last executing test programs: 1m46.380861739s ago: executing program 3 (id=457): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) 1m39.434351368s ago: executing program 3 (id=459): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1m39.428901171s ago: executing program 3 (id=461): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffbff, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x20000000) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x4e24, 0x2, 0xa, 0xe0}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@local, @in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m39.428595763s ago: executing program 3 (id=462): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3fe, 0x0) fsopen(&(0x7f0000000180)='binfmt_misc\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m39.428095591s ago: executing program 3 (id=464): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) 1m39.427209871s ago: executing program 3 (id=467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r1, 0x7, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 1m30.680208516s ago: executing program 32 (id=467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r1, 0x7, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 20.749465902s ago: executing program 4 (id=2264): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000140)={r1}) 20.696850657s ago: executing program 4 (id=2269): r0 = syz_io_uring_setup(0x1895, &(0x7f0000000000)={0x0, 0x854d, 0xc00, 0x1, 0x2b9}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000008c0)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 20.65766346s ago: executing program 4 (id=2273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB="60000000020605000000001e00000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640002000000800134000000000050005000a00000012000300686173683a6e6574"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4008400) 20.625226348s ago: executing program 4 (id=2275): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 20.581156409s ago: executing program 4 (id=2279): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x1c, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040803}, 0x4000010) 20.277287781s ago: executing program 4 (id=2295): r0 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') lseek(r0, 0xfffffffffffffffd, 0x1) fcntl$lock(r0, 0x6, &(0x7f0000003980)={0x0, 0x1, 0x9, 0x4}) 20.177474256s ago: executing program 33 (id=2295): r0 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') lseek(r0, 0xfffffffffffffffd, 0x1) fcntl$lock(r0, 0x6, &(0x7f0000003980)={0x0, 0x1, 0x9, 0x4}) 13.725226163s ago: executing program 5 (id=2545): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah', 0x4) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000180)) 13.698557016s ago: executing program 5 (id=2548): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r0, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) ioctl$BLKRRPART(r0, 0x125f, 0x1f) 13.463113881s ago: executing program 5 (id=2555): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 13.376854963s ago: executing program 5 (id=2558): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 13.369313751s ago: executing program 5 (id=2561): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) 13.049848879s ago: executing program 5 (id=2566): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000200)="f5c89e1e", 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x2, 0x4) 12.966947339s ago: executing program 34 (id=2566): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000200)="f5c89e1e", 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x2, 0x4) 354.814954ms ago: executing program 2 (id=3013): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000000000000e0000000c00018008000100", @ANYRES32=0x8, @ANYBLOB="0c000280"], 0x2c}}, 0x0) 354.654411ms ago: executing program 6 (id=3014): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0xff09, 0x0) 300.052699ms ago: executing program 2 (id=3015): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) close(0x3) 299.840689ms ago: executing program 6 (id=3016): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x221, 0x70bd2a, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x40000) 299.588762ms ago: executing program 2 (id=3018): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0) 297.521314ms ago: executing program 6 (id=3019): io_setup(0xe70, &(0x7f0000000500)=0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x80402, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x1b, 0xffffffff}]) 260.341208ms ago: executing program 0 (id=3021): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{0x303}, "ab4fc659949ab924", "794cc3819b2325af225bcc55d7711a8f3b1123673f4f98d74ebae07697f22c28", "94dbed0a", "7a3ae7b1c7e44fe9"}, 0x38) 236.874224ms ago: executing program 0 (id=3023): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x66032, 0xffffffffffffffff, 0x40000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000006000/0x2000)=nil, 0x3) 194.608792ms ago: executing program 2 (id=3024): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 194.321769ms ago: executing program 1 (id=3025): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x44000000}, 0x20044040) 194.195906ms ago: executing program 1 (id=3026): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000800)="dfb3", 0x2}], 0x1}, 0x4001) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/50, 0x32}], 0x1}, 0x85}], 0x1, 0x10002, 0x0) 191.832006ms ago: executing program 0 (id=3027): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) io_setup(0x9, &(0x7f0000000240)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 167.154887ms ago: executing program 6 (id=3028): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x1, 0x13838}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x45}, 0x40000) 165.123162ms ago: executing program 2 (id=3029): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x8000, 0x20, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x6, 0x4, 0x0, @remote, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x40, 0x1, 0x8, 0xe, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x68, 0x0, 0x3, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 162.537654ms ago: executing program 1 (id=3030): r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000140)=0x80000001, 0x4) 129.980838ms ago: executing program 1 (id=3031): socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) 82.72791ms ago: executing program 1 (id=3032): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0)=@sha1={0x1, "ca216891e220ecfc0c1d3ae6ce7c38427759547c"}, 0x15, 0x1) 81.869732ms ago: executing program 0 (id=3033): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3, @none, 0x0, 0x2}, 0xe) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100)=0x3, 0x2) 34.347516ms ago: executing program 6 (id=3034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, 'P'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 34.101114ms ago: executing program 0 (id=3035): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) 22.701698ms ago: executing program 2 (id=3036): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2d, 0x3, 0x97, 0xfffffffa, 0x4, @remote, @loopback, 0x40, 0x7, 0x3, 0x7}}) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070280000f00", 0x33a) 21.527303ms ago: executing program 6 (id=3037): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x0, 0x0, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xaa}]}, 0x3c}}, 0x0) 3.974632ms ago: executing program 1 (id=3038): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r0, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) cachestat(r0, &(0x7f0000000040)={0x5, 0x6d4}, &(0x7f0000000080), 0x0) 0s ago: executing program 0 (id=3046): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000080)={0x8, 0x1, 0x609152b0, 0x2, 0xe, "3eccd20005000000000000000100"}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:54175' (ED25519) to the list of known hosts. [ 41.941793][ T5712] cgroup: Unknown subsys name 'net' [ 42.127632][ T5712] cgroup: Unknown subsys name 'cpuset' [ 42.134331][ T5712] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.083453][ T5712] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.989053][ T5742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.990155][ T5745] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.990964][ T5744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.993679][ T5743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.993915][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.993926][ T5744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.996471][ T5744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.996922][ T5743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.997321][ T5743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.998106][ T5743] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.998680][ T5743] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.999794][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.999902][ T5743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.002428][ T5744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.004809][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.006104][ T5744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.007298][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.007663][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.036974][ T5743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.041352][ T5743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.625822][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.628633][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.630850][ T5728] bridge_slave_0: entered allmulticast mode [ 47.633904][ T5728] bridge_slave_0: entered promiscuous mode [ 47.643843][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.646668][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.649400][ T5728] bridge_slave_1: entered allmulticast mode [ 47.652557][ T5728] bridge_slave_1: entered promiscuous mode [ 47.675853][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.678172][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.680470][ T5735] bridge_slave_0: entered allmulticast mode [ 47.683222][ T5735] bridge_slave_0: entered promiscuous mode [ 47.705146][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.707593][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.709853][ T5735] bridge_slave_1: entered allmulticast mode [ 47.713179][ T5735] bridge_slave_1: entered promiscuous mode [ 47.745063][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.753412][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.780518][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.791489][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.794440][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.796846][ T5729] bridge_slave_0: entered allmulticast mode [ 47.799490][ T5729] bridge_slave_0: entered promiscuous mode [ 47.802808][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.805498][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.807969][ T5730] bridge_slave_0: entered allmulticast mode [ 47.810884][ T5730] bridge_slave_0: entered promiscuous mode [ 47.815077][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.834094][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.837012][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.839864][ T5729] bridge_slave_1: entered allmulticast mode [ 47.843601][ T5729] bridge_slave_1: entered promiscuous mode [ 47.860261][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.863299][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.866081][ T5730] bridge_slave_1: entered allmulticast mode [ 47.869684][ T5730] bridge_slave_1: entered promiscuous mode [ 47.881948][ T5728] team0: Port device team_slave_0 added [ 47.897685][ T5735] team0: Port device team_slave_0 added [ 47.901091][ T5735] team0: Port device team_slave_1 added [ 47.904583][ T5728] team0: Port device team_slave_1 added [ 47.908275][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.913616][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.929482][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.963269][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.966087][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.975755][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.982204][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.006934][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.009558][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.021034][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.031473][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.034360][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.044426][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.049987][ T5729] team0: Port device team_slave_0 added [ 48.059164][ T5729] team0: Port device team_slave_1 added [ 48.062337][ T5730] team0: Port device team_slave_0 added [ 48.067482][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.070336][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.080557][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.103852][ T5730] team0: Port device team_slave_1 added [ 48.117374][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.119581][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.127597][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.131454][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.134664][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.144526][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.155035][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.157272][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.165422][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.180440][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.182764][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.192177][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.220272][ T5728] hsr_slave_0: entered promiscuous mode [ 48.223219][ T5728] hsr_slave_1: entered promiscuous mode [ 48.232062][ T5735] hsr_slave_0: entered promiscuous mode [ 48.234574][ T5735] hsr_slave_1: entered promiscuous mode [ 48.236685][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 48.238424][ T5735] Cannot create hsr debugfs directory [ 48.270032][ T5729] hsr_slave_0: entered