last executing test programs: 1.275522158s ago: executing program 1 (id=12427): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002440)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x25dfdbfd, {{@in6=@dev={0xfe, 0x80, '\x00', 0xa}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x6}, {0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x3}, 0x400, 0x1, 0x1, 0x1, 0x0, 0x3}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x1}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20040084}, 0x24048840) 1.134117427s ago: executing program 1 (id=12429): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 998.699326ms ago: executing program 2 (id=12431): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x404, 0x0, 0x940c, 0x3002, 0x240, 0x2c0, 0x33c, 0x3d8, 0x3d8, 0x33c, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xffffffff, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffff00], 'wlan1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x3c, 0x1, 0x0, 0x2}, 0x0, 0x21c, 0x240, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@multicast1, [0xffffffff, 0xff, 0x0, 0xffffff00], @ipv4=@multicast2, [0x0, 0xff, 0x0, 0xffffffff], 0x100004d6, 0x3501, 0x84, 0x1, 0x4, 0x1}, {@ipv4=@loopback, [0xff000000, 0xffffffff, 0xff000000, 0xff], @ipv4=@empty, [0xff000000, 0xffffff00, 0xff000000, 0xffffff00], 0x4d2, 0x3507, 0x2f, 0x0, 0x4}, {@ipv4=@remote, [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@private0, [0xff0000ff, 0xffffff00, 0xff], 0x4d2, 0x3505, 0x32, 0x0, 0x21, 0x18}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0xff000000, 0x0, 0xffff00], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0x532d44cb633499ef, 0x0, 0xff000000, 0xff], 0x4d3, 0x350a, 0x6c, 0x1, 0x4, 0x19}], 0x7, 0x1}}, @inet=@rpfilter={{0x24}, {0x9}}]}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0xab0e}}}, {{@uncond, 0x0, 0xc8, 0xfc, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x0, 0x3}, {0x2, 0x3, 0x1}, {0x1, 0x4, 0x4}, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x460) 855.050415ms ago: executing program 2 (id=12434): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@can_newroute={0x154, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x1, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff7, 0x0, 0x8}}]}, 0x154}}, 0x0) 784.765526ms ago: executing program 3 (id=12437): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x15, 0x8, 0x1, 0xfffffffd}]}, 0x8) 784.475979ms ago: executing program 2 (id=12438): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) 702.973197ms ago: executing program 0 (id=12439): r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 700.218336ms ago: executing program 3 (id=12440): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) 625.726019ms ago: executing program 1 (id=12441): r0 = openat$nmem0(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) 625.409254ms ago: executing program 0 (id=12442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0xe, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044004) 604.426312ms ago: executing program 2 (id=12443): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}}]}, 0x50}, 0x1, 0x7}, 0x0) 501.038283ms ago: executing program 3 (id=12444): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000180)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x25, "cbc19de8d51fc1a057020ccfd7da422ceb02449515512b2bde3ea4bdb44a7af50b"}}) 496.844655ms ago: executing program 1 (id=12445): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x200, 0x8420) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000002600), 0x0, 0x0, 0x62, 0x40000000000002f3}) 488.915566ms ago: executing program 0 (id=12446): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) 383.124998ms ago: executing program 3 (id=12447): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1e, 0xfffffff7, 0x3852, 0x5, 0x9, 0x8, 0x6, 0x2, 0x6, 0x4, 0x73, 0x2, 0x0, 0x81, 0x3, 0x0, [0x0, 0x6]}}) 374.573103ms ago: executing program 0 (id=12448): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0x8}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 291.941941ms ago: executing program 2 (id=12449): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x138, 0x138, 0xfeffffff, 0x1dc, 0x0, 0x294, 0x294, 0xffffffff, 0x294, 0x294, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x94}, @common=@inet=@TCPMSS={0x24}}, {{@uncond, 0x0, 0x70, 0xa4}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x4}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x384) 211.105844ms ago: executing program 3 (id=12450): r0 = syz_io_uring_setup(0x254c, &(0x7f0000000000)={0x0, 0x7c87, 0x800, 0x0, 0x39}, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0x0, 0x1) 209.099164ms ago: executing program 1 (id=12458): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x12, 0x1}, 0x10}}, 0x0) 190.662617ms ago: executing program 0 (id=12451): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 10.741322ms ago: executing program 1 (id=12452): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x9ba, 0x100) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x1) 1.167755ms ago: executing program 2 (id=12453): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="e80100002e000100000000000000000004001980d20109"], 0x1e8}], 0x1, 0x0, 0x0, 0x84}, 0x300) 891.972µs ago: executing program 0 (id=12454): creat(&(0x7f00000001c0)='./file0\x00', 0x8) mount$9p_virtio(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2, &(0x7f0000002580)={'trans=virtio,', {[{@version_9p2000}]}}) 0s ago: executing program 3 (id=12455): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x2c, 0x107, 0x0, 0x25dfdc00, {0x4, 0x7c}, [@typed={0x4, 0x3}, @nested={0x8, 0x1, 0x0, 0x1, [@generic="131ee783"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) kernel console output (not intermixed with test programs): [ T6220] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 230.159846][ T6220] usb 8-1: Using ep0 maxpacket: 8 [ 230.171760][ T6220] usb 8-1: unable to get BOS descriptor or descriptor too short [ 230.205759][ T6220] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 230.210280][ T6220] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 230.255033][ T6220] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 230.259178][ T6220] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 230.271301][ T6220] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 230.280347][ T6220] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 166 [ 230.291730][ T6220] usb 8-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 230.296821][ T6220] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.302234][ T6220] usb 8-1: Product: syz [ 230.304651][ T6220] usb 8-1: Manufacturer: syz [ 230.306807][ T6220] usb 8-1: SerialNumber: syz [ 230.311832][ T6220] usb 8-1: config 0 descriptor?? [ 230.316299][T17669] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 230.319104][T17669] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 230.335139][ T6220] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 230.821724][T17721] __nla_validate_parse: 2 callbacks suppressed [ 230.821743][T17721] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5742'. [ 231.676278][T17766] ip6erspan0: entered promiscuous mode [ 231.840725][T17775] tmpfs: Bad value for 'mpol' [ 232.524166][T17799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5775'. [ 232.961768][ T6220] usb 8-1: USB disconnect, device number 7 [ 233.114891][T17817] openvswitch: netlink: Actions may not be safe on all matching packets [ 233.261742][T17825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5786'. [ 233.488342][T17833] geneve3: entered promiscuous mode [ 234.077147][T17858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5802'. [ 234.346940][T17880] comedi comedi1: das16m1: a I/O base address must be specified [ 234.445797][T17885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5812'. [ 234.744588][T17897] (syz.2.5816,17897,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 234.773139][T17897] (syz.2.5816,17897,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 234.789371][T17897] (syz.2.5816,17897,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 234.793625][T17897] (syz.2.5816,17897,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 235.567370][ T54] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 235.796314][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4 [ 235.806416][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023 [ 235.817323][ T54] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 235.842664][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.849458][ T54] usb 7-1: Product: syz [ 235.852401][ T54] usb 7-1: Manufacturer: syz [ 235.856290][ T54] usb 7-1: SerialNumber: syz [ 235.862116][ T54] usb 7-1: config 0 descriptor?? [ 235.867564][ T54] hub 7-1:0.0: bad descriptor, ignoring hub [ 235.871204][ T54] hub 7-1:0.0: probe with driver hub failed with error -5 [ 235.877962][ T54] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input20 [ 236.171191][ T54] IPVS: starting estimator thread 0... [ 236.195409][T17969] program syz.3.5852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.202365][T17970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5851'. [ 236.232399][T17969] ata1.00: invalid transfer count 0 [ 236.235297][T17970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5851'. [ 236.280868][T17966] IPVS: using max 30 ests per chain, 72000 per kthread [ 236.615432][T17985] geneve3: entered promiscuous mode [ 236.682317][T17987] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 237.097337][T18004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.418716][T18015] geneve4: entered promiscuous mode [ 237.539600][T18019] Cannot find add_set index 2 as target [ 237.784521][T18030] nftables ruleset with unbound chain [ 238.011588][T18041] cgroup: subsys name conflicts with all [ 238.247135][T18055] cgroup: Need name or subsystem set [ 238.602453][T18074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5903'. [ 238.661419][T18077] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 239.505749][T18123] openvswitch: netlink: IP tunnel dst address not specified [ 239.719929][T18135] netlink: 'syz.0.5933': attribute type 21 has an invalid length. [ 239.861872][T18141] sp0: Synchronizing with TNC [ 240.709843][T18172] veth3: entered promiscuous mode [ 240.716258][T18172] veth3: entered allmulticast mode [ 240.914804][ T54] usb 7-1: USB disconnect, device number 9 [ 241.091999][T18197] netlink: 'syz.0.5963': attribute type 12 has an invalid length. [ 241.542567][T18218] IPv6: NLM_F_CREATE should be specified when creating new route [ 241.546731][T18218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.560633][T18218] IPv6: NLM_F_CREATE should be set when creating new route [ 241.980579][T18246] cgroup: Unknown subsys name 'cpuset' [ 242.583111][T18280] gfs2: error -5 reading superblock [ 242.815572][T18292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.457472][T18312] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.506192][T18317] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6018'. [ 243.515358][T18317] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6018'. [ 243.710307][T18324] Device name not specified. [ 243.710307][T18324] [ 244.490951][T18356] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.496044][T18360] netlink: 'syz.2.6037': attribute type 1 has an invalid length. [ 244.516792][T18357] netlink: 'syz.3.6038': attribute type 1 has an invalid length. [ 244.520836][T18357] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6038'. [ 244.521918][T18356] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.578396][T18356] vlan0: left promiscuous mode [ 244.591155][T18356] ipvlan0: left promiscuous mode [ 244.595772][T18356] macsec0: left promiscuous mode [ 244.618336][T18356] bond3: left promiscuous mode [ 244.623532][T18356] ip6erspan0: left promiscuous mode [ 244.828863][T18380] macvtap0: entered allmulticast mode [ 244.832399][T18380] veth0_macvtap: entered allmulticast mode [ 245.229018][T18402] netlink: 'syz.0.6059': attribute type 4 has an invalid length. [ 245.365528][T18419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6068'. [ 245.384992][T18420] mac80211_hwsim hwsim9 : renamed from wlan1 (while UP) [ 245.613234][T18432] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6074'. [ 246.082492][T18450] CIFS mount error: No usable UNC path provided in device string! [ 246.082492][T18450] [ 246.088458][T18450] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 246.322354][T18460] tmpfs: Bad value for 'mpol' [ 246.353803][T18462] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 246.643383][T18474] bond0: left promiscuous mode [ 246.682779][T18474] bond_slave_0: left promiscuous mode [ 246.693602][T18474] bond_slave_1: left promiscuous mode [ 246.705856][T18474] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.786430][T18474] ipvlan0: left promiscuous mode [ 246.798970][T18474] bond1: left promiscuous mode [ 246.802789][T18474] geneve3: left promiscuous mode [ 246.811027][T18474] veth3: left promiscuous mode [ 247.176858][T18504] cgroup: noprefix used incorrectly [ 247.290573][T18510] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 247.293857][T18510] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 247.303922][T18510] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 247.308028][T18510] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 247.524913][T18520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6118'. [ 247.993298][T18540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6128'. [ 248.003340][T18540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6128'. [ 248.362335][ T40] audit: type=1326 audit(2000000165.022:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18547 comm="syz.3.6134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7579 code=0x7ffc0000 [ 248.412553][ T40] audit: type=1326 audit(2000000165.022:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18547 comm="syz.3.6134" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7579 code=0x7ffc0000 [ 248.465695][ T40] audit: type=1326 audit(2000000165.022:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18547 comm="syz.3.6134" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fa7579 code=0x7ffc0000 [ 248.483546][T18561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.534717][ T40] audit: type=1326 audit(2000000165.022:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18547 comm="syz.3.6134" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7fa7579 code=0x7ffc0000 [ 249.361666][T18597] usb usb9: usbfs: process 18597 (syz.2.6155) did not claim interface 0 before use [ 249.763607][ T40] audit: type=1326 audit(2000000166.378:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18618 comm="syz.2.6166" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 249.791033][ T40] audit: type=1326 audit(2000000166.378:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18618 comm="syz.2.6166" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 249.807127][ T40] audit: type=1326 audit(2000000166.388:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18618 comm="syz.2.6166" exe="/syz-executor" sig=0 arch=40000003 syscall=10 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 249.823362][ T40] audit: type=1326 audit(2000000166.388:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18618 comm="syz.2.6166" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 249.862731][ T40] audit: type=1326 audit(2000000166.388:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18618 comm="syz.2.6166" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 249.999836][ T40] audit: type=1326 audit(2000000166.584:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18629 comm="syz.0.6171" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 250.721821][T18676] netlink: 'syz.0.6194': attribute type 2 has an invalid length. [ 250.736916][T18676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6194'. [ 251.460117][T18719] netlink: 'syz.0.6216': attribute type 11 has an invalid length. [ 251.469455][T18715] Process accounting resumed [ 251.625146][T18731] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.6222'. [ 251.791065][T18739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6227'. [ 251.892173][T18747] netlink: 'syz.0.6230': attribute type 1 has an invalid length. [ 253.224687][T18834] program syz.3.6272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.097951][T18871] netlink: 'syz.0.6288': attribute type 1 has an invalid length. [ 254.445598][T18892] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 254.725543][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 254.725559][ T40] audit: type=1400 audit(2000000171.018:73): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=18906 comm="syz.2.6306" [ 