last executing test programs: 27.137878147s ago: executing program 2 (id=9821): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000400)={0x3, 0x8}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @empty}]}, 0x2c}}, 0x0) 27.068986437s ago: executing program 2 (id=9824): r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0xc0305720, &(0x7f0000000000)) 27.065526867s ago: executing program 2 (id=9827): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0x0, 0x2, {"5cb62c32f1ff824cd78cccd2e98f370b"}, 0x1, 0x6, 0xf5d5}, @ib={0x1b, 0x0, 0x0, {}, 0xfffffffffffffffc, 0x1, 0x2}}}, 0x118) 26.989165835s ago: executing program 3 (id=9829): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2084) writev(r0, &(0x7f0000002180)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f00000020c0)="090b51e52598c61daf651a", 0xb}], 0x2) 26.984081339s ago: executing program 2 (id=9831): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 26.941860891s ago: executing program 3 (id=9833): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x22, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 26.921113522s ago: executing program 2 (id=9835): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r0, 0x402, 0x8000000b) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) 26.87397352s ago: executing program 2 (id=9837): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x8080000, 0x4, 0x4, 0x401, 0x0, [{0x3, 0x1, 0xfc, '\x00', 0x9}, {0xb8, 0x5, 0xbb, '\x00', 0x5}, {0x7, 0x4, 0x0, '\x00', 0x56}, {0x5, 0xa, 0x40, '\x00', 0x7}, {0x4, 0x1, 0xa8, '\x00', 0x8d}, {0x1, 0xe, 0x51, '\x00', 0xe}, {0x16, 0x1, 0x5, '\x00', 0xa}, {0x7, 0x1, 0x4, '\x00', 0x5}, {0x9, 0x9, 0x92}, {0x0, 0x71, 0x9, '\x00', 0x68}, {0xd, 0x2, 0xe6}, {0xe0, 0x4, 0x7, '\x00', 0x3}, {0x5, 0x5, 0x15, '\x00', 0x5b}, {0x4, 0x0, 0x9, '\x00', 0x2}, {0x40, 0x1, 0x6, '\x00', 0xf1}, {0xff, 0xad, 0x0, '\x00', 0x7f}, {0x1, 0xb, 0x0, '\x00', 0x7}, {0x8, 0x8, 0x81, '\x00', 0xee}, {0x3, 0x7e, 0x4, '\x00', 0x6}, {0xe1, 0x0, 0xe, '\x00', 0x2}, {0x8, 0x7, 0x2, '\x00', 0x3}, {0x8, 0x7, 0xbe, '\x00', 0x5}, {0x6, 0x2, 0xd0, '\x00', 0x5}, {0xfb, 0x4, 0x8, '\x00', 0xfc}]}}) 26.805176072s ago: executing program 3 (id=9839): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x19, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x106a655, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xba}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 26.731298947s ago: executing program 3 (id=9843): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000100)={0xa, 0x4e1c, 0xfffbfffc, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000b80)={0x0, 0x43b7, 0x8}, 0x3d) 26.728827004s ago: executing program 3 (id=9845): mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 26.674501276s ago: executing program 3 (id=9847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x24}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009815}, 0x4000080) 11.315365918s ago: executing program 32 (id=9837): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x8080000, 0x4, 0x4, 0x401, 0x0, [{0x3, 0x1, 0xfc, '\x00', 0x9}, {0xb8, 0x5, 0xbb, '\x00', 0x5}, {0x7, 0x4, 0x0, '\x00', 0x56}, {0x5, 0xa, 0x40, '\x00', 0x7}, {0x4, 0x1, 0xa8, '\x00', 0x8d}, {0x1, 0xe, 0x51, '\x00', 0xe}, {0x16, 0x1, 0x5, '\x00', 0xa}, {0x7, 0x1, 0x4, '\x00', 0x5}, {0x9, 0x9, 0x92}, {0x0, 0x71, 0x9, '\x00', 0x68}, {0xd, 0x2, 0xe6}, {0xe0, 0x4, 0x7, '\x00', 0x3}, {0x5, 0x5, 0x15, '\x00', 0x5b}, {0x4, 0x0, 0x9, '\x00', 0x2}, {0x40, 0x1, 0x6, '\x00', 0xf1}, {0xff, 0xad, 0x0, '\x00', 0x7f}, {0x1, 0xb, 0x0, '\x00', 0x7}, {0x8, 0x8, 0x81, '\x00', 0xee}, {0x3, 0x7e, 0x4, '\x00', 0x6}, {0xe1, 0x0, 0xe, '\x00', 0x2}, {0x8, 0x7, 0x2, '\x00', 0x3}, {0x8, 0x7, 0xbe, '\x00', 0x5}, {0x6, 0x2, 0xd0, '\x00', 0x5}, {0xfb, 0x4, 0x8, '\x00', 0xfc}]}}) 11.271028126s ago: executing program 33 (id=9847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x24}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009815}, 0x4000080) 1.342954184s ago: executing program 5 (id=10290): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x60) truncate(&(0x7f0000000000)='./file1\x00', 0xffff) 1.321044766s ago: executing program 5 (id=10292): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 1.253934192s ago: executing program 5 (id=10294): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') exit(0xffff) write$eventfd(r0, 0x0, 0x0) 758.252622ms ago: executing program 4 (id=10298): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x10, {0x0, 0x0, 0x4a00, 0x0, 0x8020}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x840) 672.357598ms ago: executing program 0 (id=10300): syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') ioctl$USBDEVFS_RESETEP(r0, 0x80045503, 0x0) 671.913983ms ago: executing program 0 (id=10301): r0 = socket$inet(0x2, 0x3, 0x9) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 613.77795ms ago: executing program 0 (id=10302): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) 428.938837ms ago: executing program 4 (id=10303): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x11, r0, 0x9, 0xff) 427.040691ms ago: executing program 5 (id=10305): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x7}}}}]}, 0x40}}, 0x0) 343.253232ms ago: executing program 1 (id=10306): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0x0, 0xee00) keyctl$chown(0x4, r0, 0x0, 0x0) 341.853251ms ago: executing program 4 (id=10308): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x141042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) read(r0, 0x0, 0x0) 341.766704ms ago: executing program 5 (id=10309): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x4c032, 0xffffffffffffffff, 0x0) syz_clone(0x41200111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 336.932014ms ago: executing program 1 (id=10316): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x19, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 335.618321ms ago: executing program 0 (id=10310): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x8100, 0x67, 0x0, &(0x7f00000002c0)="c810e19e00399da26f0000000000", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x50) 145.694055ms ago: executing program 4 (id=10311): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 141.183507ms ago: executing program 0 (id=10321): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) getsockopt$packet_buf(r0, 0x107, 0x12, 0x0, &(0x7f0000000200)) 139.898423ms ago: executing program 1 (id=10313): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {0xc, 0xfff3}, {0xd, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 81.684202ms ago: executing program 1 (id=10314): r0 = memfd_create(&(0x7f0000000540)='\x00\xc7\xba\x99\x81%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\xb5#\xecY\x98\xfd\b\x96\xc1\xdd\xd9\xc5\x8ano\x01\x87\x05=\xfb\x8b$\xdcQjr\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xdb\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xe9PU\x92\xd2\x99\xb80x0) io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 0s ago: executing program 1 (id=10320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) kernel console output (not intermixed with test programs): 971][ T40] audit: type=1326 audit(1780442116.051:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18187 comm="syz.2.5914" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef7c code=0x7ffc0000 [ 172.827735][ T40] audit: type=1326 audit(1780442116.061:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18187 comm="syz.2.5914" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef7c code=0x7ffc0000 [ 172.836070][ T40] audit: type=1326 audit(1780442116.061:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18187 comm="syz.2.5914" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701ef7c code=0x7ffc0000 [ 172.843678][ T40] audit: type=1326 audit(1780442116.061:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18187 comm="syz.2.5914" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef7c code=0x7ffc0000 [ 172.854917][ T40] audit: type=1326 audit(1780442116.061:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18187 comm="syz.2.5914" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef7c code=0x7ffc0000 [ 172.865156][ T40] audit: type=1326 audit(1780442116.061:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18187 comm="syz.2.5914" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef7c code=0x7ffc0000 [ 172.874366][ T40] audit: type=1326 audit(1780442116.061:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18187 comm="syz.2.5914" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef7c code=0x7ffc0000 [ 172.883597][ T40] audit: type=1326 audit(1780442116.071:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18187 comm="syz.2.5914" exe="/syz-executor" sig=0 arch=40000003 syscall=148 compat=1 ip=0xf701ef7c code=0x7ffc0000 [ 173.193430][T18224] sch_fq: defrate 4294967295 ignored. [ 173.668296][ T5115] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 173.673439][T18246] sch_fq: defrate 4294967295 ignored. [ 173.837787][ T5115] usb 7-1: Using ep0 maxpacket: 32 [ 173.844801][ T5115] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 173.849236][ T5115] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.852676][ T5115] usb 7-1: Product: syz [ 173.854492][ T5115] usb 7-1: Manufacturer: syz [ 173.856428][ T5115] usb 7-1: SerialNumber: syz [ 173.861188][ T5115] usb 7-1: config 0 descriptor?? [ 173.866318][ T5115] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 173.870903][ T5115] dvb-usb: bulk message failed: -22 (4/0) [ 173.875201][ T5115] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 173.880150][ T5115] dvb-usb: bulk message failed: -22 (5/0) [ 173.882727][ T5115] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 173.895516][ T5115] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 173.902328][ T5115] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 173.905944][ T5115] usb 7-1: media controller created [ 173.919351][ T5115] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.940935][ T5115] usb 7-1: selecting invalid altsetting 3 [ 173.944146][ T5115] ttusb2: set interface to alts=3 failed [ 173.974334][ T5115] DVB: Unable to find symbol tda10086_attach() [ 173.976661][ T5115] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 173.981655][ T5115] dvb-usb: bulk message failed: -22 (4/0) [ 173.984129][ T5115] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 173.988813][ T5115] dvb-usb: bulk message failed: -22 (5/0) [ 173.991309][ T5115] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 173.995651][ T5115] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 174.068727][T18238] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 174.074519][T18238] dvb-usb: bulk message failed: -22 (7/0) [ 174.079895][T18238] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 174.084874][T18238] ttusb2: i2c transfer failed. [ 174.093599][ T5115] usb 7-1: USB disconnect, device number 2 [ 174.124654][ T5115] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 174.458123][T18271] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5951'. [ 174.564857][T18277] vlan2: entered promiscuous mode [ 174.567021][T18277] bridge0: entered promiscuous mode [ 174.665378][T18284] syz_tun: entered promiscuous mode [ 174.675355][T18284] macvtap0: entered promiscuous mode [ 175.535855][T18371] syz_tun: entered promiscuous mode [ 175.538967][T18371] macvtap0: entered promiscuous mode [ 175.656624][T18382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6006'. [ 175.737037][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6011'. [ 175.780849][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6014'. [ 175.784919][T18395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6014'. [ 175.788165][T18395] netlink: 'syz.0.6014': attribute type 18 has an invalid length. [ 175.790970][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6014'. [ 176.307875][T18442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6035'. [ 177.152473][ T857] kernel write not supported for file /radio1 (pid: 857 comm: kworker/0:2) [ 177.380509][T18475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.810554][ T5521] kernel write not supported for file /input/mouse0 (pid: 5521 comm: kworker/0:3) [ 178.111029][T18561] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6094'. [ 178.113925][T18561] netlink: 'syz.1.6094': attribute type 2 has an invalid length. [ 178.445103][T18599] Invalid source name [ 178.446991][T18599] UBIFS error (pid: 18599): cannot open "./file0", error -22 [ 178.722305][T18636] ALSA: mixer_oss: invalid OSS volume '' [ 178.907682][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 178.907698][ T40] audit: type=1326 audit(1780442122.171:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18657 comm="syz.3.6140" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 178.923628][ T40] audit: type=1326 audit(1780442122.191:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18657 comm="syz.3.6140" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 178.930498][ T40] audit: type=1326 audit(1780442122.191:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18657 comm="syz.3.6140" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 178.939453][ T40] audit: type=1326 audit(1780442122.191:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18657 comm="syz.3.6140" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 178.957836][ T40] audit: type=1326 audit(1780442122.191:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18657 comm="syz.3.6140" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 178.976172][ T40] audit: type=1326 audit(1780442122.191:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18657 comm="syz.3.6140" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 178.989207][ T40] audit: type=1326 audit(1780442122.191:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18657 comm="syz.3.6140" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 178.996244][ T40] audit: type=1326 audit(1780442122.191:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18657 comm="syz.3.6140" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 179.004969][ T40] audit: type=1326 audit(1780442122.191:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18657 comm="syz.3.6140" exe="/syz-executor" sig=0 arch=40000003 syscall=38 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 179.011779][ T40] audit: type=1326 audit(1780442122.191:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18657 comm="syz.3.6140" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 180.206796][T18789] tipc: Enabling of bearer rejected, failed to enable media [ 180.395018][T18811] macsec2: entered promiscuous mode [ 180.397080][T18811] macsec2: entered allmulticast mode [ 180.397507][T18812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.806933][T18848] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6230'. [ 181.433376][T18887] netlink: 'syz.3.6246': attribute type 1 has an invalid length. [ 181.537411][T18893] xt_socket: unknown flags 0xe4 [ 181.615889][T18901] netlink: 160 bytes leftover after parsing attributes in process `syz.1.6251'. [ 181.656468][T18906] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6252'. [ 182.137722][T18950] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 182.227248][T18958] tmpfs: Too few inodes for current use [ 184.177146][ T5115] kernel read not supported for file /vga_arbiter (pid: 5115 comm: kworker/1:2) [ 184.367720][ T53] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 184.531534][ T53] usb 5-1: Using ep0 maxpacket: 32 [ 184.540256][ T53] usb 5-1: unable to get BOS descriptor or descriptor too short [ 184.545419][ T53] usb 5-1: config 8 has an invalid interface number: 188 but max