promiscuous mode [ 48.272465][ T5729] hsr_slave_1: entered promiscuous mode [ 48.274985][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 48.276861][ T5729] Cannot create hsr debugfs directory [ 48.314978][ T5730] hsr_slave_0: entered promiscuous mode [ 48.317936][ T5730] hsr_slave_1: entered promiscuous mode [ 48.320622][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 48.322871][ T5730] Cannot create hsr debugfs directory [ 48.645785][ T5735] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.656340][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.659578][ T5735] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.665245][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.668647][ T5735] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.673294][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.676082][ T5735] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.680641][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.723222][ T5728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.727325][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.730081][ T5728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.734800][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.738409][ T5728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.742940][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.745859][ T5728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.751146][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.816358][ T5730] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.820428][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.823480][ T5730] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.827387][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.830201][ T5730] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.836241][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.841606][ T5730] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.847428][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.924739][ T5729] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.928799][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.931679][ T5729] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.936174][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.939603][ T5729] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.945377][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.948248][ T5729] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.952453][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.981049][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.023969][ T5743] Bluetooth: hci0: command tx timeout [ 49.024177][ T64] Bluetooth: hci1: command tx timeout [ 49.031271][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.033186][ T64] Bluetooth: hci3: command tx timeout [ 49.059625][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.076680][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.079243][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.095009][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.098698][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.101048][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.109982][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.113504][ T64] Bluetooth: hci2: command tx timeout [ 49.121107][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.123650][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.127307][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.129603][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.162507][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.183753][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.186036][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.209243][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.211575][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.225017][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.256879][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.275079][ T5730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.283250][ T235] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.285564][ T235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.298910][ T235] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.301220][ T235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.484484][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.503729][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.522454][ T5735] veth0_vlan: entered promiscuous mode [ 49.538574][ T5735] veth1_vlan: entered promiscuous mode [ 49.554084][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.560020][ T5730] veth0_vlan: entered promiscuous mode [ 49.575065][ T5730] veth1_vlan: entered promiscuous mode [ 49.581854][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.602209][ T5735] veth0_macvtap: entered promiscuous mode [ 49.607398][ T5735] veth1_macvtap: entered promiscuous mode [ 49.625951][ T5728] veth0_vlan: entered promiscuous mode [ 49.636071][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.645892][ T5730] veth0_macvtap: entered promiscuous mode [ 49.650561][ T5728] veth1_vlan: entered promiscuous mode [ 49.654913][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.668459][ T5729] veth0_vlan: entered promiscuous mode [ 49.671326][ T5730] veth1_macvtap: entered promiscuous mode [ 49.692374][ T5729] veth1_vlan: entered promiscuous mode [ 49.702661][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.717642][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.748575][ T5728] veth0_macvtap: entered promiscuous mode [ 49.755263][ T5728] veth1_macvtap: entered promiscuous mode [ 49.755589][ T107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.760553][ T107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.788645][ T5729] veth0_macvtap: entered promiscuous mode [ 49.809891][ T5729] veth1_macvtap: entered promiscuous mode [ 49.814013][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.816670][ T107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.819325][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.822983][ T107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.865278][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.868489][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.868650][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.872983][ T5601] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.883154][ T5601] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.888191][ T5735] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.900777][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.906516][ T5735] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.912235][ T5735] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.918288][ T5735] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.930593][ T5735] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.937164][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.939727][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.953591][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.956945][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.983347][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.016581][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.021038][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.021617][ T107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.023520][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.023551][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.023572][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.023593][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.023611][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.023630][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.023648][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.023667][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.023685][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.023704][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.030812][ T107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.083259][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.104954][ T5737] IPVS: starting estimator thread 0... [ 50.107265][ T107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.107279][ T107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.113166][ T5885] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 50.145105][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.174695][ T5879] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.212858][ T5886] IPVS: using max 45 ests per chain, 108000 per kthread [ 50.260188][ T5902] overlayfs: conflicting lowerdir path [ 50.296928][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 50.299712][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 50.302569][ T5906] netlink: 'syz.2.14': attribute type 11 has an invalid length. [ 50.485256][ T5928] nftables ruleset with unbound set [ 50.631992][ T5946] vcan1: entered promiscuous mode [ 50.634918][ T5946] vcan1: entered allmulticast mode [ 50.824949][ T5962] capability: warning: `syz.0.41' uses deprecated v2 capabilities in a way that may be insecure [ 50.875223][ T5966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.43'. [ 50.879195][ T5966] netlink: 'syz.2.43': attribute type 1 has an invalid length. [ 51.027895][ T5982] Zero length message leads to an empty skb [ 51.103628][ T64] Bluetooth: hci1: command tx timeout [ 51.105943][ T5743] Bluetooth: hci3: command tx timeout [ 51.105968][ T5742] Bluetooth: hci0: command tx timeout [ 51.148863][ T5999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 51.193452][ T5742] Bluetooth: hci2: command tx timeout [ 51.682911][ T5737] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.843616][ T5737] usb 6-1: Using ep0 maxpacket: 32 [ 51.846718][ T5737] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 51.852163][ T5737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 51.856157][ T5737] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 51.860492][ T5737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 51.865754][ T5737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 51.871732][ T5737] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.874416][ T5737] usb 6-1: Product: syz [ 51.875664][ T5737] usb 6-1: Manufacturer: syz [ 51.877123][ T5737] usb 6-1: SerialNumber: syz [ 51.881640][ T5737] usb 6-1: config 0 descriptor?? [ 51.886474][ T6027] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 51.898179][ T5737] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input5 [ 51.937767][ T6054] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 52.468280][ C3] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 52.469352][ T5083] usb 6-1: USB disconnect, device number 2 [ 52.470897][ C3] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 52.750837][ T6084] netlink: 112 bytes leftover after parsing attributes in process `syz.3.98'. [ 52.842544][ T6094] netlink: 'syz.3.103': attribute type 2 has an invalid length. [ 52.900526][ T5083] kernel write not supported for file /input/mouse0 (pid: 5083 comm: kworker/2:2) [ 53.050173][ T6118] lo speed is unknown, defaulting to 1000 [ 53.052122][ T6118] lo speed is unknown, defaulting to 1000 [ 53.056251][ T6118] lo speed is unknown, defaulting to 1000 [ 53.064781][ T6118] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 53.069577][ T6118] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 53.075789][ T6118] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 53.080449][ T6118] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 53.090829][ T6118] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 53.112617][ T6118] lo speed is unknown, defaulting to 1000 [ 53.115540][ T6118] lo speed is unknown, defaulting to 1000 [ 53.118394][ T6118] lo speed is unknown, defaulting to 1000 [ 53.121303][ T6118] lo speed is unknown, defaulting to 1000 [ 53.121677][ T6125] netlink: 36 bytes leftover after parsing attributes in process `syz.2.118'. [ 53.182769][ T5742] Bluetooth: hci0: command tx timeout [ 53.183162][ T5743] Bluetooth: hci3: command tx timeout [ 53.184580][ T5742] Bluetooth: hci1: command tx timeout [ 53.189737][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'. [ 53.230774][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 53.234035][ T6139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 53.263026][ T5742] Bluetooth: hci2: command tx timeout [ 53.281689][ T6146] Invalid ELF header magic: != ELF [ 53.369115][ T42] audit: type=1326 audit(1787058873.267:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.1.133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 53.374071][ T6158] mmap: syz.1.133 (6158) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.377850][ T42] audit: type=1326 audit(1787058873.267:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.1.133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 53.398789][ T42] audit: type=1326 audit(1787058873.267:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.1.133" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf700efec code=0x7ffc0000 [ 53.400837][ T6160] netlink: 'syz.3.135': attribute type 4 has an invalid length. [ 53.408128][ T6160] netlink: 224 bytes leftover after parsing attributes in process `syz.3.135'. [ 53.412761][ T42] audit: type=1326 audit(1787058873.267:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.1.133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 53.412787][ T42] audit: type=1326 audit(1787058873.267:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.1.133" exe="/syz-executor" sig=0 arch=40000003 syscall=257 compat=1 ip=0xf700efec code=0x7ffc0000 [ 53.412807][ T42] audit: type=1326 audit(1787058873.287:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.1.133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 53.412829][ T42] audit: type=1326 audit(1787058873.287:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6156 comm="syz.1.133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 53.613991][ T42] audit: type=1326 audit(1787058873.507:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.1.147" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 53.621321][ T42] audit: type=1326 audit(1787058873.507:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.1.147" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 53.628664][ T42] audit: type=1326 