last executing test programs: 4m4.189304396s ago: executing program 0 (id=13502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x501, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x4004000) 4m4.127217409s ago: executing program 0 (id=13506): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x30000, 0x0, {0x26}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 4m4.088387826s ago: executing program 0 (id=13510): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) 4m4.03660531s ago: executing program 0 (id=13513): r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4ea0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10, 0x0}}], 0x1, 0x0) 4m4.036137187s ago: executing program 0 (id=13515): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 4m3.969111614s ago: executing program 0 (id=13519): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000001c0)={0x14000000}) 3m47.639795341s ago: executing program 32 (id=13519): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000001c0)={0x14000000}) 7.705250432s ago: executing program 3 (id=22875): ioperm(0x0, 0x1, 0x1bf4) r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000440)={0x0}) 7.636500447s ago: executing program 3 (id=22878): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="bb64753734e50b1e3f220065b7a35d32", 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) 7.582923386s ago: executing program 3 (id=22880): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000180)=@gcm_128={{0x304}, "b1119702dec0b3fc", "ffe70000de00c8d07868000000000014", "70d2e318", "bcba4b0000940c36"}, 0x28) 6.644534513s ago: executing program 3 (id=22902): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x84000, 0x0) 6.580680784s ago: executing program 3 (id=22904): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000000)={'trans=virtio,', {[{@cache_readahead}, {@cachetag={'cachetag', 0x3d, 'overlay\x00'}}]}}) read$FUSE(r0, &(0x7f0000003040)={0x2020}, 0x2020) 6.356361331s ago: executing program 3 (id=22914): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, <r2=>r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000340)='\x00') 6.280442445s ago: executing program 33 (id=22914): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, <r2=>r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000340)='\x00') 1.022879169s ago: executing program 4 (id=23032): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 1.019945855s ago: executing program 4 (id=23035): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffe47, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 867.515183ms ago: executing program 4 (id=23041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 864.091218ms ago: executing program 4 (id=23043): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) msgsnd(0x0, 0x0, 0x4000, 0x0) 599.907059ms ago: executing program 4 (id=23053): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r1}, 0xc) 536.264024ms ago: executing program 4 (id=23057): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 370.853461ms ago: executing program 5 (id=23062): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0xfff, 0x2, 0x9, 0x69444d41, 0x21726574, 0x4}]}) 275.04864ms ago: executing program 5 (id=23063): r0 = socket$inet(0x2, 0x4000000805, 0x0) listen(r0, 0x7) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafc0d8c560a84476080040000000f0800000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 274.849976ms ago: executing program 5 (id=23064): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000435000/0x3000)=nil, 0x3000, 0x17) 240.136015ms ago: executing program 5 (id=23065): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 180.431532ms ago: executing program 2 (id=23066): r0 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) fsmount(r0, 0x0, 0x0) 180.204065ms ago: executing program 5 (id=23067): timer_create(0x1, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) personality(0x4000005) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}, 0x0) 180.079227ms ago: executing program 2 (id=23068): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x10a, 0x0, 0x2}]}) 178.561042ms ago: executing program 5 (id=23070): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) memfd_secret(0x0) 111.381608ms ago: executing program 1 (id=23071): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x17) 110.986403ms ago: executing program 1 (id=23072): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001a40)={'wlan0\x00', <r2=>0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="060066008e8800001c00330068010000080211000000ffffffffffffffffffffffff00000a0006"], 0x4c}}, 0x0) 110.796804ms ago: executing program 1 (id=23073): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x2}]) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x100) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778) 46.174948ms ago: executing program 2 (id=23074): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f00000001c0)={'wlan1\x00', @random="018dffffff8d"}) 45.877031ms ago: executing program 1 (id=23075): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x179}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000007c0)=<r2=>0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd_index=0x3, 0x9, 0x0}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) 44.397575ms ago: executing program 2 (id=23076): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0xfffffffffffffcd0) 42.050666ms ago: executing program 1 (id=23077): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x7, @none, 0xb8}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x1, @none}, 0xe) 3.364245ms ago: executing program 2 (id=23078): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1.471055ms ago: executing program 1 (id=23079): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a40)="9a63", 0x2}, {&(0x7f0000000b00)="be5323", 0x3}], 0x2}}], 0x1, 0x0) 0s ago: executing program 2 (id=23080): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000002700)=[{{&(0x7f0000000440)={0xa, 0x4e21, 0x80000001, @local, 0x5}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000480)='>', 0x1}], 0x1}}], 0x1, 0x2000c8c4) kernel console output (not intermixed with test programs): 68] libceph: connect (1)[c::]:6789 error -101 [ 330.919474][ T1468] libceph: mon0 (1)[c::]:6789 connect error [ 331.055871][T11775] syz.1.18219: page allocation failure: order:6, mode:0x40cc0(GFP_KERNEL|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 331.059515][T11775] CPU: 2 UID: 0 PID: 11775 Comm: syz.1.18219 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 331.059530][T11775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 331.059537][T11775] Call Trace: [ 331.059540][T11775] <TASK> [ 331.059544][T11775] dump_stack_lvl+0x16c/0x1f0 [ 331.059562][T11775] warn_alloc+0x24d/0x3a0 [ 331.059581][T11775] ? __pfx_warn_alloc+0x10/0x10 [ 331.059596][T11775] ? psi_memstall_leave+0x17d/0x250 [ 331.059611][T11775] ? __alloc_pages_direct_compact+0x1b1/0x590 [ 331.059629][T11775] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 331.059647][T11775] ? psi_memstall_leave+0x17d/0x250 [ 331.059662][T11775] __alloc_frozen_pages_noprof+0xf2f/0x2470 [ 331.059685][T11775] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 331.059704][T11775] ? __pfx_stack_trace_save+0x10/0x10 [ 331.059721][T11775] ? kasan_save_stack+0x42/0x60 [ 331.059736][T11775] ? kasan_save_stack+0x33/0x60 [ 331.059750][T11775] ? kasan_save_track+0x14/0x30 [ 331.059765][T11775] ? __kasan_kmalloc+0xaa/0xb0 [ 331.059779][T11775] ? do_check_common+0x43e3/0xb960 [ 331.059790][T11775] ? bpf_check+0x77f7/0xb330 [ 331.059801][T11775] ? bpf_prog_load+0xe3c/0x2480 [ 331.059816][T11775] ? __sys_bpf+0x4043/0x49c0 [ 331.059831][T11775] ? __ia32_sys_bpf+0x76/0xe0 [ 331.059839][T11775] ? __do_fast_syscall_32+0x73/0x120 [ 331.059854][T11775] ? do_fast_syscall_32+0x32/0x80 [ 331.059870][T11775] __alloc_pages_noprof+0xb/0x1b0 [ 331.059886][T11775] ___kmalloc_large_node+0x84/0x1b0 [ 331.059901][T11775] __kmalloc_large_node_noprof+0x1c/0x70 [ 331.059915][T11775] __kmalloc_node_track_caller_noprof.cold+0x5/0x5f [ 331.059928][T11775] ? copy_array.constprop.0+0x88/0x110 [ 331.059945][T11775] krealloc_noprof+0x1fb/0x380 [ 331.059963][T11775] copy_array.constprop.0+0x88/0x110 [ 331.059978][T11775] copy_verifier_state+0x205/0xe70 [ 331.059993][T11775] ? kasan_save_track+0x14/0x30 [ 331.060009][T11775] do_check_common+0x459e/0xb960 [ 331.060033][T11775] ? __pfx_do_check_common+0x10/0x10 [ 331.060046][T11775] ? kvfree+0x47/0x50 [ 331.060059][T11775] ? check_cfg+0x403/0x8e0 [ 331.060071][T11775] bpf_check+0x77f7/0xb330 [ 331.060091][T11775] ? __pfx_bpf_check+0x10/0x10 [ 331.060103][T11775] ? find_held_lock+0x2d/0x110 [ 331.060115][T11775] ? bpf_prog_load+0xd42/0x2480 [ 331.060131][T11775] ? __pfx_lock_release+0x10/0x10 [ 331.060145][T11775] ? trace_lock_acquire+0x14e/0x1f0 [ 331.060157][T11775] ? bpf_prog_load+0xd42/0x2480 [ 331.060175][T11775] ? __asan_memset+0x23/0x50 [ 331.060189][T11775] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 331.060205][T11775] bpf_prog_load+0xe3c/0x2480 [ 331.060223][T11775] ? __pfx_bpf_prog_load+0x10/0x10 [ 331.060239][T11775] ? find_held_lock+0x2d/0x110 [ 331.060252][T11775] ? __might_fault+0x13b/0x190 [ 331.060267][T11775] ? __might_fault+0xe3/0x190 [ 331.060280][T11775] __sys_bpf+0x4043/0x49c0 [ 331.060295][T11775] ? __pfx_futex_wake+0x10/0x10 [ 331.060311][T11775] ? __pfx___sys_bpf+0x10/0x10 [ 331.060343][T11775] ? __pfx_lock_release+0x10/0x10 [ 331.060361][T11775] ? do_futex+0x123/0x350 [ 331.060374][T11775] ? __pfx_do_futex+0x10/0x10 [ 331.060392][T11775] ? xfd_validate_state+0x5d/0x180 [ 331.060408][T11775] ? rcu_is_watching+0x12/0xc0 [ 331.060421][T11775] __ia32_sys_bpf+0x76/0xe0 [ 331.060431][T11775] __do_fast_syscall_32+0x73/0x120 [ 331.060447][T11775] do_fast_syscall_32+0x32/0x80 [ 331.060462][T11775] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.060479][T11775] RIP: 0023:0xf7f23579 [ 331.060487][T11775] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 331.060498][T11775] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 331.060508][T11775] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000700 [ 331.060514][T11775] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.060520][T11775] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 331.060526][T11775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.060532][T11775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 331.060544][T11775] </TASK> [ 331.060548][T11775] Mem-Info: [ 331.179892][T11775] active_anon:1181 inactive_anon:1873 isolated_anon:0 [ 331.179892][T11775] active_file:2221 inactive_file:6106 isolated_file:0 [ 331.179892][T11775] unevictable:1764 dirty:536 writeback:0 [ 331.179892][T11775] slab_reclaimable:6169 slab_unreclaimable:123572 [ 331.179892][T11775] mapped:22566 shmem:2052 pagetables:1427 [ 331.179892][T11775] sec_pagetables:321 bounce:0 [ 331.179892][T11775] kernel_misc_reclaimable:0 [ 331.179892][T11775] free:25760 free_pcp:356 free_cma:0 [ 331.192747][T11775] Node 0 active_anon:2660kB inactive_anon:16kB active_file:2488kB inactive_file:460kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:1800kB dirty:152kB writeback:0kB shmem:4412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9012kB pagetables:960kB sec_pagetables:1140kB all_unreclaimable? yes [ 331.201214][T11775] Node 1 active_anon:2064kB inactive_anon:7476kB active_file:6396kB inactive_file:23964kB unevictable:3520kB isolated(anon):0kB isolated(file):0kB mapped:88464kB dirty:1992kB writeback:0kB shmem:3796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4592kB pagetables:4848kB sec_pagetables:144kB all_unreclaimable? no [ 331.209973][T11775] Node 0 DMA free:3528kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 331.218005][T11775] lowmem_reserve[]: 0 294 294 294 294 [ 331.220077][T11775] Node 0 DMA32 free:30244kB boost:16384kB min:29944kB low:33332kB high:36720kB reserved_highatomic:2048KB active_anon:2660kB inactive_anon:16kB active_file:2488kB inactive_file:460kB unevictable:3536kB writepending:152kB present:1032196kB managed:301720kB mlocked:0kB bounce:0kB free_pcp:56kB local_pcp:0kB free_cma:0kB [ 331.228332][T11775] lowmem_reserve[]: 0 0 0 0 0 [ 331.229689][T11775] Node 1 DMA32 free:69032kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB active_anon:2064kB inactive_anon:7376kB active_file:6396kB inactive_file:23964kB unevictable:3520kB writepending:1992kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:1528kB local_pcp:0kB free_cma:0kB [ 331.237909][T11775] lowmem_reserve[]: 0 0 0 0 0 [ 331.239264][T11775] Node 0 DMA: 84*4kB (U) 37*8kB (U) 21*16kB (U) 14*32kB (U) 5*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 3528kB [ 331.245840][T11775] Node 0 DMA32: 360*4kB (UMEH) 319*8kB (UMEH) 22*16kB (UME) 38*32kB (UMEH) 117*64kB (UMEH) 50*128kB (UME) 14*256kB (UME) 6*512kB (U) 0*1024kB 2*2048kB (M) 0*4096kB = 30200kB [ 331.251272][T11775] Node 1 DMA32: 1429*4kB (UMEH) 1266*8kB (UMEH) 763*16kB (UMEH) 405*32kB (MEH) 218*64kB (UMEH) 25*128kB (MEH) 8*256kB (UMEH) 4*512kB (MH) 6*1024kB (UMH) 0*2048kB 0*4096kB = 68404kB [ 331.258874][T11775] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 331.261719][T11775] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 331.264798][T11775] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 331.267991][T11775] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 331.270463][T11775] 9974 total pagecache pages [ 331.272001][T11775] 777 pages in swap cache [ 331.273529][T11775] Free swap = 70360kB [ 331.275111][T11775] Total swap = 124996kB [ 331.276393][T11775] 524155 pages RAM [ 331.277719][T11775] 0 pages HighMem/MovableOnly [ 331.279092][T11775] 207822 pages reserved [ 331.280339][T11775] 0 pages cma reserved [ 331.461594][ T1468] libceph: connect (1)[c::]:6789 error -101 [ 331.463368][ T1468] libceph: mon0 (1)[c::]:6789 connect error [ 331.490945][T11831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18243'. [ 331.500414][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 331.500424][ T40] audit: type=1326 audit(2000000161.902:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.1.18244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 331.509417][T11803] ceph: No mds server is up or the cluster is laggy [ 331.509546][ T40] audit: type=1326 audit(2000000161.902:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.1.18244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 331.519573][ T40] audit: type=1326 audit(2000000161.912:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm="syz.1.18244" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 331.526221][ T40] audit: type=1326 audit(2000000161.912:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 331.532594][ T40] audit: type=1326 audit(2000000161.912:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 331.540214][ T40] audit: type=1326 audit(2000000161.912:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 331.556036][ T40] audit: type=1326 audit(2000000161.912:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 331.562769][ T40] audit: type=1326 audit(2000000161.912:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 331.569732][ T40] audit: type=1326 audit(2000000161.912:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11832 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 332.270513][T11890] ax25_connect(): syz.4.18270 uses autobind, please contact jreuter@yaina.de [ 332.350589][T11904] netlink: 'syz.1.18277': attribute type 5 has an invalid length. [ 333.283517][T11936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18291'. [ 333.286072][T11936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18291'. [ 333.291000][T11936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18291'. [ 333.346637][T11945] vivid-007: disconnect [ 333.348606][T11937] vivid-007: reconnect [ 333.429482][T11955] tmpfs: Group quota inode hardlimit too large. [ 333.623777][T11987] __nla_validate_parse: 1 callbacks suppressed [ 333.623789][T11987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18316'. [ 333.881476][T12012] overlayfs: failed to resolve './file1': -2 [ 333.916504][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18331'. [ 333.916612][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18330'. [ 333.919261][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18331'. [ 333.921600][T12017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18330'. [ 333.924312][T12019] netlink: 'syz.3.18331': attribute type 18 has an invalid length. [ 333.926662][T12017] netlink: 'syz.4.18330': attribute type 7 has an invalid length. [ 333.939365][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18331'. [ 334.015313][T12033] pim6reg: entered allmulticast mode [ 334.020345][T12033] pim6reg: left allmulticast mode [ 334.341337][T12082] block nbd2: not configured, cannot reconfigure [ 334.587363][T12127] delete_channel: no stack [ 334.587717][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18385'. [ 334.618714][T12132] tipc: Enabling of bearer <udp:syz0> rejected, already enabled [ 334.811735][T12168] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media [ 334.851815][T12176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18408'. [ 334.983603][T12197] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 334.986251][T12197] tipc: Enabled bearer <udp:syz1>, priority 10 [ 335.183491][T12218] netlink: 112 bytes leftover after parsing attributes in process `syz.4.18428'. [ 335.833651][T12238] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10 [ 335.836532][T12238] tipc: Bearer <udp:syz1>: trying with adjusted priority [ 335.839154][T12238] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media [ 335.898933][ T36] libceph: connect (1)[c::]:6789 error -22 [ 335.900929][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 335.976135][T12266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18451'. [ 336.064821][T12279] usb usb8: usbfs: process 12279 (syz.1.18457) did not claim interface 7 before use [ 336.122762][ T36] IPVS: starting estimator thread 0... [ 336.185030][ T36] libceph: connect (1)[c::]:6789 error -22 [ 336.188390][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 336.223313][T12303] rtc_cmos 00:05: Alarms can be up to one day in the future [ 336.227221][T12289] IPVS: using max 40 ests per chain, 96000 per kthread [ 336.385079][T12327] mkiss: ax0: crc mode is auto. [ 336.408104][ T40] audit: type=1326 audit(2000000166.495:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12330 comm="syz.3.18482" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 336.730194][ T36] libceph: connect (1)[c::]:6789 error -22 [ 336.733073][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 336.782523][T12249] ceph: No mds server is up or the cluster is laggy [ 336.888511][T12393] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma? [ 337.169487][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 337.169503][ T40] audit: type=1326 audit(2000000000.056:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12438 comm="syz.3.18536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 337.180552][ T40] audit: type=1326 audit(2000000000.056:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12438 comm="syz.3.18536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 337.188642][ T40] audit: type=1326 audit(2000000000.056:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12438 comm="syz.3.18536" exe="/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 337.200013][ T40] audit: type=1326 audit(2000000000.056:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12438 comm="syz.3.18536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 337.206765][ T40] audit: type=1326 audit(2000000000.056:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12438 comm="syz.3.18536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 337.214730][ T40] audit: type=1326 audit(2000000000.056:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12438 comm="syz.3.18536" exe="/syz-executor" sig=0 arch=40000003 syscall=100 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 337.221318][ T40] audit: type=1326 audit(2000000000.056:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12438 comm="syz.3.18536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 337.227830][ T40] audit: type=1326 audit(2000000000.056:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12438 comm="syz.3.18536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 337.438740][T12468] netlink: 'syz.3.18549': attribute type 13 has an invalid length. [ 337.441006][T12468] netlink: 'syz.3.18549': attribute type 11 has an invalid length. [ 337.757281][T12512] pim6reg527: entered allmulticast mode [ 337.984564][T12561] vlan5: entered promiscuous mode [ 338.097799][ T64] libceph: connect (1)[c::]:6789 error -101 [ 338.100325][ T64] libceph: mon0 (1)[c::]:6789 connect error [ 338.152363][T12580] sp0: Synchronizing with TNC [ 338.197189][T12587] mkiss: ax0: crc mode is auto. [ 338.378675][T12611] Bluetooth: MGMT ver 1.23 [ 338.386895][ T64] libceph: connect (1)[c::]:6789 error -101 [ 338.389383][ T64] libceph: mon0 (1)[c::]:6789 connect error [ 338.478181][T12627] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 338.684757][T12657] openvswitch: netlink: nsh attr 15107 is out of range max 3 [ 338.688112][T12657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.694703][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 338.697960][ T9] hid-generic 0000:0000:0000.0009: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0 [ 338.935087][ T64] libceph: connect (1)[c::]:6789 error -101 [ 338.937630][ T64] libceph: mon0 (1)[c::]:6789 connect error [ 338.970516][T12572] ceph: No mds server is up or the cluster is laggy [ 339.353338][T12732] ptrace attach of "/syz-executor exec"[6089] was attempted by "/syz-executor exec"[12732] [ 339.507609][T12753] virt_wifi0 speed is unknown, defaulting to 1000 [ 339.563485][T12769] netlink: 'syz.4.18695': attribute type 2 has an invalid length. [ 339.690758][T12791] __nla_validate_parse: 10 callbacks suppressed [ 339.690770][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18705'. [ 340.129493][T12834] netlink: 260 bytes leftover after parsing attributes in process `syz.2.18726'. [ 340.133971][T12834] netlink: 260 bytes leftover after parsing attributes in process `syz.2.18726'. [ 340.336555][T12861] CIFS: Unable to determine destination address [ 340.391797][ T40] audit: type=1326 audit(2000000003.068:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12867 comm="syz.4.18743" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 340.398967][ T40] audit: type=1326 audit(2000000003.068:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12867 comm="syz.4.18743" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 340.614947][T12907] netlink: 44 bytes leftover after parsing attributes in process `syz.4.18761'. [ 340.617469][T12907] netlink: 43 bytes leftover after parsing attributes in process `syz.4.18761'. [ 340.620326][T12907] netlink: 'syz.4.18761': attribute type 6 has an invalid length. [ 340.623290][T12907] netlink: 'syz.4.18761': attribute type 5 has an invalid length. [ 340.625726][T12907] netlink: 43 bytes leftover after parsing attributes in process `syz.4.18761'. [ 341.922318][T12971] ptrace attach of "/syz-executor exec"[6093] was attempted by ""[12971] [ 342.286726][T13031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18820'. [ 342.623881][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18841'. [ 343.462487][T13149] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 343.527741][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18882'. [ 343.691527][T13179] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.808416][T13220] ceph: No mds server is up or the cluster is laggy [ 344.982638][T13258] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.18928'. [ 344.986171][T13258] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 345.006309][T13262] input: syz0 as /devices/virtual/input/input54 [ 345.017393][T13264] vivid-007: ================= START STATUS ================= [ 345.019561][T13264] vivid-007: Enable Output Cropping: true [ 345.023969][T13264] vivid-007: Enable Output Composing: true [ 345.028026][T13264] vivid-007: Enable Output Scaler: true [ 345.029626][T13264] vivid-007: Tx RGB Quantization Range: Automatic [ 345.031399][T13264] vivid-007: Transmit Mode: HDMI [ 345.032790][T13264] vivid-007: Hotplug Present: 0x00000000 [ 345.035283][T13264] vivid-007: RxSense Present: 0x00000000 [ 345.036970][T13264] vivid-007: EDID Present: 0x00000000 [ 345.038481][T13264] vivid-007: ================== END STATUS ================== [ 345.098488][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 345.098503][ T40] audit: type=1326 audit(2000000007.464:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.1.18935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 345.121833][ T40] audit: type=1326 audit(2000000007.464:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.1.18935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 345.128914][ T40] audit: type=1326 audit(2000000007.473:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.1.18935" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 345.134975][ T40] audit: type=1326 audit(2000000007.473:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.1.18935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 345.143394][ T40] audit: type=1326 audit(2000000007.473:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.1.18935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 345.150415][ T40] audit: type=1326 audit(2000000007.473:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.1.18935" exe="/syz-executor" sig=0 arch=40000003 syscall=379 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 345.162528][ T40] audit: type=1326 audit(2000000007.473:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.1.18935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 345.162564][ T40] audit: type=1326 audit(2000000007.473:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.1.18935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 345.312309][T13302] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18950'. [ 345.398861][T13314] tipc: Enabling of bearer <udp:syz1> rejected, already enabled [ 345.456231][T13322] netlink: 252 bytes leftover after parsing attributes in process `syz.1.18960'. [ 345.459129][T13322] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18960'. [ 345.636745][T13353] netlink: 88 bytes leftover after parsing attributes in process `syz.4.18975'. [ 345.694938][T13367] netlink: 'syz.2.18982': attribute type 5 has an invalid length. [ 346.090086][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19000'. [ 346.327103][T13423] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19009'. [ 346.330983][T13423] netlink: 'syz.1.19009': attribute type 1 has an invalid length. [ 346.333785][T13423] netlink: 128 bytes leftover after parsing attributes in process `syz.1.19009'. [ 346.474637][T13429] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media [ 346.642729][T13439] netlink: 7 bytes leftover after parsing attributes in process `syz.1.19017'. [ 346.780200][T13410] syz.4.19002: page allocation failure: order:6, mode:0x40cc0(GFP_KERNEL|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 346.783869][T13410] CPU: 3 UID: 0 PID: 13410 Comm: syz.4.19002 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 346.783882][T13410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 346.783889][T13410] Call Trace: [ 346.783893][T13410] <TASK> [ 346.783897][T13410] dump_stack_lvl+0x16c/0x1f0 [ 346.783916][T13410] warn_alloc+0x24d/0x3a0 [ 346.783934][T13410] ? __pfx_warn_alloc+0x10/0x10 [ 346.783949][T13410] ? psi_memstall_leave+0x17d/0x250 [ 346.783963][T13410] ? __alloc_pages_direct_compact+0x1b1/0x590 [ 346.783981][T13410] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 346.783999][T13410] ? psi_memstall_leave+0x17d/0x250 [ 346.784014][T13410] __alloc_frozen_pages_noprof+0xf2f/0x2470 [ 346.784037][T13410] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 346.784060][T13410] ? __pfx_stack_trace_save+0x10/0x10 [ 346.784077][T13410] ? kasan_save_stack+0x42/0x60 [ 346.784092][T13410] ? kasan_save_stack+0x33/0x60 [ 346.784107][T13410] ? kasan_save_track+0x14/0x30 [ 346.784121][T13410] ? __kasan_kmalloc+0xaa/0xb0 [ 346.784145][T13410] ? do_check_common+0x43e3/0xb960 [ 346.784157][T13410] ? bpf_check+0x77f7/0xb330 [ 346.784168][T13410] ? bpf_prog_load+0xe3c/0x2480 [ 346.784199][T13410] ? __sys_bpf+0x4043/0x49c0 [ 346.784217][T13410] ? __ia32_sys_bpf+0x76/0xe0 [ 346.784226][T13410] ? __do_fast_syscall_32+0x73/0x120 [ 346.784241][T13410] ? do_fast_syscall_32+0x32/0x80 [ 346.784257][T13410] __alloc_pages_noprof+0xb/0x1b0 [ 346.784273][T13410] ___kmalloc_large_node+0x84/0x1b0 [ 346.784288][T13410] __kmalloc_large_node_noprof+0x1c/0x70 [ 346.784302][T13410] __kmalloc_node_track_caller_noprof.cold+0x5/0x5f [ 346.784316][T13410] ? copy_array.constprop.0+0x88/0x110 [ 346.784332][T13410] krealloc_noprof+0x1fb/0x380 [ 346.784350][T13410] copy_array.constprop.0+0x88/0x110 [ 346.784365][T13410] copy_verifier_state+0x205/0xe70 [ 346.784380][T13410] ? kasan_save_track+0x14/0x30 [ 346.784397][T13410] do_check_common+0x459e/0xb960 [ 346.784421][T13410] ? __pfx_do_check_common+0x10/0x10 [ 346.784433][T13410] ? kvfree+0x47/0x50 [ 346.784446][T13410] ? check_cfg+0x403/0x8e0 [ 346.784459][T13410] bpf_check+0x77f7/0xb330 [ 346.784478][T13410] ? __pfx_bpf_check+0x10/0x10 [ 346.784490][T13410] ? find_held_lock+0x2d/0x110 [ 346.784503][T13410] ? bpf_prog_load+0xd42/0x2480 [ 346.784518][T13410] ? __pfx_lock_release+0x10/0x10 [ 346.784533][T13410] ? trace_lock_acquire+0x14e/0x1f0 [ 346.784546][T13410] ? bpf_prog_load+0xd42/0x2480 [ 346.784563][T13410] ? __asan_memset+0x23/0x50 [ 346.784577][T13410] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 346.784594][T13410] bpf_prog_load+0xe3c/0x2480 [ 346.784612][T13410] ? __pfx_bpf_prog_load+0x10/0x10 [ 346.784627][T13410] ? find_held_lock+0x2d/0x110 [ 346.784640][T13410] ? __might_fault+0x13b/0x190 [ 346.784656][T13410] ? __might_fault+0xe3/0x190 [ 346.784670][T13410] __sys_bpf+0x4043/0x49c0 [ 346.784687][T13410] ? __pfx___sys_bpf+0x10/0x10 [ 346.784702][T13410] ? __pfx_lock_release+0x10/0x10 [ 346.784720][T13410] ? do_futex+0x123/0x350 [ 346.784733][T13410] ? __pfx_do_futex+0x10/0x10 [ 346.784751][T13410] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 346.784767][T13410] ? kcov_ioctl+0x265/0x730 [ 346.784785][T13410] __ia32_sys_bpf+0x76/0xe0 [ 346.784795][T13410] __do_fast_syscall_32+0x73/0x120 [ 346.784811][T13410] do_fast_syscall_32+0x32/0x80 [ 346.784825][T13410] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 346.784843][T13410] RIP: 0023:0xf7fe3579 [ 346.784852][T13410] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 346.784862][T13410] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 346.784871][T13410] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000700 [ 346.784877][T13410] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 346.784883][T13410] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 346.784889][T13410] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 346.784895][T13410] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 346.784907][T13410] </TASK> [ 346.784920][T13410] Mem-Info: [ 346.911478][ T40] audit: type=1326 audit(2000000009.166:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13401 comm="syz.2.18999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7fc00000 [ 346.925061][T13410] active_anon:745 inactive_anon:1117 isolated_anon:0 [ 346.925061][T13410] active_file:277 inactive_file:9110 isolated_file:0 [ 346.925061][T13410] unevictable:1760 dirty:184 writeback:3 [ 346.925061][T13410] slab_reclaimable:6154 slab_unreclaimable:127869 [ 346.925061][T13410] mapped:22099 shmem:1806 pagetables:1510 [ 346.925061][T13410] sec_pagetables:322 bounce:0 [ 346.925061][T13410] kernel_misc_reclaimable:0 [ 346.925061][T13410] free:21320 free_pcp:296 free_cma:0 [ 346.946913][T13410] Node 0 active_anon:144kB inactive_anon:44kB active_file:108kB inactive_file:16kB unevictable:3520kB isolated(anon):0kB isolated(file):0kB mapped:240kB dirty:64kB writeback:8kB shmem:3540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9192kB pagetables:1416kB sec_pagetables:1140kB all_unreclaimable? no [ 346.961685][T13410] Node 1 active_anon:2988kB inactive_anon:4424kB active_file:1100kB inactive_file:36376kB unevictable:3520kB isolated(anon):0kB isolated(file):0kB mapped:88308kB dirty:72kB writeback:4kB shmem:3684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4436kB pagetables:4624kB sec_pagetables:148kB all_unreclaimable? no [ 346.974161][T13410] Node 0 DMA free:2124kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:0kB inactive_anon:28kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 346.985202][T13410] lowmem_reserve[]: 0 294 294 294 294 [ 346.987618][T13410] Node 0 DMA32 free:15468kB boost:0kB min:13560kB low:16948kB high:20336kB reserved_highatomic:2048KB active_anon:96kB inactive_anon:8kB active_file:176kB inactive_file:0kB unevictable:3520kB writepending:148kB present:1032196kB managed:301720kB mlocked:0kB bounce:0kB free_pcp:1472kB local_pcp:0kB free_cma:0kB [ 346.998063][T13410] lowmem_reserve[]: 0 0 0 0 0 [ 346.999666][T13410] Node 1 DMA32 free:74520kB boost:24576kB min:71720kB low:83504kB high:95288kB reserved_highatomic:2048KB active_anon:2988kB inactive_anon:4424kB active_file:1100kB inactive_file:27676kB unevictable:3520kB writepending:76kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:680kB local_pcp:0kB free_cma:0kB [ 347.008984][T13410] lowmem_reserve[]: 0 0 0 0 0 [ 347.010734][T13410] Node 0 DMA: 35*4kB (U) 20*8kB (U) 9*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 2140kB [ 347.016499][T13410] Node 0 DMA32: 101*4kB (UMEH) 146*8kB (UMEH) 84*16kB (UMH) 52*32kB (UMEH) 51*64kB (UMEH) 24*128kB (UMEH) 12*256kB (ME) 3*512kB (MH) 0*1024kB 0*2048kB 0*4096kB = 15524kB [ 347.023234][T13410] Node 1 DMA32: 1767*4kB (UMH) 1341*8kB (UMEH) 860*16kB (UMEH) 577*32kB (UMEH) 280*64kB (UMEH) 49*128kB (UMEH) 10*256kB (UMH) 1*512kB (H) 1*1024kB (H) 0*2048kB 0*4096kB = 78308kB [ 347.030562][T13410] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 347.034154][T13410] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 347.038438][T13410] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 347.041253][T13410] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 347.044410][T13410] 8054 total pagecache pages [ 347.048679][T13410] 564 pages in swap cache [ 347.050184][T13410] Free swap = 67052kB [ 347.051323][T13410] Total swap = 124996kB [ 347.052494][T13410] 524155 pages RAM [ 347.053711][T13410] 0 pages HighMem/MovableOnly [ 347.055044][T13410] 207822 pages reserved [ 347.056248][T13410] 0 pages cma reserved [ 347.222230][T13467] bridge9: entered promiscuous mode [ 347.224287][T13467] bridge9: entered allmulticast mode [ 347.248289][T13467] team0: Port device bridge9 added [ 347.382276][T13492] overlayfs: workdir and upperdir must be separate subtrees [ 347.477989][T13504] netlink: 64 bytes leftover after parsing attributes in process `syz.3.19044'. [ 347.521369][T13512] trusted_key: encrypted_key: keylen parameter is missing [ 347.828554][T13564] openvswitch: netlink: Actions may not be safe on all matching packets [ 347.917346][ T40] audit: type=1326 audit(2000000010.111:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13580 comm="syz.2.19077" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 347.929390][T13583] Invalid logical block size (64) [ 348.042455][T13601] virt_wifi0 speed is unknown, defaulting to 1000 [ 348.269919][T13623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19096'. [ 348.295191][T13628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.351243][T13637] netlink: 'syz.2.19103': attribute type 2 has an invalid length. [ 348.761465][T13695] kAFS: unable to lookup cell '�g�K�)�kJ�L+���}�� ��T��/pbΈ&����M���K��(���|F�k�q�2�J�$O�-7R�k�E1�ў�LEB{���Nb�+*e�RM�����c��\�j�m�ԩ��Կ����O�����t�"�k��k�n�z�HKu��6�MyS�H�IU��o��If����V��U��r&���c�N��<D�¼�[£�&�D\q4>�N�0�NB�c5?