is 0 [ 184.548544][ T53] usb 5-1: config 8 has no interface number 0 [ 184.550970][ T53] usb 5-1: config 8 interface 188 has no altsetting 0 [ 184.559662][ T53] usb 5-1: string descriptor 0 read error: -22 [ 184.564234][ T53] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 184.577636][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.588078][ T53] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 184.590926][ T53] dw2102: su3000_power_ctrl: 1, initialized 0 [ 184.593479][ T53] dvb-usb: bulk message failed: -22 (2/0) [ 184.605905][ T53] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.612929][ T53] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 184.629028][ T53] usb 5-1: media controller created [ 184.630887][ T53] dvb-usb: bulk message failed: -22 (6/0) [ 184.633232][ T53] dw2102: i2c transfer failed. [ 184.635432][ T53] dvb-usb: bulk message failed: -22 (6/0) [ 184.643924][ T53] dw2102: i2c transfer failed. [ 184.651804][ T53] dvb-usb: bulk message failed: -22 (6/0) [ 184.667600][ T53] dw2102: i2c transfer failed. [ 184.669234][ T53] dvb-usb: bulk message failed: -22 (6/0) [ 184.671685][ T53] dw2102: i2c transfer failed. [ 184.673810][ T53] dvb-usb: bulk message failed: -22 (6/0) [ 184.676322][ T53] dw2102: i2c transfer failed. [ 184.678548][ T53] dvb-usb: bulk message failed: -22 (6/0) [ 184.680923][ T53] dw2102: i2c transfer failed. [ 184.683063][ T53] dvb-usb: MAC address: 02:02:02:02:02:02 [ 184.716761][ T53] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.742117][ T53] dvb-usb: bulk message failed: -22 (3/0) [ 184.745258][ T53] dw2102: command 0x0e transfer failed. [ 184.748348][ T53] dvb-usb: bulk message failed: -22 (3/0) [ 184.750413][ T53] dw2102: command 0x0e transfer failed. [ 185.061333][ T53] dvb-usb: bulk message failed: -22 (3/0) [ 185.072676][ T53] dw2102: command 0x0e transfer failed. [ 185.075994][ T53] dvb-usb: bulk message failed: -22 (3/0) [ 185.080346][ T53] dw2102: command 0x0e transfer failed. [ 185.083396][ T53] dvb-usb: bulk message failed: -22 (1/0) [ 185.089314][ T53] dw2102: command 0x51 transfer failed. [ 185.101710][T19129] dvb-usb: bulk message failed: -22 (20/0) [ 185.120541][T19129] dw2102: i2c transfer failed. [ 185.157632][ T53] DVB: Unable to find symbol ds3000_attach() [ 185.169384][ T53] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 185.247674][ T53] rc_core: IR keymap rc-su3000 not found [ 185.252216][ T53] Registered IR keymap rc-empty [ 185.262895][ T53] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 185.278725][ T53] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input27 [ 185.287792][ T53] dvb-usb: schedule remote query interval to 150 msecs. [ 185.291117][ T53] dw2102: su3000_power_ctrl: 0, initialized 1 [ 185.293200][ T53] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 185.308248][ T53] usb 5-1: USB disconnect, device number 3 [ 185.333019][ T5521] kernel write not supported for file /input/event2 (pid: 5521 comm: kworker/0:3) [ 185.374246][ T53] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 186.644972][T19301] netlink: 504 bytes leftover after parsing attributes in process `syz.1.6435'. [ 187.086790][T19356] PKCS8: Unsupported PKCS#8 version [ 187.203691][T19371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6462'. [ 187.207795][T19371] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 187.738346][T19425] program syz.3.6489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.049617][T19455] vlan3: entered allmulticast mode [ 188.051825][T19455] bond0: entered allmulticast mode [ 188.053746][T19455] bond_slave_0: entered allmulticast mode [ 188.059123][T19455] bond_slave_1: entered allmulticast mode [ 188.064263][T19459] team0: Cannot enslave team device to itself [ 188.214482][ T5844] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 188.229869][ T5844] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 188.296290][T19486] fido_id[19486]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 188.627863][ T5852] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 188.778887][ T5852] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 188.781661][ T5852] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.784709][ T5852] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 188.787505][ T5852] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 188.792742][ T5852] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 188.795660][ T5852] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 188.799111][ T5852] usb 7-1: Product: syz [ 188.800534][ T5852] usb 7-1: Manufacturer: syz [ 188.806133][ T5852] cdc_wdm 7-1:1.0: skipping garbage [ 188.808059][ T5852] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 189.009269][ T5844] usb 7-1: USB disconnect, device number 3 [ 189.682918][T19536] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 190.219578][T19566] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 190.606831][T19599] comedi comedi3: multiq3: I/O port conflict (0x100,16) [ 191.161081][T19652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6592'. [ 191.166105][T19652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6592'. [ 191.248368][T19664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6597'. [ 191.265685][T19665] block device autoloading is deprecated and will be removed. [ 191.364734][T19676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6602'. [ 191.993816][T19736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6632'. [ 192.047034][T19739] tipc: Enabling of bearer rejected, media not registered [ 192.080524][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 192.080540][ T40] audit: type=1326 audit(1780442135.351:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19740 comm="syz.0.6634" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x0 [ 193.135597][T19823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6673'. [ 193.141914][T19823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6673'. [ 193.305534][T19849] tipc: Invalid UDP bearer configuration [ 193.305561][T19849] tipc: Enabling of bearer rejected, failed to enable media [ 193.404870][T19861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6692'. [ 193.721613][ T40] audit: type=1326 audit(1780442136.991:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19889 comm="syz.2.6706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef7c code=0x7ffc0000 [ 193.729575][ T40] audit: type=1326 audit(1780442136.991:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19889 comm="syz.2.6706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef7c code=0x7ffc0000 [ 193.741433][ T40] audit: type=1326 audit(1780442136.991:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19889 comm="syz.2.6706" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf701ef7c code=0x7ffc0000 [ 193.757907][ T40] audit: type=1326 audit(1780442136.991:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19889 comm="syz.2.6706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef7c code=0x7ffc0000 [ 193.770102][ T40] audit: type=1326 audit(1780442136.991:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19889 comm="syz.2.6706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef7c code=0x7ffc0000 [ 193.778436][ T40] audit: type=1326 audit(1780442136.991:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19889 comm="syz.2.6706" exe="/syz-executor" sig=0 arch=40000003 syscall=52 compat=1 ip=0xf701ef7c code=0x7ffc0000 [ 193.786225][ T40] audit: type=1326 audit(1780442137.001:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19889 comm="syz.2.6706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef7c code=0x7ffc0000 [ 193.852991][T19903] vivid-001: disconnect [ 193.857279][T19901] vivid-001: reconnect [ 193.921623][T19908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6715'. [ 194.278640][T19946] netlink: 'syz.0.6733': attribute type 6 has an invalid length. [ 194.279300][T19945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6736'. [ 194.374209][T19962] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6742'. [ 194.377420][T19962] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6742'. [ 194.788520][ T5851] libceph: connect (1)[c::]:6789 error -22 [ 194.793219][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 194.793749][T20000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6759'. [ 194.806335][ T5851] libceph: connect (1)[c::]:6789 error -22 [ 194.811270][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 195.069603][ T5851] libceph: connect (1)[c::]:6789 error -22 [ 195.071966][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 195.451139][T20037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6776'. [ 195.587991][ T5851] libceph: connect (1)[c::]:6789 error -22 [ 195.592137][T19996] ceph: No mds server is up or the cluster is laggy [ 195.597742][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 195.831011][T20069] comedi comedi2: dac02: I/O base address or length out of range [ 195.920035][T20081] tipc: Enabling of bearer rejected, failed to enable media [ 196.198350][T20122] qrtr: Invalid version 255 [ 196.376474][T20136] netem: change failed [ 196.427187][T20142] IPVS: ip_vs_add_dest(): server weight less than zero [ 196.438840][ T5851] IPVS: starting estimator thread 0... [ 196.527770][T20144] IPVS: using max 27 ests per chain, 64800 per kthread [ 196.588712][T20160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.826154][T20188] netlink: 'syz.1.6843': attribute type 1 has an invalid length. [ 196.834215][T20188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.848334][T20178] "syz.3.6840" (20178) uses obsolete ecb(arc4) skcipher [ 196.988272][T20207] random: crng reseeded on system resumption [ 197.116892][T20217] __nla_validate_parse: 1 callbacks suppressed [ 197.116909][T20217] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6855'. [ 197.125457][T20217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6855'. [ 197.135662][ T5115] Process accounting resumed [ 197.153607][T20218] Process accounting resumed [ 197.397415][T20234] No buffer was provided with the request [ 197.590581][ C3] sr 2:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 197.595397][ C3] sr 2:0:0:0: [sr0] tag#0 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 197.798676][T20262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6874'. [ 197.811039][T20264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6878'. [ 197.814811][T20264] netlink: 'syz.3.6878': attribute type 14 has an invalid length. [ 197.827665][ T59] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.830778][ T59] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.834499][ T59] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.840957][ T59] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.979223][ T40] audit: type=1326 audit(1780442141.251:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.3.6887" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 197.998204][ T40] audit: type=1326 audit(1780442141.251:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.3.6887" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 198.029341][ T40] audit: type=1326 audit(1780442141.251:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.3.6887" exe="/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 198.049096][ T40] audit: type=1326 audit(1780442141.251:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.3.6887" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 198.057764][ T40] audit: type=1326 audit(1780442141.251:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.3.6887" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 198.065809][ T40] audit: type=1326 audit(1780442141.251:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.3.6887" exe="/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 198.074319][ T40] audit: type=1326 audit(1780442141.251:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.3.6887" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 198.096025][ T40] audit: type=1326 audit(1780442141.251:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.3.6887" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 198.175111][T20306] smc: net device wlan0 applied user defined pnetid SYZ0 [ 198.228370][T20311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6903'. [ 198.240314][T20314] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6902'. [ 198.244169][T20314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6902'. [ 198.433406][T20339] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 198.438411][T20339] ALSA: mixer_oss: invalid index 137438 [ 198.765498][T20377] netlink: 'syz.0.6933': attribute type 12 has an invalid length. [ 198.769886][T20377] netlink: 'syz.0.6933': attribute type 29 has an invalid length. [ 198.773455][T20377] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6933'. [ 198.777481][T20377] netlink: 59 bytes leftover after parsing attributes in process `syz.0.6933'. [ 198.999616][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.208945][T20408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6946'. [ 199.214701][T20408] netlink: 'syz.0.6946': attribute type 14 has an invalid length. [ 199.229886][ T59] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.233512][ T59] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.237229][ T59] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.391305][T20447] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 200.395440][T20447] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 200.398603][T20447] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 200.402390][T20447] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 200.405031][T20447] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 200.407697][T20447] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 200.410138][T20447] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 200.412322][T20447] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 200.454301][T20456] random: crng reseeded on system resumption [ 200.640824][T20472] EXT4-fs: Conflicting test_dummy_encryption options [ 200.846805][ T857] kernel read not supported for file /vcs (pid: 857 comm: kworker/0:2) [ 200.857686][ T5851] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 200.925775][T20497] [U] V3Fپ"S/4:XTZWTLW= [ 200.929690][T20497] [U] J"E:" [ 201.017793][ T5851] usb 7-1: Using ep0 maxpacket: 16 [ 201.022723][ T5851] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 201.027703][ T5851] usb 7-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 201.039612][ T5851] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 201.042461][ T5851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.044856][ T5851] usb 7-1: Product: syz [ 201.046227][ T5851] usb 7-1: Manufacturer: syz [ 201.048171][ T5851] usb 7-1: SerialNumber: syz [ 201.068362][ T5521] libceph: connect (1)[c::]:6789 error -101 [ 201.071126][ T5521] libceph: mon0 (1)[c::]:6789 connect error [ 201.190674][ T857] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 201.263738][ T5837] usb 7-1: USB disconnect, device number 4 [ 201.329200][ T5521] libceph: connect (1)[c::]:6789 error -101 [ 201.331953][ T5521] libceph: mon0 (1)[c::]:6789 connect error [ 201.339634][ T857] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 201.343279][ T857] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 201.347253][ T857] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 201.351747][ T857] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 201.356338][ T857] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 201.361534][ T857] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 201.368538][ T857] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 