last executing test programs: 48.195029802s ago: executing program 2 (id=1154): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x44, 0x0, "84f4ba9d18d04959917303b5758777b29cf7bbe1e7b68fe581abb22e3a33da2ae9bc6534624e6b6adc4e6eb25906892d8f0aa71dce32959c5860a717c10d9bb959c1cd7a5a11441fe6acb1029bbb4b01"}, 0xd8) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00;', @ANYRES16=r3, @ANYBLOB="010028bd70004400000005000000080009000200000008000c00a90a000008000b0002000000"], 0x2c}}, 0x4010) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x10, r0, 0xa1fae000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000040)='27', 0x2) syz_open_dev$ttys(0xc, 0x2, 0x0) 47.227067289s ago: executing program 2 (id=1156): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xfffffffe, 0x2000007, 0x4010, 0xffffffffffffffff, 0x0) unshare(0x24020400) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030001000000080002400000000108000140000000010900010073797a300000000014000000110001"], 0xe0}}, 0x4000000) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000440)=0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000480)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000004c0)={@void, @void, @eth={@random="163e79baae36", @local, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x67, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x4e22, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x1, 0x7, 0x0, @void}, "245ac175"}}}}}}}, 0x36) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000540)={0x1d, r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7400000040000901feffffff00000000037c0000040042800c0001800600060008"], 0x74}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f00000005c0)={0x9, 0x0, [{0xc0000001, 0x2, 0x2, 0x714, 0xe, 0x1}, {0x1c0000006, 0x7ff, 0x1, 0x81, 0xffffffff, 0x0, 0xa}, {0x40000000, 0x80000001, 0x2, 0x5, 0xc, 0x8, 0x8000}, {0x80000000, 0x3, 0x4, 0xd, 0x6, 0x6, 0xfffffff8}, {0xb, 0x699, 0x6, 0x4, 0x9, 0x6, 0x100}, {0x80000001, 0x8, 0x4, 0x0, 0x4, 0x3, 0x1}, {0x40000000, 0xb, 0x2, 0x132f, 0x3ff, 0x2, 0xffffffff}, {0x80000008, 0x5ff, 0x4, 0xd1a, 0x8, 0x3, 0xb48}, {0xa, 0x40, 0x7, 0x8, 0x17, 0x44, 0x64}]}) 46.035341616s ago: executing program 2 (id=1160): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setns(0xc9, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f1ecd65f3ff9dd4a7260f01c9f3360f30670f01ca0f01fa8146051900baf80c66b8fa8ecd8c66efbafc0cb8f64aefdbe03e26660f38825f47", 0x3a}], 0x1, 0x5b, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="100000000400040000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB='\x00'/25], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x58, &(0x7f0000000440)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r2}, 0xc) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='@+]\x00', &(0x7f00000000c0)="86", 0x1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='builtin_trusted\x00', 0x0) add_key(&(0x7f0000000340)='encrypted\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0x0) tkill(0x0, 0xb) setrlimit(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 44.847938545s ago: executing program 2 (id=1162): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f757876656e642c6163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') link(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0\x00') creat(&(0x7f0000000380)='./file0\x00', 0x25) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount$pvfs2(&(0x7f0000000400), &(0x7f0000000440)='./sys/module/acpi/parameters/trace_state\x00', &(0x7f0000000480), 0x80000, &(0x7f0000000640)={[{'f\''}, {'\x00\x00\xaa\x9a \xc9B\x8c\r\xda\xb1\xe6\x02\xb2\x94j\xa4\x18\xba`\x93\xcee\aW\xeeq\'}j\xc9\xc4zQ\x8bE&\xe3r\xa4\xb9\x8b\xaf`\xdb\xc9\xcb\xd5>\xb8>)\xab.L;R#O\x10\x83\xf4\x1aE\x91\xe9\xa1\xc2[\x80\'\xce\xb4\x98j\xa0\x05\n\xa3\xf4\x99\x13+j\x06c\xb5\xe1\x9556\xf27]\xc0w\xca\xc5.\xa7\xbd \xe6]\xd6\xe3\xde\x1a\x90;\xd0T\xfdH\xe9\xfcC F\xa2\xca@\x93\xae\x17&\xf4\xa6\x9cDn>\x15\xda+,\x02P\x8d(\xf7\x93'}, {'&(@_;\x8c5\x13\xbf\x83,\xd9\x97RP\x03of\x13#B\xe7q-\x97s\xb3\x98x\xef\xfc\x86+H\x83\xd4\x1f}\x03\xe50x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r1}, 0xc) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r2) request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='builtin_trusted\x00', r3) add_key(&(0x7f0000000340)='encrypted\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r3) tkill(0x0, 0xb) setrlimit(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.25601198s ago: executing program 4 (id=1304): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x3, 0xfffffed4}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x28, r2, 0x1, 0x0, 0xf0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x21}}}}}, 0x28}}, 0x880) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x3b, r6, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x1, 0xfffffffc, 0x2000000}}}}, 0xfd10}, 0x1, 0x0, 0x0, 0x4080}, 0x20001000) inotify_init() 6.189999508s ago: executing program 3 (id=1305): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x405, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@gettaction={0x24, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x24}}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000001c0), 0x4) lseek(r1, 0xffb, 0x4) sendmsg$tipc(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8820) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 5.125294976s ago: executing program 4 (id=1306): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x2, 0x1, 0x0, 0x4, 0x0, 0x6, [{0x4, 0x2, 0x1}]}]}, {0x0, [0x5f, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000080)=""/4077, 0x36, 0xfed, 0x2}, 0x28) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x5320c000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setuid(0xee01) r0 = getuid() setuid(r0) 5.124990536s ago: executing program 3 (id=1307): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x40, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x40}}, 0x0) (fail_nth: 6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x102b, &(0x7f0000000c40)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf82, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) socket(0x10, 0x803, 0x0) 5.088027629s ago: executing program 0 (id=1308): r0 = socket$kcm(0x11, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000080)=0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0xa0) write(r3, &(0x7f0000000100)='0', 0x1) io_submit(r2, 0x2, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, 0x0]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00000001c0)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="34010000100033062cbd700000000000fc000000000000000000000000000001ac1414aa000000000000000000000000000000050000fffd000000003a00000031d9e267bf7954baf497e65ce35849b00cb7527f3133f9a3c77b26f39d910ad78a3f81a02aead9e5e6ec5d441f3ad72690acc8ead0b5f2ef4b4e87985dda6bbf1af87f06e1336a43edbb5d6f886e0d4e0d076e35e0d6ffa7693c9e6a8af04d50c1e91770161f319c0b3a27", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa000000000000000000000000010000000000000003000000000000000900000000000000090000000000000002000000000000000000000000000000fffffffffffffffffcffffffffffffff000000000000000000000000000000005f000000000000000a0000000000000001000000d3730000000000000001000000000000050000002300000048000200656362286369706865725f6e756c6c2900"/236], 0x134}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000680)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffff9, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000001800)={'syzkaller0\x00', 0x9102}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x40480, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001880)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000019c0)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001a40), 0x56) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf2220000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x20802600, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r11, &(0x7f0000000240)=[{&(0x7f0000000280)=""/203, 0xcb}], 0x1, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/233, 0xe9}], 0x1, 0x0) 5.004913065s ago: executing program 1 (id=1309): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xaece, 0x0) pread64(r4, &(0x7f0000000680)=""/102352, 0x18fd0, 0x35) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0285628, &(0x7f0000000200)={0x2, @sdr={0x38414762, 0x7}}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0xc) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x64) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r6, &(0x7f00000000c0)='./file0\x00', r6, &(0x7f0000000180)='./file0\x00', 0x351) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) request_key(0x0, 0x0, &(0x7f0000000380)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640), 0xac400, 0x0) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f00000005c0), 0x1003) r8 = syz_open_dev$sndmidi(&(0x7f0000019680), 0x2, 0x141102) writev(r8, &(0x7f00000196c0)=[{&(0x7f0000019700)="94", 0xf000}, {0x0}], 0x2) lsetxattr$security_capability(&(0x7f0000019740)='./file1/file2\x00', 0x0, 0x0, 0x0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000019780)={'syztnl2\x00', &(0x7f00000197c0)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r11, &(0x7f0000019840)={0x0, 0x0, &(0x7f0000019880)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000008060108000000000000000001000001050001ec07fa00000001d68b983336f33dd889dde9f4c37444d87d854bd8987407b2"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000198c0)={0x11, 0x0, 0x0, &(0x7f00000199c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17127d53}, 0xe4) 5.004642866s ago: executing program 3 (id=1310): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000a00)='GPL\x00', 0x4, 0xc3, &(0x7f0000000a40)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000b40), 0x8, 0x10, &(0x7f0000000b80), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c00)={r0, r1, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000c40)=r2, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000c80)={0x4, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000cc0)=r3, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d00)={r4, 0x0, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r5 = syz_open_dev$loop(&(0x7f0000000180), 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003765cd85bb321f0000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0005007e0500000603000003000000fcffffff05010905a10105091901290a150025017501950a8102950175068103c0"], 0x135) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000d40)=ANY=[@ANYBLOB="120100030200b223f609e5a2430f01020301090244000101030007020206000205240600000524b925f4650001010d240f01ff0300de6c05c7e5070905811d00020b00000905820200020800fe0905030220"], 0x0) write$UHID_INPUT2(r7, &(0x7f0000000780)=ANY=[@ANYBLOB="0c00000015"], 0xc) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000001c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) openat$random(0xffffffffffffff9c, 0x0, 0x8000, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000300)={0x0, 0x442d, 0x80000, 0xfffffffc, 0x60455}, 0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(0x0, r8, r9, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x490}}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x42, 0x0) pwrite64(r10, &(0x7f00000004c0)="0000010042", 0x5, 0x1be) pwrite64(r10, 0x0, 0x0, 0x1fe) pwrite64(r10, &(0x7f0000000500)='PR', 0x2, 0x1e8000) r11 = syz_open_dev$loop(0x0, 0x0, 0x2) ioctl$LOOP_SET_FD(r11, 0x4c00, r10) 4.678891255s ago: executing program 1 (id=1311): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x44, 0x0, "84f4ba9d18d04959917303b5758777b29cf7bbe1e7b68fe581abb22e3a33da2ae9bc6534624e6b6adc4e6eb25906892d8f0aa71dce32959c5860a717c10d9bb959c1cd7a5a11441fe6acb1029bbb4b01"}, 0xd8) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10002}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[], 0x2c}}, 0x4010) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x10, r0, 0xa1fae000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000040)='27', 0x2) syz_open_dev$ttys(0xc, 0x2, 0x0) 4.08425968s ago: executing program 0 (id=1312): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055ea6f8, 0x48a21}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_MTU={0x8, 0x4, 0x8ff}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x4c}, 0x1, 0x200000000000000, 0x0, 0x80d5}, 0x2000c000) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, 0x0) mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, &(0x7f0000000400)={[{}, {'erspan0\x00'}, {}, {}, {'GPL\x00'}, {'\\@'}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x33, 0x66, 0x30, 0x61, 0x61, 0x63], 0x2d, [0x64, 0xd, 0x63, 0x64], 0x2d, [0x37, 0x1, 0x32, 0x38], 0x2d, [0x39, 0x63, 0x54, 0x35], 0x2d, [0x38, 0x0, 0x37, 0x30, 0x31, 0x33, 0x36, 0x30]}}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_role={'obj_role', 