���7��c�#0*�k���<�9�mc�L� 0�7��뜖��Ctϒ [ 348.761465][T13695] j�y�Hao�1.��B�$���&2�M�0�=�`;!�dφO���JI�X�!��J�˟BvU_Rc?��' [ 348.833048][T13704] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 349.063728][T13732] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10 [ 349.065940][T13732] tipc: Bearer <udp:syz1>: trying with adjusted priority [ 349.068646][T13732] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted [ 349.341462][T13765] openvswitch: netlink: Unknown key attributes 20 [ 349.416132][T13771] dvmrp5: entered allmulticast mode [ 349.426384][T13771] dvmrp0: left allmulticast mode [ 349.428374][T13771] pimreg: left allmulticast mode [ 349.430677][T13771] dvmrp5: left allmulticast mode [ 349.743311][T13803] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 350.061051][ T67] Bluetooth: hci1: command 0x0405 tx timeout [ 350.813699][T13952] __nla_validate_parse: 10 callbacks suppressed [ 350.813716][T13952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19253'. [ 350.944903][T13965] virt_wifi0 speed is unknown, defaulting to 1000 [ 352.283439][T14064] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19305'. [ 352.286456][ T6092] Bluetooth: hci1: command 0x0405 tx timeout [ 352.564629][T14090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19316'. [ 352.567049][T14090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19316'. [ 352.911487][T14138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19339'. [ 353.094197][T14158] tipc: Bearer <eth:ip6gre0>: already 2 bearers with priority 10 [ 353.096433][T14158] tipc: Bearer <eth:ip6gre0>: trying with adjusted priority [ 353.100996][T14158] tipc: Enabled bearer <eth:ip6gre0>, priority 9 [ 353.110778][T14156] usb usb1: usbfs: process 14156 (syz.3.19347) did not claim interface 0 before use [ 353.304728][T14186] netlink: 256 bytes leftover after parsing attributes in process `syz.2.19361'. [ 353.379624][T14197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.536779][T14214] usb usb1: usbfs: process 14214 (syz.2.19373) did not claim interface 0 before use [ 353.640477][T14235] netlink: 256 bytes leftover after parsing attributes in process `syz.1.19384'. [ 354.960050][T14391] netlink: 512 bytes leftover after parsing attributes in process `syz.1.19457'. [ 355.448424][T14425] netlink: 'syz.1.19472': attribute type 11 has an invalid length. [ 355.510775][T14435] hub 6-0:1.0: USB hub found [ 355.512214][T14435] hub 6-0:1.0: 1 port detected [ 355.595416][T14441] can0: slcan on ptm0. [ 355.642568][T14440] can0 (unregistered): slcan off ptm0. [ 355.701384][T14459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19489'. [ 356.021248][T14513] openvswitch: netlink: Duplicate or invalid key (type 1). [ 356.023314][T14513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.079089][T14522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19519'. [ 356.319628][T14551] __nla_validate_parse: 1 callbacks suppressed [ 356.319639][T14551] netlink: 100 bytes leftover after parsing attributes in process `syz.1.19532'. [ 356.323843][T14551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19532'. [ 357.051513][ T10] kernel write not supported for file /sysvipc/msg (pid: 10 comm: kworker/0:1) [ 357.136734][T14614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19556'. [ 357.169558][T14619] MTD: Couldn't look up 'mountinfo': -2 [ 357.485214][T14668] virt_wifi0 speed is unknown, defaulting to 1000 [ 357.521088][T14675] netlink: 'syz.1.19584': attribute type 3 has an invalid length. [ 357.541378][T14677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19586'. [ 357.850105][T14715] netlink: 192 bytes leftover after parsing attributes in process `syz.2.19604'. [ 357.852612][T14715] netlink: 48 bytes leftover after parsing attributes in process `syz.2.19604'. [ 357.936971][T14730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19612'. [ 358.090445][T14749] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 358.110992][ T6092] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 358.189395][T14761] openvswitch: netlink: Actions may not be safe on all matching packets [ 358.227920][T14767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19630'. [ 358.315179][T14776] sp0: Synchronizing with TNC [ 359.617762][T14835] openvswitch: netlink: Unknown nsh attribute 0 [ 359.621018][T14835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.971131][T14900] sp0: Synchronizing with TNC [ 359.976769][T14898] [U] � [ 360.119062][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 360.119073][ T40] audit: type=1326 audit(2000000021.514:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.4.19702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 360.128211][ T40] audit: type=1326 audit(2000000021.514:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.4.19702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 360.136514][ T40] audit: type=1326 audit(2000000021.523:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.4.19702" exe="/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 360.151092][ T40] audit: type=1326 audit(2000000021.523:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.4.19702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 360.163654][ T40] audit: type=1326 audit(2000000021.523:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.4.19702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 360.170544][ T40] audit: type=1326 audit(2000000021.523:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.4.19702" exe="/syz-executor" sig=0 arch=40000003 syscall=442 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 360.176898][ T40] audit: type=1326 audit(2000000021.523:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.4.19702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 360.182771][ T40] audit: type=1326 audit(2000000021.523:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.4.19702" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 360.442432][ T1323] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 360.444501][ T1323] hid-generic 0000:0003:0000.000A: unknown main item tag 0x0 [ 360.449783][ T1323] hid-generic 0000:0003:0000.000A: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0 [ 362.298093][T15094] netlink: 256 bytes leftover after parsing attributes in process `syz.1.19776'. [ 362.298116][T15094] netlink: 'syz.1.19776': attribute type 9 has an invalid length. [ 362.371713][T15098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19778'. [ 362.371732][T15098] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19778'. [ 362.373435][T15098] gretap0: entered promiscuous mode [ 362.585296][T15110] syz.1.19783: attempt to access beyond end of device [ 362.585296][T15110] loop1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 362.749587][T15126] virt_wifi0 speed is unknown, defaulting to 1000 [ 363.009499][ T40] audit: type=1804 audit(2000000024.226:2178): pid=15158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.19803" name="/" dev="pidfs" ino=47379 res=1 errno=0 [ 363.314348][T15202] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19824'. [ 363.341435][T15206] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10 [ 363.344080][T15206] tipc: Bearer <udp:syz1>: trying with adjusted priority [ 363.346678][T15206] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted [ 363.449171][ T40] audit: type=1326 audit(2000000024.638:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15221 comm="syz.4.19834" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x0 [ 364.226050][T15255] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19850'. [ 364.306213][T15266] netlink: 'syz.1.19855': attribute type 39 has an invalid length. [ 364.490968][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19867'. [ 364.708355][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19876'. [ 364.710849][T15310] netlink: 'syz.2.19876': attribute type 30 has an invalid length. [ 364.713024][T15310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19876'. [ 364.776765][T15316] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19879'. [ 364.855600][T15323] netlink: 312 bytes leftover after parsing attributes in process `syz.2.19882'. [ 366.137414][T15393] netlink: 'syz.4.19913': attribute type 2 has an invalid length. [ 366.217549][T15402] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 366.685517][T15458] virt_wifi0 speed is unknown, defaulting to 1000 [ 367.334757][T15503] syz.2.19964 (15503): drop_caches: 3 [ 367.743762][T15577] tipc: Enabling of bearer <udp:syz1> rejected, already enabled [ 367.810949][T15588] mkiss: ax0: crc mode is auto. [ 367.981143][T15603] __nla_validate_parse: 1 callbacks suppressed [ 367.981156][T15603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20013'. [ 368.037122][T15607] syz.1.20014 (15607): drop_caches: 3 [ 368.556617][T15668] program syz.1.20043 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.627343][T15676] devtmpfs: Too few inodes for current use [ 368.674203][T15680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20050'. [ 368.701271][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20052'. [ 368.703749][T15684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20052'. [ 368.706398][T15684] netlink: 'syz.3.20052': attribute type 6 has an invalid length. [ 368.767195][T15693] IPv6: syztnl0: Disabled Multicast RS [ 368.776217][T15698] netlink: 188 bytes leftover after parsing attributes in process `syz.1.20059'. [ 368.790830][T15698] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20059'. [ 368.876425][T15713] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 368.990007][T15713] /dev/sr0: Can't open blockdev [ 369.072883][T15736] netlink: 192 bytes leftover after parsing attributes in process `syz.3.20075'. [ 369.102306][T15722] /dev/sr0: Can't open blockdev [ 369.198107][T15755] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 369.408575][T15783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20100'. [ 369.466454][T15793] vim2m vim2m.0: vidioc_s_fmt queue busy [ 369.680870][T15813] bridge0: port 1(veth0_to_bridge) entered blocking state [ 369.684906][T15813] bridge0: port 1(veth0_to_bridge) entered disabled state [ 369.687699][T15813] veth0_to_bridge: entered allmulticast mode [ 369.691418][T15813] veth0_to_bridge: entered promiscuous mode [ 369.910037][T15838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20126'. [ 370.066738][T15869] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 370.127299][T15881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20149'. [ 370.196220][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 370.196232][ T40] audit: type=1326 audit(2000000030.943:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.4.20155" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 370.207197][ T40] audit: type=1326 audit(2000000030.943:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.4.20155" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 370.213397][ T40] audit: type=1326 audit(2000000030.943:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.4.20155" exe="/syz-executor" sig=0 arch=40000003 syscall=344 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 370.234342][ T40] audit: type=1326 audit(2000000030.943:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.4.20155" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 370.248212][T15908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.338523][T15930] netlink: 'syz.3.20171': attribute type 7 has an invalid length. [ 370.531677][T15967] random: crng reseeded on system resumption [ 370.590608][ T40] audit: type=1326 audit(2000000031.307:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15976 comm="syz.3.20194" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f9f579 code=0x0 [ 370.802674][T15998] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 370.806906][ T1323] kernel write not supported for file /audio (pid: 1323 comm: kworker/3:2) [ 371.367266][ T1468] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 371.526193][T16068] program syz.2.20239 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.527825][ T1468] usb 9-1: Using ep0 maxpacket: 8 [ 371.531422][ T1468] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 371.533511][ T1468] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 371.536560][ T1468] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 371.548279][ T1468] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 371.551542][ T1468] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 371.556849][ T1468] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 371.559254][ T1468] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 371.562409][ T1468] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 371.565686][ T1468] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 371.572625][ T1468] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 371.577838][ T1468] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 371.580685][ T1468] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 371.585362][ T1468] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 371.589647][ T1468] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 371.592803][ T1468] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 371.599103][ T1468] usb 9-1: string descriptor 0 read error: -22 [ 371.601526][ T1468] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 371.605071][ T1468] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.613345][ T1468] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 371.839046][ T1323] usb 9-1: USB disconnect, device number 10 [ 372.114386][T16140] gre0: entered promiscuous mode [ 372.116395][T16140] gre0: entered allmulticast mode [ 372.181735][T16147] vimc link validate: Scaler:src:16x16 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 372.492506][T16181] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 372.686525][T16207] sctp: [Deprecated]: syz.3.20299 (pid 16207) Use of struct sctp_assoc_value in delayed_ack socket option. [ 372.686525][T16207] Use struct sctp_sack_info instead [ 372.697882][T16207] sctp: [Deprecated]: syz.3.20299 (pid 16207) Use of struct sctp_assoc_value in delayed_ack socket option. [ 372.697882][T16207] Use struct sctp_sack_info instead [ 372.762562][ T40] audit: type=1400 audit(2000000262.352:2187): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=16216 comm="syz.1.20305" [ 372.772246][T16219] vimc link validate: Scaler:src:16x16 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 373.492153][T16309] __nla_validate_parse: 15 callbacks suppressed [ 373.492165][T16309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20348'. [ 373.591848][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20357'. [ 373.594414][T16327] bridge_slave_1: default FDB implementation only supports local addresses [ 374.008442][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 374.294323][T16407] kernel read not supported for file /.pending_reads (pid: 16407 comm: syz.3.20390) [ 374.298278][ T40] audit: type=1800 audit(2000000263.783:2188): pid=16407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.20390" name=".pending_reads" dev="mqueue" ino=162279 res=0 errno=0 [ 374.389357][T16413] ptrace attach of "/syz-executor exec"[16414] was attempted by "/syz-executor exec"[16413] [ 374.574491][T16428] lo: entered promiscuous mode [ 374.576905][T16428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.982658][T16480] loop6: detected capacity change from 0 to 524287999 [ 374.985426][ C3] blk_print_req_error: 7 callbacks suppressed [ 374.985436][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 374.989673][ C3] buffer_io_error: 7 callbacks suppressed [ 374.989680][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 374.994297][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 374.997513][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.000480][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.002930][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.005205][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.007692][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.010763][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.013413][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.016013][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.019312][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.021650][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.024190][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.026557][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.029167][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.031328][T16480] ldm_validate_partition_table(): Disk