last executing test programs: 1.319367556s ago: executing program 1 (id=10280): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, @local}]}) 1.262283571s ago: executing program 1 (id=10283): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x2, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r0, 0x4d) 1.262103241s ago: executing program 1 (id=10285): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xfffffffffffffceb, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x9, 0x0, &(0x7f00000006c0)="ccf95f497eb30b9d5b", 0x0}, 0x50) 1.222908402s ago: executing program 1 (id=10288): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000004c0)={0x6, 0x118, 0xfa00, {{0x7, 0x8000, "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", 0x81, 0xd, 0x3, 0x6, 0xf3, 0xa9, 0xc}}}, 0x120) 1.154197335s ago: executing program 1 (id=10292): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000171401"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x800) 1.153728344s ago: executing program 1 (id=10296): syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x100c00) 321.820881ms ago: executing program 0 (id=10352): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x7, @raw_data="8b5f97b95fa99608b63a4df50dc6826197ffd2c02fc83ab5e6f8438db53d1bce4d601676dfd5c1e5f8bdeb3e18acf4491f6392803de83d0e2a6d0975650c44b309f09a3e4b582a8f9170445ca40bc1e8ad3d1839767c010d58812b602caf4ccccf3eac9e5219bde2a0cd0a6b45f082ef20e326da71c7b0c6bf015b4ade521add0ed81a0b9681f6e021a45aa135a1b75466f3d1cf48277ee5401417eed52b355e94cdae26986c6924dccc6da88115d20b5f275b53869844628d039db74350ba5c723e78d4442c3bd5"}) 321.588271ms ago: executing program 0 (id=10354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x240}, 0x1, 0x0, 0x0, 0x8844}, 0x0) 255.862112ms ago: executing program 0 (id=10356): r0 = syz_open_dev$admmidi(&(0x7f0000000240), 0x200, 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000280)={0x0, 0x18000, 0x5, 0x0, 0x7}) 255.741565ms ago: executing program 2 (id=10357): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xa0, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0}) 255.568724ms ago: executing program 0 (id=10359): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880) 186.574718ms ago: executing program 2 (id=10361): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x4000}) 186.341717ms ago: executing program 3 (id=10362): prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) 184.932797ms ago: executing program 2 (id=10363): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001800010000000000000003001d01000008000e00", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1500010000000000000000007721f5438b20ffdf0300000008000900", @ANYBLOB='\b'], 0x50}, 0x1, 0x0, 0x0, 0xa8d0}, 0x0) 183.72643ms ago: executing program 3 (id=10364): syz_clone(0x4100000, &(0x7f0000000900)="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", 0x80c, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 76.194498ms ago: executing program 3 (id=10365): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_getres(0x7, &(0x7f0000000240)) 76.070002ms ago: executing program 2 (id=10366): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 75.876924ms ago: executing program 3 (id=10367): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, 0x0) 62.878535ms ago: executing program 0 (id=10368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7f}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x1001}, 0x0) 59.756622ms ago: executing program 2 (id=10373): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000011000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b705000008000000850000000400000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 6.722014ms ago: executing program 0 (id=10369): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0}, 0x58) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00'], 0x303002) 6.46792ms ago: executing program 3 (id=10370): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000080)={0x3e8f, 0x8, 0x40, "e83d861c5423bbfe6ad88a2db7ea5526796ac2cf095153483135ba2f13e32878", 0x38414762}) 2.148376ms ago: executing program 2 (id=10371): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000140)=""/164, 0xa4}], 0x1, 0x7, 0xdd) 0s ago: executing program 3 (id=10372): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) kernel console output (not intermixed with test programs): 8][T15979] [U] [ 164.058006][T15979] [U] [ 164.059423][T15979] [U] [ 164.065477][T15979] [U] [ 164.066771][T15979] [U] [ 164.067968][T15979] [U] [ 164.069123][T15979] [U] [ 164.070627][T15979] [U] [ 164.072913][T15979] [U] [ 164.072944][T15979] [U] [ 164.072971][T15979] [U] [ 164.073170][T15979] [U] [ 164.073199][T15979] [U] [ 164.073226][T15979] [U] [ 164.073252][T15979] [U] [ 164.073382][T15979] [U] [ 164.073406][T15979] [U] [ 164.073431][T15979] [U] [ 164.073458][T15979] [U] [ 164.073599][T15979] [U] [ 164.073627][T15979] [U] [ 164.073654][T15979] [U] [ 164.073681][T15979] [U] [ 164.073816][T15979] [U] [ 164.073844][T15979] [U] [ 164.073870][T15979] [U] [ 164.073897][T15979] [U] [ 164.074033][T15979] [U] [ 164.074061][T15979] [U] [ 164.074088][T15979] [U] [ 164.074115][T15979] [U] [ 164.074270][T15979] [U] [ 164.074299][T15979] [U] [ 164.074325][T15979] [U] [ 164.074352][T15979] [U] [ 164.074492][T15979] [U] [ 164.074520][T15979] [U] [ 164.074546][T15979] [U] [ 164.074573][T15979] [U] [ 164.074697][T15979] [U] [ 164.074724][T15979] [U] [ 164.074751][T15979] [U] [ 164.074778][T15979] [U] [ 164.074921][T15979] [U] [ 164.074944][T15979] [U] [ 164.074968][T15979] [U] [ 164.074995][T15979] [U] [ 164.075126][T15979] [U] [ 164.075153][T15979] [U] [ 164.075180][T15979] [U] [ 164.075206][T15979] [U] [ 164.075337][T15979] [U] [ 164.075365][T15979] [U] [ 164.075392][T15979] [U] [ 164.075418][T15979] [U] [ 164.075519][T15979] [U] [ 164.075543][T15979] [U] [ 164.075564][T15979] [U] [ 164.085857][T15978] [U] [ 164.439848][T16042] __nla_validate_parse: 8 callbacks suppressed [ 164.439867][T16042] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5021'. [ 164.449705][T16042] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5021'. [ 164.459402][T16045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5020'. [ 164.573772][ T42] audit: type=1326 audit(2000000580.590:18255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16058 comm="syz.0.5029" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 164.587716][ T42] audit: type=1326 audit(2000000580.590:18256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16058 comm="syz.0.5029" exe="/syz-executor" sig=0 arch=40000003 syscall=218 compat=1 ip=0xf703efec code=0x7ffc0000 [ 164.774406][T16081] xt_recent: Unsupported userspace flags (000000fe) [ 164.781239][T16083] JFS: discard option not supported on device [ 164.785460][T16083] Mount JFS Failure: -22 [ 164.787996][T16083] jfs_mount failed w/return code = -22 [ 165.319467][T16115] random: crng reseeded on system resumption [ 165.383131][T16121] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 165.494977][T16128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5064'. [ 165.498956][T16128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5064'. [ 165.743376][T16144] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5071'. [ 165.750647][T16144] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5071'. [ 165.851337][ T5098] Bluetooth: hci0: unexpected event for opcode 0x0c38 [ 166.250253][T16184] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5090'. [ 166.774739][T16249] kAFS: unable to lookup cell 'Þ({^ú@' [ 166.782336][T16253] netlink: 'syz.3.5122': attribute type 2 has an invalid length. [ 166.785536][T16253] netlink: 'syz.3.5122': attribute type 1 has an invalid length. [ 166.813439][ T6052] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 166.847439][T16258] netlink: 'syz.0.5125': attribute type 1 has an invalid length. [ 166.852601][T16258] netlink: 396 bytes leftover after parsing attributes in process `syz.0.5125'. [ 166.909089][T16266] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 166.995304][ T6052] usb 7-1: Using ep0 maxpacket: 32 [ 167.003529][ T6052] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.015646][ T6052] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.023886][ T6052] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 167.028204][ T6052] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 167.032922][ T6052] usb 7-1: Product: syz [ 167.034755][ T6052] usb 7-1: Manufacturer: syz [ 167.039111][ T6052] usb 7-1: SerialNumber: syz [ 167.055163][ T6052] input: appletouch as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input9 [ 167.273559][ T6052] usb 7-1: USB disconnect, device number 13 [ 167.582028][T12043] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 167.746354][T12043] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 167.763653][T12043] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 167.768906][T12043] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.773243][T12043] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.788028][T16306] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 167.797186][ T6052] appletouch 7-1:1.0: input: appletouch disconnected [ 167.802311][T12043] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 168.014714][T12043] usb 5-1: USB disconnect, device number 5 [ 168.173568][T16330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5160'. [ 168.497357][T16357] netlink: zone id is out of range [ 168.499849][T16357] netlink: get zone limit has 4 unknown bytes [ 168.931199][T16408] trusted_key: encrypted_key: keylen parameter is missing [ 169.335294][T16444] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 169.337994][T16444] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 169.358959][T16444] vhci_hcd vhci_hcd.0: Device attached [ 169.373263][T16447] vhci_hcd: cannot find the pending unlink 8 [ 169.375788][T16447] vhci_hcd: connection closed [ 169.377107][ T13] vhci_hcd vhci_hcd.0: stop threads [ 169.381346][ T13] vhci_hcd vhci_hcd.0: release socket [ 169.385203][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 170.082356][T16512] __nla_validate_parse: 5 callbacks suppressed [ 170.082375][T16512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5247'. [ 170.094982][T16512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5247'. [ 170.168217][T16519] netlink: 'syz.1.5251': attribute type 7 has an invalid length. [ 170.836688][T16603] netlink: 'syz.1.5289': attribute type 2 has an invalid length. [ 170.839792][T16603] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5289'. [ 171.283023][T16653] new mount options do not match the existing superblock, will be ignored [ 171.610767][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 171.783549][ T29] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 171.786740][ T29] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 171.790317][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.796281][ T29] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 171.800044][ T29] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 171.803265][ T29] usb 5-1: Product: syz [ 171.804949][ T29] usb 5-1: Manufacturer: syz [ 171.807314][ T29] usb 5-1: SerialNumber: syz [ 171.818890][ T29] usb 5-1: config 0 descriptor?? [ 171.823530][ T29] hub 5-1:0.0: bad descriptor, ignoring hub [ 171.826576][ T29] hub 5-1:0.0: probe with driver hub failed with error -5 [ 171.831953][ T29] usb 5-1: selecting invalid altsetting 0 [ 172.165496][ T29] usb 5-1: USB disconnect, device number 6 [ 172.398692][T16708] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 172.484539][T16717] libceph: resolve '96.' (ret=-3): failed [ 172.487512][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 172.487528][ T42] audit: type=1400 audit(2000000587.983:18259): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16715 comm="syz.1.5345" [ 173.153830][T16793] netlink: 'syz.0.5382': attribute type 1 has an invalid length. [ 173.357383][T16814] ata1.00: invalid multi_count 1 ignored [ 173.499662][ T42] audit: type=1400 audit(2000000588.937:18260): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16826 comm="syz.3.5397" [ 173.575178][T16837] random: crng reseeded on system resumption [ 173.686780][T16855] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 173.898854][ T42] audit: type=1326 audit(2000000589.293:18261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.2.5419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 173.907623][ T42] audit: type=1326 audit(2000000589.293:18262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.2.5419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 173.921401][ T42] audit: type=1326 audit(2000000589.293:18263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.2.5419" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 173.932874][ T42] audit: type=1326 audit(2000000589.293:18264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.2.5419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 173.947106][ T42] audit: type=1326 audit(2000000589.293:18265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.2.5419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 174.337637][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 174.488260][T16927] autofs4:pid:16927:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(65021.1), cmd(0xc018937e) [ 174.494011][T16927] autofs4:pid:16927:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 174.519104][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 174.528281][ T9] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 174.532737][ T9] usb 5-1: config 0 has no interface number 0 [ 174.541342][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 174.544946][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.550738][ T9] usb 5-1: Product: syz [ 174.555094][ T9] usb 5-1: Manufacturer: syz [ 174.557172][ T9] usb 5-1: SerialNumber: syz [ 174.571694][ T9] usb 5-1: config 0 descriptor?? [ 174.583437][ T9] hub 5-1:0.132: bad descriptor, ignoring hub [ 174.586239][ T9] hub 5-1:0.132: probe with driver hub failed with error -5 [ 174.592106][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.132/input/input10 [ 175.937534][T17007] program syz.1.5487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.121326][T17029] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 176.178049][T17032] ipip1: entered allmulticast mode [ 176.207391][T17035] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5501'. [ 176.324658][T17047] overlayfs: empty lowerdir [ 176.435227][T17058] netlink: 'syz.1.5512': attribute type 1 has an invalid length. [ 176.490120][T17063] overlayfs: unescaped trailing colons in lowerdir mount option. [ 176.498319][T17062] netlink: 'syz.3.5514': attribute type 39 has an invalid length. [ 176.513351][T17067] netlink: 'syz.2.5517': attribute type 11 has an invalid length. [ 176.796428][T17103] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 176.866926][T17110] netlink: 'syz.2.5538': attribute type 11 has an invalid length. [ 177.204411][T17132] syz.3.5549 (17132): drop_caches: 2 [ 177.741417][T17183] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 177.756797][T17185] syz.0.5575 (17185): drop_caches: 2 [ 177.897064][T17195] dlm: Unknown command passed to DLM device : 3 [ 177.897064][T17195] [ 178.125000][T17213] openvswitch: netlink: IPv4 tunnel dst address is zero [ 178.215205][T17217] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5592'. [ 178.310904][ T6052] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 178.398013][T17225] program syz.0.5596 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.471183][ T6052] usb 8-1: Using ep0 maxpacket: 32 [ 178.477076][ T6052] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.483941][ T6052] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.488920][ T6052] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.497227][ T6052] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 