201.372504][ T857] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 201.375891][ T857] usb 5-1: Product: syz [ 201.378289][ T857] usb 5-1: Manufacturer: syz [ 201.386628][T20499] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 201.391173][ T857] cdc_wdm 5-1:1.0: skipping garbage [ 201.393475][ T857] cdc_wdm 5-1:1.0: skipping garbage [ 201.401394][ T857] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 201.403412][ T857] cdc_wdm 5-1:1.0: Unknown control protocol [ 201.595067][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 201.597349][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 201.600554][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 201.602989][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 201.607024][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 201.609377][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 201.611614][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 201.613376][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 201.615415][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 201.617386][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 201.619758][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 201.621811][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 201.623917][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 201.626562][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 201.629074][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 201.631633][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 201.633760][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 201.636153][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 201.639740][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 201.642042][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 201.838390][ T857] libceph: connect (1)[c::]:6789 error -101 [ 201.841001][ T857] libceph: mon0 (1)[c::]:6789 connect error [ 201.888981][T20505] ceph: No mds server is up or the cluster is laggy [ 202.416465][T20555] netlink: 216 bytes leftover after parsing attributes in process `syz.3.7015'. [ 202.483892][T20561] overlayfs: conflicting lowerdir path [ 202.798659][T20589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7031'. [ 203.019883][ T40] audit: type=1326 audit(1780442146.291:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20602 comm="syz.2.7037" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701ef7c code=0x0 [ 203.070204][T20609] netlink: 'syz.3.7041': attribute type 1 has an invalid length. [ 203.115397][T20611] netlink: 'syz.3.7042': attribute type 1 has an invalid length. [ 203.118176][T20611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7042'. [ 203.595181][T20634] netlink: 'syz.1.7054': attribute type 4 has an invalid length. [ 203.954851][ T58] usb 5-1: USB disconnect, device number 4 [ 204.800600][T20729] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7093'. [ 204.804520][T20729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7093'. [ 204.890804][ T5115] libceph: connect (1)[c::]:6789 error -101 [ 204.894718][ T5115] libceph: mon0 (1)[c::]:6789 connect error [ 205.161083][ T5115] libceph: connect (1)[c::]:6789 error -101 [ 205.164151][ T5115] libceph: mon0 (1)[c::]:6789 connect error [ 205.225946][T20766] Bluetooth: MGMT ver 1.23 [ 205.678065][ T5115] libceph: connect (1)[c::]:6789 error -101 [ 205.680536][ T5115] libceph: mon0 (1)[c::]:6789 connect error [ 205.708968][T20739] ceph: No mds server is up or the cluster is laggy [ 205.901018][T20804] kAFS: unable to lookup cell 'syz1' [ 205.904418][T20804] kAFS: unable to lookup cell 'syz1' [ 206.001473][T20815] tmpfs: Cannot change global quota limit on remount [ 206.600261][T20839] program syz.0.7143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.745414][T20847] tipc: Enabling of bearer rejected, already enabled [ 206.775279][T20849] Cannot find del_set index 14804 as target [ 206.910149][T20869] Bluetooth: MGMT ver 1.23 [ 206.974289][T20877] netlink: 'syz.2.7163': attribute type 83 has an invalid length. [ 206.976880][T20879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7164'. [ 207.010596][T20881] fuse: Invalid rootmode [ 207.442325][T20932] usb usb3: usbfs: process 20932 (syz.0.7186) did not claim interface 0 before use [ 207.669725][T20953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7198'. [ 208.537309][ T40] audit: type=1326 audit(1780442151.801:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21023 comm="syz.0.7225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 208.537367][ T40] audit: type=1326 audit(1780442151.801:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21023 comm="syz.0.7225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 208.546614][ T40] audit: type=1326 audit(1780442151.811:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21023 comm="syz.0.7225" exe="/syz-executor" sig=0 arch=40000003 syscall=278 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 208.546677][ T40] audit: type=1326 audit(1780442151.811:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21023 comm="syz.0.7225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 208.546720][ T40] audit: type=1326 audit(1780442151.811:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21023 comm="syz.0.7225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feef7c code=0x7ffc0000 [ 208.579133][T21026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7226'. [ 208.638569][T21028] binder_alloc: binder_alloc_mmap_handler: 21027 80ffd000-81000000 already mapped failed -16 [ 209.505977][ T40] audit: type=1326 audit(1780442152.771:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21103 comm="syz.0.7264" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6feef7c code=0x0 [ 209.851164][T21138] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 209.879270][ T40] audit: type=1326 audit(1780442153.141:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21134 comm="syz.3.7279" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 209.886718][ T40] audit: type=1326 audit(1780442153.151:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21134 comm="syz.3.7279" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 209.895663][ T40] audit: type=1326 audit(1780442153.151:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21134 comm="syz.3.7279" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 209.904403][ T40] audit: type=1326 audit(1780442153.151:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21134 comm="syz.3.7279" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 210.341755][T21173] sg_write: data in/out 12582877/14 bytes for SCSI command 0x0-- guessing data in; [ 210.341755][T21173] program syz.3.7296 not setting count and/or reply_len properly [ 210.583771][T21200] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 210.681523][T21207] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.785516][T21207] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.798610][T21212] netlink: 'syz.0.7314': attribute type 16 has an invalid length. [ 210.801226][T21212] netlink: 'syz.0.7314': attribute type 17 has an invalid length. [ 210.919379][T21207] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.936778][T21218] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7317'. [ 211.111803][ T103] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.119106][ T103] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.128690][ T103] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.141386][ T59] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.580346][T21263] pim6reg: entered allmulticast mode [ 211.811418][T21283] overlayfs: regular lower layers cannot follow data lower layers [ 212.045473][T21309] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 212.302999][T21336] pim6reg: entered allmulticast mode [ 212.416731][T21346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7378'. [ 212.422265][T21346] netlink: 212 bytes leftover after parsing attributes in process `syz.0.7378'. [ 212.426347][T21346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7378'. [ 213.156119][ T1040] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 213.158802][ T1040] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 213.161223][ T1040] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 213.163899][ T1040] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 213.171076][ T1040] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 213.174369][ T1040] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 213.178455][ T1040] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 213.182208][ T1040] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 213.185297][ T1040] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 213.189055][ T1040] hid-generic 0000:0004:261D.0004: unknown main item tag 0x0 [ 213.211962][ T1040] hid-generic 0000:0004:261D.0004: hidraw1: HID v0.03 Device [syz1] on syz0 [ 213.242463][T21419] fido_id[21419]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 213.545777][T21449] tipc: Enabling not permitted [ 213.549790][T21449] tipc: Enabling of bearer rejected, failed to enable media [ 213.897933][T21479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7443'. [ 214.100580][T21504] netlink: 'syz.0.7455': attribute type 10 has an invalid length. [ 214.107700][T21504] macvlan1: entered promiscuous mode [ 214.109982][T21504] macvlan1: entered allmulticast mode [ 214.116260][T21504] veth1_vlan: entered allmulticast mode [ 214.122292][T21504] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 214.132627][T21504] netlink: 'syz.0.7455': attribute type 4 has an invalid length. [ 214.136005][T21504] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7455'. [ 214.555887][T21545] program syz.1.7474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.870260][T21573] loop4: detected capacity change from 0 to 7 [ 214.902623][T21573] Dev loop4: unable to read RDB block 7 [ 214.902658][T21573] loop4: unable to read partition table [ 214.902757][T21573] loop4: partition table beyond EOD, truncated [ 214.908964][T21573] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 214.940654][T21569] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.069782][T21569] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.156412][T21569] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.285897][T21569] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.363689][T21607] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7505'. [ 215.443414][ T186] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.457595][T21617] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.463218][T21617] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.506175][ T59] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.521817][T21617] netlink: 'syz.3.7510': attribute type 16 has an invalid length. [ 215.525457][ T59] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.525577][T21617] netlink: 'syz.3.7510': attribute type 17 has an invalid length. [ 215.543942][T21617] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.547094][T21617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.551920][T21617] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.555028][T21617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.614898][ T59] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.647226][T21627] ALSA: seq fatal error: cannot create timer (-22) [ 215.820416][T21645] input input30: cannot allocate more than FF_MAX_EFFECTS effects [ 215.951896][T21656] sctp: [Deprecated]: syz.2.7529 (pid 21656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.951896][T21656] Use struct sctp_sack_info instead [ 216.329748][T21693] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 216.330662][T21694] ALSA: seq fatal error: cannot create timer (-22) [ 216.451841][T21710] loop4: detected capacity change from 0 to 7 [ 216.476311][T21710] Dev loop4: unable to read RDB block 7 [ 216.481245][T21710] loop4: unable to read partition table [ 216.487196][T21710] loop4: partition table beyond EOD, truncated [ 216.492273][T21710] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 216.557335][T21720] ALSA: seq fatal error: cannot create timer (-22) [ 216.723069][T21742] loop4: detected capacity change from 0 to 7 [ 216.739981][T21742] Dev loop4: unable to read RDB block 7 [ 216.742441][T21742] loop4: unable to read partition table [ 216.745114][T21742] loop4: partition table beyond EOD, truncated [ 216.748885][T21742] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 217.217487][T21793] netlink: 'syz.3.7595': attribute type 58 has an invalid length. [ 217.223818][T21793] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7595'. [ 218.106174][T21836] loop4: detected capacity change from 0 to 7 [ 218.116503][T21836] Dev loop4: unable to read RDB block 7 [ 218.119235][T21836] loop4: unable to read partition table [ 218.121845][T21836] loop4: partition table beyond EOD, truncated [ 218.124532][T21836] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 218.400915][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 218.400933][ T40] audit: type=1326 audit(1780442161.671:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21856 comm="syz.3.7624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 218.412701][ T40] audit: type=1326 audit(1780442161.671:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21856 comm="syz.3.7624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 218.420237][ T40] audit: type=1326 audit(1780442161.671:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21856 comm="syz.3.7624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 218.426727][ T40] audit: type=1326 audit(1780442161.671:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21856 comm="syz.3.7624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 218.435034][ T40] audit: type=1326 audit(1780442161.671:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21856 comm="syz.3.7624" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 218.443876][ T40] audit: type=1326 audit(1780442161.671:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21856 comm="syz.3.7624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 218.451841][ T40] audit: type=1326 audit(1780442161.671:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21856 comm="syz.3.7624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 218.461051][ T40] audit: type=1326 audit(1780442161.671:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21856 comm="syz.3.7624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 218.468936][ T40] audit: type=1326 audit(1780442161.671:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21856 comm="syz.3.7624" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 218.477647][ T40] audit: type=1326 audit(1780442161.671:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21856 comm="syz.3.7624" exe="/syz-executor" sig=0 arch=40000003 syscall=301 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 218.678455][T21871] sch_tbf: peakrate 1144786952152247913 is lower than or equals to rate 14721371165588982144 ! [ 219.012306][ T53] hid (null): global environment stack underflow [ 219.021589][ T53] hid-generic 616F:20C2607D:F72986D9.0005: global environment stack underflow [ 219.024282][ T53] hid-generic 616F:20C2607D:F72986D9.0005: item 0 1 1 11 parsing failed [ 219.028661][ T53] hid-generic 616F:20C2607D:F72986D9.0005: probe with driver hid-generic failed with error -22 [ 219.098702][ T53] hid_parser_main: 4 callbacks suppressed [ 219.098718][ T53] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 219.102956][ T53] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 219.105247][ T53] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 