read failed. [ 375.033339][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.035904][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.038259][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 375.040803][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 375.043553][T16480] Dev loop6: unable to read RDB block 0 [ 375.046080][T16480] loop6: unable to read partition table [ 375.048918][T16480] loop_reread_partitions: partition scan of loop6 (3��x��C�) failed (rc=-5) [ 375.087614][T16483] loop6: detected capacity change from 524287999 to 524288000 [ 375.618511][ T64] kernel read not supported for file /dsp (pid: 64 comm: kworker/1:1) [ 376.623808][ T40] audit: type=1326 audit(2000000265.953:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16514 comm="syz.4.20442" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7fc00000 [ 377.033243][ T6072] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 377.194026][ T6072] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 377.197043][ T6072] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.199605][ T6072] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.214990][ T6072] usb 9-1: config 0 interface 0 has no altsetting 0 [ 377.217894][ T6072] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.220670][ T6072] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.223624][ T6072] usb 9-1: config 0 interface 0 has no altsetting 0 [ 377.227462][ T6072] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.230258][ T6072] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.233266][ T6072] usb 9-1: config 0 interface 0 has no altsetting 0 [ 377.235987][ T6072] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.239028][ T6072] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.242447][ T6072] usb 9-1: config 0 interface 0 has no altsetting 0 [ 377.245332][ T6072] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.248167][ T6072] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.251540][ T6072] usb 9-1: config 0 interface 0 has no altsetting 0 [ 377.255033][ T6072] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.258551][ T6072] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.261626][ T6072] usb 9-1: config 0 interface 0 has no altsetting 0 [ 377.264250][ T6072] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.266713][ T6072] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.269766][ T6072] usb 9-1: config 0 interface 0 has no altsetting 0 [ 377.272657][ T6072] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 377.276104][ T6072] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 377.280093][ T6072] usb 9-1: config 0 interface 0 has no altsetting 0 [ 377.283753][ T6072] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 377.286255][ T6072] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 377.288821][ T6072] usb 9-1: Product: syz [ 377.290485][ T6072] usb 9-1: Manufacturer: syz [ 377.291921][ T6072] usb 9-1: SerialNumber: syz [ 377.294220][ T6072] usb 9-1: config 0 descriptor?? [ 377.299477][ T6072] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 378.010942][T16628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20489'. [ 378.167160][ T10] kernel read not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 378.367632][T16675] tipc: Resetting bearer <eth:ip6gre0> [ 378.382287][T16675] tipc: Resetting bearer <eth:vlan0> [ 378.384020][T16675] tipc: Resetting bearer <eth:vlan0> [ 378.473379][T16683] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 378.475963][T16683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.498633][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20516'. [ 378.501580][T16685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20516'. [ 378.576136][T16691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.684019][T16700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20522'. [ 378.704561][T16700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20522'. [ 378.707063][T16700] netlink: 44 bytes leftover after parsing attributes in process `syz.2.20522'. [ 378.808839][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20526'. [ 378.935062][T16722] tipc: Resetting bearer <eth:vlan0> [ 378.974432][T16722] tipc: Disabling bearer <eth:vlan0> [ 379.160703][ T1323] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 379.321083][ T1323] usb 6-1: Using ep0 maxpacket: 32 [ 379.324471][ T1323] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 379.327621][ T1323] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 379.330676][ T1323] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 379.333769][ T1323] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 379.336947][ T1323] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 379.339632][ T1323] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 379.343310][ T1323] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 379.346078][ T1323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.350431][ T1323] usb 6-1: config 0 descriptor?? [ 379.574770][ T1323] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 379.738161][ C1] usb 9-1: yurex_control_callback - control failed: -2 [ 379.740734][ T6072] usb 9-1: USB disconnect, device number 11 [ 379.746009][ T6072] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 379.800885][ T1468] usb 6-1: USB disconnect, device number 15 [ 379.805507][ T1468] usblp1: removed [ 380.166192][T11767] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 380.546679][T16791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20564'. [ 381.281934][T16846] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20590'. [ 382.793762][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20606'. [ 382.795101][ T40] audit: type=1800 audit(2000000271.724:2190): pid=16883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.20607" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [ 382.888921][T16897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20613'. [ 382.921595][T16902] netem: unknown loss type 0 [ 382.924119][T16902] netem: change failed [ 383.053453][ T40] audit: type=1800 audit(2000000271.977:2191): pid=16913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.20620" name="file0" dev="9p" ino=36831503 res=0 errno=0 [ 383.194791][T16925] pimreg: entered allmulticast mode [ 383.336104][ T40] audit: type=1326 audit(2000000272.239:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16918 comm="syz.1.20625" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x0 [ 383.586800][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 383.617009][ T9] Process accounting resumed [ 383.650905][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 383.811106][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 383.813874][ T10] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 383.816925][ T10] usb 6-1: config 0 has no interface number 0 [ 383.818592][ T10] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 383.821388][ T10] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 383.824671][ T10] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 108, changing to 10 [ 383.827764][ T10] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8949, setting to 1024 [ 383.830774][ T10] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.839524][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 383.842317][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.845341][ T10] usb 6-1: Product: syz [ 383.846514][ T10] usb 6-1: Manufacturer: syz [ 383.847976][ T10] usb 6-1: SerialNumber: syz [ 383.850564][ T10] usb 6-1: config 0 descriptor?? [ 384.073723][ T10] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 384.085637][T16989] ALSA: mixer_oss: invalid OSS volume 'u' [ 384.267008][ T6072] Process accounting resumed [ 384.296881][ T1323] usb 6-1: USB disconnect, device number 16 [ 384.846521][T17025] kvm: kvm [17024]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x98b5 [ 385.321753][ T40] audit: type=1326 audit(2000000274.100:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17052 comm="syz.3.20683" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x0 [ 385.342423][T17055] netlink: 'syz.4.20684': attribute type 9 has an invalid length. [ 385.562120][T17073] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.20691'. [ 385.566358][T17070] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.20691'. [ 385.630871][T17079] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20695'. [ 385.641299][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 385.691367][T17085] libceph: resolve '0' (ret=-3): failed [ 386.095959][T17111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20709'. [ 386.245302][T17120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20714'. [ 386.320482][T17128] 9pnet: p9_errstr2errno: server reported unknown error [ 386.415107][T17139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20723'. [ 386.727563][T17157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20730'. [ 386.738173][T17157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20730'. [ 387.142015][T17175] vlan0: entered allmulticast mode [ 387.143491][T17175] bridge_slave_0: entered allmulticast mode [ 387.146359][T17175] bridge_slave_0: left allmulticast mode [ 387.359914][T17193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.360249][ T10] kernel read not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 387.363126][T17193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.370255][T17193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.373400][T17193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.398129][T17198] usb usb8: usbfs: process 17198 (syz.4.20748) did not claim interface 0 before use [ 387.428508][T17203] netlink: 71 bytes leftover after parsing attributes in process `syz.4.20750'. [ 387.913635][T17250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20773'. [ 387.953148][T17252] virt_wifi0 speed is unknown, defaulting to 1000 [ 388.309211][T17290] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 388.311425][T17290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.745861][T17334] netlink: 'syz.1.20812': attribute type 2 has an invalid length. [ 388.781408][T17337] mkiss: ax0: crc mode is auto. [ 388.917163][T17353] tap0: tun_chr_ioctl cmd 1074025678 [ 388.918679][T17353] tap0: group set to 0 [ 389.198616][ T40] audit: type=1326 audit(2000000277.720:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17384 comm="syz.2.20829" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 389.210151][ T40] audit: type=1326 audit(2000000277.720:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17384 comm="syz.2.20829" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f815a7 code=0x7ffc0000 [ 389.217046][ T40] audit: type=1326 audit(2000000277.720:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17384 comm="syz.2.20829" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 389.225719][ T40] audit: type=1326 audit(2000000277.720:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17384 comm="syz.2.20829" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f815a7 code=0x7ffc0000 [ 389.231730][ T40] audit: type=1326 audit(2000000277.720:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17384 comm="syz.2.20829" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 389.237763][ T40] audit: type=1326 audit(2000000277.730:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17384 comm="syz.2.20829" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f815a7 code=0x7ffc0000 [ 389.246052][ T40] audit: type=1326 audit(2000000277.730:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17384 comm="syz.2.20829" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 389.252646][ T40] audit: type=1326 audit(2000000277.730:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17384 comm="syz.2.20829" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f815a7 code=0x7ffc0000 [ 389.258628][ T40] audit: type=1326 audit(2000000277.730:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17384 comm="syz.2.20829" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 389.264887][ T40] audit: type=1326 audit(2000000277.730:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17384 comm="syz.2.20829" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f815a7 code=0x7ffc0000 [ 389.651524][ T10] kernel read not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 390.015708][T17449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20858'. [ 390.018249][T17449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20858'. [ 390.103468][T17461] netlink: 830 bytes leftover after parsing attributes in process `syz.1.20864'. [ 390.531347][ T5365] udevd[5365]: worker [8838] terminated by signal 33 (Unknown signal 33) [ 390.533718][ T5365] udevd[5365]: worker [8838] failed while handling '/devices/serio4' [ 390.631725][T17526] ����: renamed from bridge_slave_0 [ 390.999364][T17584] netlink: 'syz.1.20922': attribute type 9 has an invalid length. [ 391.002077][T17584] openvswitch: netlink: Message has 6 unknown bytes. [ 391.254134][T17617] vivid-000: ================= START STATUS ================= [ 391.256391][T17617] vivid-000: Test Pattern: 75% Colorbar [ 391.257992][T17617] vivid-000: Fill Percentage of Frame: 6 [ 391.259561][T17617] vivid-000: Horizontal Movement: Move Right Slow [ 391.261355][T17617] vivid-000: Vertical Movement: Move Down Slow [ 391.263455][T17617] vivid-000: OSD Text Mode: None [ 391.264907][T17617] vivid-000: Show Border: false [ 391.266320][T17617] vivid-000: Show Square: false [ 391.267688][T17617] vivid-000: Sensor Flipped Horizontally: false [ 391.269583][T17617] vivid-000: Sensor Flipped Vertically: false [ 391.271291][T17617] vivid-000: Insert SAV Code in Image: false [ 391.273024][T17617] vivid-000: Insert EAV Code in Image: true [ 391.274964][T17617] vivid-000: Insert Video Guard Band: true [ 391.277131][T17617] vivid-000: Reduced Framerate: true [ 391.279199][T17617] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 023-0 [ 391.281370][T17617] vivid-000: S-Video 000-0 Is Connected To: None [ 391.283148][T17617] vivid-000: Enable Capture Cropping: true [ 391.284978][T17617] vivid-000: Enable Capture Composing: false [ 391.286796][T17617] vivid-000: Enable Capture Scaler: false [ 391.288439][T17617] vivid-000: Timestamp Source: Start of Exposure [ 391.290208][T17617] vivid-000: Colorspace: sRGB [ 391.291536][T17617] vivid-000: Transfer Function: Default [ 391.293118][T17617] vivid-000: Y'CbCr Encoding: Default [ 391.294796][T17617] vivid-000: HSV Encoding: Hue 0-256 [ 391.298884][T17617] vivid-000: Quantization: Full Range [ 391.300469][T17617] vivid-000: Apply Alpha To Red Only: true [ 391.302874][T17617] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 391.304842][T17617] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 391.307916][T17617] vivid-000: DV Timings: 640x480p59 inactive [ 391.310238][T17617] vivid-000: DV Timings Aspect Ratio: 4x3 [ 391.311983][T17617] vivid-000: Maximum EDID Blocks: 1 [ 391.313538][T17617] vivid-000: Limited RGB Range (16-235): false [ 391.315408][T17617] vivid-000: Rx RGB Quantization Range: RGB Limited Range (16-235) [ 391.317864][T17617] vivid-000: Power Present: 0x00000001 [ 391.319448][T17617] tpg source WxH: 3840x2160 (Y'CbCr) [ 391.321053][T17617] tpg field: 1 [ 391.322055][T17617] tpg crop: 3840x2160@0x0 [ 391.323290][T17617] tpg compose: 3840x2160@0x0 [ 391.324669][T17617] tpg colorspace: 2 [ 391.325985][T17617] tpg transfer function: 2/7 [ 391.327902][T17617] tpg Y'CbCr encoding: 2/2 [ 391.329654][T17617] tpg quantization: 1/1 [ 391.330878][T17617] tpg RGB range: 0/2 [ 391.332063][T17617] vivid-000: ================== END STATUS ================== [ 391.605183][ T10] kernel read not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 391.808091][T17362] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 391.884592][T17666] tun0: tun_chr_ioctl cmd 1074025675 [ 391.886516][T17666] tun0: persist disabled [ 392.173139][T17699] virt_wifi0 speed is unknown, defaulting to 1000 [ 392.264587][T17714] trusted_key: syz.2.20984 sent an empty control message without MSG_MORE. [ 392.573727][T17745] vivid-000: ================= START STATUS ================= [ 392.575881][T17745] vivid-000: Test Pattern: 75% Colorbar [ 392.577573][T17745] vivid-000: Fill Percentage of Frame: 6 [ 392.579141][T17745] vivid-000: Horizontal Movement: Move Right Slow [ 392.580954][T17745] vivid-000: Vertical Movement: Move Down Slow [ 392.582693][T17745] vivid-000: OSD Text Mode: None [ 392.584194][T17745] vivid-000: Show Border: false [ 392.585587][T17745] vivid-000: Show Square: false [ 392.586868][T17745] vivid-000: Sensor Flipped Horizontally: false [ 392.589205][T17745] vivid-000: Sensor Flipped Vertically: false [ 392.590932][T17745] vivid-000: Insert SAV Code in Image: false [ 392.592635][T17745] vivid-000: Insert EAV Code in Image: true [ 392.594220][T17745] vivid-000: Insert Video Guard Band: true [ 392.595917][T17745] vivid-000: Reduced Framerate: true [ 392.597397][T17745] vivid-000: HDMI 000-0 Is Connected To: Output HDMI 023-0 [ 392.600083][T17745] vivid-000: S-Video 000-0 Is Connected To: None [ 392.601847][T17745] vivid-000: Enable Capture Cropping: true [ 392.603479][T17745] vivid-000: Enable Capture Composing: false [ 392.605209][T17745] vivid-000: Enable Capture Scaler: false [ 