178.500953][ T6052] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 178.505064][ T6052] usb 8-1: Product: syz [ 178.507067][ T6052] usb 8-1: Manufacturer: syz [ 178.508926][ T6052] usb 8-1: SerialNumber: syz [ 178.521032][ T6052] input: appletouch as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/input/input11 [ 179.362433][ T9] usb 5-1: USB disconnect, device number 7 [ 179.377788][ T6052] usb 8-1: USB disconnect, device number 6 [ 179.399270][ T6052] appletouch 8-1:1.0: input: appletouch disconnected [ 179.471014][ T42] audit: type=1326 audit(2000000594.524:18266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.0.5606" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 179.484686][ T42] audit: type=1326 audit(2000000594.524:18267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.0.5606" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 179.497342][ T42] audit: type=1326 audit(2000000594.524:18268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.0.5606" exe="/syz-executor" sig=0 arch=40000003 syscall=294 compat=1 ip=0xf703efec code=0x7ffc0000 [ 179.505764][ T42] audit: type=1326 audit(2000000594.543:18269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.0.5606" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 179.514438][ T42] audit: type=1326 audit(2000000594.543:18270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17228 comm="syz.0.5606" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 179.549443][T17237] bridge2: entered promiscuous mode [ 179.565842][T17240] vlan1: entered promiscuous mode [ 179.615051][T17244] xfrm0 speed is unknown, defaulting to 1000 [ 179.620977][T17244] xfrm0 speed is unknown, defaulting to 1000 [ 179.628112][T17244] xfrm0 speed is unknown, defaulting to 1000 [ 179.685457][T17253] netlink: 'syz.0.5609': attribute type 11 has an invalid length. [ 179.796956][T17260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5612'. [ 179.801331][T17260] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 179.806209][T17244] infiniband syz1: set down [ 179.809614][ T6052] xfrm0 speed is unknown, defaulting to 1000 [ 179.812677][T17244] infiniband syz1: added xfrm0 [ 179.829765][T17244] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 179.846994][T17244] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 179.852782][T17244] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 179.905381][T17244] RDS/IB: syz1: added [ 179.907445][T17244] smc: adding ib device syz1 with port count 1 [ 179.910068][T17244] smc: ib device syz1 port 1 has no pnetid [ 179.915194][ T6052] xfrm0 speed is unknown, defaulting to 1000 [ 179.922480][T17244] xfrm0 speed is unknown, defaulting to 1000 [ 179.999787][T17272] openvswitch: netlink: Actions may not be safe on all matching packets [ 180.000741][T17271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5617'. [ 180.092818][T17244] xfrm0 speed is unknown, defaulting to 1000 [ 180.253715][T17292] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 180.280238][T17244] xfrm0 speed is unknown, defaulting to 1000 [ 180.496767][T17244] xfrm0 speed is unknown, defaulting to 1000 [ 180.555209][T17315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5637'. [ 180.706367][T17329] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5644'. [ 180.862857][T17345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.114954][T17370] netlink: 'syz.3.5664': attribute type 2 has an invalid length. [ 181.144202][T17374] Device name not specified. [ 181.144202][T17374] [ 181.340833][T17394] bridge4: entered promiscuous mode [ 181.346284][T17394] bridge4: entered allmulticast mode [ 181.564219][T17417] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5687'. [ 181.567871][T17417] netlink: 30 bytes leftover after parsing attributes in process `syz.1.5687'. [ 181.572189][T17417] netlink: 30 bytes leftover after parsing attributes in process `syz.1.5687'. [ 181.578980][T17421] tmpfs: Bad value for 'mpol' [ 181.894250][T17459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5706'. [ 181.926965][T17463] netlink: 'syz.3.5710': attribute type 2 has an invalid length. [ 181.930506][T17463] netlink: 'syz.3.5710': attribute type 2 has an invalid length. [ 182.304956][T17494] openvswitch: netlink: IPv6 tunnel dst address is zero [ 182.366772][T17499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5727'. [ 182.601451][T17525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5738'. [ 182.934295][T17565] xt_bpf: check failed: parse error [ 183.066445][T17577] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.271932][T17588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5768'. [ 183.360729][T17601] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5777'. [ 183.364485][T17601] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5777'. [ 183.368776][T17601] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5777'. [ 183.372587][ T42] audit: type=1326 audit(2000000598.174:18271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.2.5775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 183.381840][ T42] audit: type=1326 audit(2000000598.174:18272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.2.5775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 183.392832][ T42] audit: type=1326 audit(2000000598.183:18273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.2.5775" exe="/syz-executor" sig=0 arch=40000003 syscall=143 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 183.402690][ T42] audit: type=1326 audit(2000000598.183:18274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.2.5775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 183.421029][ T42] audit: type=1326 audit(2000000598.183:18275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.2.5775" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 183.451882][T17614] MTD: Couldn't look up './file0': -15 [ 183.486875][T17616] netlink: 'syz.1.5783': attribute type 4 has an invalid length. [ 183.765775][T17647] netlink: 'syz.0.5799': attribute type 1 has an invalid length. [ 184.151657][T17674] gre0: left promiscuous mode [ 184.156086][T17674] gre0: left allmulticast mode [ 184.170909][ T5098] Bluetooth: hci0: unexpected subevent 0x1d length: 5 < 14 [ 184.200329][T17674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.211700][T17674] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.225028][T17674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.752308][T17674] veth0_to_bond: left allmulticast mode [ 184.793109][T17674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.802651][T17674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.821406][T17674] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 184.826168][T17674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.833426][T17674] veth1_vlan: left promiscuous mode [ 184.836658][T17674] veth0_vlan: left promiscuous mode [ 184.851635][T17674] veth0_vlan: entered promiscuous mode [ 184.858469][T17674] veth1_vlan: entered promiscuous mode [ 184.889578][T17674] veth1_macvtap: left promiscuous mode [ 184.892618][T17674] veth0_macvtap: left promiscuous mode [ 184.908679][T17674] veth0_macvtap: entered promiscuous mode [ 184.911849][T17674] veth1_macvtap: entered promiscuous mode [ 184.918365][T17674] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.921969][T17674] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 184.936854][T17674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 184.948161][T17674] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 184.957359][T17674] bond1: left allmulticast mode [ 184.985222][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.988278][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.993736][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.996617][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.080088][T17679] bond3: entered promiscuous mode [ 185.084782][ T5609] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.098440][ T5609] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.147697][ T5609] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.156175][ T5609] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.544770][T17734] trusted_key: encrypted_key: master key parameter is missing [ 185.618745][T17739] IPVS: length: 191 != 8 [ 185.681533][T17751] bond0: entered promiscuous mode [ 185.687888][T17751] bond_slave_0: entered promiscuous mode [ 185.690670][T17751] bond_slave_1: entered promiscuous mode [ 185.695190][T17751] bond0: entered allmulticast mode [ 185.697695][T17751] bond_slave_0: entered allmulticast mode [ 185.700190][T17751] bond_slave_1: entered allmulticast mode [ 185.927076][T17778] ip6gre1: entered allmulticast mode [ 186.133564][T17805] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 186.165399][T17807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.566387][T17856] bond0: entered promiscuous mode [ 186.568517][T17856] bond_slave_0: entered promiscuous mode [ 186.571396][T17856] bond_slave_1: entered promiscuous mode [ 186.573637][T17856] bond0: entered allmulticast mode [ 186.575708][T17856] bond_slave_0: entered allmulticast mode [ 186.577853][T17856] bond_slave_1: entered allmulticast mode [ 186.583635][T17856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.801764][T17886] bond0: entered promiscuous mode [ 186.803726][T17886] bond_slave_0: entered promiscuous mode [ 186.808015][T17886] bond_slave_1: entered promiscuous mode [ 186.817013][T17886] bond0: entered allmulticast mode [ 186.819493][T17886] bond_slave_0: entered allmulticast mode [ 186.822039][T17886] bond_slave_1: entered allmulticast mode [ 186.958725][T17903] __nla_validate_parse: 8 callbacks suppressed [ 186.958743][T17903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5923'. [ 186.998732][ T148] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 187.126923][ T5968] Bluetooth: hci1: command 0x0406 tx timeout [ 187.137653][ T5968] Bluetooth: hci2: command 0x0406 tx timeout [ 187.173284][ T148] usb 7-1: unable to get BOS descriptor or descriptor too short [ 187.178000][ T148] usb 7-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 552 [ 187.183764][ T148] usb 7-1: config 1 interface 0 has no altsetting 0 [ 187.189072][ T148] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 187.193633][ T148] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.196775][ T148] usb 7-1: Product: syz [ 187.198460][ T148] usb 7-1: Manufacturer: syz [ 187.200335][ T148] usb 7-1: SerialNumber: syz [ 187.211633][T17876] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 187.337990][T17942] bond2: entered allmulticast mode [ 187.455918][ T148] usb 7-1: USB disconnect, device number 14 [ 187.692861][T17985] bond0: left promiscuous mode [ 187.697401][T17985] bond_slave_0: left promiscuous mode [ 187.700085][T17985] bond_slave_1: left promiscuous mode [ 187.702727][T17985] bond0: left allmulticast mode [ 187.705222][T17985] bond_slave_0: left allmulticast mode [ 187.708025][T17985] bond_slave_1: left allmulticast mode [ 187.712278][T17985] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.721506][T17985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.746132][T17985] veth0_to_bond: left allmulticast mode [ 187.763426][T17985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.768716][T17985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.775888][T17985] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.780096][T17985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.786078][T17985] veth1_vlan: left promiscuous mode [ 187.788783][T17985] veth0_vlan: left promiscuous mode [ 187.792624][T17985] veth0_vlan: entered promiscuous mode [ 187.796881][T17985] veth1_vlan: entered promiscuous mode [ 187.808924][T17985] veth1_macvtap: left promiscuous mode [ 187.813229][T17985] veth0_macvtap: left promiscuous mode [ 187.816891][T17985] veth0_macvtap: entered promiscuous mode [ 187.820449][T17985] veth1_macvtap: entered promiscuous mode [ 187.830401][T17985] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 187.834753][T17985] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 187.838997][T17985] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 187.843880][T17985] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 187.878544][T17985] bridge3: left promiscuous mode [ 187.880660][T17985] bridge3: left allmulticast mode [ 187.892442][T17985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.895331][T17985] ipip1: left allmulticast mode [ 187.899850][T17985] ip6gre1: left allmulticast mode [ 187.908971][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.912402][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.924683][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.927602][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.975476][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.979321][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.992056][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.000246][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.138827][T18016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5977'. [ 188.143779][T18016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5977'. [ 188.219438][T18027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.232878][T18030] tmpfs: Bad value for 'mpol' [ 188.303323][T18037] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 188.386859][T18044] geneve2: entered promiscuous mode [ 188.793688][T18089] bond4: entered allmulticast mode [ 188.972346][T18119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6028'. [ 188.975917][T18119] netlink: 31 bytes leftover after parsing attributes in process `syz.1.6028'. [ 188.978918][T18119] netlink: 'syz.1.6028': attribute type 3 has an invalid length. [ 188.981859][T18119] netlink: 'syz.1.6028': attribute type 2 has an invalid length. [ 188.984687][T18119] netlink: 31 bytes leftover after parsing attributes in process `syz.1.6028'. [ 188.993155][T18124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6030'. [ 189.071425][T18132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6034'. [ 189.096204][T18132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.156058][T18138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6038'. [ 189.237423][T18152] netlink: 160 bytes leftover after parsing attributes in process `syz.1.6041'. [ 189.430108][T18174] Mount JFS Failure: -22 [ 189.432031][T18174] jfs_mount failed w/return code = -22 [ 189.501780][T18180] netlink: 'syz.2.6055': attribute type 2 has an invalid length. [ 189.681685][T18202] netlink: 'syz.3.6063': attribute type 21 has an invalid length. [ 189.730991][T18204] xfrm0 speed is unknown, defaulting to 1000 [ 190.091605][T18250] geneve2: entered promiscuous mode [ 190.163656][T18254] bond0: left promiscuous mode [ 190.166157][T18254] bond_slave_0: left promiscuous mode [ 190.168874][T18254] bond_slave_1: left promiscuous mode [ 190.171746][T18254] bond0: left allmulticast mode [ 190.174058][T18254] bond_slave_0: left allmulticast mode [ 190.176744][T18254] bond_slave_1: left allmulticast mode [ 190.189698][T18254] veth0_to_bond: left allmulticast mode [ 190.207531][T18254] vlan1: left promiscuous mode [ 190.220077][T18254] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 190.238243][T18254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.243327][T18254] bridge1: left promiscuous mode [ 190.245032][T18254] bridge1: left allmulticast mode [ 190.249679][T18254] bridge2: left promiscuous mode [ 190.252286][T18254] bridge2: left allmulticast mode [ 190.259890][T18254] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.265428][T18254] bridge4: left promiscuous mode [ 190.267678][T18254] bridge4: left allmulticast mode [ 190.271843][T18254] bond4: left allmulticast mode [ 190.275478][T18254] 8021q: adding VLAN 0 to HW filter on device bond4 [ 190.631181][T18299] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 191.275624][T18371] netlink: 'syz.0.6148': attribute