0x3d, ')'}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r4}}]}) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7313}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.957721813s ago: executing program 4 (id=1313): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x18, 0x5, 0x1046) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000980), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) chdir(&(0x7f0000000080)='./file0/file0\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004400, &(0x7f0000000200)=ANY=[@ANYBLOB="74729c1c859ffb44328016136b616e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',k']) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002600)='mountinfo\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) read$FUSE(r3, &(0x7f0000002640)={0x2020}, 0x2020) 3.578078553s ago: executing program 1 (id=1314): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x3, 0xfffffed4}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x0, 0xf0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x21}}}}}, 0x28}}, 0x880) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x401, 0xfffffffc, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x3b, r6, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x1, 0xfffffffc, 0x2000000}}}}, 0xfd10}, 0x1, 0x0, 0x0, 0x4080}, 0x20001000) inotify_init() 3.100547218s ago: executing program 0 (id=1315): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) socket(0x18, 0x5, 0x1046) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) chdir(&(0x7f0000000080)='./file0/file0\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004400, &(0x7f0000000200)=ANY=[@ANYBLOB="74729c1c859ffb44328016136b616e", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',k']) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002600)='mountinfo\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) read$FUSE(r4, &(0x7f0000002640)={0x2020}, 0x2020) 749.423993ms ago: executing program 4 (id=1316): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000900)={0x1, 0x0, 0x3, 0x1}, 0x10) write(r0, &(0x7f0000000940)="243f00001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 699.945893ms ago: executing program 1 (id=1317): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setns(0xc9, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f1ecd65f3ff9dd4a7260f01c9f3360f30670f01ca0f01fa8146051900baf80c66b8fa8ecd8c66efbafc0cb8f64aefdbe03e26660f38825f47", 0x3a}], 0x1, 0x5b, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r1}, 0xc) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r2) request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='builtin_trusted\x00', r3) add_key(&(0x7f0000000340)='encrypted\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r3) tkill(0x0, 0xb) setrlimit(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 699.71192ms ago: executing program 3 (id=1318): ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc04c5609, &(0x7f0000000000)={0x6, 0x1, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x1, 0xc, 0x87, 0x3, 0x7e, 0xb, "0012bf4f"}, 0xe, 0x4, {0xffffffffffffffff}, 0xb6}) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0xee01, &(0x7f00000000c0)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 665.433954ms ago: executing program 0 (id=1319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000019680)={&(0x7f00000196c0)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 609.429048ms ago: executing program 4 (id=1320): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x80000, 0x204) setsockopt(r1, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) r2 = openat$adsp1(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r2, 0x800c5011, &(0x7f0000000100)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x6, @mcast1, 0x8000}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000029"], 0x10}, 0xfbffff7f}], 0x1, 0x20040010) close_range(r3, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fe02000000000000200000000c000600010000000100000024002d8005000100090000000500040000000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 402.923252ms ago: executing program 4 (id=1321): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x9801) unshare(0x22020600) move_mount(r1, &(0x7f00000003c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='\x00', 0x89901) move_mount(r2, &(0x7f00000004c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0xa) read$FUSE(r0, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002680)="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", 0x2000, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004700)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x5, {0x2, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xfffffffc, 0x120, 0x2000, 0xa8, r3, r4, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000040)='./sys\x00', 0xee00, r4) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) syz_pidfd_open(r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r7, &(0x7f0000000600)='1', 0x1) 349.687174ms ago: executing program 0 (id=1322): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (fail_nth: 6) 0s ago: executing program 0 (id=1323): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x44, 0x0, "84f4ba9d18d04959917303b5758777b29cf7bbe1e7b68fe581abb22e3a33da2ae9bc6534624e6b6adc4e6eb25906892d8f0aa71dce32959c5860a717c10d9bb959c1cd7a5a11441fe6acb1029bbb4b01"}, 0xd8) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10002}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[], 0x2c}}, 0x4010) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x10, r0, 0xa1fae000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000040)='27', 0x2) syz_open_dev$ttys(0xc, 0x2, 0x0) kernel console output (not intermixed with test programs): RIG_RAX: 00000000000000f0 [ 267.623887][ T9649] RAX: ffffffffffffffda RBX: 00000000f73d5020 RCX: 0000000000000080 [ 267.623894][ T9649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73d5024 [ 267.623901][ T9649] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 267.623907][ T9649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.623913][ T9649] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.623927][ T9649] [ 267.671299][ T5868] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 267.673865][ T5868] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 269.941784][ T9680] sctp: [Deprecated]: syz.2.1011 (pid 9680) Use of int in max_burst socket option deprecated. [ 269.941784][ T9680] Use struct sctp_assoc_value instead [ 271.160961][ C2] net_ratelimit: 66 callbacks suppressed [ 271.286063][ T5145] Bluetooth: hci1: unexpected event for opcode 0x0c14 [ 271.402107][ T9704] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 271.575379][ T9720] FAULT_INJECTION: forcing a failure. [ 271.575379][ T9720] name failslab, interval 1, probability 0, space 0, times 0 [ 271.575397][ T9720] CPU: 0 UID: 0 PID: 9720 Comm: syz.0.1026 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.575412][ T9720] Tainted: [L]=SOFTLOCKUP [ 271.575417][ T9720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 271.575423][ T9720] Call Trace: [ 271.575428][ T9720] [ 271.575433][ T9720] dump_stack_lvl+0x100/0x190 [ 271.575457][ T9720] should_fail_ex.cold+0x5/0xa [ 271.575474][ T9720] should_failslab+0xc2/0x120 [ 271.575488][ T9720] __kmalloc_noprof+0xfc/0x840 [ 271.575503][ T9720] ? trace_kmalloc+0xeb/0x110 [ 271.575514][ T9720] ? lsm_blob_alloc+0x68/0x90 [ 271.575529][ T9720] lsm_blob_alloc+0x68/0x90 [ 271.575540][ T9720] security_sk_alloc+0x2d/0x290 [ 271.575553][ T9720] sk_prot_alloc+0x12a/0x2a0 [ 271.575565][ T9720] sk_alloc+0x36/0xe80 [ 271.575579][ T9720] tun_chr_open+0x82/0x5e0 [ 271.575594][ T9720] ? __pfx_misc_open+0x10/0x10 [ 271.575605][ T9720] ? __pfx_tun_chr_open+0x10/0x10 [ 271.575620][ T9720] misc_open+0x26d/0x450 [ 271.575632][ T9720] ? __pfx_misc_open+0x10/0x10 [ 271.575643][ T9720] chrdev_open+0x234/0x6a0 [ 271.575655][ T9720] ? __pfx_apparmor_file_open+0x10/0x10 [ 271.575669][ T9720] ? __pfx_chrdev_open+0x10/0x10 [ 271.575682][ T9720] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 271.575699][ T9720] do_dentry_open+0x674/0x1470 [ 271.575711][ T9720] ? __pfx_chrdev_open+0x10/0x10 [ 271.575725][ T9720] vfs_open_consume+0xcc/0x460 [ 271.575741][ T9720] path_openat+0x1547/0x23f0 [ 271.575755][ T9720] ? __pfx_path_openat+0x10/0x10 [ 271.575771][ T9720] do_file_open+0x20e/0x430 [ 271.575783][ T9720] ? __pfx_do_file_open+0x10/0x10 [ 271.575805][ T9720] ? _raw_spin_unlock+0x28/0x50 [ 271.575816][ T9720] ? alloc_fd+0x471/0x7a0 [ 271.575833][ T9720] do_sys_openat2+0x163/0x1d0 [ 271.575846][ T9720] ? __pfx_do_sys_openat2+0x10/0x10 [ 271.575861][ T9720] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 271.575879][ T9720] __ia32_compat_sys_openat+0x12d/0x210 [ 271.575894][ T9720] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 271.575914][ T9720] __do_fast_syscall_32+0x14b/0x8c0 [ 271.575929][ T9720] do_fast_syscall_32+0x32/0x70 [ 271.575943][ T9720] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 271.575957][ T9720] RIP: 0023:0xf7f47fbc [ 271.575967][ T9720] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 271.575977][ T9720] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 271.575988][ T9720] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080001c00 [ 271.575995][ T9720] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 271.576001][ T9720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 271.576007][ T9720] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 271.576013][ T9720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 271.576026][ T9720] [ 271.665568][ T9720] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1026'. ** 79 printk messages dropped ** [ 274.247418][ C0] sr 2:0:0:0: [sr0] tag#21 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 274.247486][ C0] sr 2:0:0:0: [sr0] tag#21 CDB: Release(6) [ 274.247497][ C0] sr 2:0:0:0: [sr0] tag#21 CDB[00]: 17 90 f1 f7 23 98 86 a4 ea 15 fb a0 bc da b7 54 [ 274.247507][ C0] sr 2:0:0:0: [sr0] tag#21 CDB[10]: 41 [ 274.373819][ T9764] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.373849][ T9764] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.583739][ T9764] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.583758][ T9764] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.736767][ T9764] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.736782][ T9764] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.883107][ T9764] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.883132][ T9764] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.292807][ T5865] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.292824][ T5865] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.292842][ T5865] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.292855][ T5865] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.292871][ T5865] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.292884][ T5865] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.292900][ T5865] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.292913][ T5865] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.479459][ T9785] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 276.200961][ C2] net_ratelimit: 81 callbacks suppressed [ 276.595589][ T9795] FAULT_INJECTION: forcing a failure. [ 276.595589][ T9795] name fail_futex, interval 1, probability 0, space 0, times 0 [ 276.595607][ T9795] CPU: 2 UID: 0 PID: 9795 Comm: syz.3.1041 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.595623][ T9795] Tainted: [L]=SOFTLOCKUP [ 276.595627][ T9795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 276.595635][ T9795] Call Trace: [ 276.595639][ T9795] [ 276.595645][ T9795] dump_stack_lvl+0x100/0x190 [ 276.595664][ T9795] should_fail_ex.cold+0x5/0xa [ 276.595681][ T9795] get_futex_key+0x1c9/0x13e0 [ 276.595698][ T9795] ? __pfx_get_futex_key+0x10/0x10 [ 276.595716][ T9795] futex_wait_setup+0x91/0x540 [ 276.595731][ T9795] __futex_wait+0x19f/0x360 [ 276.595742][ T9795] ? __pfx___futex_wait+0x10/0x10 [ 276.595752][ T9795] ? futex_hash+0x311/0x400 [ 276.595767][ T9795] ? __pfx_futex_wake_mark+0x10/0x10 [ 276.595795][ T9795] ? __pfx_futex_hash+0x10/0x10 [ 276.595811][ T9795] ? __pfx_get_futex_key+0x10/0x10 [ 276.595830][ T9795] futex_wait+0xe6/0x370 [ 276.595842][ T9795] ? __pfx_futex_wait+0x10/0x10 [ 276.595858][ T9795] ? putname+0xb1/0x110 [ 276.595871][ T9795] ? kmem_cache_free+0x127/0x6c0 [ 276.595888][ T9795] do_futex+0x265/0x440 [ 276.595904][ T9795] ? __pfx_do_futex+0x10/0x10 [ 276.595920][ T9795] ? __pfx_do_sys_openat2+0x10/0x10 [ 276.595933][ T9795] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 276.595950][ T9795] __ia32_sys_futex_time32+0x2f4/0x470 [ 276.595968][ T9795] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 276.595986][ T9795] ? __might_fault+0xc5/0x140 [ 276.596002][ T9795] __do_fast_syscall_32+0x14b/0x8c0 [ 