last executing test programs: 2m23.574498208s ago: executing program 32 (id=37): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, 0x0, 0x0) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000140)={&(0x7f000004a000/0x3000)=nil, &(0x7f0000e41000/0x1000)=nil, 0x3000, 0x1}) 1m53.815949723s ago: executing program 4 (id=509): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) ioctl$PIO_FONT(r0, 0x4b61, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 1m53.647120584s ago: executing program 4 (id=510): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x200}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0xff, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 1m53.646875318s ago: executing program 4 (id=511): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x800c6613, 0x0) 1m53.591665395s ago: executing program 4 (id=512): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) 1m53.563158238s ago: executing program 4 (id=514): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) r0 = syz_io_uring_setup(0x2170, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4004}, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f00000003c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 1m53.24682351s ago: executing program 4 (id=519): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458081, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 1m53.173303115s ago: executing program 33 (id=519): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458081, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 1m48.536555466s ago: executing program 3 (id=605): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) 1m48.265385764s ago: executing program 3 (id=610): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004004}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000423346da092cbe220de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e248deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd77125d98120358900000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de4295777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f502cdf1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfd125a9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141399ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc0000001a002364bbd93964a8d0bdc802b9be2500"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100)=r1, 0x120) 1m48.264828263s ago: executing program 3 (id=612): openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/tty/drivers\x00', 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="82", 0x1}, {&(0x7f00000001c0)=' ', 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 1m48.196266998s ago: executing program 3 (id=613): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000002080)='./mnt\x00', &(0x7f00000020c0)='tracefs\x00', 0x4002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000003200)='./mnt/trace_pipe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 1m48.092890835s ago: executing program 3 (id=617): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb20d}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m47.806915509s ago: executing program 3 (id=619): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff", 0x9}, {0x0}], 0x2}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda9") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 1m47.721644242s ago: executing program 34 (id=619): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff", 0x9}, {0x0}], 0x2}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda9") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 1m42.134416968s ago: executing program 5 (id=720): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x7f, 0x4, 0x0, 0xb9ff, 0x9}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1m41.216301817s ago: executing program 5 (id=742): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0xffffffff, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 1m41.138028512s ago: executing program 5 (id=744): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendfile(r1, r2, &(0x7f0000000000)=0x7, 0x12) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 1m40.995787049s ago: executing program 5 (id=745): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x8, 0x9, 0x2000000, 0x5, 0xf, "59ed11650a9ad6f483662d6f304adce3bea7b1"}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) 1m40.825515393s ago: executing program 5 (id=746): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1b2) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x82100, 0x114) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) 1m40.676444838s ago: executing program 5 (id=751): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000940)={[&(0x7f00000007c0)='(/=\x00']}, 0x0) 1m40.507075412s ago: executing program 1 (id=755): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @loopback}]}}}]}, 0x38}}, 0x4048084) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 1m40.436866142s ago: executing program 1 (id=757): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)) pread64(r1, &(0x7f0000000340)=""/155, 0x9b, 0x5) 1m40.385247201s ago: executing program 1 (id=759): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xfffe, 0x6, 0xfffa}, 0x52, [0x8000, 0xc95a, 0x10, 0x8, 0x80, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0xa, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x3, 0x20, 0xd, 0x4000001, 0x0, 0xffffffff, 0xe661, 0x2, 0x7, 0x205, 0x8, 0x4c74, 0xffff7fff, 0xe06, 0x3, 0xe, 0x0, 0x3fc0000, 0x7, 0x1000017, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x0, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc6, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x20000000, 0x4, 0x1007, 0x0, 0x8, 0x400, 0x401, 0x6, 0x0, 0x20000ff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x48, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8003, 0x1, 0xfe000000, 0xffef, 0x2, 0x4, 0x200009, 0x7f, 0x3, 0x4000008, 0x7, 0x0, 0x3, 0x9, 0x8c93690, 0x42, 0x3], [0x6, 0x40a, 0xc0, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x3402, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x5, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0xd, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x1, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x4, 0x5, 0xca, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0xd, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x4, 0x5, 0x84c0, 0x30b1d693, 0x2, 0xfffffc00, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m40.152500806s ago: executing program 1 (id=763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newtfilter={0x38, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x40) 1m39.91705316s ago: executing program 1 (id=767): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000140)='./file0/../file0/../file0\x00') 1m39.890451204s ago: executing program 1 (id=768): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x80000008}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0x20000014}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) 1m25.489912064s ago: executing program 35 (id=751): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000940)={[&(0x7f00000007c0)='(/=\x00']}, 0x0) 1m24.821676775s ago: executing program 36 (id=768): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x80000008}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0x20000014}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) 49.642495162s ago: executing program 8 (id=1279): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x44, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xa}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x2, 0x7, 0x4, 0x6, 0x9, 0x8000, 0x80, 0x7}}]}}]}, 0x44}}, 0x0) 49.508461432s ago: executing program 8 (id=1272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000400)="00000000000000000010") ioctl$KVM_RUN(r2, 0xae80, 0x0) 49.343438685s ago: executing program 8 (id=1273): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x50) 49.179110882s ago: executing program 8 (id=1284): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xa0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) 49.127979253s ago: executing program 8 (id=1276): unshare(0x64000600) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 48.855500423s ago: executing program 8 (id=1280): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc5) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)="31d1c2f9f9cb6e57a260fb75cd683382b43fffd545aeb1ab8e21d5b8d55e8dab8d6f79c3f2e027ae80105ad17eb09de078b8d74784e4306ea69f1e4ae6f378ac11", 0xfffffd8d) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) 48.768081757s ago: executing program 37 (id=1280): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc5) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)="31d1c2f9f9cb6e57a260fb75cd683382b43fffd545aeb1ab8e21d5b8d55e8dab8d6f79c3f2e027ae80105ad17eb09de078b8d74784e4306ea69f1e4ae6f378ac11", 0xfffffd8d) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) 29.874178088s ago: executing program 9 (id=1434): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/swaps\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 29.837318253s ago: executing program 9 (id=1435): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000000040)="b8", 0x1) syz_usb_disconnect(r0) 27.530295469s ago: executing program 9 (id=1443): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 27.328897475s ago: executing program 9 (id=1451): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x40000, 0x0) 27.270700749s ago: executing program 9 (id=1454): r0 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000180)='environ\x00') syz_usb_disconnect(0xffffffffffffffff) pread64(r2, 0x0, 0x0, 0x4) 26.954676566s ago: executing program 9 (id=1456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003540)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x20000000, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xee, 0xfe}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) 26.881289885s ago: executing program 38 (id=1456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003540)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x20000000, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xee, 0xfe}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) 17.196148157s ago: executing program 2 (id=1587): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010400000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="3a2205000a010000300012800b00010067656e6576650000200002"], 0x50}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) 17.085082189s ago: executing program 2 (id=1588): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001200210300"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x4004810) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) recvmmsg(r0, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0) 16.966914201s ago: executing program 2 (id=1592): bpf$MAP_CREATE(0x0, 0x0, 0x0) mlockall(0x3) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x200000, 0x200000}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/partitions\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 16.452311175s ago: executing program 2 (id=1612): r0 = syz_open_procfs(0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0xa01f, 0x100000110) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xfe4f, &(0x7f0000000000)=ANY=[], 0x0) 16.355035681s ago: executing program 2 (id=1614): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') 16.352084124s ago: executing program 2 (id=1616): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) add_key$user(&(0x7f0000002300), 0x0, 0x0, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504036129436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0xffffffffffffffff) 2.333266886s ago: executing program 0 (id=1769): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x400}}}}}}}, 0x0) 2.262410404s ago: executing program 0 (id=1764): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r0, 0x0, &(0x7f0000000300)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r1, 0x40104d05, 0x0) 2.174206449s ago: executing program 6 (id=1765): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x17c) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0x401) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 2.174086697s ago: executing program 7 (id=1766): socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7f, 0x1, 0x411}}}, 0x7) 2.161805122s ago: executing program 0 (id=1767): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x114, 0x30, 0x1, 0x70bd28, 0x25dfdbfb, "", [@nested={0x104, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061d000017c8a6", @typed={0x4, 0xeb}, @nested={0x4, 0xaf}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x2000}, 0x20000000) 1.856438078s ago: executing program 0 (id=1768): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f000904010000010220000904010101010220000905"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.604352915s ago: executing program 7 (id=1770): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)="de66b381a9e121c2", 0x0, 0x4, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={&(0x7f0000000600)="2af9a08000f3d18f4e96116af6c1c30285054ad49df90cd67350c995ad6f97833055ff9fa3eb365e30cf68728f7321aaa24b68f707c105ed8a16042648cdbb31e808b67897f5f55d49da6445f18e2dd66e868083550c8b1881a60ceee61344eb228c20228a5140b928160c74ac894407c755a4b9ae5e4cb83ef1942dbc34509a9ae83194b572ccd64f8496a5dbf356d242763f4313dc8a6fe839c326e35b3fdc841a318cf4bf990f49157511aca65401cb3da7c2279f6cca331d7a02e1cd81304d9177fe7df04b5dc8e7fbba937e1f86c6802b8ddd3e8949c978d527eb4aebc4f69a", 0x0, 0x0, 0x0, 0x42e7, r0}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.603520519s ago: executing program 7 (id=1771): r0 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n initialized [ 169.177950][ T5735] Bluetooth: hci1: command 0x0419 tx timeout [ 169.200002][ T8701] usb 12-1: USB disconnect, device number 7 [ 171.258343][ T5735] Bluetooth: hci1: command 0x0419 tx timeout [ 171.664135][ T8701] usb 14-1: USB disconnect, device number 5 [ 171.698554][T10070] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 171.745888][T10078] warning: `syz.6.1394' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 171.765627][ T43] audit: type=1800 audit(1790052739.362:46): pid=10076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1391" name="file1" dev="9p" ino=71827757 res=0 errno=0 [ 172.088816][T10084] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input28 [ 172.204726][T10106] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 172.249918][T10108] syzkaller1: entered promiscuous mode [ 172.249932][T10108] syzkaller1: entered allmulticast mode [ 172.362837][T10112] null_blk: disk nullb1 created [ 172.796723][T10139] FAULT_INJECTION: forcing a failure. [ 172.796723][T10139] name failslab, interval 1, probability 0, space 0, times 0 [ 172.796755][T10139] CPU: 2 UID: 0 PID: 10139 Comm: syz.7.1421 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.796782][T10139] Tainted: [L]=SOFTLOCKUP [ 172.796789][T10139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.796802][T10139] Call Trace: [ 172.796808][T10139] [ 172.796815][T10139] dump_stack_lvl+0x100/0x190 [ 172.796844][T10139] should_fail_ex.cold+0x5/0xa [ 172.796869][T10139] should_failslab+0xc2/0x120 [ 172.796894][T10139] __kmalloc_cache_noprof+0x91/0x6d0 [ 172.796921][T10139] ? __pfx_vim2m_s_ctrl+0x10/0x10 [ 172.796946][T10139] ? v4l2_m2m_ctx_init+0x4d/0x380 [ 172.796968][T10139] ? __pfx_queue_init+0x10/0x10 [ 172.796994][T10139] v4l2_m2m_ctx_init+0x4d/0x380 [ 172.797038][T10139] vim2m_open+0x4a6/0x830 [ 172.797070][T10139] v4l2_open+0x1d2/0x490 [ 172.797090][T10139] ? __pfx_v4l2_open+0x10/0x10 [ 172.797109][T10139] chrdev_open+0x234/0x6a0 [ 172.797130][T10139] ? __pfx_apparmor_file_open+0x10/0x10 [ 172.797159][T10139] ? __pfx_chrdev_open+0x10/0x10 [ 172.797182][T10139] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 172.797212][T10139] do_dentry_open+0x6ab/0x14d0 [ 172.797231][T10139] ? __pfx_chrdev_open+0x10/0x10 [ 172.797258][T10139] vfs_open+0x82/0x3f0 [ 172.797286][T10139] path_openat+0x19fa/0x2440 [ 172.797312][T10139] ? __pfx_path_openat+0x10/0x10 [ 172.797341][T10139] do_file_open+0x20e/0x430 [ 172.797366][T10139] ? __pfx_do_file_open+0x10/0x10 [ 172.797406][T10139] ? _raw_spin_unlock+0x28/0x50 [ 172.797428][T10139] ? alloc_fd+0x471/0x7a0 [ 172.797456][T10139] do_sys_openat2+0x10f/0x1e0 [ 172.797482][T10139] ? __pfx_do_sys_openat2+0x10/0x10 [ 172.797513][T10139] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 172.797530][T10139] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 172.797552][T10139] __ia32_compat_sys_openat+0x12d/0x210 [ 172.797580][T10139] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 172.797613][T10139] do_int80_emulation+0x166/0x650 [ 172.797638][T10139] asm_int80_emulation+0x1a/0x20 [ 172.797653][T10139] RIP: 0023:0xf71c75ab [ 172.797667][T10139] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 172.797683][T10139] RSP: 002b:00000000f547d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 172.797702][T10139] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f547d100 [ 172.797714][T10139] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.797723][T10139] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.797732][T10139] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 172.797742][T10139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.797767][T10139] [ 172.908370][T10145] FAULT_INJECTION: forcing a failure. [ 172.908370][T10145] name failslab, interval 1, probability 0, space 0, times 0 [ 172.908393][T10145] CPU: 1 UID: 60928 PID: 10145 Comm: syz.0.1424 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.908408][T10145] Tainted: [L]=SOFTLOCKUP [ 