type 21 has an invalid length. [ 191.278508][T18371] netlink: 'syz.0.6148': attribute type 1 has an invalid length. [ 191.324231][ T42] audit: type=1326 audit(184.447:18276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18377 comm="syz.3.6154" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 191.335411][ T42] audit: type=1326 audit(184.447:18277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18377 comm="syz.3.6154" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 191.349441][ T42] audit: type=1326 audit(184.456:18278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18377 comm="syz.3.6154" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 191.363626][ T42] audit: type=1326 audit(184.456:18279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18377 comm="syz.3.6154" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 191.390824][ T42] audit: type=1326 audit(184.456:18280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18377 comm="syz.3.6154" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 191.399496][ T42] audit: type=1326 audit(184.456:18281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18377 comm="syz.3.6154" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 191.413409][ T42] audit: type=1326 audit(184.456:18282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18377 comm="syz.3.6154" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 191.422895][ T42] audit: type=1326 audit(184.456:18283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18377 comm="syz.3.6154" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 191.431490][ T42] audit: type=1326 audit(184.456:18284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18377 comm="syz.3.6154" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 191.572660][T18398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.576835][T18398] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.589320][T18398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.696999][T18398] veth0_to_bond: left allmulticast mode [ 191.712617][T18398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.717539][T18398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.726703][T18398] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.731061][ T42] audit: type=1400 audit(184.821:18285): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":@/" pid=18418 comm="syz.3.6174" [ 191.731448][T18398] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.732756][T18398] veth1_vlan: left promiscuous mode [ 191.747724][T18398] veth0_vlan: left promiscuous mode [ 191.752045][T18398] veth0_vlan: entered promiscuous mode [ 191.756830][T18398] veth1_vlan: entered promiscuous mode [ 191.763904][T18398] veth1_macvtap: left promiscuous mode [ 191.767614][T18398] veth0_macvtap: left promiscuous mode [ 191.770191][T18398] veth0_macvtap: left allmulticast mode [ 191.773895][T18398] veth0_macvtap: entered promiscuous mode [ 191.779536][T18398] veth1_macvtap: entered promiscuous mode [ 191.788310][T18398] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 191.792125][T18398] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 191.795989][T18398] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 191.819541][T18398] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 191.875209][T18398] bridge1: left promiscuous mode [ 191.877288][T18398] bridge1: left allmulticast mode [ 191.882712][T18398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.886122][T18398] bond2: left allmulticast mode [ 191.888193][T18398] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.893468][T18398] bridge2: left promiscuous mode [ 191.896630][T18398] bond3: left promiscuous mode [ 191.898996][T18398] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.909532][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.912912][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.929016][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.932216][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.986614][T18416] netlink: 'syz.0.6171': attribute type 3 has an invalid length. [ 191.994985][T18416] netlink: 'syz.0.6171': attribute type 3 has an invalid length. [ 192.002532][ T5609] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.007458][ T9] xfrm0 speed is unknown, defaulting to 1000 [ 192.010141][ T5609] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.014973][ T9] syz1: Port: 1 Link ACTIVE [ 192.019048][ T5609] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.067804][ T5609] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.075089][ T9] xfrm0 speed is unknown, defaulting to 1000 [ 192.223763][T18453] gre1: entered promiscuous mode [ 192.724691][ C0] sd 0:0:0:0: [sda] tag#4 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 192.728983][ C0] sd 0:0:0:0: [sda] tag#4 CDB: Test Unit Ready [ 192.822159][T18512] No source specified [ 192.863401][T18518] binder: 18517:18518 ioctl c00c620f 800003c0 returned -22 [ 192.917985][T18524] openvswitch: netlink: Actions may not be safe on all matching packets [ 193.131621][T18549] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 193.408734][T18581] __nla_validate_parse: 4 callbacks suppressed [ 193.408752][T18581] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6253'. [ 193.433160][T18581] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6253'. [ 193.965422][T18633] bond0: left promiscuous mode [ 193.967785][T18633] bond_slave_0: left promiscuous mode [ 193.970134][T18633] bond_slave_1: left promiscuous mode [ 193.990329][T18633] bond0: left allmulticast mode [ 193.992513][T18633] bond_slave_0: left allmulticast mode [ 193.995033][T18633] bond_slave_1: left allmulticast mode [ 194.016938][T18633] bond2: left allmulticast mode [ 194.019171][T18633] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.025170][T18633] geneve2: left promiscuous mode [ 194.103411][T18647] /dev/sg0: Can't lookup blockdev [ 194.321415][T18672] kAFS: Can only specify source 'none' with -o dyn [ 194.327175][T18674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6300'. [ 194.613326][T18707] netlink: 'syz.3.6317': attribute type 1 has an invalid length. [ 194.617545][T18707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6317'. [ 194.750973][T18728] netlink: 768 bytes leftover after parsing attributes in process `syz.3.6327'. [ 194.904094][T18750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6338'. [ 195.287104][T18791] ieee802154 phy1 wpan1: encryption failed: -90 [ 195.338429][T18798] netlink: 'syz.1.6361': attribute type 1 has an invalid length. [ 195.344003][T18798] netlink: 'syz.1.6361': attribute type 3 has an invalid length. [ 195.349736][T18798] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6361'. [ 195.390996][T18804] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 195.410552][T18808] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6366'. [ 195.705834][T18844] IPv6: sit2: Disabled Multicast RS [ 195.708933][T18844] sit2: entered allmulticast mode [ 195.739803][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 195.928031][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 195.933153][ T9] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 552 [ 195.942680][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 195.955233][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 195.963130][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.966939][ T9] usb 5-1: Product: syz [ 195.968773][ T9] usb 5-1: Manufacturer: syz [ 195.970677][ T9] usb 5-1: SerialNumber: syz [ 195.993511][T18814] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 196.201186][T18895] sctp: [Deprecated]: syz.1.6409 (pid 18895) Use of int in maxseg socket option. [ 196.201186][T18895] Use struct sctp_assoc_value instead [ 196.231673][ T9] usb 5-1: USB disconnect, device number 8 [ 196.278010][T18902] 9pnet_fd: p9_fd_create_unix (18902): problem connecting socket: ./file0/file0: -2 [ 196.327942][ T6052] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 196.510776][ T6052] usb 7-1: Using ep0 maxpacket: 32 [ 196.515726][ T6052] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.519951][ T6052] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.521325][T18924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6423'. [ 196.524098][ T6052] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.545382][ T6052] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 196.548877][ T6052] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 196.552001][ T6052] usb 7-1: Product: syz [ 196.553575][ T6052] usb 7-1: Manufacturer: syz [ 196.555543][ T6052] usb 7-1: SerialNumber: syz [ 196.564380][ T6052] input: appletouch as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input14 [ 196.889578][ T6052] usb 7-1: USB disconnect, device number 15 [ 196.909666][ T6052] appletouch 7-1:1.0: input: appletouch disconnected [ 197.056835][T18978] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 197.064120][T18982] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6451'. [ 197.068219][T18982] veth0_to_bond: default FDB implementation only supports local addresses [ 197.518248][T19034] netlink: 'syz.0.6477': attribute type 30 has an invalid length. [ 197.544912][T19040] netlink: 'syz.3.6478': attribute type 12 has an invalid length. [ 197.878580][T19080] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 197.881134][T19080] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 197.891113][T19080] vhci_hcd vhci_hcd.0: Device attached [ 197.896282][T19081] usbip_core: unknown command [ 197.900190][T19081] vhci_hcd: unknown pdu 0 [ 197.901835][T19081] usbip_core: unknown command [ 197.905731][ T5609] vhci_hcd vhci_hcd.0: stop threads [ 197.907775][ T5609] vhci_hcd vhci_hcd.0: release socket [ 197.909703][ T5609] vhci_hcd vhci_hcd.0: disconnect device [ 198.428476][T19133] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 199.252801][T19183] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 199.593647][T19226] bond5: Removing last ns target with arp_interval on [ 199.779261][T19249] netlink: 'syz.2.6580': attribute type 10 has an invalid length. [ 199.789943][T19249] __nla_validate_parse: 4 callbacks suppressed [ 199.789959][T19249] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6580'. [ 199.799248][T19249] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 199.806652][T19249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.816190][T19252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6582'. [ 200.352720][T19307] netlink: 'syz.2.6608': attribute type 16 has an invalid length. [ 200.916207][T19329] netlink: 532 bytes leftover after parsing attributes in process `syz.2.6619'. [ 201.559767][T19409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6658'. [ 201.584831][T19411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.645143][T19419] netlink: 'syz.3.6663': attribute type 11 has an invalid length. [ 201.648287][T19419] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6663'. [ 201.670032][T19421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6664'. [ 203.076643][T19494] /dev/sg0: Can't lookup blockdev [ 203.342739][T19532] xt_ecn: cannot match TCP bits for non-tcp packets [ 203.454077][T19548] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6727'. [ 203.491776][T19552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6729'. [ 203.512394][T19552] 8021q: adding VLAN 0 to HW filter on device bond6 [ 203.602677][T19568] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6737'. [ 203.618964][T19571] 9p: Unknown Cache mode or invalid value fscach [ 203.653333][T19575] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6741'. [ 203.742149][T19588] openvswitch: netlink: ufid size 21752 bytes exceeds the range (1, 16) [ 203.746602][T19588] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 203.763304][T19583] bond6 (unregistering): Released all slaves [ 203.840627][T19596] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 203.895899][T19600] 9p: Could not find request transport: xen [ 204.030473][T19623] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 204.164094][T19637] netlink: 'syz.3.6771': attribute type 2 has an invalid length. [ 204.167373][T19637] netlink: 'syz.3.6771': attribute type 1 has an invalid length. [ 204.217687][T19645] netlink: 'syz.2.6774': attribute type 13 has an invalid length. [ 204.227294][T19645] gretap0: refused to change device tx_queue_len [ 204.230181][T19645] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 204.402877][T19671] sctp: [Deprecated]: syz.1.6787 (pid 19671) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.402877][T19671] Use struct sctp_sack_info instead [ 204.591576][T19697] random: crng reseeded on system resumption [ 204.628256][T19701] netlink: 'syz.1.6802': attribute type 3 has an invalid length. [ 204.631759][T19701] netlink: 'syz.1.6802': attribute type 1 has an invalid length. [ 204.687833][T19707] ata1.00: invalid cdb length 6 [ 204.691247][T19706] dvmrp9: entered allmulticast mode [ 204.809638][T19717] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 205.213853][T19759] TCP: TCP_TX_DELAY enabled [ 205.321211][T19770] sock: sock_set_timeout: `syz.2.6837' (pid 19770) tries to set negative timeout [ 205.761969][T19815] netlink: 'syz.3.6859': attribute type 12 has an invalid length. [ 205.816376][T19821] __nla_validate_parse: 2 callbacks suppressed [ 205.816392][T19821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6862'. [ 205.868520][T19830] random: crng reseeded on system resumption [ 206.123219][T19862] netlink: 'syz.2.6882': attribute type 1 has an invalid length. [ 206.126581][T19862] netlink: 'syz.2.6882': attribute type 2 has an invalid length. [ 206.250629][T19882] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6891'. [ 206.254358][ T8447] bond_slave_0: entered promiscuous mode [ 206.257727][ T8447] bond_slave_1: entered promiscuous mode [ 206.280623][T19885] openvswitch: netlink: Actions may not be safe on all matching packets [ 206.448962][T19909] genirq: Flags mismatch irq 8. 