219.107491][ T53] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 219.110889][ T53] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 219.113258][ T53] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 219.115818][ T53] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 219.118782][ T53] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 219.121111][ T53] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 219.123365][ T53] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 219.126851][ T53] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.03 Device [syz1] on syz1 [ 219.160619][T21904] fido_id[21904]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 219.276279][T21919] tipc: Enabled bearer , priority 5 [ 219.962944][T21988] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7687'. [ 219.966585][T21988] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7687'. [ 220.156147][T22007] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 220.165397][T22009] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7697'. [ 220.469459][T22053] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 220.492704][T22055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7720'. [ 220.620585][T22061] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.624625][T22061] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.682831][T22067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7725'. [ 220.713357][T22067] veth7: entered promiscuous mode [ 220.749359][T22061] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.762628][T22061] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.862874][T22061] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.866585][T22061] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.901442][T22094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7739'. [ 220.964892][T22061] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.968716][T22061] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.110423][ T46] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.113021][ T46] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.148577][ T46] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.151235][ T46] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.167394][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.171104][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.185758][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.192301][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.240296][T22129] net_ratelimit: 1656 callbacks suppressed [ 221.240316][T22129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.370899][T22146] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7763'. [ 221.375953][T22146] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7763'. [ 221.465398][T22155] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7767'. [ 221.531398][T22163] IPVS: Scheduler module ip_vs_sip not found [ 221.821425][T22195] sch_fq: defrate 2 ignored. [ 222.097104][T22216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7795'. [ 222.507929][T22264] hugetlbfs: Bad value '' for mount option 'size' [ 222.507929][T22264] [ 222.628524][T22269] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 223.235852][T22351] program syz.2.7859 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.256037][T22444] program syz.3.7905 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.275752][T22446] overlay: Unknown parameter '/6M߶}5&IG$ΆPAHB-\,Hftd&C)ZVF*kdՠQcTiw UEpΛS2 p* W~xVAg]XC4M3 !' [ 224.356268][T22460] program syz.3.7913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.825294][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 224.825312][ T40] audit: type=1326 audit(1780442168.091:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22499 comm="syz.3.7933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 224.836716][ T40] audit: type=1326 audit(1780442168.091:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22499 comm="syz.3.7933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 224.846553][ T40] audit: type=1326 audit(1780442168.091:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22499 comm="syz.3.7933" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 224.856161][ T40] audit: type=1326 audit(1780442168.091:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22499 comm="syz.3.7933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 224.865100][ T40] audit: type=1326 audit(1780442168.091:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22499 comm="syz.3.7933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 224.874077][ T40] audit: type=1326 audit(1780442168.091:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22499 comm="syz.3.7933" exe="/syz-executor" sig=0 arch=40000003 syscall=61 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 224.881178][ T40] audit: type=1326 audit(1780442168.091:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22499 comm="syz.3.7933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 224.888384][ T40] audit: type=1326 audit(1780442168.091:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22499 comm="syz.3.7933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 225.059300][T22517] xt_limit: Overflow, try lower: 324384747/4200216962 [ 225.167172][T22530] __nla_validate_parse: 4 callbacks suppressed [ 225.167189][T22530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7952'. [ 225.515901][T22536] can0: slcan on ttyprintk. [ 225.611636][T22533] can0 (unregistered): slcan off ttyprintk. [ 225.660297][T22553] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7954'. [ 226.514359][T22619] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7983'. [ 226.522333][T22619] netlink: 'syz.0.7983': attribute type 6 has an invalid length. [ 226.526251][T22619] netlink: 'syz.0.7983': attribute type 5 has an invalid length. [ 226.530139][T22619] netlink: 'syz.0.7983': attribute type 4 has an invalid length. [ 226.684360][T22629] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.7989'. [ 226.690010][T22629] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 226.752093][T22633] netlink: 240 bytes leftover after parsing attributes in process `syz.3.7991'. [ 226.755116][T22633] netlink: 'syz.3.7991': attribute type 9 has an invalid length. [ 226.777333][T22635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7999'. [ 226.927005][T22649] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 227.213856][T22682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8010'. [ 227.295110][T22693] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 227.346792][T22701] smc: net device vcan0 applied user defined pnetid SYZ1 [ 227.552493][T22730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8037'. [ 227.569571][T22730] netlink: 277 bytes leftover after parsing attributes in process `syz.3.8037'. [ 227.573375][T22730] netlink: 277 bytes leftover after parsing attributes in process `syz.3.8037'. [ 227.686702][T22752] netlink: 'syz.2.8048': attribute type 11 has an invalid length. [ 227.689509][T22752] netlink: 'syz.2.8048': attribute type 4 has an invalid length. [ 228.225449][T22804] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 228.922079][T22900] ptrace attach of "/syz-executor exec"[5745] was attempted by ""[22900] [ 229.285519][T22950] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.290982][T22950] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.448379][T22950] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.458665][T22950] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.560666][T22950] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.578584][T22950] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.789535][ T40] audit: type=1326 audit(1780442173.061:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22988 comm="syz.3.8159" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 229.796627][ T40] audit: type=1326 audit(1780442173.061:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22988 comm="syz.3.8159" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 229.803905][ T103] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.806737][ T103] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.824753][ T186] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.828375][ T186] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.840962][ T186] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.845435][ T186] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.854853][ T186] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.858012][ T186] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.875028][T22993] netlink: 'syz.3.8161': attribute type 1 has an invalid length. [ 230.193443][T23023] tipc: Enabling of bearer rejected, failed to enable media [ 230.585145][T23064] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 230.588778][ T1040] team_slave_0: entered promiscuous mode [ 230.592146][ T1040] team_slave_1: entered promiscuous mode [ 230.699565][ T53] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 230.800577][T23088] __nla_validate_parse: 4 callbacks suppressed [ 230.800593][T23088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8206'. [ 230.806975][T23088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8206'. [ 230.810082][T23088] netlink: 'syz.0.8206': attribute type 15 has an invalid length. [ 230.841167][T23092] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 230.859412][ T53] usb 7-1: Using ep0 maxpacket: 32 [ 230.863698][ T53] usb 7-1: unable to get BOS descriptor or descriptor too short [ 230.868491][ T53] usb 7-1: config 8 has an invalid interface number: 188 but max is 0 [ 230.871607][ T53] usb 7-1: config 8 has no interface number 0 [ 230.874004][ T53] usb 7-1: config 8 interface 188 has no altsetting 0 [ 230.879374][ T53] usb 7-1: string descriptor 0 read error: -22 [ 230.881667][ T53] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 230.885565][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.894212][ T53] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 230.896739][ T53] dw2102: su3000_power_ctrl: 1, initialized 0 [ 230.899361][ T53] dvb-usb: bulk message failed: -22 (2/0) [ 230.907407][ T53] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 230.911756][ T53] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 230.914443][ T53] usb 7-1: media controller created [ 230.916109][ T53] dvb-usb: bulk message failed: -22 (6/0) [ 230.916122][T23100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8212'. [ 230.918304][ T53] dw2102: i2c transfer failed. [ 230.925620][ T53] dvb-usb: bulk message failed: -22 (6/0) [ 230.928771][ T53] dw2102: i2c transfer failed. [ 230.930813][ T53] dvb-usb: bulk message failed: -22 (6/0) [ 230.932883][ T53] dw2102: i2c transfer failed. [ 230.934653][ T53] dvb-usb: bulk message failed: -22 (6/0) [ 230.936696][ T53] dw2102: i2c transfer failed. [ 230.939719][ T53] dvb-usb: bulk message failed: -22 (6/0) [ 230.942075][ T53] dw2102: i2c transfer failed. [ 230.943917][ T53] dvb-usb: bulk message failed: -22 (6/0) [ 230.946072][ T53] dw2102: i2c transfer failed. [ 230.948298][ T53] dvb-usb: MAC address: 02:02:02:02:02:02 [ 230.957111][ T53] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.972664][ T53] dvb-usb: bulk message failed: -22 (3/0) [ 230.974503][ T53] dw2102: command 0x0e transfer failed. [ 230.976176][ T53] dvb-usb: bulk message failed: -22 (3/0) [ 230.978430][ T53] dw2102: command 0x0e transfer failed. [ 231.087702][T23112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8218'. [ 231.091261][T23112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8218'. [ 231.094784][T23112] netlink: 'syz.1.8218': attribute type 15 has an invalid length. [ 231.264164][T23122] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8222'. [ 231.289286][ T53] dvb-usb: bulk message failed: -22 (3/0) [ 231.292407][ T53] dw2102: command 0x0e transfer failed. [ 231.296241][ T53] dvb-usb: bulk message failed: -22 (3/0) [ 231.298832][ T53] dw2102: command 0x0e transfer failed. [ 231.300821][ T53] dvb-usb: bulk message failed: -22 (1/0) [ 231.302679][ T53] dw2102: command 0x51 transfer failed. [ 231.304612][T23052] dvb-usb: bulk message failed: -22 (4/0) [ 231.306429][T23052] dw2102: i2c transfer failed. [ 231.335291][ T53] DVB: Unable to find symbol ds3000_attach() [ 231.340576][ T53] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 231.400032][ T53] rc_core: IR keymap rc-su3000 not found [ 231.402878][ T53] Registered IR keymap rc-empty [ 231.407291][ T53] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 231.421684][ T53] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input31 [ 231.430163][ T53] dvb-usb: schedule remote query interval to 150 msecs. [ 231.437118][ T53] dw2102: su3000_power_ctrl: 0, initialized 1 [ 231.440323][ T53] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 231.445214][ T53] usb 7-1: USB disconnect, device number 5 [ 231.517450][ T53] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 231.546765][T23142] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 231.578689][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 231.578704][ T40] audit: type=1326 audit(1780442174.851:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23143 comm="syz.1.8232" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 231.588830][ T40] audit: type=1326 audit(1780442174.851:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23143 comm="syz.1.8232" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 231.598771][ T40] audit: type=1326 audit(1780442174.851:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23143 comm="syz.1.8232" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 231.607171][ T40] audit: type=1326 audit(1780442174.851:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23143 comm="syz.1.8232" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 231.615222][ T40] audit: type=1326 audit(1780442174.851:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23143 comm="syz.1.8232" exe="/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 231.623438][ T40] audit: type=1326 audit(1780442174.851:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23143 comm="syz.1.8232" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 231.630832][ T40] audit: type=1326 audit(1780442174.851:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23143 comm="syz.1.8232" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 231.639332][ T40] audit: type=1326 audit(1780442174.851:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23143 comm="syz.1.8232" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 231.648768][ T40] audit: type=1326 audit(1780442174.851:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23143 comm="syz.1.8232" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 231.658248][ T40] audit: type=1326 audit(1780442174.851:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23143 comm="syz.1.8232" exe="/syz-executor" sig=0 arch=40000003 syscall=157 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 231.658342][T23150] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8234'. [ 231.704107][T23155] binder: 23153:23155 ioctl c018620c 80000240 returned -22 [ 231.771930][T23162] [U] fW+&{>m y)K}D_D49˜T5uҭoo.