254.852335][T18909] bond4: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 254.888999][T18909] bond4 (unregistering): Released all slaves [ 254.921719][T18915] xt_policy: neither incoming nor outgoing policy selected [ 255.381418][T18932] random: crng reseeded on system resumption [ 255.441570][T18937] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 255.643828][T18943] JFS: charset not found [ 258.905767][T19058] netlink: 'syz.3.6377': attribute type 21 has an invalid length. [ 258.910544][T19058] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6377'. [ 260.005036][T19098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6395'. [ 260.329467][T19079] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 260.351319][T19108] bond5: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 260.436136][T19108] bond5 (unregistering): Released all slaves [ 261.712040][T19162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6426'. [ 261.837637][T19166] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6429'. [ 262.181523][T19178] bond3: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 262.212237][T19178] bond3 (unregistering): Released all slaves [ 263.350654][T19212] xt_TCPMSS: Only works on TCP SYN packets [ 263.565178][T19226] Cannot find add_set index 0 as target [ 263.785224][T19232] bond6: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 263.835981][T19232] bond6 (unregistering): Released all slaves [ 264.202403][T19263] overlayfs: unescaped trailing colons in lowerdir mount option. [ 264.386373][T19283] openvswitch: netlink: EtherType 50a is less than min 600 [ 264.672389][T19293] netlink: 'syz.0.6487': attribute type 9 has an invalid length. [ 264.736720][T19295] netlink: 'syz.1.6489': attribute type 1 has an invalid length. [ 264.749802][T19295] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6489'. [ 265.263653][T19315] exFAT-fs (nbd3): mounting with "discard" option, but the device does not support discard [ 265.282255][T19315] exFAT-fs (nbd3): unable to read boot sector [ 265.285823][T19315] exFAT-fs (nbd3): failed to read boot sector [ 265.289767][T19315] exFAT-fs (nbd3): failed to recognize exfat type [ 265.456615][T19328] netlink: 772 bytes leftover after parsing attributes in process `syz.2.6504'. [ 265.557509][T19332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6508'. [ 265.836335][T19348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6514'. [ 265.920960][T19352] comedi comedi0: Cannot bond this driver to itself! [ 266.483488][T19385] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 266.558799][T19392] tmpfs: Group quota block hardlimit too large. [ 266.938981][T19410] program syz.1.6544 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.899705][ T40] audit: type=1326 audit(2000000183.337:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19446 comm="syz.1.6561" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 267.910824][ T40] audit: type=1326 audit(2000000183.337:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19446 comm="syz.1.6561" exe="/syz-executor" sig=0 arch=40000003 syscall=176 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 267.943827][ T40] audit: type=1326 audit(2000000183.337:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19446 comm="syz.1.6561" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 268.007522][ T40] audit: type=1326 audit(2000000183.337:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19446 comm="syz.1.6561" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 268.023842][T19454] netlink: 'syz.3.6564': attribute type 11 has an invalid length. [ 268.056141][T19454] netlink: 'syz.3.6564': attribute type 11 has an invalid length. [ 268.062207][T19454] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6564'. [ 268.309861][T19467] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6570'. [ 268.474820][T19476] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 268.852171][T19497] comedi comedi0: rti800: I/O port conflict (0x3,16) [ 269.643395][ T40] audit: type=1326 audit(2000000184.946:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19536 comm="syz.1.6597" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 269.679886][ T40] audit: type=1326 audit(2000000184.946:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19536 comm="syz.1.6597" exe="/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 269.803947][ T40] audit: type=1326 audit(2000000184.946:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19536 comm="syz.1.6597" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 269.851590][ T40] audit: type=1326 audit(2000000184.946:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19536 comm="syz.1.6597" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 269.973212][T19552] IPv6: NLM_F_CREATE should be specified when creating new route [ 270.034231][T19554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6604'. [ 270.039045][T19554] netlink: 'syz.3.6604': attribute type 8 has an invalid length. [ 273.464920][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 273.468092][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 273.744643][T19591] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 274.298382][T19619] comedi comedi1: rti802: I/O port conflict (0x1,4) [ 275.189716][T19669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6660'. [ 276.461092][T19714] syz.3.6681 (19714): /proc/19711/oom_adj is deprecated, please use /proc/19711/oom_score_adj instead. [ 276.718858][T19724] netlink: 'syz.2.6687': attribute type 2 has an invalid length. [ 277.204535][T19740] deleting an unspecified loop device is not supported. [ 278.111827][T19797] openvswitch: netlink: IPv4 tunnel dst address is zero [ 278.959761][T19846] netlink: 'syz.3.6747': attribute type 1 has an invalid length. [ 280.506281][T19921] xfrm0: entered promiscuous mode [ 280.509252][T19921] xfrm0: entered allmulticast mode [ 282.507623][T20031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6837'. [ 282.522471][T20031] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6837'. [ 282.569661][T20034] netlink: 288 bytes leftover after parsing attributes in process `syz.1.6836'. [ 282.923495][T20057] netlink: 'syz.3.6848': attribute type 16 has an invalid length. [ 282.926932][T20057] netlink: 'syz.3.6848': attribute type 3 has an invalid length. [ 282.932080][T20057] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6848'. [ 283.451347][T20091] block device autoloading is deprecated and will be removed. [ 286.911693][T20084] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 287.005018][T20080] Process accounting paused [ 287.726367][T20153] netlink: 'syz.2.6890': attribute type 2 has an invalid length. [ 287.731035][T20153] netlink: 'syz.2.6890': attribute type 1 has an invalid length. [ 287.739501][T20153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6890'. [ 287.889122][T20163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6895'. [ 287.948472][T20165] netlink: 'syz.1.6896': attribute type 15 has an invalid length. [ 287.951883][T20165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6896'. [ 288.063055][T20169] bond0: Error: Cannot enslave bond to itself. [ 288.338689][T20183] bond3: Removing last arp target with arp_interval on [ 288.672133][T20203] Cannot find del_set index 0 as target [ 288.941627][T20220] tmpfs: Bad value for 'mpol' [ 289.879567][T20273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6948'. [ 290.112210][T20285] netlink: 'syz.1.6954': attribute type 10 has an invalid length. [ 290.152125][T20285] team0: Port device dummy0 added [ 290.702315][T20311] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 290.739700][T20311] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 291.314237][T20331] netlink: 'syz.2.6977': attribute type 10 has an invalid length. [ 291.350023][T20331] team0: Port device dummy0 added [ 291.406012][T20337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6980'. [ 291.616404][T20350] IPv6: sit1: Disabled Multicast RS [ 291.978116][T20367] xt_TPROXY: Can be used only with -p tcp or -p udp [ 292.191936][T20384] netlink: 'syz.2.7004': attribute type 1 has an invalid length. [ 292.317154][T20389] xt_ecn: cannot match TCP bits for non-tcp packets [ 292.542818][T20403] NILFS (nullb0): couldn't find nilfs on the device [ 293.082904][T20439] netlink: 'syz.3.7030': attribute type 10 has an invalid length. [ 293.122272][T20439] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7030'. [ 293.132328][T20444] overlayfs: missing 'lowerdir' [ 293.138926][T20439] team0: entered promiscuous mode [ 293.141255][T20439] team_slave_0: entered promiscuous mode [ 293.191949][T20439] team_slave_1: entered promiscuous mode [ 293.195274][T20439] bridge0: port 4(team0) entered blocking state [ 293.198287][T20439] bridge0: port 4(team0) entered disabled state [ 293.200755][T20439] team0: entered allmulticast mode [ 293.210549][T20439] team_slave_0: entered allmulticast mode [ 293.218611][T20439] team_slave_1: entered allmulticast mode [ 293.236593][T20439] bridge0: port 4(team0) entered blocking state [ 293.254272][T20439] bridge0: port 4(team0) entered forwarding state [ 294.195297][T20490] netlink: 'syz.1.7051': attribute type 21 has an invalid length. [ 294.200509][T20490] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7051'. [ 294.228977][T20490] netlink: 'syz.1.7051': attribute type 5 has an invalid length. [ 294.276499][T20490] netlink: 'syz.1.7051': attribute type 6 has an invalid length. [ 294.335911][T20490] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7051'. [ 294.394885][T20498] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 294.397649][T20498] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 294.404241][T20498] vhci_hcd vhci_hcd.0: Device attached [ 294.476248][T20499] vhci_hcd: cannot find the pending unlink 4294967287 [ 294.479705][T20499] vhci_hcd: connection closed [ 294.483001][T13563] vhci_hcd vhci_hcd.2: stop threads [ 294.487186][T13563] vhci_hcd vhci_hcd.2: release socket [ 294.489280][T13563] vhci_hcd vhci_hcd.2: disconnect device [ 294.919041][T20518] ptrace attach of "/syz-executor exec"[20519] was attempted by "/syz-executor exec"[20518] [ 295.497420][T20553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7080'. [ 295.806520][T20569] bond4: (slave vlan1): Device is not bonding slave [ 295.809683][T20569] bond4: option active_slave: invalid value (vlan1) [ 295.846899][T20569] bond4 (unregistering): Released all slaves [ 296.012117][T20583] JFS: discard option not supported on device [ 296.015915][T20583] Mount JFS Failure: -22 [ 296.016664][T20579] nvme_fabrics: missing parameter 'transport=%s' [ 296.018370][T20583] jfs_mount failed w/return code = -22 [ 296.065973][T20579] nvme_fabrics: missing parameter 'nqn=%s' [ 296.301969][T20594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7099'. [ 296.319398][T20594] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7099'. [ 296.331962][ T40] audit: type=1326 audit(2000000209.930:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20588 comm="syz.1.7097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 296.365091][ T40] audit: type=1326 audit(2000000209.930:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20588 comm="syz.1.7097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 297.526359][T20646] random: crng reseeded on system resumption [ 297.541177][T20646] Restarting kernel threads ... [ 297.553639][T20646] Done restarting kernel threads. [ 297.914372][T20660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7125'. [ 298.076504][T20668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7128'. [ 298.743487][T20699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.681999][T20759] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7162'. [ 300.789252][T20783] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 300.861751][T20789] netlink: 'syz.0.7173': attribute type 1 has an invalid length. [ 301.352304][T20813] netlink: 'syz.0.7182': attribute type 10 has an invalid length. [ 301.363300][T20813] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7182'. [ 301.370221][T20813] dummy0: entered promiscuous mode [ 301.373371][T20813] bridge0: port 3(dummy0) entered blocking state [ 301.377000][T20813] bridge0: port 3(dummy0) entered disabled state [ 301.386056][T20813] dummy0: entered allmulticast mode [ 301.682339][T20836] delete_channel: no stack [ 301.684790][T20830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7190'. [ 301.776253][T20830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7190'. [ 301.777402][T20841] netlink: 'syz.3.7195': attribute type 3 has an invalid length. [ 302.100065][T20855] bond6: option arp_validate: invalid value (524288) [ 302.107520][T20855] bond6 (unregistering): Released all slaves [ 302.460242][T20876] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 302.753351][T20895] overlayfs: missing 'lowerdir' [ 302.757232][T20894] CIFS mount error: No usable UNC path provided in device string! [ 302.757232][T20894] [ 302.762035][T20894] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 303.240854][T15877] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 303.319163][T20921] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7224'. [ 303.333806][T20921] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7224'. [ 303.408443][T20925] program syz.1.7226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 303.410138][T15877] usb 8-1: Using ep0 maxpacket: 8 [ 303.463924][T15877] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 303.479684][T15877] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.491937][T15877] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 303.519484][T20929] netlink: 'syz.2.7227': attribute type 1 has an invalid length. [ 303.521549][T15877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.585269][T15877] usbtmc 8-1:16.0: bulk endpoints not found [ 303.815864][T20901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.823393][T20901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.831534][ T915] usb 8-1: USB disconnect, device number 8 [ 304.553736][T20978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7251'. [ 304.673514][T20983] netlink: 'syz.0.7253': attribute type 3 has an invalid length. [ 305.929135][T21045] netlink: 'syz.0.7282': attribute type 17 has an invalid length. [ 305.992595][T21045] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7282'. [ 306.001708][T21045] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 307.051257][T21094] geneve4: entered promiscuous mode [ 307.076047][T21094] geneve4: entered allmulticast mode [ 307.081063][ T163] netdevsim netdevsim2 : set [1, 1] type 2 family 0 port 20000 - 0 [ 307.103906][ T163] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 307.127752][ T163] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 307.137732][ T163] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 307.191662][T21103] netlink: 'syz.2.7312': attribute type 1 has an invalid length. [ 307.197876][T21103] netlink: 'syz.2.7312': attribute type 3 has an invalid length. [ 307.201836][T21103] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7312'. [ 308.750704][T21164] misc userio: The device must be registered before sending interrupts [ 309.151698][T21187] openvswitch: netlink: IPv6 tunnel dst address is zero [ 309.515291][T21207] netlink: 798 bytes leftover after parsing attributes in process `syz.2.7361'. [ 309.653385][T21216] ip6t_rpfilter: unknown options [ 309.735665][ T163] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.928976][ T40] audit: type=1326 audit(2000000222.652:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21227 comm="syz.0.7370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 309.966145][ T40] audit: type=1326 audit(2000000222.652:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21227 comm="syz.0.7370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 310.019124][ T40] audit: type=1326 audit(2000000222.661:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21227 comm="syz.0.7370" exe="/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 310.050770][ T40] audit: type=1326 audit(2000000222.661:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21227 comm="syz.0.7370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 310.071718][T21234] xt_CONNSECMARK: invalid mode: 5 [ 310.118423][ T40] audit: type=1326 audit(2000000222.661:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21227 comm="syz.0.7370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 310.215554][T21236] netlink: get zone limit has 4 unknown bytes [ 310.422876][T21246] delete_channel: no stack [ 310.538027][T21252] openvswitch: netlink: Missing valid actions attribute. [ 310.541365][T21252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.546850][T21253] netlink: 'syz.3.7381': attribute type 1 has an invalid length. [ 310.753701][ T40] audit: type=1400 audit(2000000223.419:89): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=232822 pid=21256 comm="syz.3.7386" [ 310.978991][T21275] netlink: 'syz.2.7393': attribute type 3 has an invalid length. [ 311.009345][T21275] netlink: 'syz.2.7393': attribute type 1 has an invalid length. [ 311.094086][T21275] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7393'. [ 311.754469][T21301] netlink: 'syz.3.7406': attribute type 10 has an invalid length. [ 311.758598][T21301] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7406'. [ 311.766192][T21301] bridge0: port 5(veth0_vlan) entered blocking state [ 311.777138][T21301] bridge0: port 5(veth0_vlan) entered disabled state [ 311.791066][T21301] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 312.356681][T21324] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 312.378677][T21324] block device autoloading is deprecated and will be removed. [ 312.570031][T21298] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 312.595423][T21298] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 312.600122][T21298] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 312.603164][T21298] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 312.638947][T21298] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 312.643598][T21298] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 312.646656][T21341] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.7424'. [ 312.982671][T21355] overlayfs: missing 'lowerdir' [ 313.281511][T21364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7438'. [ 313.565745][T21377] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 313.748162][T21387] netlink: 'syz.1.7447': attribute type 2 has an invalid length. [ 313.914480][T21393] comedi comedi1: dt2801: a I/O base address must be specified [ 314.039591][T21401] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7452'. [ 314.158201][T21401] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7452'. [ 314.595973][T21426] netlink: 'syz.3.7466': attribute type 30 has an invalid length. [ 314.678017][T21433] binder: 21429:21433 ioctl c0306201 0 returned -14 [ 315.001748][T21447] netlink: 'syz.1.7477': attribute type 1 has an invalid length. [ 315.022397][T21447] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7477'. [ 315.131324][T21316] syz.3.7412 (21316) used greatest stack depth: 19064 bytes left [ 315.141736][T21451] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7479'. [ 315.505127][T21467] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 315.721948][T21477] netlink: 1120 bytes leftover after parsing attributes in process `syz.0.7491'. [ 315.725728][T21477] netlink: 1120 bytes leftover after parsing attributes in process `syz.0.7491'. [ 316.157166][T21498] netlink: 'syz.1.7501': attribute type 3 has an invalid length. [ 316.161207][T21501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7504'. [ 316.405278][T21507] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 316.408929][T21507] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 316.557529][T21515] delete_channel: no stack [ 317.138688][T21543] dlm: no locking on control device [ 317.506666][T21568] /dev/nullb0: Can't open blockdev [ 318.311651][T21602] netlink: 'syz.0.7553': attribute type 10 has an invalid length. [ 318.317843][T21602] __nla_validate_parse: 1 callbacks suppressed [ 318.317861][T21602] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7553'. [ 318.348616][T21602] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 318.367153][T21602] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 318.389453][T21602] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 319.106093][T21627] Process accounting resumed [ 319.267920][T21638] netlink: 'syz.2.7572': attribute type 1 has an invalid length. [ 319.519651][T21647] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7577'. [ 320.048051][T21680] netlink: 'syz.1.7595': attribute type 11 has an invalid length. [ 320.166882][T21686] bond4: Removing last ns target with arp_interval on [ 320.204514][T21691] No source specified [ 320.600632][T21710] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 320.741990][ T40] audit: type=1400 audit(2000000004.676:90): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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binder: 21747:21748 ioctl c018620c 80000040 returned -1 [ 321.588091][T21768] No source specified [ 322.112501][T21801] netlink: 'syz.2.7652': attribute type 64 has an invalid length. [ 323.272286][ T40] audit: type=1326 audit(2000000007.052:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21851 comm="syz.1.7678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 323.289675][ T40] audit: type=1326 audit(2000000007.052:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21851 comm="syz.1.7678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 323.317960][ T40] audit: type=1326 audit(2000000007.080:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21851 comm="syz.1.7678" exe="/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 323.366953][ T40] audit: type=1326 audit(2000000007.080:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21851 comm="syz.1.7678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 323.389081][ T40] audit: type=1326 audit(2000000007.080:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21851 comm="syz.1.7678" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 324.084116][T21888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7695'. [ 324.163899][T21894] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20003 [ 324.518760][T21913] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7708'. [ 324.765415][T21933] bond0: (slave bond_slave_1): Releasing backup interface [ 324.881860][ T915] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 325.065672][ T915] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 325.071357][ T915] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 325.076135][ T915] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 325.088098][ T915] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 325.095975][ T915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 325.107990][ T915] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 325.133223][ T915] usb 7-1: string descriptor 0 read error: -22 [ 325.135992][ T915] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 325.140846][ T915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.146103][ T915] usb 7-1: config 0 descriptor?? [ 325.186196][T21915] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 325.200532][ T915] hub 7-1:0.0: bad descriptor, ignoring hub [ 325.220308][T21953] usb usb8: usbfs: process 21953 (syz.1.7725) did not claim interface 0 before use [ 325.231456][ T915] hub 7-1:0.0: probe with driver hub failed with error -5 [ 325.265300][ T915] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input26 [ 325.726693][ T6220] usb 7-1: USB disconnect, device number 10 [ 325.864853][T21986] Invalid source name [ 326.074118][T21998] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 326.645520][T22021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7759'. [ 326.762122][T22029] netlink: 'syz.3.7763': attribute type 1 has an invalid length. [ 326.766062][T22029] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7763'. [ 326.770463][T22029] netlink: 'syz.3.7763': attribute type 1 has an invalid length. [ 326.991661][T22046] netlink: 'syz.2.7767': attribute type 2 has an invalid length. [ 327.080558][T22050] IPv6: Can't replace route, no match found [ 327.558254][T22076] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 328.018063][T22102] bond0: (slave bond_slave_1): Releasing backup interface [ 328.147329][T22108] XFS (nbd2): no-recovery mounts must be read-only. [ 328.191951][T22112] netlink: 'syz.1.7797': attribute type 1 has an invalid length. [ 328.412671][T22129] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 328.964214][T22162] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 329.252937][T22175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7825'. [ 329.428951][T22188] program syz.1.7831 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.787000][T22208] overlay: Bad value for 'workdir' [ 329.853175][T22210] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 330.147585][T22220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7846'. [ 330.814356][ T915] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 330.998646][ T915] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 331.003073][T22253] Invalid source name [ 331.003509][ T915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.004972][T22253] UBIFS error (pid: 22253): cannot open "./file0", error -22 [ 331.026388][ T915] usb 6-1: Product: syz [ 331.031580][ T915] usb 6-1: Manufacturer: syz [ 331.033719][ T915] usb 6-1: SerialNumber: syz [ 331.376145][T22269] netlink: 'syz.2.7870': attribute type 75 has an invalid length. [ 331.509649][ T915] rtl8150 6-1:1.0: couldn't reset the device [ 331.512780][ T915] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 331.554873][ T915] usb 6-1: USB disconnect, device number 4 [ 331.573783][T22275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7873'. [ 332.019678][T22290] bond5: entered allmulticast mode [ 332.021942][T22293] openvswitch: netlink: IP tunnel dst address not specified [ 332.058076][T22295] netlink: 'syz.1.7881': attribute type 12 has an invalid length. [ 332.107235][T22299] openvswitch: netlink: Flow key attr not present in new flow. [ 332.395505][T22313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7892'. [ 332.748815][T22333] AppArmor: change_hat: Invalid input 'Hh' [ 332.946579][T22335] XFS (nullb0): Invalid superblock magic number [ 333.594709][T22369] 8021q: adding VLAN 0 to HW filter on device bond6 [ 333.613654][T22374] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 334.186218][T15877] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 334.343401][T22408] XFS (nullb0): Invalid superblock magic number [ 334.428151][T15877] usb 8-1: Using ep0 maxpacket: 32 [ 334.443145][T15877] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 334.458962][T15877] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 334.462799][T15877] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 334.469671][T15877] usb 8-1: Product: syz [ 334.471408][T15877] usb 8-1: Manufacturer: syz [ 334.473277][T15877] usb 8-1: SerialNumber: syz [ 334.499922][T15877] usb 8-1: config 0 descriptor?? [ 334.507475][T22393] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 334.566918][T22419] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7938'. [ 334.673859][T22421] netlink: 512 bytes leftover after parsing attributes in process `syz.0.7939'. [ 334.706618][T22423] netlink: 'syz.2.7940': attribute type 12 has an invalid length. [ 334.754361][ T76] usb 8-1: USB disconnect, device number 9 [ 335.038781][ T40] audit: type=1326 audit(2000000018.053:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22434 comm="syz.2.7946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 335.067136][ T40] audit: type=1326 audit(2000000018.062:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22434 comm="syz.2.7946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 335.095639][ T40] audit: type=1326 audit(2000000018.071:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22434 comm="syz.2.7946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 335.144582][ T40] audit: type=1326 audit(2000000018.071:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22434 comm="syz.2.7946" exe="/syz-executor" sig=0 arch=40000003 syscall=43 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 335.163080][ T40] audit: type=1326 audit(2000000018.071:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22434 comm="syz.2.7946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 335.194191][ T40] audit: type=1326 audit(2000000018.081:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22434 comm="syz.2.7946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 335.202727][T22440] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7948'. [ 335.216083][ T40] audit: type=1326 audit(2000000018.081:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22434 comm="syz.2.7946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 335.231691][T22440] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 335.279143][ T40] audit: type=1326 audit(2000000018.081:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22434 comm="syz.2.7946" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 335.293235][ T40] audit: type=1326 audit(2000000018.081:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22434 comm="syz.2.7946" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 336.505607][T22488] misc userio: Invalid payload size [ 336.637528][T22490] 2: renamed from veth0_vlan (while UP) [ 337.345090][T22521] netlink: 'syz.3.7987': attribute type 10 has an invalid length. [ 337.348640][T22521] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7987'. [ 337.692784][T22543] netlink: 'syz.2.7997': attribute type 3 has an invalid length. [ 338.459018][T22570] program syz.1.8012 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.712886][T22583] 9pnet_fd: p9_fd_create_tcp (22583): problem connecting socket to 127.0.0.1 [ 339.141613][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 339.146230][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 339.273634][T22604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8027'. [ 339.438084][T22611] sp0: Synchronizing with TNC [ 340.326229][T22629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.376684][T22635] syz.2.8043: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 340.637058][T22647] xt_hashlimit: size too large, truncated to 1048576 [ 341.025688][T22670] libceph: resolve ' [ 341.025688][T22670] -&fYǝa2i [ 341.025688][T22670] .?&*&' (ret=-3): failed [ 341.189503][ T40] audit: type=1400 audit(2000000023.805:105): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=22679 comm="syz.2.8065" [ 341.233421][T22685] ieee802154 phy0 wpan0: encryption failed: -22 [ 341.487084][T22698] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8074'. [ 341.744894][T22714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8082'. [ 341.864399][T22722] xt_cgroup: path and classid specified [ 342.236025][T22747] IPVS: length: 191 != 8 [ 342.402408][T22755] netlink: 'syz.3.8101': attribute type 1 has an invalid length. [ 342.652593][T22771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8110'. [ 343.364585][T22814] misc userio: No port type given on /dev/userio [ 343.664082][T22829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.857053][T22840] i2c i2c-1: Invalid block write size 34 [ 344.992671][T22878] netlink: 'syz.2.8164': attribute type 2 has an invalid length. [ 344.998870][T22878] netlink: 'syz.2.8164': attribute type 1 has an invalid length. [ 345.002450][T22878] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8164'. [ 345.172868][T22857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.195476][T22857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.449655][T22884] openvswitch: netlink: Flow actions attr not present in new flow. [ 345.543318][T22857] veth1_macvtap: left allmulticast mode [ 346.258185][ T1187] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.262265][ T1187] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.283757][ T1187] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.338107][T22902] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 346.375706][T22907] netlink: 1076 bytes leftover after parsing attributes in process `syz.1.8177'. [ 346.648295][T22930] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8190'. [ 347.086001][ T29] IPVS: starting estimator thread 0... [ 347.179559][T22958] IPVS: using max 32 ests per chain, 76800 per kthread [ 347.285812][T22965] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8206'. [ 347.293086][T22965] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8206'. [ 347.715768][T22984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8215'. [ 348.042860][T23003] netlink: 'syz.3.8220': attribute type 2 has an invalid length. [ 348.045944][T23003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8220'. [ 348.250402][T23009] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 348.796194][T23041] tc_dump_action: action bad kind [ 349.227789][T23065] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.403911][T23072] libceph: resolve '400' (ret=-3): failed [ 349.599687][T23082] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8259'. [ 349.746737][T23089] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8262'. [ 350.095369][T23104] ceph: Path missing in source [ 350.387785][T23123] tmpfs: Bad value for 'mpol' [ 350.463392][T23129] Cannot find add_set index 2 as target [ 