00200001 (pcmmio) vs. 00200001 (rtc0) [ 206.600060][T19925] veth3: entered promiscuous mode [ 206.602470][T19925] veth3: entered allmulticast mode [ 206.733456][T19942] netlink: 'syz.1.6921': attribute type 1 has an invalid length. [ 206.763691][T19947] netlink: 'syz.0.6922': attribute type 11 has an invalid length. [ 206.768182][T19947] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6922'. [ 206.791103][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.862572][T19954] 8021q: adding VLAN 0 to HW filter on device bond3 [ 206.867443][T19959] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6930'. [ 206.874915][T19959] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6930'. [ 206.878643][T19959] netlink: 19 bytes leftover after parsing attributes in process `syz.2.6930'. [ 206.958573][T19966] [U]  [ 207.173991][T20000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6949'. [ 207.338307][T20026] syz.2.6962: vmalloc error: size 1879048192, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 207.344868][T20026] CPU: 3 UID: 0 PID: 20026 Comm: syz.2.6962 Not tainted syzkaller #0 PREEMPT(full) [ 207.344894][T20026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.344905][T20026] Call Trace: [ 207.344912][T20026] [ 207.344920][T20026] dump_stack_lvl+0x100/0x190 [ 207.344946][T20026] warn_alloc.cold+0x94/0xa8 [ 207.344961][T20026] ? __pfx_warn_alloc+0x10/0x10 [ 207.344979][T20026] ? is_bpf_text_address+0x8a/0x1a0 [ 207.345005][T20026] ? is_bpf_text_address+0x8a/0x1a0 [ 207.345031][T20026] ? bpf_ksym_find+0x124/0x1c0 [ 207.345051][T20026] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 207.345084][T20026] __vmalloc_node_range_noprof+0x136c/0x1630 [ 207.345113][T20026] ? arch_stack_walk+0xa6/0xf0 [ 207.345145][T20026] ? vmalloc_array_noprof+0x43/0x70 [ 207.345167][T20026] ? vfree+0x136/0x750 [ 207.345195][T20026] ? stack_trace_save+0x8e/0xc0 [ 207.345219][T20026] ? __pfx_stack_trace_save+0x10/0x10 [ 207.345243][T20026] ? stack_depot_save_flags+0x27/0x9d0 [ 207.345269][T20026] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 207.345297][T20026] ? vfree+0x136/0x750 [ 207.345321][T20026] ? kasan_save_stack+0x3f/0x50 [ 207.345344][T20026] ? kasan_save_stack+0x30/0x50 [ 207.345382][T20026] ? kasan_save_track+0x14/0x30 [ 207.345404][T20026] ? __kasan_slab_free+0x5f/0x80 [ 207.345426][T20026] ? kfree+0x22b/0x6c0 [ 207.345441][T20026] ? vfree+0x136/0x750 [ 207.345463][T20026] ? xt_compat_flush_offsets+0x90/0x170 [ 207.345490][T20026] ? compat_do_replace+0x503/0x7a0 [ 207.345515][T20026] ? do_ebt_set_ctl+0x3ef/0x4a0 [ 207.345532][T20026] ? vmalloc_array_noprof+0x43/0x70 [ 207.345555][T20026] __vmalloc_node_noprof+0xad/0xf0 [ 207.345582][T20026] ? vmalloc_array_noprof+0x43/0x70 [ 207.345608][T20026] __vmalloc_noprof+0xa3/0x120 [ 207.345662][T20026] ? __pfx___vmalloc_noprof+0x10/0x10 [ 207.345699][T20026] vmalloc_array_noprof+0x43/0x70 [ 207.345724][T20026] do_replace_finish+0xe8/0x20d0 [ 207.345759][T20026] ? find_held_lock+0x2b/0x80 [ 207.345784][T20026] ? compat_do_replace+0x50d/0x7a0 [ 207.345817][T20026] ? __pfx_do_replace_finish+0x10/0x10 [ 207.345846][T20026] ? __mutex_unlock_slowpath+0x35d/0x930 [ 207.345882][T20026] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 207.345912][T20026] ? vfree+0x13b/0x750 [ 207.345939][T20026] ? compat_do_replace+0x38f/0x7a0 [ 207.345969][T20026] ? __vmalloc_node_noprof+0xad/0xf0 [ 207.346002][T20026] compat_do_replace+0x522/0x7a0 [ 207.346034][T20026] ? __pfx_compat_do_replace+0x10/0x10 [ 207.346074][T20026] ? bpf_lsm_capable+0x9/0x10 [ 207.346094][T20026] ? security_capable+0x80/0x260 [ 207.346117][T20026] do_ebt_set_ctl+0x3ef/0x4a0 [ 207.346137][T20026] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 207.346167][T20026] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 207.346203][T20026] ? nf_sockopt_find.isra.0+0x222/0x290 [ 207.346230][T20026] nf_setsockopt+0x8d/0xf0 [ 207.346254][T20026] ip_setsockopt+0xcb/0xf0 [ 207.346279][T20026] raw_setsockopt+0x60/0x1b0 [ 207.346300][T20026] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 207.346329][T20026] do_sock_setsockopt+0xf3/0x1d0 [ 207.346355][T20026] __sys_setsockopt+0x119/0x190 [ 207.346381][T20026] __ia32_sys_setsockopt+0xbc/0x160 [ 207.346401][T20026] ? __do_fast_syscall_32+0x98/0x970 [ 207.346418][T20026] ? lockdep_hardirqs_on+0x78/0x100 [ 207.346444][T20026] __do_fast_syscall_32+0xe7/0x970 [ 207.346466][T20026] do_fast_syscall_32+0x32/0x70 [ 207.346484][T20026] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.346507][T20026] RIP: 0023:0xf7ff8fec [ 207.346528][T20026] Code: Unable to access opcode bytes at 0xf7ff8fc2. [ 207.346536][T20026] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 207.346554][T20026] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 207.346567][T20026] RDX: 0000000000000080 RSI: 00000000800001c0 RDI: 00000000000000e0 [ 207.346579][T20026] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.346590][T20026] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 207.346602][T20026] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.346626][T20026] [ 207.346676][T20026] Mem-Info: [ 207.386464][T20032] netlink: 'syz.1.6964': attribute type 1 has an invalid length. [ 207.387374][T20026] active_anon:6486 inactive_anon:1426 isolated_anon:0 [ 207.387374][T20026] active_file:10146 inactive_file:16202 isolated_file:0 [ 207.387374][T20026] unevictable:2868 dirty:362 writeback:0 [ 207.387374][T20026] slab_reclaimable:6036 slab_unreclaimable:59042 [ 207.387374][T20026] mapped:22324 shmem:1929 pagetables:1150 [ 207.387374][T20026] sec_pagetables:298 bounce:0 [ 207.387374][T20026] kernel_misc_reclaimable:0 [ 207.387374][T20026] free:58268 free_pcp:18510 free_cma:0 [ 207.565672][T20026] Node 0 active_anon:316kB inactive_anon:16kB active_file:16kB inactive_file:1960kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7832kB pagetables:1460kB sec_pagetables:1104kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 207.581589][T20026] Node 1 active_anon:25628kB inactive_anon:5688kB active_file:29268kB inactive_file:33048kB unevictable:58836kB isolated(anon):0kB isolated(file):0kB mapped:129768kB dirty:1440kB writeback:0kB shmem:4180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5588kB pagetables:3464kB sec_pagetables:88kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 207.597384][T20026] Node 0 DMA free:2284kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:240kB local_pcp:44kB free_cma:0kB [ 207.609713][T20026] lowmem_reserve[]: 0 283 283 283 283 [ 207.612952][T20026] Node 0 DMA32 free:17420kB boost:0kB min:13060kB low:16324kB high:19588kB reserved_highatomic:2048KB free_highatomic:1160KB active_anon:316kB inactive_anon:16kB active_file:16kB inactive_file:1956kB unevictable:3536kB writepending:8kB zspages:56kB present:1032196kB managed:290676kB mlocked:0kB bounce:0kB free_pcp:10116kB local_pcp:1112kB free_cma:0kB [ 207.628203][T20026] lowmem_reserve[]: 0 0 0 0 0 [ 207.630328][T20026] Node 1 DMA32 free:206656kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25628kB inactive_anon:5688kB active_file:29268kB inactive_file:33048kB unevictable:64136kB writepending:1440kB zspages:2612kB present:1048432kB managed:948212kB mlocked:60800kB bounce:0kB free_pcp:55172kB local_pcp:15232kB free_cma:0kB [ 207.645806][T20026] lowmem_reserve[]: 0 0 0 0 0 [ 207.647983][T20026] Node 0 DMA: 33*4kB (UM) 17*8kB (U) 4*16kB (U) 5*32kB (UM) 0*64kB 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2284kB [ 207.655069][T20026] Node 0 DMA32: 287*4kB (UMEH) 143*8kB (UMEH) 92*16kB (UMEH) 113*32kB (UMEH) 50*64kB (UEH) 9*128kB (UEH) 2*256kB (EH) 6*512kB (UM) 0*1024kB 1*2048kB (M) 0*4096kB = 17364kB [ 207.661733][T20026] Node 1 DMA32: 808*4kB (UME) 231*8kB (UM) 28*16kB (U) 278*32kB (U) 56*64kB (UE) 145*128kB (UE) 111*256kB (UME) 85*512kB (UME) 59*1024kB (UM) 10*2048kB (M) 3*4096kB (U) = 201688kB [ 207.670197][T20026] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.674434][T20026] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 207.678136][T20026] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.681898][T20026] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 207.685435][T20026] 29458 total pagecache pages [ 207.687816][T20026] 433 pages in swap cache [ 207.689555][T20026] Free swap = 116240kB [ 207.691404][T20026] Total swap = 124996kB [ 207.693007][T20026] 524155 pages RAM [ 207.694456][T20026] 0 pages HighMem/MovableOnly [ 207.696366][T20026] 210593 pages reserved [ 207.698494][T20026] 0 pages cma reserved [ 207.850106][T20057] Timeout policy `syz1' can only be used by L3 protocol number 34825 [ 207.909990][T20064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6980'. [ 207.967959][T20073] nfs4: Bad value for 'source' [ 208.347410][T20113] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7005'. [ 208.364248][T20117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7007'. [ 208.395140][T20124] program syz.2.7010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.395531][T20122] netlink: 'syz.3.7009': attribute type 2 has an invalid length. [ 208.840207][T20169] kernel profiling enabled (shift: 17) [ 208.952036][ T42] kauditd_printk_skb: 591 callbacks suppressed [ 208.952050][ T42] audit: type=1326 audit(200.945:18877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20184 comm="syz.3.7040" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 208.970001][ T42] audit: type=1326 audit(200.945:18878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20184 comm="syz.3.7040" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 208.978933][ T42] audit: type=1326 audit(200.945:18879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20184 comm="syz.3.7040" exe="/syz-executor" sig=0 arch=40000003 syscall=266 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 208.988855][ T42] audit: type=1326 audit(200.945:18880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20184 comm="syz.3.7040" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 208.997370][ T42] audit: type=1326 audit(200.945:18881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20184 comm="syz.3.7040" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 209.300991][ T42] audit: type=1400 audit(201.254:18882): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=20228 comm="syz.0.7064" [ 209.318922][T20231] tmpfs: Bad value for 'mpol' [ 209.393010][T20243] netlink: 'syz.3.7069': attribute type 2 has an invalid length. [ 209.395285][T20240] netlink: 'syz.1.7067': attribute type 11 has an invalid length. [ 209.403770][T20243] netlink: 'syz.3.7069': attribute type 8 has an invalid length. [ 209.459988][T20248] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 209.579148][ T42] audit: type=1107 audit(201.525:18883): pid=20264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 209.767877][T20286] usb usb8: usbfs: process 20286 (syz.0.7092) did not claim interface 0 before use [ 210.228652][T20328] netlink: 'syz.1.7111': attribute type 22 has an invalid length. [ 210.243100][T20331] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.103634][T20408] comedi comedi3: pcmmio: I/O base address not correctly aligned [ 211.351310][T20429] __nla_validate_parse: 6 callbacks suppressed [ 211.351329][T20429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7160'. [ 211.364254][T20429] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 211.367917][T20429] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 211.374041][T20429] bridge5: entered promiscuous mode [ 211.623948][T20457] validate_nla: 1 callbacks suppressed [ 211.623963][T20457] netlink: 'syz.2.7174': attribute type 3 has an invalid length. [ 212.092641][T20523] xt_hashlimit: invalid rate [ 212.169392][T20530] ufs: You didn't specify the type of your ufs filesystem [ 212.169392][T20530] [ 212.169392][T20530] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 212.169392][T20530] [ 212.169392][T20530] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 212.199497][T20530] ufs: failed to set blocksize [ 212.333649][T20554] geneve4: entered allmulticast mode [ 212.494574][T20571] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7230'. [ 212.503661][T20574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7232'. [ 212.521685][T20574] netlink: 67 bytes leftover after parsing attributes in process `syz.2.7232'. [ 212.639934][T20593] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 212.750937][ T42] audit: type=1326 audit(204.491:18884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.1.7248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 212.768169][ T42] audit: type=1326 audit(204.491:18885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.1.7248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 212.783890][ T42] audit: type=1326 audit(204.501:18886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.1.7248" exe="/syz-executor" sig=0 arch=40000003 syscall=36 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 212.792710][T20607] bond7 (unregistering): Released all slaves [ 213.073128][T20634] netlink: 'syz.0.7259': attribute type 1 has an invalid length. [ 213.082930][T20634] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7259'. [ 213.378473][T20662] openvswitch: netlink: IP tunnel dst address not specified [ 213.563500][T20682] Cannot find add_set index 2 as target [ 213.571689][T20684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7283'. [ 213.667350][T20694] openvswitch: netlink: IP tunnel dst address not specified [ 214.218469][T20748] xt_hl: Unknown TTL match mode: 255 [ 214.221980][T20750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7315'. [ 214.227921][T20750] openvswitch: netlink: Missing key (keys=40, expected=100) [ 214.598938][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 214.598953][ T42] audit: type=1326 audit(206.223:18897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20787 comm="syz.2.7333" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 214.610401][ T42] audit: type=1326 audit(206.232:18898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20787 comm="syz.2.7333" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 214.624816][ T42] audit: type=1326 audit(206.251:18899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20787 comm="syz.2.7333" exe="/syz-executor" sig=0 arch=40000003 syscall=36 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 214.682174][ T42] audit: type=1326 audit(206.297:18900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20787 comm="syz.2.7333" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 214.692217][ T42] audit: type=1326 audit(206.297:18901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20787 comm="syz.2.7333" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8fec code=0x7ffc0000 [ 214.848026][T20808] kAFS: unable to lookup cell '(,c¾ûL' [ 215.076892][T20832] C: renamed from lo (while UP) [ 215.094926][T20832] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 215.164192][T20836] binder: 20835:20836 ioctl c0306201 80000580 returned -14 [ 215.365238][T20853] ipt_ECN: cannot use operation on non-tcp rule [ 215.488918][T20862] netlink: 'syz.3.7369': attribute type 3 has an invalid length. [ 215.493536][T20862] netlink: 'syz.3.7369': attribute type 3 has an invalid length. [ 215.504006][T20862] netlink: 'syz.3.7369': attribute type 3 has an invalid length. [ 215.507696][T20862] netlink: 'syz.3.7369': attribute type 3 has an invalid length. [ 215.511526][T20862] netlink: 'syz.3.7369': attribute type 3 has an invalid length. [ 215.515091][T20862] netlink: 'syz.3.7369': attribute type 3 has an invalid length. [ 215.518682][T20862] netlink: 'syz.3.7369': attribute type 3 has an invalid length. [ 215.524649][T20862] netlink: 'syz.3.7369': attribute type 3 has an invalid length. [ 216.023242][T20910] xt_TCPMSS: Only works on TCP SYN packets [ 216.094702][T20916] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7396'. [ 216.232551][T20922] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7399'. [ 216.249777][T20914] infiniband syz0: set active [ 216.253065][T20914] infiniband syz0: added bond_slave_0 [ 216.272784][T20914] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 216.294763][T20914] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 216.302143][T20914] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 216.325321][T20914] RDS/IB: syz0: added [ 216.326975][T20914] smc: adding ib device syz0 with port count 1 [ 216.329363][T20914] smc: ib device syz0 port 1 has no pnetid [ 216.437767][T20942] C: renamed from lo (while UP) [ 216.445873][T20942] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 216.617985][T20956] SET target dimension over the limit! [ 217.107955][T20970] C: renamed from lo (while UP) [ 217.113432][T20970] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 217.385312][T20998] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.7436'. [ 217.390263][T20998] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.7436'. [ 217.506116][T21009] XFS (nullb0): Invalid superblock magic number [ 217.920231][T21045] program syz.3.7458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.098568][T21064] random: crng reseeded on system resumption [ 218.202718][T21072] SET target dimension over the limit! [ 218.293544][T21081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.913432][T21131] xfrm0 speed is unknown, defaulting to 1000 [ 219.047832][T21145] openvswitch: netlink: Actions may not be safe on all matching packets [ 219.081917][T21148] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7500'. [ 219.326658][T21165] pim6reg: entered allmulticast mode [ 220.039332][T21233] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.104443][T21239] binder: BC_ACQUIRE_RESULT not supported [ 220.106917][T21239] binder: 21238:21239 ioctl c0306201 80004a40 returned -22 [ 220.207030][T21249] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 