276.596015][ T9795] ? lockdep_hardirqs_on+0x7d/0x110 [ 276.596029][ T9795] do_fast_syscall_32+0x32/0x70 [ 276.596043][ T9795] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 276.596058][ T9795] RIP: 0023:0xf73aefbc [ 276.596067][ T9795] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 276.596078][ T9795] RSP: 002b:00000000f53c65bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 276.596089][ T9795] RAX: ffffffffffffffda RBX: 00000000f73d4f88 RCX: 0000000000000080 [ 276.596095][ T9795] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73d4f8c [ 276.596102][ T9795] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 276.596108][ T9795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.596114][ T9795] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 276.596128][ T9795] [ 276.988558][ T9800] FAULT_INJECTION: forcing a failure. [ 276.988558][ T9800] name failslab, interval 1, probability 0, space 0, times 0 [ 276.988576][ T9800] CPU: 0 UID: 0 PID: 9800 Comm: syz.3.1043 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.988593][ T9800] Tainted: [L]=SOFTLOCKUP [ 276.988597][ T9800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 276.988605][ T9800] Call Trace: [ 276.988609][ T9800] [ 276.988615][ T9800] dump_stack_lvl+0x100/0x190 [ 276.988634][ T9800] should_fail_ex.cold+0x5/0xa [ 276.988650][ T9800] should_failslab+0xc2/0x120 [ 276.988663][ T9800] __kmalloc_node_noprof+0xff/0x870 [ 276.988679][ T9800] ? __get_vm_area_node+0x1ff/0x350 [ 276.988689][ T9800] ? __get_vm_area_node+0x22b/0x350 [ 276.988699][ T9800] ? __vmalloc_node_range_noprof+0x424/0x1440 [ 276.988713][ T9800] __vmalloc_node_range_noprof+0x424/0x1440 [ 276.988729][ T9800] ? n_tty_open+0x1a/0x170 [ 276.988750][ T9800] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 276.988762][ T9800] ? do_raw_spin_lock+0x128/0x260 [ 276.988777][ T9800] ? find_held_lock+0x2b/0x80 [ 276.988798][ T9800] ? n_tty_open+0x12b/0x170 [ 276.988813][ T9800] ? n_tty_open+0x12b/0x170 [ 276.988829][ T9800] ? n_tty_open+0x1a/0x170 [ 276.988844][ T9800] __vmalloc_node_noprof+0xad/0xf0 [ 276.988856][ T9800] ? n_tty_open+0x1a/0x170 [ 276.988873][ T9800] ? __pfx_n_tty_open+0x10/0x10 [ 276.988889][ T9800] n_tty_open+0x1a/0x170 [ 276.988904][ T9800] tty_ldisc_open+0xa2/0x120 [ 276.988917][ T9800] tty_ldisc_setup+0x87/0xf0 [ 276.988931][ T9800] tty_init_dev.part.0+0x1b5/0x470 [ 276.988947][ T9800] tty_open+0x99d/0xee0 [ 276.988964][ T9800] ? __pfx_tty_open+0x10/0x10 [ 276.988978][ T9800] ? chrdev_open+0x10b/0x6a0 [ 276.988990][ T9800] ? chrdev_open+0x10b/0x6a0 [ 276.989003][ T9800] ? __pfx_tty_open+0x10/0x10 [ 276.989016][ T9800] chrdev_open+0x234/0x6a0 [ 276.989027][ T9800] ? __pfx_apparmor_file_open+0x10/0x10 [ 276.989041][ T9800] ? __pfx_chrdev_open+0x10/0x10 [ 276.989053][ T9800] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 276.989071][ T9800] do_dentry_open+0x674/0x1470 [ 276.989097][ T9800] ? __pfx_chrdev_open+0x10/0x10 [ 276.989114][ T9800] vfs_open_consume+0xcc/0x460 [ 276.989131][ T9800] path_openat+0x1547/0x23f0 [ 276.989148][ T9800] ? __pfx_path_openat+0x10/0x10 [ 276.989166][ T9800] do_file_open+0x20e/0x430 [ 276.989180][ T9800] ? __pfx_do_file_open+0x10/0x10 [ 276.989204][ T9800] ? _raw_spin_unlock+0x28/0x50 [ 276.989215][ T9800] ? alloc_fd+0x471/0x7a0 [ 276.989231][ T9800] do_sys_openat2+0x163/0x1d0 [ 276.989246][ T9800] ? __pfx_do_sys_openat2+0x10/0x10 [ 276.989259][ T9800] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 276.989275][ T9800] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 276.989294][ T9800] __ia32_compat_sys_openat+0x12d/0x210 [ 276.989311][ T9800] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 276.989334][ T9800] do_int80_emulation+0x166/0x650 [ 276.989349][ T9800] asm_int80_emulation+0x1a/0x20 [ 276.989360][ T9800] RIP: 0023:0xf71077ab [ 276.989370][ T9800] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 276.989380][ T9800] RSP: 002b:00000000f53c603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 276.989391][ T9800] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53c6100 [ 276.989398][ T9800] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 276.989404][ T9800] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 276.989410][ T9800] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 276.989416][ T9800] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 276.989431][ T9800] [ 276.989462][ T9800] syz.3.1043: vmalloc error: size 12288, failed to allocated page array size 24, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 276.989500][ T9800] CPU: 0 UID: 0 PID: 9800 Comm: syz.3.1043 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.989528][ T9800] Tainted: [L]=SOFTLOCKUP [ 276.989533][ T9800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 276.989539][ T9800] Call Trace: [ 276.989544][ T9800] [ 276.989548][ T9800] dump_stack_lvl+0x100/0x190 [ 276.989567][ T9800] warn_alloc.cold+0x9e/0xb2 [ 276.989580][ T9800] ? __pfx_warn_alloc+0x10/0x10 [ 276.989594][ T9800] ? dump_stack_lvl+0x17c/0x190 [ 276.989610][ T9800] ? rcu_is_watching+0x13/0xc0 [ 276.989627][ T9800] ? __kasan_kmalloc+0x8a/0xb0 [ 276.989638][ T9800] ? __kmalloc_node_noprof+0x360/0x870 [ 276.989653][ T9800] ? __get_vm_area_node+0x1ff/0x350 [ 276.989663][ T9800] ? __get_vm_area_node+0x22b/0x350 [ 276.989673][ T9800] ? __vmalloc_node_range_noprof+0x424/0x1440 [ 276.989688][ T9800] __vmalloc_node_range_noprof+0x107c/0x1440 [ 276.989705][ T9800] ? n_tty_open+0x1a/0x170 [ 276.989723][ T9800] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 276.989735][ T9800] ? do_raw_spin_lock+0x128/0x260 [ 276.989749][ T9800] ? find_held_lock+0x2b/0x80 [ 276.989763][ T9800] ? n_tty_open+0x12b/0x170 [ 276.989778][ T9800] ? n_tty_open+0x12b/0x170 [ 276.989799][ T9800] ? n_tty_open+0x1a/0x170 [ 276.989814][ T9800] __vmalloc_node_noprof+0xad/0xf0 [ 276.989827][ T9800] ? n_tty_open+0x1a/0x170 [ 276.989843][ T9800] ? __pfx_n_tty_open+0x10/0x10 [ 276.989859][ T9800] n_tty_open+0x1a/0x170 [ 276.989875][ T9800] tty_ldisc_open+0xa2/0x120 [ 276.989889][ T9800] tty_ldisc_setup+0x87/0xf0 [ 276.989903][ T9800] tty_init_dev.part.0+0x1b5/0x470 [ 276.989919][ T9800] tty_open+0x99d/0xee0 [ 276.989937][ T9800] ? __pfx_tty_open+0x10/0x10 [ 276.989952][ T9800] ? chrdev_open+0x10b/0x6a0 [ 276.989963][ T9800] ? chrdev_open+0x10b/0x6a0 [ 276.989976][ T9800] ? __pfx_tty_open+0x10/0x10 [ 276.989990][ T9800] chrdev_open+0x234/0x6a0 [ 276.990001][ T9800] ? __pfx_apparmor_file_open+0x10/0x10 [ 276.990015][ T9800] ? __pfx_chrdev_open+0x10/0x10 [ 276.990027][ T9800] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 276.990045][ T9800] do_dentry_open+0x674/0x1470 [ 276.990056][ T9800] ? __pfx_chrdev_open+0x10/0x10 [ 276.990070][ T9800] vfs_open_consume+0xcc/0x460 [ 276.990086][ T9800] path_openat+0x1547/0x23f0 [ 276.990101][ T9800] ? __pfx_path_openat+0x10/0x10 [ 276.990118][ T9800] do_file_open+0x20e/0x430 [ 276.990131][ T9800] ? __pfx_do_file_open+0x10/0x10 [ 276.990153][ T9800] ? _raw_spin_unlock+0x28/0x50 [ 276.990163][ T9800] ? alloc_fd+0x471/0x7a0 [ 276.990180][ T9800] do_sys_openat2+0x163/0x1d0 [ 276.990193][ T9800] ? __pfx_do_sys_openat2+0x10/0x10 [ 276.990207][ T9800] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 276.990223][ T9800] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 276.990241][ T9800] __ia32_compat_sys_openat+0x12d/0x210 [ 276.990257][ T9800] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 276.990278][ T9800] do_int80_emulation+0x166/0x650 [ 276.990293][ T9800] asm_int80_emulation+0x1a/0x20 [ 276.990304][ T9800] RIP: 0023:0xf71077ab [ 276.990312][ T9800] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 276.990322][ T9800] RSP: 002b:00000000f53c603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 276.990332][ T9800] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53c6100 [ 276.990339][ T9800] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 276.990344][ T9800] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 276.990350][ T9800] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 276.990357][ T9800] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 276.990371][ T9800] [ 276.990415][ T9800] Mem-Info: [ 276.990421][ T9800] active_anon:22158 inactive_anon:1319 isolated_anon:0 [ 276.990421][ T9800] active_file:2327 inactive_file:40347 isolated_file:0 [ 276.990421][ T9800] unevictable:1000 dirty:289 writeback:0 [ 276.990421][ T9800] slab_reclaimable:8966 slab_unreclaimable:56057 [ 276.990421][ T9800] mapped:24379 shmem:19816 pagetables:1058 [ 276.990421][ T9800] sec_pagetables:309 bounce:0 [ 276.990421][ T9800] kernel_misc_reclaimable:0 [ 276.990421][ T9800] free:24560 free_pcp:3728 free_cma:0 [ 276.990450][ T9800] Node 0 active_anon:300kB inactive_anon:48kB active_file:176kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:4kB writeback:0kB shmem:292kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8352kB pagetables:1376kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 276.990480][ T9800] Node 1 active_anon:88332kB inactive_anon:5228kB active_file:9132kB inactive_file:161360kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:97480kB dirty:1152kB writeback:0kB shmem:78972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5424kB pagetables:2856kB sec_pagetables:104kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 276.990510][ T9800] Node 0 DMA free:3052kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:104kB local_pcp:88kB free_cma:0kB [ 276.990541][ T9800] lowmem_reserve[]: 0 256 256 256 256 [ 276.990562][ T9800] Node 0 DMA32 free:19800kB boost:6144kB min:17692kB low:20576kB high:23460kB reserved_highatomic:2048kB free_highatomic:28kB active_anon:300kB inactive_anon:48kB active_file:172kB inactive_file:20kB unevictable:0kB writepending:4kB zspages:0kB present:1032196kB managed:262652kB mlocked:0kB bounce:0kB free_pcp:11116kB local_pcp:4792kB free_cma:0kB [ 276.990593][ T9800] lowmem_reserve[]: 0 0 0 0 0 [ 276.990610][ T9800] Node 1 DMA32 free:75388kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:88332kB inactive_anon:5228kB active_file:9132kB inactive_file:161360kB unevictable:4000kB writepending:1152kB zspages:1936kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:3692kB local_pcp:1276kB free_cma:0kB [ 276.990638][ T9800] lowmem_reserve[]: 0 0 0 0 0 [ 276.990655][ T9800] Node 0 DMA: 91*4kB (UE) 10*8kB (UE) 5*16kB (U) 21*32kB (UE) 5*64kB (U) 4*128kB (UE) 0*256kB 0*512kB 1*1024kB (E) 0*2048kB 0*4096kB = 3052kB [ 276.990724][ T9800] Node 0 DMA32: 84*4kB (UMEH) 83*8kB (UMEH) 67*16kB (UMEH) 126*32kB (UME) 46*64kB (UME) 26*128kB (UME) 13*256kB (UME) 6*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 19800kB [ 276.990803][ T9800] Node 1 DMA32: 667*4kB (UME) 722*8kB (UME) 478*16kB (UME) 339*32kB (UM) 128*64kB (UME) 36*128kB (UME) 13*256kB (UME) 5*512kB (UE) 3*1024kB (ME) 11*2048kB (UM) 1*4096kB (M) = 75324kB [ 276.991046][ T9800] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.991055][ T9800] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 276.991064][ T9800] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.991073][ T9800] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 276.991081][ T9800] 63541 total pagecache pages [ 276.991086][ T9800] 1060 pages in swap cache [ 276.991090][ T9800] Free swap = 118372kB [ 276.991094][ T9800] Total swap = 124996kB [ 276.991098][ T9800] 524155 pages RAM [ 276.991102][ T9800] 0 pages HighMem/MovableOnly [ 276.991106][ T9800] 217600 pages reserved [ 276.991110][ T9800] 0 pages cma reserved [ 276.991222][ T9800] pty pty26: ldisc open failed (-12), clearing slot 26 [ 278.488457][ T9823] FAULT_INJECTION: forcing a failure. [ 278.488457][ T9823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.488475][ T9823] CPU: 0 UID: 0 PID: 9823 Comm: syz.2.1050 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.488490][ T9823] Tainted: [L]=SOFTLOCKUP [ 278.488494][ T9823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 278.488500][ T9823] Call Trace: [ 278.488504][ T9823] [ 278.488508][ T9823] dump_stack_lvl+0x100/0x190 [ 278.488528][ T9823] should_fail_ex.cold+0x5/0xa [ 278.488559][ T9823] _copy_from_iter+0x1f4/0x16c0 [ 278.488576][ T9823] ? __asan_memset+0x23/0x50 [ 278.488593][ T9823] ? __pfx__copy_from_iter+0x10/0x10 [ 278.488608][ T9823] ? __pfx___alloc_skb+0x10/0x10 [ 278.488628][ T9823] netlink_sendmsg+0x8f5/0x10c0 [ 278.488646][ T9823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.488664][ T9823] ? apparmor_socket_sendmsg+0x165/0x280 [ 278.488680][ T9823] ? ____sys_sendmsg+0xa99/0xc30 [ 278.488690][ T9823] ____sys_sendmsg+0xa99/0xc30 [ 278.488699][ T9823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.488715][ T9823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.488734][ T9823] ___sys_sendmsg+0x190/0x1e0 [ 278.488746][ T9823] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.488764][ T9823] ? find_held_lock+0x2b/0x80 [ 278.488787][ T9823] __sys_sendmsg+0x160/0x210 [ 278.488802][ T9823] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.488824][ T9823] __do_fast_syscall_32+0x14b/0x8c0 [ 278.488838][ T9823] ? lockdep_hardirqs_on+0x7d/0x110 [ 278.488852][ T9823] do_fast_syscall_32+0x32/0x70 [ 278.488866][ T9823] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.488880][ T9823] RIP: 0023:0xf7fd5fbc [ 278.488889][ T9823] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 278.488900][ T9823] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 278.488911][ T9823] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000a00 [ 278.488918][ T9823] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 278.488924][ T9823] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 278.488930][ T9823] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 278.488937][ T9823] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 278.488952][ T9823] [ 278.528889][ C2] sr 2:0:0:0: [sr0] tag#30 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 278.528915][ C2] sr 2:0:0:0: [sr0] tag#30 CDB: Release(6) [ 278.528925][ C2] sr 2:0:0:0: [sr0] tag#30 CDB[00]: 17 90 f1 f7 23 98 86 a4 ea 15 fb a0 bc da b7 54 [ 278.528935][ C2] sr 2:0:0:0: [sr0] tag#30 CDB[10]: 41 [ 281.541432][ T9856] net_ratelimit: 329 callbacks suppressed [ 283.517397][ T9875] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 283.530593][ C0] sr 2:0:0:0: [sr0] tag#10 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 283.530616][ C0] sr 2:0:0:0: [sr0] tag#10 CDB: Release(6) [ 283.530625][ C0] sr 2:0:0:0: [sr0] tag#10 CDB[00]: 17 90 f1 f7 23 98 86 a4 ea 15 fb a0 bc da b7 54 [ 283.530635][ C0] sr 2:0:0:0: [sr0] tag#10 CDB[10]: 41 [ 284.703619][ T9899] FAULT_INJECTION: forcing a failure. [ 284.703619][ T9899] name failslab, interval 1, probability 0, space 0, times 0 [ 284.703637][ T9899] CPU: 2 UID: 0 PID: 9899 Comm: syz.3.1072 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.703653][ T9899] Tainted: [L]=SOFTLOCKUP [ 284.703657][ T9899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 284.703664][ T9899] Call Trace: [ 284.703668][ T9899] [ 284.703674][ T9899] dump_stack_lvl+0x100/0x190 [ 284.703695][ T9899] should_fail_ex.cold+0x5/0xa [ 284.703711][ T9899] should_failslab+0xc2/0x120 [ 284.703725][ T9899] __kmalloc_node_noprof+0xff/0x870 [ 284.703741][ T9899] ? __get_vm_area_node+0x1ff/0x350 [ 284.703751][ T9899] ? __get_vm_area_node+0x22b/0x350 [ 284.703761][ T9899] ? __vmalloc_node_range_noprof+0x424/0x1440 [ 284.703776][ T9899] __vmalloc_node_range_noprof+0x424/0x1440 [ 284.703792][ T9899] ? n_tty_open+0x1a/0x170 [ 284.703818][ T9899] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 284.703831][ T9899] ? do_raw_spin_lock+0x128/0x260 [ 284.703846][ T9899] ? find_held_lock+0x2b/0x80 [ 284.703862][ T9899] ? n_tty_open+0x12b/0x170 [ 284.703877][ T9899] ? n_tty_open+0x12b/0x170 [ 284.703894][ T9899] ? n_tty_open+0x1a/0x170 [ 284.703908][ T9899] __vmalloc_node_noprof+0xad/0xf0 [ 284.703920][ T9899] ? n_tty_open+0x1a/0x170 [ 284.703937][ T9899] ? __pfx_n_tty_open+0x10/0x10 [ 284.703952][ T9899] n_tty_open+0x1a/0x170 [ 284.703967][ T9899] tty_ldisc_open+0xa2/0x120 [ 284.703978][ T9899] tty_ldisc_setup+0x87/0xf0 [ 284.703991][ T9899] tty_init_dev.part.0+0x1b5/0x470 [ 284.704007][ T9899] tty_open+0x99d/0xee0 [ 284.704023][ T9899] ? __pfx_tty_open+0x10/0x10 [ 284.704037][ T9899] ? chrdev_open+0x10b/0x6a0 [ 284.704048][ T9899] ? chrdev_open+0x10b/0x6a0 [ 284.704062][ T9899] ? __pfx_tty_open+0x10/0x10 [ 284.704076][ T9899] chrdev_open+0x234/0x6a0 [ 284.704087][ T9899] ? __pfx_apparmor_file_open+0x10/0x10 [ 284.704100][ T9899] ? __pfx_chrdev_open+0x10/0x10 [ 284.704113][ T9899] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 284.704131][ T9899] do_dentry_open+0x674/0x1470 [ 284.704142][ T9899] ? __pfx_chrdev_open+0x10/0x10 [ 284.704182][ T9899] vfs_open_consume+0xcc/0x460 [ 284.704199][ T9899] path_openat+0x1547/0x23f0 [ 284.704216][ T9899] ? __pfx_path_openat+0x10/0x10 [ 284.704232][ T9899] do_file_open+0x20e/0x430 [ 284.704247][ T9899] ? __pfx_do_file_open+0x10/0x10 [ 284.704270][ T9899] ? _raw_spin_unlock+0x28/0x50 [ 284.704280][ T9899] ? alloc_fd+0x471/0x7a0 [ 284.704296][ T9899] do_sys_openat2+0x163/0x1d0 [ 284.704310][ T9899] ? __pfx_do_sys_openat2+0x10/0x10 [ 284.704323][ T9899] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 284.704340][ T9899] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 284.704361][ T9899] __ia32_compat_sys_openat+0x12d/0x210 [ 284.704377][ T9899] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 284.704398][ T9899] do_int80_emulation+0x166/0x650 [ 284.704413][ T9899] asm_int80_emulation+0x1a/0x20 [ 284.704424][ T9899] RIP: 0023:0xf71077ab [ 284.704433][ T9899] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 284.704443][ T9899] RSP: 002b:00000000f53a503c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 284.704454][ T9899] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53a5100 [ 284.704461][ T9899] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 284.704467][ T9899] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 284.704473][ T9899] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 284.704479][ T9899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 284.704493][ T9899] [ 284.711591][ T9899] pty pty26: ldisc open failed (-12), clearing slot 26 [ 286.601458][ T9924] net_ratelimit: 342 callbacks suppressed [ 287.114565][ T9933] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 287.135518][ C2] sr 2:0:0:0: [sr0] tag#5 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 287.135566][ C2] sr 2:0:0:0: [sr0] tag#5 CDB: Release(6) [ 287.135582][ C2] sr 2:0:0:0: [sr0] tag#5 CDB[00]: 17 90 f1 f7 23 98 86 a4 ea 15 fb a0 bc da b7 54 [ 287.135598][ C2] sr 2:0:0:0: [sr0] tag#5 CDB[10]: 41 [ 289.279387][ T9971] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 289.348377][ T9973] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? ** 1733 printk messages dropped ** ** 1701 printk messages dropped ** ** 3062 printk messages dropped ** ** 1852 printk messages dropped ** [ 290.683018][ T9989] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1096'. [ 291.567561][T10011] usb 1-1: USB disconnect, device number 2 [ 291.591743][T10012] FAULT_INJECTION: forcing a failure. [ 291.591743][T10012] name failslab, interval 1, probability 0, space 0, times 0 [ 291.591762][T10012] CPU: 2 UID: 0 PID: 10012 Comm: syz.0.1101 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.591777][T10012] Tainted: [L]=SOFTLOCKUP [ 291.591782][T10012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 291.591788][T10012] Call Trace: [ 291.591792][T10012] [ 291.591802][T10012] dump_stack_lvl+0x100/0x190 [ 291.591822][T10012] should_fail_ex.cold+0x5/0xa [ 291.591839][T10012] should_failslab+0xc2/0x120 [ 291.591853][T10012] __kmalloc_cache_noprof+0x91/0x6d0 [ 291.591868][T10012] ? fscontext_alloc_log+0x4a/0x1b0 [ 291.591898][T10012] fscontext_alloc_log+0x4a/0x1b0 [ 291.591915][T10012] __ia32_sys_fsopen+0x1d9/0x2d0 [ 291.591933][T10012] __do_fast_syscall_32+0x14b/0x8c0 [ 291.591948][T10012] do_fast_syscall_32+0x32/0x70 [ 291.591962][T10012] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.591975][T10012] RIP: 0023:0xf7f47fbc [ 291.591985][T10012] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 291.591995][T10012] RSP: 002b:00000000f53d550c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 291.592006][T10012] RAX: ffffffffffffffda RBX: 0000000080001340 RCX: 0000000000000000 [ 291.592012][T10012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 291.592019][T10012] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 291.592025][T10012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.592031][T10012] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.592045][T10012] [ 291.721007][ C2] net_ratelimit: 254 callbacks suppressed [ 292.108396][ T5145] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 292.184409][T10011] hub 1-0:1.0: USB hub found [ 292.186865][T10011] hub 1-0:1.0: 6 ports detected [ 292.515319][T10036] FAULT_INJECTION: forcing a failure. [ 292.515319][T10036] name failslab, interval 1, probability 0, space 0, times 0 [ 292.515336][T10036] CPU: 2 UID: 0 PID: 10036 Comm: syz.3.1108 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.515351][T10036] Tainted: [L]=SOFTLOCKUP [ 292.515355][T10036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 292.515361][T10036] Call Trace: [ 292.515365][T10036] [ 292.515370][T10036] dump_stack_lvl+0x100/0x190 [ 292.515390][T10036] should_fail_ex.cold+0x5/0xa [ 292.515406][T10036] should_failslab+0xc2/0x120 [ 292.515418][T10036] __kmalloc_noprof+0xfc/0x840 [ 292.515433][T10036] ? __kasan_kmalloc+0xaa/0xb0 [ 292.515444][T10036] ? nla_strdup+0xc3/0x150 [ 292.515460][T10036] nla_strdup+0xc3/0x150 [ 292.515474][T10036] nf_tables_newtable+0xd9c/0x1a90 [ 292.515491][T10036] ? __pfx_nf_tables_newtable+0x10/0x10 [ 292.515502][T10036] ? net_generic+0x25/0x2a0 [ 292.515517][T10036] ? __nla_parse+0x40/0x60 [ 292.515533][T10036] nfnetlink_rcv_batch+0x1410/0x2880 [ 292.515552][T10036] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 292.515567][T10036] ? kasan_save_stack+0x3f/0x50 [ 292.515576][T10036] ? kasan_save_stack+0x30/0x50 [ 292.515585][T10036] ? kasan_save_track+0x14/0x30 [ 292.515595][T10036] ? __kasan_slab_alloc+0x89/0x90 [ 292.515605][T10036] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 292.515626][T10036] ? __lock_acquire+0x5c0/0x1f40 [ 292.515650][T10036] ? __nla_parse+0x40/0x60 [ 292.515667][T10036] nfnetlink_rcv+0x3bd/0x440 [ 292.515679][T10036] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 292.515694][T10036] netlink_unicast+0x668/0x950 [ 292.515711][T10036] ? __pfx_netlink_unicast+0x10/0x10 [ 292.515730][T10036] netlink_sendmsg+0x9ac/0x10c0 [ 292.515747][T10036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.515766][T10036] ? apparmor_socket_sendmsg+0x165/0x280 [ 292.515781][T10036] ? ____sys_sendmsg+0xa99/0xc30 [ 292.515791][T10036] ____sys_sendmsg+0xa99/0xc30 [ 292.515801][T10036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.515818][T10036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.515835][T10036] ___sys_sendmsg+0x190/0x1e0 [ 292.515847][T10036] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.515865][T10036] ? find_held_lock+0x2b/0x80 [ 292.515888][T10036] __sys_sendmsg+0x160/0x210 [ 292.515902][T10036] ? __pfx___sys_sendmsg+0x10/0x10 [ 292.515939][T10036] __do_fast_syscall_32+0x14b/0x8c0 [ 292.515954][T10036] ? lockdep_hardirqs_on+0x7d/0x110 [ 292.515968][T10036] do_fast_syscall_32+0x32/0x70 [ 292.515981][T10036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.515995][T10036] RIP: 0023:0xf73aefbc [ 292.516004][T10036] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 292.516014][T10036] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 292.516025][T10036] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000800 [ 292.516032][T10036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 292.516038][T10036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 292.516044][T10036] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 292.516050][T10036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 292.516064][T10036] [ 292.590970][ T857] usb 1-1: new high-speed USB device number 3 using ehci-pci [ 293.069002][ T857] usb 1-1: New USB device found: idVendor=0627, idProduct=0001, bcdDevice=0.00 [ 293.146388][ T857] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 293.146400][ T857] usb 1-1: Product: QEMU USB Tablet [ 293.146408][ T857] usb 1-1: Manufacturer: QEMU [ 293.146416][ T857] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 293.184951][ T857] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0006/input/input14 [ 293.204018][ T857] hid-generic 0003:0627:0001.0006: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 293.350564][ C0] sr 2:0:0:0: [sr0] tag#8 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 293.350588][ C0] sr 2:0:0:0: [sr0] tag#8 CDB: Release(6) [ 293.350598][ C0] sr 2:0:0:0: [sr0] tag#8 CDB[00]: 17 90 f1 f7 23 98 86 a4 ea 15 fb a0 bc da b7 54 [ 293.350608][ C0] sr 2:0:0:0: [sr0] tag#8 CDB[10]: 41 [ 293.457513][ C0] sr 2:0:0:0: [sr0] tag#16 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 293.457537][ C0] sr 2:0:0:0: [sr0] tag#16 CDB: Release(6) [ 293.457547][ C0] sr 2:0:0:0: [sr0] tag#16 CDB[00]: 17 90 f1 f7 23 98 86 a4 ea 15 fb a0 bc da b7 54 [ 293.457557][ C0] sr 2:0:0:0: [sr0] tag#16 CDB[10]: 41 [ 293.674507][T10058] FAULT_INJECTION: forcing a failure. [ 293.674507][T10058] name failslab, interval 1, probability 0, space 0, times 0 [ 293.674525][T10058] CPU: 2 UID: 0 PID: 10058 Comm: syz.1.1114 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.674541][T10058] Tainted: [L]=SOFTLOCKUP [ 293.674546][T10058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 293.674553][T10058] Call Trace: [ 293.674558][T10058] [ 293.674562][T10058] dump_stack_lvl+0x100/0x190 [ 293.674581][T10058] should_fail_ex.cold+0x5/0xa [ 293.674599][T10058] should_failslab+0xc2/0x120 [ 293.674612][T10058] __kmalloc_noprof+0xfc/0x840 [ 293.674628][T10058] ? trace_kmalloc+0xeb/0x110 [ 293.674639][T10058] ? lsm_blob_alloc+0x68/0x90 [ 293.674653][T10058] lsm_blob_alloc+0x68/0x90 [ 293.674663][T10058] security_sk_alloc+0x2d/0x290 [ 293.674677][T10058] sk_prot_alloc+0x12a/0x2a0 [ 293.674689][T10058] sk_alloc+0x36/0xe80 [ 293.674703][T10058] __netlink_create+0x5e/0x2c0 [ 293.674717][T10058] __netlink_kernel_create+0xed/0x750 [ 293.674732][T10058] ? audit_net_init+0xc7/0x440 [ 293.674748][T10058] ? __pfx___netlink_kernel_create+0x10/0x10 [ 293.674762][T10058] ? find_held_lock+0x2b/0x80 [ 293.674777][T10058] ? audit_net_init+0x190/0x440 [ 293.674792][T10058] ? audit_net_init+0x190/0x440 [ 293.674810][T10058] audit_net_init+0x1ae/0x440 [ 293.674827][T10058] ? __pfx_audit_net_init+0x10/0x10 [ 293.674842][T10058] ? trace_kmalloc+0xeb/0x110 [ 293.674852][T10058] ? __kasan_kmalloc+0xaa/0xb0 [ 293.674862][T10058] ? __pfx_audit_receive+0x10/0x10 [ 293.674872][T10058] ? __pfx_audit_multicast_bind+0x10/0x10 [ 293.674883][T10058] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 293.674898][T10058] ? __pfx_audit_net_init+0x10/0x10 [ 293.674913][T10058] ops_init+0x1e2/0x5f0 [ 293.674930][T10058] setup_net+0x118/0x3a0 [ 293.674945][T10058] ? __pfx_setup_net+0x10/0x10 [ 293.674980][T10058] ? bpf_lsm_namespace_init+0x9/0x10 [ 293.674995][T10058] copy_net_ns+0x340/0x7a0 [ 293.675007][T10058] create_new_namespaces+0x3ea/0xac0 [ 293.675023][T10058] unshare_nsproxy_namespaces+0xf6/0x210 [ 293.675037][T10058] ksys_unshare+0x44f/0x980 [ 293.675051][T10058] ? __pfx_ksys_unshare+0x10/0x10 [ 293.675065][T10058] ? __might_fault+0xc5/0x140 [ 293.675082][T10058] __ia32_sys_unshare+0x30/0x40 [ 293.675094][T10058] __do_fast_syscall_32+0x14b/0x8c0 [ 293.675108][T10058] ? lockdep_hardirqs_on+0x7d/0x110 [ 293.675121][T10058] do_fast_syscall_32+0x32/0x70 [ 293.675135][T10058] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.675148][T10058] RIP: 0023:0xf7fb6fbc [ 293.675158][T10058] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 293.675169][T10058] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 293.675182][T10058] RAX: ffffffffffffffda RBX: 000000004a000200 RCX: 0000000000000000 [ 293.675190][T10058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 293.675196][T10058] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 293.675202][T10058] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 293.675208][T10058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.675222][T10058] [ 293.676994][T10058] audit_panic: 112 callbacks suppressed [ 293.677007][T10058] audit: cannot initialize netlink socket in namespace [ 293.854495][T10061] sit1: entered allmulticast mode [ 293.889210][T10060] 9pnet_virtio: no channels available for device syz ** 473 printk messages dropped ** [ 295.668580][ T5799] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 295.670690][T10079] netlink: 'syz.0.1120': attribute type 1 has an invalid length. [ 295.670701][T10079] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1120'. [ 295.670709][T10079] FAULT_INJECTION: forcing a failure. [ 295.670709][T10079] name failslab, interval 1, probability 0, space 0, times 0 [ 295.670726][T10079] CPU: 2 UID: 0 PID: 10079 Comm: syz.0.1120 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.670741][T10079] Tainted: [L]=SOFTLOCKUP [ 295.670745][T10079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 295.670751][T10079] Call Trace: [ 295.670755][T10079] [ 295.670760][T10079] dump_stack_lvl+0x100/0x190 [ 295.670779][T10079] should_fail_ex.cold+0x5/0xa [ 295.670795][T10079] should_failslab+0xc2/0x120 [ 295.670808][T10079] __kmalloc_noprof+0xfc/0x840 [ 295.670824][T10079] ? ovs_meter_cmd_set+0x1cd/0x1930 [ 295.670839][T10079] ovs_meter_cmd_set+0x1cd/0x1930 [ 295.670854][T10079] ? __pfx_ovs_meter_cmd_set+0x10/0x10 [ 295.670868][T10079] ? __nla_parse+0x40/0x60 [ 295.670897][T10079] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 ** 19 printk messages dropped ** [ 295.671290][T10079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.671308][T10079] ? apparmor_socket_sendmsg+0x165/0x280 [ 295.671324][T10079] ? ____sys_sendmsg+0xa99/0xc30 [ 295.671334][T10079] ____sys_sendmsg+0xa99/0xc30 [ 295.671343][T10079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.671359][T10079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.671377][T10079] ___sys_sendmsg+0x190/0x1e0 [ 295.671389][T10079] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.671407][T10079] ? find_held_lock+0x2b/0x80 [ 295.671431][T10079] __sys_sendmsg+0x160/0x210 [ 295.671445][T10079] ? __pfx___sys_sendmsg+0x10/0x10 [ 295.671473][T10079] __do_fast_syscall_32+0x14b/0x8c0 [ 295.671487][T10079] ? lockdep_hardirqs_on+0x7d/0x110 [ 295.671500][T10079] do_fast_syscall_32+0x32/0x70 [ 295.671514][T10079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.671527][T10079] RIP: 0023:0xf7f47fbc [ 295.671537][T10079] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 295.671547][T10079] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 295.671557][T10079] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000580 [ 295.671564][T10079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.671570][T10079] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 295.671576][T10079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.671582][T10079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 295.671597][T10079] [ 296.122496][ T5799] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 296.122533][ T5799] Bluetooth: hci1: Injecting HCI hardware error event [ 296.123721][ T5800] Bluetooth: hci1: hardware error 0x00 [ 296.489597][T10090] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 296.547054][ C2] sr 2:0:0:0: [sr0] tag#19 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 296.547084][ C2] sr 2:0:0:0: [sr0] tag#19 CDB: Release(6) [ 296.547094][ C2] sr 2:0:0:0: [sr0] tag#19 CDB[00]: 17 90 f1 f7 23 98 86 a4 ea 15 fb a0 bc da b7 54 [ 296.547103][ C2] sr 2:0:0:0: [sr0] tag#19 CDB[10]: 41 [ 296.931133][ T48] net_ratelimit: 334 callbacks suppressed [ 297.561082][ T5799] Bluetooth: hci3: command 0x0405 tx timeout [ 298.201093][ T5800] Bluetooth: hci1: Opcode 0x0c03 failed: -110 ** 727 printk messages dropped ** [ 298.976512][T10117] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 298.976646][T10117] block device autoloading is deprecated and will be removed. [ 299.015423][ T5800] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 299.070654][ T43] audit: type=1326 audit(1793260251.856:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.2.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 299.070748][ T43] audit: type=1326 audit(1793260251.856:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.2.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 299.091280][ T43] audit: type=1326 audit(1793260251.886:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.2.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 299.091318][ T43] audit: type=1326 audit(1793260251.886:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.2.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 299.091428][ T43] audit: type=1326 audit(1793260251.886:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.2.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 299.091545][ T43] audit: type=1326 audit(1793260251.886:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.2.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 299.124055][ T43] audit: type=1326 audit(1793260251.916:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.2.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 299.135099][ T43] audit: type=1326 audit(1793260251.926:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.2.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 299.135180][ T43] audit: type=1326 audit(1793260251.926:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.2.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 299.135904][ T43] audit: type=1326 audit(1793260251.926:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10116 comm="syz.2.1130" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5fbc code=0x7ffc0000 [ 299.721024][ T5800] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 299.721060][ T5800] Bluetooth: hci0: Injecting HCI hardware error event [ 299.722788][ T5800] Bluetooth: hci0: hardware error 0x00 [ 300.486488][T10150] bridge0: left allmulticast mode [ 300.685098][ C0] sr 2:0:0:0: [sr0] tag#26 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 300.685124][ C0] sr 2:0:0:0: [sr0] tag#26 CDB: Release(6) [ 300.685134][ C0] sr 2:0:0:0: [sr0] tag#26 CDB[00]: 17 90 f1 f7 23 98 86 a4 ea 15 fb a0 bc da b7 54 [ 300.685144][ C0] sr 2:0:0:0: [sr0] tag#26 CDB[10]: 41 [ 301.117011][T10168] netlink: 'syz.1.1143': attribute type 1 has an invalid length. [ 301.117026][T10168] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1143'. [ 301.117064][T10168] netlink: 'syz.1.1143': attribute type 1 has an invalid length. [ 301.117072][T10168] netlink: 'syz.1.1143': attribute type 2 has an invalid length. [ 301.881104][ T5800] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 302.360952][ C2] net_ratelimit: 227 callbacks suppressed [ 302.853985][T10178] FAULT_INJECTION: forcing a failure. [ 302.853985][T10178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.854003][T10178] CPU: 2 UID: 0 PID: 10178 Comm: syz.3.1147 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.854018][T10178] Tainted: [L]=SOFTLOCKUP [ 302.854022][T10178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 302.854028][T10178] Call Trace: [ 302.854032][T10178] [ 302.854037][T10178] dump_stack_lvl+0x100/0x190 [ 302.854065][T10178] should_fail_ex.cold+0x5/0xa [ 302.854088][T10178] _copy_to_user+0x32/0xd0 [ 302.854108][T10178] simple_read_from_buffer+0xcb/0x170 [ 302.854123][T10178] proc_fail_nth_read+0x1af/0x230 [ 302.854137][T10178] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 302.854150][T10178] ? rw_verify_area+0xce/0x6d0 [ 302.854165][T10178] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 302.854177][T10178] vfs_read+0x1e4/0xb40 [ 302.854188][T10178] ? lock_acquire+0x1d1/0x380 [ 302.854199][T10178] ? __fget_files+0x34/0x3d0 [ 302.854210][T10178] ? __pfx_vfs_read+0x10/0x10 [ 302.854219][T10178] ? find_held_lock+0x2b/0x80 [ 302.854233][T10178] ? __fget_files+0x215/0x3d0 [ 302.854246][T10178] ? __fget_files+0x21f/0x3d0 [ 302.854261][T10178] ksys_read+0x12a/0x250 [ 302.854271][T10178] ? __pfx_ksys_read+0x10/0x10 [ 302.854284][T10178] do_int80_emulation+0x166/0x650 [ 302.854301][T10178] asm_int80_emulation+0x1a/0x20 [ 302.854312][T10178] RIP: 0023:0xf71077ab [ 302.854321][T10178] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 302.854332][T10178] RSP: 002b:00000000f53c64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 302.854342][T10178] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53c65d0 [ 302.854352][T10178] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 302.854361][T10178] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 302.854371][T10178] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 302.854381][T10178] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.854395][T10178] [ 303.081093][ T5800] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 303.081877][ T5800] Bluetooth: hci3: Injecting HCI hardware error event [ 303.085410][ T67] Bluetooth: hci3: hardware error 0x00 [ 303.133797][ T1172] IPVS: starting estimator thread 0... [ 303.135185][T10184] FAULT_INJECTION: forcing a failure. [ 303.135185][T10184] name failslab, interval 1, probability 0, space 0, times 0 [ 303.135200][T10184] CPU: 0 UID: 0 PID: 10184 Comm: syz.1.1149 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.135215][T10184] Tainted: [L]=SOFTLOCKUP [ 303.135219][T10184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 303.135226][T10184] Call Trace: [ 303.135230][T10184] [ 303.135235][T10184] dump_stack_lvl+0x100/0x190 [ 303.135254][T10184] should_fail_ex.cold+0x5/0xa [ 303.135270][T10184] should_failslab+0xc2/0x120 [ 303.135283][T10184] __kmalloc_cache_noprof+0x91/0x6d0 [ 303.135297][T10184] ? v4l2_fh_open+0x4c/0xa0 [ 303.135327][T10184] v4l2_fh_open+0x4c/0xa0 [ 303.135338][T10184] v4l2_open+0x1d2/0x490 [ 303.135350][T10184] ? __pfx_v4l2_open+0x10/0x10 [ 303.135360][T10184] chrdev_open+0x234/0x6a0 [ 303.135373][T10184] ? __pfx_apparmor_file_open+0x10/0x10 [ 303.135387][T10184] ? __pfx_chrdev_open+0x10/0x10 [ 303.135399][T10184] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 303.135416][T10184] do_dentry_open+0x674/0x1470 [ 303.135427][T10184] ? __pfx_chrdev_open+0x10/0x10 [ 303.135441][T10184] vfs_open_consume+0xcc/0x460 [ 303.135457][T10184] path_openat+0x1547/0x23f0 [ 303.135472][T10184] ? __pfx_path_openat+0x10/0x10 [ 