350.942439][T23149] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8292'. [ 351.198459][T23160] Process accounting paused [ 351.501560][T23174] ip6t_srh: unknown srh invflags 7160 [ 351.709374][T23184] netlink: 'syz.2.8309': attribute type 2 has an invalid length. [ 351.716548][T23184] netlink: 'syz.2.8309': attribute type 1 has an invalid length. [ 351.808158][T23186] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 352.073452][T23199] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 352.459447][T23220] netlink: 'syz.0.8327': attribute type 5 has an invalid length. [ 352.628998][T23232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.632130][T23232] IPv6: NLM_F_CREATE should be set when creating new route [ 352.638292][T23232] IPv6: NLM_F_CREATE should be set when creating new route [ 353.026992][T23249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8340'. [ 353.486254][T23273] openvswitch: netlink: Duplicate key (type 21). [ 353.937602][T23305] netlink: 'syz.2.8368': attribute type 4 has an invalid length. [ 354.434163][T23332] dlm: Unknown command passed to DLM device : 3 [ 354.434163][T23332] [ 354.626812][T23343] ipt_rpfilter: unknown options [ 355.170387][ T40] audit: type=1326 audit(2000000036.882:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23361 comm="syz.1.8396" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 355.201414][ T40] audit: type=1326 audit(2000000036.901:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23361 comm="syz.1.8396" exe="/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 355.250677][ T40] audit: type=1326 audit(2000000036.901:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23361 comm="syz.1.8396" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 355.265177][ T40] audit: type=1326 audit(2000000036.901:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23361 comm="syz.1.8396" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 355.307706][ T40] audit: type=1107 audit(2000000037.013:110): pid=23368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 355.591271][T23390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.913681][T23449] kAFS: unable to lookup cell '.' [ 357.013493][T23458] binder: binder_mmap: 23457 80a76000-80a7a000 bad vm_flags failed -1 [ 357.531249][T23474] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8452'. [ 357.628912][ T40] audit: type=1326 audit(2000000039.183:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23479 comm="syz.0.8454" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x50000 [ 357.641251][ T40] audit: type=1326 audit(2000000039.183:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23479 comm="syz.0.8454" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x50000 [ 357.653010][ T40] audit: type=1326 audit(2000000039.183:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23479 comm="syz.0.8454" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x50000 [ 357.664784][ T40] audit: type=1326 audit(2000000039.183:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23479 comm="syz.0.8454" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x50000 [ 357.691547][ T40] audit: type=1326 audit(2000000039.183:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23479 comm="syz.0.8454" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x50000 [ 358.186318][T23503] netlink: 'syz.0.8465': attribute type 1 has an invalid length. [ 358.323119][T23509] gfs2: error -5 reading superblock [ 358.690514][T23529] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 358.694775][T23529] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 358.715851][T23530] comedi comedi2: Minor 65535 is invalid! [ 359.254433][T23552] netlink: 'syz.2.8488': attribute type 1 has an invalid length. [ 359.335372][T23558] binder: 23554:23558 ioctl c0046209 0 returned -22 [ 359.432855][T23560] netlink: 9 bytes leftover after parsing attributes in process `syz.0.8492'. [ 359.436345][T23560] 0: renamed from hsr_slave_1 (while UP) [ 359.494280][T23560] 0: entered allmulticast mode [ 359.496688][T23560] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 359.568166][T23567] program syz.3.8495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.961606][T23585] netlink: 'syz.1.8503': attribute type 21 has an invalid length. [ 359.964453][T23585] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8503'. [ 359.974011][T23585] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8503'. [ 360.046464][T23591] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8507'. [ 361.352584][T23651] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 361.455815][T23655] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 361.458608][T23655] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 361.495624][T23658] netlink: 'syz.1.8540': attribute type 1 has an invalid length. [ 361.668941][T23669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8545'. [ 362.223709][T23695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8558'. [ 362.283867][T23698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.032385][T23721] netlink: 'syz.2.8571': attribute type 1 has an invalid length. [ 363.041041][T23721] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8571'. [ 363.051579][T23726] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 363.071700][T23726] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 363.246159][T23731] PKCS8: Unsupported PKCS#8 version [ 363.953574][T23767] gtp0: entered promiscuous mode [ 363.964288][T23767] gtp0: entered allmulticast mode [ 364.181537][T23771] netlink: 'syz.0.8596': attribute type 63 has an invalid length. [ 364.302899][T23777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8601'. [ 364.435975][T23785] ieee802154 phy0 wpan0: encryption failed: -22 [ 366.654262][T23903] ieee802154 phy0 wpan0: encryption failed: -22 [ 367.633232][T23947] netlink: 'syz.2.8681': attribute type 5 has an invalid length. [ 367.768818][T23951] comedi comedi0: Minor 47 could not be opened [ 368.194122][T23985] netlink: 'syz.2.8701': attribute type 1 has an invalid length. [ 368.590123][T23995] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8706'. [ 368.623499][T23995] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8706'. [ 368.663468][T23999] netlink: 160 bytes leftover after parsing attributes in process `syz.0.8709'. [ 368.677092][T23999] netlink: 160 bytes leftover after parsing attributes in process `syz.0.8709'. [ 368.875368][T24011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.512431][T24045] IPv6: Can't replace route, no match found [ 369.736713][T24057] ipt_ECN: cannot use operation on non-tcp rule [ 369.794977][T24061] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 370.303572][T24089] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 370.768150][T24112] netlink: 'syz.2.8762': attribute type 1 has an invalid length. [ 371.471129][T24152] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8780'. [ 372.689101][T24199] IPv6: sit1: Disabled Multicast RS [ 372.691851][T24199] sit1: entered allmulticast mode [ 373.733484][T24236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8818'. [ 373.865938][T24240] usb usb8: usbfs: process 24240 (syz.0.8821) did not claim interface 0 before use [ 374.458734][T24257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8827'. [ 375.463522][T24290] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 375.573364][T24296] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8846'. [ 375.659639][T24298] usb usb7: usbfs: process 24298 (syz.1.8847) did not claim interface 0 before use [ 375.817896][T24303] tmpfs: Bad value for 'mpol' [ 375.957276][T24310] netlink: 'syz.2.8853': attribute type 1 has an invalid length. [ 375.963287][T24310] netlink: 228 bytes leftover after parsing attributes in process `syz.2.8853'. [ 375.990510][T24310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8853'. [ 377.159023][T24362] netlink: 'syz.2.8880': attribute type 3 has an invalid length. [ 377.162673][T24362] netlink: 666 bytes leftover after parsing attributes in process `syz.2.8880'. [ 377.739575][T24400] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 378.913863][T24448] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8919'. [ 379.749413][T24498] nft_compat: unsupported protocol 0 [ 380.044067][T24514] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 380.117116][T24517] netlink: 'syz.0.8953': attribute type 10 has an invalid length. [ 380.133710][T24517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.159244][T24517] team0: Port device bond0 added [ 380.473300][T24541] lo speed is unknown, defaulting to 1000 [ 380.488607][T24541] lo speed is unknown, defaulting to 1000 [ 380.515010][T24541] lo speed is unknown, defaulting to 1000 [ 380.621774][T24548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8967'. [ 380.740950][ T6208] lo speed is unknown, defaulting to 1000 [ 380.745505][T24541] infiniband syz0: set active [ 380.750044][T24541] infiniband syz0: added lo [ 380.804236][T24541] RDS/IB: syz0: added [ 380.827337][T24541] smc: adding ib device syz0 with port count 1 [ 380.830614][T24541] smc: ib device syz0 port 1 has no pnetid [ 380.835531][ T6207] lo speed is unknown, defaulting to 1000 [ 380.878503][T24541] lo speed is unknown, defaulting to 1000 [ 381.001339][T24565] netlink: 'syz.2.8975': attribute type 1 has an invalid length. [ 381.291726][T24541] lo speed is unknown, defaulting to 1000 [ 381.557094][T24541] lo speed is unknown, defaulting to 1000 [ 381.960978][T24541] lo speed is unknown, defaulting to 1000 [ 382.301191][T24616] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8998'. [ 382.333544][T24616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8998'. [ 382.568106][T24630] netlink: 'syz.0.9006': attribute type 1 has an invalid length. [ 383.154792][T24664] random: crng reseeded on system resumption [ 383.335000][T24674] netlink: 752 bytes leftover after parsing attributes in process `syz.1.9027'. [ 383.362161][T24673] Process accounting resumed [ 383.478012][T24682] dlm: no locking on control device [ 383.744580][T24696] libceph: resolve '0.' (ret=-3): failed [ 384.103642][T24708] dns_resolver: Unsupported content type (5) [ 384.170556][T24712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9046'. [ 384.791621][T24749] SET target dimension over the limit! [ 384.856709][T24751] netlink: 'syz.3.9066': attribute type 5 has an invalid length. [ 385.030863][T24759] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9070'. [ 385.299327][T24772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9076'. [ 385.313798][T24772] netlink: 'syz.0.9076': attribute type 2 has an invalid length. [ 385.546160][T24788] netlink: 472 bytes leftover after parsing attributes in process `syz.1.9084'. [ 385.727182][T24800] xt_TCPMSS: Only works on TCP SYN packets [ 385.819810][T24803] ipt_ECN: cannot use operation on non-tcp rule [ 386.506559][T24834] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 386.579027][T24838] netlink: 'syz.0.9108': attribute type 2 has an invalid length. [ 386.813367][T24850] netlink: 'syz.3.9114': attribute type 2 has an invalid length. [ 386.863970][T24850] netlink: 'syz.3.9114': attribute type 1 has an invalid length. [ 387.122049][T24865] netlink: 248 bytes leftover after parsing attributes in process `syz.0.9121'. [ 387.251338][T24872] random: crng reseeded on system resumption [ 387.604818][T24894] dlm: no local IP address has been set [ 387.644577][T24894] dlm: cannot start dlm midcomms -107 [ 387.813286][T24902] bochs-drm 0000:00:01.0: [drm] Unknown color mode 65545; guessing buffer size. [ 387.937533][T24910] ipt_ECN: cannot use operation on non-tcp rule [ 388.570172][ T40] kauditd_printk_skb: 143 callbacks suppressed [ 388.570190][ T40] audit: type=1326 audit(2000000068.125:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24945 comm="syz.0.9161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 388.607761][ T40] audit: type=1326 audit(2000000068.125:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24945 comm="syz.0.9161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 388.647675][ T40] audit: type=1326 audit(2000000068.125:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24945 comm="syz.0.9161" exe="/syz-executor" sig=0 arch=40000003 syscall=243 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 388.665055][ T40] audit: type=1326 audit(2000000068.125:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24945 comm="syz.0.9161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 388.718623][ T40] audit: type=1326 audit(2000000068.125:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24945 comm="syz.0.9161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 388.849038][T24956] netlink: 'syz.0.9167': attribute type 9 has an invalid length. [ 388.868755][T24956] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9167'. [ 389.027586][T24968] netlink: 'syz.0.9172': attribute type 1 has an invalid length. [ 389.031188][T24968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9172'. [ 389.599188][T25004] overlay: Bad value for 'workdir' [ 389.800057][T25010] autofs4:pid:25010:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 389.819996][T25010] autofs4:pid:25010:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 390.101031][T25026] comedi comedi1: pcm3724: I/O port conflict (0xffffffffffffffff,16) [ 390.285822][T25034] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9206'. [ 390.683044][T25063] trusted_key: encrypted_key: keylen parameter is missing [ 391.477356][T25099] netlink: 'syz.1.9237': attribute type 4 has an invalid length. [ 391.736638][T25117] netdevsim netdevsim3: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 392.001578][T25129] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 392.029761][T25129] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 392.049260][T25129] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 392.052095][T25129] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 392.293763][T25146] openvswitch: netlink: IPv4 tun info is not correct [ 392.621356][ T40] audit: type=1400 audit(2000000071.913:264): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFE08977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A092C91 pid=25158 comm="syz.3.9268" [ 392.803373][ T40] audit: type=1326 audit(2000000072.072:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25163 comm="syz.3.9269" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7579 code=0x7ffc0000 [ 393.407717][T25198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9284'. [ 393.501309][T25200] netlink: 532 bytes leftover after parsing attributes in process `syz.0.9286'. [ 393.586358][T25206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9289'. [ 394.504517][T25246] netlink: 'syz.0.9309': attribute type 7 has an invalid length. [ 394.508907][T25246] netlink: 'syz.0.9309': attribute type 8 has an invalid length. [ 394.531424][T25247] Process accounting resumed [ 394.746154][T25256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9314'. [ 395.321847][T25278] netlink: 19 bytes leftover after parsing attributes in process `syz.0.9322'. [ 395.609105][T25288] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 395.612985][T25288] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 395.632548][T25288] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 395.637418][T25288] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 395.689475][T25250] comedi comedi2: reset error (fatal) [ 395.734977][T25282] comedi comedi1: mpc624: a I/O base address must be specified [ 396.639465][T13853] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 396.714419][T25352] netlink: 'syz.1.9356': attribute type 3 has an invalid length. [ 396.718618][T25352] netlink: 'syz.1.9356': attribute type 3 has an invalid length. [ 396.724530][T25352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9356'. [ 396.820836][T13853] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 396.825242][T13853] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 396.832756][T13853] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 396.848243][T13853] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 396.912530][T13853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 396.919946][T13853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 396.960522][T13853] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 396.985108][T13853] usb 7-1: string descriptor 0 read error: -22 [ 396.989462][T13853] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 396.999881][T13853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.039501][T13853] usb 7-1: config 0 descriptor?? [ 397.068648][T13853] hub 7-1:0.0: bad descriptor, ignoring hub [ 397.083307][T13853] hub 7-1:0.0: probe with driver hub failed with error -5 [ 397.091027][T13853] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input30 [ 