392.606793][T17745] vivid-000: Timestamp Source: Start of Exposure [ 392.608571][T17745] vivid-000: Colorspace: sRGB [ 392.610202][T17745] vivid-000: Transfer Function: Default [ 392.611851][T17745] vivid-000: Y'CbCr Encoding: Default [ 392.613367][T17745] vivid-000: HSV Encoding: Hue 0-256 [ 392.614862][T17745] vivid-000: Quantization: Full Range [ 392.616386][T17745] vivid-000: Apply Alpha To Red Only: true [ 392.618007][T17745] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 392.619863][T17745] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 392.622515][T17745] vivid-000: DV Timings: 640x480p59 inactive [ 392.624519][T17745] vivid-000: DV Timings Aspect Ratio: 4x3 [ 392.626512][T17745] vivid-000: Maximum EDID Blocks: 1 [ 392.628425][T17745] vivid-000: Limited RGB Range (16-235): false [ 392.630353][T17745] vivid-000: Rx RGB Quantization Range: RGB Limited Range (16-235) [ 392.632914][T17745] vivid-000: Power Present: 0x00000001 [ 392.634480][T17745] tpg source WxH: 3840x2160 (Y'CbCr) [ 392.636059][T17745] tpg field: 1 [ 392.637030][T17745] tpg crop: 3840x2160@0x0 [ 392.638235][T17745] tpg compose: 3840x2160@0x0 [ 392.639540][T17745] tpg colorspace: 2 [ 392.640651][T17745] tpg transfer function: 2/7 [ 392.642026][T17745] tpg Y'CbCr encoding: 2/2 [ 392.643284][T17745] tpg quantization: 1/1 [ 392.644753][T17745] tpg RGB range: 0/2 [ 392.646013][T17745] vivid-000: ================== END STATUS ================== [ 393.282630][T17775] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 393.374251][T17782] ALSA: mixer_oss: invalid OSS volume 'u' [ 393.795893][T17839] __nla_validate_parse: 3 callbacks suppressed [ 393.795905][T17839] netlink: 10 bytes leftover after parsing attributes in process `syz.4.21042'. [ 393.878065][T17847] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.21043'. [ 393.886410][T17841] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.21043'. [ 393.894071][T17852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21048'. [ 393.913227][T17854] input: syz0 as /devices/virtual/input/input59 [ 393.969405][T17861] libceph: resolve '0' (ret=-3): failed [ 393.973215][T17863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21053'. [ 394.306719][T17895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21066'. [ 394.309957][T17895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21066'. [ 394.851441][T17942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21089'. [ 394.905423][T17946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21091'. [ 394.909087][T17946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21091'. [ 394.914052][T17948] input: syz1 as /devices/virtual/input/input60 [ 395.027480][T17968] vlan3: entered allmulticast mode [ 395.318012][T18016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.321164][T18016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.324171][T18016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.327263][T18016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.699795][T18055] usb usb8: usbfs: process 18055 (syz.3.21143) did not claim interface 0 before use [ 395.793662][T18064] virt_wifi0 speed is unknown, defaulting to 1000 [ 396.753330][T18153] sch_tbf: burst 0 is lower than device lo mtu (1294) ! [ 396.812101][T18161] tap0: tun_chr_ioctl cmd 1074025678 [ 396.813663][T18161] tap0: group set to 0 [ 396.887561][ T40] kauditd_printk_skb: 211 callbacks suppressed [ 396.887572][ T40] audit: type=1326 audit(2000000284.914:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.3.21202" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 396.895536][ T40] audit: type=1326 audit(2000000284.914:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.3.21202" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f9f5a7 code=0x7ffc0000 [ 396.901625][ T40] audit: type=1326 audit(2000000284.914:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.3.21202" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 396.907651][ T40] audit: type=1326 audit(2000000284.914:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.3.21202" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f9f5a7 code=0x7ffc0000 [ 396.913433][ T40] audit: type=1326 audit(2000000284.914:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.3.21202" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 396.919318][ T40] audit: type=1326 audit(2000000284.914:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.3.21202" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f9f5a7 code=0x7ffc0000 [ 396.925229][ T40] audit: type=1326 audit(2000000284.914:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.3.21202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 396.931165][ T40] audit: type=1326 audit(2000000284.914:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.3.21202" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 396.938093][ T40] audit: type=1326 audit(2000000284.914:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.3.21202" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f9f5a7 code=0x7ffc0000 [ 396.944033][ T40] audit: type=1326 audit(2000000284.914:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.3.21202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 396.956761][T18175] input: syz1 as /devices/virtual/input/input61 [ 397.171097][T18185] mkiss: ax0: crc mode is auto. [ 397.966175][T17369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 398.859846][T18265] vimc link validate: Scaler:src:16x16 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 399.025587][T18289] tmpfs: Invalid gid '0x00000000ffffffff' [ 399.298049][T18327] netlink: 'syz.4.21262': attribute type 9 has an invalid length. [ 399.300270][T18327] __nla_validate_parse: 7 callbacks suppressed [ 399.300279][T18327] netlink: 201384 bytes leftover after parsing attributes in process `syz.4.21262'. [ 399.305033][T18327] openvswitch: netlink: Message has 6 unknown bytes. [ 400.068981][T18364] netlink: 'syz.1.21279': attribute type 1 has an invalid length. [ 400.870227][T18408] siw: device registration error -23 [ 400.946972][T18415] virt_wifi0 speed is unknown, defaulting to 1000 [ 400.986565][T18420] netlink: 68 bytes leftover after parsing attributes in process `syz.1.21304'. [ 401.078648][T18427] syz.4.21307 (18427): drop_caches: 2 [ 401.930745][T18484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21333'. [ 402.268616][T18509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21345'. [ 402.307396][T18515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21344'. [ 402.411555][T18528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21353'. [ 402.416434][T18528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21353'. [ 402.487301][T18536] vivid-007: disconnect [ 402.489550][T18534] vivid-007: reconnect [ 402.651542][T18553] input: syz1 as /devices/virtual/input/input62 [ 402.868456][T18555] syz.2.21374 (18555): drop_caches: 2 [ 402.946265][T18575] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.21371'. [ 402.951355][T18569] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.21371'. [ 403.137550][T18586] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 403.139986][T18586] syzkaller0: owner set to 1 [ 403.311506][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 403.311517][ T40] audit: type=1800 audit(2000000290.928:2483): pid=18604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.21383" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 403.365754][T18608] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.21386'. [ 403.404028][T18612] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 403.405935][T18612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.429906][T17362] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 403.999101][T18670] kvm: kvm [18669]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x7fffffffffffffff [ 404.017286][ T40] audit: type=1326 audit(2000000291.574:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18672 comm="syz.2.21419" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x0 [ 404.281299][T18692] sctp: [Deprecated]: syz.3.21433 (pid 18692) Use of int in max_burst socket option. [ 404.281299][T18692] Use struct sctp_assoc_value instead [ 405.164345][ T40] audit: type=1800 audit(2000000292.659:2485): pid=18716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.21437" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 405.724361][ T40] audit: type=1326 audit(2000000293.173:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18759 comm="syz.3.21458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 405.730962][ T40] audit: type=1326 audit(2000000293.192:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18759 comm="syz.3.21458" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 405.736952][ T40] audit: type=1326 audit(2000000293.192:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18759 comm="syz.3.21458" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f9f5a7 code=0x7ffc0000 [ 405.743444][ T40] audit: type=1326 audit(2000000293.192:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18759 comm="syz.3.21458" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 405.751352][ T40] audit: type=1326 audit(2000000293.192:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18759 comm="syz.3.21458" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f9f5a7 code=0x7ffc0000 [ 405.759729][ T40] audit: type=1326 audit(2000000293.192:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18759 comm="syz.3.21458" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f9f579 code=0x7ffc0000 [ 405.767430][ T40] audit: type=1326 audit(2000000293.192:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18759 comm="syz.3.21458" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f9f5a7 code=0x7ffc0000 [ 406.951945][T18892] __nla_validate_parse: 3 callbacks suppressed [ 406.951955][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21521'. [ 406.956776][T18892] macvlan0: left promiscuous mode [ 406.958192][T18892] netlink: 'syz.3.21521': attribute type 2 has an invalid length. [ 407.717825][T18969] input: syz0 as /devices/virtual/input/input63 [ 408.393266][T18997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.505607][T19017] @: renamed from vlan0 (while UP) [ 408.622529][T19023] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 408.625749][T19023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.274515][T19056] netlink: 'syz.4.21598': attribute type 12 has an invalid length. [ 409.277568][T19056] netlink: 'syz.4.21598': attribute type 28 has an invalid length. [ 409.280261][T19056] netlink: 148 bytes leftover after parsing attributes in process `syz.4.21598'. [ 409.313744][T19061] netlink: 188 bytes leftover after parsing attributes in process `syz.4.21601'. [ 409.394351][T19063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.586522][T17362] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 409.744296][T19074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21613'. [ 409.747733][T19074] netlink: 'syz.4.21613': attribute type 21 has an invalid length. [ 411.369947][T19115] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 411.898127][ T40] kauditd_printk_skb: 103 callbacks suppressed [ 411.898137][ T40] audit: type=1326 audit(2000000298.954:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.1.21653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 411.906551][ T40] audit: type=1326 audit(2000000298.954:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.1.21653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 411.912184][ T40] audit: type=1326 audit(2000000298.963:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.1.21653" exe="/syz-executor" sig=0 arch=40000003 syscall=52 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 411.986760][ T40] audit: type=1326 audit(2000000299.038:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.1.21653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 412.008880][ T40] audit: type=1326 audit(2000000299.038:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19170 comm="syz.1.21653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23579 code=0x7ffc0000 [ 412.269076][T19200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21664'. [ 412.612379][T19245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21686'. [ 412.880772][T19279] virt_wifi0 speed is unknown, defaulting to 1000 [ 413.508455][ T40] audit: type=1326 audit(2000000300.460:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.4.21711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 413.528506][ T40] audit: type=1326 audit(2000000300.460:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.4.21711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 413.537324][ T40] audit: type=1326 audit(2000000300.469:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.4.21711" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 413.552382][ T40] audit: type=1326 audit(2000000300.469:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.4.21711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 413.558225][ T40] audit: type=1326 audit(2000000300.469:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.4.21711" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 413.782518][T19331] netlink: 152 bytes leftover after parsing attributes in process `syz.4.21723'. [ 413.835883][T19339] netlink: 340 bytes leftover after parsing attributes in process `syz.4.21728'. [ 414.247517][ T10] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 414.408828][ T10] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 414.411877][ T10] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 414.414785][ T10] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 414.417630][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.425309][T19367] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 414.430691][ T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 414.644056][ T36] usb 9-1: USB disconnect, device number 12 [ 415.644714][T19446] input: syz1 as /devices/virtual/input/input64 [ 415.744354][T17369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 417.107338][T19599] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21833'. [ 417.228650][T19613] kvm: apic: phys broadcast and lowest prio [ 417.364639][T19625] sctp: [Deprecated]: syz.1.21846 (pid 19625) Use of struct sctp_assoc_value in delayed_ack socket option. [ 417.364639][T19625] Use struct sctp_sack_info instead [ 417.396293][T19633] netlink: 40 bytes leftover after parsing attributes in process `syz.3.21850'. [ 417.425436][T19637] vimc link validate: Scaler:src:16x16 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 417.516906][T19651] bpq0: entered allmulticast mode [ 417.623389][T19666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.897519][T19697] netlink: 'syz.4.21880': attribute type 4 has an invalid length. [ 418.122994][T19728] netem: incorrect gi model size [ 418.125400][T19728] netem: change failed [ 418.336241][T19745] netlink: 'syz.2.21904': attribute type 5 has an invalid length. [ 418.716067][T13323] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 418.887078][T13323] usb 6-1: Using ep0 maxpacket: 32 [ 418.890708][T13323] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.893889][T13323] usb 6-1: config 0 has no interfaces? [ 418.905931][T13323] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 418.911467][T13323] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 418.914691][T13323] usb 6-1: Product: syz [ 418.916292][T13323] usb 6-1: Manufacturer: syz [ 418.918001][T13323] usb 6-1: SerialNumber: syz [ 418.930004][T13323] usb 6-1: config 0 descriptor?? [ 419.082278][T19766] netlink: 'syz.2.21914': attribute type 1 has an invalid length. [ 419.152803][ T36] usb 6-1: USB disconnect, device number 17 [ 419.694252][T19795] input: syz0 as /devices/virtual/input/input67 [ 419.858017][T19806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21933'. [ 419.878770][T19808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21934'. [ 420.034852][T19825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21941'. [ 420.309812][T19849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21952'. [ 420.936766][T19894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21973'. [ 420.939397][T19894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21973'. [ 421.028068][T19904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21978'. [ 421.180245][T19918] team0: Device gtp1 is of different type [ 421.217788][T17370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 421.264978][ T40] kauditd_printk_skb: 733 callbacks suppressed [ 421.264993][ T40] audit: type=1326 audit(2000000536.713:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19921 comm="syz.2.21986" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 421.265157][T19920] dlm: non-version read from control device 34 [ 421.267209][ T40] audit: type=1326 audit(2000000536.713:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19921 comm="syz.2.21986" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 421.268001][ T40] audit: type=1326 audit(2000000536.713:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19921 comm="syz.2.21986" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 421.292538][ T40] audit: type=1326 audit(2000000536.713:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19921 comm="syz.2.21986" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 421.298599][ T40] audit: type=1326 audit(2000000536.713:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19921 