220.223912][T21251] validate_nla: 46 callbacks suppressed [ 220.223926][T21251] netlink: 'syz.1.7542': attribute type 3 has an invalid length. [ 220.228169][T21251] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7542'. [ 220.271495][T21255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7543'. [ 220.320736][T21258] bond7: peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 220.326562][T21258] bond7 (unregistering): Released all slaves [ 220.499413][T21277] netlink: 'syz.0.7553': attribute type 1 has an invalid length. [ 220.502747][T21277] netlink: 'syz.0.7553': attribute type 3 has an invalid length. [ 220.505909][T21277] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7553'. [ 220.573320][T21286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7559'. [ 220.584941][ T6066] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 220.746601][ T6066] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 220.752815][ T6066] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 220.766789][ T6066] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 220.770167][ T6066] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 220.773381][ T6066] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.780935][ T6066] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 220.784003][ T6066] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.786868][ T6066] usb 8-1: Product: syz [ 220.788802][ T6066] usb 8-1: Manufacturer: syz [ 220.790567][ T6066] usb 8-1: SerialNumber: syz [ 220.794018][ T6066] usb 8-1: config 0 descriptor?? [ 220.797091][T21264] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 220.803694][ T6066] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input19 [ 220.817501][T21317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7573'. [ 220.836020][T21321] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 220.876221][ C1] kbtab 8-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 220.903488][T21323] bond5: peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 220.913727][T21323] bond5 (unregistering): Released all slaves [ 221.005987][T21333] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 221.008568][T21333] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 221.011818][T21333] vhci_hcd vhci_hcd.0: Device attached [ 221.023843][T21333] vhci_hcd vhci_hcd.0: port 0 already used [ 221.027686][T21334] vhci_hcd: connection closed [ 221.031511][ T13] vhci_hcd vhci_hcd.2: stop threads [ 221.036212][ T13] vhci_hcd vhci_hcd.2: release socket [ 221.038563][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 221.094590][ T6052] usb 8-1: USB disconnect, device number 7 [ 221.395810][T21372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7596'. [ 221.687252][T21406] netlink: 'syz.1.7612': attribute type 1 has an invalid length. [ 221.690477][T21406] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7612'. [ 222.077701][T21449] xfrm0 speed is unknown, defaulting to 1000 [ 222.324324][T21466] new mount options do not match the existing superblock, will be ignored [ 222.493206][T21475] netlink: 'syz.0.7647': attribute type 4 has an invalid length. [ 222.594237][T21481] netlink: 'syz.0.7650': attribute type 2 has an invalid length. [ 222.607900][T21481] : entered promiscuous mode [ 222.660413][ T42] audit: type=1400 audit(213.774:18902): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=21486 comm="syz.0.7653" [ 222.830733][T21503] Unsupported ieee802154 address type: 0 [ 223.056775][T21533] netlink: 'syz.2.7675': attribute type 11 has an invalid length. [ 223.194580][T21544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7680'. [ 223.198061][T21547] netlink: 'syz.3.7681': attribute type 2 has an invalid length. [ 223.222069][T21547] : entered promiscuous mode [ 223.430695][T21582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7697'. [ 223.439464][T21582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7697'. [ 223.543185][T21600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7708'. [ 223.591868][T21607] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7712'. [ 223.640902][T21616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7717'. [ 223.655831][T21616] openvswitch: netlink: Missing key (keys=40, expected=80) [ 223.720450][T21628] random: crng reseeded on system resumption [ 223.746492][T21632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7724'. [ 223.790107][T21640] xt_hashlimit: overflow, rate too high: 0 [ 223.823227][T21643] program syz.3.7729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.841118][T21646] xfrm0 speed is unknown, defaulting to 1000 [ 224.013852][T21666] bond4: peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 224.041052][T21666] bond4 (unregistering): Released all slaves [ 224.077911][T21675] tmpfs: Bad value for 'mpol' [ 224.439460][T21713] dlm: non-version read from control device 0 [ 224.541162][T21717] xfrm0 speed is unknown, defaulting to 1000 [ 224.642487][T21737] netlink: 'syz.2.7775': attribute type 11 has an invalid length. [ 224.674814][T21742] netlink: 'syz.1.7776': attribute type 11 has an invalid length. [ 224.688374][T21742] netlink: 448 bytes leftover after parsing attributes in process `syz.1.7776'. [ 224.868199][T21756] bond6: peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 224.886223][T21756] bond6 (unregistering): Released all slaves [ 225.322446][ T42] audit: type=1800 audit(216.264:18903): pid=21814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7812" name="SYSV798dd81b" dev="hugetlbfs" ino=0 res=0 errno=0 [ 225.377259][T21820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.380147][T21820] batadv_slave_0: entered promiscuous mode [ 225.382356][T21820] batadv_slave_0: entered allmulticast mode [ 225.385879][T21820] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 225.589520][T21850] xfrm0 speed is unknown, defaulting to 1000 [ 225.828370][T21880] efs: cannot read volume header [ 225.955954][T21893] : renamed from bond_slave_0 (while UP) [ 226.102332][T21911] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.107252][T21911] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.118741][T21911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.139488][T21911] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 226.275133][T21929] netlink: 959 bytes leftover after parsing attributes in process `syz.2.7868'. [ 226.319662][ T42] audit: type=1326 audit(217.190:18904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21934 comm="syz.0.7870" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 226.329281][ T42] audit: type=1326 audit(217.190:18905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21934 comm="syz.0.7870" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 226.336616][ T42] audit: type=1326 audit(217.190:18906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21934 comm="syz.0.7870" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf703efec code=0x7ffc0000 [ 226.343886][ T42] audit: type=1326 audit(217.190:18907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21934 comm="syz.0.7870" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 226.353139][ T42] audit: type=1326 audit(217.190:18908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21934 comm="syz.0.7870" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 226.673936][T21974] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.679382][T21974] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.691050][T21974] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.694332][T21974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.702601][T21974] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.704161][T21974] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 226.962553][T22004] validate_nla: 1 callbacks suppressed [ 226.962570][T22004] netlink: 'syz.0.7910': attribute type 30 has an invalid length. [ 226.979648][T22002] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.983179][T22002] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.999754][T22002] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 227.158846][T22034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7920'. [ 227.352986][T22064] tmpfs: Bad value for 'mpol' [ 227.456991][T22078] bond7: peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 227.462832][T22078] bond7 (unregistering): Released all slaves [ 227.918559][ T5609] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 227.923665][ T5609] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 227.930117][ T5609] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 227.935930][ T5609] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 227.975865][T22161] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 228.255164][T22205] netlink: 'syz.3.8003': attribute type 1 has an invalid length. [ 228.294605][T22211] netlink: 'syz.2.8006': attribute type 3 has an invalid length. [ 228.667762][T22277] __nla_validate_parse: 5 callbacks suppressed [ 228.667779][T22277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8039'. [ 228.749968][T22293] AppArmor: change_hat: Invalid input '0' [ 228.792930][T22299] NILFS (nullb0): couldn't find nilfs on the device [ 228.909749][T22319] netlink: 'syz.2.8060': attribute type 3 has an invalid length. [ 228.917017][T22319] netlink: 'syz.2.8060': attribute type 1 has an invalid length. [ 228.922810][T22319] netlink: 228 bytes leftover after parsing attributes in process `syz.2.8060'. [ 228.968288][T22323] sock: sock_timestamping_bind_phc: sock not bind to device [ 228.983830][T22325] netlink: 'syz.2.8063': attribute type 12 has an invalid length. [ 229.032268][T22333] AppArmor: change_hat: Invalid input 'š—' [ 229.081511][T22337] dlm: no locking on control device [ 229.128414][T22347] netlink: 276 bytes leftover after parsing attributes in process `syz.2.8075'. [ 229.209168][T22357] netlink: 'syz.3.8079': attribute type 12 has an invalid length. [ 229.212353][T22357] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8079'. [ 229.785578][ T34] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 229.853632][T22432] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 229.945821][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 229.948981][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 229.955984][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 229.960277][ T34] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 229.964058][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 229.971094][ T34] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 229.974905][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.977352][ T34] usb 7-1: Product: syz [ 229.979536][ T34] usb 7-1: Manufacturer: syz [ 229.981403][ T34] usb 7-1: SerialNumber: syz [ 229.985071][ T34] usb 7-1: config 0 descriptor?? [ 230.000366][ T34] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input21 [ 230.008151][ T5133] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 230.034511][ T5133] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 230.055488][T22450] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 230.058303][ T5133] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 230.065587][T21342] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 230.075746][ T5133] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 230.083138][ T5133] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 230.098929][ T5133] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 230.115502][ T5133] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 230.224180][T22401] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 230.233323][ T34] usb 7-1: USB disconnect, device number 16 [ 230.326097][T22475] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8137'. [ 230.434068][T22487] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 230.464251][T22492] openvswitch: netlink: Tunnel attr 116 out of range max 16 [ 230.515386][T22498] autofs4:pid:22498:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 230.520890][T22498] autofs4:pid:22498:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 230.909835][T22546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8172'. [ 230.932714][T22549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8173'. [ 230.978400][T22555] netlink: ct family unspecified [ 230.980031][T22555] openvswitch: netlink: Actions may not be safe on all matching packets [ 230.994281][T22557] netlink: 'syz.2.8177': attribute type 1 has an invalid length. [ 231.020133][T22561] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8179'. [ 231.223000][T22591] netlink: 'syz.1.8194': attribute type 1 has an invalid length. [ 231.223180][T22589] geneve2: entered promiscuous mode [ 231.226016][T22591] netlink: 396 bytes leftover after parsing attributes in process `syz.1.8194'. [ 231.457700][T22622] nfs: Deprecated parameter 'nointr' [ 231.580954][T22645] sctp: [Deprecated]: syz.2.8220 (pid 22645) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.580954][T22645] Use struct sctp_sack_info instead [ 231.672029][T22659] random: crng reseeded on system resumption [ 231.746203][T22668] ALSA: mixer_oss: invalid OSS volume 'u' [ 231.860138][T22688] ceph: No source [ 231.879275][T22690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8243'. [ 231.914029][T22696] Zero length message leads to an empty skb [ 231.986619][T22708] Mount JFS Failure: -5 [ 231.993678][T22711] ceph: No source [ 231.998500][T22708] jfs_mount failed w/return code = -5 [ 232.160699][T22738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.295943][T22757] netlink: 'syz.0.8275': attribute type 2 has an invalid length. [ 232.376698][T22767] ip6t_rpfilter: unknown options [ 232.473152][T22777] block device autoloading is deprecated and will be removed. [ 232.796979][T22827] can0: slcan on ttyS3. [ 232.800939][T22829] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 232.803510][T22829] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 232.864584][T22825] can0 (unregistered): slcan off ttyS3. [ 233.119057][T22879] random: crng reseeded on system resumption [ 233.244181][T22898] process 'syz.3.8346' launched './file0' with NULL argv: empty string added [ 233.245046][T22900] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 233.250193][T22900] [U] J"—e:ÀÆ" [ 233.400337][T22922] warn_alloc: 1 callbacks suppressed [ 233.400349][T22922] syz.2.8358: vmalloc error: size 2147483264, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 233.404365][T22926] dlm: no locking on control device [ 233.406684][T22922] CPU: 0 UID: 0 PID: 22922 Comm: syz.2.8358 Not tainted syzkaller #0 PREEMPT(full) [ 233.406716][T22922] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.406727][T22922] Call Trace: [ 233.406734][T22922] [ 233.406741][T22922] dump_stack_lvl+0x100/0x190 [ 233.406764][T22922] warn_alloc.cold+0x94/0xa8 [ 233.406778][T22922] ? __pfx_warn_alloc+0x10/0x10 [ 233.406791][T22922] ? __pfx_clockevents_program_event+0x10/0x10 [ 233.406811][T22922] ? __lock_acquire+0x49f/0x1a40 [ 233.406823][T22922] ? find_held_lock+0x2b/0x80 [ 233.406842][T22922] __vmalloc_node_range_noprof+0x136c/0x1630 [ 233.406863][T22922] ? find_held_lock+0x2b/0x80 [ 233.406878][T22922] ? __might_fault+0xc5/0x140 [ 233.406891][T22922] ? __might_fault+0xc5/0x140 [ 233.406903][T22922] ? compat_do_replace+0x1b1/0x7a0 [ 233.406927][T22922] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 233.406945][T22922] ? compat_copy_ebt_replace_from_user+0x299/0x3b0 [ 233.406965][T22922] ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10 [ 233.406988][T22922] ? compat_do_replace+0x1b1/0x7a0 [ 233.407006][T22922] __vmalloc_node_noprof+0xad/0xf0 [ 233.407023][T22922] ? compat_do_replace+0x1b1/0x7a0 [ 233.407044][T22922] compat_do_replace+0x1b1/0x7a0 [ 233.407065][T22922] ? __pfx_compat_do_replace+0x10/0x10 [ 233.407087][T22922] ? rcu_is_watching+0x12/0xc0 [ 233.407106][T22922] ? bpf_lsm_capable+0x9/0x10 [ 233.407119][T22922] ? security_capable+0x80/0x260 [ 