397.495646][T25384] netlink: 6 bytes leftover after parsing attributes in process `syz.3.9372'. [ 397.544696][T25384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.625661][ T76] usb 7-1: USB disconnect, device number 11 [ 397.817044][T25395] ata1.00: invalid multi_count 128 ignored [ 399.127998][T25458] siw: device registration error -23 [ 399.739285][T25490] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 399.810183][T25490] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 400.442960][T25519] cdrom: dropping to single frame dma [ 400.807475][T25536] binder: 25535:25536 ioctl 40046205 0 returned -22 [ 400.983942][T25544] netlink: 'syz.2.9448': attribute type 2 has an invalid length. [ 401.010261][T25542] netlink: 6 bytes leftover after parsing attributes in process `syz.0.9447'. [ 401.031680][T25542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.059468][ T6220] lo speed is unknown, defaulting to 1000 [ 401.358809][T25561] netlink: 'syz.0.9456': attribute type 4 has an invalid length. [ 401.370091][T25561] netlink: 17 bytes leftover after parsing attributes in process `syz.0.9456'. [ 401.919604][T25590] ksmbd: Unknown IPC event: 3, ignore. [ 402.033547][T25598] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 402.037414][T25598] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 402.042943][T25598] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 402.051174][T25598] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 402.362710][T25610] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9483'. [ 402.527453][T25620] comedi comedi1: dt2814: I/O port conflict (0x9,2) [ 402.644435][T25626] overlayfs: empty lowerdir [ 402.763318][T25636] netlink: 'syz.0.9494': attribute type 2 has an invalid length. [ 402.767092][T25636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.671174][T25673] usb usb4: usbfs: process 25673 (syz.1.9512) did not claim interface 0 before use [ 403.738274][T25681] random: crng reseeded on system resumption [ 404.823627][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 404.840731][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 405.652093][T25784] macvlan0: entered allmulticast mode [ 406.100253][T25817] netlink: 'syz.0.9583': attribute type 3 has an invalid length. [ 406.116828][T25817] netlink: 'syz.0.9583': attribute type 3 has an invalid length. [ 406.323941][T25829] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 406.854679][T25859] random: crng reseeded on system resumption [ 407.061136][T25871] netlink: 512 bytes leftover after parsing attributes in process `syz.3.9608'. [ 407.519753][T25881] /dev/sr0: Can't open blockdev [ 407.996939][ T76] IPVS: starting estimator thread 0... [ 408.026123][ T1121] sr 2:0:0:0: [sr0] tag#11 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 408.034092][ T1121] sr 2:0:0:0: [sr0] tag#11 Sense Key : Illegal Request [current] [ 408.045968][ T1121] sr 2:0:0:0: [sr0] tag#11 Add. Sense: Invalid command operation code [ 408.051336][ T1121] sr 2:0:0:0: [sr0] tag#11 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 408.069709][ T1121] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 408.085314][ T1121] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 408.133847][T25921] IPVS: using max 27 ests per chain, 64800 per kthread [ 408.314590][T25938] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 408.458318][T25946] netlink: 'syz.2.9643': attribute type 1 has an invalid length. [ 408.504276][T25949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9646'. [ 408.912584][T25974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.034783][T25981] netlink: ct family unspecified [ 409.038340][T25981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.169798][T25987] netlink: 'syz.0.9664': attribute type 25 has an invalid length. [ 409.497173][T25997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9669'. [ 409.784251][T26016] bond8: peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 409.830408][T26016] bond8 (unregistering): Released all slaves [ 409.900652][T26026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.042068][T26033] netlink: 'syz.2.9685': attribute type 1 has an invalid length. [ 410.044793][T26033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.458123][T26056] Mount JFS Failure: -5 [ 410.460414][T26056] jfs_mount failed w/return code = -5 [ 410.491947][T26058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9698'. [ 410.906938][T26076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9706'. [ 411.021951][T26087] xt_hashlimit: size too large, truncated to 1048576 [ 411.097698][T26087] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 411.672570][T26120] bond7: peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 411.724262][T26120] bond7 (unregistering): Released all slaves [ 413.598698][T26216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9774'. [ 413.929770][ T40] audit: type=1326 audit(2000000091.828:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26235 comm="syz.2.9786" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 413.941541][ T40] audit: type=1326 audit(2000000091.828:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26235 comm="syz.2.9786" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 413.985947][ T40] audit: type=1326 audit(2000000091.828:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26235 comm="syz.2.9786" exe="/syz-executor" sig=0 arch=40000003 syscall=103 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 414.034613][ T40] audit: type=1326 audit(2000000091.940:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26235 comm="syz.2.9786" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 414.400066][T26254] vxcan3: entered promiscuous mode [ 414.425969][T26254] vxcan3: entered allmulticast mode [ 414.942634][T26282] netlink: 176 bytes leftover after parsing attributes in process `syz.1.9809'. [ 415.484037][T26319] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 415.983728][T26339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9834'. [ 416.283607][T26316] Process accounting paused [ 416.631272][ C1] sd 0:0:0:0: [sda] tag#20 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 416.655773][ C1] sd 0:0:0:0: [sda] tag#20 CDB: Test Unit Ready [ 416.807328][T26381] netlink: 'syz.1.9856': attribute type 5 has an invalid length. [ 418.476912][T26459] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 418.929803][T26481] 9p: Unknown access argument 18446744073709551615: -34 [ 418.939201][T26485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9905'. [ 419.692816][T26526] binder: BC_ACQUIRE_RESULT not supported [ 419.752490][T26526] binder: 26525:26526 ioctl c0306201 80004a40 returned -22 [ 419.916493][T26538] /dev/sg0: Can't lookup blockdev [ 420.769697][T26584] wg1: entered promiscuous mode [ 420.783602][T26584] wg1: entered allmulticast mode [ 420.872852][ T40] audit: type=1326 audit(2000000098.301:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26588 comm="syz.0.9957" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 420.914195][ T40] audit: type=1326 audit(2000000098.301:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26588 comm="syz.0.9957" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 420.942220][ T40] audit: type=1326 audit(2000000098.301:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26588 comm="syz.0.9957" exe="/syz-executor" sig=0 arch=40000003 syscall=162 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 421.005149][ T40] audit: type=1326 audit(2000000098.301:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26588 comm="syz.0.9957" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 421.040382][ T40] audit: type=1326 audit(2000000098.301:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26588 comm="syz.0.9957" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 421.374212][T26617] Cannot find set identified by id 3 to match [ 422.731060][T26688] usb usb8: usbfs: process 26688 (syz.0.10002) did not claim interface 0 before use [ 422.932947][T26700] openvswitch: netlink: Duplicate or invalid key (type 0). [ 422.941956][T26700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.439062][T26721] wg1: entered promiscuous mode [ 423.442145][T26721] wg1: entered allmulticast mode [ 423.471909][T26727] netlink: 'syz.0.10019': attribute type 5 has an invalid length. [ 423.598422][T26731] xt_CT: You must specify a L4 protocol and not use inversions on it [ 424.388530][T26767] bridge_slave_0: left allmulticast mode [ 424.432016][T26767] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.897050][T26792] netlink: 'syz.2.10054': attribute type 1 has an invalid length. [ 425.140504][T26807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.022977][T26851] netlink: 'syz.0.10083': attribute type 13 has an invalid length. [ 426.582130][T26883] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 426.586015][T26883] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 426.884208][T26897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10104'. [ 427.622156][T26946] xt_TCPMSS: Only works on TCP SYN packets [ 427.725076][T26951] kernel profiling enabled (shift: 17) [ 427.853928][T26962] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 427.947593][T26968] net veth1_virt_wifi : renamed from virt_wifi0 [ 427.976165][T26970] netlink: 'syz.1.10141': attribute type 5 has an invalid length. [ 428.290452][T26986] dlm: plock device version mismatch: kernel (1.2.0), user (1.1792.0) [ 429.704950][T27048] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 429.707702][T27048] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 429.731927][T27048] vhci_hcd vhci_hcd.0: Device attached [ 429.769970][T27049] vhci_hcd: connection closed [ 429.771219][ T1187] vhci_hcd vhci_hcd.3: stop threads [ 429.788155][ T1187] vhci_hcd vhci_hcd.3: release socket [ 429.790676][ T1187] vhci_hcd vhci_hcd.3: disconnect device [ 430.173848][T27067] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 431.519503][T27136] netlink: 'syz.2.10223': attribute type 1 has an invalid length. [ 431.565831][T27136] netlink: 228 bytes leftover after parsing attributes in process `syz.2.10223'. [ 431.685629][T27141] bond9: option arp_interval: invalid value (18446744073709551615) [ 431.697523][T27141] bond9: option arp_interval: allowed values 0 - 2147483647 [ 431.748683][T27141] bond9 (unregistering): Released all slaves [ 432.225472][T27166] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 432.463573][T27186] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 433.902209][T27245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10276'. [ 434.215957][T27257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10284'. [ 434.650617][T27284] xt_CT: You must specify a L4 protocol and not use inversions on it [ 435.496223][T27324] netlink: 'syz.3.10316': attribute type 23 has an invalid length. [ 435.940786][T27341] netlink: zone id is out of range [ 436.004556][T27341] netlink: set zone limit has 4 unknown bytes [ 436.492831][T27361] Cannot find del_set index 65533 as target [ 436.505439][T27367] netlink: 'syz.2.10336': attribute type 7 has an invalid length. [ 436.949705][T27378] bond7: option arp_interval: invalid value (18446744073709551615) [ 436.952827][T27378] bond7: option arp_interval: allowed values 0 - 2147483647 [ 436.960936][T27386] random: crng reseeded on system resumption [ 437.013370][T27378] bond7 (unregistering): Released all slaves [ 437.255397][T27394] QAT: Device 253 not found [ 437.411708][T27401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10354'. [ 438.569960][T27446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10374'. [ 438.960923][T27464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.087319][T27473] dummy0: entered promiscuous mode [ 439.112802][T27473] dummy0: entered allmulticast mode [ 440.033362][T27507] Cannot find add_set index 32771 as target [ 440.048911][T27509] netlink: 'syz.2.10402': attribute type 2 has an invalid length. [ 440.055835][T27509] netlink: 'syz.2.10402': attribute type 8 has an invalid length. [ 440.068601][T27509] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10402'. [ 440.106845][T27511] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 440.779969][T27547] openvswitch: netlink: Actions may not be safe on all matching packets [ 440.916110][T27552] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10424'. [ 441.125656][T27565] trusted_key: encrypted_key: hex blob is missing [ 441.397854][T27582] tmpfs: Bad value for 'mpol' [ 441.482545][T27587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10440'. [ 441.543627][T27585] bond7: option arp_interval: invalid value (18446744073709551615) [ 441.551501][T27585] bond7: option arp_interval: allowed values 0 - 2147483647 [ 441.616052][T27585] bond7 (unregistering): Released all slaves [ 441.651238][T27593] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10444'. [ 441.731521][T27593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10444'. [ 442.208926][T27613] netlink: 'syz.3.10453': attribute type 16 has an invalid length. [ 442.318328][T27619] netlink: 'syz.0.10455': attribute type 21 has an invalid length. [ 443.184065][T27659] netlink: 17 bytes leftover after parsing attributes in process `syz.1.10466'. [ 443.188899][T27659] openvswitch: netlink: Tunnel attr 0 has unexpected len 65 expected 8 [ 443.424657][T27672] program syz.3.10472 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 444.919552][T27726] netlink: 'syz.2.10498': attribute type 11 has an invalid length. [ 444.926372][T27721] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 444.931208][T27721] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 444.956483][T27721] vhci_hcd vhci_hcd.0: Device attached [ 444.972027][T27724] vhci_hcd: connection closed [ 444.972283][ T1187] vhci_hcd vhci_hcd.1: stop threads [ 444.990621][ T1187] vhci_hcd vhci_hcd.1: release socket [ 444.997575][ T1187] vhci_hcd vhci_hcd.1: disconnect device [ 445.619272][T27749] netlink: 'syz.0.10509': attribute type 11 has an invalid length. [ 445.984097][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 445.994407][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 446.000954][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 446.010020][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 447.041239][ C1] sr 2:0:0:0: [sr0] tag#15 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 447.057606][ C1] sr 2:0:0:0: [sr0] tag#15 CDB: Write(10) [ 447.060296][ C1] sr 2:0:0:0: [sr0] tag#15 CDB[00]: 2a 36 b6 6f 29 77 cb 83 1f 0b fa d6 00 00 00 00 [ 447.077564][ C1] sr 2:0:0:0: [sr0] tag#15 CDB[10]: 00 [ 447.132882][T27829] netlink: 220 bytes leftover after parsing attributes in process `syz.0.10548'. [ 448.465482][T27876] Process accounting resumed [ 448.568713][T27884] tipc: Trying to set illegal importance in message [ 449.501995][ T40] audit: type=1400 audit(2000000125.119:275): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A9D pid=27928 comm="syz.2.10593" [ 449.643465][T27937] netlink: 'syz.3.10595': attribute type 21 has an invalid length. [ 449.675245][T27937] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10595'. [ 449.778304][T27939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10598'. [ 450.176020][T27953] netlink: 'syz.3.10607': attribute type 2 has an invalid length. [ 450.181293][T27953] netlink: 'syz.3.10607': attribute type 1 has an invalid length. [ 450.189003][T27953] netlink: 'syz.3.10607': attribute type 1 has an invalid length. [ 451.286725][T28007] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10631'. [ 451.290830][T28007] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10631'. [ 451.596825][T28027] IPv6: NLM_F_CREATE should be specified when creating new route [ 452.521020][T28077] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 452.880777][T28097] efs: device does not support 512 byte blocks [ 452.890295][T28097] device does not support 512 byte blocks [ 452.890295][T28097] [ 453.441849][T28129] QAT: Stopping all acceleration devices. [ 453.599859][T28134] ip6t_srh: unknown srh match flags 4000 [ 453.670913][T28139] Invalid ELF header magic: != ELF [ 454.513097][T28189] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10723'. [ 454.521559][T28189] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10723'. [ 455.866014][T28258] binder: 28256:28258 ioctl c0306201 80000480 returned -22 [ 456.026843][T28266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10760'. [ 456.163061][T28268] NILFS (nbd0): device size too small [ 456.949908][T28293] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 457.144307][T28301] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 457.919275][T28323] dvmrp0: entered allmulticast mode [ 459.416199][T28375] netlink: 'syz.0.10812': attribute type 1 has an invalid length. [ 459.433763][T28375] netlink: 216 bytes leftover after parsing attributes in