compat_sys_openat+0x12d/0x210 [ 368.346776][ T8429] do_int80_emulation+0x101/0x470 [ 368.348946][ T8429] asm_int80_emulation+0x1a/0x20 [ 368.350939][ T8429] [ 368.351719][ T8429] The buggy address belongs to the object at ffff88801ca92e00 [ 368.351719][ T8429] which belongs to the cache kmalloc-256 of size 256 [ 368.356427][ T8429] The buggy address is located 24 bytes inside of [ 368.356427][ T8429] freed 256-byte region [ffff88801ca92e00, ffff88801ca92f00) [ 368.361504][ T8429] [ 368.362306][ T8429] The buggy address belongs to the physical page: [ 368.364340][ T8429] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ca92 [ 368.367118][ T8429] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 368.370287][ T8429] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 368.373442][ T8429] page_type: f5(slab) [ 368.375155][ T8429] raw: 00fff00000000040 ffff88801b842b40 dead000000000122 0000000000000000 [ 368.378793][ T8429] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 368.382429][ T8429] head: 00fff00000000040 ffff88801b842b40 dead000000000122 0000000000000000 [ 368.386109][ T8429] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 368.389566][ T8429] head: 00fff00000000001 ffffea000072a481 00000000ffffffff 00000000ffffffff [ 368.392498][ T8429] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 368.395388][ T8429] page dumped because: kasan: bad access detected [ 368.397376][ T8429] page_owner tracks the page as allocated [ 368.399717][ T8429] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 20692219574, free_ts 20103035831 [ 368.408247][ T8429] post_alloc_hook+0x1e1/0x250 [ 368.410264][ T8429] get_page_from_freelist+0xe3d/0x2e10 [ 368.412011][ T8429] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 368.414359][ T8429] alloc_pages_mpol+0x1fb/0x550 [ 368.416487][ T8429] new_slab+0x2c4/0x440 [ 368.418271][ T8429] ___slab_alloc+0xda3/0x1ca0 [ 368.420360][ T8429] __slab_alloc.isra.0+0x63/0x110 [ 368.422553][ T8429] __kmalloc_cache_noprof+0x531/0x810 [ 368.424859][ T8429] bus_add_driver+0x92/0x5b0 [ 368.426896][ T8429] driver_register+0x1e2/0x360 [ 368.428979][ T8429] usb_register_driver+0x21c/0x3e0 [ 368.431242][ T8429] pvr_init+0xa1/0x130 [ 368.433020][ T8429] do_one_initcall+0x11d/0x690 [ 368.435102][ T8429] kernel_init_freeable+0x6e5/0x790 [ 368.437350][ T8429] kernel_init+0x1f/0x1e0 [ 368.439234][ T8429] ret_from_fork+0x754/0xaf0 [ 368.441270][ T8429] page last free pid 13 tgid 13 stack trace: [ 368.443849][ T8429] __free_frozen_pages+0x822/0x1130 [ 368.446095][ T8429] qlist_free_all+0x47/0xe0 [ 368.448060][ T8429] kasan_quarantine_reduce+0x1a0/0x1f0 [ 368.450416][ T8429] __kasan_slab_alloc+0x69/0x90 [ 368.452479][ T8429] kmem_cache_alloc_noprof+0x2ad/0x780 [ 368.454682][ T8429] acpi_ut_create_update_state+0x72/0x130 [ 368.456997][ T8429] acpi_ut_create_update_state_and_push+0x2f/0x70 [ 368.459657][ T8429] acpi_ut_update_object_reference+0x32f/0x800 [ 368.462307][ T8429] acpi_ut_add_reference+0x80/0x170 [ 368.464495][ T8429] acpi_ex_resolve_node_to_value+0x7e1/0x9a0 [ 368.466924][ T8429] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 368.469293][ T8429] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 368.471751][ T8429] acpi_ds_exec_end_op+0xb78/0x1e60 [ 368.473933][ T8429] acpi_ps_parse_loop+0x5dd/0x24a0 [ 368.476121][ T8429] acpi_ps_parse_aml+0x81e/0x1120 [ 368.478252][ T8429] acpi_ps_execute_method+0x5c4/0xe90 [ 368.480479][ T8429] [ 368.481481][ T8429] Memory state around the buggy address: [ 368.483795][ T8429] ffff88801ca92d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 368.487101][ T8429] ffff88801ca92d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 368.490428][ T8429] >ffff88801ca92e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 368.493752][ T8429] ^ [ 368.495860][ T8429] ffff88801ca92e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 368.499226][ T8429] ffff88801ca92f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 368.502660][ T8429] ================================================================== [ 368.509242][ T8429] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 368.512414][ T8429] CPU: 1 UID: 0 PID: 8429 Comm: syz.1.16616 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.516920][ T8429] Tainted: [L]=SOFTLOCKUP [ 368.518775][ T8429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 368.522950][ T8429] Call Trace: [ 368.524400][ T8429] [ 368.525664][ T8429] dump_stack_lvl+0x100/0x190 [ 368.527728][ T8429] vpanic+0x20d/0x630 [ 368.529412][ T8429] panic+0xd1/0xd1 [ 368.531037][ T8429] ? __pfx_panic+0x10/0x10 [ 368.532916][ T8429] ? dvb_device_open+0x33f/0x3b0 [ 368.535063][ T8429] ? preempt_schedule_common+0x42/0xc0 [ 368.537407][ T8429] check_panic_on_warn.cold+0x19/0x34 [ 368.539737][ T8429] end_report.part.0+0x3a/0x90 [ 368.541525][ T8429] kasan_report.cold+0xe/0x18 [ 368.543073][ T8429] ? dvb_device_open+0x33f/0x3b0 [ 368.544617][ T8429] ? __pfx_dvb_device_open+0x10/0x10 [ 368.546278][ T8429] dvb_device_open+0x33f/0x3b0 [ 368.547861][ T8429] ? __pfx_dvb_device_open+0x10/0x10 [ 368.549554][ T8429] chrdev_open+0x234/0x6a0 [ 368.551005][ T8429] ? __pfx_apparmor_file_open+0x10/0x10 [ 368.552845][ T8429] ? __pfx_chrdev_open+0x10/0x10 [ 368.554428][ T8429] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 368.556317][ T8429] do_dentry_open+0x73e/0x1570 [ 368.557848][ T8429] ? __pfx_chrdev_open+0x10/0x10 [ 368.559673][ T8429] ? security_inode_permission+0xbf/0x250 [ 368.561821][ T8429] vfs_open+0x82/0x3f0 [ 368.563444][ T8429] path_openat+0x21dc/0x3120 [ 368.564967][ T8429] ? __pfx_path_openat+0x10/0x10 [ 368.566454][ T8429] do_filp_open+0x1f7/0x420 [ 368.568246][ T8429] ? __pfx_do_filp_open+0x10/0x10 [ 368.569881][ T8429] ? _raw_spin_unlock+0x28/0x50 [ 368.571429][ T8429] ? alloc_fd+0x476/0x790 [ 368.572820][ T8429] do_sys_openat2+0x12e/0x220 [ 368.574425][ T8429] ? __pfx_do_sys_openat2+0x10/0x10 [ 368.576001][ T8429] ? rcu_is_watching+0x12/0xc0 [ 368.577683][ T8429] ? kfree+0x2a9/0x690 [ 368.579153][ T8429] ? kcov_ioctl+0x162/0x720 [ 368.580653][ T8429] ? kcov_ioctl+0x162/0x720 [ 368.582188][ T8429] __ia32_compat_sys_openat+0x12d/0x210 [ 368.584286][ T8429] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 368.586242][ T8429] ? kcov_ioctl+0x16a/0x720 [ 368.587673][ T8429] ? fput+0x79/0x100 [ 368.589007][ T8429] do_int80_emulation+0x101/0x470 [ 368.590703][ T8429] asm_int80_emulation+0x1a/0x20 [ 368.592446][ T8429] RIP: 0023:0xf71d572b [ 368.593942][ T8429] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 368.600752][ T8429] RSP: 002b:00000000f549603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 368.603799][ T8429] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5496100 [ 368.606682][ T8429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 368.609852][ T8429] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 368.613151][ T8429] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 368.616456][ T8429] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 368.619711][ T8429] [ 368.621811][ T8429] Kernel Offset: disabled [ 368.623586][ T8429] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:13:31 Registers: info registers vcpu 0 CPU#0 RAX=00000000002061f1 RBX=ffffffff8e297ac0 RCX=ffffffff8b7424b5 RDX=0000000000000000 RSI=ffffffff8dc41f2c RDI=ffffffff8bfa35a0 RBP=0000000000000000 RSP=ffffffff8e207e00 R8 =0000000000000001 R9 =ffffed100564673d R10=ffff88802b2339eb R11=0000000000000000 R12=fffffbfff1c52f58 R13=0000000000000000 R14=ffffffff90b774d0 R15=0000000000000000 RIP=ffffffff8b740e1f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880973e2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7496288 CR3=000000005858f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff856744f0 RDI=ffffffff9b1f3260 RBP=ffffffff9b1f3220 