233.407133][T22922] do_ebt_set_ctl+0x3ef/0x4a0 [ 233.407146][T22922] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 233.407164][T22922] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 233.407180][T22922] ? nf_sockopt_find.isra.0+0x222/0x290 [ 233.407196][T22922] nf_setsockopt+0x8d/0xf0 [ 233.407215][T22922] ip_setsockopt+0xcb/0xf0 [ 233.407233][T22922] tcp_setsockopt+0xa7/0x100 [ 233.407256][T22922] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 233.407275][T22922] do_sock_setsockopt+0xf3/0x1d0 [ 233.407292][T22922] __sys_setsockopt+0x119/0x190 [ 233.407307][T22922] __ia32_sys_setsockopt+0xbc/0x160 [ 233.407319][T22922] ? __do_fast_syscall_32+0x98/0x970 [ 233.407331][T22922] ? lockdep_hardirqs_on+0x78/0x100 [ 233.407348][T22922] __do_fast_syscall_32+0xe7/0x970 [ 233.407361][T22922] do_fast_syscall_32+0x32/0x70 [ 233.407372][T22922] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 233.407386][T22922] RIP: 0023:0xf7ff8fec [ 233.407400][T22922] Code: Unable to access opcode bytes at 0xf7ff8fc2. [ 233.407405][T22922] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 233.407416][T22922] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 233.407423][T22922] RDX: 0000000000000080 RSI: 00000000800004c0 RDI: 00000000000000e0 [ 233.407429][T22922] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 233.407435][T22922] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 233.407442][T22922] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 233.407455][T22922] [ 233.407459][T22922] Mem-Info: [ 233.515769][T22922] active_anon:7239 inactive_anon:1179 isolated_anon:0 [ 233.515769][T22922] active_file:10080 inactive_file:16266 isolated_file:0 [ 233.515769][T22922] unevictable:1768 dirty:501 writeback:0 [ 233.515769][T22922] slab_reclaimable:6282 slab_unreclaimable:61210 [ 233.515769][T22922] mapped:22578 shmem:1932 pagetables:1403 [ 233.515769][T22922] sec_pagetables:300 bounce:0 [ 233.515769][T22922] kernel_misc_reclaimable:0 [ 233.515769][T22922] free:64841 free_pcp:8785 free_cma:0 [ 233.533472][T22922] Node 0 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7884kB pagetables:1280kB sec_pagetables:1104kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 233.550588][T22922] Node 1 active_anon:28956kB inactive_anon:4716kB active_file:40312kB inactive_file:65064kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:90284kB dirty:1996kB writeback:0kB shmem:4192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5724kB pagetables:4132kB sec_pagetables:96kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 233.563421][T22922] Node 0 DMA free:2072kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:408kB local_pcp:64kB free_cma:0kB [ 233.574924][T22922] lowmem_reserve[]: 0 283 283 283 283 [ 233.577099][T22922] Node 0 DMA32 free:17716kB boost:0kB min:13060kB low:16324kB high:19588kB reserved_highatomic:2048KB free_highatomic:1452KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:3536kB writepending:8kB zspages:56kB present:1032196kB managed:290676kB mlocked:0kB bounce:0kB free_pcp:11344kB local_pcp:2356kB free_cma:0kB [ 233.590118][T22922] lowmem_reserve[]: 0 0 0 0 0 [ 233.592312][T22922] Node 1 DMA32 free:239576kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29056kB inactive_anon:4716kB active_file:40312kB inactive_file:65064kB unevictable:3536kB writepending:1996kB zspages:2612kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:24844kB local_pcp:6008kB free_cma:0kB [ 233.605792][T22922] lowmem_reserve[]: 0 0 0 0 0 [ 233.607865][T22922] Node 0 DMA: 20*4kB (UM) 21*8kB (UM) 8*16kB (UM) 5*32kB (UM) 0*64kB 0*128kB 2*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2072kB [ 233.613929][T22922] Node 0 DMA32: 187*4kB (UMEH) 87*8kB (UMEH) 33*16kB (UMEH) 72*32kB (UMEH) 68*64kB (UMEH) 17*128kB (UMH) 11*256kB (UMEH) 4*512kB (M) 0*1024kB 1*2048kB (M) 0*4096kB = 17716kB [ 233.620903][T22922] Node 1 DMA32: 221*4kB (UM) 360*8kB (UM) 246*16kB (UME) 337*32kB (UME) 273*64kB (UME) 197*128kB (UME) 142*256kB (UME) 95*512kB (UME) 63*1024kB (UM) 12*2048kB (UM) 1*4096kB (M) = 239348kB [ 233.628432][T22922] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.632291][T22922] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 233.636631][T22922] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.640522][T22922] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 233.644665][T22922] 28736 total pagecache pages [ 233.646555][T22922] 460 pages in swap cache [ 233.648261][T22922] Free swap = 115876kB [ 233.650050][T22922] Total swap = 124996kB [ 233.652135][T22922] 524155 pages RAM [ 233.653761][T22922] 0 pages HighMem/MovableOnly [ 233.656374][T22922] 210593 pages reserved [ 233.658208][T22922] 0 pages cma reserved [ 233.703800][T22958] CIFS: iocharset name too long [ 233.706137][T22956] 9pnet_fd: Insufficient options for proto=fd [ 233.992989][T22994] bridge3: entered promiscuous mode [ 233.994932][T22994] bridge3: entered allmulticast mode [ 234.160507][T23026] __nla_validate_parse: 4 callbacks suppressed [ 234.160525][T23026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8404'. [ 234.234473][T23039] SET target dimension over the limit! [ 234.439510][T23069] random: crng reseeded on system resumption [ 234.630738][T23096] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 235.107911][T23156] netlink: 'syz.0.8466': attribute type 2 has an invalid length. [ 235.110530][T23156] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8466'. [ 235.261294][T23164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8470'. [ 235.264746][T23164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8470'. [ 235.299563][ T6107] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 235.470734][ T6107] usb 7-1: Using ep0 maxpacket: 16 [ 235.474273][ T6107] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 250, changing to 7 [ 235.478409][ T6107] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 210, changing to 7 [ 235.484937][ T6107] usb 7-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 235.490772][ T6107] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.495125][ T6107] usb 7-1: Product: syz [ 235.496801][ T6107] usb 7-1: Manufacturer: syz [ 235.498646][ T6107] usb 7-1: SerialNumber: syz [ 235.558395][T23177] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 235.739827][ T6107] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 235.752015][ T6107] usb 7-1: USB disconnect, device number 17 [ 235.755219][T23185] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.8480'. [ 235.953679][T23210] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 236.415479][T23278] ata1.00: invalid multi_count 128 ignored [ 236.566247][T23294] netlink: 'syz.3.8534': attribute type 16 has an invalid length. [ 236.569590][T23294] netlink: 'syz.3.8534': attribute type 3 has an invalid length. [ 236.573495][T23294] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8534'. [ 236.621193][T23302] program syz.0.8538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.829543][T23338] openvswitch: netlink: Key type 38 is out of range max 32 [ 236.949479][T23356] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 5 out of range (51000000..2150000000) [ 236.986513][T23364] No source specified [ 237.013385][T23367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8569'. [ 237.333959][T23415] tipc: Can't bind to reserved service type 0 [ 237.404323][T23424] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 237.412026][T23424] UDF-fs: Scanning with blocksize 2048 failed [ 237.415888][T23424] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 237.418791][T23424] UDF-fs: Scanning with blocksize 4096 failed [ 237.703170][T23470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8621'. [ 237.899099][T23500] netlink: 'syz.2.8635': attribute type 7 has an invalid length. [ 237.945995][T23507] netlink: 'syz.2.8639': attribute type 10 has an invalid length. [ 237.952889][T23507] team0: Device wg2 is of different type [ 238.000233][T23514] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 238.070721][T23526] usb usb7: usbfs: process 23526 (syz.2.8648) did not claim interface 0 before use [ 238.448159][T23586] xt_hashlimit: overflow, try lower: 18446744073709551614/129 [ 238.476302][T23590] usb usb7: usbfs: process 23590 (syz.2.8678) did not claim interface 0 before use [ 238.565691][T23605] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8687'. [ 238.734528][T23630] vlan0: entered promiscuous mode [ 238.782704][T23633] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 238.788182][T23633] block device autoloading is deprecated and will be removed. [ 238.802069][T23640] xt_hashlimit: size too large, truncated to 1048576 [ 238.851832][T23648] netlink: 'syz.3.8707': attribute type 3 has an invalid length. [ 239.330316][T23704] ALSA: mixer_oss: invalid OSS volume '' [ 239.378827][T23713] netlink: 'syz.3.8739': attribute type 1 has an invalid length. [ 239.381986][T23713] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8739'. [ 239.597376][T23745] sctp: [Deprecated]: syz.3.8755 (pid 23745) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.597376][T23745] Use struct sctp_sack_info instead [ 239.621793][T23747] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8756'. [ 239.850535][T23775] netlink: 'syz.0.8770': attribute type 1 has an invalid length. [ 239.951021][T23789] program syz.2.8778 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.372981][T23727] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 240.375802][T23727] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 240.394761][T23727] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 240.397293][T23727] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 240.398795][T23853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8809'. [ 240.403335][T23853] netlink: 11 bytes leftover after parsing attributes in process `syz.2.8809'. [ 240.412008][T23727] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 240.415039][T23727] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 240.422750][T23727] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 240.425120][T23727] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 240.471156][T23863] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8814'. [ 240.625959][T23888] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 240.629182][T23885] batadv_slave_0: left promiscuous mode [ 240.635057][T23885] batadv_slave_0: left allmulticast mode [ 240.645445][T23891] netlink: 'syz.2.8828': attribute type 61 has an invalid length. [ 240.647170][T23885] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 240.652559][T23885] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 240.733585][T23899] xt_CT: You must specify a L4 protocol and not use inversions on it [ 240.868467][T23920] netlink: 'syz.0.8842': attribute type 1 has an invalid length. [ 240.871667][T23920] netlink: 396 bytes leftover after parsing attributes in process `syz.0.8842'. [ 240.969307][T23932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8848'. [ 240.994324][T23932] 8021q: adding VLAN 0 to HW filter on device bond7 [ 241.273102][T23978] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8870'. [ 241.409906][T24002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8881'. [ 241.635216][T24044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8903'. [ 241.679963][T24049] netlink: 288 bytes leftover after parsing attributes in process `syz.2.8905'. [ 241.737073][T24055] vlan0: left promiscuous mode [ 241.747031][T24055] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 241.748863][T24057] openvswitch: netlink: Flow key attr not present in new flow. [ 241.749887][T24055] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 241.758066][T24055] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 242.341270][T24147] PM: Enabling pm_trace changes system date and time during resume. [ 242.341270][T24147] PM: Correct system time has to be restored manually after resume. [ 242.733276][T24194] bond0: Error: Cannot enslave bond to itself. [ 242.820077][T24206] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 243.297495][T24278] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.499244][T24302] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 244.091477][T24355] netlink: 'syz.0.9056': attribute type 21 has an invalid length. [ 244.093807][T24355] netlink: 'syz.0.9056': attribute type 20 has an invalid length. [ 244.151874][T24362] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 244.154265][T24362] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 244.161705][T24362] vhci_hcd vhci_hcd.0: Device attached [ 244.167696][T24363] vhci_hcd: unknown pdu 1 [ 244.169476][ T5609] vhci_hcd vhci_hcd.3: stop threads [ 244.171661][ T5609] vhci_hcd vhci_hcd.3: release socket [ 244.178794][ T5609] vhci_hcd vhci_hcd.3: disconnect device [ 244.467534][T24391] kAFS: No cell specified [ 244.674838][T24415] XFS (nullb0): Invalid superblock magic number [ 244.755176][T24428] netlink: 'syz.0.9088': attribute type 2 has an invalid length. [ 244.762008][T24429] Scaler: ================= START STATUS ================= [ 244.764364][T24429] Scaler: ================== END STATUS ================== [ 244.882335][T24446] futex_wake_op: syz.3.9098 tries to shift op by 144; fix this program [ 244.887774][T24446] futex_wake_op: syz.3.9098 tries to shift op by 144; fix this program [ 244.903228][T24442] xfrm0 speed is unknown, defaulting to 1000 [ 244.936736][T24450] netlink: 'syz.3.9100': attribute type 2 has an invalid length. [ 245.314212][T24495] kAFS: unable to lookup cell '.,c¾Ì' [ 245.377672][T24497] __nla_validate_parse: 7 callbacks suppressed [ 245.377684][T24497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9122'. [ 245.475067][T24513] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 245.818876][T24560] netlink: 'syz.2.9152': attribute type 1 has an invalid length. [ 245.945315][T24582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9163'. [ 245.949162][T24582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9163'. [ 245.949748][T24583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9165'. [ 246.073009][T24599] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 246.081313][T24603] netlink: 'syz.0.9173': attribute type 2 has an invalid length. [ 246.082582][T24602] netlink: 'syz.2.9174': attribute type 2 has an invalid length. [ 246.176951][T24619] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 246.238992][T24626] autofs4:pid:24626:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 246.333154][T24644] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 246.335900][T24644] overlayfs: overlapping lowerdir path [ 246.385014][T24651] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 246.395258][T24654] PM: Enabling pm_trace changes system date and time during resume. [ 246.395258][T24654] PM: Correct system time has to be restored manually after resume. [ 246.636596][T24689] FAT-fs (nbd0): unable to read boot sector [ 246.685842][T24697] netlink: 'syz.1.9220': attribute type 1 has an invalid length. [ 246.728569][T24699] binder: 24698:24699 ioctl 40046205 0 returned -22 [ 246.826337][T24712] MPI: mpi too large (107144 bits) [ 246.863714][T24716] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 247.160472][T24755] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 247.253346][T24768] tmpfs: User quota inode hardlimit too large. [ 247.299299][T24776] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 247.309440][T24778] netlink: 'syz.3.9259': attribute type 2 has an invalid length. [ 247.401746][T24790] program syz.2.9265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.404866][T24790] ata1.00: invalid transfer count 0 [ 247.412064][T24792] program syz.0.9266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.474248][T24800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9270'. [ 247.535979][T24809] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9274'. [ 