303.135488][T10184] do_file_open+0x20e/0x430 [ 303.135503][T10184] ? __pfx_do_file_open+0x10/0x10 [ 303.135527][T10184] ? _raw_spin_unlock+0x28/0x50 [ 303.135538][T10184] ? alloc_fd+0x471/0x7a0 [ 303.135553][T10184] do_sys_openat2+0x163/0x1d0 [ 303.135567][T10184] ? __pfx_do_sys_openat2+0x10/0x10 [ 303.135580][T10184] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 303.135596][T10184] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 303.135697][T10184] __ia32_compat_sys_openat+0x12d/0x210 [ 303.135715][T10184] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 303.135736][T10184] do_int80_emulation+0x166/0x650 [ 303.135753][T10184] asm_int80_emulation+0x1a/0x20 [ 303.135765][T10184] RIP: 0023:0xf71a77ab [ 303.135774][T10184] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 303.135784][T10184] RSP: 002b:00000000f546603c EFLAGS: 00000246 [ 303.135790][T10184] ORIG_RAX: 0000000000000127 [ 303.135796][T10184] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5466100 [ 303.135803][T10184] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 303.135809][T10184] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 303.135815][T10184] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 303.135821][T10184] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 303.135835][T10184] [ 303.224336][T10186] IPVS: using max 43 ests per chain, 103200 per kthread [ 303.310103][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'. [ 303.451106][T10192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1151'. [ 304.589806][T10212] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1156'. [ 305.161041][ T67] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 306.888703][T10232] 9p: Bad value for 'wfdno' [ 306.902408][T10240] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 307.003131][T10242] netlink: 'syz.1.1164': attribute type 1 has an invalid length. [ 307.200222][ T5865] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.559661][ T5883] net_ratelimit: 202 callbacks suppressed [ 308.250845][ T5865] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.420011][ T5865] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.524906][ T5865] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.785705][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.789726][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.790841][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.800728][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.811799][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 308.937786][ T5865] bridge_slave_1: left promiscuous mode [ 308.938758][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.998711][ T5865] bridge_slave_0: left promiscuous mode [ 308.998817][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.554321][ T5865] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 310.579445][ T5865] batman_adv: batadv0: Removing interface: ip6gretap1 [ 310.739081][ T5865] bond1 (unregistering): (slave geneve2): Releasing active interface [ 310.789948][ T5865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.803226][ T5865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.806089][ T5865] bond0 (unregistering): Released all slaves [ 310.827611][ T5865] bond1 (unregistering): Released all slaves [ 310.841141][ T67] Bluetooth: hci1: command tx timeout [ 310.929676][ T5499] 8021q: adding VLAN 0 to HW filter on device eth2 [ 311.078933][ T5865] tipc: Left network mode [ 311.492804][T10264] rxe_eth0 speed is unknown, defaulting to 1000 [ 311.579129][ T5499] 8021q: adding VLAN 0 to HW filter on device eth3 [ 312.680998][ C2] net_ratelimit: 106 callbacks suppressed [ 312.895613][ T5499] 8021q: adding VLAN 0 to HW filter on device eth4 [ 312.921100][ T67] Bluetooth: hci1: command tx timeout [ 313.162230][ T5865] hsr_slave_0: left promiscuous mode [ 313.166740][ T5865] hsr_slave_1: left promiscuous mode [ 313.167206][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.167215][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.178855][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.178864][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.235656][ T5865] veth1_vlan: left promiscuous mode [ 313.235751][ T5865] veth0_vlan: left promiscuous mode [ 313.611136][ T857] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 313.792121][ T857] usb 6-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 313.795161][ T857] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 313.795174][ T857] usb 6-1: config 0 has no interface number 0 [ 313.795192][ T857] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 313.795205][ T857] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 3487, setting to 8 [ 313.795233][ T857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.805109][ T5865] team0 (unregistering): Port device team_slave_1 removed [ 313.856351][ T5865] team0 (unregistering): Port device team_slave_0 removed [ 314.297725][T10355] FAULT_INJECTION: forcing a failure. [ 314.297725][T10355] name failslab, interval 1, probability 0, space 0, times 0 [ 314.297742][T10355] CPU: 2 UID: 0 PID: 10355 Comm: syz.0.1184 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.297756][T10355] Tainted: [L]=SOFTLOCKUP [ 314.297761][T10355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 314.297767][T10355] Call Trace: [ 314.297771][T10355] [ 314.297776][T10355] dump_stack_lvl+0x100/0x190 [ 314.297799][T10355] should_fail_ex.cold+0x5/0xa [ 314.297822][T10355] should_failslab+0xc2/0x120 [ 314.297844][T10355] __kmalloc_cache_noprof+0x91/0x6d0 [ 314.297881][T10355] ? basic_change+0x224/0x1250 [ 314.297899][T10355] basic_change+0x224/0x1250 [ 314.297916][T10355] ? __pfx_basic_change+0x10/0x10 [ 314.297930][T10355] ? __mutex_unlock_slowpath+0x35d/0x930 [ 314.297951][T10355] ? __pfx_basic_change+0x10/0x10 [ 314.297964][T10355] tc_new_tfilter+0x9e2/0x24e0 [ 314.297986][T10355] ? kasan_quarantine_put+0x104/0x240 [ 314.298002][T10355] ? lockdep_hardirqs_on+0x7d/0x110 [ 314.298015][T10355] ? __pfx_tc_new_tfilter+0x10/0x10 [ 314.298029][T10355] ? kfree_skbmem+0x19a/0x210 [ 314.298043][T10355] ? skb_release_data+0x69d/0x860 [ 314.298060][T10355] ? __lock_acquire+0x5c0/0x1f40 [ 314.298077][T10355] ? lock_acquire+0x1d1/0x380 [ 314.298088][T10355] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 314.298105][T10355] ? find_held_lock+0x2b/0x80 [ 314.298120][T10355] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 314.298137][T10355] ? __pfx_tc_new_tfilter+0x10/0x10 [ 314.298151][T10355] rtnetlink_rcv_msg+0x95e/0xe90 [ 314.298175][T10355] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 314.298212][T10355] netlink_rcv_skb+0x159/0x420 [ 314.298234][T10355] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 314.298262][T10355] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 314.298276][T10355] ? __asan_memcpy+0x3c/0x60 [ 314.298296][T10355] ? netlink_deliver_tap+0x1ae/0xb50 [ 314.298313][T10355] netlink_unicast+0x668/0x950 [ 314.298330][T10355] ? __pfx_netlink_unicast+0x10/0x10 [ 314.298349][T10355] netlink_sendmsg+0x9ac/0x10c0 [ 314.298367][T10355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.298385][T10355] ? apparmor_socket_sendmsg+0x165/0x280 [ 314.298401][T10355] ? ____sys_sendmsg+0xa99/0xc30 [ 314.298411][T10355] ____sys_sendmsg+0xa99/0xc30 [ 314.298420][T10355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.298437][T10355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.298454][T10355] ___sys_sendmsg+0x190/0x1e0 [ 314.298466][T10355] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.298484][T10355] ? find_held_lock+0x2b/0x80 [ 314.298508][T10355] __sys_sendmsg+0x160/0x210 [ 314.298523][T10355] ? __pfx___sys_sendmsg+0x10/0x10 [ 314.298550][T10355] __do_fast_syscall_32+0x14b/0x8c0 [ 314.298563][T10355] ? lockdep_hardirqs_on+0x7d/0x110 [ 314.298577][T10355] do_fast_syscall_32+0x32/0x70 [ 314.298591][T10355] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.298605][T10355] RIP: 0023:0xf7f47fbc [ 314.298614][T10355] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 314.298624][T10355] RSP: 002b:00000000f539350c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 314.298635][T10355] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000e80 [ 314.298642][T10355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.298648][T10355] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.298655][T10355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.298661][T10355] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.298675][T10355] [ 314.320774][ T5499] 8021q: adding VLAN 0 to HW filter on device eth5 [ 314.674778][ T857] usb 6-1: config 0 descriptor?? [ 314.689273][T10347] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 314.699739][ T857] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 314.714242][T10369] FAULT_INJECTION: forcing a failure. [ 314.714242][T10369] name fail_futex, interval 1, probability 0, space 0, times 0 [ 314.714269][T10369] CPU: 2 UID: 0 PID: 10369 Comm: syz.0.1188 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.714296][T10369] Tainted: [L]=SOFTLOCKUP [ 314.714304][T10369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 314.714316][T10369] Call Trace: [ 314.714323][T10369] [ 314.714331][T10369] dump_stack_lvl+0x100/0x190 [ 314.714364][T10369] should_fail_ex.cold+0x5/0xa [ 314.714392][T10369] get_futex_key+0x1c9/0x13e0 [ 314.714420][T10369] ? __pfx_get_futex_key+0x10/0x10 [ 314.714452][T10369] futex_wait_setup+0x91/0x540 [ 314.714479][T10369] __futex_wait+0x19f/0x360 [ 314.714500][T10369] ? __pfx___futex_wait+0x10/0x10 [ 314.714518][T10369] ? futex_hash+0x311/0x400 [ 314.714552][T10369] ? __pfx_futex_wake_mark+0x10/0x10 [ 314.714576][T10369] ? __pfx_futex_hash+0x10/0x10 [ 314.714599][T10369] ? __pfx_get_futex_key+0x10/0x10 [ 314.714632][T10369] futex_wait+0xe6/0x370 [ 314.714652][T10369] ? __pfx_futex_wait+0x10/0x10 [ 314.714681][T10369] ? putname+0xb1/0x110 [ 314.714703][T10369] ? kmem_cache_free+0x127/0x6c0 [ 314.714734][T10369] do_futex+0x265/0x440 [ 314.714763][T10369] ? __pfx_do_futex+0x10/0x10 [ 314.714791][T10369] ? __pfx_do_sys_openat2+0x10/0x10 [ 314.714814][T10369] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 314.714859][T10369] __ia32_sys_futex_time32+0x2f4/0x470 [ 314.714896][T10369] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 314.714929][T10369] ? __might_fault+0xc5/0x140 [ 314.714958][T10369] __do_fast_syscall_32+0x14b/0x8c0 [ 314.714984][T10369] ? lockdep_hardirqs_on+0x7d/0x110 [ 314.715009][T10369] do_fast_syscall_32+0x32/0x70 [ 314.715034][T10369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.715057][T10369] RIP: 0023:0xf7f47fbc [ 314.715073][T10369] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 314.715091][T10369] RSP: 002b:00000000f53d55bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 314.715110][T10369] RAX: ffffffffffffffda RBX: 00000000f7405020 RCX: 0000000000000080 [ 314.715123][T10369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7405024 [ 314.715135][T10369] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 314.715146][T10369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.715159][T10369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.715185][T10369] [ 314.949010][T10264] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.949079][T10264] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.949152][T10264] bridge_slave_0: entered allmulticast mode [ 314.949937][T10264] bridge_slave_0: entered promiscuous mode [ 314.954698][T10264] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.957925][T10264] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.958034][T10264] bridge_slave_1: entered allmulticast mode [ 314.960705][T10264] bridge_slave_1: entered promiscuous mode [ 315.001047][ T67] Bluetooth: hci1: command tx timeout [ 315.025831][T10264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.027729][T10264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.050532][T10264] team0: Port device team_slave_0 added [ 315.052821][T10264] team0: Port device team_slave_1 added [ 315.074131][T10264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.074137][T10264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.074149][T10264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.076475][T10264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.076481][T10264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.076571][T10264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.118330][T10264] hsr_slave_0: entered promiscuous mode [ 315.118858][T10264] hsr_slave_1: entered promiscuous mode [ 315.119360][T10264] debugfs: 'hsr0' already exists in 'hsr' [ 315.119370][T10264] Cannot create hsr debugfs directory [ 315.290507][T10264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 315.297664][T10264] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 315.298269][T10264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 