comm="syz.2.21986" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 421.305604][ T40] audit: type=1326 audit(2000000536.713:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19921 comm="syz.2.21986" exe="/syz-executor" sig=0 arch=40000003 syscall=279 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 421.314448][ T40] audit: type=1326 audit(2000000536.713:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19921 comm="syz.2.21986" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 421.323569][ T40] audit: type=1326 audit(2000000536.713:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19921 comm="syz.2.21986" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 421.331865][ T40] audit: type=1326 audit(2000000536.713:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19921 comm="syz.2.21986" exe="/syz-executor" sig=0 arch=40000003 syscall=280 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 421.340134][ T40] audit: type=1326 audit(2000000536.713:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19921 comm="syz.2.21986" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81579 code=0x7ffc0000 [ 421.368355][T19930] bond0: entered promiscuous mode [ 421.370233][T19930] bond_slave_0: entered promiscuous mode [ 421.371924][T19930] bond_slave_1: entered promiscuous mode [ 421.375522][T19930] batadv0: entered promiscuous mode [ 421.383928][T19930] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 421.386642][T19930] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 421.393760][T19930] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 421.573306][T19953] input: syz0 as /devices/virtual/input/input68 [ 422.644502][T20019] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 423.245161][T20073] netlink: 'syz.1.22055': attribute type 39 has an invalid length. [ 423.485167][T20097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22066'. [ 423.510524][T20099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22068'. [ 424.118004][T20144] MPI: mpi too large (16392 bits) [ 424.189393][T20149] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 424.244449][T20157] netlink: 'syz.3.22092': attribute type 39 has an invalid length. [ 424.278227][T20161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22096'. [ 424.328709][T13323] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 424.491938][T13323] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 424.494776][T13323] usb 9-1: config 0 interface 0 has no altsetting 0 [ 424.498773][T13323] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 424.502183][T13323] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 424.504486][T13323] usb 9-1: Product: syz [ 424.505678][T13323] usb 9-1: Manufacturer: syz [ 424.507180][T13323] usb 9-1: SerialNumber: syz [ 424.511342][T13323] usb 9-1: config 0 descriptor?? [ 424.514795][T13323] usb 9-1: selecting invalid altsetting 0 [ 424.552610][ T5365] udevd[5365]: worker [8821] terminated by signal 33 (Unknown signal 33) [ 424.555407][ T5365] udevd[5365]: worker [8821] failed while handling '/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/sound/card3/mixer3' [ 424.562348][ T5365] udevd[5365]: worker [9878] terminated by signal 33 (Unknown signal 33) [ 424.564895][ T5365] udevd[5365]: worker [9878] failed while handling '/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/sound/card3/controlC3' [ 424.734169][T13323] usb 9-1: USB disconnect, device number 13 [ 424.831507][T20188] block device autoloading is deprecated and will be removed. [ 424.997294][T20200] netlink: 'syz.2.22115': attribute type 1 has an invalid length. [ 425.110443][T20205] netlink: 'syz.2.22117': attribute type 39 has an invalid length. [ 425.640357][T20242] __nla_validate_parse: 2 callbacks suppressed [ 425.640368][T20242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22141'. [ 425.648449][T20244] netlink: 'syz.4.22130': attribute type 39 has an invalid length. [ 425.749270][T20248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22133'. [ 425.752028][T20248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22133'. [ 426.176010][T20277] netlink: 'syz.2.22146': attribute type 8 has an invalid length. [ 426.204906][T20281] netlink: 'syz.2.22151': attribute type 2 has an invalid length. [ 426.207382][T20281] netlink: 119 bytes leftover after parsing attributes in process `syz.2.22151'. [ 426.263612][T20286] sp0: Synchronizing with TNC [ 426.289378][T20289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22156'. [ 426.483162][T20318] netlink: 'syz.1.22169': attribute type 1 has an invalid length. [ 426.485450][T20318] netlink: 134708 bytes leftover after parsing attributes in process `syz.1.22169'. [ 426.615787][T20339] netlink: 68 bytes leftover after parsing attributes in process `syz.3.22178'. [ 426.653508][T20345] vxcan3: entered promiscuous mode [ 426.655231][T20345] vxcan3: entered allmulticast mode [ 426.702277][ T1136] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 426.814349][T20373] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 426.816496][T20373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.844715][T20377] KVM: debugfs: duplicate directory 20377-4 [ 426.882484][T20386] xt_cgroup: path and classid specified [ 427.290697][T20443] CIFS: iocharset name too long [ 427.525087][ T6072] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 427.697915][ T6072] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 427.701239][ T6072] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 427.705038][ T6072] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 427.708387][ T6072] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 427.711328][ T6072] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 427.715578][ T6072] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 427.718420][ T6072] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 427.720685][ T6072] usb 9-1: Product: syz [ 427.721804][ T6072] usb 9-1: Manufacturer: syz [ 427.724963][ T6072] cdc_wdm 9-1:1.0: skipping garbage [ 427.726370][ T6072] cdc_wdm 9-1:1.0: skipping garbage [ 427.728987][ T6072] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 427.730727][ T6072] cdc_wdm 9-1:1.0: Unknown control protocol [ 427.942308][ T10] usb 9-1: USB disconnect, device number 14 [ 429.265733][T20514] netlink: 'syz.4.22262': attribute type 1 has an invalid length. [ 429.273758][T20516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22263'. [ 429.583458][T20545] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 429.612361][T17365] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 429.615286][T17365] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 429.641998][T13323] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 429.654064][T20554] netlink: 84 bytes leftover after parsing attributes in process `syz.4.22281'. [ 429.855938][T13323] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 429.949278][T20580] openvswitch: netlink: nsh attribute has 24925 unknown bytes. [ 429.951602][T20580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.037653][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 430.070289][T13323] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 430.168900][T20602] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.171242][T20602] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.173270][T20602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.197955][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 430.203181][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 56832, setting to 1024 [ 430.206404][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 430.209705][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 430.212529][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.216130][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 430.218685][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.447195][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 430.449154][ T10] usbtmc 6-1:16.0: can't read capabilities [ 430.536800][T20628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22316'. [ 430.664171][ T10] usb 6-1: USB disconnect, device number 18 [ 430.824992][T20654] netem: invalid attributes len -14 [ 430.826963][T20654] netem: change failed [ 431.267031][T20676] __nla_validate_parse: 2 callbacks suppressed [ 431.267042][T20676] netlink: 20 bytes leftover after parsing attributes in process `syz.4.22337'. [ 431.316480][T20681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22339'. [ 431.408370][T20691] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 431.410889][T20691] netlink: 'syz.1.22344': attribute type 10 has an invalid length. [ 431.414041][T20691] bridge_slave_1: entered promiscuous mode [ 431.415962][T20691] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 431.695555][T20704] virt_wifi0 speed is unknown, defaulting to 1000 [ 432.016932][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 432.016949][ T40] audit: type=1326 audit(2000002085.777:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20727 comm="syz.1.22360" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f23579 code=0x0 [ 432.708294][T20744] IPVS: sh: FWM 3 0x00000003 - no destination available [ 432.859988][T17365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 433.408257][T13323] kernel write not supported for file /input/mouse0 (pid: 13323 comm: kworker/2:4) [ 433.492038][T20832] virt_wifi0 speed is unknown, defaulting to 1000 [ 433.601671][T20844] netlink: 140 bytes leftover after parsing attributes in process `syz.1.22415'. [ 434.131952][ C2] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 434.251924][T20903] ALSA: mixer_oss: invalid index 100000 [ 434.462029][T20922] bridge0: entered allmulticast mode [ 434.700162][T20942] Failed to get privilege flags for destination (handle=0x2:0x0) [ 434.812468][T20956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22466'. [ 434.868948][T20963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22467'. [ 435.060218][T20977] netlink: 140 bytes leftover after parsing attributes in process `syz.3.22475'. [ 435.324049][T21004] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 435.346316][T21006] mkiss: ax0: crc mode is auto. [ 436.782741][T21066] loop2: detected capacity change from 0 to 1 [ 436.790639][T21066] Dev loop2: unable to read RDB block 1 [ 436.792422][T21066] loop2: unable to read partition table [ 436.794502][T21066] loop2: partition table beyond EOD, truncated [ 436.796367][T21066] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5) [ 437.658621][T21151] ax25_connect(): syz.2.22554 uses autobind, please contact jreuter@yaina.de [ 437.926276][T21173] macsec2: entered promiscuous mode [ 438.104962][T21200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22578'. [ 438.109972][T21200] netlink: 277 bytes leftover after parsing attributes in process `syz.3.22578'. [ 438.112877][T21200] netlink: 277 bytes leftover after parsing attributes in process `syz.3.22578'. [ 438.117171][T21202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22579'. [ 438.219946][T21209] input: syz1 as /devices/virtual/input/input72 [ 438.504358][ T1323] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 438.507301][T21226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22589'. [ 438.511114][T21226] netlink: 277 bytes leftover after parsing attributes in process `syz.4.22589'. [ 438.513805][T21226] netlink: 277 bytes leftover after parsing attributes in process `syz.4.22589'. [ 438.542756][T21228] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.22590'. [ 438.675353][ T1323] usb 6-1: Using ep0 maxpacket: 32 [ 438.678249][ T1323] usb 6-1: config 2 has an invalid interface number: 157 but max is 0 [ 438.680605][ T1323] usb 6-1: config 2 has no interface number 0 [ 438.684030][ T1323] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 438.686654][ T1323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.688959][ T1323] usb 6-1: Product: syz [ 438.690178][ T1323] usb 6-1: Manufacturer: syz [ 438.691551][ T1323] usb 6-1: SerialNumber: syz [ 438.695129][ T1323] imon 6-1:2.157: unable to register, err -19 [ 438.912976][ T6072] usb 6-1: USB disconnect, device number 19 [ 439.007398][ T1136] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 439.584934][T21258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22604'. [ 439.615052][T17370] bond0: (slave bond_slave_0): interface is now down [ 439.618395][T17370] bond0: (slave bond_slave_1): interface is now down [ 439.628365][T17370] bond0: now running without any active interface! [ 439.743249][T21278] loop2: detected capacity change from 0 to 7 [ 439.747974][T21278] Dev loop2: unable to read RDB block 7 [ 439.750210][T21278] loop2: AHDI p1 p2 p3 [ 439.751991][T21278] loop2: partition table partially beyond EOD, truncated [ 439.754754][T21278] loop2: p1 start 1601398130 is beyond EOD, truncated [ 439.757212][T21278] loop2: p2 start 1702059890 is beyond EOD, truncated [ 440.086721][T21302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22624'. [ 440.215166][ T1323] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 440.217308][ T1323] hid-generic 0000:0003:0000.000B: unknown main item tag 0x0 [ 440.220273][ T1323] hid-generic 0000:0003:0000.000B: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz1 [ 441.199156][T21377] netlink: 'syz.1.22659': attribute type 4 has an invalid length. [ 441.201502][T21377] netlink: 'syz.1.22659': attribute type 2 has an invalid length. [ 441.711063][T21406] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 441.713106][T21406] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 441.722826][T21406] vhci_hcd vhci_hcd.0: Device attached [ 441.729617][T21412] vhci_hcd: connection closed [ 441.729888][ T1136] vhci_hcd: stop threads [ 441.733950][ T1136] vhci_hcd: release socket [ 441.735782][ T1136] vhci_hcd: disconnect device [ 442.748566][T21460] overlayfs: missing 'workdir' [ 443.039625][T21485] input: syz0 as /devices/virtual/input/input73 [ 443.042214][T21485] input: failed to attach handler leds to device input73, error: -6 [ 443.111977][ C2] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 443.670899][T21519] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 443.674979][T21519] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 444.053055][T17369] wlan0: Trigger new scan to find an IBSS to join [ 444.481332][T17362] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 444.517755][T21613] __nla_validate_parse: 5 callbacks suppressed [ 444.517772][T21613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22766'. [ 444.522200][T21613] netlink: 112 bytes leftover after parsing attributes in process `syz.1.22766'. [ 444.525715][T21613] netlink: 400 bytes leftover after parsing attributes in process `syz.1.22766'. [ 444.529150][T21613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22766'. [ 444.531663][T21615] input: syz1 as /devices/virtual/input/input74 [ 444.589678][T21623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22771'. [ 444.599651][T21623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22771'. [ 444.855415][T21641] nbd: nbd4 already in use [ 445.763781][ T67] Bluetooth: hci1: command 0x0405 tx timeout [ 445.975573][T21692] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 445.977524][T21692] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 445.980105][T21692] vhci_hcd vhci_hcd.0: Device attached [ 445.984119][T21694] vhci_hcd: connection closed [ 445.984378][T17365] vhci_hcd: stop threads [ 445.986949][T17365] vhci_hcd: release socket [ 445.988366][T17365] vhci_hcd: disconnect device [ 446.181515][T21697] netlink: 'syz.4.22799': attribute type 4 has an invalid length. [ 446.183735][T21697] netlink: 'syz.4.22799': attribute type 2 has an invalid length. [ 446.211288][ T1323] kernel read not supported for file /dsp1 (pid: 1323 comm: kworker/3:2) [ 446.223253][T21699] gtp0: entered promiscuous mode [ 446.224757][T21699] gtp0: entered allmulticast mode [ 446.453660][T21726] vivid-000: disconnect [ 446.455154][T21725] vivid-000: reconnect [ 446.613234][T21722] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 446.792303][T21750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22827'. [ 446.796538][T21750] netlink: 173 bytes leftover after parsing attributes in process `syz.1.22827'. [ 447.817818][T21834] net veth1_virt_wifi ����: renamed from virt_wifi0 [ 447.901776][T13323] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 448.065057][T13323] usb 6-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 448.068501][T13323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.071599][T13323] usb 6-1: Product: syz [ 448.083103][T13323] usb 6-1: Manufacturer: syz [ 448.084603][T13323] usb 6-1: SerialNumber: syz [ 448.086910][T13323] usb 6-1: config 0 descriptor?? [ 448.095167][T13323] gspca_main: touptek-2.14.0 probing 0547:6801 [ 448.309697][ T1323] usb 6-1: USB disconnect, device number 20 [ 448.682211][ T67] Bluetooth: hci1: command 0x0405 tx timeout [ 448.750466][T21900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22894'. [ 448.754362][T21900] netlink: 104 bytes leftover after parsing attributes in process `syz.2.22894'. [ 449.659196][ T6092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 449.664188][ T6092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 449.667467][ T6092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 449.671088][ T6092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 449.674051][ T6092] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 449.676789][ T6092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 