172.908412][T10145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.908418][T10145] Call Trace: [ 172.908422][T10145] [ 172.908427][T10145] dump_stack_lvl+0x100/0x190 [ 172.908446][T10145] should_fail_ex.cold+0x5/0xa [ 172.908461][T10145] should_failslab+0xc2/0x120 [ 172.908477][T10145] __kmalloc_noprof+0xfc/0x840 [ 172.908489][T10145] ? __register_sysctl_table+0xac/0x1650 [ 172.908509][T10145] __register_sysctl_table+0xac/0x1650 [ 172.908524][T10145] ? trace_kmalloc+0xeb/0x110 [ 172.908537][T10145] ? __kasan_kmalloc+0xaa/0xb0 [ 172.908550][T10145] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 172.908564][T10145] ? __pfx___register_sysctl_table+0x10/0x10 [ 172.908578][T10145] ? register_pidns_sysctls+0x48/0x1c0 [ 172.908635][T10145] ? __asan_memcpy+0x3c/0x60 [ 172.908649][T10145] register_pidns_sysctls+0x11d/0x1c0 [ 172.908663][T10145] ? __ns_common_init+0x299/0x4b0 [ 172.908675][T10145] copy_pid_ns+0x680/0x10a0 [ 172.908698][T10145] ? __pfx_copy_pid_ns+0x10/0x10 [ 172.908716][T10145] ? __pfx_copy_mnt_ns+0x10/0x10 [ 172.908734][T10145] ? create_new_namespaces+0x30/0xac0 [ 172.908754][T10145] create_new_namespaces+0x2aa/0xac0 [ 172.908773][T10145] unshare_nsproxy_namespaces+0xf2/0x220 [ 172.908792][T10145] ksys_unshare+0x4a2/0xa70 [ 172.908804][T10145] ? __pfx_ksys_unshare+0x10/0x10 [ 172.908820][T10145] __ia32_sys_unshare+0x30/0x40 [ 172.908831][T10145] __do_fast_syscall_32+0x13a/0x8b0 [ 172.908849][T10145] do_fast_syscall_32+0x32/0x70 [ 172.908866][T10145] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.908880][T10145] RIP: 0023:0xf7f82fec [ 172.908893][T10145] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 172.908897][T10145] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 172.908909][T10145] RAX: ffffffffffffffda RBX: 0000000062040000 RCX: 0000000000000000 [ 172.908915][T10145] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.908921][T10145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.908927][T10145] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 172.908933][T10145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.908946][T10145] [ 172.968124][ T5823] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 173.093404][T10151] FAULT_INJECTION: forcing a failure. [ 173.093404][T10151] name failslab, interval 1, probability 0, space 0, times 0 [ 173.093426][T10151] CPU: 1 UID: 0 PID: 10151 Comm: syz.7.1426 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.093441][T10151] Tainted: [L]=SOFTLOCKUP [ 173.093445][T10151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.093451][T10151] Call Trace: [ 173.093455][T10151] [ 173.093460][T10151] dump_stack_lvl+0x100/0x190 [ 173.093479][T10151] should_fail_ex.cold+0x5/0xa [ 173.093495][T10151] should_failslab+0xc2/0x120 [ 173.093511][T10151] __kmalloc_cache_noprof+0x91/0x6d0 [ 173.093535][T10151] ? __pfx___mutex_lock+0x10/0x10 [ 173.093552][T10151] ? ceph_get_tree+0x188/0x1fd0 [ 173.093570][T10151] ceph_get_tree+0x188/0x1fd0 [ 173.093583][T10151] ? bpf_lsm_capable+0x9/0x10 [ 173.093601][T10151] ? security_capable+0x80/0x260 [ 173.093617][T10151] vfs_get_tree+0x92/0x320 [ 173.093634][T10151] vfs_cmd_create+0xd7/0x2a0 [ 173.093651][T10151] __do_sys_fsconfig+0x55a/0xcb0 [ 173.093669][T10151] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 173.093685][T10151] ? xfd_validate_state+0x129/0x190 [ 173.093707][T10151] __do_fast_syscall_32+0x13a/0x8b0 [ 173.093725][T10151] do_fast_syscall_32+0x32/0x70 [ 173.093742][T10151] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.093756][T10151] RIP: 0023:0xf708efec [ 173.093768][T10151] Code: Unable to access opcode bytes at 0xf708efc2. [ 173.093773][T10151] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 173.093784][T10151] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 173.093791][T10151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.093797][T10151] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.093803][T10151] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 173.093809][T10151] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.093822][T10151] [ 173.128117][ T5823] usb 11-1: Using ep0 maxpacket: 32 [ 173.128921][ T5823] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 173.129885][ T5823] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 173.129905][ T5823] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 173.129921][ T5823] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 173.129980][ T5823] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 173.130000][ T5823] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 173.130019][ T5823] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 173.130052][ T5823] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.132058][ T5823] usb 11-1: config 0 descriptor?? [ 173.217844][ T64] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 173.342154][ T5823] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 173.369101][ T64] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 173.370125][ T64] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.375720][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 173.375741][ T64] usb 5-1: Product: syz [ 173.375753][ T64] usb 5-1: Manufacturer: syz [ 173.375764][ T64] usb 5-1: SerialNumber: syz [ 173.466435][T10163] FAULT_INJECTION: forcing a failure. [ 173.466435][T10163] name failslab, interval 1, probability 0, space 0, times 0 [ 173.466465][T10163] CPU: 1 UID: 0 PID: 10163 Comm: syz.9.1431 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.466495][T10163] Tainted: [L]=SOFTLOCKUP [ 173.466503][T10163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.466530][T10163] Call Trace: [ 173.466537][T10163] [ 173.466544][T10163] dump_stack_lvl+0x100/0x190 [ 173.466568][T10163] should_fail_ex.cold+0x5/0xa [ 173.466588][T10163] should_failslab+0xc2/0x120 [ 173.466609][T10163] __kmalloc_cache_noprof+0x91/0x6d0 [ 173.466634][T10163] ? __pfx_vim2m_s_ctrl+0x10/0x10 [ 173.466657][T10163] ? v4l2_m2m_ctx_init+0x4d/0x380 [ 173.466681][T10163] ? __pfx_queue_init+0x10/0x10 [ 173.466706][T10163] v4l2_m2m_ctx_init+0x4d/0x380 [ 173.466722][T10163] vim2m_open+0x4a6/0x830 [ 173.466744][T10163] v4l2_open+0x1d2/0x490 [ 173.466758][T10163] ? __pfx_v4l2_open+0x10/0x10 [ 173.466772][T10163] chrdev_open+0x234/0x6a0 [ 173.466790][T10163] ? __pfx_apparmor_file_open+0x10/0x10 [ 173.466816][T10163] ? __pfx_chrdev_open+0x10/0x10 [ 173.466840][T10163] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 173.466868][T10163] do_dentry_open+0x6ab/0x14d0 [ 173.466884][T10163] ? __pfx_chrdev_open+0x10/0x10 [ 173.466904][T10163] vfs_open+0x82/0x3f0 [ 173.466926][T10163] path_openat+0x19fa/0x2440 [ 173.466946][T10163] ? __pfx_path_openat+0x10/0x10 [ 173.466970][T10163] do_file_open+0x20e/0x430 [ 173.466994][T10163] ? __pfx_do_file_open+0x10/0x10 [ 173.467032][T10163] ? _raw_spin_unlock+0x28/0x50 [ 173.467051][T10163] ? alloc_fd+0x471/0x7a0 [ 173.467074][T10163] do_sys_openat2+0x10f/0x1e0 [ 173.467093][T10163] ? __pfx_do_sys_openat2+0x10/0x10 [ 173.467117][T10163] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 173.467132][T10163] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 173.467166][T10163] __ia32_compat_sys_openat+0x12d/0x210 [ 173.467194][T10163] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 173.467226][T10163] do_int80_emulation+0x166/0x650 [ 173.467254][T10163] asm_int80_emulation+0x1a/0x20 [ 173.467271][T10163] RIP: 0023:0xf71275ab [ 173.467284][T10163] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 173.467301][T10163] RSP: 002b:00000000f53e603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 173.467322][T10163] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53e6100 [ 173.467336][T10163] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.467345][T10163] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.467354][T10163] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 173.467364][T10163] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.467385][T10163] [ 173.546078][ C2] usblp0: nonzero read bulk status received: -71 [ 173.546405][ T5823] usb 11-1: USB disconnect, device number 12 [ 173.574968][ T8701] kernel read not supported for file /swaps (pid: 8701 comm: kworker/3:6) [ 173.588419][ T64] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 173.749398][T10134] usblp0: removed [ 173.842299][ C1] usblp0: nonzero write bulk status received: -71 [ 173.842725][ T5851] usb 5-1: USB disconnect, device number 12 [ 173.845370][ T5851] usblp0: removed [ 173.867877][ T8701] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 174.027837][ T8701] usb 14-1: Using ep0 maxpacket: 32 [ 174.031826][ T8701] usb 14-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 174.033136][ T8701] usb 14-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 174.033159][ T8701] usb 14-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 174.033171][ T8701] usb 14-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.033184][ T8701] usb 14-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 174.034717][ T8701] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.034729][ T8701] usb 14-1: Product: syz [ 174.034738][ T8701] usb 14-1: Manufacturer: syz [ 174.034745][ T8701] usb 14-1: SerialNumber: syz [ 174.038453][ C3] imon 14-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 174.045391][ T8701] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/input/input29 [ 174.154764][T10178] FAULT_INJECTION: forcing a failure. [ 174.154764][T10178] name failslab, interval 1, probability 0, space 0, times 0 [ 174.154786][T10178] CPU: 3 UID: 0 PID: 10178 Comm: syz.7.1446 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.154802][T10178] Tainted: [L]=SOFTLOCKUP [ 174.154807][T10178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.154814][T10178] Call Trace: [ 174.154818][T10178] [ 174.154823][T10178] dump_stack_lvl+0x100/0x190 [ 174.154841][T10178] should_fail_ex.cold+0x5/0xa [ 174.154870][T10178] should_failslab+0xc2/0x120 [ 174.154886][T10178] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 174.154901][T10178] ? ovl_do_parse_layer+0x30/0x12b0 [ 174.154919][T10178] kstrdup+0x51/0xe0 [ 174.154930][T10178] ovl_do_parse_layer+0x30/0x12b0 [ 174.154949][T10178] ovl_parse_param+0x11d6/0x1600 [ 174.154967][T10178] ? rcu_is_watching+0x13/0xc0 [ 174.154979][T10178] ? __pfx_ovl_parse_param+0x10/0x10 [ 174.154998][T10178] ? static_key_count+0x5a/0x70 [ 174.155019][T10178] ? __pfx_ovl_parse_param+0x10/0x10 [ 174.155034][T10178] vfs_parse_fs_param+0x200/0x3b0 [ 174.155052][T10178] vfs_parse_fs_qstr+0x138/0x1c0 [ 174.155071][T10178] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 174.155089][T10178] ? lockdep_init_map_type+0x5c/0x250 [ 174.155107][T10178] ? ovl_next_opt+0x143/0x1c0 [ 174.155123][T10178] ? __pfx_ovl_next_opt+0x10/0x10 [ 174.155139][T10178] vfs_parse_monolithic_sep+0x195/0x210 [ 174.155156][T10178] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 174.155173][T10178] ? alloc_fs_context+0x65a/0xf40 [ 174.155191][T10178] path_mount+0x77f/0x24c0 [ 174.155210][T10178] ? __pfx_path_mount+0x10/0x10 [ 174.155226][T10178] ? lockdep_hardirqs_on+0x7d/0x110 [ 174.155243][T10178] ? putname+0xb1/0x110 [ 174.155256][T10178] ? kmem_cache_free+0x127/0x6c0 [ 174.155278][T10178] ? __ia32_sys_mount+0x292/0x310 [ 174.155292][T10178] __ia32_sys_mount+0x292/0x310 [ 174.155307][T10178] ? __pfx___ia32_sys_mount+0x10/0x10 [ 174.155326][T10178] __do_fast_syscall_32+0x13a/0x8b0 [ 174.155344][T10178] do_fast_syscall_32+0x32/0x70 [ 174.155361][T10178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.155374][T10178] RIP: 0023:0xf708efec [ 174.155388][T10178] Code: Unable to access opcode bytes at 0xf708efc2. [ 174.155393][T10178] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 174.155404][T10178] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000100 [ 174.155411][T10178] RDX: 0000000080000440 RSI: 0000000000000008 RDI: 0000000080000140 [ 174.155417][T10178] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.155423][T10178] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 174.155430][T10178] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.155443][T10178] [ 174.278859][ T8701] imon 14-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 174.278872][ T8701] (id 0x00) [ 174.337907][ T8701] rc_core: IR keymap rc-imon-pad not found [ 174.337920][ T8701] Registered IR keymap rc-empty [ 174.337979][ T8701] imon 14-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 174.337989][ T8701] imon 14-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 174.469226][ T8701] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/rc/rc0 [ 174.470078][ T8701] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/rc/rc0/input30 [ 174.471931][ T8701] imon 14-1:155.0: iMON device (15c2:ffdc, intf0) on usb<14:6> initialized [ 174.647825][ T5851] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 174.705195][T10169] imon:send_packet: packet tx failed (-71) [ 174.705372][ T5881] usb 14-1: USB disconnect, device number 6 [ 174.728769][T10169] imon:vfd_write: send packet #0 failed [ 174.809354][ T5851] usb 5-1: not running at top speed; connect to a high speed hub [ 174.809374][ T5851] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 174.810175][ T5851] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 174.811670][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.811682][ T5851] usb 5-1: Product: syz [ 174.811689][ T5851] usb 5-1: Manufacturer: syz [ 174.811696][ T5851] usb 5-1: SerialNumber: syz [ 174.817099][ T5851] oti6858 5-1:1.0: oti6858 converter detected [ 174.818751][ T5851] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 175.378911][ T5823] usb 5-1: USB disconnect, device number 13 [ 175.384320][ T5823] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 175.384674][ T5823] oti6858 5-1:1.0: device disconnected [ 175.929770][T10196] comedi comedi0: No channels found! [ 175.942878][T10198] FAULT_INJECTION: forcing a failure. [ 175.942878][T10198] name failslab, interval 1, probability 0, space 0, times 0 [ 175.942910][T10198] CPU: 3 UID: 0 PID: 10198 Comm: syz.0.1442 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.942937][T10198] Tainted: [L]=SOFTLOCKUP [ 175.942944][T10198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.942955][T10198] Call Trace: [ 175.942961][T10198] [ 175.942967][T10198] dump_stack_lvl+0x100/0x190 [ 175.942995][T10198] should_fail_ex.cold+0x5/0xa [ 175.943019][T10198] should_failslab+0xc2/0x120 [ 175.943046][T10198] __kmalloc_cache_noprof+0x91/0x6d0 [ 175.943090][T10198] ? __pfx_vim2m_s_ctrl+0x10/0x10 [ 175.943115][T10198] ? v4l2_m2m_ctx_init+0x4d/0x380 [ 175.943138][T10198] ? __pfx_queue_init+0x10/0x10 [ 175.943165][T10198] v4l2_m2m_ctx_init+0x4d/0x380 [ 175.943186][T10198] vim2m_open+0x4a6/0x830 [ 175.943217][T10198] v4l2_open+0x1d2/0x490 [ 175.943234][T10198] ? __pfx_v4l2_open+0x10/0x10 [ 175.943250][T10198] chrdev_open+0x234/0x6a0 [ 175.943270][T10198] ? __pfx_apparmor_file_open+0x10/0x10 [ 175.943297][T10198] ? __pfx_chrdev_open+0x10/0x10 [ 175.943318][T10198] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 175.943347][T10198] do_dentry_open+0x6ab/0x14d0 [ 175.943365][T10198] ? __pfx_chrdev_open+0x10/0x10 [ 175.943390][T10198] vfs_open+0x82/0x3f0 [ 175.943416][T10198] path_openat+0x19fa/0x2440 [ 175.943439][T10198] ? __pfx_path_openat+0x10/0x10 [ 175.943473][T10198] do_file_open+0x20e/0x430 [ 175.943497][T10198] ? __pfx_do_file_open+0x10/0x10 [ 175.943536][T10198] ? _raw_spin_unlock+0x28/0x50 [ 175.943559][T10198] ? alloc_fd+0x471/0x7a0 [ 175.943587][T10198] do_sys_openat2+0x10f/0x1e0 [ 175.943614][T10198] ? __pfx_do_sys_openat2+0x10/0x10 [ 175.943644][T10198] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 175.943670][T10198] __ia32_compat_sys_openat+0x12d/0x210 [ 175.943695][T10198] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 175.943730][T10198] do_int80_emulation+0x166/0x650 [ 175.943759][T10198] asm_int80_emulation+0x1a/0x20 [ 175.943776][T10198] RIP: 0023:0xf71875ab [ 175.943791][T10198] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 175.943807][T10198] RSP: 002b:00000000f544603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 175.943825][T10198] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5446100 [ 175.943837][T10198] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.943847][T10198] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.943856][T10198] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 175.943866][T10198] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.943890][T10198] [ 176.014489][T10201] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer. [ 176.377982][ T8701] usb 12-1: new full-speed USB device number 8 using dummy_hcd [ 176.511668][ T5807] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.529343][ T8701] usb 12-1: not running at top speed; connect to a high speed hub [ 176.529372][ T8701] usb 12-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 176.530439][ T8701] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 176.532555][ T8701] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.532575][ T8701] usb 12-1: Product: syz [ 176.532587][ T8701] usb 12-1: Manufacturer: syz [ 176.532599][ T8701] usb 12-1: SerialNumber: syz [ 176.549070][ T8701] oti6858 12-1:1.0: oti6858 converter detected [ 176.551884][ T8701] usb 12-1: oti6858 converter now attached to ttyUSB0 [ 176.603599][ T5807] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.676966][ T5741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.682244][ T5741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.684515][ T5741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.688970][ T5741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.694005][ T5741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.715987][ T5807] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.781895][ T5807] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.841847][T10233] lo speed is unknown, defaulting to 1000 [ 176.960769][ T5807] bridge_slave_1: left allmulticast mode [ 176.960785][ T5807] bridge_slave_1: left promiscuous mode [ 176.961036][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.985390][ T5807] bridge_slave_0: left allmulticast mode [ 176.985407][ T5807] bridge_slave_0: left promiscuous mode [ 176.985518][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.207088][ T5807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.212536][ T5807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.213592][ T5807] bond0 (unregistering): Released all slaves [ 177.230478][ T5446] 8021q: adding VLAN 0 to HW filter on device eth18 [ 177.267918][ T63] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 177.275225][T10222] lo speed is unknown, defaulting to 1000 [ 177.418330][ T63] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 177.421193][ T63] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.423784][ T63] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 177.423798][ T63] usb 11-1: Product: syz [ 177.423805][ T63] usb 11-1: Manufacturer: syz [ 177.423812][ T63] usb 11-1: SerialNumber: syz [ 177.479660][ T5446] 8021q: adding VLAN 0 to HW filter on device eth19 [ 177.595972][ T5807] hsr_slave_0: left promiscuous mode [ 177.596588][ T5807] hsr_slave_1: left promiscuous mode [ 177.597105][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.597117][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.597597][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.597642][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.607410][ T5807] veth1_macvtap: left promiscuous mode [ 177.608172][ T5807] veth0_macvtap: left promiscuous mode [ 177.609349][ T5807] veth1_vlan: left promiscuous mode [ 177.609467][ T5807] veth0_vlan: left promiscuous mode [ 177.633736][ T63] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 177.762468][ T5807] team0 (unregistering): Port device team_slave_1 removed [ 177.767004][ T5807] team0 (unregistering): Port device team_slave_0 removed [ 177.836962][ T5446] 8021q: adding VLAN 0 to HW filter on device eth20 [ 177.887937][ C3] usblp0: nonzero write bulk status received: -71 [ 177.888167][ T5823] usb 11-1: USB disconnect, device number 13 [ 177.894711][ T5823] usblp0: removed [ 177.911770][T10222] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.911851][T10222] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.911913][T10222] bridge_slave_0: entered allmulticast mode [ 177.912721][T10222] bridge_slave_0: entered promiscuous mode [ 177.915137][T10222] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.915250][T10222] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.915319][T10222] bridge_slave_1: entered allmulticast mode [ 177.916021][T10222] bridge_slave_1: entered promiscuous mode [ 177.934478][T10222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.936100][T10222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.947897][T10222] team0: Port device team_slave_0 added [ 177.949199][T10222] team0: Port device team_slave_1 added [ 177.961172][T10222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.961182][T10222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.961195][T10222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.962132][T10222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.962140][T10222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.962153][T10222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.982223][T10222] hsr_slave_0: entered promiscuous mode [ 177.982644][T10222] hsr_slave_1: entered promiscuous mode [ 178.145171][ T5446] 8021q: adding VLAN 0 to HW filter on device eth21 [ 178.512825][T10222] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 178.516102][T10222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.516671][T10222] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 178.526360][T10222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.526954][T10222] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 178.527520][T10310] input: syz1 as /devices/virtual/input/input31 [ 178.531921][T10222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.540692][T10222] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 178.552543][T10222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 178.628739][T10222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.644425][T10222] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.647497][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.647542][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.659507][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.659552][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.685116][T10222] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.685130][T10222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.722237][T10330] FAULT_INJECTION: forcing a failure. [ 178.722237][T10330] name failslab, interval 1, probability 0, space 0, times 0 [ 178.722260][T10330] CPU: 1 UID: 0 PID: 10330 Comm: syz.6.1482 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.722277][T10330] Tainted: [L]=SOFTLOCKUP [ 178.722282][T10330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.722288][T10330] Call Trace: [ 178.722293][T10330] [ 178.722298][T10330] dump_stack_lvl+0x100/0x190 [ 178.722316][T10330] should_fail_ex.cold+0x5/0xa [ 178.722330][T10330] should_failslab+0xc2/0x120 [ 178.722346][T10330] kmem_cache_alloc_noprof+0x92/0x6a0 [ 178.722359][T10330] ? __up_read+0x333/0x980 [ 178.722375][T10330] ? prepare_creds+0x2c/0x950 [ 178.722391][T10330] prepare_creds+0x2c/0x950 [ 178.722405][T10330] prepare_exec_creds+0x10/0x240 [ 178.722420][T10330] bprm_execve+0xc0/0x1940 [ 178.722431][T10330] ? do_raw_spin_lock+0x128/0x260 [ 178.722448][T10330] ? alloc_bprm+0x54e/0x9e0 [ 178.722458][T10330] ? alloc_bprm+0x54e/0x9e0 [ 178.722468][T10330] ? __pfx_bprm_execve+0x10/0x10 [ 178.722479][T10330] ? copy_string_kernel+0x339/0x3f0 [ 178.722492][T10330] do_execveat_common.isra.0+0x4a5/0x580 [ 178.722513][T10330] __ia32_compat_sys_execveat+0xe4/0x130 [ 178.722528][T10330] __do_fast_syscall_32+0x13a/0x8b0 [ 178.722549][T10330] do_fast_syscall_32+0x32/0x70 [ 178.722567][T10330] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 178.722583][T10330] RIP: 0023:0xf7f63fec [ 178.722596][T10330] Code: Unable to access opcode bytes at 0xf7f63fc2. [ 178.722601][T10330] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000166 [ 178.722612][T10330] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 178.722620][T10330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 178.722627][T10330] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 178.722634][T10330] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 178.722726][T10330] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.722741][T10330] [ 178.797915][ T5735] Bluetooth: hci1: command tx timeout [ 178.805358][T10335] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1475'. [ 178.987387][T10222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.025830][T10222] veth0_vlan: entered promiscuous mode [ 179.029884][T10222] veth1_vlan: entered promiscuous mode [ 179.047187][T10222] veth0_macvtap: entered promiscuous mode [ 179.051020][T10222] veth1_macvtap: entered promiscuous mode [ 179.057384][T10222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.064294][T10222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.097857][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.119702][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.119745][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.119830][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.122368][ T5851] usb 12-1: USB disconnect, device number 8 [ 179.132707][ T5851] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 179.150108][ T5851] oti6858 12-1:1.0: device disconnected [ 179.254759][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.254773][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.305282][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.305302][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.332095][T10380] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1485'. [ 179.458894][T10369] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input32 [ 179.620876][T10397] FAULT_INJECTION: forcing a failure. [ 179.620876][T10397] name failslab, interval 1, probability 0, space 0, times 0 [ 179.620899][T10397] CPU: 3 UID: 0 PID: 10397 Comm: syz.0.1487 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.620915][T10397] Tainted: [L]=SOFTLOCKUP [ 179.620919][T10397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.620926][T10397] Call Trace: [ 179.620930][T10397] [ 179.620935][T10397] dump_stack_lvl+0x100/0x190 [ 179.620953][T10397] should_fail_ex.cold+0x5/0xa [ 179.620967][T10397] should_failslab+0xc2/0x120 [ 179.620983][T10397] __kmalloc_cache_node_noprof+0x94/0x720 [ 179.621001][T10397] ? __get_vm_area_node+0x124/0x350 [ 179.621018][T10397] __get_vm_area_node+0x124/0x350 [ 179.621033][T10397] ? xdp_umem_create+0xd1b/0x1200 [ 179.621048][T10397] get_vm_area_caller+0x71/0xa0 [ 179.621062][T10397] ? xdp_umem_create+0xd1b/0x1200 [ 179.621092][T10397] vmap+0x132/0x2e0 [ 179.621106][T10397] ? __pfx_vmap+0x10/0x10 [ 179.621119][T10397] ? xdp_umem_create+0x77e/0x1200 [ 179.621134][T10397] ? xdp_umem_create+0x77e/0x1200 [ 179.621152][T10397] xdp_umem_create+0xd1b/0x1200 [ 179.621171][T10397] xsk_setsockopt+0x7d8/0xab0 [ 179.621183][T10397] ? __pfx_aa_sk_perm+0x10/0x10 [ 179.621201][T10397] ? __pfx_xsk_setsockopt+0x10/0x10 [ 179.621214][T10397] ? find_held_lock+0x2b/0x80 [ 179.621228][T10397] ? aa_sock_opt_perm+0x114/0x1e0 [ 179.621242][T10397] ? __pfx_xsk_setsockopt+0x10/0x10 [ 179.621255][T10397] do_sock_setsockopt+0xf3/0x1d0 [ 179.621273][T10397] __sys_setsockopt+0x119/0x190 [ 179.621290][T10397] __ia32_sys_setsockopt+0xbc/0x160 [ 179.621303][T10397] ? __do_fast_syscall_32+0xb3/0x8b0 [ 179.621320][T10397] ? lockdep_hardirqs_on+0x7d/0x110 [ 179.621335][T10397] __do_fast_syscall_32+0x13a/0x8b0 [ 179.621354][T10397] do_fast_syscall_32+0x32/0x70 [ 179.621371][T10397] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.621386][T10397] RIP: 0023:0xf7f82fec [ 179.621400][T10397] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 179.621404][T10397] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 179.621415][T10397] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 179.621422][T10397] RDX: 0000000000000004 RSI: 0000000080000000 RDI: 0000000000000020 [ 179.621428][T10397] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.621434][T10397] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 179.621440][T10397] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.621454][T10397] [ 179.697486][T10404] FAULT_INJECTION: forcing a failure. [ 179.697486][T10404] name failslab, interval 1, probability 0, space 0, times 0 [ 179.697516][T10404] CPU: 3 UID: 0 PID: 10404 Comm: syz.0.1490 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.697549][T10404] Tainted: [L]=SOFTLOCKUP [ 179.697556][T10404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.697567][T10404] Call Trace: [ 179.697575][T10404] [ 179.697583][T10404] dump_stack_lvl+0x100/0x190 [ 179.697611][T10404] should_fail_ex.cold+0x5/0xa [ 179.697636][T10404] should_failslab+0xc2/0x120 [ 179.697659][T10404] __kmalloc_noprof+0xfc/0x840 [ 179.697697][T10404] ? constrain_params_by_rules+0x175/0xd20 [ 179.697733][T10404] constrain_params_by_rules+0x175/0xd20 [ 179.697759][T10404] ? kfree+0x22b/0x6d0 [ 179.697791][T10404] ? constrain_params_by_rules+0xa88/0xd20 [ 179.697820][T10404] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 179.697852][T10404] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 179.697877][T10404] ? snd_pcm_oss_write+0x4bb/0xa30 [ 179.697902][T10404] ? vfs_write+0x2aa/0x1050 [ 179.697940][T10404] ? ksys_write+0x12a/0x250 [ 179.697969][T10404] ? snd_interval_refine+0x2d0/0x580 [ 179.697997][T10404] snd_pcm_hw_refine+0x82a/0xb40 [ 179.698052][T10404] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 179.698081][T10404] ? snd_pcm_hw_refine+0x35c/0xb40 [ 179.698113][T10404] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 179.698145][T10404] ? kasan_save_track+0x14/0x30 [ 179.698166][T10404] ? __kasan_kmalloc+0xaa/0xb0 [ 179.698188][T10404] snd_pcm_hw_param_first+0x2b0/0x680 [ 179.698220][T10404] snd_pcm_hw_param_near.constprop.0+0x739/0x850 [ 179.698251][T10404] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 179.698280][T10404] ? calc_src_frames.isra.0+0x17c/0x1c0 [ 179.698298][T10404] ? calc_dst_frames.constprop.0.isra.0+0xed/0x120 [ 179.698319][T10404] snd_pcm_oss_change_params_locked+0x18d9/0x39f0 [ 179.698359][T10404] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 179.698389][T10404] ? __pfx___mutex_lock+0x10/0x10 [ 179.698430][T10404] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 179.698459][T10404] snd_pcm_oss_write+0x4bb/0xa30 [ 179.698487][T10404] ? bpf_lsm_file_permission+0x9/0x10 [ 179.698511][T10404] ? security_file_permission+0x76/0x210 [ 179.698552][T10404] vfs_write+0x2aa/0x1050 [ 179.698572][T10404] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 179.698601][T10404] ? lock_acquire+0x1d1/0x380 [ 179.698625][T10404] ? __fget_files+0x34/0x3d0 [ 179.698644][T10404] ? __pfx_vfs_write+0x10/0x10 [ 179.698661][T10404] ? find_held_lock+0x2b/0x80 [ 179.698681][T10404] ? __fget_files+0x215/0x3d0 [ 179.698697][T10404] ? __fget_files+0x215/0x3d0 [ 179.698722][T10404] ? __fget_files+0x21f/0x3d0 [ 179.698747][T10404] ksys_write+0x12a/0x250 [ 179.698764][T10404] ? __pfx_ksys_write+0x10/0x10 [ 179.698790][T10404] __do_fast_syscall_32+0x13a/0x8b0 [ 179.698821][T10404] do_fast_syscall_32+0x32/0x70 [ 179.698848][T10404] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.698871][T10404] RIP: 0023:0xf7f82fec [ 179.698889][T10404] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 179.698897][T10404] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 179.698915][T10404] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002000 [ 179.698926][T10404] RDX: 0000000000088020 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.698937][T10404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.698948][T10404] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 179.698959][T10404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.698985][T10404] [ 180.468082][ T8708] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 180.485969][T10442] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input33 [ 180.649139][ T8708] usb 5-1: Using ep0 maxpacket: 32 [ 180.649850][ T8708] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 180.650785][ T8708] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 180.650803][ T8708] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 180.650819][ T8708] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 180.650853][ T8708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 180.650870][ T8708] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 180.650888][ T8708] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 180.650919][ T8708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.667999][ T8708] usb 5-1: config 0 descriptor?? [ 180.712886][T10467] batman_adv: batadv0: Adding interface: syzkaller0 [ 180.712964][T10467] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.712994][T10467] batman_adv: batadv0: Interface activated: syzkaller0 [ 180.728295][ T5606] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.728321][ T5606] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.728338][ T5606] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.728356][ T5606] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.752689][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1509'. [ 180.755824][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1509'. [ 180.756377][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1509'. [ 180.805539][T10471] input: syz1 as /devices/virtual/input/input34 [ 180.868045][ T5735] Bluetooth: hci1: command tx timeout [ 180.882703][ T8708] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 180.890886][ T8708] usb 5-1: USB disconnect, device number 14 [ 180.903010][ T8708] usblp0: removed [ 180.920367][T10476] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1512'. [ 181.283486][T10493] input: syz1 as /devices/virtual/input/input35 [ 181.397885][ T8708] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 181.559220][ T8708] usb 5-1: Using ep0 maxpacket: 32 [ 181.559790][ T8708] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 181.565776][ T8708] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 181.565799][ T8708] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 181.565815][ T8708] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 181.565852][ T8708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 181.565873][ T8708] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 181.565894][ T8708] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 181.565949][ T8708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.571562][ T8708] usb 5-1: config 0 descriptor?? [ 181.794263][ T8708] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 182.126155][T10517] jffs2: notice: (10517) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 182.180639][T10519] usblp0:failed reading printer status (-32) [ 182.183225][ T5824] usb 5-1: USB disconnect, device number 15 [ 182.188736][ T5824] usblp0: removed [ 182.947897][ T5735] Bluetooth: hci1: command tx timeout [ 183.017834][ T5823] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 183.112215][T10507] syz.7.1525 (10507) used greatest stack depth: 18408 bytes