process `syz.0.10812'. [ 459.553401][T28380] netlink: 'syz.0.10815': attribute type 11 has an invalid length. [ 459.583611][T28380] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10815'. [ 459.737848][T28387] ceph: No source [ 460.967900][T28431] cgroup: Invalid name [ 461.362777][T28455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10850'. [ 461.484434][ T6220] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 461.697358][ T6220] usb 6-1: Using ep0 maxpacket: 16 [ 461.727724][T28466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10857'. [ 461.731813][T28466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10857'. [ 461.843045][ T6220] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 461.859161][ T6220] usb 6-1: config 0 has no interface number 0 [ 461.861460][ T6220] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 461.866819][ T6220] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 461.953194][T28472] netlink: 'syz.0.10859': attribute type 21 has an invalid length. [ 461.962554][T28472] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10859'. [ 461.971548][T28472] netlink: 'syz.0.10859': attribute type 4 has an invalid length. [ 461.986070][T28472] netlink: 'syz.0.10859': attribute type 3 has an invalid length. [ 461.990590][ T6220] usb 6-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 461.990978][T28472] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10859'. [ 461.994625][ T6220] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.050362][ T6220] usb 6-1: Product: syz [ 462.052215][ T6220] usb 6-1: Manufacturer: syz [ 462.057568][ T6220] usb 6-1: SerialNumber: syz [ 462.077867][ T6220] usb 6-1: config 0 descriptor?? [ 462.085286][ T6220] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 462.332486][T15877] usb 6-1: USB disconnect, device number 5 [ 462.435623][T28485] bond0: (slave batadv_slave_1): Error: Device can not be enslaved while up [ 462.570787][T28492] udevd[28492]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 463.154309][T28525] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10883'. [ 463.470834][T28540] overlay: Unknown parameter '9\8|/6{t9]SDgB34B8M_HLϣ#' [ 464.069146][T28578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10907'. [ 464.339905][T28593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.467517][T28599] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 464.482894][T28599] overlayfs: overlapping lowerdir path [ 464.498910][T28593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.654483][T28603] comedi comedi3: comedi_config --init_data is deprecated [ 464.899227][T28615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10927'. [ 465.039107][T28620] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 465.096176][T28625] Unsupported ieee802154 address type: 0 [ 465.173757][T28630] wlan0 speed is unknown, defaulting to 1000 [ 465.177687][T28630] wlan0 speed is unknown, defaulting to 1000 [ 465.183567][T28630] wlan0 speed is unknown, defaulting to 1000 [ 465.197773][T28630] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 465.252249][T28630] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 465.335483][T28630] wlan0 speed is unknown, defaulting to 1000 [ 465.342926][T28630] wlan0 speed is unknown, defaulting to 1000 [ 465.354641][T28630] wlan0 speed is unknown, defaulting to 1000 [ 465.358227][T28630] wlan0 speed is unknown, defaulting to 1000 [ 465.637599][T28651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10945'. [ 466.032860][ T40] audit: type=1400 audit(2000000140.584:276): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=28673 comm="syz.2.10956" [ 466.831827][T28717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10978'. [ 467.343757][T28751] siw: device registration error -23 [ 467.528526][T28752] veth5: entered promiscuous mode [ 467.640410][ T40] audit: type=1326 audit(2000000142.081:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28763 comm="syz.0.11001" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 467.677276][ T40] audit: type=1326 audit(2000000142.081:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28763 comm="syz.0.11001" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 467.700334][ T40] audit: type=1326 audit(2000000142.109:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28763 comm="syz.0.11001" exe="/syz-executor" sig=0 arch=40000003 syscall=135 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 467.711873][ T40] audit: type=1326 audit(2000000142.109:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28763 comm="syz.0.11001" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 467.742463][ T40] audit: type=1326 audit(2000000142.109:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28763 comm="syz.0.11001" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 468.509685][T28794] dvmrp1: entered allmulticast mode [ 468.699063][T28804] netlink: 'syz.2.11021': attribute type 1 has an invalid length. [ 468.720902][T28804] netlink: 'syz.2.11021': attribute type 3 has an invalid length. [ 468.736085][T28804] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11021'. [ 469.074401][T28821] netlink: 'syz.2.11029': attribute type 4 has an invalid length. [ 469.177453][T28829] siw: device registration error -23 [ 469.328685][T28823] /dev/sr0: Can't open blockdev [ 470.030832][T28871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11053'. [ 470.519222][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.522888][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 471.200127][T28917] random: crng reseeded on system resumption [ 471.354101][T28924] openvswitch: netlink: Key type 58 is out of range max 32 [ 471.868070][T28951] netlink: 'syz.0.11092': attribute type 21 has an invalid length. [ 471.882103][T28951] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11092'. [ 471.956704][T28957] random: crng reseeded on system resumption [ 472.562805][T28989] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11111'. [ 472.575291][T28989] netlink: 260 bytes leftover after parsing attributes in process `syz.1.11111'. [ 472.693721][T28995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11113'. [ 472.698035][T28995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11113'. [ 472.960023][T29005] netlink: zone id is out of range [ 473.551198][T29035] netlink: 144 bytes leftover after parsing attributes in process `syz.0.11133'. [ 473.694601][T29039] comedi comedi0: Minor 4 could not be opened [ 474.301476][ T54] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 474.336034][T29070] bridge5: entered promiscuous mode [ 474.356829][T29070] bridge5: entered allmulticast mode [ 474.507097][ T54] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 474.528771][ T54] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 474.547027][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 474.556840][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 474.603879][ T54] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 474.649527][ T54] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 474.653392][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.657585][ T54] usb 8-1: Product: syz [ 474.661312][ T54] usb 8-1: Manufacturer: syz [ 474.676749][ T54] usb 8-1: SerialNumber: syz [ 474.717026][ T54] usb 8-1: config 0 descriptor?? [ 474.721637][T29058] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 474.728848][ T54] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input37 [ 475.188680][T29105] kAFS: unable to lookup cell 'syz0' [ 475.367886][ T6220] usb 8-1: USB disconnect, device number 10 [ 475.560229][T29122] netlink: 'syz.2.11175': attribute type 10 has an invalid length. [ 477.230762][T29185] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 477.276859][T29188] netlink: 180 bytes leftover after parsing attributes in process `syz.1.11208'. [ 478.317249][T29226] program syz.3.11227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 478.558876][T29236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11229'. [ 478.574615][T29236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11229'. [ 478.981371][T29253] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.11240'. [ 479.510361][T29281] dummy0: left promiscuous mode [ 479.571889][T29281] geneve4: left promiscuous mode [ 479.576426][T29281] veth5: left promiscuous mode [ 479.636015][ T76] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 479.827331][ T76] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 479.860277][ T76] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.893823][ T76] usb 8-1: Product: syz [ 479.906664][ T76] usb 8-1: Manufacturer: syz [ 479.908622][ T76] usb 8-1: SerialNumber: syz [ 479.936569][T29295] netlink: 'syz.0.11260': attribute type 16 has an invalid length. [ 479.937770][ T76] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 479.939828][T29295] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11260'. [ 480.047426][ T6207] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 480.092285][T29303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11265'. [ 480.540460][ T6220] usb 8-1: USB disconnect, device number 11 [ 480.715748][T29325] Process accounting paused [ 480.889725][T29334] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11278'. [ 480.926666][T29336] netlink: 'syz.1.11281': attribute type 1 has an invalid length. [ 480.940306][T29336] netlink: 'syz.1.11281': attribute type 2 has an invalid length. [ 481.168002][ T6207] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 481.169591][T29344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.204891][ T6207] ath9k_htc: Failed to initialize the device [ 481.213289][ T6220] usb 8-1: ath9k_htc: USB layer deinitialized [ 481.235040][T29347] wg2 speed is unknown, defaulting to 1000 [ 481.238594][T29347] wg2 speed is unknown, defaulting to 1000 [ 481.272534][T29347] wg2 speed is unknown, defaulting to 1000 [ 481.545272][T29347] infiniband syz2: set active [ 481.565386][ T34] wg2 speed is unknown, defaulting to 1000 [ 481.576388][T29347] infiniband syz2: added wg2 [ 481.657126][T29347] RDS/IB: syz2: added [ 481.659981][T29347] smc: adding ib device syz2 with port count 1 [ 481.667206][T29347] smc: ib device syz2 port 1 has no pnetid [ 481.671944][ T29] wg2 speed is unknown, defaulting to 1000 [ 481.676652][T29347] wg2 speed is unknown, defaulting to 1000 [ 482.484570][T29347] wg2 speed is unknown, defaulting to 1000 [ 483.170603][T29347] wg2 speed is unknown, defaulting to 1000 [ 483.192218][T29409] netlink: 168 bytes leftover after parsing attributes in process `syz.1.11317'. [ 483.313042][T29415] xt_hashlimit: overflow, rate too high: 0 [ 483.533379][T29347] wg2 speed is unknown, defaulting to 1000 [ 483.727430][T29431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11327'. [ 484.784148][T29481] program syz.1.11352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 485.247108][T29498] bond7 (unregistering): Released all slaves [ 485.268284][T29504] netlink: 'syz.0.11362': attribute type 3 has an invalid length. [ 485.850695][ T40] audit: type=1326 audit(2000000159.105:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29525 comm="syz.2.11370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 485.879660][ T40] audit: type=1326 audit(2000000159.105:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29525 comm="syz.2.11370" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 486.005274][T29543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11378'. [ 486.530674][T29574] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 486.554507][T29576] netlink: 'syz.2.11395': attribute type 1 has an invalid length. [ 486.685642][T29584] nr0: entered promiscuous mode [ 486.987054][T29600] netlink: 'syz.1.11407': attribute type 3 has an invalid length. [ 487.338240][T29619] netlink: 'syz.1.11416': attribute type 21 has an invalid length. [ 488.164286][T29666] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 488.170950][T29668] sctp: [Deprecated]: syz.2.11441 (pid 29668) Use of int in max_burst socket option deprecated. [ 488.170950][T29668] Use struct sctp_assoc_value instead [ 488.532492][T29680] xt_bpf: check failed: parse error [ 489.104040][T29708] netlink: 'syz.1.11461': attribute type 3 has an invalid length. [ 490.025259][T29752] binfmt_misc: register: failed to install interpreter file ./file0 [ 490.709473][T29776] netlink: 'syz.2.11494': attribute type 11 has an invalid length. [ 490.946283][T29792] kAFS: unable to lookup cell '(,c' [ 491.677641][T29829] dlm: plock device version mismatch: kernel (1.2.0), user (458753.0.0) [ 492.146303][T29855] comedi comedi1: dt2817: I/O port conflict (0xffffffffffffffff,5) [ 492.397059][ T40] audit: type=1326 audit(2000000165.241:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29870 comm="syz.2.11542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 492.428433][ T40] audit: type=1326 audit(2000000165.269:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29870 comm="syz.2.11542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 492.475481][ T40] audit: type=1326 audit(2000000165.288:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29870 comm="syz.2.11542" exe="/syz-executor" sig=0 arch=40000003 syscall=218 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 492.513879][ T40] audit: type=1326 audit(2000000165.288:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29870 comm="syz.2.11542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 492.535737][ T40] audit: type=1326 audit(2000000165.288:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29870 comm="syz.2.11542" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 492.642461][T29881] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 492.811591][T29893] netlink: 188 bytes leftover after parsing attributes in process `syz.2.11553'. [ 492.947766][T29897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11554'. [ 493.227382][T29916] program syz.2.11565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 493.274760][T29919] xt_CT: No such helper "snmp" [ 494.134992][T29960] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.11585'. [ 494.147921][T29960] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 494.620259][T29977] CIFS mount error: No usable UNC path provided in device string! [ 494.620259][T29977] [ 494.624457][T29977] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 494.810334][T29984] netlink: 'syz.1.11595': attribute type 13 has an invalid length. [ 495.199717][T30004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11607'. [ 495.240302][T30004] netlink: 31 bytes leftover after parsing attributes in process `syz.2.11607'. [ 495.269023][T30004] netlink: 'syz.2.11607': attribute type 3 has an invalid length. [ 495.289371][T30004] netlink: 'syz.2.11607': attribute type 2 has an invalid length. [ 495.294575][T30004] netlink: 31 bytes leftover after parsing attributes in process `syz.2.11607'. [ 495.631388][T30029] program syz.0.11618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 495.889218][T30044] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 4, id = 0 [ 495.912971][T30045] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 4, id = 1 [ 495.918270][T30046] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 4, id = 2 [ 495.920670][T30048] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 4, id = 3 [ 495.982501][T30051] netlink: 'syz.0.11628': attribute type 1 has an invalid length. [ 495.986305][T30051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11628'. [ 496.455564][T30071] block nbd1: NBD_DISCONNECT [ 496.550379][T30077] binder: 30076:30077 ioctl c0306201 80000040 returned -22 [ 497.462893][T30123] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 498.806992][ T40] audit: type=1400 audit(2000000171.237:289): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=30150 comm="syz.3.11678" [ 499.323384][T30176] openvswitch: netlink: Key type 31 is not supported [ 499.508063][T13853] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 499.712216][T13853] usb 7-1: Using ep0 maxpacket: 32 [ 499.726643][T13853] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.746611][T13853] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.800350][T13853] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 499.866095][T13853] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 499.887415][T13853] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 499.908076][T13853] usb 7-1: Product: syz [ 499.910130][T13853] usb 7-1: Manufacturer: syz [ 499.912097][T13853] usb 7-1: SerialNumber: syz [ 499.951164][T13853] input: appletouch as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input38 [ 500.366501][ T24] usb 7-1: USB disconnect, device number 12 [ 500.570283][ T24] appletouch 7-1:1.0: input: appletouch disconnected [ 500.761387][T30233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11719'. [ 