йE!OvKz.s~uX_hVaD ٨Λ:4,a9M+ [ 231.777875][T23161] [U] T [ 231.830215][T23170] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 232.003539][T23184] netlink: 'syz.0.8252': attribute type 15 has an invalid length. [ 232.006271][T23184] netlink: 666 bytes leftover after parsing attributes in process `syz.0.8252'. [ 232.449783][T23234] support for cryptoloop has been removed. Use dm-crypt instead. [ 233.016144][T23296] lo speed is unknown, defaulting to 1000 [ 233.303719][T23321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8319'. [ 233.836572][ T5844] hid_parser_main: 73 callbacks suppressed [ 233.836585][ T5844] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 233.842843][ T5844] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 233.934564][T23360] fido_id[23360]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 233.961549][T23365] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 234.045921][T23374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8342'. [ 234.049686][T23374] netlink: 'syz.3.8342': attribute type 7 has an invalid length. [ 234.053015][T23374] netlink: 'syz.3.8342': attribute type 13 has an invalid length. [ 234.746971][T23455] pimreg3: entered allmulticast mode [ 234.878587][T23468] xt_l2tp: missing protocol rule (udp|l2tpip) [ 235.155533][T23491] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 235.254037][T23496] lo speed is unknown, defaulting to 1000 [ 235.484291][T23512] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 235.484291][T23512] Please contact the netfilter-devel mailing list or update your nftables rules. [ 235.789484][ T843] kernel write not supported for file /amidi2 (pid: 843 comm: kworker/2:2) [ 235.791716][T23535] netlink: 'syz.1.8419': attribute type 1 has an invalid length. [ 235.797493][T23535] nbd: error processing sock list [ 236.053752][T23549] lo speed is unknown, defaulting to 1000 [ 236.063480][T23555] use of bytesused == 0 is deprecated and will be removed in the future, [ 236.069464][T23555] use the actual size instead. [ 236.770668][T23624] lo speed is unknown, defaulting to 1000 [ 237.073599][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 237.073614][ T40] audit: type=1326 audit(1780442180.341:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23644 comm="syz.1.8470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 237.099417][ T40] audit: type=1326 audit(1780442180.341:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23644 comm="syz.1.8470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 237.108443][ T40] audit: type=1326 audit(1780442180.341:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23644 comm="syz.1.8470" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 237.115077][ T40] audit: type=1326 audit(1780442180.361:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23644 comm="syz.1.8470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 237.122702][ T40] audit: type=1326 audit(1780442180.361:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23644 comm="syz.1.8470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 237.133645][ T40] audit: type=1326 audit(1780442180.361:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23648 comm="syz.1.8470" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71c61ab code=0x7ffc0000 [ 237.153009][ T40] audit: type=1326 audit(1780442180.401:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23644 comm="syz.1.8470" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 237.162510][ T40] audit: type=1326 audit(1780442180.401:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23644 comm="syz.1.8470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 237.171952][ T40] audit: type=1326 audit(1780442180.401:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23644 comm="syz.1.8470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7ffc0000 [ 237.253563][T23660] lo speed is unknown, defaulting to 1000 [ 237.657508][T23689] __nla_validate_parse: 2 callbacks suppressed [ 237.663373][T23689] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8486'. [ 237.666785][T23689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8486'. [ 237.839563][T23709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8496'. [ 238.170638][T23740] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 238.322407][T23761] lo speed is unknown, defaulting to 1000 [ 238.364640][T23767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8522'. [ 238.369056][T23767] bridge_slave_0: default FDB implementation only supports local addresses [ 238.603914][T23789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8532'. [ 239.065236][T23827] netlink: 'syz.3.8549': attribute type 1 has an invalid length. [ 239.068608][T23827] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8549'. [ 239.077249][T23827] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8549'. [ 239.083426][T23827] netlink: 'syz.3.8549': attribute type 1 has an invalid length. [ 239.086325][T23827] netlink: 634 bytes leftover after parsing attributes in process `syz.3.8549'. [ 239.146677][T23833] lo speed is unknown, defaulting to 1000 [ 239.359384][T23843] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 243.811809][T23959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8611'. [ 245.488384][T24004] netlink: 35 bytes leftover after parsing attributes in process `syz.2.8632'. [ 245.516990][T24009] trusted_key: encrypted_key: key trusted:syz not found [ 245.576798][T24015] syz.2.8637 (24015) used obsolete PPPIOCDETACH ioctl [ 245.903558][T24061] [U]  [ 245.904902][T24061] [U] K{ [ 245.906447][T24061] [U] T 1ŠFFˊ`GJǘGO/MC [ 245.910830][T24061] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 245.918242][T24061] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 245.924831][T24061] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 245.940355][T24061] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 245.954259][T24061] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 245.959327][T24061] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 245.963488][T24061] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 245.999868][T24061] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 246.003747][T24061] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 246.008960][T24061] [U] 22Ʃ۩X?0;3U [ 246.010757][T24061] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 246.021126][T24061] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 246.025329][T24061] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 246.029267][T24061] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 246.035896][T24072] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8663'. [ 246.039068][T24061] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 246.048166][T24061] [U] EC [ 246.052001][T24061] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 246.096605][T24060] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 247.007106][T24163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8708'. [ 247.011922][T24163] netlink: 'syz.1.8708': attribute type 5 has an invalid length. [ 247.015034][T24163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8708'. [ 247.026003][T24163] geneve3: entered promiscuous mode [ 247.028441][T24163] geneve3: entered allmulticast mode [ 247.032444][ T59] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 247.037264][ T59] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 247.040140][ T59] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 247.043020][ T59] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 247.235287][T24180] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 247.248680][ T40] audit: type=1326 audit(1780442190.521:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24181 comm="syz.2.8717" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701ef7c code=0x0 [ 247.541749][T24196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8723'. [ 247.657072][T24202] netlink: 'syz.0.8726': attribute type 1 has an invalid length. [ 247.874533][T24216] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8733'. [ 247.879113][T24216] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8733'. [ 248.154114][T24236] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 248.287418][T24252] netlink: 'syz.1.8751': attribute type 1 has an invalid length. [ 248.292082][T24252] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8751'. [ 248.296309][T24252] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8751'. [ 248.300775][T24252] netlink: 'syz.1.8751': attribute type 1 has an invalid length. [ 248.303784][T24252] netlink: 'syz.1.8751': attribute type 8 has an invalid length. [ 248.307001][T24256] netlink: 'syz.2.8753': attribute type 4 has an invalid length. [ 248.437154][T24272] xt_time: unknown flags 0xf4 [ 248.799878][ T40] audit: type=1326 audit(1780442192.071:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.3.8767" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 248.807902][ T40] audit: type=1326 audit(1780442192.071:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.3.8767" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 248.816530][ T40] audit: type=1326 audit(1780442192.071:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.3.8767" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 248.824209][ T40] audit: type=1326 audit(1780442192.071:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.3.8767" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 248.834141][ T40] audit: type=1326 audit(1780442192.071:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.3.8767" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 248.840889][ T40] audit: type=1326 audit(1780442192.071:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.3.8767" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 248.842927][T24289] devpts: Bad value for 'max' [ 248.847772][ T40] audit: type=1326 audit(1780442192.071:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.3.8767" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 248.858274][ T40] audit: type=1326 audit(1780442192.071:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.3.8767" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 248.865334][ T40] audit: type=1326 audit(1780442192.071:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.3.8767" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36f7c code=0x7ffc0000 [ 249.126421][T24307] nbd: must specify a device to reconfigure [ 249.177453][T24312] __nla_validate_parse: 2 callbacks suppressed [ 249.177470][T24312] netlink: 136 bytes leftover after parsing attributes in process `syz.2.8779'. [ 249.247087][T24320] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 249.317213][T24326] gfs2: error -5 reading superblock [ 249.382741][T24332] program syz.3.8789 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.505229][T24343] sg_write: data in/out 2069223589/3 bytes for SCSI command 0x91-- guessing data in; [ 249.505229][T24343] program syz.3.8794 not setting count and/or reply_len properly [ 249.645949][T24360] ptrace attach of "/syz-executor exec"[5753] was attempted by " [ 250.086375][T24388] dvmrp1: entered allmulticast mode [ 250.171183][T24390] nbd: must specify an index to disconnect [ 250.258147][T24386] dvmrp1: left allmulticast mode [ 250.336345][T24395] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8819'. [ 250.340224][T24395] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8819'. [ 250.343933][T24395] netlink: 'syz.1.8819': attribute type 5 has an invalid length. [ 250.347095][T24395] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8819'. [ 250.683314][T24430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8834'. [ 250.686123][T24430] nbd: illegal input index 131084 [ 251.201252][T24476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8855'. [ 251.441121][T24496] veth0_to_bond: entered allmulticast mode [ 251.712876][T24520] veth0_to_bond: entered allmulticast mode [ 252.639305][ T843] kernel read not supported for file /media0 (pid: 843 comm: kworker/2:2) [ 252.745771][T24574] tc_dump_action: action bad kind [ 252.802047][T24579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8903'. [ 252.996621][T24599] netlink: 'syz.3.8914': attribute type 62 has an invalid length. [ 253.073656][T24607] tmpfs: Cannot change global quota limit on remount [ 253.106660][T24611] netlink: 766 bytes leftover after parsing attributes in process `syz.1.8920'. [ 253.316658][T24632] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 253.323703][T24633] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 1 [ 253.333785][T24634] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 2 [ 253.336985][T24636] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 3 [ 253.691230][T24679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8950'. [ 253.695307][T24679] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8950'. [ 254.859494][T24742] netlink: 'syz.1.8982': attribute type 2 has an invalid length. [ 255.132253][T24768] __nla_validate_parse: 3 callbacks suppressed [ 255.132268][T24768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8995'. [ 256.020751][T24774] syz.0.8998 (24774) used greatest stack depth: 18768 bytes left [ 256.175818][T24806] netlink: 'syz.3.9014': attribute type 12 has an invalid length. [ 256.179970][T24806] netlink: 'syz.3.9014': attribute type 29 has an invalid length. [ 256.183208][T24806] netlink: 'syz.3.9014': attribute type 2 has an invalid length. [ 256.186427][T24806] netlink: 260 bytes leftover after parsing attributes in process `syz.3.9014'. [ 256.232503][T24808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9015'. [ 256.554069][ T58] kernel write not supported for file /sg0 (pid: 58 comm: kworker/3:1) [ 256.672152][T24854] comedi comedi3: mpc624: I/O port conflict (0x100,16) [ 256.900911][T24877] comedi comedi3: mpc624: I/O port conflict (0x100,16) [ 256.985749][T24887] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.989098][T24887] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.991890][T24887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.036277][T24890] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9054'. [ 257.116754][T24898] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9058'. [ 257.378001][T24909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9063'. [ 257.470947][T24920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9067'. [ 257.474251][T24920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9067'. [ 257.818954][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 257.818972][ T40] audit: type=1326 audit(1780442201.091:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.0.9087" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6feef7c code=0x0 [ 257.850160][T24964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9089'. [ 257.856144][T24964] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.908962][T24964] bridge_slave_1 (unregistering): left allmulticast mode [ 257.911378][T24964] bridge_slave_1 (unregistering): left promiscuous mode [ 257.913986][T24964] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.439112][T24986] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.442254][T24986] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.444672][T24986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.956066][T25032] overlayfs: conflicting lowerdir path [ 259.057756][ T5852] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 259.238608][ T5852] usb 7-1: Using ep0 maxpacket: 8 [ 259.242770][ T5852] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 259.246253][ T5852] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 259.250828][ T5852] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 259.254328][ T5852] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 259.259054][ T5852] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 259.263632][ T5852] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 259.267408][ T5852] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 259.273533][ T5852] usb 7-1: config 168 interface 0 has no altsetting 0 [ 259.277595][ T5852] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 259.280754][ T5852] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 259.284215][ T5852] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 259.288876][ T5852] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 259.293106][ T5852] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 259.297397][ T5852] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 259.302868][ T5852] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 259.308194][ T5852] usb 7-1: config 168 interface 0 has no altsetting 0 [ 259.313834][ T5852] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 259.317022][ T5852] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 259.322091][ T5852] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 259.326679][ T5852] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 259.332154][ T5852] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 259.336791][ T5852] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 259.341554][ T5852] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 259.347112][ T5852] usb 7-1: config 168 interface 0 has no altsetting 0 [ 259.353700][ T5852] usb 7-1: string descriptor 0 read error: -22 [ 259.356281][ T5852] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 259.361570][ T5852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.382133][ T5852] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 259.591761][ T5851] usb 7-1: USB disconnect, device number 6 [ 260.705065][T25182] program syz.3.9193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.739650][T25188] netlink: 'syz.3.9195': attribute type 4 has an invalid length. [ 260.742213][T25188] netlink: 17 bytes leftover after parsing attributes in process `syz.3.9195'. [ 260.748823][T25185] ptrace attach of "/syz-executor exec"[25186] was attempted by "/syz-executor exec"[25185] [ 260.986581][T25215] ptrace attach of "/syz-executor exec"[25217] was attempted by "/syz-executor exec"[25215] [ 261.243376][T25250] nbd: must specify a size in bytes for the device [ 261.654939][T25292] openvswitch: netlink: IP tunnel dst address not specified [ 261.657624][T25292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.707063][T25298] bond4: (slave bond_slave_1): Device is not bonding slave [ 261.709593][T25298] bond4: option active_slave: invalid value (bond_slave_1) [ 261.749391][T25298] bond4 (unregistering): Released all slaves [ 261.891849][T25312] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 261.926487][T25314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9252'. [ 261.930017][T25314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9252'. [ 262.037039][ T40] audit: type=1326 audit(1780442205.301:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25323 comm="syz.2.9257" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701ef7c code=0x0 [ 263.078934][T25363] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 263.087364][T25363] @0: renamed from bond_slave_1 (while UP) [ 263.153676][T25377] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.9281'. [ 263.182158][T25380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9283'. [ 263.541405][T25425] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9303'. [ 263.768099][T25425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.807926][T25425] bond_slave_0: left allmulticast mode [ 263.868093][T25425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.908432][T25425] bond_slave_1: left allmulticast mode [ 263.913853][T25425] bond0 (unregistering): Released all slaves [ 263.997496][T25438] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 264.088658][T25451] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 264.113692][T25453] program syz.2.9319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.225725][T25472] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 264.509571][T25510] max out of range [ 264.651206][T25523] tipc: MTU too low for tipc bearer [ 264.696595][T25530] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 265.244490][T25581] syz.3.9379: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 265.255223][T25581] CPU: 2 UID: 0 PID: 25581 Comm: syz.3.9379 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.255255][T25581] Tainted: [L]=SOFTLOCKUP [ 265.255262][T25581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 265.255275][T25581] Call Trace: [ 265.255291][T25581] [ 265.255298][T25581] dump_stack_lvl+0x100/0x190 [ 265.255379][T25581] warn_alloc.cold+0x95/0x1c1 [ 265.255406][T25581] ? __pfx_warn_alloc+0x10/0x10 [ 265.255439][T25581] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 265.255532][T25581] ? _mutex_trylock_nest_lock+0x170/0x310 [ 265.255565][T25581] __alloc_frozen_pages_noprof+0xf25/0x2bc0 [ 265.255596][T25581] ? __lock_acquire+0x4a5/0x2630 [ 265.255618][T25581] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 265.255641][T25581] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 265.255662][T25581] ? do_raw_spin_lock+0x128/0x260 [ 265.255688][T25581] __folio_alloc_noprof+0x13/0x260 [ 265.255710][T25581] alloc_migration_target+0x1d7/0x6d0 [ 265.255729][T25581] migrate_pages_batch+0x5dc/0x45c0 [ 265.255748][T25581] ? do_raw_spin_lock+0x30/0x260 [ 265.255778][T25581] ? __pfx_alloc_migration_target+0x10/0x10 [ 265.255800][T25581] ? mark_held_locks+0x40/0x70 [ 265.255821][T25581] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 265.255838][T25581] ? lockdep_hardirqs_on+0x78/0x100 [ 265.255858][T25581] ? __pfx_migrate_pages_batch+0x10/0x10 [ 265.255875][T25581] ? debug_object_active_state+0x2ea/0x3f0 [ 265.255916][T25581] ? do_raw_spin_lock+0x128/0x260 [ 265.255939][T25581] ? mark_held_locks+0x40/0x70 [ 265.255959][T25581] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 265.255983][T25581] migrate_pages_sync+0x12c/0x880 [ 265.256003][T25581] ? __pfx_alloc_migration_target+0x10/0x10 [ 265.256021][T25581] ? finish_task_switch.isra.0+0xba6/0x1010 [ 265.256049][T25581] ? __pfx_migrate_pages_sync+0x10/0x10 [ 265.256073][T25581] ? trace_sched_exit_tp+0x11c/0x160 [ 265.256110][T25581] ? __lock_acquire+0x4a5/0x2630 [ 265.256140][T25581] ? __css_rstat_updated+0x1ce/0x5a0 [ 265.256174][T25581] migrate_pages+0x1aa5/0x2880 [ 265.256204][T25581] ? __pfx_alloc_migration_target+0x10/0x10 [ 265.256240][T25581] ? __pfx_migrate_pages+0x10/0x10 [ 265.256274][T25581] ? __lock_acquire+0x4a5/0x2630 [ 265.256315][T25581] ? mtree_load+0x32d/0xa90 [ 265.256340][T25581] move_pages_and_store_status+0xf1/0x230 [ 265.256361][T25581] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 265.256387][T25581] kernel_move_pages+0xc47/0x13f0 [ 265.256411][T25581] ? __pfx_kernel_move_pages+0x10/0x10 [ 265.256435][T25581] ? xfd_validate_state+0x129/0x190 [ 265.256453][T25581] __ia32_sys_move_pages+0xdd/0x1b0 [ 265.256472][T25581] ? __do_fast_syscall_32+0x98/0x970 [ 265.256492][T25581] ? lockdep_hardirqs_on+0x78/0x100 [ 265.256511][T25581] __do_fast_syscall_32+0xe7/0x970 [ 265.256533][T25581] do_fast_syscall_32+0x32/0x70 [ 265.256554][T25581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 265.256571][T25581] RIP: 0023:0xf7f36f7c [ 265.256584][T25581] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 265.256597][T25581] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 265.256669][T25581] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000000020a0 [ 265.256679][T25581] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 265.256687][T25581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 265.256695][T25581] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 265.256702][T25581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 265.256728][T25581] [ 265.256828][T25581] Mem-Info: [ 265.411885][T25581] active_anon:1156 inactive_anon:277 isolated_anon:0 [ 265.411885][T25581] active_file:7183 inactive_file:13029 isolated_file:1 [ 265.411885][T25581] unevictable:1768 dirty:57 writeback:0 [ 265.411885][T25581] slab_reclaimable:6164 slab_unreclaimable:57712 [ 265.411885][T25581] mapped:22221 shmem:1777 pagetables:1813 [ 265.411885][T25581] sec_pagetables:314 bounce:0 [ 265.411885][T25581] kernel_misc_reclaimable:0 [ 265.411885][T25581] free:48082 free_pcp:893 free_cma:0 [ 265.428124][T25581] Node 0 active_anon:12kB inactive_anon:156kB active_file:0kB inactive_file:12kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:3540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8832kB pagetables:1800kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 265.441706][T25581] Node 1 active_anon:4628kB inactive_anon:944kB active_file:28732kB inactive_file:52104kB unevictable:3536kB isolated(anon):0kB isolated(file):4kB mapped:88856kB dirty:180kB writeback:0kB shmem:3572kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5552kB pagetables:5524kB sec_pagetables:124kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 265.453426][T25581] Node 0 DMA free:2616kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 265.464456][T25581] lowmem_reserve[]: 0 285 285 285 285 [ 265.466301][T25581] Node 0 DMA32 free:28852kB boost:29460kB min:42556kB low:45828kB high:49100kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:156kB active_file:0kB inactive_file:12kB unevictable:3536kB writepending:0kB zspages:3484kB present:1032196kB managed:292748kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 265.477189][T25581] lowmem_reserve[]: 0 0 0 0 0 [ 265.478868][T25581] Node 1 DMA32 free:159044kB boost:26624kB min:73768kB low:85552kB high:97336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4524kB inactive_anon:944kB active_file:28732kB inactive_file:52136kB unevictable:3536kB writepending:288kB zspages:3156kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:5496kB local_pcp:1040kB free_cma:0kB [ 265.490407][T25581] lowmem_reserve[]: 0 0 0 0 0 [ 265.492315][T25581] Node 0 DMA: 121*4kB (U) 15*8kB (U) 4*16kB (U) 15*32kB (U) 5*64kB (U) 1*128kB (U) 2*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2620kB [ 265.497388][T25581] Node 0 DMA32: 943*4kB (UME) 593*8kB (UME) 299*16kB (UM) 210*32kB (UME) 59*64kB (UME) 20*128kB (UME) 6*256kB (UME) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 28916kB [ 265.505142][T25581] Node 1 DMA32: 2252*4kB (UM) 1557*8kB (UME) 1048*16kB (UME) 342*32kB (UME) 113*64kB (UME) 47*128kB (UME) 81*256kB (UME) 65*512kB (UM) 26*1024kB (U) 7*2048kB (UM) 0*4096kB = 157400kB [ 265.513444][T25581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.518166][T25581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 265.522077][T25581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.526142][T25581] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 265.531996][T25581] 23309 total pagecache pages [ 265.534296][T25581] 769 pages in swap cache [ 265.536126][T25581] Free swap = 98324kB [ 265.538353][T25581] Total swap = 124996kB [ 265.540135][T25581] 524155 pages RAM [ 265.541875][T25581] 0 pages HighMem/MovableOnly [ 265.543845][T25581] 210075 pages reserved [ 265.547160][T25581] 0 pages cma reserved [ 265.717447][T25616] netlink: 'syz.0.9397': attribute type 1 has an invalid length. [ 265.721339][T25616] netlink: 'syz.0.9397': attribute type 2 has an invalid length. [ 265.723821][T25616] netlink: 'syz.0.9397': attribute type 1 has an invalid length. [ 265.726256][T25616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9397'. [ 266.223810][T25670] tipc: Enabled bearer , priority 0 [ 267.189807][T25726] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9452'. [ 267.304564][T25728] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 267.455518][T25747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9462'. [ 267.460955][T25747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9462'. [ 267.463801][T25747] netlink: 'syz.0.9462': attribute type 7 has an invalid length. [ 267.549828][T25755] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 267.762431][T25781] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 267.909208][T25796] tipc: Enabled bearer , priority 10 [ 268.870276][T25870] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9518'. [ 269.524444][T25911] comedi comedi3: aio_iiro_16: I/O port conflict (0x100,8) [ 269.723623][T25931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9545'. [ 270.805072][T26019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9580'. [ 270.977234][ T40] audit: type=1326 audit(1780442214.241:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25985 comm="syz.1.9566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef7c code=0x7fc00000 [ 271.205172][ T857] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 271.208134][ T857] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 271.211355][ T857] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 271.214178][ T857] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 271.216475][ T857] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 271.219203][ T857] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 271.221718][ T857] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 271.224042][ T857] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 271.226448][ T857] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 271.229336][ T857] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 271.237640][ T857] hid-generic 0006:0004:0009.0008: hidraw1: VIRTUAL HID v0.01 Device [syz0] on syz0 [ 271.333659][T26032] fido_id[26032]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 271.344435][T26036] comedi comedi3: pcl818: I/O port conflict (0x100,16) [ 271.349612][T26038] pim6reg: entered allmulticast mode [ 271.358524][T26038] pim6reg: left allmulticast mode [ 271.719059][T26062] vivid-000: disconnect [ 271.723594][T26061] vivid-000: reconnect [ 271.864359][T26078] lo speed is unknown, defaulting to 1000 [ 271.976644][ T40] audit: type=1326 audit(1780442215.241:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26089 comm="syz.0.9614" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6feef7c code=0x0 [ 273.071256][T26124] 9p: p9: multiple sources not supported [ 273.663959][T26139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9635'. [ 274.057013][T26171] pim6reg: entered allmulticast mode [ 274.069036][T26171] pim6reg: left allmulticast mode [ 274.157415][T26176] lo speed is unknown, defaulting to 1000 [ 274.307996][ T857] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 274.467775][ T857] usb 7-1: Using ep0 maxpacket: 32 [ 274.474689][ T857] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 274.479811][ T857] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.483072][ T857] usb 7-1: Product: syz [ 274.484903][ T857] usb 7-1: Manufacturer: syz [ 274.487813][ T857] usb 7-1: SerialNumber: syz [ 274.502522][ T857] usb 7-1: config 0 descriptor?? [ 274.509199][ T857] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 274.518354][ T857] dvb-usb: bulk message failed: -22 (4/0) [ 274.526062][ T857] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 274.537933][ T857] dvb-usb: bulk message failed: -22 (5/0) [ 274.540781][ T857] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 274.548861][ T857] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 274.553954][ T857] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 274.556907][ T857] usb 7-1: media controller created [ 274.566685][ T857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 274.583555][ T857] usb 7-1: selecting invalid altsetting 3 [ 274.585683][ T857] ttusb2: set interface to alts=3 failed [ 274.619428][ T857] DVB: Unable to find symbol tda10086_attach() [ 274.622021][ T857] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 274.626076][ T857] dvb-usb: bulk message failed: -22 (4/0) [ 274.639444][ T857] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 274.647770][ T857] dvb-usb: bulk message failed: -22 (5/0) [ 274.650182][ T857] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 