247.623315][T24821] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 247.716787][ T148] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 247.879024][ T148] usb 5-1: unable to get BOS descriptor or descriptor too short [ 247.884622][ T148] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 247.888474][ T148] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 247.892194][ T148] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 247.895844][T24860] netlink: 'syz.3.9298': attribute type 2 has an invalid length. [ 247.898948][ T148] usb 5-1: config 129 has no interface number 0 [ 247.906328][ T148] usb 5-1: config 129 has no interface number 1 [ 247.910846][ T148] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 247.916453][ T148] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 247.921464][ T148] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 247.926249][ T148] usb 5-1: config 129 interface 135 has no altsetting 0 [ 247.928459][ T148] usb 5-1: config 129 interface 5 has no altsetting 0 [ 247.934424][ T148] usb 5-1: string descriptor 0 read error: -22 [ 247.937207][ T148] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 247.940848][ T148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.966471][ T148] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 247.972030][ T148] usb 5-1: MIDIStreaming interface descriptor not found [ 248.174243][ T29] usb 5-1: USB disconnect, device number 9 [ 248.443436][T17238] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 248.512136][T24880] syz.2.9308 (24880): drop_caches: 3 [ 248.582194][T24896] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9315'. [ 248.625151][T17238] usb 8-1: Using ep0 maxpacket: 32 [ 248.628948][T17238] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 248.631815][T17238] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 248.635302][T17238] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.641909][T17238] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 248.644933][T17238] usb 8-1: config 1 has no interface number 0 [ 248.649834][T17238] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 248.652922][T17238] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.669468][T17238] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 248.786139][T24904] xfrm0 speed is unknown, defaulting to 1000 [ 248.888254][T17238] snd_usb_pod 8-1:1.1: set_interface failed [ 248.895435][T17238] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 248.899466][T17238] snd_usb_pod 8-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 248.912272][T17238] usb 8-1: USB disconnect, device number 8 [ 249.135888][T24923] ipt_rpfilter: unknown options [ 249.356324][T24943] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 249.400912][T24947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9340'. [ 249.496373][T24954] No such timeout policy "syz1" [ 249.535239][T24959] netdevsim netdevsim0: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 249.560210][T24956] bond5: entered allmulticast mode [ 249.770924][T24985] ipt_rpfilter: unknown options [ 250.048439][T25017] siw: device registration error -23 [ 250.166524][T25033] netlink: 'syz.1.9382': attribute type 1 has an invalid length. [ 250.220024][T25043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9386'. [ 250.238399][T25046] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9388'. [ 250.438622][T25072] gre1: entered promiscuous mode [ 250.716333][T25102] bond8 (unregistering): Released all slaves [ 250.912126][T25126] xt_hashlimit: Unknown mode mask AF, kernel too old? [ 250.968680][T25132] netlink: 'syz.0.9429': attribute type 1 has an invalid length. [ 250.974712][T25132] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9429'. [ 251.011868][T25137] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 251.277386][T25158] syz.1.9439 (25158): drop_caches: 3 [ 251.522134][T25206] syz.0.9464 (25206): drop_caches: 3 [ 251.658565][T25230] netlink: zone id is out of range [ 251.662962][T25230] netlink: zone id is out of range [ 251.680685][T25234] netlink: 'syz.2.9477': attribute type 11 has an invalid length. [ 251.684688][T25234] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9477'. [ 251.768784][T25246] random: crng reseeded on system resumption [ 251.869620][T25248] syz.3.9482 (25248): drop_caches: 3 [ 252.058347][T25283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9502'. [ 252.207774][T25305] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 252.362799][ T42] audit: type=1800 audit(241.561:18909): pid=25325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9522" name="file1" dev="tmpfs" ino=12025 res=0 errno=0 [ 252.429403][T25334] usb usb9: usbfs: process 25334 (syz.1.9526) did not claim interface 0 before use [ 252.573710][T25355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9534'. [ 252.601093][T25360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9538'. [ 252.673512][T25367] bond4: option arp_interval: invalid value (18446744073709551615) [ 252.676847][T25367] bond4: option arp_interval: allowed values 0 - 2147483647 [ 252.681763][T25367] bond4 (unregistering): Released all slaves [ 252.996720][T25412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9564'. [ 253.051317][T25420] netlink: 392 bytes leftover after parsing attributes in process `syz.3.9569'. [ 253.134999][T25434] xt_hashlimit: max too large, truncated to 1048576 [ 253.183005][ T42] audit: type=1326 audit(242.338:18910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25437 comm="syz.1.9575" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 253.196783][ T42] audit: type=1326 audit(242.338:18911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25437 comm="syz.1.9575" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 253.205780][ T42] audit: type=1326 audit(242.347:18912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25437 comm="syz.1.9575" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 253.214326][ T42] audit: type=1326 audit(242.347:18913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25437 comm="syz.1.9575" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 253.230813][ T42] audit: type=1326 audit(242.347:18914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25437 comm="syz.1.9575" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54fec code=0x7ffc0000 [ 253.251093][T25446] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9578'. [ 253.327208][T25458] netlink: 'syz.2.9586': attribute type 16 has an invalid length. [ 253.329674][T25458] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.9586'. [ 253.362058][T25460] bond7: Removing last arp target with arp_interval on [ 253.365689][T25460] bond7: entered promiscuous mode [ 253.368419][T25460] 8021q: adding VLAN 0 to HW filter on device bond7 [ 253.401268][T25471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9592'. [ 253.518481][T25485] netlink: 'syz.3.9598': attribute type 3 has an invalid length. [ 253.525478][T25485] netlink: 'syz.3.9598': attribute type 1 has an invalid length. [ 253.576488][T25488] syz.1.9601 (25488): drop_caches: 3 [ 253.728136][T25514] Sensor A: ================= START STATUS ================= [ 253.733082][T25514] Sensor A: Test Pattern: 100% Red [ 253.735505][T25514] Sensor A: Show Information: None [ 253.738668][T25514] Sensor A: Vertical Flip: false [ 253.741842][T25514] Sensor A: Horizontal Flip: true [ 253.755671][T25514] Sensor A: Brightness: 128 [ 253.757650][T25514] Sensor A: Contrast: 128 [ 253.759449][T25514] Sensor A: Hue: 0 [ 253.761000][T25514] Sensor A: Saturation: 7 [ 253.762713][T25514] Sensor A: Pixel Rate: 160000000 [ 253.764463][T25514] Sensor A: Horizontal Blanking: 800 [ 253.766639][T25514] Sensor A: Vertical Blanking: 3223 [ 253.766671][T25514] Sensor A: ================== END STATUS ================== [ 254.814103][T25566] netlink: 'syz.0.9638': attribute type 2 has an invalid length. [ 254.987311][T25593] binder: binder_mmap: 25592 80a76000-80a7a000 bad vm_flags failed -1 [ 255.147310][T25614] openvswitch: netlink: Key type 30 is not supported [ 255.250195][T25634] vivid-007: disconnect [ 255.253095][T25633] vivid-007: reconnect [ 255.427393][T25650] syz.2.9678 (25650): drop_caches: 3 [ 255.644689][T25696] netlink: 'syz.3.9700': attribute type 3 has an invalid length. [ 256.072467][T25760] netlink: 'syz.3.9729': attribute type 1 has an invalid length. [ 256.295472][T25797] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 256.440601][T25819] program syz.1.9755 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.481122][T25825] dlm: plock device version mismatch: kernel (1.2.0), user (1.1792.0) [ 256.523781][T25831] No source specified [ 256.604128][T25845] __nla_validate_parse: 3 callbacks suppressed [ 256.604144][T25845] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9767'. [ 256.610387][T25845] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 256.634818][T25847] netlink: 768 bytes leftover after parsing attributes in process `syz.3.9769'. [ 256.917233][T25897] program syz.2.9794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.943123][T25899] xt_TPROXY: Can be used only with -p tcp or -p udp [ 256.955785][T25901] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.080005][T25921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9805'. [ 257.127696][T25926] bridge_slave_0: left allmulticast mode [ 257.130208][T25926] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.140184][T25926] bridge_slave_1: left allmulticast mode [ 257.143269][T25926] bridge_slave_1: left promiscuous mode [ 257.145592][T25926] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.160581][T25926] bond0: (slave bond_slave_0): Releasing backup interface [ 257.168113][T25926] bond0: (slave bond_slave_1): Releasing backup interface [ 257.181306][T25926] team0: Port device team_slave_0 removed [ 257.191687][T25926] team0: Port device team_slave_1 removed [ 257.194800][T25926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.198310][T25926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.206377][T25926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.212070][T25926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.225352][T25926] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 257.351948][T25949] netlink: 'syz.2.9820': attribute type 3 has an invalid length. [ 257.355420][T25949] netlink: 'syz.2.9820': attribute type 1 has an invalid length. [ 257.358611][T25949] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9820'. [ 257.361564][T25949] NCSI netlink: No device for ifindex 0 [ 257.370024][T25953] netlink: 'syz.1.9821': attribute type 12 has an invalid length. [ 257.572439][T25976] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 258.053684][T26063] netlink: 'syz.0.9874': attribute type 2 has an invalid length. [ 258.116678][T26073] RDS: rds_bind could not find a transport for ::ffff:172.20.20.48, load rds_tcp or rds_rdma? [ 258.238116][ T8447] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 258.371804][T26103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9893'. [ 258.402878][ T8447] usb 6-1: Using ep0 maxpacket: 16 [ 258.406839][ T8447] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.410917][ T8447] usb 6-1: config 0 interface 0 has no altsetting 0 [ 258.414016][ T8447] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 258.418085][ T8447] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.423376][ T8447] usb 6-1: config 0 descriptor?? [ 258.434391][ T8447] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 258.495415][T26117] 9p: Unknown access argument 18446744073709551615: -34 [ 258.533662][T26123] ip6t_srh: unknown srh match flags 448C [ 258.646819][T26133] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 258.647689][ T6052] usb 6-1: USB disconnect, device number 7 [ 259.345090][T26159] netlink: 'syz.0.9921': attribute type 2 has an invalid length. [ 259.348244][T26159] netlink: 'syz.0.9921': attribute type 1 has an invalid length. [ 259.351191][T26159] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9921'. [ 259.535250][T26183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9933'. [ 259.738617][T26214] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9948'. [ 259.805276][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 259.812262][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 259.814952][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 259.817807][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 259.820144][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 259.822946][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 259.825902][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 259.828524][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 259.831379][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 259.833601][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 259.851317][ T9] hid-generic 0006:0004:0009.0002: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 259.880443][T26233] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9957'. [ 259.962446][T26230] fido_id[26230]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 260.656605][T26350] binder: 26348:26350 ioctl c018620c 80000240 returned -1 [ 260.684778][T26353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10016'. [ 261.012819][T26402] bridge0: port 3(erspan0) entered blocking state [ 261.015367][T26402] bridge0: port 3(erspan0) entered forwarding state [ 261.061156][T26402] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.063472][T26402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.067816][T26402] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.070171][T26402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.134661][T26424] fuse: Bad value for 'fd' [ 261.394189][T26469] misc userio: Invalid payload size [ 261.404297][T26470] ubi16: attaching mtd0 [ 261.414933][T26470] ubi16: scanning is finished [ 261.416683][T26470] ubi16: empty MTD device detected [ 261.596130][T26496] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 261.616617][T26500] dlm: non-version read from control device 36 [ 261.640656][T26470] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 261.643195][T26470] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 261.645802][T26470] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 261.647048][T26503] xt_CONNSECMARK: invalid mode: 5 [ 261.647991][T26470] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 261.654994][T26470] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 261.657204][T26470] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 261.660009][T26470] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3212755674 [ 261.663974][T26470] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 261.669907][T26501] ubi16: background thread "ubi_bgt16d" started, PID 26501 [ 261.844468][T26523] CIFS mount error: No usable UNC path provided in device string! [ 261.844468][T26523] [ 261.848965][T26523] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 262.026788][T26551] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 262.128433][T26564] 8021q: adding VLAN 0 to HW filter on device bond8 [ 262.195664][T26580] __nla_validate_parse: 5 callbacks suppressed [ 262.195676][T26580] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10128'. [ 262.285742][T26594] netlink: 'syz.3.10134': attribute type 8 has an invalid length. [ 262.417468][T26608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10141'. [ 263.267503][T26659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10166'. [ 263.325572][T26669] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10172'. [ 263.482467][T26698] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 263.482916][T26699] netlink: 19 bytes leftover after parsing attributes in process `syz.0.10187'. [ 263.488936][T26699] netlink: 19 bytes leftover after parsing attributes in process `syz.0.10187'. [ 