left [ 183.187892][ T5823] usb 7-1: Using ep0 maxpacket: 32 [ 183.188919][ T5823] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 183.189700][ T5823] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 183.189714][ T5823] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 183.189725][ T5823] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 183.189747][ T5823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 183.189760][ T5823] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 183.189772][ T5823] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 183.189791][ T5823] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.191055][ T5823] usb 7-1: config 0 descriptor?? [ 183.407419][ T5823] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 183.543234][T10554] FAULT_INJECTION: forcing a failure. [ 183.543234][T10554] name failslab, interval 1, probability 0, space 0, times 0 [ 183.543269][T10554] CPU: 3 UID: 0 PID: 10554 Comm: syz.7.1539 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.543296][T10554] Tainted: [L]=SOFTLOCKUP [ 183.543303][T10554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.543315][T10554] Call Trace: [ 183.543322][T10554] [ 183.543329][T10554] dump_stack_lvl+0x100/0x190 [ 183.543359][T10554] should_fail_ex.cold+0x5/0xa [ 183.543385][T10554] should_failslab+0xc2/0x120 [ 183.543410][T10554] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 183.543442][T10554] ? xas_split_alloc+0x182/0x530 [ 183.543477][T10554] xas_split_alloc+0x182/0x530 [ 183.543511][T10554] __folio_split+0x95e/0x1bf0 [ 183.543539][T10554] ? __pfx___folio_split+0x10/0x10 [ 183.543555][T10554] ? folio_alloc_swap+0xbd8/0x1e70 [ 183.543587][T10554] ? folio_alloc_swap+0x4c6/0x1e70 [ 183.543610][T10554] shmem_writeout+0x786/0x1a00 [ 183.543642][T10554] ? __pfx_shmem_writeout+0x10/0x10 [ 183.543667][T10554] ? __pfx_try_to_unmap+0x10/0x10 [ 183.543696][T10554] ? find_held_lock+0x2b/0x80 [ 183.543718][T10554] ? inode_to_bdi+0x9e/0x160 [ 183.543736][T10554] ? folio_clear_dirty_for_io+0x178/0x960 [ 183.543771][T10554] shrink_folio_list+0x399a/0x5e40 [ 183.543806][T10554] ? lock_acquire+0x1d1/0x380 [ 183.543832][T10554] ? __pfx_shrink_folio_list+0x10/0x10 [ 183.543854][T10554] ? find_held_lock+0x2b/0x80 [ 183.543873][T10554] ? __page_table_check_zero+0x27f/0x410 [ 183.543899][T10554] ? __page_table_check_zero+0x27f/0x410 [ 183.543928][T10554] ? __page_table_check_zero+0x284/0x410 [ 183.543955][T10554] ? __lock_acquire+0x5c0/0x1f40 [ 183.543979][T10554] ? get_page_from_freelist+0x110d/0x35d0 [ 183.544014][T10554] ? ktime_expiry_to_cycles+0xc0/0x2c0 [ 183.544039][T10554] ? ktime_expiry_to_cycles+0x3c/0x2c0 [ 183.544072][T10554] reclaim_folio_list+0xe9/0x5e0 [ 183.544099][T10554] ? __pfx_reclaim_folio_list+0x10/0x10 [ 183.544122][T10554] ? find_held_lock+0x2b/0x80 [ 183.544150][T10554] ? irqentry_exit+0x24d/0xa10 [ 183.544178][T10554] ? lockdep_hardirqs_on+0x7d/0x110 [ 183.544216][T10554] reclaim_pages+0x428/0x5e0 [ 183.544243][T10554] ? __pfx_reclaim_pages+0x10/0x10 [ 183.544265][T10554] ? madvise_cold_or_pageout_pte_range+0x22ba/0x27b0 [ 183.544292][T10554] ? folio_isolate_lru+0xd6/0xe90 [ 183.544317][T10554] madvise_cold_or_pageout_pte_range+0x147e/0x27b0 [ 183.544348][T10554] ? rcu_read_unlock+0x17/0x60 [ 183.544375][T10554] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 183.544392][T10554] ? __mod_zone_page_state+0xdb/0x190 [ 183.544412][T10554] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 183.544436][T10554] walk_pgd_range+0xbef/0x1e00 [ 183.544452][T10554] ? find_held_lock+0x2b/0x80 [ 183.544470][T10554] ? __pfx_walk_pgd_range+0x10/0x10 [ 183.544483][T10554] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 183.544502][T10554] __walk_page_range+0x171/0x850 [ 183.544520][T10554] walk_page_range_vma_unsafe+0x209/0x8f0 [ 183.544536][T10554] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 183.544552][T10554] ? find_held_lock+0x2b/0x80 [ 183.544564][T10554] ? mlock_drain_local+0x254/0x4e0 [ 183.544574][T10554] ? mlock_drain_local+0x254/0x4e0 [ 183.544587][T10554] walk_page_range_vma+0x63/0x90 [ 183.544601][T10554] madvise_pageout+0x29e/0x5b0 [ 183.544617][T10554] ? __pfx_madvise_pageout+0x10/0x10 [ 183.544632][T10554] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 183.544657][T10554] madvise_vma_behavior+0x48b/0x2350 [ 183.544673][T10554] ? mas_prev+0xa4/0x100 [ 183.544685][T10554] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 183.544700][T10554] ? mas_walk+0x260/0x310 [ 183.544715][T10554] ? find_vma_prev+0xd8/0x150 [ 183.544746][T10554] ? __pfx___schedule+0x10/0x10 [ 183.544762][T10554] ? __pfx_find_vma_prev+0x10/0x10 [ 183.544780][T10554] ? preempt_schedule_common+0x3c/0xb0 [ 183.544795][T10554] ? preempt_schedule_thunk+0x16/0x40 [ 183.544814][T10554] madvise_walk_vmas+0x30e/0xc50 [ 183.544831][T10554] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 183.544847][T10554] ? plist_check_list+0x1b8/0x280 [ 183.544863][T10554] ? lock_acquire+0x1d1/0x380 [ 183.544883][T10554] madvise_do_behavior+0x1ea/0x510 [ 183.544903][T10554] ? futex_private_hash_put.part.0+0xdc/0x180 [ 183.544928][T10554] ? __pfx_madvise_do_behavior+0x10/0x10 [ 183.544951][T10554] ? down_read+0x13b/0x4c0 [ 183.544979][T10554] do_madvise+0x238/0x290 [ 183.545002][T10554] ? __pfx_do_madvise+0x10/0x10 [ 183.545026][T10554] ? do_futex+0x190/0x440 [ 183.545041][T10554] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 183.545068][T10554] __ia32_sys_madvise+0xa7/0x110 [ 183.545083][T10554] ? lockdep_hardirqs_on+0x7d/0x110 [ 183.545099][T10554] __do_fast_syscall_32+0x13a/0x8b0 [ 183.545118][T10554] do_fast_syscall_32+0x32/0x70 [ 183.545134][T10554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.545149][T10554] RIP: 0023:0xf708efec [ 183.545163][T10554] Code: Unable to access opcode bytes at 0xf708efc2. [ 183.545169][T10554] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000db [ 183.545182][T10554] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 00000000ffffffff [ 183.545190][T10554] RDX: 0000000000000015 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.545196][T10554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.545202][T10554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.545208][T10554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.545222][T10554] [ 183.607851][ C0] usblp0: nonzero read bulk status received: -71 [ 183.608219][ T9] usb 7-1: USB disconnect, device number 2 [ 183.821256][T10545] usblp0: removed [ 183.915075][ T8323] libceph: connect (1)[c::]:6789 error -101 [ 183.915399][ T8323] libceph: mon0 (1)[c::]:6789 connect error [ 183.917687][ T8323] libceph: connect (1)[c::]:6789 error -101 [ 183.920938][ T8323] libceph: mon0 (1)[c::]:6789 connect error [ 183.992129][T10567] ceph: No mds server is up or the cluster is laggy [ 184.147060][T10579] overlayfs: statfs failed on './file0' [ 184.659348][T10603] FAULT_INJECTION: forcing a failure. [ 184.659348][T10603] name failslab, interval 1, probability 0, space 0, times 0 [ 184.659382][T10603] CPU: 3 UID: 0 PID: 10603 Comm: syz.7.1558 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.659409][T10603] Tainted: [L]=SOFTLOCKUP [ 184.659417][T10603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.659429][T10603] Call Trace: [ 184.659436][T10603] [ 184.659444][T10603] dump_stack_lvl+0x100/0x190 [ 184.659476][T10603] should_fail_ex.cold+0x5/0xa [ 184.659502][T10603] should_failslab+0xc2/0x120 [ 184.659529][T10603] kmem_cache_alloc_noprof+0x92/0x6a0 [ 184.659552][T10603] ? security_file_alloc+0x34/0x2c0 [ 184.659586][T10603] security_file_alloc+0x34/0x2c0 [ 184.659613][T10603] init_file+0x95/0x480 [ 184.659636][T10603] alloc_empty_file+0x79/0x1c0 [ 184.659658][T10603] alloc_file_pseudo+0x183/0x290 [ 184.659683][T10603] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 184.659708][T10603] ? alloc_fd+0x471/0x7a0 [ 184.659732][T10603] sock_alloc_file+0x50/0x210 [ 184.659757][T10603] __sys_socket+0x1c0/0x260 [ 184.659776][T10603] ? __pfx___sys_socket+0x10/0x10 [ 184.659800][T10603] __ia32_sys_socket+0x72/0xb0 [ 184.659818][T10603] ? lockdep_hardirqs_on+0x7d/0x110 [ 184.659845][T10603] __do_fast_syscall_32+0x13a/0x8b0 [ 184.659874][T10603] ? lockdep_hardirqs_on+0x7d/0x110 [ 184.659901][T10603] do_fast_syscall_32+0x32/0x70 [ 184.659929][T10603] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.659951][T10603] RIP: 0023:0xf708efec [ 184.659968][T10603] Code: Unable to access opcode bytes at 0xf708efc2. [ 184.659976][T10603] RSP: 002b:00000000f547d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000167 [ 184.659993][T10603] RAX: ffffffffffffffda RBX: 000000000000001f RCX: 0000000000000003 [ 184.660004][T10603] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 00000000f547d53c [ 184.660015][T10603] RBP: 00000000f547d5ec R08: 0000000000000000 R09: 0000000000000000 [ 184.660025][T10603] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 184.660035][T10603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.660057][T10603] [ 185.018295][ T5735] Bluetooth: hci1: command tx timeout [ 185.102318][ T8701] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 185.258026][ T8701] usb 12-1: Using ep0 maxpacket: 32 [ 185.258891][ T8701] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 185.259912][ T8701] usb 12-1: config index 0 descriptor too short (expected 29220, got 36) [ 185.259925][ T8701] usb 12-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 185.259935][ T8701] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 185.259955][ T8701] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 185.259966][ T8701] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 185.259978][ T8701] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 185.259996][ T8701] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.263294][ T8701] usb 12-1: config 0 descriptor?? [ 185.475302][ T8701] usblp 12-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 185.635663][T10648] loop2: detected capacity change from 0 to 2640 [ 185.651982][T10648] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 185.652019][T10648] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 185.652038][T10648] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 185.652060][T10648] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 185.652081][T10648] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 185.652101][T10648] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 185.652127][T10648] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 185.652146][T10648] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 185.652164][T10648] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 185.652188][T10648] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 185.689422][ C0] usblp0: nonzero read bulk status received: -71 [ 185.690025][ T8701] usb 12-1: USB disconnect, device number 9 [ 185.745785][T10650] FAULT_INJECTION: forcing a failure. [ 185.745785][T10650] name failslab, interval 1, probability 0, space 0, times 0 [ 185.745818][T10650] CPU: 2 UID: 0 PID: 10650 Comm: syz.2.1577 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.745845][T10650] Tainted: [L]=SOFTLOCKUP [ 185.745852][T10650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.745863][T10650] Call Trace: [ 185.745869][T10650] [ 185.745875][T10650] dump_stack_lvl+0x100/0x190 [ 185.745928][T10650] should_fail_ex.cold+0x5/0xa [ 185.745955][T10650] should_failslab+0xc2/0x120 [ 185.745981][T10650] __kmalloc_noprof+0xfc/0x840 [ 185.746000][T10650] ? __list_lru_init+0xd9/0x4b0 [ 185.746030][T10650] __list_lru_init+0xd9/0x4b0 [ 185.746056][T10650] sget_fc+0xa76/0x1f20 [ 185.746077][T10650] ? __pfx_super_s_dev_test+0x10/0x10 [ 185.746104][T10650] ? __pfx_super_s_dev_set+0x10/0x10 [ 185.746128][T10650] ? __pfx_sget_fc+0x10/0x10 [ 185.746144][T10650] ? __mutex_unlock_slowpath+0x35d/0x930 [ 185.746172][T10650] ? _kstrtoull+0x144/0x200 [ 185.746199][T10650] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 185.746232][T10650] sget_dev+0x9b/0xe0 [ 185.746248][T10650] ? __pfx_sget_dev+0x10/0x10 [ 185.746265][T10650] ? get_mtd_device+0xde/0x1f0 [ 185.746288][T10650] ? __pfx_get_mtd_device+0x10/0x10 [ 185.746312][T10650] ? __pfx_jffs2_fill_super+0x10/0x10 [ 185.746330][T10650] mtd_get_sb+0x53/0x4c0 [ 185.746355][T10650] ? __pfx_jffs2_fill_super+0x10/0x10 [ 185.746369][T10650] get_tree_mtd+0x6f9/0x8a0 [ 185.746394][T10650] ? __pfx_get_tree_mtd+0x10/0x10 [ 185.746424][T10650] ? bpf_lsm_capable+0x9/0x10 [ 185.746450][T10650] ? security_capable+0x80/0x260 [ 185.746473][T10650] vfs_get_tree+0x92/0x320 [ 185.746498][T10650] path_mount+0x7d0/0x24c0 [ 185.746527][T10650] ? __pfx_path_mount+0x10/0x10 [ 185.746556][T10650] ? lockdep_hardirqs_on+0x7d/0x110 [ 185.746584][T10650] ? putname+0xb1/0x110 [ 185.746604][T10650] ? kmem_cache_free+0x127/0x6c0 [ 185.746640][T10650] ? __ia32_sys_mount+0x292/0x310 [ 185.746664][T10650] __ia32_sys_mount+0x292/0x310 [ 185.746688][T10650] ? __pfx___ia32_sys_mount+0x10/0x10 [ 185.746717][T10650] __do_fast_syscall_32+0x13a/0x8b0 [ 185.746748][T10650] do_fast_syscall_32+0x32/0x70 [ 185.746776][T10650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.746799][T10650] RIP: 0023:0xf70befec [ 185.746816][T10650] Code: Unable to access opcode bytes at 0xf70befc2. [ 185.746824][T10650] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 185.746843][T10650] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 00000000800000c0 [ 185.746854][T10650] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.746865][T10650] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.746876][T10650] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 185.746886][T10650] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.746911][T10650] [ 185.801452][T10652] GRED: Warning: Destroying shadowed VQ 0xe [ 185.894401][T10609] usblp0: removed [ 186.271883][T10675] netlink: 'syz.2.1587': attribute type 5 has an invalid length. [ 186.271901][T10675] netlink: 'syz.2.1587': attribute type 9 has an invalid length. [ 186.271912][T10675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'. [ 186.299333][T10392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.327915][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 186.349568][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 186.349734][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 186.349881][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 186.350018][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 186.350110][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 186.350243][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 186.350388][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 186.350541][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 186.473092][ T8323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.596966][T10700] FAULT_INJECTION: forcing a failure. [ 186.596966][T10700] name failslab, interval 1, probability 0, space 0, times 0 [ 186.596990][T10700] CPU: 1 UID: 0 PID: 10700 Comm: syz.7.1598 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.597008][T10700] Tainted: [L]=SOFTLOCKUP [ 186.597012][T10700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.597019][T10700] Call Trace: [ 186.597023][T10700] [ 186.597028][T10700] dump_stack_lvl+0x100/0x190 [ 186.597046][T10700] should_fail_ex.cold+0x5/0xa [ 186.597062][T10700] should_failslab+0xc2/0x120 [ 186.597078][T10700] __kmalloc_noprof+0xfc/0x840 [ 186.597090][T10700] ? tnode_new+0x2f7/0x350 [ 186.597105][T10700] tnode_new+0x2f7/0x350 [ 186.597117][T10700] resize+0xa60/0x22f0 [ 186.597129][T10700] ? __kmalloc_noprof+0x350/0x840 [ 186.597148][T10700] fib_insert_alias+0x9b3/0xe30 [ 186.597166][T10700] fib_trie_unmerge+0x289/0xbd0 [ 186.597183][T10700] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 186.597198][T10700] ? lock_acquire+0x1d1/0x380 [ 186.597216][T10700] fib_unmerge+0xee/0x510 [ 186.597230][T10700] ? fib_nl2rule_locked+0x3ef/0x740 [ 186.597243][T10700] fib4_rule_configure+0xaba/0x1160 [ 186.597255][T10700] ? fib_nl2rule_locked+0x3fe/0x740 [ 186.597266][T10700] fib_newrule+0x3c3/0x1e50 [ 186.597278][T10700] ? rcu_is_watching+0x13/0xc0 [ 186.597290][T10700] ? lockdep_hardirqs_on+0x7d/0x110 [ 186.597306][T10700] ? __pfx_fib_newrule+0x10/0x10 [ 186.597316][T10700] ? kfree_skbmem+0xc0/0x210 [ 186.597326][T10700] ? kmem_cache_free+0x127/0x6c0 [ 186.597342][T10700] ? skb_release_data+0x6ca/0x8e0 [ 186.597365][T10700] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 186.597381][T10700] ? find_held_lock+0x2b/0x80 [ 186.597393][T10700] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 186.597409][T10700] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 186.597426][T10700] ? __pfx_fib_nl_newrule+0x10/0x10 [ 186.597438][T10700] rtnetlink_rcv_msg+0x95e/0xe90 [ 186.597457][T10700] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 186.597476][T10700] ? ref_tracker_free+0x37e/0x6c0 [ 186.597494][T10700] netlink_rcv_skb+0x159/0x420 [ 186.597514][T10700] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 186.597532][T10700] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.597551][T10700] ? netlink_deliver_tap+0x1ae/0xcc0 [ 186.597566][T10700] netlink_unicast+0x585/0x850 [ 186.597582][T10700] ? __pfx_netlink_unicast+0x10/0x10 [ 186.597595][T10700] ? __build_skb_around+0x278/0x390 [ 186.597609][T10700] ? is_vmalloc_addr+0x86/0xa0 [ 186.597628][T10700] netlink_sendmsg+0x8b0/0xda0 [ 186.597644][T10700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.597659][T10700] ? apparmor_socket_sendmsg+0x165/0x280 [ 186.597677][T10700] ____sys_sendmsg+0xa4d/0xbe0 [ 186.597687][T10700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.597718][T10700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.597738][T10700] ___sys_sendmsg+0x190/0x1e0 [ 