audit(1787058873.517:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.1.147" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf700efec code=0x7ffc0000 [ 53.859523][ T6206] CUSE: DEVNAME unspecified [ 54.477783][ T1354] cfg80211: failed to load regulatory.db [ 55.086832][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 55.090091][ T6258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.182'. [ 55.214256][ T6277] ucma_write: process 96 (syz.1.191) changed security contexts after opening file descriptor, this is not allowed. [ 55.263662][ T5742] Bluetooth: hci3: command tx timeout [ 55.264622][ T5743] Bluetooth: hci0: command tx timeout [ 55.272963][ T5743] Bluetooth: hci1: command tx timeout [ 55.342955][ T5743] Bluetooth: hci2: command tx timeout [ 55.405399][ T6307] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 55.408380][ T6307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 55.494041][ T6318] Bluetooth: MGMT ver 1.23 [ 55.585872][ T6335] netlink: 64 bytes leftover after parsing attributes in process `syz.3.219'. [ 55.589419][ T6335] netlink: 64 bytes leftover after parsing attributes in process `syz.3.219'. [ 55.592125][ T6335] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 55.945049][ T6365] Bluetooth: MGMT ver 1.23 [ 56.216077][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 56.219102][ T6391] netlink: 'syz.2.245': attribute type 5 has an invalid length. [ 56.221446][ T6391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.245'. [ 56.315811][ T6405] netlink: 199784 bytes leftover after parsing attributes in process `syz.2.251'. [ 56.318895][ T6405] netlink: 'syz.2.251': attribute type 1 has an invalid length. [ 56.584504][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 56.587458][ T6442] netlink: 'syz.0.267': attribute type 5 has an invalid length. [ 56.589907][ T6442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.267'. [ 56.983585][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'. [ 57.686690][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 57.709109][ T6506] syz.3.299 (6506) used greatest stack depth: 16952 bytes left [ 58.030143][ T6570] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 58.040004][ T6570] CIFS: Unable to determine destination address [ 58.167259][ T6584] vlan2: entered promiscuous mode [ 58.168914][ T6584] macvtap0: entered promiscuous mode [ 58.346876][ T6606] netlink: 136 bytes leftover after parsing attributes in process `syz.2.346'. [ 58.359704][ T6606] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 59.394437][ T6643] support for cryptoloop has been removed. Use dm-crypt instead. [ 59.460925][ T6652] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 59.679386][ T6672] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 59.918626][ T6697] netlink: 'syz.1.387': attribute type 1 has an invalid length. [ 59.921927][ T6697] netlink: 'syz.1.387': attribute type 1 has an invalid length. [ 59.959546][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 59.959559][ T42] audit: type=1326 audit(1787058879.857:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.1.388" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.968367][ T42] audit: type=1326 audit(1787058879.857:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.1.388" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.975073][ T42] audit: type=1326 audit(1787058879.857:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.1.388" exe="/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.981773][ T42] audit: type=1326 audit(1787058879.877:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.1.388" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.989159][ T42] audit: type=1326 audit(1787058879.877:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.1.388" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 59.995978][ T42] audit: type=1326 audit(1787058879.877:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.1.388" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71474eb code=0x7ffc0000 [ 60.002546][ T42] audit: type=1326 audit(1787058879.877:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.1.388" exe="/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf700efec code=0x7ffc0000 [ 60.010769][ T42] audit: type=1326 audit(1787058879.877:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.1.388" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 60.018040][ T42] audit: type=1326 audit(1787058879.877:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6698 comm="syz.1.388" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 60.476286][ T42] audit: type=1326 audit(1787058880.377:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.1.403" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700efec code=0x0 [ 60.664929][ T6726] capability: warning: `syz.2.400' uses 32-bit capabilities (legacy support in use) [ 60.716830][ T6729] No buffer was provided with the request [ 60.756211][ T6733] xt_l2tp: v2 sid > 0xffff: 1114112 [ 60.837407][ T6741] __nla_validate_parse: 1 callbacks suppressed [ 60.837427][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 60.845216][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 60.848862][ T6741] netlink: 'syz.0.408': attribute type 19 has an invalid length. [ 60.851927][ T6741] netlink: 'syz.0.408': attribute type 20 has an invalid length. [ 60.861378][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.409'. [ 60.914628][ T6747] bridge0: entered promiscuous mode [ 60.916576][ T6747] bridge0: entered allmulticast mode [ 61.006608][ T6759] warning: `syz.3.415' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 61.085464][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.419'. [ 61.112898][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.420'. [ 61.115723][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.420'. [ 61.118336][ T6769] netlink: 'syz.3.420': attribute type 19 has an invalid length. [ 61.121380][ T6769] netlink: 'syz.3.420': attribute type 20 has an invalid length. [ 61.169322][ T6777] bridge1: entered promiscuous mode [ 61.171232][ T6777] bridge1: entered allmulticast mode [ 61.208976][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'. [ 61.212539][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'. [ 61.217438][ T6785] netlink: 'syz.2.434': attribute type 19 has an invalid length. [ 61.222821][ T6785] netlink: 'syz.2.434': attribute type 20 has an invalid length. [ 61.279902][ T6792] netlink: 52 bytes leftover after parsing attributes in process `syz.3.430'. [ 61.411043][ T6805] bridge2: entered promiscuous mode [ 61.412773][ T6805] bridge2: entered allmulticast mode [ 61.469696][ T6813] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 61.481241][ C2] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 62.033190][ T5809] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 62.350769][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.461'. [ 70.945262][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.947768][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.916609][ T42] audit: type=1800 audit(1787058892.817:38): pid=6918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.477" name="dummy_udc" dev="gadgetfs" ino=8793 res=0 errno=0 [ 72.954017][ T6920] lo speed is unknown, defaulting to 1000 [ 72.956861][ T6923] sctp: [Deprecated]: syz.1.480 (pid 6923) Use of int in max_burst socket option. [ 72.956861][ T6923] Use struct sctp_assoc_value instead [ 74.118147][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.523'. [ 74.160764][ T7021] process 'syz.0.526' launched './file2' with NULL argv: empty string added [ 74.440678][ T7052] [U]  [ 74.441752][ T7052] [U] K{ [ 74.442752][ T7052] [U] t 1ŠFfˊ`GJgo/mC [ 74.444967][ T7052] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 74.449726][ T7052] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 74.452983][ T7052] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 74.464711][ T7052] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 74.471883][ T7052] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 74.475368][ T7052] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 74.478956][ T7052] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 74.517445][ T7052] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 74.520280][ T7052] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 74.524564][ T7052] [U] 22Ʃx?0;3u [ 74.525881][ T7052] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 74.535482][ T7052] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 74.539072][ T7052] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 74.541922][ T7052] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 74.543950][ T7052] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 74.547747][ T7052] [U] ec [ 74.548924][ T7052] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 74.569504][ T7051] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 74.694151][ T1125] ata1.00: exception Emask 0x0 SAct 0x10000000 SErr 0x0 action 0x6 [ 74.696653][ T1125] ata1.00: waking up from sleep [ 74.698208][ T1125] ata1: hard resetting link [ 75.013868][ T1125] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 75.018861][ T1125] ata1.00: configured for UDMA/100 [ 75.020834][ T1125] ata1: EH complete [ 75.173437][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'. [ 75.180071][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'. [ 75.674880][ T7097] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 75.797702][ T1354] kernel write not supported for file /amidi2 (pid: 1354 comm: kworker/3:2) [ 75.816310][ T7110] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 75.821182][ T7110] batman_adv: batadv0: Adding interface: gretap1 [ 75.824609][ T7110] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.832794][ T7110] batman_adv: batadv0: Interface activated: gretap1 [ 76.066392][ T7140] comedi comedi3: s526: I/O base address or length out of range [ 76.122796][ T5878] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.273350][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 76.281463][ T5878] usb 5-1: unable to get BOS descriptor or descriptor too short [ 76.285760][ T5878] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 76.294688][ T5878] usb 5-1: string descriptor 0 read error: -22 [ 76.296790][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 76.314471][ T5878] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 76.315547][ T7165] CUSE: unknown device info "xKJ H+ۤ2LhnL1`Ccn80(3նi" [ 76.319393][ T5878] dw2102: su3000_power_ctrl: 1, initialized 0 [ 76.320259][ T7165] CUSE: unknown device info "ٮ,<_eF" [ 76.324134][ T5878] dvb-usb: bulk message failed: -22 (2/0) [ 76.325141][ T7165] CUSE: unknown device info "3ܟ,̘" [ 76.329215][ T7165] CUSE: unknown device info "J2S Z !e/J+-na4\N4" [ 76.331871][ T7165] CUSE: unknown device info " [ 76.331871][ T7165] fzXS! [ 76.331871][ T7165] AxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 76.332118][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 76.339196][ T7165] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TM_/V{" [ 76.344970][ T7165] CUSE: unknown device info "whU~V߶ݸFsX,xkq/Q]3H" [ 76.345332][ T5878] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 76.347444][ T7165] CUSE: zero length info key specified [ 76.352398][ T5878] usb 5-1: media controller created [ 76.355885][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 76.358945][ T5878] dw2102: i2c transfer failed. [ 76.360823][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 76.363451][ T5878] dw2102: i2c transfer failed. [ 76.364973][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 76.366807][ T5878] dw2102: i2c transfer failed. [ 76.368682][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 76.370496][ T5878] dw2102: i2c transfer failed. [ 76.372408][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 76.374882][ T5878] dw2102: i2c transfer failed. [ 76.381502][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 76.387394][ T5878] dw2102: i2c transfer failed. [ 76.390107][ T5878] dvb-usb: MAC address: 02:02:02:02:02:02 [ 76.401623][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 76.419533][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 76.426412][ T5878] dw2102: command 0x0e transfer failed. [ 76.431514][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 76.435116][ T5878] dw2102: command 0x0e transfer failed. [ 76.666255][ T7196] random: crng reseeded on system resumption [ 76.742814][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 76.745175][ T5878] dw2102: command 0x0e transfer failed. [ 76.746988][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 76.748913][ T5878] dw2102: command 0x0e transfer failed. [ 76.751040][ T5878] dvb-usb: bulk message failed: -22 (1/0) [ 76.753048][ T5878] dw2102: command 0x51 transfer failed. [ 76.756717][ T7116] dvb-usb: bulk message failed: -22 (4/0) [ 76.759907][ T7116] dw2102: i2c transfer failed. [ 76.786725][ T5878] DVB: Unable to find symbol ds3000_attach() [ 76.788735][ T5878] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 76.854067][ T5878] rc_core: IR keymap rc-su3000 not found [ 76.855915][ T5878] Registered IR keymap rc-empty [ 76.858256][ T5878] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 76.864332][ T5878] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input6 [ 76.873043][ T5878] dvb-usb: schedule remote query interval to 150 msecs. [ 76.875477][ T5878] dw2102: su3000_power_ctrl: 0, initialized 1 [ 76.877434][ T5878] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 76.889252][ T7213] nbd: must specify a size in bytes for the device [ 76.889768][ T5878] usb 5-1: USB disconnect, device number 2 [ 76.944521][ T5878] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 77.108443][ T7231] usb usb8: usbfs: process 7231 (syz.2.626) did not claim interface 0 before use [ 77.141945][ T7233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.627'. [ 77.145376][ T7233] netlink: 17 bytes leftover after parsing attributes in process `syz.2.627'. [ 77.148284][ T7233] tipc: Invalid UDP bearer configuration [ 77.148312][ T7233] tipc: Enabling of bearer rejected, failed to enable media [ 77.246245][ T7245] netlink: 'syz.1.633': attribute type 8 has an invalid length. [ 77.248815][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.633'. [ 77.251637][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 77.302397][ T7249] netlink: 