449.709019][T21954] virt_wifi0 speed is unknown, defaulting to 1000 [ 449.773559][T21954] chnl_net:caif_netlink_parms(): no params data found [ 449.868057][T21954] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.878674][T21954] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.882323][T21954] bridge_slave_0: entered allmulticast mode [ 449.885377][T21954] bridge_slave_0: entered promiscuous mode [ 449.889022][T21954] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.895362][T21954] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.898055][T21954] bridge_slave_1: entered allmulticast mode [ 449.901636][T21954] bridge_slave_1: entered promiscuous mode [ 449.927359][T21954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.931079][T21954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.954878][T17369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.961207][T21954] team0: Port device team_slave_0 added [ 449.964346][T21954] team0: Port device team_slave_1 added [ 449.999370][T21954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.001368][T21954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.010681][T21954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.015262][T21954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.017206][T21954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.024727][T21954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.057172][T21954] hsr_slave_0: entered promiscuous mode [ 450.059810][T21954] hsr_slave_1: entered promiscuous mode [ 450.061048][T21992] netlink: 'syz.2.22935': attribute type 3 has an invalid length. [ 450.063771][T21992] __nla_validate_parse: 3 callbacks suppressed [ 450.063801][T21992] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.22935'. [ 450.065841][T21954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 450.070202][T21954] Cannot create hsr debugfs directory [ 450.181337][T22006] dns_resolver: Unsupported content type (240) [ 450.198826][T21954] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 450.208758][T21954] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 450.213693][T21954] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 450.218307][T21954] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 450.231593][T21954] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.233740][T21954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.236718][T21954] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.239514][T21954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.291153][T21954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.307908][T17369] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.315265][T17369] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.336603][T21954] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.349810][T17362] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.351915][T17362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.354678][T17362] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.355044][ T40] audit: type=1326 audit(2000002102.923:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.4.22951" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 450.356755][T17362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.365012][ T40] audit: type=1326 audit(2000002102.923:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.4.22951" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 450.375444][ T40] audit: type=1326 audit(2000002102.923:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.4.22951" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 450.385326][ T40] audit: type=1326 audit(2000002102.923:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.4.22951" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 450.393890][ T40] audit: type=1326 audit(2000002102.923:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.4.22951" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 450.399816][ T40] audit: type=1326 audit(2000002102.923:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.4.22951" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 450.405891][ T40] audit: type=1326 audit(2000002102.923:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.4.22951" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 450.411710][ T40] audit: type=1326 audit(2000002102.923:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.4.22951" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fe35a7 code=0x7ffc0000 [ 450.417812][ T40] audit: type=1326 audit(2000002102.923:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.4.22951" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 450.423559][ T40] audit: type=1326 audit(2000002102.923:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.4.22951" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fe35a7 code=0x7ffc0000 [ 450.471411][T21954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.584381][T21954] veth0_vlan: entered promiscuous mode [ 450.590171][T21954] veth1_vlan: entered promiscuous mode [ 450.603328][T21954] veth0_macvtap: entered promiscuous mode [ 450.606511][T21954] veth1_macvtap: entered promiscuous mode [ 450.613918][T21954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.618562][T21954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.621400][T21954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.624285][T21954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.628500][T21954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.635193][T21954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.641931][T21954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.644848][T21954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.647822][T21954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.651520][T21954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.657016][T21954] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.659961][T21954] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.662471][T21954] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.664986][T21954] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.718816][T21954] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 450.721771][T21954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.727788][T17369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.730815][T17369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.745759][T17369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.748007][T17369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.807939][T22049] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22915'. [ 451.475667][T22066] netlink: 'syz.2.22963': attribute type 1 has an invalid length. [ 451.477848][T22066] netlink: 'syz.2.22963': attribute type 4 has an invalid length. [ 451.480053][T22066] netlink: 188 bytes leftover after parsing attributes in process `syz.2.22963'. [ 451.482727][T22066] NCSI netlink: No device for ifindex 0 [ 451.738549][T22076] random: crng reseeded on system resumption [ 451.755876][T22076] Restarting kernel threads ... done. [ 451.767822][T22078] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 451.773155][T22078] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 451.775540][T22078] gretap1: entered promiscuous mode [ 451.776948][T22078] gretap1: entered allmulticast mode [ 451.841420][ T67] Bluetooth: hci2: command tx timeout [ 452.936612][ T1468] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 453.129318][ T1468] usb 9-1: Using ep0 maxpacket: 16 [ 453.132394][ T1468] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.135980][ T1468] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.139272][ T1468] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 453.143063][ T1468] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 453.145654][ T1468] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.148713][ T1468] usb 9-1: config 0 descriptor?? [ 453.321528][ T36] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 453.483539][ T36] usb 10-1: config 0 has an invalid interface number: 121 but max is 0 [ 453.485923][ T36] usb 10-1: config 0 has no interface number 0 [ 453.487747][ T36] usb 10-1: config 0 interface 121 has no altsetting 0 [ 453.491527][ T36] usb 10-1: New USB device found, idVendor=12d1, idProduct=9e36, bcdDevice=b1.f8 [ 453.494214][ T36] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.496510][ T36] usb 10-1: Product: syz [ 453.497769][ T36] usb 10-1: Manufacturer: syz [ 453.499578][ T36] usb 10-1: SerialNumber: syz [ 453.502224][ T36] usb 10-1: config 0 descriptor?? [ 453.583015][ T1468] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 453.584982][ T1468] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 453.586835][ T1468] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 453.589092][ T1468] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 453.590938][ T1468] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 453.593675][ T1468] input: HID 0955:7214 Haptics as /devices/virtual/input/input75 [ 453.605181][ T1468] shield 0003:0955:7214.000C: Registered Thunderstrike controller [ 453.610843][ T1468] shield 0003:0955:7214.000C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 453.725443][ T36] option 10-1:0.121: GSM modem (1-port) converter detected [ 453.728915][ T36] usb 10-1: USB disconnect, device number 2 [ 453.730937][ T36] option 10-1:0.121: device disconnected [ 453.795987][T22126] random: crng reseeded on system resumption [ 453.809407][ T26] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 453.816066][T13323] usb 9-1: USB disconnect, device number 15 [ 453.822381][ T26] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 453.831803][ T26] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 453.840928][ T26] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 454.059278][ T67] Bluetooth: hci2: command tx timeout [ 454.406018][T22169] netlink: 36 bytes leftover after parsing attributes in process `syz.5.23011'. [ 454.578372][T22187] netlink: 'syz.2.23020': attribute type 10 has an invalid length. [ 454.581274][T22187] netlink: 40 bytes leftover after parsing attributes in process `syz.2.23020'. [ 454.610556][T22191] netlink: 76 bytes leftover after parsing attributes in process `syz.5.23022'. [ 454.808820][T22218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23035'. [ 455.285908][T22264] netlink: 'syz.2.23058': attribute type 11 has an invalid length. [ 455.600345][T22203] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 455.828668][T22314] [ 455.829705][T22314] ====================================================== [ 455.832408][T22314] WARNING: possible circular locking dependency detected [ 455.835185][T22314] 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 Not tainted [ 455.838761][T22314] ------------------------------------------------------ [ 455.840971][T22314] syz.2.23080/22314 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 455.842662][T22314] ffff888026770218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x3343/0x43e0 [ 455.846540][T22314] [ 455.846540][T22314] but task is already holding lock: [ 455.848613][T22314] ffff888068cccd18 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x340/0xc30 [ 455.851300][T22314] [ 455.851300][T22314] which lock already depends on the new lock. [ 455.851300][T22314] [ 455.854118][T22314] [ 455.854118][T22314] the existing dependency chain (in reverse order) is: [ 455.856599][T22314] [ 455.856599][T22314] -> #1 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}: [ 455.858890][T22314] _raw_spin_lock+0x2e/0x40 [ 455.860314][T22314] sch_direct_xmit+0x340/0xc30 [ 455.861824][T22314] __dev_queue_xmit+0x13d4/0x43e0 [ 455.863377][T22314] neigh_resolve_output+0x53a/0x940 [ 455.865001][T22314] ip6_finish_output2+0xb20/0x20a0 [ 455.866616][T22314] ip6_finish_output+0x3f9/0x1360 [ 455.867142][ T6072] kernel read not supported for file /dsp1 (pid: 6072 comm: kworker/1:4) [ 455.868180][T22314] ip6_output+0x1f8/0x540 [ 455.871830][T22314] mld_sendpack+0x9f0/0x11d0 [ 455.873266][T22314] mld_ifc_work+0x740/0xca0 [ 455.874652][T22314] process_one_work+0x9c5/0x1ba0 [ 455.876165][T22314] worker_thread+0x6c8/0xf00 [ 455.877593][T22314] kthread+0x3af/0x750 [ 455.878875][T22314] ret_from_fork+0x45/0x80 [ 455.880385][T22314] ret_from_fork_asm+0x1a/0x30 [ 455.881845][T22314] [ 455.881845][T22314] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}: [ 455.884748][T22314] __lock_acquire+0x249e/0x3c40 [ 455.886186][T22314] lock_acquire.part.0+0x11b/0x380 [ 455.887744][T22314] _raw_spin_lock+0x2e/0x40 [ 455.889202][T22314] __dev_queue_xmit+0x3343/0x43e0 [ 455.890800][T22314] ip6_finish_output2+0xed9/0x20a0 [ 455.892437][T22314] ip6_finish_output+0x3f9/0x1360 [ 455.893993][T22314] ip6_output+0x1f8/0x540 [ 455.895355][T22314] ip6_local_out+0xcd/0x4a0 [ 455.896739][T22314] ip6_send_skb+0x112/0x460 [ 455.898197][T22314] ip6_push_pending_frames+0xe0/0x110 [ 455.899816][T22314] icmpv6_push_pending_frames+0x2dc/0x460 [ 455.901595][T22314] icmp6_send+0x1e90/0x2bb0 [ 455.903016][T22314] ip6_link_failure+0x31/0x5a0 [ 455.904508][T22314] ip_tunnel_xmit+0x2fdb/0x37a0 [ 455.905982][T22314] __gre_xmit+0x8bc/0xc00 [ 455.907343][T22314] erspan_xmit+0x570/0x25b0 [ 455.908770][T22314] dev_hard_start_xmit+0x9a/0x7b0 [ 455.910305][T22314] sch_direct_xmit+0x1ae/0xc30 [ 455.911872][T22314] __qdisc_run+0x53f/0x1a10 [ 455.913582][T22314] __dev_queue_xmit+0x2aa4/0x43e0 [ 455.915669][T22314] neigh_resolve_output+0x53a/0x940 [ 455.917229][T22314] ip6_finish_output2+0xb20/0x20a0 [ 455.918766][T22314] ip6_finish_output+0x3f9/0x1360 [ 455.920315][T22314] ip6_output+0x1f8/0x540 [ 455.921688][T22314] ip6_xmit+0x12d2/0x2300 [ 455.923140][T22314] sctp_v6_xmit+0xc9a/0x1180 [ 455.924561][T22314] sctp_packet_transmit+0x1e89/0x2fd0 [ 455.926178][T22314] sctp_packet_singleton+0x19f/0x370 [ 455.927786][T22314] sctp_outq_flush+0x54d/0x3380 [ 455.929284][T22314] sctp_do_sm+0x179c/0x5c90 [ 455.930633][T22314] sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 455.932269][T22314] sctp_sendmsg_to_asoc+0xa4d/0x1ad0 [ 455.934121][T22314] sctp_sendmsg+0xf0a/0x1eb0 [ 455.936073][T22314] inet_sendmsg+0x119/0x140 [ 455.938047][T22314] ____sys_sendmsg+0x98c/0xc90 [ 455.940128][T22314] ___sys_sendmsg+0x135/0x1e0 [ 455.942165][T22314] __sys_sendmmsg+0x2fa/0x420 [ 455.944203][T22314] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 455.946572][T22314] __do_fast_syscall_32+0x73/0x120 [ 455.948358][T22314] do_fast_syscall_32+0x32/0x80 [ 455.949845][T22314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 455.951723][T22314] [ 455.951723][T22314] other info that might help us debug this: [ 455.951723][T22314] [ 455.954927][T22314] Possible unsafe locking scenario: [ 455.954927][T22314] [ 455.957003][T22314] CPU0 CPU1 [ 455.958469][T22314] ---- ---- [ 455.960088][T22314] lock(&qdisc_xmit_lock_key#3); [ 455.961950][T22314] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 455.965566][T22314] lock(&qdisc_xmit_lock_key#3); [ 455.967879][T22314] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 455.969815][T22314] [ 455.969815][T22314] *** DEADLOCK *** [ 455.969815][T22314] [ 455.972137][T22314] 10 locks held by syz.2.23080/22314: [ 455.973647][T22314] #0: ffff888026a85598 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_sendmsg+0xda6/0x1eb0 [ 455.976322][T22314] #1: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: sctp_v6_xmit+0xba9/0x1180 [ 455.978872][T22314] #2: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x3db/0x20a0 [ 455.981511][T22314] #3: ffffffff8e1bd0e0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x43e0 [ 455.984845][T22314] #4: ffff888068cccd18 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x340/0xc30 [ 455.987925][T22314] #5: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: icmp6_send+0x27d/0x2bb0 [ 455.990670][T22314] #6: ffff88804a3f01d8 (k-slock-AF_INET6){+.-.