501.374851][T30267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11736'. [ 501.392216][T30269] netlink: 'syz.3.11735': attribute type 1 has an invalid length. [ 501.586523][T30276] xt_hashlimit: overflow, try lower: 18446744073709551614/129 [ 502.186201][T30305] netlink: 'syz.0.11753': attribute type 3 has an invalid length. [ 502.291789][T30289] /dev/sr0: Can't open blockdev [ 502.445919][T30314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11757'. [ 502.637253][T30294] /dev/sr0: Can't open blockdev [ 502.768534][T30322] affs: No valid root block on device nbd1 [ 502.913513][T30331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11765'. [ 503.571445][T30361] netlink: 'syz.3.11780': attribute type 1 has an invalid length. [ 503.626745][T30365] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11781'. [ 503.973721][T30365] team0: Port device bond0 removed [ 504.014249][T30365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.080920][T30365] bond0 (unregistering): Released all slaves [ 504.343962][T30379] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11789'. [ 504.456818][T30379] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11789'. [ 505.394505][T30411] netlink: 'syz.3.11804': attribute type 1 has an invalid length. [ 505.452107][T30411] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11804'. [ 505.481894][T30418] netlink: 'syz.1.11808': attribute type 1 has an invalid length. [ 505.621555][T30424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.932189][T30434] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11815'. [ 505.945048][T30434] netlink: 18 bytes leftover after parsing attributes in process `syz.1.11815'. [ 506.196776][T30450] __nla_validate_parse: 1 callbacks suppressed [ 506.196841][T30450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11822'. [ 506.200760][T30447] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11823'. [ 507.211625][T30511] netlink: 'syz.1.11852': attribute type 3 has an invalid length. [ 507.219881][T30511] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11852'. [ 507.341640][T30516] pim6reg: entered allmulticast mode [ 507.793770][T30521] geneve1: entered allmulticast mode [ 508.054158][T30545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11867'. [ 508.529491][T30570] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11879'. [ 508.672371][T30579] nfs: Deprecated parameter 'nointr' [ 509.123520][T30592] gfs2: gfs2 mount does not exist [ 509.531365][T30608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11897'. [ 510.031661][T30641] netlink: 'syz.0.11910': attribute type 1 has an invalid length. [ 510.038165][T30640] tmpfs: Bad value for 'mpol' [ 510.280158][T30656] sctp: [Deprecated]: syz.0.11920 (pid 30656) Use of int in max_burst socket option deprecated. [ 510.280158][T30656] Use struct sctp_assoc_value instead [ 510.376295][T30661] netlink: 'syz.1.11923': attribute type 3 has an invalid length. [ 510.380061][T30661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11923'. [ 510.822035][T30679] QAT: failed to copy from user. [ 511.040723][T30687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11936'. [ 511.185821][T30692] overlayfs: conflicting options: userxattr,redirect_dir=on [ 511.204901][T30693] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 511.649822][T30711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11946'. [ 511.686471][T30711] netlink: 72 bytes leftover after parsing attributes in process `syz.3.11946'. [ 512.610779][T30752] 9pnet_fd: p9_fd_create_unix (30752): address too long: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 512.709789][T30758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11971'. [ 512.882081][T30761] Process accounting resumed [ 513.399286][T30782] netlink: zone id is out of range [ 513.401281][T30782] netlink: zone id is out of range [ 513.403218][T30782] netlink: zone id is out of range [ 513.488064][T30782] netlink: zone id is out of range [ 513.495458][T30782] netlink: zone id is out of range [ 513.501188][T30782] netlink: zone id is out of range [ 513.528884][T30782] netlink: zone id is out of range [ 513.531120][T30782] netlink: zone id is out of range [ 513.533341][T30782] netlink: zone id is out of range [ 513.594120][T30782] netlink: zone id is out of range [ 516.059669][T30880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12031'. [ 516.063709][T30880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12031'. [ 516.459226][T30903] ieee802154 phy0 wpan0: encryption failed: -22 [ 516.603290][T30911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12043'. [ 516.628675][T30911] bridge_slave_1: left allmulticast mode [ 516.633183][T30911] bridge_slave_1: left promiscuous mode [ 516.669557][T30911] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.728052][T30937] netlink: 'syz.3.12058': attribute type 21 has an invalid length. [ 517.736433][T30937] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12058'. [ 518.104038][T30947] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 518.112720][T30947] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 518.126410][T30947] vhci_hcd vhci_hcd.0: Device attached [ 518.141489][T30949] vhci_hcd: connection closed [ 518.142422][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 518.161255][ T1142] vhci_hcd vhci_hcd.3: release socket [ 518.186958][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 519.258175][T30990] Cannot find set identified by id 0 to match [ 519.300881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 519.548408][T30999] netlink: 830 bytes leftover after parsing attributes in process `syz.3.12086'. [ 519.572071][T30999] bond_slave_0: entered promiscuous mode [ 519.575963][T30999] bond_slave_1: entered promiscuous mode [ 519.692020][T31004] netlink: 'syz.1.12088': attribute type 8 has an invalid length. [ 519.769949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 520.791337][T31038] tipc: Can't bind to reserved service type 1 [ 520.838099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 520.893392][ T76] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 520.976669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 521.013709][T31044] netlink: 'syz.0.12108': attribute type 23 has an invalid length. [ 521.063894][T31044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12108'. [ 521.140672][ T76] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 521.145284][ T76] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 521.191608][ T76] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 521.199174][ T76] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.227649][ T76] usb 8-1: Product: syz [ 521.232942][ T76] usb 8-1: Manufacturer: syz [ 521.236199][ T76] usb 8-1: SerialNumber: syz [ 521.280336][ T76] usb 8-1: config 0 descriptor?? [ 521.296528][ T76] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input40 [ 521.340063][T31058] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12116'. [ 521.434163][T31063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12118'. [ 521.577967][T31068] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 521.964421][T13853] usb 8-1: USB disconnect, device number 12 [ 522.583619][T31101] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 522.599017][T31101] Error validating options; rc = [-22] [ 522.642369][T31103] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12135'. [ 522.690619][T31103] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12135'. [ 523.179766][T31121] bond7: Unable to set up delay as MII monitoring is disabled [ 523.236218][T31121] bond7 (unregistering): Released all slaves [ 523.955461][T31134] Cannot find del_set index 0 as target [ 524.414557][T31166] netlink: 'syz.2.12164': attribute type 24 has an invalid length. [ 524.428100][T31166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12164'. [ 524.474982][T31170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12166'. [ 524.491727][T31166] bond7: option ad_actor_sys_prio: invalid value (0) [ 524.493813][T31170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12166'. [ 524.514705][T31166] bond7: option ad_actor_sys_prio: allowed values 1 - 65535 [ 524.641713][T31166] bond7 (unregistering): Released all slaves [ 524.802507][T31183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12174'. [ 525.807936][T31231] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 525.816787][T31231] net_ratelimit: 7 callbacks suppressed [ 525.816798][T31231] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 526.395726][T31269] tmpfs: Group quota inode hardlimit too large. [ 527.004347][T31299] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 527.055198][T31301] random: crng reseeded on system resumption [ 527.077558][T31304] netlink: 'syz.3.12233': attribute type 1 has an invalid length. [ 527.226147][T31311] vivid-000: ================= START STATUS ================= [ 527.241911][T31311] vivid-000: Test Pattern: 100% Color Squares [ 527.247523][T31311] vivid-000: Fill Percentage of Frame: 100 [ 527.251854][T31311] vivid-000: Horizontal Movement: Move Right Fast [ 527.259848][T31315] netlink: 'syz.3.12238': attribute type 5 has an invalid length. [ 527.288146][T31311] vivid-000: Vertical Movement: Move Up [ 527.315530][T31311] vivid-000: OSD Text Mode: All [ 527.319678][T31311] vivid-000: Show Border: true [ 527.322367][T31311] vivid-000: Show Square: true [ 527.325229][T31311] vivid-000: Sensor Flipped Horizontally: true [ 527.361615][T31311] vivid-000: Sensor Flipped Vertically: true [ 527.366389][T31311] vivid-000: Insert SAV Code in Image: false [ 527.371591][T31311] vivid-000: Insert EAV Code in Image: false [ 527.386601][T31311] vivid-000: Insert Video Guard Band: true [ 527.399331][T31311] vivid-000: Reduced Framerate: false [ 527.410480][T31311] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 527.414618][T31311] vivid-000: S-Video 000-0 Is Connected To: Output S-Video 023-0 [ 527.418439][T31311] vivid-000: Enable Capture Cropping: true [ 527.421401][T31311] vivid-000: Enable Capture Composing: true [ 527.424775][T31311] vivid-000: Enable Capture Scaler: false [ 527.444190][T31311] vivid-000: Timestamp Source: End of Frame [ 527.456218][T31311] vivid-000: Colorspace: sRGB [ 527.460473][T31311] vivid-000: Transfer Function: Default [ 527.472453][T31311] vivid-000: Y'CbCr Encoding: Default [ 527.480928][T31311] vivid-000: HSV Encoding: Hue 0-256 [ 527.492756][T31311] vivid-000: Quantization: Limited Range [ 527.495881][T31311] vivid-000: Apply Alpha To Red Only: false [ 527.499222][T31311] vivid-000: Standard Aspect Ratio: 4x3 [ 527.502902][T31311] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 527.512041][T31311] vivid-000: DV Timings: 640x480p59 inactive [ 527.516010][T31311] vivid-000: DV Timings Aspect Ratio: 4x3 [ 527.520899][T31311] vivid-000: Maximum EDID Blocks: 1 [ 527.524427][T31311] vivid-000: Limited RGB Range (16-235): false [ 527.526921][T31311] vivid-000: Rx RGB Quantization Range: RGB Full Range (0-255) [ 527.540710][T31311] vivid-000: Power Present: 0x00000001 [ 527.542923][T31311] tpg source WxH: 320x180 (R'G'B) [ 527.544923][T31311] tpg field: 1 [ 527.546303][T31311] tpg crop: (0,0)/320x180 [ 527.550412][T31311] tpg compose: (0,0)/320x180 [ 527.554536][T31311] tpg colorspace: 2 [ 527.556766][T31311] tpg transfer function: 0/4 [ 527.561763][T31311] tpg quantization: 1/1 [ 527.565082][T31311] tpg RGB range: 0/2 [ 527.566891][T31311] vivid-000: ================== END STATUS ================== [ 527.731188][ T40] audit: type=1326 audit(2000000198.270:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31336 comm="syz.1.12249" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 527.766213][ T40] audit: type=1326 audit(2000000198.270:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31336 comm="syz.1.12249" exe="/syz-executor" sig=0 arch=40000003 syscall=266 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 527.804890][ T40] audit: type=1326 audit(2000000198.270:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31336 comm="syz.1.12249" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 527.879618][ T40] audit: type=1326 audit(2000000198.270:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31336 comm="syz.1.12249" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 528.120303][T31345] usb usb1: usbfs: process 31345 (syz.1.12252) did not claim interface 0 before use [ 528.456343][T31369] kAFS: unable to lookup cell '' [ 529.619144][T31427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12293'. [ 530.730580][T31465] netlink: 'syz.2.12312': attribute type 1 has an invalid length. [ 531.958216][T31519] syz.2.12336: attempt to access beyond end of device [ 531.958216][T31519] mtdblock0: rw=2048, sector=3656, nr_sectors = 8 limit=256 [ 531.959648][ T40] audit: type=1326 audit(2000000202.236:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31515 comm="syz.3.12338" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa7579 code=0x0 [ 532.029864][ T40] audit: type=1326 audit(2000000202.311:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31515 comm="syz.3.12338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7579 code=0x7ffc0000 [ 532.054264][ T40] audit: type=1326 audit(2000000202.311:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31515 comm="syz.3.12338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7579 code=0x7ffc0000 [ 532.393790][T31542] xt_CT: You must specify a L4 protocol and not use inversions on it [ 532.997793][T31563] lo speed is unknown, defaulting to 1000 [ 533.364902][T31582] netlink: 'syz.3.12368': attribute type 1 has an invalid length. [ 533.386494][T31582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12368'. [ 533.488242][T31589] tmpfs: Bad value for 'mpol' [ 534.385311][T31632] kAFS: unable to lookup cell '\/' [ 534.387378][T31633] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12391'. [ 534.623299][T31643] QAT: Invalid ioctl 21531 [ 535.026680][T31661] netlink: 'syz.1.12407': attribute type 10 has an invalid length. [ 535.034791][T31661] hsr0: entered promiscuous mode [ 535.037318][T31661] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 535.067074][T31661] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 535.095852][T31661] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 535.521333][T31681] ubi31: attaching mtd0 [ 535.528103][T31681] ubi31: scanning is finished [ 535.530224][T31681] ubi31: empty MTD device detected [ 535.799686][T31681] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 535.813963][T31681] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 535.818148][T31681] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 535.821849][T31681] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 535.827199][T31681] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 535.841234][T31681] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 535.844335][T31681] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4019747311 [ 535.891369][T31681] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 535.925925][T31694] ubi31: background thread "ubi_bgt31d" started, PID 31694 [ 536.177541][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.180021][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 536.411850][T31711] xt_policy: output policy not valid in PREROUTING and INPUT [ 536.657060][T31725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12438'. [ 537.077812][T31746] openvswitch: netlink: Multiple metadata blocks provided [ 537.191094][T31748] xt_TCPMSS: Only works on TCP SYN packets [ 537.250852][T31755] ubi: mtd0 is already attached to ubi31 [ 537.415243][T31759] netlink: 'syz.2.12453': attribute type 9 has an invalid length. [ 537.507629][ C0] ================================================================== [ 537.511782][ C0] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 537.516613][ C0] Read of size 1 at addr ffff888073f7ac18 by task syz-executor/6127 [ 537.537513][ C0] [ 537.538460][ C0] CPU: 0 UID: 0 PID: 6127 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 537.538484][ C0] Tainted: [L]=SOFTLOCKUP [ 537.538490][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 537.538499][ C0] Call Trace: [ 537.538509][ C0] [ 537.538516][ C0] dump_stack_lvl+0x116/0x1f0 [ 537.538542][ C0] print_report+0xcd/0x630 [ 537.538562][ C0] ? __virt_addr_valid+0x81/0x610 [ 537.538583][ C0] ? __phys_addr+0xe8/0x180 [ 537.538603][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 537.538621][ C0] kasan_report+0xe0/0x110 [ 537.538640][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 537.538658][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 537.538675][ C0] __kasan_check_byte+0x36/0x50 [ 537.538694][ C0] lock_acquire+0xfc/0x330 [ 537.538708][ C0] ? do_raw_spin_unlock+0x53/0x230 [ 537.538724][ C0] ? .slowpath+0x9/0x18 [ 537.538743][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 