186.597751][T10700] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.597763][T10700] ? futex_wait+0x11e/0x370 [ 186.597784][T10700] ? find_held_lock+0x2b/0x80 [ 186.597805][T10700] __sys_sendmsg+0x160/0x210 [ 186.597821][T10700] ? __pfx___sys_sendmsg+0x10/0x10 [ 186.597845][T10700] __do_fast_syscall_32+0x13a/0x8b0 [ 186.597865][T10700] do_fast_syscall_32+0x32/0x70 [ 186.597881][T10700] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.597925][T10700] RIP: 0023:0xf708efec [ 186.597945][T10700] Code: Unable to access opcode bytes at 0xf708efc2. [ 186.597951][T10700] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 186.597963][T10700] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 186.597970][T10700] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 186.597977][T10700] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.597985][T10700] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 186.597992][T10700] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.598007][T10700] [ 187.004190][T10730] lo speed is unknown, defaulting to 1000 [ 187.270233][T10746] FAULT_INJECTION: forcing a failure. [ 187.270233][T10746] name failslab, interval 1, probability 0, space 0, times 0 [ 187.270255][T10746] CPU: 3 UID: 0 PID: 10746 Comm: syz.0.1618 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.270272][T10746] Tainted: [L]=SOFTLOCKUP [ 187.270277][T10746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.270286][T10746] Call Trace: [ 187.270290][T10746] [ 187.270295][T10746] dump_stack_lvl+0x100/0x190 [ 187.270313][T10746] should_fail_ex.cold+0x5/0xa [ 187.270328][T10746] should_failslab+0xc2/0x120 [ 187.270344][T10746] __kvmalloc_node_noprof+0x113/0x9b0 [ 187.270359][T10746] ? v4l2_ctrl_new+0x4a6/0x23a0 [ 187.270374][T10746] v4l2_ctrl_new+0x4a6/0x23a0 [ 187.270390][T10746] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 187.270407][T10746] v4l2_ctrl_new_std+0x1bb/0x290 [ 187.270424][T10746] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 187.270438][T10746] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 187.270456][T10746] ? media_request_object_init+0x105/0x180 [ 187.270474][T10746] vicodec_open+0x2a6/0xf70 [ 187.270487][T10746] ? kobject_get_unless_zero+0xe0/0x200 [ 187.270503][T10746] v4l2_open+0x1d2/0x490 [ 187.270515][T10746] ? __pfx_v4l2_open+0x10/0x10 [ 187.270525][T10746] chrdev_open+0x234/0x6a0 [ 187.270538][T10746] ? __pfx_apparmor_file_open+0x10/0x10 [ 187.270555][T10746] ? __pfx_chrdev_open+0x10/0x10 [ 187.270568][T10746] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 187.270586][T10746] do_dentry_open+0x6ab/0x14d0 [ 187.270598][T10746] ? __pfx_chrdev_open+0x10/0x10 [ 187.270613][T10746] vfs_open+0x82/0x3f0 [ 187.270629][T10746] path_openat+0x19fa/0x2440 [ 187.270644][T10746] ? __pfx_path_openat+0x10/0x10 [ 187.270660][T10746] do_file_open+0x20e/0x430 [ 187.270674][T10746] ? __pfx_do_file_open+0x10/0x10 [ 187.270696][T10746] ? _raw_spin_unlock+0x28/0x50 [ 187.270709][T10746] ? alloc_fd+0x471/0x7a0 [ 187.270726][T10746] do_sys_openat2+0x10f/0x1e0 [ 187.270742][T10746] ? __pfx_do_sys_openat2+0x10/0x10 [ 187.270756][T10746] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 187.270771][T10746] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 187.270786][T10746] __ia32_compat_sys_openat+0x12d/0x210 [ 187.270802][T10746] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 187.270823][T10746] do_int80_emulation+0x166/0x650 [ 187.270842][T10746] asm_int80_emulation+0x1a/0x20 [ 187.270853][T10746] RIP: 0023:0xf71875ab [ 187.270862][T10746] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 187.270872][T10746] RSP: 002b:00000000f544603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 187.270883][T10746] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5446100 [ 187.270890][T10746] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.270897][T10746] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.270903][T10746] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 187.270909][T10746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.270922][T10746] [ 187.442802][T10752] sctp: [Deprecated]: syz.0.1621 (pid 10752) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.442802][T10752] Use struct sctp_sack_info instead [ 187.513287][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.731343][ T8323] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 187.879040][ T8323] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.880017][ T8323] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 187.880042][ T8323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 187.880062][ T8323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 187.880080][ T8323] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 187.880119][ T8323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.887175][ T8323] usb 5-1: config 0 descriptor?? [ 188.128904][T10777] FAULT_INJECTION: forcing a failure. [ 188.128904][T10777] name failslab, interval 1, probability 0, space 0, times 0 [ 188.128936][T10777] CPU: 2 UID: 0 PID: 10777 Comm: syz.6.1629 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.128961][T10777] Tainted: [L]=SOFTLOCKUP [ 188.128968][T10777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.128980][T10777] Call Trace: [ 188.128986][T10777] [ 188.128994][T10777] dump_stack_lvl+0x100/0x190 [ 188.129022][T10777] should_fail_ex.cold+0x5/0xa [ 188.129042][T10777] should_failslab+0xc2/0x120 [ 188.129076][T10777] __kmalloc_noprof+0xfc/0x840 [ 188.129098][T10777] ? mpi_alloc_limb_space+0x31/0x60 [ 188.129127][T10777] mpi_alloc_limb_space+0x31/0x60 [ 188.129148][T10777] mpi_powm+0x1083/0x1e50 [ 188.129178][T10777] ? __pfx_mpi_powm+0x10/0x10 [ 188.129200][T10777] ? mpi_free+0xc0/0x150 [ 188.129220][T10777] ? mpi_free+0xe1/0x150 [ 188.129238][T10777] ? kfree+0x22b/0x6d0 [ 188.129262][T10777] ? mpi_free+0xe6/0x150 [ 188.129285][T10777] rsa_enc+0x1fe/0x3b0 [ 188.129307][T10777] ? __pfx_rsa_enc+0x10/0x10 [ 188.129328][T10777] ? __virt_addr_valid+0x239/0x430 [ 188.129348][T10777] ? sg_init_one+0xf5/0x1b0 [ 188.129367][T10777] rsassa_pkcs1_verify+0x4eb/0xc20 [ 188.129410][T10777] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 188.129441][T10777] ? rsa_max_size+0xd/0x70 [ 188.129459][T10777] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 188.129487][T10777] public_key_verify_signature+0x5ee/0x910 [ 188.129512][T10777] ? __pfx_public_key_verify_signature+0x10/0x10 [ 188.129544][T10777] ? asymmetric_key_generate_id+0x7e/0x180 [ 188.129575][T10777] x509_check_for_self_signed+0x325/0x510 [ 188.129595][T10777] x509_cert_parse+0x60c/0x910 [ 188.129618][T10777] x509_key_preparse+0x65/0x9c0 [ 188.129642][T10777] asymmetric_key_preparse+0xce/0x1d0 [ 188.129658][T10777] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 188.129676][T10777] __key_create_or_update+0x463/0xe30 [ 188.129703][T10777] ? __pfx___key_create_or_update+0x10/0x10 [ 188.129732][T10777] ? lookup_user_key+0x3f3/0x1300 [ 188.129766][T10777] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 188.129791][T10777] ? __pfx_keyring_search_iterator+0x10/0x10 [ 188.129809][T10777] key_create_or_update+0x42/0x60 [ 188.129836][T10777] __do_sys_add_key+0x2e8/0x460 [ 188.129857][T10777] ? __pfx___do_sys_add_key+0x10/0x10 [ 188.129875][T10777] ? ksys_write+0x1ac/0x250 [ 188.129932][T10777] __do_fast_syscall_32+0x13a/0x8b0 [ 188.129983][T10777] do_fast_syscall_32+0x32/0x70 [ 188.130011][T10777] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.130030][T10777] RIP: 0023:0xf7f63fec [ 188.130049][T10777] Code: Unable to access opcode bytes at 0xf7f63fc2. [ 188.130062][T10777] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 188.130081][T10777] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 188.130093][T10777] RDX: 0000000080000200 RSI: 0000000000000559 RDI: 00000000025671dc [ 188.130104][T10777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.130115][T10777] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 188.130126][T10777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.130149][T10777] [ 188.315030][ T8323] hid_parser_main: 24 callbacks suppressed [ 188.315044][ T8323] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 188.315059][ T8323] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 188.315070][ T8323] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 188.315082][ T8323] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 188.315093][ T8323] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 188.315105][ T8323] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 188.315116][ T8323] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 188.315127][ T8323] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 188.315139][ T8323] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 188.315150][ T8323] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 188.354278][ T8323] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 188.548013][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.584347][ T7787] usb 5-1: USB disconnect, device number 16 [ 189.005526][T10793] FAULT_INJECTION: forcing a failure. [ 189.005526][T10793] name failslab, interval 1, probability 0, space 0, times 0 [ 189.005547][T10793] CPU: 3 UID: 0 PID: 10793 Comm: syz.6.1635 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.005564][T10793] Tainted: [L]=SOFTLOCKUP [ 189.005568][T10793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.005575][T10793] Call Trace: [ 189.005579][T10793] [ 189.005584][T10793] dump_stack_lvl+0x100/0x190 [ 189.005603][T10793] should_fail_ex.cold+0x5/0xa [ 189.005618][T10793] should_failslab+0xc2/0x120 [ 189.005635][T10793] __kmalloc_cache_node_noprof+0x94/0x720 [ 189.005649][T10793] ? __alloc_workqueue+0x1211/0x1950 [ 189.005662][T10793] __alloc_workqueue+0x1211/0x1950 [ 189.005676][T10793] alloc_workqueue_noprof+0xc7/0x130 [ 189.005687][T10793] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 189.005700][T10793] ? __pfx___debug_object_init+0x10/0x10 [ 189.005719][T10793] nci_register_device+0x21e/0xb80 [ 189.005734][T10793] ? __pfx_nci_register_device+0x10/0x10 [ 189.005749][T10793] ? lockdep_init_map_type+0x5c/0x250 [ 189.005767][T10793] virtual_ncidev_open+0x141/0x220 [ 189.005785][T10793] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 189.005802][T10793] misc_open+0x26d/0x450 [ 189.005814][T10793] ? __pfx_misc_open+0x10/0x10 [ 189.005826][T10793] chrdev_open+0x234/0x6a0 [ 189.005838][T10793] ? __pfx_apparmor_file_open+0x10/0x10 [ 189.005856][T10793] ? __pfx_chrdev_open+0x10/0x10 [ 189.005869][T10793] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 189.005918][T10793] do_dentry_open+0x6ab/0x14d0 [ 189.005931][T10793] ? __pfx_chrdev_open+0x10/0x10 [ 189.005947][T10793] vfs_open+0x82/0x3f0 [ 189.005964][T10793] path_openat+0x19fa/0x2440 [ 189.005980][T10793] ? __pfx_path_openat+0x10/0x10 [ 189.005999][T10793] do_file_open+0x20e/0x430 [ 189.006013][T10793] ? __pfx_do_file_open+0x10/0x10 [ 189.006036][T10793] ? _raw_spin_unlock+0x28/0x50 [ 189.006050][T10793] ? alloc_fd+0x471/0x7a0 [ 189.006066][T10793] do_sys_openat2+0x10f/0x1e0 [ 189.006081][T10793] ? __pfx_do_sys_openat2+0x10/0x10 [ 189.006101][T10793] __ia32_compat_sys_openat+0x12d/0x210 [ 189.006117][T10793] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 189.006139][T10793] __do_fast_syscall_32+0x13a/0x8b0 [ 189.006157][T10793] do_fast_syscall_32+0x32/0x70 [ 189.006174][T10793] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.006188][T10793] RIP: 0023:0xf7f63fec [ 189.006200][T10793] Code: Unable to access opcode bytes at 0xf7f63fc2. [ 189.006205][T10793] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 189.006216][T10793] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 189.006223][T10793] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.006228][T10793] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.006235][T10793] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 189.006241][T10793] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.006254][T10793] [ 189.136501][T10797] bridge_slave_1: left allmulticast mode [ 189.136524][T10797] bridge_slave_1: left promiscuous mode [ 189.136737][T10797] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.150462][T10797] bridge_slave_0: left allmulticast mode [ 189.150481][T10797] bridge_slave_0: left promiscuous mode [ 189.150638][T10797] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.337998][T10392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.578719][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.666722][T10815] FAULT_INJECTION: forcing a failure. [ 189.666722][T10815] name fail_futex, interval 1, probability 0, space 0, times 1 [ 189.666756][T10815] CPU: 3 UID: 0 PID: 10815 Comm: syz.7.1642 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.666780][T10815] Tainted: [L]=SOFTLOCKUP [ 189.666788][T10815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.666799][T10815] Call Trace: [ 189.666805][T10815] [ 189.666812][T10815] dump_stack_lvl+0x100/0x190 [ 189.666841][T10815] should_fail_ex.cold+0x5/0xa [ 189.666865][T10815] get_futex_key+0x1d0/0x14f0 [ 189.666895][T10815] ? __pfx_get_futex_key+0x10/0x10 [ 189.666922][T10815] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 189.666954][T10815] futex_wait_setup+0x91/0x540 [ 189.666983][T10815] __futex_wait+0x19f/0x300 [ 189.667004][T10815] ? __pfx___futex_wait+0x10/0x10 [ 189.667025][T10815] ? __pfx_try_to_wake_up+0x10/0x10 [ 189.667048][T10815] ? futex_hash+0x311/0x400 [ 189.667074][T10815] ? __pfx_futex_wake_mark+0x10/0x10 [ 189.667099][T10815] ? find_held_lock+0x2b/0x80 [ 189.667118][T10815] ? futex_wake+0x4ea/0x5e0 [ 189.667161][T10815] futex_wait+0xe6/0x370 [ 189.667184][T10815] ? __pfx_futex_wait+0x10/0x10 [ 189.667213][T10815] ? find_held_lock+0x2b/0x80 [ 189.667232][T10815] ? __might_fault+0xc5/0x140 [ 189.667259][T10815] ? __might_fault+0xc5/0x140 [ 189.667289][T10815] do_futex+0x265/0x440 [ 189.667310][T10815] ? __pfx_do_futex+0x10/0x10 [ 189.667326][T10815] ? mntput+0x70/0xa0 [ 189.667345][T10815] ? do_handle_open+0x2b9/0xf20 [ 189.667374][T10815] __ia32_sys_futex_time32+0x2f4/0x470 [ 189.667397][T10815] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 189.667427][T10815] __do_fast_syscall_32+0x13a/0x8b0 [ 189.667457][T10815] do_fast_syscall_32+0x32/0x70 [ 189.667484][T10815] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.667506][T10815] RIP: 0023:0xf708efec [ 189.667526][T10815] Code: Unable to access opcode bytes at 0xf708efc2. [ 189.667535][T10815] RSP: 002b:00000000f545c5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 189.667551][T10815] RAX: ffffffffffffffda RBX: 00000000f7485020 RCX: 0000000000000080 [ 189.667562][T10815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7485024 [ 189.667579][T10815] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 189.667589][T10815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.667600][T10815] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.667621][T10815] [ 190.321727][T10826] FAULT_INJECTION: forcing a failure. [ 190.321727][T10826] name failslab, interval 1, probability 0, space 0, times 0 [ 190.321751][T10826] CPU: 3 UID: 0 PID: 10826 Comm: syz.6.1646 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.321767][T10826] Tainted: [L]=SOFTLOCKUP [ 190.321771][T10826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 190.321778][T10826] Call Trace: [ 190.321782][T10826] [ 190.321787][T10826] dump_stack_lvl+0x100/0x190 [ 190.321807][T10826] should_fail_ex.cold+0x5/0xa [ 190.321823][T10826] should_failslab+0xc2/0x120 [ 190.321840][T10826] __kmalloc_cache_noprof+0x91/0x6d0 [ 190.321858][T10826] ? nft_add_set_elem+0x32a9/0x4280 [ 190.321904][T10826] nft_add_set_elem+0x32a9/0x4280 [ 190.321927][T10826] ? fred_int80_emulation+0x5a0/0x650 [ 190.321950][T10826] ? __pfx_nft_add_set_elem+0x10/0x10 [ 190.321974][T10826] ? down_read_killable_nested+0x2b0/0x520 [ 190.321986][T10826] ? net_generic+0x25/0x2a0 [ 190.321999][T10826] ? find_held_lock+0x2b/0x80 [ 190.322011][T10826] ? net_generic+0xea/0x2a0 [ 190.322024][T10826] ? net_generic+0xea/0x2a0 [ 190.322049][T10826] ? __nla_validate_parse+0x1e7/0x28b0 [ 190.322078][T10826] ? nla_strcmp+0xff/0x130 [ 190.322097][T10826] ? nft_set_lookup_global+0x163/0x390 [ 190.322111][T10826] nf_tables_newsetelem+0x721/0xa60 [ 190.322135][T10826] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 190.322154][T10826] ? net_generic+0x25/0x2a0 [ 190.322180][T10826] ? __nla_parse+0x40/0x60 [ 190.322192][T10826] nfnetlink_rcv_batch+0x1410/0x2880 [ 190.322215][T10826] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 190.322231][T10826] ? find_held_lock+0x2b/0x80 [ 190.322244][T10826] ? __local_bh_enable_ip+0xa5/0x120 [ 190.322260][T10826] ? lockdep_hardirqs_on+0x7d/0x110 [ 190.322275][T10826] ? __dev_queue_xmit+0xa12/0x4970 [ 190.322319][T10826] ? __nla_parse+0x40/0x60 [ 190.322332][T10826] nfnetlink_rcv+0x3bd/0x440 [ 190.322350][T10826] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 190.322371][T10826] netlink_unicast+0x585/0x850 [ 190.322388][T10826] ? __pfx_netlink_unicast+0x10/0x10 [ 190.322406][T10826] netlink_sendmsg+0x8b0/0xda0 [ 190.322424][T10826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.322440][T10826] ? apparmor_socket_sendmsg+0x165/0x280 [ 190.322457][T10826] ____sys_sendmsg+0xa4d/0xbe0 [ 190.322467][T10826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.322480][T10826] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.322497][T10826] ___sys_sendmsg+0x190/0x1e0 [ 190.322509][T10826] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.322520][T10826] ? futex_wait+0x11e/0x370 [ 190.322538][T10826] ? find_held_lock+0x2b/0x80 [ 190.322557][T10826] __sys_sendmsg+0x160/0x210 [ 190.322573][T10826] ? __pfx___sys_sendmsg+0x10/0x10 [ 190.322594][T10826] __do_fast_syscall_32+0x13a/0x8b0 [ 190.322613][T10826] do_fast_syscall_32+0x32/0x70 [ 190.322629][T10826] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.322643][T10826] RIP: 0023:0xf7f63fec [ 190.322656][T10826] Code: Unable to access opcode bytes at 0xf7f63fc2. [ 190.322661][T10826] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 190.322672][T10826] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 190.322679][T10826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 190.322685][T10826] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.322691][T10826] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 190.322697][T10826] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.322711][T10826] [ 190.622244][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.949402][T10844] overlayfs: upper fs does not support file handles, falling back to index=off. [ 191.038299][T10846] Invalid source name [ 191.038312][T10846] UBIFS error (pid: 10846): cannot open "./file0", error -22 [ 191.178212][T10392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.182343][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.283808][T10860] size and base must be multiples of 4 kiB [ 191.283822][T10860] CPU: 1 UID: 0 PID: 10860 Comm: syz.6.1653 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.283838][T10860] Tainted: [L]=SOFTLOCKUP [ 191.283843][T10860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.283850][T10860] Call Trace: [ 191.283854][T10860] [ 191.283859][T10860] dump_stack_lvl+0x100/0x190 [ 191.283878][T10860] mtrr_add.cold+0x74/0x87 [ 191.283890][T10860] mtrr_ioctl+0x25a/0xcf0 [ 191.283909][T10860] ? __pfx_mtrr_ioctl+0x10/0x10 [ 191.283926][T10860] ? __fget_files+0x34/0x3d0 [ 191.283940][T10860] ? find_held_lock+0x2b/0x80 [ 191.283956][T10860] ? __fget_files+0x21f/0x3d0 [ 191.283967][T10860] ? __pfx_mtrr_ioctl+0x10/0x10 [ 191.283983][T10860] proc_reg_compat_ioctl+0x229/0x320 [ 191.283997][T10860] ? __pfx_proc_reg_compat_ioctl+0x10/0x10 [ 191.284011][T10860] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 191.284030][T10860] __do_fast_syscall_32+0x13a/0x8b0 [ 191.284049][T10860] do_fast_syscall_32+0x32/0x70 [ 191.284065][T10860] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 191.284079][T10860] RIP: 0023:0xf7f63fec [ 191.284091][T10860] Code: Unable to access opcode bytes at 0xf7f63fc2. [ 191.284096][T10860] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 191.284107][T10860] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040104d01 [ 191.284114][T10860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.284120][T10860] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.284126][T10860] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 191.284132][T10860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.284145][T10860] [ 191.658040][ T8323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.766391][T10883] binder: 10881:10883 ioctl c0306201 80000640 returned -22 [ 191.818827][T10392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.065528][T10902] netlink: 'syz.6.1663': attribute type 1 has an invalid length. [ 192.388948][ T8701] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 192.548434][ T8701] usb 12-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 192.548850][ T8701] usb 12-1: config 0 has no interfaces? [ 192.550426][ T8701] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.550439][ T8701] usb 12-1: Product: syz [ 192.550446][ T8701] usb 12-1: Manufacturer: syz [ 192.550453][ T8701] usb 12-1: SerialNumber: syz [ 192.552312][ T8701] usb 12-1: config 0 descriptor?? [ 192.637210][T10920] tipc: Resetting bearer [ 192.664472][T10920] tipc: Disabling bearer [ 192.698101][ T5807] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.698164][ T5807] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.698182][ T5807] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.698202][ T5807] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.698338][ T8323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.759374][ T8701] usb 12-1: USB disconnect, device number 10 [ 193.098213][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.373298][T10955] FAULT_INJECTION: forcing a failure. [ 193.373298][T10955] name failslab, interval 1, probability 0, space 0, times 0 [ 193.373320][T10955] CPU: 0 UID: 0 PID: 10955 Comm: syz.7.1684 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.373337][T10955] Tainted: [L]=SOFTLOCKUP [ 193.373343][T10955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.373349][T10955] Call Trace: [ 193.373354][T10955] [ 193.373359][T10955] dump_stack_lvl+0x100/0x190 [ 193.373379][T10955] should_fail_ex.cold+0x5/0xa [ 193.373402][T10955] should_failslab+0xc2/0x120 [ 193.373420][T10955] __kmalloc_cache_noprof+0x91/0x6d0 [ 193.373439][T10955] ? sctp_add_bind_addr+0xae/0x3e0 [ 193.373458][T10955] sctp_add_bind_addr+0xae/0x3e0 [ 193.373477][T10955] sctp_copy_local_addr_list+0x349/0x550 [ 193.373490][T10955] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 193.373503][T10955] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 193.373517][T10955] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 193.373534][T10955] sctp_bind_addr_copy+0xe0/0x530 [ 193.373553][T10955] sctp_connect_new_asoc+0x1c9/0x770 [ 193.373569][T10955] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 193.373588][T10955] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 193.373605][T10955] sctp_sendmsg+0x1743/0x22e0 [ 193.373623][T10955] ? __pfx_sctp_sendmsg+0x10/0x10 [ 193.373637][T10955] ? __lock_acquire+0x5c0/0x1f40 [ 193.373654][T10955] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 193.373671][T10955] ? aa_sock_msg_perm+0x11e/0x200 [ 193.373686][T10955] ? __pfx_sctp_sendmsg+0x10/0x10 [ 193.373700][T10955] inet_sendmsg+0x11c/0x140 [ 193.373712][T10955] ____sys_sendmsg+0x9c9/0xbe0 [ 193.373723][T10955] ? __pfx_inet_sendmsg+0x10/0x10 [ 193.373734][T10955] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.373747][T10955] ? futex_unqueue+0x133/0x2c0 [ 193.373769][T10955] ___sys_sendmsg+0x190/0x1e0 [ 193.373781][T10955] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.373792][T10955] ? __pfx___futex_wait+0x10/0x10 [ 193.373805][T10955] ? __pfx_try_to_wake_up+0x10/0x10 [ 193.373820][T10955] ? futex_hash+0x311/0x400 [ 193.373840][T10955] ? __fget_files+0x34/0x3d0 [ 193.373890][T10955] __sys_sendmmsg+0x309/0x440 [ 193.373910][T10955] ? __pfx___sys_sendmmsg+0x10/0x10 [ 193.373926][T10955] ? file_init_path+0x48e/0x670 [ 193.373944][T10955] ? __pfx_do_futex+0x10/0x10 [ 193.373962][T10955] ? xfd_validate_state+0x129/0x190 [ 193.373984][T10955] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 193.373997][T10955] ? lockdep_hardirqs_on+0x7d/0x110 [ 193.374013][T10955] __do_fast_syscall_32+0x13a/0x8b0 [ 193.374032][T10955] do_fast_syscall_32+0x32/0x70 [ 193.374049][T10955] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 193.374063][T10955] RIP: 0023:0xf708efec [ 193.374076][T10955] Code: Unable to access opcode bytes at 0xf708efc2. [ 193.374081][T10955] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 193.374092][T10955] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002f00 [ 193.374099][T10955] RDX: 0000000000000001 RSI: 0000000010004040 RDI: 0000000000000000 [ 193.374106][T10955] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 193.374112][T10955] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 193.374119][T10955] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 193.374133][T10955] [ 193.486121][T10959] __nla_validate_parse: 30 callbacks suppressed [ 193.486135][T10959] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1686'. [ 193.742712][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.743733][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.743830][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.105392][T10983] FAULT_INJECTION: forcing a failure. [ 194.105392][T10983] name failslab, interval 1, probability 0, space 0, times 0 [ 194.105412][T10983] CPU: 3 UID: 0 PID: 10983 Comm: syz.0.1696 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.105428][T10983] Tainted: [L]=SOFTLOCKUP [ 194.105433][T10983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.105439][T10983] Call Trace: [ 194.105444][T10983] [ 194.105449][T10983] dump_stack_lvl+0x100/0x190 [ 194.105468][T10983] should_fail_ex.cold+0x5/0xa [ 194.105484][T10983] should_failslab+0xc2/0x120 [ 194.105500][T10983] __kmalloc_noprof+0xfc/0x840 [ 194.105513][T10983] ? vb2_core_allocated_buffers_storage+0xc4/0x220 [ 194.105531][T10983] vb2_core_allocated_buffers_storage+0xc4/0x220 [ 194.105546][T10983] vb2_core_reqbufs+0x382/0xf30 [ 194.105653][T10983] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 194.105669][T10983] ? trace_contention_end+0x126/0x160 [ 194.105689][T10983] ? __video_do_ioctl+0x50f/0xdf0 [ 194.105709][T10983] vb2_reqbufs+0x1a3/0x1f0 [ 194.105721][T10983] ? __pfx_vb2_reqbufs+0x10/0x10 [ 194.105736][T10983] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 194.105753][T10983] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 194.105769][T10983] v4l_reqbufs+0x175/0x1d0 [ 194.105786][T10983] __video_do_ioctl+0xb2a/0xdf0 [ 194.105804][T10983] ? __might_fault+0xc5/0x140 [ 194.105821][T10983] ? __pfx___video_do_ioctl+0x10/0x10 [ 194.105843][T10983] video_usercopy+0x3d3/0x14c0 [ 194.105882][T10983] ? __pfx___video_do_ioctl+0x10/0x10 [ 194.105902][T10983] ? __pfx_video_usercopy+0x10/0x10 [ 194.105923][T10983] ? __fget_files+0x215/0x3d0 [ 194.105937][T10983] ? hook_file_ioctl_common+0x140/0x440 [ 194.105958][T10983] v4l2_ioctl+0x1bd/0x250 [ 194.105972][T10983] v4l2_compat_ioctl32+0x20f/0x2d0 [ 194.105987][T10983] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 194.106003][T10983] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 194.106023][T10983] __do_fast_syscall_32+0x13a/0x8b0 [ 194.106040][T10983] ? lockdep_hardirqs_on+0x7d/0x110 [ 194.106057][T10983] do_fast_syscall_32+0x32/0x70 [ 194.106074][T10983] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.106088][T10983] RIP: 0023:0xf7f82fec [ 194.106102][T10983] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 194.106108][T10983] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 194.106119][T10983] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0145608 [ 194.106126][T10983] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.106133][T10983] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 194.106139][T10983] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 194.106146][T10983] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.106160][T10983] [ 194.779358][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.035399][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1703'. [ 195.051715][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1703'. [ 195.149804][T11009] batman_adv: batadv0: Adding interface: syzkaller0 [ 195.149816][T11009] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.149833][T11009] batman_adv: batadv0: Interface activated: syzkaller0 [ 195.817932][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.038130][ T8323] usb 11-1: new full-speed USB device number 14 using dummy_hcd [ 196.188280][ T8323] usb 11-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 196.189125][ T8323] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 196.189142][ T8323] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 196.189155][ T8323] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 196.192392][ T8323] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.192405][ T8323] usb 11-1: Product: syz [ 196.192412][ T8323] usb 11-1: Manufacturer: syz [ 196.192425][ T8323] usb 11-1: SerialNumber: syz [ 196.194450][ T8323] usb 11-1: config 0 descriptor?? [ 196.194936][T11028] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 196.277893][ T8323] rc_core: IR keymap rc-streamzap not found [ 196.277905][ T8323] Registered IR keymap rc-empty [ 196.278609][ T8323] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 196.279799][ T8323] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input36 [ 196.412710][T11028] xt_SECMARK: invalid mode: 0 [ 196.414527][ T7787] usb 11-1: USB disconnect, device number 14 [ 196.790346][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.858296][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.878545][T11052] FAULT_INJECTION: forcing a failure. [ 196.878545][T11052] name failslab, interval 1, probability 0, space 0, times 0 [ 196.878579][T11052] CPU: 2 UID: 0 PID: 11052 Comm: syz.7.1719 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.878605][T11052] Tainted: [L]=SOFTLOCKUP [ 196.878613][T11052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.878626][T11052] Call Trace: [ 196.878634][T11052] [ 196.878643][T11052] dump_stack_lvl+0x100/0x190 [ 196.878673][T11052] should_fail_ex.cold+0x5/0xa [ 196.878701][T11052] should_failslab+0xc2/0x120 [ 196.878727][T11052] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 196.878748][T11052] ? kasan_save_stack+0x3f/0x50 [ 196.878769][T11052] ? kasan_save_stack+0x30/0x50 [ 196.878791][T11052] ? shmem_alloc_inode+0x25/0x50 [ 196.878815][T11052] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 196.878837][T11052] shmem_alloc_inode+0x25/0x50 [ 196.878858][T11052] alloc_inode+0x68/0x250 [ 196.878886][T11052] new_inode+0x22/0x1c0 [ 196.878916][T11052] shmem_get_inode+0x1e3/0xf70 [ 196.878941][T11052] ? __pfx_shmem_get_inode+0x10/0x10 [ 196.878972][T11052] __shmem_file_setup+0x168/0x460 [ 196.878996][T11052] ? __pfx___shmem_file_setup+0x10/0x10 [ 196.879022][T11052] ? __rwlock_init+0x37/0x150 [ 196.879055][T11052] drm_gem_object_init+0x180/0x1b0 [ 196.879110][T11052] ? __pfx_drm_gem_object_init+0x10/0x10 [ 196.879133][T11052] ? vgem_gem_create_object+0x3b/0xb0 [ 196.879157][T11052] ? __pfx_vgem_gem_create_object+0x10/0x10 [ 196.879183][T11052] __drm_gem_shmem_create+0x107/0x410 [ 196.879215][T11052] drm_gem_shmem_create_with_handle+0x28/0x120 [ 196.879238][T11052] drm_gem_shmem_dumb_create+0x83/0xa0 [ 196.879258][T11052] ? find_held_lock+0x2b/0x80 [ 196.879279][T11052] drm_mode_create_dumb+0x272/0x300 [ 196.879312][T11052] drm_mode_create_dumb_ioctl+0x24/0xe0 [ 196.879343][T11052] drm_ioctl_kernel+0x1f3/0x3e0 [ 196.879368][T11052] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 196.879399][T11052] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 196.879432][T11052] drm_ioctl+0x5e6/0xc60 [ 196.879463][T11052] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 196.879494][T11052] ? __pfx_drm_ioctl+0x10/0x10 [ 196.879538][T11052] drm_compat_ioctl+0x386/0x4c0 [ 196.879561][T11052] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 196.879582][T11052] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 196.879614][T11052] __do_fast_syscall_32+0x13a/0x8b0 [ 196.879644][T11052] ? lockdep_hardirqs_on+0x7d/0x110 [ 196.879675][T11052] do_fast_syscall_32+0x32/0x70 [ 196.879704][T11052] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.879728][T11052] RIP: 0023:0xf708efec [ 196.879750][T11052] Code: Unable to access opcode bytes at 0xf708efc2. [ 196.879759][T11052] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 196.879779][T11052] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c02064b2 [ 196.879791][T11052] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 196.879803][T11052] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 196.879815][T11052] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 196.879829][T11052] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 196.879855][T11052] [ 197.053437][T11054] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1720'. [ 197.834397][T11115] FAULT_INJECTION: forcing a failure. [ 197.834397][T11115] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 197.834433][T11115] CPU: 0 UID: 0 PID: 11115 Comm: syz.0.1732 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.834462][T11115] Tainted: [L]=SOFTLOCKUP [ 197.834469][T11115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.834481][T11115] Call Trace: [ 197.834488][T11115] [ 197.834496][T11115] dump_stack_lvl+0x100/0x190 [ 197.834528][T11115] should_fail_ex.cold+0x5/0xa [ 197.834551][T11115] ? prepare_alloc_pages+0x16d/0x5b0 [ 197.834582][T11115] should_fail_alloc_page+0xeb/0x140 [ 197.834611][T11115] prepare_alloc_pages+0x1f0/0x5b0 [ 197.834641][T11115] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 197.834665][T11115] ? prepare_alloc_pages+0x151/0x5b0 [ 197.834690][T11115] ? is_bpf_text_address+0x94/0x1a0 [ 197.834719][T11115] ? rcu_is_watching+0x13/0xc0 [ 197.834739][T11115] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 197.834762][T11115] ? do_raw_spin_lock+0x128/0x260 [ 197.834791][T11115] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 197.834816][T11115] ? mark_held_locks+0x40/0x70 [ 197.834841][T11115] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 197.834875][T11115] ? lockdep_hardirqs_on+0x7d/0x110 [ 197.834903][T11115] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 197.834930][T11115] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 197.834958][T11115] ? kasan_save_track+0x14/0x30 [ 197.834981][T11115] ? __kasan_slab_alloc+0x89/0x90 [ 197.835004][T11115] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 197.835027][T11115] ? alloc_vmap_area+0x640/0x2bb0 [ 197.835049][T11115] ? __get_vm_area_node+0x1ed/0x350 [ 197.835072][T11115] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 197.835099][T11115] ? vmalloc_user_noprof+0x9e/0xe0 [ 197.835123][T11115] ? vb2_vmalloc_alloc+0x135/0x410 [ 197.835147][T11115] ? __vb2_queue_alloc+0x8d5/0x1160 [ 197.835169][T11115] ? vb2_core_reqbufs+0x899/0xf30 [ 197.835190][T11115] ? __vb2_init_fileio+0x32d/0x1000 [ 197.835213][T11115] ? vb2_core_poll+0x477/0x740 [ 197.835234][T11115] ? vb2_poll+0x4b/0xe0 [ 197.835252][T11115] ? vb2_fop_poll+0x10e/0x350 [ 197.835271][T11115] ? v4l2_poll+0x15f/0x220 [ 197.835296][T11115] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 197.835322][T11115] ? policy_nodemask+0xed/0x4f0 [ 197.835351][T11115] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 197.835385][T11115] __kasan_populate_vmalloc+0xf0/0x210 [ 197.835413][T11115] alloc_vmap_area+0x95d/0x2bb0 [ 197.835443][T11115] ? kasan_save_track+0x14/0x30 [ 197.835464][T11115] ? __kasan_kmalloc+0xaa/0xb0 [ 197.835485][T11115] ? __pfx_alloc_vmap_area+0x10/0x10 [ 197.835509][T11115] ? __vb2_queue_alloc+0x8d5/0x1160 [ 197.835530][T11115] ? __get_vm_area_node+0x124/0x350 [ 197.835557][T11115] __get_vm_area_node+0x1ed/0x350 [ 197.835586][T11115] __vmalloc_node_range_noprof+0x268/0x1420 [ 197.835614][T11115] ? vb2_vmalloc_alloc+0x135/0x410 [ 197.835648][T11115] ? vb2_vmalloc_alloc+0x135/0x410 [ 197.835678][T11115] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 197.835710][T11115] ? __kasan_kmalloc+0xaa/0xb0 [ 197.835735][T11115] ? vb2_vmalloc_alloc+0x135/0x410 [ 197.835759][T11115] vmalloc_user_noprof+0x9e/0xe0 [ 197.835785][T11115] ? vb2_vmalloc_alloc+0x135/0x410 [ 197.835809][T11115] vb2_vmalloc_alloc+0x135/0x410 [ 197.835833][T11115] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 197.835859][T11115] __vb2_queue_alloc+0x8d5/0x1160 [ 197.835922][T11115] vb2_core_reqbufs+0x899/0xf30 [ 197.835954][T11115] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 197.835988][T11115] ? __vb2_init_fileio+0x18f/0x1000 [ 197.836016][T11115] ? __pfx___pollwait+0x10/0x10 [ 197.836037][T11115] __vb2_init_fileio+0x32d/0x1000 [ 197.836060][T11115] ? lockdep_hardirqs_on+0x7d/0x110 [ 197.836089][T11115] ? __pollwait+0x276/0x490 [ 197.836112][T11115] ? __pfx___pollwait+0x10/0x10 [ 197.836131][T11115] vb2_core_poll+0x477/0x740 [ 197.836157][T11115] vb2_poll+0x4b/0xe0 [ 197.836179][T11115] vb2_fop_poll+0x10e/0x350 [ 197.836203][T11115] ? __pfx_vb2_fop_poll+0x10/0x10 [ 197.836224][T11115] v4l2_poll+0x15f/0x220 [ 197.836243][T11115] ? __pfx_v4l2_poll+0x10/0x10 [ 197.836261][T11115] do_sys_poll+0x6e5/0xe90 [ 197.836279][T11115] ? rcu_is_watching+0x13/0xc0 [ 197.836308][T11115] ? __pfx_do_sys_poll+0x10/0x10 [ 197.836350][T11115] ? __futex_wait+0x256/0x300 [ 197.836374][T11115] ? __pfx___pollwait+0x10/0x10 [ 197.836393][T11115] ? __pfx_pollwake+0x10/0x10 [ 197.836444][T11115] ? ktime_get_ts64+0x306/0x420 [ 197.836470][T11115] ? ktime_get_ts64+0x318/0x420 [ 197.836489][T11115] ? ktime_get_ts64+0x257/0x420 [ 197.836518][T11115] __ia32_sys_poll+0x1b3/0x420 [ 197.836537][T11115] ? __pfx___ia32_sys_poll+0x10/0x10 [ 197.836563][T11115] __do_fast_syscall_32+0x13a/0x8b0 [ 197.836610][T11115] ? lockdep_hardirqs_on+0x7d/0x110 [ 197.836639][T11115] do_fast_syscall_32+0x32/0x70 [ 197.836665][T11115] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.836686][T11115] RIP: 0023:0xf7f82fec [ 197.836706][T11115] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 197.836715][T11115] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 00000000000000a8 [ 197.836734][T11115] RAX: ffffffffffffffda RBX: 00000000800005c0 RCX: 0000000000000001 [ 197.836748][T11115] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.836759][T11115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.836770][T11115] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 197.836781][T11115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.836806][T11115] [ 197.840498][T11115] syz.0.1732: vmalloc error: size 831488, align 0x1000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 197.840586][T11115] CPU: 0 UID: 0 PID: 11115 Comm: syz.0.1732 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.840614][T11115] Tainted: [L]=SOFTLOCKUP [ 197.840622][T11115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.840636][T11115] Call Trace: [ 197.840643][T11115] [ 197.840653][T11115] dump_stack_lvl+0x100/0x190 [ 197.840685][T11115] warn_alloc.cold+0x9e/0xb2 [ 197.840707][T11115] ? __pfx_warn_alloc+0x10/0x10 [ 197.840727][T11115] ? lockdep_hardirqs_on+0x7d/0x110 [ 197.840759][T11115] ? __get_vm_area_node+0x2f0/0x350 [ 197.840790][T11115] ? __get_vm_area_node+0x22b/0x350 [ 197.840821][T11115] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 197.840858][T11115] ? vb2_vmalloc_alloc+0x135/0x410 [ 197.840897][T11115] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 197.840930][T11115] ? __kasan_kmalloc+0xaa/0xb0 [ 197.840957][T11115] ? vb2_vmalloc_alloc+0x135/0x410 [ 197.840983][T11115] vmalloc_user_noprof+0x9e/0xe0 [ 197.841009][T11115] ? vb2_vmalloc_alloc+0x135/0x410 [ 197.841034][T11115] vb2_vmalloc_alloc+0x135/0x410 [ 197.841057][T11115] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 197.841083][T11115] __vb2_queue_alloc+0x8d5/0x1160 [ 197.841121][T11115] vb2_core_reqbufs+0x899/0xf30 [ 197.841151][T11115] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 197.841183][T11115] ? __vb2_init_fileio+0x18f/0x1000 [ 197.841211][T11115] ? __pfx___pollwait+0x10/0x10 [ 197.841231][T11115] __vb2_init_fileio+0x32d/0x1000 [ 197.841253][T11115] ? lockdep_hardirqs_on+0x7d/0x110 [ 197.841282][T11115] ? __pollwait+0x276/0x490 [ 197.841303][T11115] ? __pfx___pollwait+0x10/0x10 [ 197.841321][T11115] vb2_core_poll+0x477/0x740 [ 197.841346][T11115] vb2_poll+0x4b/0xe0 [ 197.841366][T11115] vb2_fop_poll+0x10e/0x350 [ 197.841388][T11115] ? __pfx_vb2_fop_poll+0x10/0x10 [ 197.841408][T11115] v4l2_poll+0x15f/0x220 [ 197.841425][T11115] ? __pfx_v4l2_poll+0x10/0x10 [ 197.841442][T11115] do_sys_poll+0x6e5/0xe90 [ 197.841461][T11115] ? rcu_is_watching+0x13/0xc0 [ 197.841489][T11115] ? __pfx_do_sys_poll+0x10/0x10 [ 197.841532][T11115] ? __futex_wait+0x256/0x300 [ 197.841557][T11115] ? __pfx___pollwait+0x10/0x10 [ 197.841580][T11115] ? __pfx_pollwake+0x10/0x10 [ 197.841640][T11115] ? ktime_get_ts64+0x306/0x420 [ 197.841669][T11115] ? ktime_get_ts64+0x318/0x420 [ 197.841694][T11115] ? ktime_get_ts64+0x257/0x420 [ 197.841730][T11115] __ia32_sys_poll+0x1b3/0x420 [ 197.841752][T11115] ? __pfx___ia32_sys_poll+0x10/0x10 [ 197.841783][T11115] __do_fast_syscall_32+0x13a/0x8b0 [ 197.841812][T11115] ? lockdep_hardirqs_on+0x7d/0x110 [ 197.841875][T11115] do_fast_syscall_32+0x32/0x70 [ 197.841908][T11115] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.841932][T11115] RIP: 0023:0xf7f82fec [ 197.841954][T11115] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 197.841963][T11115] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 00000000000000a8 [ 197.841982][T11115] RAX: ffffffffffffffda RBX: 00000000800005c0 RCX: 0000000000000001 [ 197.841995][T11115] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.842006][T11115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.842018][T11115] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 197.842030][T11115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.842057][T11115] [ 197.842064][T11115] Mem-Info: [ 197.842073][T11115] active_anon:5334 inactive_anon:14177 isolated_anon:20 [ 197.842073][T11115] active_file:1246 inactive_file:4733 isolated_file:0 [ 197.842073][T11115] unevictable:1000 dirty:116 writeback:0 [ 197.842073][T11115] slab_reclaimable:12819 slab_unreclaimable:67555 [ 197.842073][T11115] mapped:23013 shmem:12916 pagetables:1701 [ 197.842073][T11115] sec_pagetables:313 bounce:0 [ 197.842073][T11115] kernel_misc_reclaimable:0 [ 197.842073][T11115] free:27309 free_pcp:1608 free_cma:0 [ 197.843131][T11115] Node 0 active_anon:244kB inactive_anon:504kB active_file:144kB inactive_file:0kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:2340kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9344kB pagetables:1328kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 197.843182][T11115] Node 1 active_anon:21092kB inactive_anon:56204kB active_file:4840kB inactive_file:18932kB unevictable:2000kB isolated(anon):80kB isolated(file):0kB mapped:92024kB dirty:460kB writeback:0kB shmem:49324kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7960kB pagetables:5476kB sec_pagetables:124kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 197.843229][T11115] Node 0 DMA free:3448kB boost:2048kB min:2792kB low:2976kB high:3160kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:36kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:88kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 197.843277][T11115] lowmem_reserve[]: 0 277 277 277 277 [ 197.843308][T11115] Node 0 DMA32 free:21956kB boost:31044kB min:44844kB low:48292kB high:51740kB reserved_highatomic:0kB free_highatomic:0kB active_anon:244kB inactive_anon:468kB active_file:144kB inactive_file:0kB unevictable:2000kB writepending:4kB zspages:3996kB present:1032196kB managed:284568kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 197.843359][T11115] lowmem_reserve[]: 0 0 0 0 0 [ 197.843385][T11115] Node 1 DMA32 free:83832kB boost:4096kB min:50084kB low:61580kB high:73076kB reserved_highatomic:0kB free_highatomic:0kB active_anon:21092kB inactive_anon:56204kB active_file:4840kB inactive_file:18932kB unevictable:2000kB writepending:460kB zspages:7564kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:6428kB local_pcp:4452kB free_cma:0kB [ 197.843434][T11115] lowmem_reserve[]: 0 0 0 0 0 [ 197.843463][T11115] Node 0 DMA: 136*4kB (UE) 43*8kB (UE) 14*16kB (UE) 17*32kB (U) 18*64kB (UE) 1*128kB (E) 2*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3448kB [ 197.843583][T11115] Node 0 DMA32: 693*4kB (UME) 224*8kB (UME) 67*16kB (UME) 185*32kB (UME) 55*64kB (UME) 24*128kB (UME) 5*256kB (UME) 5*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 21988kB [ 197.843705][T11115] Node 1 DMA32: 277*4kB (ME) 532*8kB (UME) 335*16kB (UME) 187*32kB (UME) 228*64kB (UME) 113*128kB (UME) 46*256kB (UME) 27*512kB (UM) 12*1024kB (UM) 0*2048kB 0*4096kB = 83652kB [ 197.843838][T11115] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.843853][T11115] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.843875][T11115] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.843890][T11115] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.843905][T11115] 19681 total pagecache pages [ 197.843913][T11115] 787 pages in swap cache [ 197.843920][T11115] Free swap = 112kB [ 197.843927][T11115] Total swap = 124996kB [ 197.843935][T11115] 524155 pages RAM [ 197.843941][T11115] 0 pages HighMem/MovableOnly [ 197.843947][T11115] 212121 pages reserved [ 197.843952][T11115] 0 pages cma reserved [ 197.898791][ T8323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.914548][T11119] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 197.914548][T11119] [ 197.914756][T11119] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 197.914813][T11119] CIFS: Attempting to mount //127.0.0.1/share [ 198.059898][T11119] CIFS: VFS: cifs_mount failed w/return code = -112 [ 198.127258][T11128] netlink: 'syz.6.1738': attribute type 2 has an invalid length. [ 198.127272][T11128] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1738'. [ 198.255986][T11128] : entered promiscuous mode [ 198.323927][T11132] FAULT_INJECTION: forcing a failure. [ 198.323927][T11132] name failslab, interval 1, probability 0, space 0, times 0 [ 198.323948][T11132] CPU: 0 UID: 0 PID: 11132 Comm: syz.0.1739 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.323965][T11132] Tainted: [L]=SOFTLOCKUP [ 198.323970][T11132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 198.323977][T11132] Call Trace: [ 198.323982][T11132] [ 198.323987][T11132] dump_stack_lvl+0x100/0x190 [ 198.324007][T11132] should_fail_ex.cold+0x5/0xa [ 198.324043][T11132] should_failslab+0xc2/0x120 [ 198.324063][T11132] kmem_cache_alloc_noprof+0x92/0x6a0 [ 198.324077][T11132] ? sk_prot_alloc+0x60/0x2a0 [ 198.324098][T11132] sk_prot_alloc+0x60/0x2a0 [ 198.324116][T11132] sk_alloc+0x36/0xe80 [ 198.324130][T11132] unix_create1+0xa6/0x700 [ 198.324144][T11132] unix_create+0x10f/0x1b0 [ 198.324158][T11132] __sock_create+0x339/0x860 [ 198.324173][T11132] p9_fd_create_unix+0x20a/0x350 [ 198.324188][T11132] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 198.324217][T11132] ? lockdep_init_map_type+0x5c/0x250 [ 198.324237][T11132] p9_client_create+0x563/0xd40 [ 198.324250][T11132] ? __pfx_p9_client_create+0x10/0x10 [ 198.324266][T11132] ? lockdep_init_map_type+0x5c/0x250 [ 198.324282][T11132] ? __raw_spin_lock_init+0x3a/0x110 [ 198.324302][T11132] v9fs_session_init+0x3c/0xdd0 [ 198.324315][T11132] ? v9fs_get_tree+0x9c/0xb50 [ 198.324333][T11132] v9fs_get_tree+0xb8/0xb50 [ 198.324347][T11132] ? rcu_is_watching+0x13/0xc0 [ 198.324359][T11132] ? __pfx_v9fs_get_tree+0x10/0x10 [ 198.324374][T11132] ? bpf_lsm_capable+0x9/0x10 [ 198.324390][T11132] ? security_capable+0x80/0x260 [ 198.324405][T11132] vfs_get_tree+0x92/0x320 [ 198.324426][T11132] path_mount+0x7d0/0x24c0 [ 198.324443][T11132] ? __pfx_path_mount+0x10/0x10 [ 198.324457][T11132] ? lockdep_hardirqs_on+0x7d/0x110 [ 198.324475][T11132] ? putname+0xb1/0x110 [ 198.324489][T11132] ? kmem_cache_free+0x127/0x6c0 [ 198.324512][T11132] ? __ia32_sys_mount+0x292/0x310 [ 198.324528][T11132] __ia32_sys_mount+0x292/0x310 [ 198.324544][T11132] ? __pfx___ia32_sys_mount+0x10/0x10 [ 198.324563][T11132] __do_fast_syscall_32+0x13a/0x8b0 [ 198.324597][T11132] do_fast_syscall_32+0x32/0x70 [ 198.324615][T11132] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 198.324630][T11132] RIP: 0023:0xf7f82fec [ 198.324643][T11132] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 198.324649][T11132] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 198.324660][T11132] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080000100 [ 198.324667][T11132] RDX: 0000000080000180 RSI: 0000000000208002 RDI: 0000000080000440 [ 198.324674][T11132] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.324680][T11132] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 198.324687][T11132] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 198.324701][T11132] [ 198.342029][T11132] 9pnet_fd: p9_fd_create_unix (11132): problem creating socket [ 198.539368][T11143] syzkaller1: entered promiscuous mode [ 198.539385][T11143] syzkaller1: entered allmulticast mode [ 198.937953][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.452485][T11154] syzkaller1: entered promiscuous mode [ 199.452510][T11154] syzkaller1: entered allmulticast mode [ 199.458869][T11150] gretap0: entered promiscuous mode [ 199.471350][T11156] FAULT_INJECTION: forcing a failure. [ 199.471350][T11156] name failslab, interval 1, probability 0, space 0, times 0 [ 199.471375][T11156] CPU: 2 UID: 0 PID: 11156 Comm: syz.0.1751 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.471393][T11156] Tainted: [L]=SOFTLOCKUP [ 199.471397][T11156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 199.471405][T11156] Call Trace: [ 199.471410][T11156] [ 199.471416][T11156] dump_stack_lvl+0x100/0x190 [ 199.471435][T11156] should_fail_ex.cold+0x5/0xa [ 199.471451][T11156] should_failslab+0xc2/0x120 [ 199.471468][T11156] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 199.471481][T11156] ? inode_set_ctime_current+0x283/0x850 [ 199.471494][T11156] ? find_held_lock+0x2b/0x80 [ 199.471507][T11156] ? __d_alloc+0x35/0xa50 [ 199.471532][T11156] __d_alloc+0x35/0xa50 [ 199.471547][T11156] ? _raw_spin_unlock+0x28/0x50 [ 199.471563][T11156] d_make_root+0x3e/0x90 [ 199.471579][T11156] pseudo_fs_fill_super+0x3c2/0x540 [ 199.471596][T11156] ? __pfx_pseudo_fs_fill_super+0x10/0x10 [ 199.471611][T11156] get_tree_nodev+0xdd/0x190 [ 199.471623][T11156] vfs_get_tree+0x92/0x320 [ 199.471639][T11156] path_mount+0x7d0/0x24c0 [ 199.471657][T11156] ? __pfx_path_mount+0x10/0x10 [ 199.471673][T11156] ? lockdep_hardirqs_on+0x7d/0x110 [ 199.471690][T11156] ? putname+0xb1/0x110 [ 199.471703][T11156] ? kmem_cache_free+0x127/0x6c0 [ 199.471724][T11156] ? __ia32_sys_mount+0x292/0x310 [ 199.471738][T11156] __ia32_sys_mount+0x292/0x310 [ 199.471754][T11156] ? __pfx___ia32_sys_mount+0x10/0x10 [ 199.471773][T11156] __do_fast_syscall_32+0x13a/0x8b0 [ 199.471792][T11156] do_fast_syscall_32+0x32/0x70 [ 199.471808][T11156] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.471823][T11156] RIP: 0023:0xf7f82fec [ 199.471836][T11156] Code: Unable to access opcode bytes at 0xf7f82fc2. [ 199.471841][T11156] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 199.471852][T11156] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 00000000800002c0 [ 199.471859][T11156] RDX: 0000000080000180 RSI: 0000000000200000 RDI: 0000000000000000 [ 199.471866][T11156] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 199.471873][T11156] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 199.471879][T11156] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 199.471893][T11156] [ 199.815598][T11165] jffs2: notice: (11165) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 199.818450][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1753'. [ 199.819332][T10392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.819900][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1753'. [ 199.820525][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1753'. [ 199.930529][ T63] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 199.988112][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.087828][ T63] usb 12-1: Using ep0 maxpacket: 16 [ 200.089709][ T63] usb 12-1: unable to get BOS descriptor or descriptor too short [ 200.089732][ T63] usb 12-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 200.090487][ T63] usb 12-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 200.092045][ T63] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.092058][ T63] usb 12-1: Product: syz [ 200.092065][ T63] usb 12-1: Manufacturer: syz [ 200.092073][ T63] usb 12-1: SerialNumber: syz [ 201.017930][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.199144][ T63] usb 12-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 201.203113][ T63] usb 12-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 