}-{3:3}, at: icmp6_send+0x8dc/0x2bb0 [ 455.993446][T22314] #7: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0xc4/0x460 [ 455.996109][T22314] #8: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x3db/0x20a0 [ 455.999115][T22314] #9: ffffffff8e1bd0e0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x43e0 [ 456.002589][T22314] [ 456.002589][T22314] stack backtrace: [ 456.004516][T22314] CPU: 0 UID: 0 PID: 22314 Comm: syz.2.23080 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 456.004533][T22314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 456.004540][T22314] Call Trace: [ 456.004545][T22314] <TASK> [ 456.004551][T22314] dump_stack_lvl+0x116/0x1f0 [ 456.004569][T22314] print_circular_bug+0x490/0x760 [ 456.004591][T22314] check_noncircular+0x31a/0x400 [ 456.004609][T22314] ? stack_trace_save+0x95/0xd0 [ 456.004628][T22314] ? __pfx_check_noncircular+0x10/0x10 [ 456.004653][T22314] ? add_lock_to_list+0x17d/0x390 [ 456.004673][T22314] __lock_acquire+0x249e/0x3c40 [ 456.004698][T22314] ? __pfx___lock_acquire+0x10/0x10 [ 456.004721][T22314] ? unwind_get_return_address+0x59/0xa0 [ 456.004747][T22314] ? arch_stack_walk+0xa7/0x100 [ 456.004765][T22314] lock_acquire.part.0+0x11b/0x380 [ 456.004789][T22314] ? __dev_queue_xmit+0x3343/0x43e0 [ 456.004813][T22314] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 456.004838][T22314] ? rcu_is_watching+0x12/0xc0 [ 456.004857][T22314] ? trace_lock_acquire+0x14e/0x1f0 [ 456.004876][T22314] ? trace_lock_acquire+0x14e/0x1f0 [ 456.004895][T22314] ? __dev_queue_xmit+0x3343/0x43e0 [ 456.004917][T22314] ? lock_acquire+0x2f/0xb0 [ 456.004939][T22314] ? __dev_queue_xmit+0x3343/0x43e0 [ 456.004962][T22314] _raw_spin_lock+0x2e/0x40 [ 456.004981][T22314] ? __dev_queue_xmit+0x3343/0x43e0 [ 456.005003][T22314] __dev_queue_xmit+0x3343/0x43e0 [ 456.005026][T22314] ? lockdep_unlock+0x11a/0x290 [ 456.005044][T22314] ? __lock_acquire+0x2077/0x3c40 [ 456.005069][T22314] ? __pfx___dev_queue_xmit+0x10/0x10 [ 456.005092][T22314] ? hlock_class+0x20/0x130 [ 456.005112][T22314] ? __pfx_mark_lock+0x10/0x10 [ 456.005137][T22314] ? find_held_lock+0x2d/0x110 [ 456.005156][T22314] ? ip6_finish_output+0x3f9/0x1360 [ 456.005186][T22314] ? __pfx_lock_release+0x10/0x10 [ 456.005212][T22314] ? mark_held_locks+0x9f/0xe0 [ 456.005237][T22314] ip6_finish_output2+0xed9/0x20a0 [ 456.005265][T22314] ip6_finish_output+0x3f9/0x1360 [ 456.005292][T22314] ip6_output+0x1f8/0x540 [ 456.005316][T22314] ? __pfx_ip6_output+0x10/0x10 [ 456.005340][T22314] ip6_local_out+0xcd/0x4a0 [ 456.005360][T22314] ip6_send_skb+0x112/0x460 [ 456.005385][T22314] ip6_push_pending_frames+0xe0/0x110 [ 456.005409][T22314] icmpv6_push_pending_frames+0x2dc/0x460 [ 456.005434][T22314] icmp6_send+0x1e90/0x2bb0 [ 456.005459][T22314] ? __pfx_icmp6_send+0x10/0x10 [ 456.005482][T22314] ? lock_acquire.part.0+0x11b/0x380 [ 456.005505][T22314] ? find_held_lock+0x2d/0x110 [ 456.005525][T22314] ? trace_lock_acquire+0x14e/0x1f0 [ 456.005549][T22314] ? check_irq_usage+0x170/0x1290 [ 456.005572][T22314] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 456.005596][T22314] ? ip6_link_failure+0x31/0x5a0 [ 456.005618][T22314] ip6_link_failure+0x31/0x5a0 [ 456.005638][T22314] ? __pfx_ip6_link_failure+0x10/0x10 [ 456.005660][T22314] ip_tunnel_xmit+0x2fdb/0x37a0 [ 456.005686][T22314] ? register_lock_class+0x1106/0x1240 [ 456.005714][T22314] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 456.005743][T22314] ? lockdep_lock+0xc6/0x200 [ 456.005762][T22314] ? __pfx_lockdep_lock+0x10/0x10 [ 456.005782][T22314] __gre_xmit+0x8bc/0xc00 [ 456.005805][T22314] ? __pfx___gre_xmit+0x10/0x10 [ 456.005830][T22314] erspan_xmit+0x570/0x25b0 [ 456.005853][T22314] ? lock_acquire.part.0+0x11b/0x380 [ 456.005878][T22314] ? __pfx_erspan_xmit+0x10/0x10 [ 456.005900][T22314] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 456.005925][T22314] ? rcu_is_watching+0x12/0xc0 [ 456.005945][T22314] dev_hard_start_xmit+0x9a/0x7b0 [ 456.005969][T22314] sch_direct_xmit+0x1ae/0xc30 [ 456.005992][T22314] ? __lock_acquire+0x15a9/0x3c40 [ 456.006017][T22314] ? __pfx_sch_direct_xmit+0x10/0x10 [ 456.006039][T22314] ? lock_acquire.part.0+0x100/0x380 [ 456.006064][T22314] ? skbprio_dequeue+0x42c/0x780 [ 456.006090][T22314] __qdisc_run+0x53f/0x1a10 [ 456.006116][T22314] __dev_queue_xmit+0x2aa4/0x43e0 [ 456.006140][T22314] ? __lock_acquire+0x15a9/0x3c40 [ 456.006166][T22314] ? __pfx___dev_queue_xmit+0x10/0x10 [ 456.006193][T22314] ? hlock_class+0x20/0x130 [ 456.006213][T22314] ? __pfx_mark_lock+0x10/0x10 [ 456.006238][T22314] ? find_held_lock+0x2d/0x110 [ 456.006257][T22314] ? ip6_finish_output2+0xb20/0x20a0 [ 456.006282][T22314] ? __pfx_lock_release+0x10/0x10 [ 456.006307][T22314] ? __asan_memcpy+0x3c/0x60 [ 456.006330][T22314] ? eth_header+0x11c/0x1f0 [ 456.006354][T22314] neigh_resolve_output+0x53a/0x940 [ 456.006377][T22314] ip6_finish_output2+0xb20/0x20a0 [ 456.006406][T22314] ip6_finish_output+0x3f9/0x1360 [ 456.006432][T22314] ip6_output+0x1f8/0x540 [ 456.006457][T22314] ? __pfx_ip6_output+0x10/0x10 [ 456.006480][T22314] ip6_xmit+0x12d2/0x2300 [ 456.006504][T22314] ? __kasan_slab_free+0x51/0x70 [ 456.006535][T22314] ? __pfx_ip6_xmit+0x10/0x10 [ 456.006559][T22314] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 456.006584][T22314] ? rcu_is_watching+0x12/0xc0 [ 456.006601][T22314] ? trace_lock_acquire+0x14e/0x1f0 [ 456.006621][T22314] ? sctp_v6_xmit+0xba9/0x1180 [ 456.006650][T22314] sctp_v6_xmit+0xc9a/0x1180 [ 456.006678][T22314] ? __pfx_sctp_v6_xmit+0x10/0x10 [ 456.006703][T22314] ? crc32c_le_arch+0x11b/0x1d0 [ 456.006767][T22314] ? __pfx_sctp_csum_update+0x10/0x10 [ 456.006785][T22314] ? __skb_checksum+0x6f0/0xaf0 [ 456.006812][T22314] sctp_packet_transmit+0x1e89/0x2fd0 [ 456.006838][T22314] sctp_packet_singleton+0x19f/0x370 [ 456.006866][T22314] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 456.006896][T22314] ? sctp_outq_select_transport+0x208/0x740 [ 456.006925][T22314] sctp_outq_flush+0x54d/0x3380 [ 456.006952][T22314] ? __pfx_sctp_outq_flush+0x10/0x10 [ 456.006980][T22314] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 456.007001][T22314] ? sctp_outq_tail+0x670/0xa30 [ 456.007026][T22314] ? sctp_endpoint_add_asoc+0x1dc/0x2f0 [ 456.007051][T22314] sctp_do_sm+0x179c/0x5c90 [ 456.007071][T22314] ? kasan_save_stack+0x42/0x60 [ 456.007095][T22314] ? kasan_save_stack+0x33/0x60 [ 456.007120][T22314] ? kasan_save_track+0x14/0x30 [ 456.007145][T22314] ? __pfx_sctp_do_sm+0x10/0x10 [ 456.007161][T22314] ? sctp_sendmsg+0xf0a/0x1eb0 [ 456.007217][T22314] ? ____sys_sendmsg+0x98c/0xc90 [ 456.007237][T22314] ? __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 456.007261][T22314] ? __do_fast_syscall_32+0x73/0x120 [ 456.007296][T22314] ? sk_leave_memory_pressure+0xdd/0x130 [ 456.007316][T22314] ? __sk_mem_raise_allocated+0x8a1/0x1710 [ 456.007337][T22314] sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 456.007355][T22314] sctp_sendmsg_to_asoc+0xa4d/0x1ad0 [ 456.007380][T22314] ? sctp_assoc_add_peer+0x254/0x1530 [ 456.007408][T22314] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 456.007434][T22314] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 456.007462][T22314] ? lock_acquire+0x2f/0xb0 [ 456.007484][T22314] ? sctp_endpoint_lookup_assoc+0xac/0x2a0 [ 456.007511][T22314] sctp_sendmsg+0xf0a/0x1eb0 [ 456.007539][T22314] ? __pfx_sctp_sendmsg+0x10/0x10 [ 456.007572][T22314] ? __pfx_aa_sk_perm+0x10/0x10 [ 456.007593][T22314] ? __import_iovec+0x1f2/0x6a0 [ 456.007613][T22314] ? __pfx_sctp_sendmsg+0x10/0x10 [ 456.007641][T22314] inet_sendmsg+0x119/0x140 [ 456.007659][T22314] ____sys_sendmsg+0x98c/0xc90 [ 456.007680][T22314] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.007700][T22314] ? get_compat_msghdr+0x11b/0x170 [ 456.007727][T22314] ___sys_sendmsg+0x135/0x1e0 [ 456.007754][T22314] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.007785][T22314] ? trace_lock_acquire+0x14e/0x1f0 [ 456.007811][T22314] __sys_sendmmsg+0x2fa/0x420 [ 456.007839][T22314] ? __pfx___sys_sendmmsg+0x10/0x10 [ 456.007869][T22314] ? __pfx_do_futex+0x10/0x10 [ 456.007895][T22314] ? xfd_validate_state+0x5d/0x180 [ 456.007920][T22314] ? rcu_is_watching+0x12/0xc0 [ 456.007939][T22314] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 456.007963][T22314] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 456.007989][T22314] __do_fast_syscall_32+0x73/0x120 [ 456.008014][T22314] do_fast_syscall_32+0x32/0x80 [ 456.008038][T22314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 456.008067][T22314] RIP: 0023:0xf7f81579 [ 456.008082][T22314] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 456.008100][T22314] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 456.008118][T22314] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002700 [ 456.008130][T22314] RDX: 0000000000000001 RSI: 000000002000c8c4 RDI: 0000000000000000 [ 456.008141][T22314] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 456.008151][T22314] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 456.008162][T22314] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.008183][T22314] </TASK> [ 456.262403][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 456.277482][T22314] syz.2.23080 (22314) used greatest stack depth: 18832 bytes left [ 456.289935][ T67] Bluetooth: hci2: command tx timeout [ 456.468482][ T1136] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.471180][ T1136] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 456.521552][ T1136] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.524261][ T1136] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 456.594840][ T1136] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.598298][ T1136] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 456.669106][ T1136] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.672548][ T1136] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 456.753908][ T1136] tipc: Resetting bearer <eth:ip6gre0> [ 456.767227][ T1136] gretap0: left allmulticast mode [ 456.775860][ T1136] tipc: Disabling bearer <eth:ip6gre0> [ 456.829471][ T1136] geneve0 (unregistering): left promiscuous mode [ 456.831719][ T1136] team0: Port device geneve0 removed [ 457.460554][ T1136] team0: Port device bridge9 removed [ 457.516909][ T1136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.521470][ T1136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.526120][ T1136] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 457.530912][ T1136] bond0 (unregistering): Released all slaves [ 457.537762][ T1136] bond1 (unregistering): Released all slaves [ 457.644542][ T1136] bond2 (unregistering): Released all slaves [ 457.647745][ T1136] bond3 (unregistering): Released all slaves [ 457.741341][ T1136] bond4 (unregistering): Released all slaves [ 457.841688][ T1136] bond5 (unregistering): Released all slaves [ 457.846846][ T1136] bond6 (unregistering): Released all slaves [ 457.851513][ T1136] bond7 (unregistering): Released all slaves [ 459.416616][ T1136] : left promiscuous mode [ 459.480527][ T1136] tipc: Disabling bearer <udp:syz2> [ 459.482692][ T1136] tipc: Left network mode [ 459.769280][ T1136] batman_adv: batadv0: Interface deactivated: wlan0 [ 459.788288][ T1136] batman_adv: batadv0: Removing interface: wlan0 [ 459.899735][ T1136] hsr_slave_0: left promiscuous mode [ 459.902084][ T1136] hsr_slave_1: left promiscuous mode [ 459.904295][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.907290][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.910472][ T1136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.913316][ T1136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.916281][ T1136] batman_adv: batadv0: Interface deactivated: vlan1 [ 459.918988][ T1136] batman_adv: batadv0: Removing interface: vlan1 [ 459.923927][ T1136] veth0_macvtap: left promiscuous mode [ 459.925534][ T1136] ������: left promiscuous mode [ 459.950171][ T1136] pim6reg (unregistering): left allmulticast mode [ 460.397393][ T1136] team_slave_1 (unregistering): left promiscuous mode [ 460.400601][ T1136] team0 (unregistering): Port device team_slave_1 removed [ 460.465739][ T1136] team_slave_0 (unregistering): left promiscuous mode [ 460.467969][ T1136] team0 (unregistering): Port device team_slave_0 removed [ 460.901173][ C2] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 460.954875][ T1136] IPVS: stop unused estimator thread 0... [ 461.202653][ T1136] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.266209][ T1136] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.308827][ T1136] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.363079][ T1136] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.416160][ T1136] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.491307][ T1136] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.545640][ T1136] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.588118][ T1136] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.663216][ T1136] veth0_to_bridge: left allmulticast mode [ 461.665158][ T1136] veth0_to_bridge: left promiscuous mode [ 461.667086][ T1136] bridge0: port 1(veth0_to_bridge) entered disabled state [ 461.670539][ T1136] bridge_slave_1: left allmulticast mode [ 461.672317][ T1136] bridge_slave_1: left promiscuous mode [ 461.673933][ T1136] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.677034][ T1136] bridge_slave_0: left allmulticast mode [ 461.678927][ T1136] bridge_slave_0: left promiscuous mode [ 461.680520][ T1136] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.686079][ T1136] bridge_slave_1: left allmulticast mode [ 461.687877][ T1136] bridge_slave_1: left promiscuous mode [ 461.689556][ T1136] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.692700][ T1136] bridge_slave_0: left allmulticast mode [ 461.694303][ T1136] bridge_slave_0: left promiscuous mode [ 461.695920][ T1136] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.710553][ T1136] gretap0: left allmulticast mode [ 461.931800][ T1136] geneve0 (unregistering): left promiscuous mode [ 461.934135][ T1136] team0: Port device geneve0 removed [ 462.315383][ T1136] bridge0 (unregistering): left allmulticast mode [ 462.545371][ T1136] bond0 (unregistering): left promiscuous mode [ 462.547881][ T1136] bond_slave_0: left promiscuous mode [ 462.549823][ T1136] bond_slave_1: left promiscuous mode [ 462.551576][ T1136] bridge_slave_1: left promiscuous mode [ 462.554413][ T1136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.559105][ T1136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.563604][ T1136] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 462.567891][ T1136] bond0 (unregistering): Released all slaves [ 462.573187][ T1136] bond1 (unregistering): Released all slaves [ 462.676732][ T1136] bond2 (unregistering): Released all slaves [ 462.680010][ T1136] bond3 (unregistering): Released all slaves [ 462.683214][ T1136] bond4 (unregistering): Released all slaves [ 462.686725][ T1136] bond5 (unregistering): Released all slaves [ 462.783815][ T1136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.786836][ T1136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.790051][ T1136] bond0 (unregistering): Released all slaves [ 462.793249][ T1136] bond1 (unregistering): Released all slaves [ 462.799082][ T1136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.803320][ T1136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.806857][ T1136] bond0 (unregistering): Released all slaves [ 464.395853][ T1136] tipc: Left network mode [ 464.408456][ T1136] tipc: Disabling bearer <eth:macvlan0> [ 464.418505][ T1136] tipc: Disabling bearer <udp:syz1> [ 464.420162][ T1136] tipc: Left network mode [ 464.440574][ T1136] IPVS: stopping backup sync thread 3385 ... [ 464.803533][ T1136] mac80211_hwsim hwsim5 wlan1 (unregistering): left promiscuous mode [ 464.806238][ T1136] team0: Port device wlan1 removed VM DIAGNOSIS: 04:12:55 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000067 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853e91d5 RDI=ffffffff9ab71ea0 RBP=ffffffff9ab71e60 RSP=ffffc9000305d358 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e34312e36 R12=0000000000000000 R13=0000000000000067 R14=ffffffff9ab71e60 R15=0000000000000000 RIP=ffffffff853e91ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73cdd7c CR3=0000000064358000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=fffff94000332800 RBX=fffff94000332801 RCX=ffffffff81f381fa RDX=0000000000000001 RSI=0000000000000008 RDI=ffffea0001994000 RBP=fffff94000332800 RSP=ffffc900064a72b0 R8 =0000000000000000 R9 =fffff94000332800 R10=ffffea0001994007 R11=0000000000000000 R12=ffff88804f9a0048 R13=ffffc900064a7398 R14=0000000000000001 R15=ffff88807ffd6540 RIP=ffffffff821c224b RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002f714ffc CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000014 RCX=ffffffff84c901b9 RDX=ffff88802473c880 RSI=ffffffff8bd3ad20 RDI=0000000000000004 RBP=ffffffff8bd3ad20 RSP=ffffc9000357f2d8 R8 =0000000000000001 R9 =0000000000000040 R10=0000000000000010 R11=0000000000000012 R12=0000000000000004 R13=1ffff920006afe6a R14=0000000000000004 R15=0000000000000002 RIP=ffffffff81b9ed32 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff30b090d00 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000558a99e49000 CR3=000000004c540000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=a47ac834a47ac834 a47ac834a47ac834 a47ac834a47ac834 a47ac834a47ac834 a47ac834a47ac834 a47ac834a47ac834 a47ac834a47ac834 a47ac834a47ac834 ZMM22=12ed7c7012ed7c70 12ed7c7012ed7c70 12ed7c7012ed7c70 12ed7c7012ed7c70 12ed7c7012ed7c70 12ed7c7012ed7c70 12ed7c7012ed7c70 12ed7c7012ed7c70 ZMM23=73c8970173c89701 73c8970173c89701 73c8970173c89701 73c8970173c89701 73c8970173c89701 73c8970173c89701 73c8970173c89701 73c8970173c89701 ZMM24=81bfde6c81bfde6c 81bfde6c81bfde6c 81bfde6c81bfde6c 81bfde6c81bfde6c 81bfde6c81bfde6c 81bfde6c81bfde6c 81bfde6c81bfde6c 81bfde6c81bfde6c ZMM25=44608c4e44608c4e 44608c4e44608c4e 44608c4e44608c4e 44608c4e44608c4e 44608c4e44608c4e 44608c4e44608c4e 44608c4e44608c4e 44608c4e44608c4e ZMM26=6366f4226366f422 6366f4226366f422 6366f4226366f422 6366f4226366f422 6366f4226366f422 6366f4226366f422 6366f4226366f422 6366f4226366f422 ZMM27=995a91f9995a91f9 995a91f9995a91f9 995a91f9995a91f9 995a91f9995a91f9 995a91f9995a91f9 995a91f9995a91f9 995a91f9995a91f9 995a91f9995a91f9 ZMM28=000001200000011f 0000011e0000011d 0000011c0000011b 0000011a00000119 0000011800000117 0000011600000115 0000011400000113 0000011200000111 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=3566000035660000 3566000035660000 3566000035660000 3566000035660000 3566000035660000 3566000035660000 3566000035660000 3566000035660000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=00000000000000f8 RCX=ffffffff8a197312 RDX=ffff8880221fa440 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000002 RSP=ffffc90003c5f788 R8 =0000000000000007 R9 =0000000000000000 R10=00000000000000f8 R11=0000000000084d9b R12=ffff88805ae5b538 R13=0000000000000000 R14=dffffc0000000000 R15=0000000000000003 RIP=ffffffff81b9f1c0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73ad230 CR3=0000000068af2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000600000320 0000025800000190 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000