537.538761][ C0] ? p9_req_put+0xaf/0x250 [ 537.538783][ C0] p9_req_put+0xaf/0x250 [ 537.538802][ C0] req_done+0x1dc/0x2e0 [ 537.538820][ C0] ? __pfx_req_done+0x10/0x10 [ 537.538837][ C0] ? clockevents_program_event+0x151/0x370 [ 537.538861][ C0] ? __pfx_req_done+0x10/0x10 [ 537.538878][ C0] vring_interrupt+0x2cf/0x440 [ 537.538894][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 537.538909][ C0] __handle_irq_event_percpu+0x236/0x890 [ 537.538931][ C0] handle_irq_event+0xab/0x1e0 [ 537.538948][ C0] handle_edge_irq+0x3ca/0x9e0 [ 537.538967][ C0] __common_interrupt+0xd0/0x2f0 [ 537.538989][ C0] common_interrupt+0xba/0xe0 [ 537.539005][ C0] [ 537.539010][ C0] [ 537.539016][ C0] asm_common_interrupt+0x26/0x40 [ 537.539030][ C0] RIP: 0010:copy_page_range+0x129a/0x6780 [ 537.539047][ C0] Code: 89 b1 ff 48 8b 44 24 18 48 b9 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 08 00 0f 85 3f 47 00 00 48 8b 44 24 18 31 ff 48 8b 18 <48> 89 dd 48 83 e5 9f 48 89 ee e8 67 84 b1 ff 48 85 ed 0f 84 44 12 [ 537.539061][ C0] RSP: 0018:ffffc9000476f650 EFLAGS: 00000246 [ 537.539074][ C0] RAX: ffff888043ca1840 RBX: 8000000062cdd007 RCX: dffffc0000000000 [ 537.539084][ C0] RDX: ffff8880266b4980 RSI: ffffffff820ccef3 RDI: 0000000000000000 [ 537.539094][ C0] RBP: 0000000000001000 R08: 0000000000000005 R09: 000000000000001f [ 537.539103][ C0] R10: 0000000000000008 R11: ffff8880266b54b0 R12: 0000000000000008 [ 537.539112][ C0] R13: 0000000000000001 R14: 00000000f6600000 R15: ffffea00018b3700 [ 537.539124][ C0] ? copy_page_range+0x1273/0x6780 [ 537.539150][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 537.539168][ C0] ? __pfx___might_resched+0x10/0x10 [ 537.539186][ C0] ? __pfx_mas_store+0x10/0x10 [ 537.539201][ C0] ? dup_mmap+0xba4/0x20e0 [ 537.539212][ C0] ? down_write+0x14d/0x200 [ 537.539227][ C0] ? up_write+0x282/0x4e0 [ 537.539243][ C0] dup_mmap+0xbea/0x20e0 [ 537.539259][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 537.539284][ C0] copy_process+0x3b9f/0x7430 [ 537.539309][ C0] ? __pfx_copy_process+0x10/0x10 [ 537.539327][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 537.539348][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 537.539367][ C0] kernel_clone+0xfc/0x910 [ 537.539389][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 537.539407][ C0] ? css_rstat_updated+0x1d1/0x590 [ 537.539427][ C0] __do_compat_sys_ia32_clone+0xcb/0x110 [ 537.539448][ C0] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 537.539469][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 537.539493][ C0] ? do_user_addr_fault+0x843/0x1370 [ 537.539512][ C0] __do_fast_syscall_32+0xe8/0x680 [ 537.539566][ C0] do_fast_syscall_32+0x32/0x80 [ 537.539579][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 537.539594][ C0] RIP: 0023:0xf7f37579 [ 537.539605][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 537.539619][ C0] RSP: 002b:00000000fffc50bc EFLAGS: 00000292 ORIG_RAX: 0000000000000078 [ 537.539633][ C0] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 537.539643][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000578e54a8 [ 537.539652][ C0] RBP: 00000000f73c6ff4 R08: 0000000000000000 R09: 0000000000000000 [ 537.539660][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 537.539667][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 537.539680][ C0] [ 537.539685][ C0] [ 537.647765][T31769] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 537.651183][ C0] Allocated by task 31763: [ 538.033469][ C0] kasan_save_stack+0x33/0x60 [ 538.036228][ C0] kasan_save_track+0x14/0x30 [ 538.046071][ C0] __kasan_kmalloc+0xaa/0xb0 [ 538.049086][ C0] p9_client_create+0xae/0xe40 [ 538.052284][ C0] v9fs_session_init+0x40/0xd40 [ 538.057246][ C0] v9fs_get_tree+0xb8/0xb50 [ 538.063320][ C0] vfs_get_tree+0x8e/0x330 [ 538.081529][ C0] path_mount+0x7bf/0x23a0 [ 538.084208][ C0] __ia32_sys_mount+0x291/0x310 [ 538.086985][ C0] __do_fast_syscall_32+0xe8/0x680 [ 538.089758][ C0] do_fast_syscall_32+0x32/0x80 [ 538.092540][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 538.099412][ C0] [ 538.100669][ C0] Freed by task 31763: [ 538.102859][ C0] kasan_save_stack+0x33/0x60 [ 538.112823][ C0] kasan_save_track+0x14/0x30 [ 538.117962][ C0] kasan_save_free_info+0x3b/0x60 [ 538.120833][ C0] __kasan_slab_free+0x5f/0x80 [ 538.135552][ C0] kfree+0x2f8/0x6e0 [ 538.140042][ C0] p9_client_create+0x6c5/0xe40 [ 538.146061][ C0] v9fs_session_init+0x40/0xd40 [ 538.150562][ C0] v9fs_get_tree+0xb8/0xb50 [ 538.153704][ C0] vfs_get_tree+0x8e/0x330 [ 538.177419][ C0] path_mount+0x7bf/0x23a0 [ 538.180645][ C0] __ia32_sys_mount+0x291/0x310 [ 538.184201][ C0] __do_fast_syscall_32+0xe8/0x680 [ 538.187488][ C0] do_fast_syscall_32+0x32/0x80 [ 538.190710][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 538.194850][ C0] [ 538.206679][ C0] The buggy address belongs to the object at ffff888073f7ac00 [ 538.206679][ C0] which belongs to the cache kmalloc-512 of size 512 [ 538.217801][ C0] The buggy address is located 24 bytes inside of [ 538.217801][ C0] freed 512-byte region [ffff888073f7ac00, ffff888073f7ae00) [ 538.247256][ C0] [ 538.249339][ C0] The buggy address belongs to the physical page: [ 538.254316][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x73f78 [ 538.260151][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 538.266987][ C0] anon flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 538.278884][ C0] page_type: f5(slab) [ 538.281175][ C0] raw: 04fff00000000040 ffff88801b442c80 0000000000000000 dead000000000001 [ 538.295061][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 538.310347][ C0] head: 04fff00000000040 ffff88801b442c80 0000000000000000 dead000000000001 [ 538.320148][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 538.336230][ C0] head: 04fff00000000002 ffffea0001cfde01 00000000ffffffff 00000000ffffffff [ 538.346773][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 538.359062][ C0] page dumped because: kasan: bad access detected [ 538.366367][ C0] page_owner tracks the page as allocated [ 538.369328][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 28630, tgid 28628 (syz.1.10935), ts 465334332586, free_ts 464597801084 [ 538.390872][ C0] post_alloc_hook+0x1af/0x220 [ 538.400523][ C0] get_page_from_freelist+0xd0b/0x31a0 [ 538.402868][ C0] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 538.421922][ C0] alloc_pages_mpol+0x1fb/0x550 [ 538.423900][ C0] new_slab+0x2c3/0x430 [ 538.425732][ C0] ___slab_alloc+0xe18/0x1c90 [ 538.427829][ C0] __slab_alloc.constprop.0+0x63/0x110 [ 538.430450][ C0] __kmalloc_cache_noprof+0x485/0x800 [ 538.433087][ C0] device_add+0xcf2/0x1980 [ 538.435005][ C0] add_one_compat_dev+0x591/0x820 [ 538.437051][ C0] enable_device_and_get+0x336/0x3f0 [ 538.456935][ C0] ib_register_device+0x8de/0xe70 [ 538.458935][ C0] siw_newlink+0xb71/0xdc0 [ 538.460963][ C0] nldev_newlink+0x3a6/0x680 [ 538.463233][ C0] rdma_nl_rcv_msg+0x38a/0x6e0 [ 538.465353][ C0] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 538.468155][ C0] page last free pid 6125 tgid 6125 stack trace: [ 538.471847][ C0] __free_frozen_pages+0x7df/0x1170 [ 538.477317][ C0] qlist_free_all+0x4c/0xf0 [ 538.495930][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 538.498308][ C0] __kasan_slab_alloc+0x69/0x90 [ 538.500386][ C0] kmem_cache_alloc_noprof+0x25e/0x770 [ 538.502475][ C0] ptlock_alloc+0x1f/0x70 [ 538.504181][ C0] pte_alloc_one+0x84/0x3d0 [ 538.506717][ C0] __pte_alloc+0x6d/0x3f0 [ 538.509183][ C0] copy_page_range+0x3f3e/0x6780 [ 538.511983][ C0] dup_mmap+0xbea/0x20e0 [ 538.515447][ C0] copy_process+0x3b9f/0x7430 [ 538.520699][ C0] kernel_clone+0xfc/0x910 [ 538.526258][ C0] __do_compat_sys_ia32_clone+0xcb/0x110 [ 538.536212][ C0] __do_fast_syscall_32+0xe8/0x680 [ 538.540392][ C0] do_fast_syscall_32+0x32/0x80 [ 538.544416][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 538.547671][ C0] [ 538.557773][ C0] Memory state around the buggy address: [ 538.561436][ C0] ffff888073f7ab00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 538.567949][ C0] ffff888073f7ab80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 538.573947][ C0] >ffff888073f7ac00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 538.579301][ C0] ^ [ 538.583007][ C0] ffff888073f7ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 538.589209][ C0] ffff888073f7ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 538.594029][ C0] ================================================================== [ 538.605785][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 538.610108][ C0] CPU: 0 UID: 0 PID: 6127 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 538.616589][ C0] Tainted: [L]=SOFTLOCKUP [ 538.619408][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 538.633143][ C0] Call Trace: [ 538.640461][ C0] [ 538.644049][ C0] dump_stack_lvl+0x3d/0x1f0 [ 538.649094][ C0] vpanic+0x640/0x6f0 [ 538.653501][ C0] panic+0xca/0xd0 [ 538.657331][ C0] ? __pfx_panic+0x10/0x10 [ 538.661926][ C0] ? end_report+0x4c/0x160 [ 538.667747][ C0] ? rcu_is_watching+0x12/0xc0 [ 538.674946][ C0] ? lock_release+0x201/0x2d0 [ 538.679654][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 538.682714][ C0] check_panic_on_warn+0xab/0xb0 [ 538.685592][ C0] end_report+0x107/0x160 [ 538.688542][ C0] kasan_report+0xee/0x110 [ 538.692161][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 538.697134][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 538.705119][ C0] __kasan_check_byte+0x36/0x50 [ 538.710102][ C0] lock_acquire+0xfc/0x330 [ 538.712985][ C0] ? do_raw_spin_unlock+0x53/0x230 [ 538.720965][ C0] ? .slowpath+0x9/0x18 [ 538.726260][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 538.733414][ C0] ? p9_req_put+0xaf/0x250 [ 538.738470][ C0] p9_req_put+0xaf/0x250 [ 538.743621][ C0] req_done+0x1dc/0x2e0 [ 538.746530][ C0] ? __pfx_req_done+0x10/0x10 [ 538.752375][ C0] ? clockevents_program_event+0x151/0x370 [ 538.763252][ C0] ? __pfx_req_done+0x10/0x10 [ 538.769608][ C0] vring_interrupt+0x2cf/0x440 [ 538.775913][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 538.781495][ C0] __handle_irq_event_percpu+0x236/0x890 [ 538.789896][ C0] handle_irq_event+0xab/0x1e0 [ 538.796903][ C0] handle_edge_irq+0x3ca/0x9e0 [ 538.804955][ C0] __common_interrupt+0xd0/0x2f0 [ 538.812566][ C0] common_interrupt+0xba/0xe0 [ 538.832676][ C0] [ 538.833902][ C0] [ 538.835114][ C0] asm_common_interrupt+0x26/0x40 [ 538.837166][ C0] RIP: 0010:copy_page_range+0x129a/0x6780 [ 538.853874][ C0] Code: 89 b1 ff 48 8b 44 24 18 48 b9 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 08 00 0f 85 3f 47 00 00 48 8b 44 24 18 31 ff 48 8b 18 <48> 89 dd 48 83 e5 9f 48 89 ee e8 67 84 b1 ff 48 85 ed 0f 84 44 12 [ 538.863999][ C0] RSP: 0018:ffffc9000476f650 EFLAGS: 00000246 [ 538.888067][ C0] RAX: ffff888043ca1840 RBX: 8000000062cdd007 RCX: dffffc0000000000 [ 538.891724][ C0] RDX: ffff8880266b4980 RSI: ffffffff820ccef3 RDI: 0000000000000000 [ 538.894663][ C0] RBP: 0000000000001000 R08: 0000000000000005 R09: 000000000000001f [ 538.908793][ C0] R10: 0000000000000008 R11: ffff8880266b54b0 R12: 0000000000000008 [ 538.913401][ C0] R13: 0000000000000001 R14: 00000000f6600000 R15: ffffea00018b3700 [ 538.916043][ C0] ? copy_page_range+0x1273/0x6780 [ 538.917711][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 538.919441][ C0] ? __pfx___might_resched+0x10/0x10 [ 538.924697][ C0] ? __pfx_mas_store+0x10/0x10 [ 538.927060][ C0] ? dup_mmap+0xba4/0x20e0 [ 538.929114][ C0] ? down_write+0x14d/0x200 [ 538.936932][ C0] ? up_write+0x282/0x4e0 [ 538.941226][ C0] dup_mmap+0xbea/0x20e0 [ 538.943850][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 538.951061][ C0] copy_process+0x3b9f/0x7430 [ 538.957057][ C0] ? __pfx_copy_process+0x10/0x10 [ 538.960824][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 538.973447][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 538.976221][ C0] kernel_clone+0xfc/0x910 [ 538.978247][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 538.980456][ C0] ? css_rstat_updated+0x1d1/0x590 [ 538.982422][ C0] __do_compat_sys_ia32_clone+0xcb/0x110 [ 538.984652][ C0] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 538.986962][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 538.989673][ C0] ? do_user_addr_fault+0x843/0x1370 [ 538.993362][ C0] __do_fast_syscall_32+0xe8/0x680 [ 539.008287][ C0] do_fast_syscall_32+0x32/0x80 [ 539.011497][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 539.015291][ C0] RIP: 0023:0xf7f37579 [ 539.017858][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 539.030301][ C0] RSP: 002b:00000000fffc50bc EFLAGS: 00000292 ORIG_RAX: 0000000000000078 [ 539.035783][ C0] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 539.042133][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000578e54a8 [ 539.047562][ C0] RBP: 00000000f73c6ff4 R08: 0000000000000000 R09: 0000000000000000 [ 539.055814][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 539.065709][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 539.074110][ C0] [ 539.076630][ C0] Kernel Offset: disabled [ 539.092079][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:35:16 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853011e5 RDI=ffffffff9aed9260 RBP=ffffffff9aed9220 RSP=ffffc90000007738 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3337303838386652 R12=0000000000000000 R13=000000000000006b R14=ffffffff9aed9220 R15=ffffffff85301180 RIP=ffffffff8530120f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976fc000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f255c0 CR3=000000005016c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=0000000000000002 RCX=ffffffff95be1560 RDX=0000000000000004 RSI=0000000000000003 RDI=ffffffff8e3c94a0 RBP=0000000000000003 RSP=ffffc900065a7470 R8 =0000000000000000 R9 =0000000000000007 R10=ffffc900065a7678 R11=ffff888024578b30 R12=ffff888024578000 R13=0000000000000001 R14=ffff888024578ba8 R15=0000000000000000 RIP=ffffffff819956a6 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977fc000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000005807999c CR3=0000000028472000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000008 RBX=ffff888027a80450 RCX=0000000000000003 RDX=ffff888020c324c0 RSI=ffffffff863c403a RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900044ef0e0 R8 =0000000000000005 R9 =000000000000001f R10=0000000000000003 R11=ffff888020c32ff0 R12=ffffc90000415138 R13=ffff888027a804ac R14=ffff888027a80458 R15=0000000000000000 RIP=ffffffff863c4047 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 000fffff 00000000 FS =0000 00007f7f75943300 000fffff 00000000 GS =0000 ffff8880978fc000 000fffff 00000000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a921185fc0 CR3=0000000028cd5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=cbd41e7d6939016c 674c8047eadffb05 cbd41e7d6939016c 674c8047eadffb05 cbd41e7d6939016c 674c8047eadffb05 cbd41e7d6939016c 674c8047eadffb05 ZMM18=167a0f8cfeae0c6b 89d86009001f860d 167a0f8cfeae0c6b 89d86009001f860d 167a0f8cfeae0c6b 89d86009001f860d 167a0f8cfeae0c6b 89d86009001f860d ZMM19=183d000000000000 0000000000000004 183d000000000000 0000000000000003 183d000000000000 0000000000000002 183d000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 28fcffffffff8939 286cffffffff8939 0c93ffffffff8939 0c40ffffffff8939 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0bbeffffffff8939 0a20ffffffff8939 098affffffff8939 08c1ffffffff8939 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0855ffffffff8939 0838ffffffff8939 075cffffffff8939 0752ffffffff8939 ZMM24=001f860d001f860d 001f860d001f860d 001f860d001f860d 001f860d001f860d 001f860d001f860d 001f860d001f860d 001f860d001f860d 001f860d001f860d ZMM25=89d8600989d86009 89d8600989d86009 89d8600989d86009 89d8600989d86009 89d8600989d86009 89d8600989d86009 89d8600989d86009 89d8600989d86009 ZMM26=feae0c6bfeae0c6b feae0c6bfeae0c6b feae0c6bfeae0c6b feae0c6bfeae0c6b feae0c6bfeae0c6b feae0c6bfeae0c6b feae0c6bfeae0c6b feae0c6bfeae0c6b ZMM27=167a0f8c167a0f8c 167a0f8c167a0f8c 167a0f8c167a0f8c 167a0f8c167a0f8c 167a0f8c167a0f8c 167a0f8c167a0f8c 167a0f8c167a0f8c 167a0f8c167a0f8c ZMM28=000001400000013f 0000013e0000013d 0000013c0000013b 0000013a00000139 0000013800000137 0000013600000135 0000013400000133 0000013200000131 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=173d0000173d0000 173d0000173d0000 173d0000173d0000 173d0000173d0000 173d0000173d0000 173d0000173d0000 173d0000173d0000 173d0000173d0000 info registers vcpu 3 CPU#3 RAX=ffffc90000415000 RBX=ffff8880444ff800 RCX=ffffffff819dc049 RDX=1ffff1100889fe87 RSI=ffffffff863cc164 RDI=ffff8880444ff438 RBP=0000000000000001 RSP=ffffc900005e8e98 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=ffff88801da80b30 R12=ffffc90000415008 R13=ffff8880444ff428 R14=ffff888040a94800 R15=0000000000000000 RIP=ffffffff863cc1b2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73f75b4 CR3=000000007337f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000