274.653390][ T857] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 274.712366][T26174] ttusb2: i2c wr len=133 too high [ 274.716375][ T857] usb 7-1: USB disconnect, device number 7 [ 274.781024][ T857] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 274.829556][T26229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9678'. [ 274.831724][ T5837] kernel write not supported for file /dsp1 (pid: 5837 comm: kworker/3:4) [ 274.968716][T26235] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9683'. [ 275.263498][T26256] Invalid logical block size (53355) [ 276.010438][T26274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9702'. [ 276.371211][T26292] can0: slcan on ttyS3. [ 276.380084][T26280] lo speed is unknown, defaulting to 1000 [ 276.491526][T26297] sg_read: process 5015 (syz.1.9711) changed security contexts after opening file descriptor, this is not allowed. [ 276.519376][T26291] can0 (unregistered): slcan off ttyS3. [ 276.554787][T26303] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9713'. [ 276.666274][T26319] xt_socket: unknown flags 0x50 [ 276.717409][T26327] netlink: 27 bytes leftover after parsing attributes in process `syz.3.9723'. [ 277.080437][T26370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9741'. [ 277.285339][T26389] lo speed is unknown, defaulting to 1000 [ 277.782405][T26446] netlink: 'syz.2.9774': attribute type 1 has an invalid length. [ 277.785813][T26446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.834996][T26455] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9778'. [ 278.079543][T26474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9789'. [ 278.299705][T26487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9795'. [ 278.304938][T26487] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 279.088173][T26506] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9804'. [ 279.179175][ T5115] hid-generic FFFF:0008:0003.0009: item fetching failed at offset 0/1 [ 279.182714][ T5115] hid-generic FFFF:0008:0003.0009: probe with driver hid-generic failed with error -22 [ 279.474342][T26539] [U]  [ 279.768171][T26573] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 280.244830][T26607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9854'. [ 280.248993][T26607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9854'. [ 280.438207][T26611] comedi comedi3: das16m1: I/O port conflict (0x100,16) [ 281.366917][T26621] netlink: 'syz.1.9860': attribute type 7 has an invalid length. [ 281.370252][T26621] netlink: 'syz.1.9860': attribute type 8 has an invalid length. [ 281.569080][T26638] netlink: 'syz.1.9867': attribute type 7 has an invalid length. [ 281.571696][T26638] netlink: 'syz.1.9867': attribute type 8 has an invalid length. [ 281.869612][T26662] sock: sock_timestamping_bind_phc: sock not bind to device [ 282.010391][T26674] CUSE: unknown device info "xKJ H+ۤ2LhnL1`Ccn80(3նi" [ 282.013467][T26674] CUSE: unknown device info "ٮ,<_eF" [ 282.015656][T26674] CUSE: unknown device info "3ܟ,̘" [ 282.017601][T26674] CUSE: unknown device info "J2S Z !e/J+-na4\N4" [ 282.020313][T26674] CUSE: unknown device info " [ 282.020313][T26674] fzXS! [ 282.020313][T26674] AxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 282.029422][T26674] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TM_/V{" [ 282.034173][T26674] CUSE: unknown device info "whU~V߶ݸFsX,xkq/Q]3H" [ 282.037276][T26674] CUSE: zero length info key specified [ 282.368687][T26700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9898'. [ 282.371816][T26700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9898'. [ 282.399520][T26702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9899'. [ 282.405223][T26702] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 282.565740][T26718] netlink: 'syz.1.9906': attribute type 1 has an invalid length. [ 282.569592][T26718] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9906'. [ 282.572404][T26718] netlink: 'syz.1.9906': attribute type 1 has an invalid length. [ 282.574907][T26718] netlink: 634 bytes leftover after parsing attributes in process `syz.1.9906'. [ 282.909753][T26742] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9918'. [ 282.946774][T26743] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 282.971559][T26746] netlink: 'syz.0.9921': attribute type 1 has an invalid length. [ 282.974108][T26746] netlink: 'syz.0.9921': attribute type 3 has an invalid length. [ 282.976712][T26746] netlink: 172 bytes leftover after parsing attributes in process `syz.0.9921'. [ 282.980471][T26746] NCSI netlink: No device for ifindex 813332851 [ 283.156470][T26752] lo speed is unknown, defaulting to 1000 [ 283.839365][ T843] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 283.843693][ T843] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 283.847091][ T843] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 283.850754][ T843] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 283.853480][ T843] rtc rtc0: __rtc_set_alarm: err=-22 [ 284.449417][T26804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9947'. [ 284.801514][T26822] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9955'. [ 284.805549][T26822] block nbd0: not configured, cannot reconfigure [ 284.919992][T26830] tmpfs: Cannot disable swap on remount [ 285.143902][T26845] sctp: [Deprecated]: syz.0.9966 (pid 26845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.143902][T26845] Use struct sctp_sack_info instead [ 285.166080][T26845] sctp: [Deprecated]: syz.0.9966 (pid 26845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.166080][T26845] Use struct sctp_sack_info instead [ 285.647005][T26879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9983'. [ 285.651062][T26879] syz_tun: Device is already in use. [ 286.144782][T26917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10002'. [ 287.516647][T26997] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10039'. [ 287.643827][T27007] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 289.838058][T27103] lo speed is unknown, defaulting to 1000 [ 290.632869][T27134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10104'. [ 295.490308][ T5104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 295.497481][ T5104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 295.508585][ T5104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 295.523274][ T5104] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 295.538556][ T5104] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 295.602162][ T5104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 295.617145][ T5761] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 295.621692][ T5104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 295.633605][ T5761] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 295.635764][ T5104] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 295.641192][ T5104] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 295.652134][ T5104] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 295.652262][ T5761] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 295.658015][ T5104] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 295.658866][ T5761] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 295.948305][T26392] tipc: Resetting bearer [ 296.071199][T26392] tipc: Disabling bearer [ 296.410724][T27141] lo speed is unknown, defaulting to 1000 [ 296.454790][T27138] lo speed is unknown, defaulting to 1000 [ 296.694431][T27141] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.697010][T27141] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.700152][T27141] bridge_slave_0: entered allmulticast mode [ 296.702999][T27141] bridge_slave_0: entered promiscuous mode [ 296.712046][T27141] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.714541][T27141] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.716863][T27141] bridge_slave_1: entered allmulticast mode [ 296.719851][T27141] bridge_slave_1: entered promiscuous mode [ 296.762220][T27141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.777057][T27141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.780602][T27138] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.782912][T27138] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.785252][T27138] bridge_slave_0: entered allmulticast mode [ 296.788483][T27138] bridge_slave_0: entered promiscuous mode [ 296.793435][T27138] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.796150][T27138] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.799295][T27138] bridge_slave_1: entered allmulticast mode [ 296.803135][T27138] bridge_slave_1: entered promiscuous mode [ 296.834976][T27141] team0: Port device team_slave_0 added [ 296.838476][T27141] team0: Port device team_slave_1 added [ 296.842149][T27138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.847477][T27138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.875915][T27141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.878181][T27141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.885849][T27141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.890325][T27141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.892493][T27141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.900444][T27141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.905393][T27138] team0: Port device team_slave_0 added [ 296.908638][T27138] team0: Port device team_slave_1 added [ 296.927955][T27138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.930233][T27138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.938278][T27138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.952855][T27138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.955067][T27138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.963922][T27138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.987376][T27141] hsr_slave_0: entered promiscuous mode [ 296.990287][T27141] hsr_slave_1: entered promiscuous mode [ 296.993725][T27141] debugfs: 'hsr0' already exists in 'hsr' [ 296.996180][T27141] Cannot create hsr debugfs directory [ 297.026094][T27138] hsr_slave_0: entered promiscuous mode [ 297.028789][T27138] hsr_slave_1: entered promiscuous mode [ 297.031501][T27138] debugfs: 'hsr0' already exists in 'hsr' [ 297.033265][T27138] Cannot create hsr debugfs directory [ 297.234424][T27141] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 297.289503][T27141] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 297.292234][T27141] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 297.310643][T27141] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.314008][T27141] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 297.359522][T27141] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 297.362688][T27141] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 297.399832][T27141] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 297.717831][ T5752] Bluetooth: hci4: command tx timeout [ 297.717852][ T5747] Bluetooth: hci5: command tx timeout [ 297.894651][T27138] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 297.932176][T27138] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 297.936105][T27138] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 297.980114][T27138] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.984087][T27138] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 298.020838][T27138] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 298.025540][T27138] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 298.070501][T27138] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 298.121828][T27141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.142126][T27141] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.151652][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.154686][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.165145][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.168306][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.193792][T27138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.218828][T27138] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.235356][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.238387][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.249434][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.251911][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.487993][T27141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.543643][T27138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.666685][T27141] veth0_vlan: entered promiscuous mode [ 298.674880][T27141] veth1_vlan: entered promiscuous mode [ 298.699246][T27141] veth0_macvtap: entered promiscuous mode [ 298.709307][T27141] veth1_macvtap: entered promiscuous mode [ 298.716104][T27138] veth0_vlan: entered promiscuous mode [ 298.726461][T27138] veth1_vlan: entered promiscuous mode [ 298.736393][T27141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.748909][T27141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.761534][ T46] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.765094][ T46] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.769807][ T46] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.772898][ T46] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.782051][T27138] veth0_macvtap: entered promiscuous mode [ 298.811016][T27138] veth1_macvtap: entered promiscuous mode [ 298.913668][T27138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.929625][T27138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.951705][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.952490][ T103] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.954753][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.957994][ T103] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.972701][ T103] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.976517][ T103] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.078206][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.081635][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.178553][ T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.181198][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.199697][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.202987][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.369798][T27239] lo speed is unknown, defaulting to 1000 [ 299.650528][T27250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10112'. [ 299.728940][T27262] tipc: Enabling of bearer rejected, failed to enable media [ 299.799306][ T5747] Bluetooth: hci4: command tx timeout [ 299.807962][ T5747] Bluetooth: hci5: command tx timeout [ 300.060001][T27292] netlink: 'syz.5.10136': attribute type 14 has an invalid length. [ 300.614612][T27335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10157'. [ 300.734545][T27346] raw_sendmsg: syz.4.10163 forgot to set AF_INET. Fix it! [ 300.809796][T27359] ALSA: mixer_oss: invalid OSS volume '' [ 301.105025][ T58] hid-generic FFFF:0008:0003.000A: item fetching failed at offset 0/1 [ 301.108368][ T58] hid-generic FFFF:0008:0003.000A: probe with driver hid-generic failed with error -22 [ 301.276737][T27399] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 301.407491][T27407] [U]  [ 301.415223][T27409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10193'. [ 301.429699][T27409] ipvlan2: entered allmulticast mode [ 301.431872][T27409] syz_tun: entered allmulticast mode [ 301.735125][T27423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10201'. [ 301.738163][T27423] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 301.877816][ T5747] Bluetooth: hci5: command tx timeout [ 301.877953][ T5752] Bluetooth: hci4: command tx timeout [ 301.886524][T27438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10208'. [ 