315.307975][T10264] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 315.308638][T10264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 315.318627][T10264] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 315.319167][T10264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 315.333640][T10264] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 315.395809][T10264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.406813][T10264] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.410174][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.410215][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.422766][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.422807][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.645725][T10392] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 315.681589][ C2] sr 2:0:0:0: [sr0] tag#9 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 315.681615][ C2] sr 2:0:0:0: [sr0] tag#9 CDB: Release(6) [ 315.681625][ C2] sr 2:0:0:0: [sr0] tag#9 CDB[00]: 17 90 f1 f7 23 98 86 a4 ea 15 fb a0 bc da b7 54 [ 315.681634][ C2] sr 2:0:0:0: [sr0] tag#9 CDB[10]: 41 [ 315.909929][T10264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.179115][T10264] veth0_vlan: entered promiscuous mode [ 316.187940][T10264] veth1_vlan: entered promiscuous mode [ 316.222366][T10264] veth0_macvtap: entered promiscuous mode [ 316.239406][T10264] veth1_macvtap: entered promiscuous mode [ 316.287036][T10264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.314289][T10264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.346174][ T5880] usb 6-1: USB disconnect, device number 23 [ 316.355213][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.355246][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.367019][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.367054][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.537634][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.537641][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.582649][ T1697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.582656][ T1697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.762124][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.762153][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.871479][ T5880] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 317.021636][ T5880] usb 6-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 317.022586][ T5880] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.022693][ T5880] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 317.022707][ T5880] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 317.022737][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.090952][ T67] Bluetooth: hci1: command tx timeout [ 317.298107][T10422] FAULT_INJECTION: forcing a failure. [ 317.298107][T10422] name failslab, interval 1, probability 0, space 0, times 0 [ 317.298123][T10422] CPU: 2 UID: 0 PID: 10422 Comm: syz.0.1193 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.298137][T10422] Tainted: [L]=SOFTLOCKUP [ 317.298141][T10422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 317.298147][T10422] Call Trace: [ 317.298151][T10422] [ 317.298156][T10422] dump_stack_lvl+0x100/0x190 [ 317.298175][T10422] should_fail_ex.cold+0x5/0xa [ 317.298191][T10422] should_failslab+0xc2/0x120 [ 317.298204][T10422] __kmalloc_cache_noprof+0x91/0x6d0 [ 317.298218][T10422] ? genl_start+0x1e8/0x970 [ 317.298237][T10422] genl_start+0x1e8/0x970 [ 317.298255][T10422] __netlink_dump_start+0x60e/0x990 [ 317.298272][T10422] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 317.298290][T10422] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 317.298307][T10422] ? hook_capable+0x1bc/0x500 [ 317.298319][T10422] ? rcu_is_watching+0x13/0xc0 [ 317.298335][T10422] ? __pfx_genl_start+0x10/0x10 [ 317.298350][T10422] ? __pfx_genl_dumpit+0x10/0x10 [ 317.298365][T10422] ? __pfx_genl_done+0x10/0x10 [ 317.298381][T10422] ? bpf_lsm_capable+0x9/0x10 [ 317.298391][T10422] ? security_capable+0x80/0x260 [ 317.298404][T10422] ? ns_capable+0xcd/0xf0 [ 317.298422][T10422] genl_rcv_msg+0x471/0x800 [ 317.298440][T10422] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.298470][T10422] ? __lock_acquire+0x5c0/0x1f40 [ 317.298483][T10422] ? __pfx_batadv_gw_dump+0x10/0x10 [ 317.298501][T10422] netlink_rcv_skb+0x159/0x420 [ 317.298516][T10422] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.298533][T10422] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 317.298553][T10422] ? netlink_deliver_tap+0x1ae/0xb50 [ 317.298575][T10422] genl_rcv+0x28/0x40 [ 317.298590][T10422] netlink_unicast+0x668/0x950 [ 317.298607][T10422] ? __pfx_netlink_unicast+0x10/0x10 [ 317.298626][T10422] netlink_sendmsg+0x9ac/0x10c0 [ 317.298643][T10422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.298662][T10422] ? apparmor_socket_sendmsg+0x165/0x280 [ 317.298677][T10422] ? ____sys_sendmsg+0xa99/0xc30 [ 317.298687][T10422] ____sys_sendmsg+0xa99/0xc30 [ 317.298697][T10422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.298713][T10422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.298731][T10422] ___sys_sendmsg+0x190/0x1e0 [ 317.298743][T10422] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.298761][T10422] ? find_held_lock+0x2b/0x80 [ 317.298785][T10422] __sys_sendmsg+0x160/0x210 [ 317.298800][T10422] ? __pfx___sys_sendmsg+0x10/0x10 [ 317.298822][T10422] __do_fast_syscall_32+0x14b/0x8c0 [ 317.298836][T10422] ? lockdep_hardirqs_on+0x7d/0x110 [ 317.298849][T10422] do_fast_syscall_32+0x32/0x70 [ 317.298863][T10422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 317.298876][T10422] RIP: 0023:0xf7f47fbc [ 317.298885][T10422] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 317.298895][T10422] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 317.298906][T10422] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 317.298912][T10422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.298919][T10422] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.298925][T10422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.298931][T10422] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.298945][T10422] [ 317.375857][T10424] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1194'. [ 317.375870][T10424] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1194'. [ 317.854113][T10415] FAULT_INJECTION: forcing a failure. [ 317.854113][T10415] name failslab, interval 1, probability 0, space 0, times 0 [ 317.854132][T10415] CPU: 0 UID: 0 PID: 10415 Comm: syz.1.1192 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.854149][T10415] Tainted: [L]=SOFTLOCKUP [ 317.854154][T10415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 317.854162][T10415] Call Trace: [ 317.854167][T10415] [ 317.854172][T10415] dump_stack_lvl+0x100/0x190 [ 317.854194][T10415] should_fail_ex.cold+0x5/0xa [ 317.854211][T10415] should_failslab+0xc2/0x120 [ 317.854226][T10415] kmem_cache_alloc_noprof+0x92/0x6a0 [ 317.854244][T10415] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 317.854263][T10415] ? acpi_ut_create_update_state+0x72/0x130 [ 317.854283][T10415] acpi_ut_create_update_state+0x72/0x130 [ 317.854300][T10415] acpi_ut_create_update_state_and_push+0x2f/0x70 [ 317.854315][T10415] acpi_ut_update_object_reference+0x32f/0x800 [ 317.854330][T10415] ? __pfx_acpi_ut_update_object_reference+0x10/0x10 [ 317.854342][T10415] ? __pfx_acpi_ut_trace+0x10/0x10 [ 317.854359][T10415] ? __pfx_acpi_ut_trace+0x10/0x10 [ 317.854377][T10415] ? acpi_ut_status_exit+0x111/0x1c0 [ 317.854396][T10415] acpi_ut_add_reference+0x80/0x170 [ 317.854409][T10415] acpi_ex_resolve_node_to_value+0x7e1/0x9a0 [ 317.854424][T10415] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 317.854437][T10415] ? acpi_ds_create_operand+0x267/0xc20 [ 317.854454][T10415] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 317.854467][T10415] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 317.854478][T10415] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 317.854494][T10415] ? __asan_memset+0x23/0x50 [ 317.854527][T10415] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 317.854547][T10415] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 317.854566][T10415] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 317.854583][T10415] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 317.854600][T10415] ? acpi_ut_trace_ptr+0x141/0x2a0 [ 317.854620][T10415] acpi_ds_exec_end_op+0xb78/0x1e60 [ 317.854638][T10415] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 317.854654][T10415] acpi_ps_parse_loop+0x5e1/0x26e0 [ 317.854675][T10415] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 317.854690][T10415] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 317.854706][T10415] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 317.854722][T10415] ? acpi_ut_create_thread_state+0x6d/0x170 [ 317.854742][T10415] acpi_ps_parse_aml+0x81e/0x1120 [ 317.854761][T10415] acpi_ps_execute_method+0x5c4/0xe90 [ 317.854775][T10415] acpi_ns_evaluate+0x640/0x1670 [ 317.854790][T10415] acpi_ut_evaluate_object+0xf7/0x610 [ 317.854804][T10415] acpi_rs_get_prt_method_data+0xa0/0x150 [ 317.854816][T10415] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 317.854827][T10415] ? acpi_ut_status_exit+0x111/0x1c0 [ 317.854845][T10415] ? acpi_rs_validate_parameters+0x104/0x210 [ 317.854857][T10415] acpi_get_irq_routing_table+0xb8/0x140 [ 317.854870][T10415] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 317.854882][T10415] ? mark_held_locks+0x40/0x70 [ 317.854896][T10415] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 317.854910][T10415] ? preempt_schedule_thunk+0x16/0x40 [ 317.854926][T10415] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 317.854944][T10415] acpi_pci_irq_lookup+0x8e/0x6b0 [ 317.854956][T10415] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 317.854972][T10415] acpi_pci_irq_disable+0x1a8/0x360 [ 317.854983][T10415] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 317.854995][T10415] pcibios_disable_device+0x89/0xb0 [ 317.855007][T10415] do_pci_disable_device+0x9f/0x100 [ 317.855019][T10415] ? __pfx_do_pci_disable_device+0x10/0x10 [ 317.855031][T10415] ? pci_release_region.part.0+0x15b/0x2e0 [ 317.855047][T10415] pci_disable_device+0x130/0x270 [ 317.855059][T10415] virtio_pci_remove+0xcf/0x110 [ 317.855072][T10415] pci_device_remove+0xb2/0x1d0 [ 317.855087][T10415] ? __pfx_pci_device_remove+0x10/0x10 [ 317.855110][T10415] device_remove+0xcb/0x180 [ 317.855127][T10415] device_release_driver_internal+0x441/0x610 [ 317.855148][T10415] pci_stop_bus_device+0x120/0x160 [ 317.855160][T10415] pci_stop_and_remove_bus_device+0x58/0xa0 [ 317.855172][T10415] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 317.855184][T10415] remove_store+0x123/0x140 [ 317.855197][T10415] ? __pfx_remove_store+0x10/0x10 [ 317.855209][T10415] ? find_held_lock+0x2b/0x80 [ 317.855225][T10415] ? sysfs_file_kobj+0xe4/0x290 [ 317.855237][T10415] ? sysfs_file_kobj+0xe4/0x290 [ 317.855250][T10415] ? __pfx_remove_store+0x10/0x10 [ 317.855261][T10415] dev_attr_store+0x58/0x80 [ 317.855271][T10415] ? __pfx_dev_attr_store+0x10/0x10 [ 317.855281][T10415] sysfs_kf_write+0xf2/0x150 [ 317.855295][T10415] kernfs_fop_write_iter+0x3e0/0x5f0 [ 317.855305][T10415] ? __pfx_sysfs_kf_write+0x10/0x10 [ 317.855319][T10415] vfs_write+0x6af/0x1050 [ 317.855330][T10415] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 317.855343][T10415] ? __pfx_vfs_write+0x10/0x10 [ 317.855351][T10415] ? find_held_lock+0x2b/0x80 [ 317.855376][T10415] ksys_write+0x12a/0x250 [ 317.855386][T10415] ? __pfx_ksys_write+0x10/0x10 [ 317.855401][T10415] __do_fast_syscall_32+0x14b/0x8c0 [ 317.855414][T10415] ? lockdep_hardirqs_on+0x7d/0x110 [ 317.855427][T10415] do_fast_syscall_32+0x32/0x70 [ 317.855441][T10415] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 317.855455][T10415] RIP: 0023:0xf7fb6fbc [ 317.855464][T10415] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 317.855474][T10415] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 317.855486][T10415] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000080000ec0 [ 317.855492][T10415] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.855498][T10415] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.855504][T10415] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 317.855510][T10415] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.855525][T10415] [ 317.857866][T10415] ACPI Error: AE_NO_MEMORY, Could not update object reference count (20260408/utdelete-651) [ 317.881011][ C2] net_ratelimit: 302 callbacks suppressed [ 319.321524][ T5880] cxacru_cm: 32 callbacks suppressed [ 319.321542][ T5880] cxacru 6-1:1.0: send of cm 0x91 failed (-104) [ 319.323629][ T5880] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -104 [ 319.323639][ T5880] ATM dev 0: usbatm_atm_init: atm_start failed: -104! [ 319.331098][ T5880] cxacru 