263.978288][T26779] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 264.013923][T26783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10229'. [ 264.055278][T26791] bond0: Error: CAN devices cannot be enslaved [ 264.097779][T26799] NILFS (nbd1): device size too small [ 264.108155][T26801] netlink: 'syz.0.10237': attribute type 1 has an invalid length. [ 264.111487][T26801] netlink: 384 bytes leftover after parsing attributes in process `syz.0.10237'. [ 264.113182][T26803] tmpfs: Bad value for 'mpol' [ 264.194679][T26811] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 264.197097][T26811] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 264.203356][T26811] vhci_hcd vhci_hcd.0: Device attached [ 264.211406][T26812] vhci_hcd: connection closed [ 264.212249][ T6045] vhci_hcd vhci_hcd.2: stop threads [ 264.216324][ T6045] vhci_hcd vhci_hcd.2: release socket [ 264.218403][ T6045] vhci_hcd vhci_hcd.2: disconnect device [ 264.301228][T26832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10251'. [ 264.399594][T26848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 264.457019][T26856] netlink: 772 bytes leftover after parsing attributes in process `syz.1.10263'. [ 264.617901][T26882] No source specified [ 264.799432][T26916] netlink: 'syz.3.10293': attribute type 7 has an invalid length. [ 264.806741][T26916] netlink: 'syz.3.10293': attribute type 8 has an invalid length. [ 264.816992][T26919] netlink: 'syz.2.10295': attribute type 1 has an invalid length. [ 264.864961][T26928] netlink: 'syz.0.10299': attribute type 9 has an invalid length. [ 265.001208][T26942] /dev/sg0: Can't lookup blockdev [ 265.037800][T26948] tmpfs: Group quota block hardlimit too large. [ 265.047293][T26950] netlink: 'syz.3.10310': attribute type 21 has an invalid length. [ 265.070923][T12043] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 265.121815][T26961] netlink: 'syz.2.10315': attribute type 39 has an invalid length. [ 265.137014][T26961] hsr_slave_0 (unregistering): left promiscuous mode [ 265.232542][T12043] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 265.241993][T12043] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 265.248357][T12043] usb 6-1: config 0 interface 0 has no altsetting 0 [ 265.254956][T12043] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 265.260142][T12043] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 265.263920][T12043] usb 6-1: Product: syz [ 265.265232][T12043] usb 6-1: Manufacturer: syz [ 265.266821][T12043] usb 6-1: SerialNumber: syz [ 265.269695][T12043] usb 6-1: config 0 descriptor?? [ 265.272838][T12043] hub 6-1:0.0: bad descriptor, ignoring hub [ 265.277122][T12043] hub 6-1:0.0: probe with driver hub failed with error -5 [ 265.280825][T12043] usb 6-1: selecting invalid altsetting 0 [ 265.574513][T27024] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 265.616450][ T9] usb 6-1: USB disconnect, device number 8 [ 265.736450][T27051] erspan0: left allmulticast mode [ 265.738692][T27051] erspan0: left promiscuous mode [ 265.740776][T27051] bridge0: port 3(erspan0) entered disabled state [ 265.768119][T27051] bridge_slave_0: left allmulticast mode [ 265.770405][T27051] bridge_slave_0: left promiscuous mode [ 265.772611][T27051] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.781789][T27051] bridge_slave_1: left allmulticast mode [ 265.788697][T27051] bridge_slave_1: left promiscuous mode [ 265.790952][T27051] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.803849][T27051] bond0: (slave 30): Releasing backup interface [ 265.811510][T27051] bond0: (slave bond_slave_1): Releasing backup interface [ 265.821030][T27051] team0: Port device team_slave_0 removed [ 265.827940][T27051] team0: Port device team_slave_1 removed [ 265.832750][T27051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.835967][T27051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.840394][T27051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.843481][T27051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.848361][T27051] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 265.984890][T27079] ================================================================== [ 265.988208][T27079] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x2063/0x4160 [ 265.991759][T27079] Write of size 2880 at addr ffffc90007ef3500 by task vivid-000-vid-c/27079 [ 265.996969][T27079] [ 265.997783][T27079] CPU: 1 UID: 0 PID: 27079 Comm: vivid-000-vid-c Not tainted syzkaller #0 PREEMPT(full) [ 265.997798][T27079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 265.997805][T27079] Call Trace: [ 265.997809][T27079] [ 265.997814][T27079] dump_stack_lvl+0x100/0x190 [ 265.997832][T27079] print_report+0x13d/0x4b0 [ 265.997851][T27079] ? _raw_spin_lock_irqsave+0x52/0x60 [ 265.997868][T27079] ? tpg_fill_plane_buffer+0x2063/0x4160 [ 265.997883][T27079] kasan_report+0xdf/0x1c0 [ 265.997900][T27079] ? tpg_fill_plane_buffer+0x2063/0x4160 [ 265.997916][T27079] kasan_check_range+0x10f/0x1e0 [ 265.997934][T27079] __asan_memcpy+0x3c/0x60 [ 265.997945][T27079] tpg_fill_plane_buffer+0x2063/0x4160 [ 265.997967][T27079] vivid_fillbuff+0x963/0x3ff0 [ 265.997980][T27079] ? __lock_acquire+0x49f/0x1a40 [ 265.997994][T27079] ? __pfx_vivid_fillbuff+0x10/0x10 [ 265.998005][T27079] ? __lock_acquire+0x49f/0x1a40 [ 265.998019][T27079] ? v4l2_ctrl_request_setup+0x45a/0xa60 [ 265.998030][T27079] ? lockdep_hardirqs_on+0x78/0x100 [ 265.998048][T27079] ? vivid_thread_vid_cap_tick+0x81b/0x1470 [ 265.998060][T27079] vivid_thread_vid_cap_tick+0x81b/0x1470 [ 265.998074][T27079] vivid_thread_vid_cap+0x454/0xd70 [ 265.998087][T27079] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 265.998099][T27079] ? do_raw_spin_lock+0x128/0x260 [ 265.998111][T27079] ? find_held_lock+0x2b/0x80 [ 265.998125][T27079] ? __kthread_parkme+0xbb/0x230 [ 265.998138][T27079] ? rcu_is_watching+0x12/0xc0 [ 265.998152][T27079] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 265.998168][T27079] ? lockdep_hardirqs_on+0x78/0x100 [ 265.998185][T27079] ? __kthread_parkme+0x18c/0x230 [ 265.998198][T27079] ? kthread+0x13a/0x450 [ 265.998212][T27079] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 265.998223][T27079] kthread+0x370/0x450 [ 265.998238][T27079] ? __pfx_kthread+0x10/0x10 [ 265.998253][T27079] ret_from_fork+0x72b/0xd50 [ 265.998267][T27079] ? __pfx_ret_from_fork+0x10/0x10 [ 265.998280][T27079] ? native_load_gs_index+0x1e/0xc0 [ 265.998298][T27079] ? __switch_to+0x800/0x10f0 [ 265.998307][T27079] ? __pfx_kthread+0x10/0x10 [ 265.998322][T27079] ret_from_fork_asm+0x1a/0x30 [ 265.998345][T27079] [ 265.998349][T27079] [ 266.076690][T27079] The buggy address belongs to a vmalloc virtual mapping [ 266.078842][T27079] The buggy address belongs to the physical page: [ 266.080827][T27079] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x70c7a [ 266.084392][T27079] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 266.087353][T27079] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 266.090876][T27079] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 266.094369][T27079] page dumped because: kasan: bad access detected [ 266.097038][T27079] page_owner tracks the page as allocated [ 266.099136][T27079] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 27078, tgid 27077 (syz.2.10371), ts 265972625452, free_ts 265972574768 [ 266.106052][T27079] post_alloc_hook+0xfd/0x120 [ 266.107976][T27079] get_page_from_freelist+0xf48/0x3530 [ 266.110232][T27079] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 266.112411][T27079] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 266.114622][T27079] alloc_pages_bulk_mempolicy_noprof+0x255/0x1270 [ 266.117227][T27079] __vmalloc_node_range_noprof+0x69d/0x1630 [ 266.119706][T27079] vmalloc_user_noprof+0x9e/0xe0 [ 266.121775][T27079] vb2_vmalloc_alloc+0x135/0x410 [ 266.123912][T27079] __vb2_queue_alloc+0x8d5/0x1160 [ 266.126013][T27079] vb2_core_reqbufs+0x899/0xf30 [ 266.128052][T27079] __vb2_init_fileio+0x32d/0x1000 [ 266.130226][T27079] __vb2_perform_fileio+0x9ba/0x1380 [ 266.132531][T27079] vb2_fop_read+0x211/0x520 [ 266.134444][T27079] v4l2_read+0x229/0x2c0 [ 266.136202][T27079] vfs_readv+0x5d8/0x8d0 [ 266.138011][T27079] do_preadv+0x1ac/0x270 [ 266.139799][T27079] page last free pid 27078 tgid 27077 stack trace: [ 266.142446][T27079] __free_frozen_pages+0x79f/0x1090 [ 266.144547][T27079] __kasan_populate_vmalloc+0x1ea/0x210 [ 266.146900][T27079] alloc_vmap_area+0x95d/0x2bb0 [ 266.148426][T27079] __get_vm_area_node+0x1ca/0x330 [ 266.150045][T27079] __vmalloc_node_range_noprof+0x228/0x1630 [ 266.152223][T27079] vmalloc_user_noprof+0x9e/0xe0 [ 266.154201][T27079] vb2_vmalloc_alloc+0x135/0x410 [ 266.156256][T27079] __vb2_queue_alloc+0x8d5/0x1160 [ 266.158343][T27079] vb2_core_reqbufs+0x899/0xf30 [ 266.160430][T27079] __vb2_init_fileio+0x32d/0x1000 [ 266.162497][T27079] __vb2_perform_fileio+0x9ba/0x1380 [ 266.164654][T27079] vb2_fop_read+0x211/0x520 [ 266.166612][T27079] v4l2_read+0x229/0x2c0 [ 266.168397][T27079] vfs_readv+0x5d8/0x8d0 [ 266.170226][T27079] do_preadv+0x1ac/0x270 [ 266.171979][T27079] __do_fast_syscall_32+0xe7/0x970 [ 266.174138][T27079] [ 266.175150][T27079] Memory state around the buggy address: [ 266.177457][T27079] ffffc90007ef3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 266.180728][T27079] ffffc90007ef3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 266.183987][T27079] >ffffc90007ef4000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 266.187182][T27079] ^ [ 266.188893][T27079] ffffc90007ef4080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 266.192243][T27079] ffffc90007ef4100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 266.195509][T27079] ================================================================== [ 266.212151][T27079] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 266.214773][T27079] CPU: 1 UID: 0 PID: 27079 Comm: vivid-000-vid-c Not tainted syzkaller #0 PREEMPT(full) [ 266.218591][T27079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 266.222352][T27079] Call Trace: [ 266.223563][T27079] [ 266.224493][T27079] dump_stack_lvl+0x100/0x190 [ 266.225991][T27079] vpanic+0x552/0x970 [ 266.227424][T27079] ? __pfx_vpanic+0x10/0x10 [ 266.228944][T27079] ? mark_held_locks+0x40/0x70 [ 266.230680][T27079] ? tpg_fill_plane_buffer+0x2063/0x4160 [ 266.232938][T27079] panic+0xd1/0xe0 [ 266.234412][T27079] ? __pfx_panic+0x10/0x10 [ 266.236155][T27079] ? tpg_fill_plane_buffer+0x2063/0x4160 [ 266.238335][T27079] ? preempt_schedule_common+0x42/0xc0 [ 266.240257][T27079] ? check_panic_on_warn+0x1f/0x90 [ 266.242123][T27079] check_panic_on_warn.cold+0x19/0x34 [ 266.244290][T27079] end_report.part.0+0x3a/0x90 [ 266.246338][T27079] kasan_report.cold+0xe/0x18 [ 266.248246][T27079] ? tpg_fill_plane_buffer+0x2063/0x4160 [ 266.250537][T27079] kasan_check_range+0x10f/0x1e0 [ 266.252558][T27079] __asan_memcpy+0x3c/0x60 [ 266.254200][T27079] tpg_fill_plane_buffer+0x2063/0x4160 [ 266.256268][T27079] vivid_fillbuff+0x963/0x3ff0 [ 266.258210][T27079] ? __lock_acquire+0x49f/0x1a40 [ 266.260196][T27079] ? __pfx_vivid_fillbuff+0x10/0x10 [ 266.262284][T27079] ? __lock_acquire+0x49f/0x1a40 [ 266.264281][T27079] ? v4l2_ctrl_request_setup+0x45a/0xa60 [ 266.266530][T27079] ? lockdep_hardirqs_on+0x78/0x100 [ 266.268673][T27079] ? vivid_thread_vid_cap_tick+0x81b/0x1470 [ 266.271148][T27079] vivid_thread_vid_cap_tick+0x81b/0x1470 [ 266.273521][T27079] vivid_thread_vid_cap+0x454/0xd70 [ 266.275660][T27079] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 266.277965][T27079] ? do_raw_spin_lock+0x128/0x260 [ 266.280021][T27079] ? find_held_lock+0x2b/0x80 [ 266.281953][T27079] ? __kthread_parkme+0xbb/0x230 [ 266.283995][T27079] ? rcu_is_watching+0x12/0xc0 [ 266.285845][T27079] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 266.288004][T27079] ? lockdep_hardirqs_on+0x78/0x100 [ 266.290115][T27079] ? __kthread_parkme+0x18c/0x230 [ 266.292251][T27079] ? kthread+0x13a/0x450 [ 266.294049][T27079] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 266.296424][T27079] kthread+0x370/0x450 [ 266.298135][T27079] ? __pfx_kthread+0x10/0x10 [ 266.300010][T27079] ret_from_fork+0x72b/0xd50 [ 266.301930][T27079] ? __pfx_ret_from_fork+0x10/0x10 [ 266.304003][T27079] ? native_load_gs_index+0x1e/0xc0 [ 266.305919][T27079] ? __switch_to+0x800/0x10f0 [ 266.307920][T27079] ? __pfx_kthread+0x10/0x10 [ 266.309853][T27079] ret_from_fork_asm+0x1a/0x30 [ 266.311876][T27079] [ 266.314016][T27079] Kernel Offset: disabled [ 266.315806][T27079] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:45:12 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81fc501d RDX=ffff888028e80000 RSI=ffffffff81fc4ff7 RDI=ffff888028e80000 RBP=ffff88802b341380 RSP=ffffc90006f97558 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed1005668271 R14=0000000000000001 R15=ffff88802b23c9c0 RIP=ffffffff81fc500b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880970e7000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7fd55b8 CR3=0000000054dd4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8584b945 RDI=ffffffff9b4eeca0 RBP=ffffffff9b4eec60 RSP=ffffc9000c097188 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000064 R14=ffffffff9b1ef22f R15=ffffffff8584b8e0 RIP=ffffffff8584b96f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880971e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f74762f0 CR3=0000000054dd4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000258 00000190ffffffdb ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffea000193d480 RCX=ffffffff826426da RDX=0000000000000000 RSI=00000000000000f4 RDI=ffff888073272540 RBP=ffffea000193d480 RSP=ffffc9000e65f4e8 R8 =0000000000000005 R9 =00000000000000f4 R10=0000000000000000 R11=0000000000000000 R12=0000000000000001 R13=ffff88802a833680 R14=0000000000000000 R15=ffffea000193d4b0 RIP=ffffffff826426da RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880972e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f953f1225d0 CR3=00000000518d6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000288d 0000001400000000 0000000000000000 0000000000000017 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800000500020008 0004080002080008 0174d40400000059 0000000100000001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030fffffffff0200 02080800060179bc 0fffffffff022003 bf70639fd5abf5db ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8308af85f39f9dfc 0f4830fc0d2a98ac 205ab6e37bdef160 0000000102800204 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a4e2080001000000 0806060124e60000 0000000001ffffff fffffffffff30802 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a003000000000000 0000003065676469 726201ffffffffff ffffffdf08028003 ZMM24=c3e1ea08c3e1ea08 c3e1ea08c3e1ea08 c3e1ea08c3e1ea08 c3e1ea08c3e1ea08 c3e1ea08c3e1ea08 c3e1ea08c3e1ea08 c3e1ea08c3e1ea08 c3e1ea08c3e1ea08 ZMM25=89c4bd8389c4bd83 89c4bd8389c4bd83 89c4bd8389c4bd83 89c4bd8389c4bd83 89c4bd8389c4bd83 89c4bd8389c4bd83 89c4bd8389c4bd83 89c4bd8389c4bd83 ZMM26=bb7dd640bb7dd640 bb7dd640bb7dd640 bb7dd640bb7dd640 bb7dd640bb7dd640 bb7dd640bb7dd640 bb7dd640bb7dd640 bb7dd640bb7dd640 bb7dd640bb7dd640 ZMM27=9e5e94ad9e5e94ad 9e5e94ad9e5e94ad 9e5e94ad9e5e94ad 9e5e94ad9e5e94ad 9e5e94ad9e5e94ad 9e5e94ad9e5e94ad 9e5e94ad9e5e94ad 9e5e94ad9e5e94ad ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=8c2d00008c2d0000 8c2d00008c2d0000 8c2d00008c2d0000 8c2d00008c2d0000 8c2d00008c2d0000 8c2d00008c2d0000 8c2d00008c2d0000 8c2d00008c2d0000 info registers vcpu 3 CPU#3 RAX=00000000000d0977 RBX=ffff88801bfd2540 RCX=ffffffff8b9a42d5 RDX=0000000000000000 RSI=ffffffff8df5902e RDI=ffffffff8c1e8f80 RBP=ffffed10037fa4a8 RSP=ffffc9000048fe00 R8 =0000000000000001 R9 =ffffed10056a678d R10=ffff88802b533c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8b9a289f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880973e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7385734 CR3=000000004fd79000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000