301.890303][T27438] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10208'. [ 301.990129][T27447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10212'. [ 302.146479][T27476] netlink: 'syz.0.10224': attribute type 7 has an invalid length. [ 302.150905][T27476] netlink: 'syz.0.10224': attribute type 8 has an invalid length. [ 303.152075][T27507] netlink: 'syz.5.10236': attribute type 7 has an invalid length. [ 303.155246][T27507] netlink: 'syz.5.10236': attribute type 8 has an invalid length. [ 303.246477][T27517] sock: sock_timestamping_bind_phc: sock not bind to device [ 303.414347][T27534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10252'. [ 303.417350][T27534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10252'. [ 303.470587][T27539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10253'. [ 303.474957][T27539] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 303.581627][T27547] netlink: 'syz.4.10259': attribute type 1 has an invalid length. [ 303.588315][T27547] netlink: 'syz.4.10259': attribute type 1 has an invalid length. [ 303.961457][ T5752] Bluetooth: hci4: command tx timeout [ 303.961521][ T5747] Bluetooth: hci5: command tx timeout [ 304.035087][T27578] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 304.290220][T27603] tmpfs: Cannot disable swap on remount [ 304.832545][ T5851] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 304.838367][ T5851] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 304.842554][ T5851] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 304.846790][ T5851] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 304.850658][ T5851] rtc rtc0: __rtc_set_alarm: err=-22 [ 305.238292][T27604] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.241113][T27604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.247165][T27604] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.249864][T27604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.291305][T27615] __nla_validate_parse: 2 callbacks suppressed [ 305.291317][T27615] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10291'. [ 305.378784][T27604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.570276][T27604] 8021q: adding VLAN 0 to HW filter on device bond1 [ 305.737797][T27604] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 305.764282][T27600] lo speed is unknown, defaulting to 1000 [ 306.436655][T27663] lo speed is unknown, defaulting to 1000 [ 306.671522][T27683] ================================================================== [ 306.674622][T27683] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 306.677593][T27683] Read of size 8 at addr ffff888000abb818 by task syz.5.10317/27683 [ 306.682378][T27683] [ 306.683330][T27683] CPU: 2 UID: 0 PID: 27683 Comm: syz.5.10317 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.683349][T27683] Tainted: [L]=SOFTLOCKUP [ 306.683354][T27683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 306.683361][T27683] Call Trace: [ 306.683368][T27683] [ 306.683374][T27683] dump_stack_lvl+0x100/0x190 [ 306.683387][T27683] print_report+0x13d/0x4b0 [ 306.683405][T27683] ? __virt_addr_valid+0x239/0x430 [ 306.683423][T27683] ? dvb_device_open+0x33f/0x3b0 [ 306.683441][T27683] kasan_report+0xdf/0x1d0 [ 306.683454][T27683] ? dvb_device_open+0x33f/0x3b0 [ 306.683472][T27683] ? __pfx_dvb_device_open+0x10/0x10 [ 306.683489][T27683] dvb_device_open+0x33f/0x3b0 [ 306.683505][T27683] ? __pfx_dvb_device_open+0x10/0x10 [ 306.683523][T27683] chrdev_open+0x234/0x6a0 [ 306.683537][T27683] ? __pfx_apparmor_file_open+0x10/0x10 [ 306.683550][T27683] ? __pfx_chrdev_open+0x10/0x10 [ 306.683564][T27683] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 306.683579][T27683] do_dentry_open+0x6ab/0x14d0 [ 306.683592][T27683] ? __pfx_chrdev_open+0x10/0x10 [ 306.683606][T27683] vfs_open+0x82/0x3f0 [ 306.683622][T27683] path_openat+0x208c/0x31a0 [ 306.683637][T27683] ? asm_int80_emulation+0x1a/0x20 [ 306.683648][T27683] ? __pfx_path_openat+0x10/0x10 [ 306.683664][T27683] do_file_open+0x20e/0x430 [ 306.683677][T27683] ? __pfx_do_file_open+0x10/0x10 [ 306.683695][T27683] ? _raw_spin_unlock+0x28/0x50 [ 306.683708][T27683] ? alloc_fd+0x476/0x790 [ 306.683723][T27683] do_sys_openat2+0x10d/0x1e0 [ 306.683739][T27683] ? __pfx_do_sys_openat2+0x10/0x10 [ 306.683755][T27683] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 306.683773][T27683] __ia32_compat_sys_openat+0x12d/0x210 [ 306.683797][T27683] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 306.683814][T27683] ? exit_to_user_mode_loop+0xf3/0x670 [ 306.683834][T27683] ? exit_to_user_mode_loop+0xf3/0x670 [ 306.683853][T27683] ? rcu_is_watching+0x12/0xc0 [ 306.683867][T27683] do_int80_emulation+0x14b/0x720 [ 306.683886][T27683] asm_int80_emulation+0x1a/0x20 [ 306.683898][T27683] RIP: 0023:0xf71e61ab [ 306.683907][T27683] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 306.683917][T27683] RSP: 002b:00000000f54a603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 306.683928][T27683] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54a6100 [ 306.683935][T27683] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000 [ 306.683941][T27683] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.683948][T27683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.683954][T27683] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 306.683964][T27683] [ 306.683968][T27683] [ 306.788554][T27683] Allocated by task 1: [ 306.790215][T27683] kasan_save_stack+0x30/0x50 [ 306.792041][T27683] kasan_save_track+0x14/0x30 [ 306.793867][T27683] __kasan_kmalloc+0xaa/0xb0 [ 306.795596][T27683] dvb_register_device+0x1d6/0x1e20 [ 306.797607][T27683] dvb_register_frontend+0x552/0x820 [ 306.799649][T27683] vidtv_bridge_probe+0x44b/0xa30 [ 306.801578][T27683] platform_probe+0x106/0x1d0 [ 306.803390][T27683] really_probe+0x241/0xa60 [ 306.805231][T27683] __driver_probe_device+0x22e/0x480 [ 306.807417][T27683] driver_probe_device+0x4c/0x1b0 [ 306.809424][T27683] __driver_attach+0x21f/0x5d0 [ 306.811328][T27683] bus_for_each_dev+0x13e/0x1d0 [ 306.813259][T27683] bus_add_driver+0x305/0x5b0 [ 306.815020][T27683] driver_register+0x1e2/0x360 [ 306.816895][T27683] vidtv_bridge_init+0x38/0x70 [ 306.818756][T27683] do_one_initcall+0x121/0x750 [ 306.820583][T27683] kernel_init_freeable+0x6ea/0x7b0 [ 306.822605][T27683] kernel_init+0x1f/0x1e0 [ 306.824280][T27683] ret_from_fork+0x72b/0xd50 [ 306.826132][T27683] ret_from_fork_asm+0x1a/0x30 [ 306.827999][T27683] [ 306.828948][T27683] Freed by task 27646: [ 306.830549][T27683] kasan_save_stack+0x30/0x50 [ 306.832365][T27683] kasan_save_track+0x14/0x30 [ 306.834181][T27683] kasan_save_free_info+0x3b/0x70 [ 306.836135][T27683] __kasan_slab_free+0x5f/0x80 [ 306.838015][T27683] kfree+0x223/0x6c0 [ 306.839594][T27683] dvb_device_put.part.0+0x57/0x90 [ 306.841602][T27683] dvb_device_open+0x2ba/0x3b0 [ 306.843457][T27683] chrdev_open+0x234/0x6a0 [ 306.845085][T27683] do_dentry_open+0x6ab/0x14d0 [ 306.846567][T27683] vfs_open+0x82/0x3f0 [ 306.848145][T27683] path_openat+0x208c/0x31a0 [ 306.849951][T27683] do_file_open+0x20e/0x430 [ 306.851604][T27683] do_sys_openat2+0x10d/0x1e0 [ 306.853427][T27683] __ia32_compat_sys_openat+0x12d/0x210 [ 306.855538][T27683] do_int80_emulation+0x14b/0x720 [ 306.857206][T27683] asm_int80_emulation+0x1a/0x20 [ 306.858529][T27683] [ 306.859194][T27683] The buggy address belongs to the object at ffff888000abb800 [ 306.859194][T27683] which belongs to the cache kmalloc-256 of size 256 [ 306.864002][T27683] The buggy address is located 24 bytes inside of [ 306.864002][T27683] freed 256-byte region [ffff888000abb800, ffff888000abb900) [ 306.869247][T27683] [ 306.870264][T27683] The buggy address belongs to the physical page: [ 306.872754][T27683] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xaba [ 306.876012][T27683] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 306.879252][T27683] flags: 0x7ff00000000040(head|node=0|zone=0|lastcpupid=0x7ff) [ 306.882185][T27683] page_type: f5(slab) [ 306.883754][T27683] raw: 007ff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 306.887012][T27683] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 306.890293][T27683] head: 007ff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 306.893641][T27683] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 306.896939][T27683] head: 007ff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 306.900214][T27683] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 306.903500][T27683] page dumped because: kasan: bad access detected [ 306.905701][T27683] page_owner tracks the page as allocated [ 306.907409][T27683] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18843144204, free_ts 18328906220 [ 306.913507][T27683] post_alloc_hook+0xfd/0x120 [ 306.914921][T27683] get_page_from_freelist+0x11a6/0x3410 [ 306.916595][T27683] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 306.918423][T27683] new_slab+0xa6/0x6c0 [ 306.919731][T27683] refill_objects+0x277/0x420 [ 306.921217][T27683] __pcs_replace_empty_main+0x375/0x650 [ 306.922895][T27683] __kmalloc_cache_noprof+0x493/0x6f0 [ 306.924904][T27683] bus_add_driver+0x92/0x5b0 [ 306.926685][T27683] driver_register+0x1e2/0x360 [ 306.928514][T27683] usb_register_driver+0x21c/0x3e0 [ 306.930529][T27683] do_one_initcall+0x121/0x750 [ 306.932359][T27683] kernel_init_freeable+0x6ea/0x7b0 [ 306.934278][T27683] kernel_init+0x1f/0x1e0 [ 306.935912][T27683] ret_from_fork+0x72b/0xd50 [ 306.937735][T27683] ret_from_fork_asm+0x1a/0x30 [ 306.939591][T27683] page last free pid 857 tgid 857 stack trace: [ 306.941949][T27683] __free_frozen_pages+0x794/0x10a0 [ 306.943943][T27683] vfree+0x15f/0x8d0 [ 306.945473][T27683] delayed_vfree_work+0x56/0x80 [ 306.947347][T27683] process_one_work+0xa0e/0x1980 [ 306.949260][T27683] worker_thread+0x5ef/0xe50 [ 306.950989][T27683] kthread+0x370/0x450 [ 306.952554][T27683] ret_from_fork+0x72b/0xd50 [ 306.954358][T27683] ret_from_fork_asm+0x1a/0x30 [ 306.956192][T27683] [ 306.957141][T27683] Memory state around the buggy address: [ 306.959234][T27683] ffff888000abb700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 306.961689][T27683] ffff888000abb780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 306.964831][T27683] >ffff888000abb800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 306.967835][T27683] ^ [ 306.969696][T27683] ffff888000abb880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 306.972811][T27683] ffff888000abb900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 306.975878][T27683] ================================================================== [ 306.982570][T27683] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 306.985387][T27683] CPU: 2 UID: 0 PID: 27683 Comm: syz.5.10317 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.989635][T27683] Tainted: [L]=SOFTLOCKUP [ 306.991285][T27683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 306.994486][T27683] Call Trace: [ 306.995519][T27683] [ 306.996430][T27683] dump_stack_lvl+0x100/0x190 [ 306.997883][T27683] vpanic+0x552/0x970 [ 306.999117][T27683] ? __pfx_vpanic+0x10/0x10 [ 307.000539][T27683] ? mark_held_locks+0x40/0x70 [ 307.002039][T27683] ? dvb_device_open+0x33f/0x3b0 [ 307.003563][T27683] panic+0xd1/0xe0 [ 307.004719][T27683] ? __pfx_panic+0x10/0x10 [ 307.006079][T27683] ? dvb_device_open+0x33f/0x3b0 [ 307.007586][T27683] ? preempt_schedule_common+0x42/0xc0 [ 307.009248][T27683] check_panic_on_warn.cold+0x19/0x34 [ 307.010919][T27683] end_report.part.0+0x3a/0x90 SYZFAIL: failed to recv rpc [ 307.012384][T27683] kasan_report.cold+0xe/0x18 [ 307.014278][T27683] ? dvb_device_open+0x33f/0x3b0 [ 307.016216][T27683] ? __pfx_dvb_device_open+0x10/0x10 [ 307.018223][T27683] dvb_device_open+0x33f/0x3b0 [ 307.020144][T27683] ? __pfx_dvb_device_open+0x10/0x10 [ 307.022226][T27683] chrdev_open+0x234/0x6a0 [ 307.023997][T27683] ? __pfx_apparmor_file_open+0x10/0x10 [ 307.026143][T27683] ? __pfx_chrdev_open+0x10/0x10 [ 307.028059][T27683] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 307.030526][T27683] do_dentry_open+0x6ab/0x14d0 [ 307.032383][T27683] ? __pfx_chrdev_open+0x10/0x10 [ 307.034331][T27683] vfs_open+0x82/0x3f0 [ 307.035923][T27683] path_openat+0x208c/0x31a0 [ 307.037646][T27683] ? asm_int80_emulation+0x1a/0x20 [ 307.039203][T27683] ? __pfx_path_openat+0x10/0x10 [ 307.040796][T27683] do_file_open+0x20e/0x430 [ 307.042181][T27683] ? __pfx_do_file_open+0x10/0x10 [ 307.043768][T27683] ? _raw_spin_unlock+0x28/0x50 [ 307.045302][T27683] ? alloc_fd+0x476/0x790 [ 307.046640][T27683] do_sys_openat2+0x10d/0x1e0 [ 307.048087][T27683] ? __pfx_do_sys_openat2+0x10/0x10 [ 307.049718][T27683] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 307.051608][T27683] __ia32_compat_sys_openat+0x12d/0x210 [ 307.053299][T27683] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 307.055139][T27683] ? exit_to_user_mode_loop+0xf3/0x670 [ 307.056827][T27683] ? exit_to_user_mode_loop+0xf3/0x670 [ 307.058487][T27683] ? rcu_is_watching+0x12/0xc0 [ 307.059951][T27683] do_int80_emulation+0x14b/0x720 [ 307.061578][T27683] asm_int80_emulation+0x1a/0x20 [ 307.063104][T27683] RIP: 0023:0xf71e61ab [ 307.064358][T27683] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 307.070218][T27683] RSP: 002b:00000000f54a603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 307.072771][T27683] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54a6100 [ 307.075197][T27683] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.077585][T27683] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.080026][T27683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.082487][T27683] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.085031][T27683] [ 307.086687][T27683] Kernel Offset: disabled [ 307.087999][T27683] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:17:30 Registers: info registers vcpu 0 CPU#0 RAX=00000000001ad951 RBX=ffffffff8e4955c0 RCX=ffffffff8b86e225 RDX=0000000000000000 RSI=ffffffff8df1ab41 RDI=ffffffff8c1c4580 RBP=0000000000000000 RSP=ffffffff8e407e00 R8 =0000000000000001 R9 =ffffed10056467b5 R10=ffff88802b233dab R11=0000000000000000 R12=0000000000000000 R13=fffffbfff1c92ab8 R14=0000000000000000 R15=ffffffff90d73e50 RIP=ffffffff8b86c87f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809718a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000034020ff8 CR3=0000000044814000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 EAX=00000000 EBX=57cfd480 ECX=00000000 EDX=00000000 ESI=00000000 EDI=00000014 EBP=00000000 ESP=ff86a700 EIP=f713046f EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 57cfd480 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 0004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7486288 CR3=0000000056014000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff857c3ee5 RDI=ffffffff9b44d300 RBP=ffffffff9b44d2c0 RSP=ffffc900219f72f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030303838386652 R12=0000000000000000 R13=0000000000000061 R14=0000000000000010 R15=ffffffff857c3e80 RIP=ffffffff857c3f0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809738a000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002d218ff8 CR3=000000006d43b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000bb0151360b RBX=ffff88802b523f80 RCX=00000000000006e0 RDX=00000000000000bb RSI=ffffffff81f7e195 RDI=ffff88804747ca80 RBP=0000004760fe16d8 RSP=ffffc900219d7a58 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff9200433af55 R13=0000000000000001 R14=0000000000000001 R15=ffff88802b523fc0 RIP=ffffffff81f7e1a8 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809748a000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002d321ff8 CR3=000000006d43b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000