RSP=ffffc90003d7f250 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3130383838666666 R12=0000000000000000 R13=0000000000000060 R14=fffffbfff363e69e R15=dffffc0000000000 RIP=ffffffff85674517 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974e2000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f5495ff4 CR3=0000000013bbf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffff888013e2fdd4 RBX=ffffc90003eaf2e0 RCX=0000000000000003 RDX=0000000000000004 RSI=ffff888013e2fdc5 RDI=ffff888013e2fdd5 RBP=ffff888013e2fdd4 RSP=ffffc90003eaf0d8 R8 =0000000000000001 R9 =ffffed10027c5fba R10=ffff888013e2fdd7 R11=0000000000000000 R12=0000000000000dc8 R13=0000000000000004 R14=0000000000000dc4 R15=0000000000000000 RIP=ffffffff8b74346c RFL=00010202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7ea2545300 ffffffff 00c00000 GS =0000 ffff8880975e2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000560ff02c5ec8 CR3=000000004d75a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=3a3c667639eca8fa c777ac8df5ef5fda 3a3c667639eca8fa c777ac8df5ef5fda 3a3c667639eca8fa c777ac8df5ef5fda 3a3c667639eca8fa c777ac8df5ef5fda ZMM18=963a3f634b18f8aa 0470c2fa1b786cae 963a3f634b18f8aa 0470c2fa1b786cae 963a3f634b18f8aa 0470c2fa1b786cae 963a3f634b18f8aa 0470c2fa1b786cae ZMM19=844e000000000000 0000000000000004 844e000000000000 0000000000000003 844e000000000000 0000000000000002 844e000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ae04080001000000 0806010000000806 060103f204e08208 0019800201c70800 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060044b40001ffff fffffffffffffd08 1980030600000052 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000040f0 0000001400000000 0000000000000000 0000000000000015 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9b00000000000009 ea761c0801800301 800436a003000800 3698031c08003690 ZMM25=0470c2fa0470c2fa 0470c2fa0470c2fa 0470c2fa0470c2fa 0470c2fa0470c2fa 0470c2fa0470c2fa 0470c2fa0470c2fa 0470c2fa0470c2fa 0470c2fa0470c2fa ZMM26=4b18f8aa4b18f8aa 4b18f8aa4b18f8aa 4b18f8aa4b18f8aa 4b18f8aa4b18f8aa 4b18f8aa4b18f8aa 4b18f8aa4b18f8aa 4b18f8aa4b18f8aa 4b18f8aa4b18f8aa ZMM27=963a3f63963a3f63 963a3f63963a3f63 963a3f63963a3f63 963a3f63963a3f63 963a3f63963a3f63 963a3f63963a3f63 963a3f63963a3f63 963a3f63963a3f63 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=824e0000824e0000 824e0000824e0000 824e0000824e0000 824e0000824e0000 824e0000824e0000 824e0000824e0000 824e0000824e0000 824e0000824e0000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81f9fe9a RDX=ffff888022ec24c0 RSI=ffffffff81f9fe74 RDI=ffff888022ec24c0 RBP=ffff88802b342ee0 RSP=ffffc90003a7f650 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed10056685dd R14=0000000000000001 R15=ffff88802b53c040 RIP=ffffffff81f9fe74 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976e2000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c330faa CR3=0000000054827000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 12744463a0f848f0 17361aadb23674b5 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 74d45ffc23829933 2cc076d37c666511 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ac5d7488b0ccd3a7 4653a124e50377a1 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 200e9e8451ea91b3 421463ebac5945f8 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006180 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 81da5400a877a200 0000e030ab5d2c00 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8001000080010000 80010000aeec2800 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000e03080010000 a5ff92000000e030 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 800100000000e030 0000e03080010000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 acbfc54ef1a434e8 ca1fa2f7b4f5b2d1 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1b3d2a21d1bcba94 5b857c1bad9cb766 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000