'syz.0.635': attribute type 1 has an invalid length. [ 77.304994][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 77.390969][ T7251] nvme nvme0: rdma connection establishment failed (-104) [ 77.446976][ T7263] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 77.644112][ T5742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.654041][ T5742] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.656893][ T5742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.661043][ T5742] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.664652][ T5742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.719163][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 77.725881][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'. [ 77.918867][ T7281] lo speed is unknown, defaulting to 1000 [ 78.020328][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.106325][ T7354] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 78.129202][ T7361] sg_write: process 340 (syz.0.682) changed security contexts after opening file descriptor, this is not allowed. [ 78.149724][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.231399][ T7281] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.234339][ T7281] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.236917][ T7281] bridge_slave_0: entered allmulticast mode [ 78.239686][ T7281] bridge_slave_0: entered promiscuous mode [ 78.245060][ T7281] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.248201][ T7281] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.251410][ T7281] bridge_slave_1: entered allmulticast mode [ 78.256499][ T7281] bridge_slave_1: entered promiscuous mode [ 78.281805][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.293255][ T7281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.297801][ T7281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.327276][ T7281] team0: Port device team_slave_0 added [ 78.333476][ T7281] team0: Port device team_slave_1 added [ 78.351380][ T7281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.353717][ T7281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.361669][ T7281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.369385][ T7281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.372012][ T7281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.383446][ T7281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.405209][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.464602][ T7281] hsr_slave_0: entered promiscuous mode [ 78.469059][ T7281] hsr_slave_1: entered promiscuous mode [ 78.471245][ T7281] debugfs: 'hsr0' already exists in 'hsr' [ 78.474277][ T7281] Cannot create hsr debugfs directory [ 78.619353][ T13] bridge_slave_1: left allmulticast mode [ 78.626259][ T13] bridge_slave_1: left promiscuous mode [ 78.628915][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.636266][ T13] bridge_slave_0: left allmulticast mode [ 78.638174][ T13] bridge_slave_0: left promiscuous mode [ 78.640255][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.749384][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.757844][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.759127][ T7429] Invalid logical block size (73728) [ 78.768555][ T13] bond0 (unregistering): Released all slaves [ 78.874302][ T7281] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.885946][ T7281] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.889217][ T7281] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.899029][ T7281] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.902367][ T7281] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.908387][ T7281] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.911186][ T7281] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.923143][ T7281] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.039478][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2 [ 79.056504][ T7281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.068753][ T7281] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.074842][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.077173][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.090246][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.092552][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.147447][ T7468] Bluetooth: MGMT ver 1.23 [ 79.210114][ T13] hsr_slave_0: left promiscuous mode [ 79.213316][ T13] hsr_slave_1: left promiscuous mode [ 79.215448][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.217822][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.220924][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.223944][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.239118][ T13] veth1_macvtap: left promiscuous mode [ 79.241415][ T13] veth0_macvtap: left promiscuous mode [ 79.244782][ T13] veth1_vlan: left promiscuous mode [ 79.247119][ T13] veth0_vlan: left promiscuous mode [ 79.394421][ T13] team0 (unregistering): Port device team_slave_1 removed [ 79.401336][ T13] team0 (unregistering): Port device team_slave_0 removed [ 79.495552][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3 [ 79.498036][ T7481] netlink: 56 bytes leftover after parsing attributes in process `syz.0.728'. [ 79.670401][ T5442] 8021q: adding VLAN 0 to HW filter on device eth4 [ 79.704739][ T7281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.742838][ T5743] Bluetooth: hci4: command tx timeout [ 79.791397][ T7529] netlink: 256 bytes leftover after parsing attributes in process `syz.0.740'. [ 79.794694][ T7529] netlink: 'syz.0.740': attribute type 10 has an invalid length. [ 79.880522][ T13] IPVS: stop unused estimator thread 0... [ 79.902290][ T7543] netlink: 60 bytes leftover after parsing attributes in process `syz.0.745'. [ 79.910028][ T5442] 8021q: adding VLAN 0 to HW filter on device eth5 [ 79.915957][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.745'. [ 79.935524][ T7281] veth0_vlan: entered promiscuous mode [ 79.936290][ T7546] netlink: 'syz.2.746': attribute type 32 has an invalid length. [ 79.939584][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.746'. [ 79.955785][ T7546] bond1: Setting coupled_control to off (0) [ 79.966954][ T7281] veth1_vlan: entered promiscuous mode [ 79.973396][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'. [ 79.988893][ T7281] veth0_macvtap: entered promiscuous mode [ 79.996435][ T7281] veth1_macvtap: entered promiscuous mode [ 80.013629][ T7281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.021767][ T7281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.072049][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.086281][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.089451][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.109713][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.113201][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.114880][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.116215][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.136355][ T1354] IPVS: starting estimator thread 0... [ 80.142838][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.178009][ T7570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.753'. [ 80.208604][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 80.222784][ T7564] IPVS: using max 45 ests per chain, 108000 per kthread [ 80.335097][ T7592] sch_tbf: peakrate 11404892913778152675 is lower than or equals to rate 17950757323683981889 ! [ 80.348872][ T7594] netlink: 'syz.4.764': attribute type 2 has an invalid length. [ 80.536238][ T7607] [U] [ 80.537292][ T7607] [U] [ 80.538172][ T7607] [U] [ 80.539012][ T7607] [U] [ 80.539870][ T7607] [U] [ 80.540722][ T7607] [U] [ 80.541560][ T7607] [U] [ 80.542428][ T7607] [U] [ 80.544644][ T7607] [U] [ 80.545507][ T7607] [U] [ 80.546372][ T7607] [U] [ 80.547241][ T7607] [U] [ 80.548099][ T7607] [U] [ 80.549257][ T7607] [U] [ 80.550904][ T7607] [U] [ 80.552078][ T7607] [U] [ 80.555197][ T7607] [U] [ 80.556452][ T7607] [U] [ 80.557551][ T7607] [U] [ 80.558952][ T7607] [U] [ 80.560112][ T7607] [U] [ 80.561266][ T7607] [U] [ 80.562468][ T7607] [U] [ 80.563662][ T7607] [U] [ 80.565914][ T7607] [U] [ 80.567071][ T7607] [U] [ 80.568286][ T7607] [U] [ 80.569623][ T7607] [U] [ 80.570828][ T7607] [U] [ 80.572030][ T7607] [U] [ 80.573287][ T7607] [U] [ 80.574498][ T7607] [U] [ 80.580112][ T7607] [U] [ 80.581546][ T7607] [U] [ 80.582767][ T7607] [U] [ 80.583991][ T7607] [U] [ 80.585201][ T7607] [U] [ 80.586387][ T7607] [U] [ 80.587589][ T7607] [U] [ 80.588805][ T7607] [U] [ 80.591149][ T7607] [U] [ 80.592358][ T7607] [U] [ 80.593598][ T7607] [U] [ 80.594797][ T7607] [U] [ 80.595994][ T7607] [U] [ 80.597210][ T7607] [U] [ 80.598442][ T7607] [U] [ 80.599677][ T7607] [U] [ 80.602904][ T7607] [U] [ 80.604182][ T7607] [U] [ 80.605387][ T7607] [U] [ 80.606557][ T7607] [U] [ 80.607738][ T7607] [U] [ 80.608945][ T7607] [U] [ 80.610105][ T7607] [U] [ 80.611259][ T7607] [U] [ 80.614448][ T7607] [U] [ 80.615652][ T7607] [U] [ 80.616857][ T7607] [U] [ 80.618031][ T7607] [U] [ 80.619219][ T7607] [U] [ 80.620394][ T7607] [U] [ 80.621552][ T7607] [U] [ 80.622705][ T7607] [U] [ 80.624563][ T7607] [U] [ 80.625935][ T7607] [U] [ 80.627129][ T7607] [U] [ 80.628320][ T7607] [U] [ 80.629472][ T7607] [U] [ 80.630548][ T7607] [U] [ 80.631604][ T7607] [U] [ 80.632795][ T7607] [U] [ 80.634859][ T7607] [U] [ 80.636030][ T7607] [U] [ 80.637231][ T7607] [U] [ 80.638448][ T7607] [U] [ 80.639659][ T7607] [U] [ 80.640867][ T7607] [U] [ 80.642033][ T7607] [U] [ 80.643258][ T7607] [U] [ 80.644589][ T7607] [U] [ 80.645793][ T7607] [U] [ 80.647460][ T7607] [U] [ 80.648663][ T7607] [U] [ 80.649854][ T7607] [U] [ 80.651039][ T7607] [U] [ 80.652377][ T7607] [U] [ 80.653856][ T7607] [U] [ 80.655467][ T7607] [U] [ 80.656903][ T7607] [U] [ 80.658117][ T7607] [U] [ 80.659320][ T7607] [U] [ 80.660677][ T7607] [U] [ 80.661874][ T7607] [U] [ 80.663083][ T7607] [U] [ 80.664285][ T7607] [U] [ 80.667018][ T7607] [U] [ 80.668311][ T7607] [U] [ 80.669528][ T7607] [U] [ 80.670722][ T7607] [U] [ 80.671984][ T7607] [U] [ 80.672976][ T7607] [U] [ 80.673879][ T7607] [U] [ 80.674763][ T7607] [U] [ 80.676090][ T7607] [U] [ 80.677329][ T7607] [U] [ 80.678310][ T7607] [U] [ 80.679244][ T7607] [U] [ 80.680137][ T7607] [U] [ 80.681039][ T7607] [U] [ 80.682226][ T7607] [U] [ 80.683107][ T7607] [U] [ 80.684638][ T7607] [U] [ 80.685555][ T7607] [U] [ 80.686559][ T7607] [U] [ 80.687676][ T7607] [U] [ 80.688602][ T7607] [U] [ 80.689458][ T7607] [U] [ 80.690674][ T7607] [U] [ 80.691547][ T7607] [U] [ 80.694080][ T7607] [U] [ 80.695006][ T7607] [U] [ 80.695887][ T7607] [U] [ 80.696807][ T7607] [U] [ 80.697695][ T7607] [U] [ 80.698593][ T7607] [U] [ 80.699482][ T7607] [U] [ 80.721785][ T7606] [U] [ 80.884751][ T7647] sg_write: data in/out 1265126/1 bytes for SCSI command 0x32-- guessing data in; [ 80.884751][ T7647] program syz.1.788 not setting count and/or reply_len properly [ 81.011725][ T7666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.015198][ T7666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.019577][ T7666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.022301][ T7666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.029049][ T7666] batman_adv: batadv0: Interface deactivated: gretap1 [ 81.031769][ T7666] batman_adv: batadv0: Removing interface: gretap1 [ 81.546770][ T59] IPVS: starting estimator thread 0... [ 81.574335][ T7715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.590969][ T7717] ======================================================= [ 81.590969][ T7717] WARNING: The mand mount option has been deprecated and [ 81.590969][ T7717] and is ignored by this kernel. Remove the mand [ 81.590969][ T7717] option from the mount to silence this warning. [ 81.590969][ T7717] ======================================================= [ 81.632957][ T7713] IPVS: using max 45 ests per chain, 108000 per kthread [ 81.765604][ T5837] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 81.783560][ T5837] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 81.823153][ T5743] Bluetooth: hci4: command tx timeout [ 81.841887][ T7738] fido_id[7738]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 82.070314][ T42] audit: type=1326 audit(1787058901.967:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.2.848" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 82.090945][ T42] audit: type=1326 audit(1787058901.967:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.2.848" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 82.102800][ T42] audit: type=1326 audit(1787058901.967:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.2.848" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 82.109638][ T42] audit: type=1326 audit(1787058901.967:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.2.848" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 82.117824][ T42] audit: type=1326 audit(1787058901.967:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.2.848" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 82.124528][ T42] audit: type=1326 audit(1787058901.967:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.2.848" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 82.131910][ T42] audit: type=1326 audit(1787058901.967:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.2.848" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 82.140258][ T42] audit: type=1326 audit(1787058901.977:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.2.848" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 82.148096][ T42] audit: type=1326 audit(1787058901.977:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.2.848" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 82.154892][ T42] audit: type=1326 audit(1787058901.977:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7771 comm="syz.2.848" exe="/syz-executor" sig=0 arch=40000003 syscall=38 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 82.365426][ T7805] netlink: 304 bytes leftover after parsing attributes in process `syz.1.864'. [ 82.689405][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.881'. [ 82.711812][ T7840] veth3: entered promiscuous mode [ 82.890358][ T7856] comedi comedi3: s526: I/O base address or length out of range [ 83.024299][ T1125] ata1.00: exception Emask 0x0 SAct 0x80000 SErr 0x0 action 0x6 [ 83.027664][ T1125] ata1.00: waking up from sleep [ 83.029780][ T1125] ata1: hard resetting link [ 83.074450][ T7863] veth3: entered promiscuous mode [ 83.156178][ T7875] lo speed is unknown, defaulting to 1000 [ 83.355100][ T1125] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 83.359981][ T1125] ata1.00: configured for UDMA/100 [ 83.360391][ T7881] veth3: entered promiscuous mode [ 83.362185][ T1125] ata1: EH complete [ 83.588888][ T7903] lo speed is unknown, defaulting to 1000 [ 83.836092][ T7949] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 83.904090][ T5743] Bluetooth: hci4: command tx timeout [ 84.934509][ T7985] 9p: p9: multiple sources not supported [ 84.938260][ T7983] lo speed is unknown, defaulting to 1000 [ 85.013858][ T7996] syz.2.949 (7996) used obsolete PPPIOCDETACH ioctl [ 85.128263][ T8011] 9p: p9: multiple sources not supported [ 85.136840][ T8012] lo speed is unknown, defaulting to 1000 [ 85.306886][ T8029] __nla_validate_parse: 5 callbacks suppressed [ 85.306899][ T8029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.967'. [ 85.478393][ T8049] lo speed is unknown, defaulting to 1000 [ 85.982882][ T5743] Bluetooth: hci4: command tx timeout [ 86.125197][ T5809] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 86.130127][ T8093] lo speed is unknown, defaulting to 1000 [ 86.234306][ T8110] netlink: 'syz.1.998': attribute type 2 has an invalid length. [ 96.797805][ T8176] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 96.873910][ T8188] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1007'. [ 96.877764][ T8188] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1007'. [ 96.882059][ T8188] netlink: 'syz.0.1007': attribute type 5 has an invalid length. [ 96.884743][ T8188] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1007'. [ 97.045268][ T8211] vivid-000: ================= START STATUS ================= [ 97.048667][ T8211] vivid-000: Test Pattern: 75% Colorbar [ 97.050590][ T8211] vivid-000: Fill Percentage of Frame: 5 [ 97.054993][ T8211] vivid-000: Horizontal Movement: No Movement [ 97.058151][ T8211] vivid-000: Vertical Movement: No Movement [ 97.060235][ T8211] vivid-000: OSD Text Mode: All [ 97.062186][ T8211] vivid-000: Show Border: false [ 97.063793][ T8211] vivid-000: Show Square: false [ 97.065437][ T8211] vivid-000: Sensor Flipped Horizontally: false [ 97.067464][ T8211] vivid-000: Sensor Flipped Vertically: false [ 97.069390][ T8211] vivid-000: Insert SAV Code in Image: false [ 97.071453][ T8211] vivid-000: Insert EAV Code in Image: false [ 97.075037][ T8211] vivid-000: Insert Video Guard Band: false [ 97.076981][ T8211] vivid-000: Reduced Framerate: false [ 97.078720][ T8211] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 97.081603][ T8211] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 97.084590][ T8211] vivid-000: Enable Capture Cropping: false grabbed [ 97.088076][ T8211] vivid-000: Enable Capture Composing: true grabbed [ 97.090921][ T8211] vivid-000: Enable Capture Scaler: true grabbed [ 97.098589][ T8211] vivid-000: Timestamp Source: End of Frame [ 97.101212][ T8211] vivid-000: Colorspace: sRGB [ 97.103683][ T8211] vivid-000: Transfer Function: Default [ 97.106356][ T8211] vivid-000: Y'CbCr Encoding: Default [ 97.109300][ T8211] vivid-000: HSV Encoding: Hue 0-179 [ 97.111532][ T8211] vivid-000: Quantization: Default [ 97.115264][ T8211] vivid-000: Apply Alpha To Red Only: false [ 97.117744][ T8211] vivid-000: Standard Aspect Ratio: 4x3 [ 97.120161][ T8211] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 97.123620][ T8211] vivid-000: DV Timings: 640x480p59 inactive [ 97.125854][ T8211] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 97.128038][ T8211] vivid-000: Maximum EDID Blocks: 2 [ 97.129635][ T8211] vivid-000: Limited RGB Range (16-235): true [ 97.131466][ T8211] vivid-000: Rx RGB Quantization Range: Automatic [ 97.134449][ T8211] vivid-000: Power Present: 0x00000001 [ 97.136306][ T8211] tpg source WxH: 320x240 (Y'CbCr) [ 97.138387][ T8211] tpg field: 1 [ 97.139822][ T8211] tpg crop: (0,0)/320x240 [ 97.141607][ T8211] tpg compose: (0,0)/320x240 [ 97.143909][ T8211] tpg colorspace: 8 [ 97.145561][ T8211] tpg transfer function: 0/2 [ 97.147572][ T8211] tpg Y'CbCr encoding: 0/1 [ 97.149916][ T8211] tpg quantization: 0/2 [ 97.151689][ T8211] tpg RGB range: 0/1 [ 97.153785][ T8211] vivid-000: ================== END STATUS ================== [ 97.395804][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1039'. [ 98.716364][ T8337] netlink: 'syz.4.1077': attribute type 2 has an invalid length. [ 98.719033][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1077'. [ 98.773823][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1082'. [ 98.778825][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1082'. [ 98.876665][ T8361] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1090'. [ 99.160365][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 99.241529][ T8418] netlink: 'syz.1.1117': attribute type 1 has an invalid length. [ 99.244989][ T8418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.806060][ T8485] binder: 8482:8485 ioctl c0306201 80000080 returned -22 [ 99.987327][ T8516] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1165'. [ 99.993228][ T8516] netlink: 'syz.0.1165': attribute type 6 has an invalid length. [ 99.997524][ T8516] netlink: 'syz.0.1165': attribute type 5 has an invalid length. [ 100.000159][ T8516] netlink: 'syz.0.1165': attribute type 4 has an invalid length. [ 100.237840][ T8545] netlink: 'syz.0.1178': attribute type 1 has an invalid length. [ 100.241019][ T8545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.395212][ T8552] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.480589][ T8552] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.556149][ T8552] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.626289][ T8552] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.742886][ T5879] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.746364][ T5879] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.749604][ T5879] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.752676][ T5879] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.959284][ T8571] trusted_key: encrypted_key: key trusted:syz not found [ 101.225362][ T8605] netlink: 'syz.1.1204': attribute type 6 has an invalid length. [ 101.290283][ T8615] pim6reg99999999: entered allmulticast mode [ 101.733226][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 103.112622][ T8672] Set syz0 is full, maxelem 65536 reached [ 103.268914][ T8695] netlink: 'syz.2.1246': attribute type 83 has an invalid length. [ 103.271275][ T8682] can0: slcan on ptm0. [ 103.275876][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 103.374229][ T8680] can0 (unregistered): slcan off ptm0. [ 103.374545][ T8707] lo speed is unknown, defaulting to 1000 [ 104.454233][ T8746] lo speed is unknown, defaulting to 1000 [ 104.497602][ T8755] __nla_validate_parse: 1 callbacks suppressed [ 104.497615][ T8755] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1268'. [ 104.858728][ T8787] lo speed is unknown, defaulting to 1000 [ 104.899535][ T8791] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.007726][ T8791] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.111351][ T8791] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.145427][ T8806] lo speed is unknown, defaulting to 1000 [ 105.218253][ T8791] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.373226][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.412833][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.423065][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.428863][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.492392][ T8827] lo speed is unknown, defaulting to 1000 [ 105.588323][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'. [ 105.604888][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1302'. [ 105.733371][ T8847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1308'. [ 105.794392][ T8851] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.828383][ T8855] lo speed is unknown, defaulting to 1000 [ 105.898705][ T8851] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.025183][ T8851] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.168924][ T8851] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.222081][ T8881] lo speed is unknown, defaulting to 1000 [ 106.267710][ T8891] netlink: 'syz.4.1327': attribute type 7 has an invalid length. [ 106.270211][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1327'. [ 106.273640][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1327'. [ 106.352852][ T5879] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.362542][ T5879] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.368430][ T5879] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.373905][ T5879] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.687709][ T8928] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.806651][ T8928] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.877271][ T8962] netlink: 'syz.0.1360': attribute type 5 has an invalid length. [ 106.901356][ T8928] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.954291][ T8972] 9pnet_fd: p9_fd_create_tcp (8972): problem binding to privport [ 107.001601][ T8928] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.068690][ T8990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.128191][ T5879] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.136702][ T5879] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.153046][ T5879] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.156327][ T5879] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.204967][ T9008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 107.268371][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'. [ 107.308351][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 107.308363][ T42] audit: type=1400 audit(1787058927.207:55): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626205F7374617465735F7065725F696E736E203020746F74616C5F7374617465732030207065616B5F7374617465732030206D61726B5F726561642030 pid=9020 comm="syz.4.1389" [ 107.406387][ T9031] netlink: 'syz.2.1394': attribute type 1 has an invalid length. [ 107.412090][ T9031] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1394'. [ 107.692841][ T5837] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 107.842834][ T5837] usb 7-1: Using ep0 maxpacket: 16 [ 107.846027][ T5837] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 107.851158][ T5837] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 107.855519][ T5837] usb 7-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.860242][ T5837] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.864735][ T5837] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 107.869326][ T5837] usb 7-1: config 0 interface 0 has no altsetting 0 [ 107.874686][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.878121][ T5837] usb 7-1: Product: syz [ 107.879961][ T5837] usb 7-1: Manufacturer: syz [ 107.881886][ T5837] usb 7-1: SerialNumber: syz [ 107.892231][ T5837] usb 7-1: config 0 descriptor?? [ 107.896703][ T9035] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.107316][ T9035] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.117604][ T5837] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input8 [ 108.239691][ T9049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1402'. [ 108.389290][ T9] usb 7-1: USB disconnect, device number 2 [ 108.395349][ T9063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.537321][ T9075] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 108.540455][ T9075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.584890][ T9081] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1417'. [ 108.879852][ T9105] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.414221][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 109.549729][ T9186] __nla_validate_parse: 4 callbacks suppressed [ 109.549744][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1468'. [ 110.011570][ T5878] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 110.534184][ T9184] Set syz0 is full, maxelem 65536 reached [ 119.881542][ T42] audit: type=1326 audit(1787058939.777:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9251 comm="syz.1.1479" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700efec code=0x0 [ 120.181825][ T9280] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1492'. [ 121.137756][ T9355] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1525'. [ 121.140800][ T9355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1525'. [ 121.588674][ T9385] pimreg3: entered allmulticast mode [ 121.733578][ T9400] dummy0: entered allmulticast mode [ 121.754682][ T9400] dummy0: left allmulticast mode [ 122.362652][ T9465] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 122.633277][ T9497] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1571'. [ 122.667116][ T9499] sit1: entered promiscuous mode [ 122.710366][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1574'. [ 123.409067][ T9548] IPVS: ip_vs_edit_dest(): server weight less than zero [ 123.410191][ T29] IPVS: starting estimator thread 0... [ 123.503856][ T9549] IPVS: using max 45 ests per chain, 108000 per kthread [ 123.795411][ T9582] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.817054][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1611'. [ 123.820761][ T9584] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1611'. [ 123.828866][ T5879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 123.833136][ T5879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 123.842856][ T5823] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.855489][ T1354] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 123.865279][ T9582] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.930997][ T9582] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.952950][ T1354] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 124.023298][ T5823] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 124.029980][ T5823] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 124.033646][ T5823] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.037656][ T5823] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 124.040954][ T5823] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.047054][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 124.049658][ T5823] usb 5-1: Product: syz [ 124.051067][ T5823] usb 5-1: Manufacturer: syz [ 124.055183][ T9582] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.065551][ T5823] cdc_wdm 5-1:1.0: skipping garbage [ 124.067744][ T5823] cdc_wdm 5-1:1.0: skipping garbage [ 124.078496][ T5823] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 124.080744][ T5823] cdc_wdm 5-1:1.0: Unknown control protocol [ 124.137771][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.152636][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.172887][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.182809][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.272338][ T1354] usb 5-1: USB disconnect, device number 3 [ 124.623195][ T5837] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 124.784427][ T5743] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 124.784509][ T5742] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.971126][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'. [ 125.099614][ T9663] option changes via remount are deprecated (pid=9662 comm=syz.2.1647) [ 125.264119][ T9692] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1661'. [ 125.536070][ T9739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1684'. [ 125.539000][ T9739] nbd: illegal input index -855506932 [ 125.611382][ T9752] netlink: 'syz.2.1690': attribute type 9 has an invalid length. [ 125.615602][ T9752] netlink: 'syz.2.1690': attribute type 7 has an invalid length. [ 125.619425][ T9752] netlink: 'syz.2.1690': attribute type 8 has an invalid length. [ 125.964298][ T9814] gretap0: entered promiscuous mode [ 125.969545][ T9814] vlan3: entered promiscuous mode [ 125.981944][ T9816] tipc: Started in network mode [ 125.986205][ T9816] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 125.989244][ T9816] tipc: Enabled bearer , priority 18 [ 126.027324][ T9824] netlink: 'syz.4.1722': attribute type 5 has an invalid length. [ 126.102520][ T9840] netlink: 'syz.0.1729': attribute type 1 has an invalid length. [ 126.106589][ T9840] netlink: 5120 bytes leftover after parsing attributes in process `syz.0.1729'. [ 126.185608][ T9854] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 126.226616][ T9862] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.298451][ T9862] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.313934][ T5837] kernel read not supported for file /vga_arbiter (pid: 5837 comm: kworker/0:4) [ 126.358952][ T9862] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.416997][ T9862] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.543080][ T6216] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 126.625645][ T42] audit: type=1326 audit(1787058946.527:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.0.1751" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 126.632228][ T42] audit: type=1326 audit(1787058946.527:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.0.1751" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 126.641830][ T42] audit: type=1326 audit(1787058946.527:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.0.1751" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 126.652869][ T42] audit: type=1326 audit(1787058946.527:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.0.1751" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 126.659190][ T42] audit: type=1326 audit(1787058946.527:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.0.1751" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 126.666652][ T42] audit: type=1326 audit(1787058946.527:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.0.1751" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 126.673373][ T42] audit: type=1326 audit(1787058946.527:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.0.1751" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 126.679363][ T42] audit: type=1326 audit(1787058946.527:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9884 comm="syz.0.1751" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 126.706438][ T6216] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.714257][ T6216] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.717830][ T6216] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.721799][ T6216] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 126.725648][ T6216] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.731420][ T6216] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 126.735206][ T6216] usb 9-1: Product: syz [ 126.736928][ T6216] usb 9-1: Manufacturer: syz [ 126.743987][ T6216] cdc_wdm 9-1:1.0: skipping garbage [ 126.745708][ T6216] cdc_wdm 9-1:1.0: skipping garbage [ 126.749741][ T6216] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 126.751631][ T6216] cdc_wdm 9-1:1.0: Unknown control protocol [ 126.935153][ T9902] tipc: Started in network mode [ 126.936785][ T9902] tipc: Node identity e0000001, cluster identity 4711 [ 126.939056][ T9902] tipc: Enabling of bearer rejected, failed to enable media [ 126.960955][ T5823] usb 9-1: USB disconnect, device number 2 [ 126.996362][ T5809] tipc: Node number set to 10136234 [ 127.714319][ T9959] netlink: Invalid conntrack helper [ 127.716165][ T9959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.846136][ T9980] sg_write: data in/out 19942/44 bytes for SCSI command 0x32-- guessing data in; [ 127.846136][ T9980] program syz.0.1797 not setting count and/or reply_len properly [ 127.925560][ T9988] tipc: Enabled bearer , priority 21 [ 128.078033][T10008] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1811'. [ 128.143988][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.182842][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.190483][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.195861][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.216678][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1819'. [ 128.222819][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 128.429186][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1836'. [ 128.432014][T10059] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1836'. [ 128.515564][T10071] openvswitch: netlink: IP tunnel attribute has 5377 unknown bytes. [ 128.830739][ T42] audit: type=1326 audit(1787058948.727:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10123 comm="syz.0.1868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 128.838137][ T42] audit: type=1326 audit(1787058948.727:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10123 comm="syz.0.1868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 128.853034][ T5742] Bluetooth: hci4: link tx timeout [ 128.857011][ T5742] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.867681][T10130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1871'. [ 129.063810][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 129.170325][T10139] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 129.658231][ T59] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 130.942974][ T5743] Bluetooth: hci4: command 0x0406 tx timeout [ 132.385268][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.388416][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.503306][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.490217][T10233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1899'. [ 139.495451][T10233] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 139.535830][T10239] tipc: Enabling of bearer rejected, failed to enable media [ 139.762165][T10275] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 140.052104][T10315] ALSA: seq fatal error: cannot create timer (-19) [ 140.364372][T10356] vlan2: entered promiscuous mode [ 140.366144][T10356] bridge0: entered promiscuous mode [ 140.418229][T10360] bond2: (slave bond_slave_1): Device is not our slave [ 140.421210][T10360] bond2: option active_slave: invalid value (bond_slave_1) [ 140.428479][T10360] bond2 (unregistering): Released all slaves [ 140.679010][ T5737] kernel write not supported for file /dsp1 (pid: 5737 comm: kworker/0:3) [ 140.826394][T10407] can0: slcan on ptm0. [ 140.845202][T10411] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 140.876986][T10406] can0 (unregistered): slcan off ptm0. [ 140.915268][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1988'. [ 140.918553][T10417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1988'. [ 140.921613][T10417] netlink: 'syz.2.1988': attribute type 6 has an invalid length. [ 141.032817][ T29] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 141.102048][T10440] ALSA: mixer_oss: invalid OSS volume '' [ 141.105300][T10436] use of bytesused == 0 is deprecated and will be removed in the future, [ 141.109417][T10436] use the actual size instead. [ 141.202795][ T29] usb 9-1: Using ep0 maxpacket: 32 [ 141.228051][ T29] usb 9-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 141.234785][ T29] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.238285][ T29] usb 9-1: config 0 has no interfaces? [ 141.245330][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.248124][ T29] usb 9-1: Product: syz [ 141.249502][ T29] usb 9-1: Manufacturer: syz [ 141.251104][ T29] usb 9-1: SerialNumber: syz [ 141.254452][ T29] usb 9-1: config 0 descriptor?? [ 141.363697][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2010'. [ 141.413795][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 141.413808][ T42] audit: type=1800 audit(1787058961.307:79): pid=10476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2013" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 141.481663][ T29] usb 9-1: USB disconnect, device number 3 [ 142.147388][T10553] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 143.060103][T10569] random: crng reseeded on system resumption [ 143.069754][T10571] 0x000000000000-0x000000020000 : "" [ 143.107074][T10571] ftl_cs: FTL header not found. [ 143.363923][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2071'. [ 143.795542][ T5823] logitech-hidpp-device 0005:046D:B012.0003: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 143.801193][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2094'. [ 143.833090][T10651] fido_id[10651]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 143.933154][T10659] e1000e 0000:00:02.0 eth1: S0ix is not supported on this device [ 144.134482][T10681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2110'. [ 144.137455][T10681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2110'. [ 144.141135][T10681] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 144.160367][T10686] program syz.2.2111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.163640][T10686] ata1.00: non-matching transfer count (8388608/133) [ 144.644590][T10710] syz.4.2123 (10710): drop_caches: 2 [ 144.976228][T10734] netlink: 'syz.0.2134': attribute type 2 has an invalid length. [ 145.335131][ T1354] kernel write not supported for file /uinput (pid: 1354 comm: kworker/3:2) [ 145.656765][T10811] vlan3: entered allmulticast mode [ 145.658461][T10811] bond0: entered allmulticast mode [ 145.660725][T10811] bond_slave_0: entered allmulticast mode [ 145.662544][T10811] bond_slave_1: entered allmulticast mode [ 146.001296][T10857] netlink: 'syz.1.2193': attribute type 21 has an invalid length. [ 146.008454][T10857] IPv6: NLM_F_CREATE should be specified when creating new route [ 146.012394][T10857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.018172][T10857] IPv6: NLM_F_CREATE should be set when creating new route [ 146.021840][T10857] IPv6: NLM_F_CREATE should be set when creating new route [ 146.025407][T10857] IPv6: NLM_F_CREATE should be set when creating new route [ 146.035961][T10857] netlink: 'syz.1.2193': attribute type 21 has an invalid length. [ 146.039521][T10857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.631332][T10901] ptrace attach of "/syz-executor exec"[5735] was attempted by ""[10901] [ 147.094098][T10948] xt_limit: Overflow, try lower: 324382443/0 [ 147.189131][ T5823] Process accounting resumed [ 147.224655][T10961] Process accounting resumed [ 147.515891][ C2] IPv4: Oversized IP packet from 127.0.0.1 [ 147.706107][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2278'. [ 147.727122][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2278'. [ 147.919360][T11057] syz.1.2290 uses obsolete (PF_INET,SOCK_PACKET) [ 147.924354][T11058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2289'. [ 147.928119][T11058] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2289'. [ 147.974166][T11063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2294'. [ 147.983171][ T5879] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.002393][T11066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2293'. [ 148.051937][ T5879] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.138074][ T5879] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.171416][ T5743] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.180611][ T5743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.186881][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.193146][ T5743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.196801][ T5743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.240156][ T5879] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.279326][T11097] tmpfs: Cannot change global quota limit on remount [ 148.450372][ T5879] bridge_slave_1: left allmulticast mode [ 148.452841][ T5879] bridge_slave_1: left promiscuous mode [ 148.454870][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.461315][ T5879] bridge_slave_0: left allmulticast mode [ 148.463839][ T5879] bridge_slave_0: left promiscuous mode [ 148.465438][T11126] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2321'. [ 148.468342][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.507402][T11134] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 148.608765][ T5879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.615036][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.618681][ T5879] bond0 (unregistering): Released all slaves [ 148.631776][ T5442] 8021q: adding VLAN 0 to HW filter on device eth6 [ 148.662022][T11082] lo speed is unknown, defaulting to 1000 [ 148.716021][ T5879] tipc: Disabling bearer [ 148.728121][ T5879] tipc: Disabling bearer [ 148.734761][ T5879] tipc: Left network mode [ 148.754610][T11161] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2333'. [ 148.815936][ T5442] 8021q: adding VLAN 0 to HW filter on device eth7 [ 148.831373][T11173] tipc: Enabled bearer , priority 31 [ 149.018459][ T5879] hsr_slave_0: left promiscuous mode [ 149.026927][ T5879] hsr_slave_1: left promiscuous mode [ 149.029060][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.039469][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.042444][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.046396][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.061327][ T5879] veth1_macvtap: left promiscuous mode [ 149.072810][ T5879] veth0_macvtap: left promiscuous mode [ 149.074679][ T5879] veth1_vlan: left promiscuous mode [ 149.076411][ T5879] veth0_vlan: left promiscuous mode [ 149.191061][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2361'. [ 149.233357][ T5879] team0 (unregistering): Port device team_slave_1 removed [ 149.241399][ T5879] team0 (unregistering): Port device team_slave_0 removed [ 149.269442][T11239] netlink: 436 bytes leftover after parsing attributes in process `syz.2.2364'. [ 149.273220][T11238] program syz.0.2365 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.315088][ T42] audit: type=1326 audit(1787058969.217:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11240 comm="syz.2.2366" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x0 [ 149.345462][ T5442] 8021q: adding VLAN 0 to HW filter on device eth8 [ 149.381110][T11082] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.387003][T11082] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.389981][T11082] bridge_slave_0: entered allmulticast mode [ 149.393994][T11082] bridge_slave_0: entered promiscuous mode [ 149.397608][T11082] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.399972][T11082] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.402343][T11082] bridge_slave_1: entered allmulticast mode [ 149.405618][T11082] bridge_slave_1: entered promiscuous mode [ 149.468766][T11082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.488078][T11082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.524857][T11082] team0: Port device team_slave_0 added [ 149.529981][T11082] team0: Port device team_slave_1 added [ 149.544660][T11082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.546913][T11082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.555818][T11082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.560217][T11082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.562380][T11082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.571371][T11082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.604430][T11082] hsr_slave_0: entered promiscuous mode [ 149.606926][T11082] hsr_slave_1: entered promiscuous mode [ 149.609066][T11082] debugfs: 'hsr0' already exists in 'hsr' [ 149.610855][T11082] Cannot create hsr debugfs directory [ 149.665660][ T5442] 8021q: adding VLAN 0 to HW filter on device eth9 [ 150.222873][ T5742] Bluetooth: hci2: command tx timeout [ 150.396276][ T5837] tipc: Node number set to 3758096385 [ 150.529517][T11082] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.537411][T11082] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.542574][T11082] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 150.552606][T11082] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.557485][T11082] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.567352][T11082] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.572121][T11082] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.584055][T11082] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.674268][T11082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.688332][T11082] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.701170][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.704241][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.716811][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.719810][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.725693][ T5737] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 150.761954][T11294] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 150.761954][T11294] [ 150.814315][T11297] can0: slcan on ptm0. [ 150.873601][ T5737] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 150.878803][ T5737] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 150.881418][ T5737] usb 6-1: config 0 has no interface number 0 [ 150.883445][ T5737] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 150.887157][ T5737] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 150.890509][ T5737] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 150.894883][T11296] can0 (unregistered): slcan off ptm0. [ 150.900660][ T5737] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 150.904342][ T5737] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 150.907748][ T5737] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 150.911928][ T5737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.917585][ T5737] usb 6-1: config 0 descriptor?? [ 150.923999][T11276] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 150.928972][T11276] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 150.939738][ T5737] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 151.025125][T11082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.156432][T11276] ldusb 6-1:0.55: Write buffer overflow, 1 bytes dropped [ 151.166211][ T29] usb 6-1: USB disconnect, device number 3 [ 151.182126][ T29] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 151.186927][T11082] veth0_vlan: entered promiscuous mode [ 151.195914][T11082] veth1_vlan: entered promiscuous mode [ 151.219235][T11082] veth0_macvtap: entered promiscuous mode [ 151.227317][T11082] veth1_macvtap: entered promiscuous mode [ 151.248537][T11082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.256944][T11082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.304339][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.315000][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.321664][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.343076][ T5879] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.357194][ T107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.362205][ T107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.381986][ T107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.385876][ T107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.508211][T11268] Set syz0 is full, maxelem 65536 reached [ 151.903684][T11386] binder: 11384:11386 ioctl c0306201 80000480 returned -14 [ 151.964332][T11394] netlink: 'syz.0.2418': attribute type 1 has an invalid length. [ 152.301179][T11433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.305295][ T5742] Bluetooth: hci2: command tx timeout [ 152.885738][T11503] tmpfs: Cannot change global quota limit on remount [ 152.983173][T11522] binder: 11521:11522 ioctl 400c620e 80000100 returned -22 [ 153.053894][T11535] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 153.541187][T11577] __nla_validate_parse: 3 callbacks suppressed [ 153.541202][T11577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2503'. [ 154.209569][ T5878] kernel read not supported for file /1380/net/snmp6 (pid: 5878 comm: kworker/1:3) [ 154.294569][T11640] CIFS mount error: No usable UNC path provided in device string! [ 154.294569][T11640] [ 154.297989][T11640] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 154.370673][T11646] netlink: 'syz.2.2536': attribute type 10 has an invalid length. [ 154.373398][T11646] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2536'. [ 154.376478][T11646] dummy0: entered promiscuous mode [ 154.382812][ T5742] Bluetooth: hci2: command tx timeout [ 154.630320][T11680] veth0_macvtap: left promiscuous mode [ 154.782958][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 154.971927][ T5442] veth0_macvtap: entered promiscuous mode [ 155.228379][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.316634][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.368281][ T5743] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.374985][ T5743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.382661][ T5743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.387671][ T5743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.390248][ T5743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.404968][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.508759][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.659269][T11729] lo speed is unknown, defaulting to 1000 [ 155.662633][ T13] bridge_slave_1: left allmulticast mode [ 155.666148][ T13] bridge_slave_1: left promiscuous mode [ 155.669361][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.680329][ T13] bridge_slave_0: left allmulticast mode [ 155.682223][ T13] bridge_slave_0: left promiscuous mode [ 155.685259][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.807072][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.812052][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.816854][ T13] bond0 (unregistering): Released all slaves [ 155.896913][ C2] sr 2:0:0:0: [sr0] tag#14 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 155.901080][ C2] sr 2:0:0:0: [sr0] tag#14 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 156.078527][T11729] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.080897][T11729] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.084189][T11729] bridge_slave_0: entered allmulticast mode [ 156.086886][T11729] bridge_slave_0: entered promiscuous mode [ 156.088112][T11801] scsi_nl_rcv_msg: discarding partial skb [ 156.090153][T11729] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.092917][T11729] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.095295][T11729] bridge_slave_1: entered allmulticast mode [ 156.098076][T11729] bridge_slave_1: entered promiscuous mode [ 156.101710][ T5442] 8021q: adding VLAN 0 to HW filter on device eth10 [ 156.131908][T11729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.137705][T11729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.161608][T11729] team0: Port device team_slave_0 added [ 156.167499][ T13] hsr_slave_0: left promiscuous mode [ 156.169983][ T13] hsr_slave_1: left promiscuous mode [ 156.172151][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.174971][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.178565][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.182563][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.191750][ T13] veth1_macvtap: left promiscuous mode [ 156.194427][ T13] veth0_macvtap: left promiscuous mode [ 156.196997][ T13] veth1_vlan: left promiscuous mode [ 156.199333][ T13] veth0_vlan: left promiscuous mode [ 156.369867][ T13] team0 (unregistering): Port device team_slave_1 removed [ 156.378903][ T13] team0 (unregistering): Port device team_slave_0 removed [ 156.455805][T11729] team0: Port device team_slave_1 added [ 156.482353][T11729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.484742][T11729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.494806][T11729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.501805][T11729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.512807][T11729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.526394][T11729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.568651][T11729] hsr_slave_0: entered promiscuous mode [ 156.569162][T11729] hsr_slave_1: entered promiscuous mode [ 156.569482][T11729] debugfs: 'hsr0' already exists in 'hsr' [ 156.569494][T11729] Cannot create hsr debugfs directory [ 156.834667][T11729] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 156.844948][T11729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 156.848823][T11729] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 156.856378][T11729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 156.860327][T11729] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 156.868243][T11729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 156.882274][ T5442] 8021q: adding VLAN 0 to HW filter on device eth11 [ 156.886477][T11729] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 156.897147][T11729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 156.905284][T11853] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2613'. [ 156.938599][T11729] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.941327][T11729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.945449][T11729] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.948695][T11729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.024701][T11729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.028269][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.031976][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.075691][T11729] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.091061][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.094166][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.109674][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.112598][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.210245][ T5442] 8021q: adding VLAN 0 to HW filter on device eth12 [ 157.350191][T11912] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2631'. [ 157.423096][ T5743] Bluetooth: hci2: command tx timeout [ 157.479979][ T5442] 8021q: adding VLAN 0 to HW filter on device eth13 [ 157.562958][T11729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.590033][T11951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2643'. [ 157.594392][T11951] i: renamed from virt_wifi0 [ 157.737208][T11729] veth0_vlan: entered promiscuous mode [ 157.744476][T11729] veth1_vlan: entered promiscuous mode [ 157.768901][T11729] veth0_macvtap: entered promiscuous mode [ 157.775550][T11729] veth1_macvtap: entered promiscuous mode [ 157.789657][T11729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.799317][T11729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.807358][T11977] program syz.1.2653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.878258][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.881529][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.894639][ T60] nvmet: connect request for invalid subsystem testsubsys! [ 157.899835][T11979] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 157.900439][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.905995][ T5601] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.908784][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.912107][ T5601] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.932936][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.938655][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.419291][T12062] vivid-003: disconnect [ 159.422125][T12062] vivid-003: reconnect [ 159.502776][ T5743] Bluetooth: hci2: command tx timeout [ 159.985653][T12096] comedi comedi3: fl512: I/O base address not correctly aligned [ 160.094260][T12106] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2707'. [ 160.128570][T12113] usb usb9: usbfs: process 12113 (syz.6.2710) did not claim interface 20 before use [ 160.431727][ T42] audit: type=1326 audit(2000000000.090:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12147 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 160.455228][ T42] audit: type=1326 audit(2000000000.090:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12147 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 160.461553][ T42] audit: type=1326 audit(2000000000.090:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12147 comm="syz.0.2727" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 160.467349][T12153] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 160.468467][ T42] audit: type=1326 audit(2000000000.090:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12147 comm="syz.0.2727" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 160.478415][ T42] audit: type=1326 audit(2000000000.090:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12147 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 160.484939][ T42] audit: type=1326 audit(2000000000.090:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12147 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 160.492050][ T42] audit: type=1326 audit(2000000000.090:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12147 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 160.498947][ T42] audit: type=1326 audit(2000000000.090:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12147 comm="syz.0.2727" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 160.511840][ T42] audit: type=1326 audit(2000000000.090:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12147 comm="syz.0.2727" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 160.589718][ T5743] Bluetooth: hci1: Malformed LE Event: 0x1b [ 160.623748][T12171] comedi comedi3: unsupported base address 0x4f23 [ 160.702474][T12183] ebtables: wrong size: *len 168, entries_size 48, replsz 48 [ 160.827092][ T29] kernel read not supported for file /bluetooth/6lowpan_control (pid: 29 comm: kworker/1:0) [ 161.015543][ T42] audit: type=1326 audit(2000000000.679:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.1.2754" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 161.059227][T12223] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 161.069750][T12226] tmpfs: Too few inodes for current use [ 161.582841][ T5743] Bluetooth: hci2: command tx timeout [ 161.926924][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2759'. [ 161.930003][T12247] netlink: 'syz.6.2759': attribute type 10 has an invalid length. [ 161.932644][T12247] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2759'. [ 161.940298][T12247] geneve2: entered promiscuous mode [ 161.942126][T12247] geneve2: entered allmulticast mode [ 162.026073][T12254] ufs: You didn't specify the type of your ufs filesystem [ 162.026073][T12254] [ 162.026073][T12254] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 162.026073][T12254] [ 162.026073][T12254] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 162.036860][T12254] ufs: ufstype=old is supported read-only [ 162.376089][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2796'. [ 162.378602][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2796'. [ 162.641788][T12342] usb usb9: usbfs: process 12342 (syz.2.2804) did not claim interface 1 before use [ 163.271519][T12367] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 163.276100][T12367] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 163.278608][T12367] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 163.281052][T12367] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 163.283675][T12367] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 163.286263][T12367] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 163.288839][T12367] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 163.291482][T12367] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 163.294382][T12367] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 163.297085][T12367] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 163.550258][T12384] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2821'. [ 163.662816][ T5743] Bluetooth: hci2: command tx timeout [ 163.718789][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2830'. [ 163.721720][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2830'. [ 163.724769][T12402] netlink: 'syz.2.2830': attribute type 18 has an invalid length. [ 163.783626][T12412] netlink: 'syz.2.2835': attribute type 23 has an invalid length. [ 164.125150][T12440] ALSA: seq fatal error: cannot create timer (-22) [ 164.207700][T12455] tipc: Enabling of bearer rejected, media not registered [ 164.212354][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2854'. [ 164.358742][T12482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2867'. [ 164.517447][T12509] CacheFiles: Failed to register: -95 [ 164.647842][ T5737] IPVS: starting estimator thread 0... [ 164.716776][T12536] can0: slcan on ttyS3. [ 164.742905][T12532] IPVS: using max 45 ests per chain, 108000 per kthread [ 164.803026][T12535] can0 (unregistered): slcan off ttyS3. [ 165.364685][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 165.367565][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 165.376130][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 165.378199][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 165.645004][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 165.647097][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 165.677205][T12602] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 165.686343][T12604] vivid-004: disconnect [ 165.689435][T12603] vivid-004: reconnect [ 165.940280][T12632] __nla_validate_parse: 1 callbacks suppressed [ 165.940300][T12632] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2938'. [ 166.166866][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 166.169477][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 166.182785][T12568] ceph: No mds server is up or the cluster is laggy [ 166.228307][T12659] vlan4: entered promiscuous mode [ 166.487585][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2957'. [ 167.071286][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2977'. [ 167.090907][T12730] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.705306][T12768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2996'. [ 167.716117][T12768] erspan0: entered promiscuous mode [ 167.806771][T12788] program syz.1.3005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.887887][T12805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3013'. [ 168.092948][T12841] team0: Device gtp0 is of different type [ 168.179871][T12850] jffs2: notice: (12850) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 168.184059][T12853] xt_socket: unknown flags 0x50 [ 168.230170][T12858] netlink: 'syz.2.3036': attribute type 15 has an invalid length. [ 168.235055][T12858] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3036'. [ 168.242024][ T5735] ------------[ cut here ]------------ [ 168.244800][ T5735] kernel BUG at fs/jffs2/nodelist.c:462! [ 168.246664][ T5735] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 168.249867][ T5735] CPU: 1 UID: 0 PID: 5735 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 168.254122][ T5735] Tainted: [L]=SOFTLOCKUP [ 168.255482][ T5735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.258634][ T5735] RIP: 0010:jffs2_del_ino_cache+0x24f/0x2c0 [ 168.260601][ T5735] Code: 4c 89 e2 49 8b 5e 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 71 49 89 1c 24 e9 42 ff ff ff e8 a2 09 8a fe 90 <0f> 0b e8 8a 9c f9 fe e9 5b fe ff ff e8 50 9c f9 fe e9 59 ff ff ff [ 168.266791][ T5735] RSP: 0000:ffffc90003e3fa70 EFLAGS: 00010293 [ 168.268731][ T5735] RAX: 0000000000000000 RBX: ffff88804794c000 RCX: 0000000000000000 [ 168.271196][ T5735] RDX: ffff888026292580 RSI: ffffffff837fd7fe RDI: ffff88804d0d3ee0 [ 168.273688][ T5735] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffed1008f2986c [ 168.276148][ T5735] R10: ffff88804794c363 R11: 0000000000000000 R12: ffff88804f20bc80 [ 168.278602][ T5735] R13: dffffc0000000000 R14: ffff88804d0d3ec0 R15: ffff88804f20bd30 [ 168.281059][ T5735] FS: 0000000000000000(0000) GS:ffff888096cdd000(0063) knlGS:0000000057b46480 [ 168.283844][ T5735] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 168.285895][ T5735] CR2: 00000000f73cbe8c CR3: 000000005fff6000 CR4: 0000000000352ef0 [ 168.288364][ T5735] Call Trace: [ 168.289459][ T5735] [ 168.290425][ T5735] jffs2_do_clear_inode+0x3ca/0x470 [ 168.292065][ T5735] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 168.293789][ T5735] evict+0x3c2/0xad0 [ 168.295064][ T5735] ? list_lru_del+0xba/0x2f0 [ 168.296524][ T5735] ? list_lru_del+0xba/0x2f0 [ 168.297988][ T5735] ? __pfx_evict+0x10/0x10 [ 168.299420][ T5735] ? do_raw_spin_unlock+0x145/0x1e0 [ 168.301244][ T5735] ? find_held_lock+0x2b/0x80 [ 168.302730][ T5735] ? find_held_lock+0x2b/0x80 [ 168.304227][ T5735] dispose_list+0x117/0x1e0 [ 168.305668][ T5735] evict_inodes+0x582/0x6f0 [ 168.307096][ T5735] ? __pfx_evict_inodes+0x10/0x10 [ 168.308721][ T5735] ? sync_blockdev+0x51/0x70 [ 168.310243][ T5735] generic_shutdown_super+0xc8/0x360 [ 168.312075][ T5735] kill_mtd_super+0x1d/0x80 [ 168.313685][ T5735] jffs2_kill_sb+0x7c/0xb0 [ 168.315091][ T5735] deactivate_locked_super+0xbd/0x140 [ 168.316792][ T5735] deactivate_super+0xea/0x110 [ 168.318350][ T5735] cleanup_mnt+0x21f/0x450 [ 168.319821][ T5735] task_work_run+0x150/0x240 [ 168.321304][ T5735] ? __pfx_task_work_run+0x10/0x10 [ 168.322916][ T5735] exit_to_user_mode_loop+0x1d8/0x700 [ 168.324630][ T5735] ? rcu_is_watching+0x12/0xc0 [ 168.326127][ T5735] __do_fast_syscall_32+0x701/0x970 [ 168.327794][ T5735] do_fast_syscall_32+0x32/0x70 [ 168.329314][ T5735] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 168.331288][ T5735] RIP: 0023:0xf700efec [ 168.332589][ T5735] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 168.338639][ T5735] RSP: 002b:00000000ff839d88 EFLAGS: 00000292 ORIG_RAX: 0000000000000034 [ 168.341674][ T5735] RAX: 0000000000000000 RBX: 00000000ff839e30 RCX: 0000000000000009 [ 168.344404][ T5735] RDX: 00000000f73d7ff4 RSI: 00000000f7211656 RDI: 00000000ff83aec4 [ 168.346907][ T5735] RBP: 00000000ff839e30 R08: 0000000000000000 R09: 0000000000000000 [ 168.349372][ T5735] R10: 0000000000000000 R11: 0000000000000216 R12: 0000000000000000 [ 168.351865][ T5735] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.354358][ T5735] [ 168.355334][ T5735] Modules linked in: [ 168.357005][ T5735] ---[ end trace 0000000000000000 ]--- [ 168.359051][ T5735] RIP: 0010:jffs2_del_ino_cache+0x24f/0x2c0 [ 168.360982][ T5735] Code: 4c 89 e2 49 8b 5e 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 71 49 89 1c 24 e9 42 ff ff ff e8 a2 09 8a fe 90 <0f> 0b e8 8a 9c f9 fe e9 5b fe ff ff e8 50 9c f9 fe e9 59 ff ff ff [ 168.367077][ T5735] RSP: 0000:ffffc90003e3fa70 EFLAGS: 00010293 [ 168.368977][ T5735] RAX: 0000000000000000 RBX: ffff88804794c000 RCX: 0000000000000000 [ 168.371374][ T5735] RDX: ffff888026292580 RSI: ffffffff837fd7fe RDI: ffff88804d0d3ee0 [ 168.374140][ T5735] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffed1008f2986c [ 168.376669][ T5735] R10: ffff88804794c363 R11: 0000000000000000 R12: ffff88804f20bc80 [ 168.379170][ T5735] R13: dffffc0000000000 R14: ffff88804d0d3ec0 R15: ffff88804f20bd30 [ 168.382213][ T5735] FS: 0000000000000000(0000) GS:ffff888096cdd000(0063) knlGS:0000000057b46480 [ 168.385996][ T5735] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 168.388236][ T5735] CR2: 00000000f73cbe8c CR3: 000000005fff6000 CR4: 0000000000352ef0 [ 168.390726][ T5735] Kernel panic - not syncing: Fatal exception [ 168.393248][ T5735] Kernel Offset: disabled [ 168.394766][ T5735] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:16:28 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=000000000000002e RDX=0000000000001000 RSI=0000000000000008 RDI=ffffffff91221ad0 RBP=ffffffff8bbe86e2 RSP=ffffc900046571b0 R8 =ffffffff9b98c108 R9 =0000000000002b6d R10=0000000000015b68 R11=000000000000001f R12=dffffc0000000000 R13=ffff88804f5597b8 R14=ffffffff9b98c108 R15=0000000000002b6d RIP=ffffffff82797a30 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bdd000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73f82f0 CR3=000000004d382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000004fffffff3 0000012800000094 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a2b8d5 RDI=ffffffff9b9fa8a0 RBP=ffffffff9b9fa860 RSP=ffffc90003e3f360 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000003a555043 R12=0000000000000000 R13=0000000000000034 R14=ffffffff9b6fa1e8 R15=ffffffff85a2b870 RIP=ffffffff85a2b8ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096cdd000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73cbe8c CR3=000000005fff6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffc90006f2ff48 RCX=0000000000000814 RDX=0000000000000000 RSI=ffffffff8c401400 RDI=0000000000000014 RBP=ffffc90006f2ff38 RSP=ffffc90006f2ff00 R8 =0000000000000000 R9 =fffffbfff224435a R10=ffffffff91221ad7 R11=0000000000000000 R12=ffff88804d850000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81b6bbc8 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ddd000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f25588 CR3=000000006c015000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000002d800000000 0000000d00000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000001 RBX=0000000000050eba RCX=ffffffff82859c61 RDX=ffff888070114b00 RSI=ffffffff82859639 RDI=0000000000050eba RBP=0000000000000000 RSP=ffffc90006e2f470 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=000000000000cbd0 R12=8000000050eba007 R13=0000000000000001 R14=ffff88805c87db50 R15=8000000050eba007 RIP=ffffffff8209e1af RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f2a190 CR3=000000000e994000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000