201.255510][T11190] mtrr: base(0x1000) is not aligned on a size(0x0000) boundary [ 201.299798][ T63] usb 12-1: USB disconnect, device number 11 [ 201.303502][T11197] netlink: 'syz.0.1767': attribute type 1 has an invalid length. [ 201.303516][T11197] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1767'. [ 201.420756][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.443042][ T6635] udevd[6635]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.798048][ T5838] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 201.977961][ T5838] usb 5-1: Using ep0 maxpacket: 8 [ 201.978559][ T5838] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 201.981363][ T5838] usb 5-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 201.981383][ T5838] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 201.981400][ T5838] usb 5-1: config 1 has no interface number 0 [ 201.981429][ T5838] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 201.981448][ T5838] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 201.981467][ T5838] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 201.988173][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.988187][ T5838] usb 5-1: Product: syz [ 201.988194][ T5838] usb 5-1: Manufacturer: syz [ 201.988201][ T5838] usb 5-1: SerialNumber: syz [ 202.029882][T11204] loop8: detected capacity change from 16383 to 16384 [ 202.071446][ T8323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.591319][ T5741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 202.597103][ T5741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 202.598091][ T5741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 202.602155][ T5741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 202.602464][ T5741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.739485][ T7787] libceph: connect (1)[c::]:6789 error -101 [ 202.739655][ T7787] libceph: mon0 (1)[c::]:6789 connect error [ 202.764697][ T5838] usb 5-1: USB disconnect, device number 17 [ 202.825762][ T6079] udevd[6079]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.826673][T11215] ceph: No mds server is up or the cluster is laggy [ 202.859880][T10392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.113897][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.115797][ T5606] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.263301][ T5606] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.320950][T11210] lo speed is unknown, defaulting to 1000 [ 203.379144][ T5606] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.435325][ T5606] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.549475][ C1] ================================================================== [ 203.549486][ C1] BUG: KASAN: double-free in rcu_free_sheaf+0x1a/0xe0 [ 203.549505][ C1] Free of addr ffff888014773700 by task ksoftirqd/1/29 [ 203.549513][ C1] [ 203.549520][ C1] CPU: 1 UID: 0 PID: 29 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.549536][ C1] Tainted: [L]=SOFTLOCKUP [ 203.549540][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.549548][ C1] Call Trace: [ 203.549554][ C1] [ 203.549562][ C1] dump_stack_lvl+0x100/0x190 [ 203.549586][ C1] print_report+0x13d/0x4b0 [ 203.549613][ C1] ? __virt_addr_valid+0x239/0x430 [ 203.549641][ C1] ? rcu_free_sheaf+0x1a/0xe0 [ 203.549662][ C1] kasan_report_invalid_free+0xb8/0x190 [ 203.549690][ C1] ? rcu_free_sheaf+0x1a/0xe0 [ 203.549706][ C1] ? rcu_free_sheaf+0x1a/0xe0 [ 203.549717][ C1] check_slab_allocation+0xc3/0xf0 [ 203.549729][ C1] __rcu_free_sheaf_prepare+0x117/0x300 [ 203.549745][ C1] ? rcu_core+0x5eb/0x1260 [ 203.549761][ C1] ? rcu_core+0x5eb/0x1260 [ 203.549775][ C1] rcu_free_sheaf+0x1a/0xe0 [ 203.549786][ C1] rcu_core+0x5f0/0x1260 [ 203.549802][ C1] ? __pfx_rcu_core+0x10/0x10 [ 203.549841][ C1] ? rcu_is_watching+0x13/0xc0 [ 203.549852][ C1] handle_softirqs+0x1e6/0x9d0 [ 203.549869][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 203.549884][ C1] ? _raw_spin_unlock+0x28/0x50 [ 203.549898][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 203.549911][ C1] __irq_exit_rcu+0x16a/0x210 [ 203.549926][ C1] irq_exit_rcu+0x9/0x30 [ 203.549941][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 203.549956][ C1] [ 203.549960][ C1] [ 203.549964][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 203.549977][ C1] RIP: 0010:finish_task_switch.isra.0+0x2ca/0x10d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 203.549999][ C1] Code: b6 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 03 ac fa 09 e8 fe 05 3d 00 fb 48 8d bb 10 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 203.550009][ C1] RSP: 0018:ffffc90000577c18 EFLAGS: 00000206 [ 203.550020][ C1] RAX: 00000000002f36f5 RBX: ffff88801cfa2580 RCX: 0000000000000000 [ 203.550028][ C1] RDX: 0000000000000001 RSI: ffffffff8e3f18bd RDI: ffff88801cfa3c90 [ 203.550035][ C1] RBP: ffffc90000577c70 R08: 0000000000000001 R09: 0000000000000000 [ 203.550042][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888014654b00 [ 203.550049][ C1] R13: 0000000000000000 R14: ffffffff914587e4 R15: ffff88802b33c040 [ 203.550059][ C1] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 203.550075][ C1] __schedule+0x1261/0x6920 [ 203.550092][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 203.550108][ C1] ? lock_acquire+0x1d1/0x380 [ 203.550121][ C1] ? __pfx___schedule+0x10/0x10 [ 203.550134][ C1] ? find_held_lock+0x2b/0x80 [ 203.550145][ C1] ? schedule+0x225/0x2c0 [ 203.550159][ C1] schedule+0xdd/0x2c0 [ 203.550172][ C1] smpboot_thread_fn+0x8a0/0xab0 [ 203.550183][ C1] ? kthread+0x13a/0x450 [ 203.550194][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 203.550204][ C1] kthread+0x373/0x450 [ 203.550214][ C1] ? __pfx_kthread+0x10/0x10 [ 203.550225][ C1] ret_from_fork+0x730/0xd60 [ 203.550242][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 203.550257][ C1] ? __switch_to+0x800/0x10f0 [ 203.550271][ C1] ? __pfx_kthread+0x10/0x10 [ 203.550282][ C1] ret_from_fork_asm+0x1a/0x30 [ 203.550295][ C1] [ 203.550299][ C1] [ 203.550302][ C1] Allocated by task 5606: [ 203.550308][ C1] kasan_save_stack+0x30/0x50 [ 203.550319][ C1] kasan_save_track+0x14/0x30 [ 203.550330][ C1] __kasan_kmalloc+0xaa/0xb0 [ 203.550340][ C1] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 203.550355][ C1] hwsim_update_pib.isra.0+0x57/0x4e0 [ 203.550368][ C1] hwsim_set_promiscuous_mode+0x14f/0x3a0 [ 203.550380][ C1] drv_set_promiscuous_mode+0x133/0x330 [ 203.550392][ C1] mac802154_scan_worker+0x7ec/0x1450 [ 203.550402][ C1] process_one_work+0xac7/0x1b10 [ 203.550413][ C1] worker_thread+0x5ef/0xe50 [ 203.550424][ C1] kthread+0x373/0x450 [ 203.550434][ C1] ret_from_fork+0x730/0xd60 [ 203.550447][ C1] ret_from_fork_asm+0x1a/0x30 [ 203.550456][ C1] [ 203.550458][ C1] Freed by task 29: [ 203.550464][ C1] kasan_save_stack+0x30/0x50 [ 203.550474][ C1] kasan_save_track+0x14/0x30 [ 203.550485][ C1] kasan_save_free_info+0x3b/0x70 [ 203.550502][ C1] __kasan_slab_free+0x5f/0x80 [ 203.550514][ C1] __rcu_free_sheaf_prepare+0x5d/0x300 [ 203.550527][ C1] rcu_free_sheaf+0x1a/0xe0 [ 203.550536][ C1] rcu_core+0x5f0/0x1260 [ 203.550550][ C1] handle_softirqs+0x1e6/0x9d0 [ 203.550563][ C1] __irq_exit_rcu+0x16a/0x210 [ 203.550576][ C1] irq_exit_rcu+0x9/0x30 [ 203.550590][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 203.550603][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 203.550613][ C1] [ 203.550616][ C1] The buggy address belongs to the object at ffff888014773700 [ 203.550616][ C1] which belongs to the cache kmalloc-64 of size 64 [ 203.550624][ C1] The buggy address is located 0 bytes inside of [ 203.550624][ C1] 64-byte region [ffff888014773700, ffff888014773740) [ 203.550634][ C1] [ 203.550637][ C1] The buggy address belongs to the physical page: [ 203.550642][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14773 [ 203.550651][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 203.550661][ C1] page_type: f5(slab) [ 203.550670][ C1] raw: 00fff00000000000 ffff88801c0428c0 dead000000000100 dead000000000122 [ 203.550679][ C1] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 203.550686][ C1] page dumped because: kasan: bad access detected [ 203.550692][ C1] page_owner tracks the page as allocated [ 203.550698][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 10147, tgid 10146 (syz.7.1425), ts 173048678800 [ 203.550723][ C1] post_alloc_hook+0xfd/0x120 [ 203.550747][ C1] get_page_from_freelist+0x110d/0x35d0 [ 203.550763][ C1] __alloc_frozen_pages_noprof+0x936/0x3300 [ 203.550782][ C1] new_slab+0xa9/0x6e0 [ 203.550798][ C1] ___slab_alloc+0x5d1/0x810 [ 203.550812][ C1] __kmalloc_node_noprof+0x441/0x880 [ 203.550825][ C1] blk_mq_alloc_and_init_hctx+0xaae/0x1000 [ 203.550837][ C1] __blk_mq_realloc_hw_ctxs+0x2f9/0x820 [ 203.550847][ C1] blk_mq_update_nr_hw_queues+0x10c8/0x15f0 [ 203.550862][ C1] nullb_update_nr_hw_queues+0x27d/0x4b0 [ 203.550878][ C1] nullb_device_submit_queues_store+0x111/0x1d0 [ 203.550891][ C1] configfs_write_iter+0x302/0x4e0 [ 203.550904][ C1] vfs_write+0x6af/0x1050 [ 203.550914][ C1] ksys_write+0x12a/0x250 [ 203.550923][ C1] __do_fast_syscall_32+0x13a/0x8b0 [ 203.550938][ C1] do_fast_syscall_32+0x32/0x70 [ 203.550952][ C1] page last free pid 5731 tgid 5731 ts 152408261874 stack trace: [ 203.550960][ C1] __free_frozen_pages+0x79f/0x10f0 [ 203.550973][ C1] qlist_free_all+0x47/0xf0 [ 203.550983][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 203.551000][ C1] __kasan_slab_alloc+0x69/0x90 [ 203.551011][ C1] kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 203.551022][ C1] copy_process+0x6a2/0x8370 [ 203.551036][ C1] kernel_clone+0x176/0x9d0 [ 203.551050][ C1] __do_compat_sys_ia32_clone+0xd4/0x120 [ 203.551064][ C1] __do_fast_syscall_32+0x13a/0x8b0 [ 203.551079][ C1] do_fast_syscall_32+0x32/0x70 [ 203.551093][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.551106][ C1] [ 203.551108][ C1] Memory state around the buggy address: [ 203.551114][ C1] ffff888014773600: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 203.551121][ C1] ffff888014773680: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 203.551128][ C1] >ffff888014773700: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 203.551149][ C1] ^ [ 203.551155][ C1] ffff888014773780: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 203.551162][ C1] ffff888014773800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 203.551168][ C1] ================================================================== [ 203.551201][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 203.815338][ C1] CPU: 1 UID: 0 PID: 29 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.818687][ C1] Tainted: [L]=SOFTLOCKUP [ 203.820044][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 203.823183][ C1] Call Trace: [ 203.824246][ C1] [ 203.825168][ C1] dump_stack_lvl+0x100/0x190 [ 203.826665][ C1] vpanic+0x553/0x970 [ 203.827955][ C1] ? __pfx_vpanic+0x10/0x10 [ 203.829393][ C1] ? rcu_is_watching+0x13/0xc0 [ 203.830912][ C1] ? irqentry_exit+0x24d/0xa10 [ 203.832434][ C1] panic+0xd1/0xe0 [ 203.833626][ C1] ? __pfx_panic+0x10/0x10 [ 203.835393][ C1] ? rcu_free_sheaf+0x1a/0xe0 [ 203.837319][ C1] check_panic_on_warn.cold+0x19/0x34 [ 203.839658][ C1] ? rcu_free_sheaf+0x1a/0xe0 [ 203.841638][ C1] end_report.part.0+0x3a/0x90 [ 203.843631][ C1] kasan_report_invalid_free.cold+0xd/0x12 [ 203.846037][ C1] ? rcu_free_sheaf+0x1a/0xe0 [ 203.848039][ C1] ? rcu_free_sheaf+0x1a/0xe0 [ 203.850043][ C1] check_slab_allocation+0xc3/0xf0 [ 203.852136][ C1] __rcu_free_sheaf_prepare+0x117/0x300 [ 203.854421][ C1] ? rcu_core+0x5eb/0x1260 [ 203.856295][ C1] ? rcu_core+0x5eb/0x1260 [ 203.858164][ C1] rcu_free_sheaf+0x1a/0xe0 [ 203.860032][ C1] rcu_core+0x5f0/0x1260 [ 203.861775][ C1] ? __pfx_rcu_core+0x10/0x10 [ 203.863633][ C1] ? rcu_is_watching+0x13/0xc0 [ 203.865606][ C1] handle_softirqs+0x1e6/0x9d0 [ 203.867630][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 203.869884][ C1] ? _raw_spin_unlock+0x28/0x50 [ 203.871949][ C1] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 203.874315][ C1] __irq_exit_rcu+0x16a/0x210 [ 203.876311][ C1] irq_exit_rcu+0x9/0x30 [ 203.878141][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 203.880501][ C1] [ 203.881761][ C1] [ 203.882889][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 203.885109][ C1] RIP: 0010:finish_task_switch.isra.0+0x2ca/0x10d0 [ 203.887515][ C1] Code: b6 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 03 ac fa 09 e8 fe 05 3d 00 fb 48 8d bb 10 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 203.894281][ C1] RSP: 0018:ffffc90000577c18 EFLAGS: 00000206 [ 203.896173][ C1] RAX: 00000000002f36f5 RBX: ffff88801cfa2580 RCX: 0000000000000000 [ 203.898710][ C1] RDX: 0000000000000001 RSI: ffffffff8e3f18bd RDI: ffff88801cfa3c90 [ 203.901400][ C1] RBP: ffffc90000577c70 R08: 0000000000000001 R09: 0000000000000000 [ 203.903885][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888014654b00 [ 203.906497][ C1] R13: 0000000000000000 R14: ffffffff914587e4 R15: ffff88802b33c040 [ 203.908955][ C1] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 203.910968][ C1] __schedule+0x1261/0x6920 [ 203.912401][ C1] ? __lock_acquire+0x5c0/0x1f40 [ 203.914058][ C1] ? lock_acquire+0x1d1/0x380 [ 203.915569][ C1] ? __pfx___schedule+0x10/0x10 [ 203.917145][ C1] ? find_held_lock+0x2b/0x80 [ 203.918733][ C1] ? schedule+0x225/0x2c0 [ 203.920092][ C1] schedule+0xdd/0x2c0 [ 203.921373][ C1] smpboot_thread_fn+0x8a0/0xab0 [ 203.922982][ C1] ? kthread+0x13a/0x450 [ 203.924345][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 203.926114][ C1] kthread+0x373/0x450 [ 203.927392][ C1] ? __pfx_kthread+0x10/0x10 [ 203.928851][ C1] ret_from_fork+0x730/0xd60 [ 203.930318][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 203.931918][ C1] ? __switch_to+0x800/0x10f0 [ 203.933391][ C1] ? __pfx_kthread+0x10/0x10 [ 203.934907][ C1] ret_from_fork_asm+0x1a/0x30 [ 203.936490][ C1] [ 203.938078][ C1] Kernel Offset: disabled [ 203.939433][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:52:51 Registers: info registers vcpu 0 CPU#0 RAX=fffffbfff3776962 RBX=fffffbfff3776963 RCX=ffffffff81e70a29 RDX=fffffbfff3776963 RSI=0000000000000004 RDI=ffffffff9bbb4b10 RBP=fffffbfff3776962 RSP=ffffc9000041fa38 R8 =0000000000000001 R9 =fffffbfff3776962 R10=ffffffff9bbb4b13 R11=0000000000000001 R12=1ffff92000083f4c R13=ffffffff9bbb4b20 R14=ffff888052a3d8a8 R15=1ffff92000083f66 RIP=ffffffff827d9cb0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096960000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5424ff4 CR3=000000005e4d5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85aeb445 RDI=ffffffff9bc571e0 RBP=ffffffff9bc571a0 RSP=ffffc900005a0520 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2065657246 R12=0000000000000000 R13=0000000000000020 R14=0000000000000002 R15=ffffc900005a0838 RIP=ffffffff85aeb46f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080018000 CR3=000000004c4d7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000400000 RBX=ffff888029539620 RCX=0000000000000016 RDX=ffff8880298e4b00 RSI=ffffc90000415134 RDI=ffff8880298e4b00 RBP=ffff8880296bf038 RSP=ffffc9000424f048 R8 =0000000000000005 R9 =000000000000001f R10=0000000000000016 R11=0000000000000001 R12=ffffc90000415100 R13=ffff88802953967c R14=ffff888029539628 R15=0000000000000016 RIP=ffffffff86be33ff RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f882c3a0300 ffffffff 00c00000 GS =0000 ffff888096b60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000561bf0fa5f40 CR3=000000004c54f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=fc97651b30f68259 25e0327487fcc45f fc97651b30f68259 25e0327487fcc45f fc97651b30f68259 25e0327487fcc45f fc97651b30f68259 25e0327487fcc45f ZMM18=866148805c48cef1 daed67bd41ce0910 866148805c48cef1 daed67bd41ce0910 866148805c48cef1 daed67bd41ce0910 866148805c48cef1 daed67bd41ce0910 ZMM19=440c000000000000 0000000000000004 440c000000000000 0000000000000003 440c000000000000 0000000000000002 440c000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0205800201000002 08060601099401ac 0800178003010000 0208060380020401 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 779e005356504901 ffffffffffffffff f508038003000800 2086080020080006 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02748e0c80080004 0800220800060074 e80e0000022d0000 0006000000040000 ZMM24=eb5b67a4eb5b67a4 eb5b67a4eb5b67a4 eb5b67a4eb5b67a4 eb5b67a4eb5b67a4 eb5b67a4eb5b67a4 eb5b67a4eb5b67a4 eb5b67a4eb5b67a4 eb5b67a4eb5b67a4 ZMM25=3e66cc593e66cc59 3e66cc593e66cc59 3e66cc593e66cc59 3e66cc593e66cc59 3e66cc593e66cc59 3e66cc593e66cc59 3e66cc593e66cc59 3e66cc593e66cc59 ZMM26=8e9425458e942545 8e9425458e942545 8e9425458e942545 8e9425458e942545 8e9425458e942545 8e9425458e942545 8e9425458e942545 8e9425458e942545 ZMM27=dd0fa1eddd0fa1ed dd0fa1eddd0fa1ed dd0fa1eddd0fa1ed dd0fa1eddd0fa1ed dd0fa1eddd0fa1ed dd0fa1eddd0fa1ed dd0fa1eddd0fa1ed dd0fa1eddd0fa1ed ZMM28=000000a00000009f 0000009e0000009d 0000009c0000009b 0000009a00000099 0000009800000097 0000009600000095 0000009400000093 0000009200000091 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9613000096130000 9613000096130000 9613000096130000 9613000096130000 9613000096130000 9613000096130000 9613000096130000 9613000096130000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000814 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff91455658 RBP=ffffc90002e0ff38 RSP=ffffc90002e0fee0 R8 =0000000000000001 R9 =fffffbfff228aacb R10=ffffffff9145565f R11=0000000000000000 R12=ffff888029874b00 R13=0000000000000066 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff827da814 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096c60000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73e5ba8 CR3=0000000062426000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ff00000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000