6-1:1.0: probe with driver cxacru failed with error -104 ** 541 printk messages dropped ** ** 184 printk messages dropped ** ** 146 printk messages dropped ** ** 141 printk messages dropped ** ** 193 printk messages dropped ** ** 200 printk messages dropped ** ** 211 printk messages dropped ** ** 309 printk messages dropped ** ** 217 printk messages dropped ** ** 253 printk messages dropped ** ** 220 printk messages dropped ** ** 332 printk messages dropped ** ** 176 printk messages dropped ** ** 155 printk messages dropped ** ** 180 printk messages dropped ** ** 184 printk messages dropped ** ** 183 printk messages dropped ** ** 183 printk messages dropped ** ** 175 printk messages dropped ** ** 185 printk messages dropped ** ** 190 printk messages dropped ** ** 202 printk messages dropped ** [ 319.478223][ T5880] usb 6-1: USB disconnect, device number 24 ** 2233 printk messages dropped ** ** 2501 printk messages dropped ** ** 2493 printk messages dropped ** ** 2 printk messages dropped ** ** 2508 printk messages dropped ** ** 1362 printk messages dropped ** ** 137 printk messages dropped ** ** 99 printk messages dropped ** ** 81 printk messages dropped ** ** 86 printk messages dropped ** ** 81 printk messages dropped ** ** 86 printk messages dropped ** ** 102 printk messages dropped ** ** 108 printk messages dropped ** ** 94 printk messages dropped ** ** 74 printk messages dropped ** ** 75 printk messages dropped ** ** 86 printk messages dropped ** ** 73 printk messages dropped ** ** 2281 printk messages dropped ** ** 2380 printk messages dropped ** [ 321.599213][ T67] Bluetooth: hci2: unexpected event for opcode 0x0014 [ 321.599777][T10481] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 321.630423][T10483] FAULT_INJECTION: forcing a failure. [ 321.630423][T10483] name fail_futex, interval 1, probability 0, space 0, times 0 [ 321.630443][T10483] CPU: 2 UID: 0 PID: 10483 Comm: syz.3.1216 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.630459][T10483] Tainted: [L]=SOFTLOCKUP [ 321.630465][T10483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 321.630472][T10483] Call Trace: [ 321.630477][T10483] [ 321.630481][T10483] dump_stack_lvl+0x100/0x190 [ 321.630501][T10483] should_fail_ex.cold+0x5/0xa [ 321.630516][T10483] get_futex_key+0x1c9/0x13e0 [ 321.630533][T10483] ? __pfx_get_futex_key+0x10/0x10 [ 321.630552][T10483] futex_wake+0xf4/0x5e0 [ 321.630564][T10483] ? __pfx_futex_wake+0x10/0x10 [ 321.630576][T10483] ? kasan_quarantine_put+0x104/0x240 [ 321.630595][T10483] ? putname+0xb1/0x110 [ 321.630606][T10483] ? kmem_cache_free+0x127/0x6c0 [ 321.630622][T10483] do_futex+0x2b2/0x440 [ 321.630640][T10483] ? __pfx_do_futex+0x10/0x10 [ 321.630655][T10483] ? __pfx_do_sys_openat2+0x10/0x10 [ 321.630668][T10483] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 321.630692][T10483] __ia32_sys_futex_time32+0x2f4/0x470 [ 321.630712][T10483] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 321.630730][T10483] ? __might_fault+0xc5/0x140 [ 321.630748][T10483] __do_fast_syscall_32+0x14b/0x8c0 [ 321.630761][T10483] ? lockdep_hardirqs_on+0x7d/0x110 [ 321.630776][T10483] do_fast_syscall_32+0x32/0x70 [ 321.630790][T10483] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.630804][T10483] RIP: 0023:0xf73aefbc [ 321.630813][T10483] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 321.630824][T10483] RSP: 002b:00000000f53a55cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 321.630835][T10483] RAX: ffffffffffffffda RBX: 00000000f73d5024 RCX: 0000000000000081 [ 321.630842][T10483] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 321.630848][T10483] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 ** 345 printk messages dropped ** ** 158 printk messages dropped ** ** 136 printk messages dropped ** ** 134 printk messages dropped ** ** 141 printk messages dropped ** ** 131 printk messages dropped ** ** 136 printk messages dropped ** ** 131 printk messages dropped ** ** 129 printk messages dropped ** ** 133 printk messages dropped ** ** 132 printk messages dropped ** ** 155 printk messages dropped ** ** 137 printk messages dropped ** ** 128 printk messages dropped ** ** 139 printk messages dropped ** ** 130 printk messages dropped ** ** 137 printk messages dropped ** ** 136 printk messages dropped ** ** 141 printk messages dropped ** ** 132 printk messages dropped ** ** 136 printk messages dropped ** ** 137 printk messages dropped ** ** 102 printk messages dropped ** [ 323.240974][ C2] net_ratelimit: 93 callbacks suppressed [ 323.982596][T10527] FAULT_INJECTION: forcing a failure. [ 323.982596][T10527] name failslab, interval 1, probability 0, space 0, times 0 [ 323.982621][T10527] CPU: 0 UID: 0 PID: 10527 Comm: syz.1.1223 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.982636][T10527] Tainted: [L]=SOFTLOCKUP [ 323.982640][T10527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 323.982646][T10527] Call Trace: [ 323.982650][T10527] [ 323.982655][T10527] dump_stack_lvl+0x100/0x190 [ 323.982675][T10527] should_fail_ex.cold+0x5/0xa [ 323.982691][T10527] should_failslab+0xc2/0x120 [ 323.982703][T10527] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 323.982722][T10527] ? nf_tables_dump_set_start+0x40/0xa0 [ 323.982740][T10527] kmemdup_noprof+0x29/0x60 [ 323.982753][T10527] nf_tables_dump_set_start+0x40/0xa0 [ 323.982768][T10527] __netlink_dump_start+0x60e/0x990 [ 323.982783][T10527] ? nft_netlink_dump_start_rcu+0x63/0x1f0 [ 323.982802][T10527] nft_netlink_dump_start_rcu+0x81/0x1f0 [ 323.982820][T10527] nf_tables_getsetelem+0x5cb/0x790 [ 323.982833][T10527] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 323.982845][T10527] ? __pfx_nf_tables_dump_set_start+0x10/0x10 [ 323.982859][T10527] ? __pfx_nf_tables_dump_set+0x10/0x10 [ 323.982869][T10527] ? __pfx_nf_tables_dump_set_done+0x10/0x10 [ 323.982886][T10527] ? lock_acquire+0x1d1/0x380 [ 323.982901][T10527] ? __nla_parse+0x40/0x60 [ 323.982917][T10527] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 323.982929][T10527] nfnetlink_rcv_msg+0x557/0x11e0 [ 323.982946][T10527] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 323.982960][T10527] ? kfree_skbmem+0x19f/0x210 [ 323.982984][T10527] ? __pfx___dev_queue_xmit+0x10/0x10 [ 323.982999][T10527] netlink_rcv_skb+0x159/0x420 [ 323.983015][T10527] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 323.983028][T10527] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 323.983049][T10527] ? ns_capable+0xcd/0xf0 [ 323.983066][T10527] nfnetlink_rcv+0x1b3/0x440 [ 323.983078][T10527] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 323.983089][T10527] ? netlink_deliver_tap+0x1ae/0xb50 [ 323.983107][T10527] netlink_unicast+0x668/0x950 [ 323.983135][T10527] ? __pfx_netlink_unicast+0x10/0x10 [ 323.983160][T10527] netlink_sendmsg+0x9ac/0x10c0 [ 323.983178][T10527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.983196][T10527] ? apparmor_socket_sendmsg+0x165/0x280 [ 323.983212][T10527] ? ____sys_sendmsg+0xa99/0xc30 [ 323.983222][T10527] ____sys_sendmsg+0xa99/0xc30 [ 323.983232][T10527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.983249][T10527] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.983266][T10527] ___sys_sendmsg+0x190/0x1e0 [ 323.983278][T10527] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.983296][T10527] ? find_held_lock+0x2b/0x80 [ 323.983320][T10527] __sys_sendmsg+0x160/0x210 [ 323.983335][T10527] ? __pfx___sys_sendmsg+0x10/0x10 [ 323.983357][T10527] __do_fast_syscall_32+0x14b/0x8c0 [ 323.983371][T10527] ? lockdep_hardirqs_on+0x7d/0x110 [ 323.983384][T10527] do_fast_syscall_32+0x32/0x70 [ 323.983398][T10527] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.983412][T10527] RIP: 0023:0xf7fb6fbc [ 323.983421][T10527] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 323.983432][T10527] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 323.983442][T10527] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800019c0 [ 323.983449][T10527] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.983456][T10527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.983462][T10527] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 323.983468][T10527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.983482][T10527] [ 323.995203][T10530] FAULT_INJECTION: forcing a failure. [ 323.995203][T10530] name failslab, interval 1, probability 0, space 0, times 0 [ 323.995221][T10530] CPU: 2 UID: 0 PID: 10530 Comm: syz.4.1225 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.995237][T10530] Tainted: [L]=SOFTLOCKUP [ 323.995240][T10530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 323.995247][T10530] Call Trace: [ 323.995251][T10530] [ 323.995256][T10530] dump_stack_lvl+0x100/0x190 [ 323.995276][T10530] should_fail_ex.cold+0x5/0xa [ 323.995306][T10530] should_failslab+0xc2/0x120 [ 323.995319][T10530] __kmalloc_cache_noprof+0x91/0x6d0 [ 323.995334][T10530] ? rtnl_newlink+0x139/0x2620 [ 323.995352][T10530] ? __pfx_rtnl_newlink+0x10/0x10 [ 323.995369][T10530] rtnl_newlink+0x139/0x2620 [ 323.995390][T10530] ? __pfx_rtnl_newlink+0x10/0x10 [ 323.995407][T10530] ? rcu_is_watching+0x13/0xc0 [ 323.995422][T10530] ? kasan_quarantine_put+0x104/0x240 [ 323.995438][T10530] ? lockdep_hardirqs_on+0x7d/0x110 [ 323.995453][T10530] ? kfree_skbmem+0x19a/0x210 [ 323.995468][T10530] ? __lock_acquire+0x5c0/0x1f40 [ 323.995480][T10530] ? hook_capable+0x1bc/0x500 [ 323.995492][T10530] ? __dev_queue_xmit+0xa5e/0x4a50 [ 323.995507][T10530] ? lock_acquire+0x1d1/0x380 [ 323.995517][T10530] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 323.995534][T10530] ? find_held_lock+0x2b/0x80 [ 323.995548][T10530] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 323.995564][T10530] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 323.995581][T10530] ? __pfx_rtnl_newlink+0x10/0x10 [ 323.995598][T10530] rtnetlink_rcv_msg+0x95e/0xe90 [ 323.995616][T10530] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 323.995639][T10530] netlink_rcv_skb+0x159/0x420 [ 323.995657][T10530] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 323.995675][T10530] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 323.995689][T10530] ? __asan_memcpy+0x3c/0x60 [ 323.995708][T10530] ? netlink_deliver_tap+0x1ae/0xb50 [ 323.995727][T10530] netlink_unicast+0x668/0x950 [ 323.995743][T10530] ? __pfx_netlink_unicast+0x10/0x10 [ 323.995763][T10530] netlink_sendmsg+0x9ac/0x10c0 [ 323.995780][T10530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.995799][T10530] ? apparmor_socket_sendmsg+0x165/0x280 [ 323.995814][T10530] ? ____sys_sendmsg+0xa99/0xc30 [ 323.995824][T10530] ____sys_sendmsg+0xa99/0xc30 [ 323.995834][T10530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.995850][T10530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.995867][T10530] ___sys_sendmsg+0x190/0x1e0 [ 323.995879][T10530] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.995896][T10530] ? find_held_lock+0x2b/0x80 [ 323.995919][T10530] __sys_sendmsg+0x160/0x210 [ 323.995934][T10530] ? __pfx___sys_sendmsg+0x10/0x10 [ 323.995956][T10530] __do_fast_syscall_32+0x14b/0x8c0 [ 323.995991][T10530] ? lockdep_hardirqs_on+0x7d/0x110 [ 323.996004][T10530] do_fast_syscall_32+0x32/0x70 [ 323.996019][T10530] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.996033][T10530] RIP: 0023:0xf7f54fbc [ 323.996042][T10530] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 323.996052][T10530] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 323.996068][T10530] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 323.996074][T10530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.996080][T10530] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.996087][T10530] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 323.996093][T10530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.996107][T10530] [ 326.962619][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'. [ 327.086181][T10590] netlink: 'syz.0.1241': attribute type 2 has an invalid length. [ 327.086194][T10590] netlink: 'syz.0.1241': attribute type 2 has an invalid length. [ 328.292165][ T36] net_ratelimit: 190 callbacks suppressed [ 328.316449][T10602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1236'. [ 328.851681][T10613] FAULT_INJECTION: forcing a failure. [ 328.851681][T10613] name fail_futex, interval 1, probability 0, space 0, times 0 [ 328.851709][T10613] CPU: 2 UID: 0 PID: 10613 Comm: syz.0.1237 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.851735][T10613] Tainted: [L]=SOFTLOCKUP [ 328.851743][T10613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 328.851756][T10613] Call Trace: [ 328.851762][T10613] [ 328.851769][T10613] dump_stack_lvl+0x100/0x190 [ 328.851804][T10613] should_fail_ex.cold+0x5/0xa [ 328.851831][T10613] get_futex_key+0x1c9/0x13e0 [ 328.851860][T10613] ? __pfx_get_futex_key+0x10/0x10 [ 328.851892][T10613] futex_wake+0xf4/0x5e0 [ 328.851913][T10613] ? __pfx_futex_wake+0x10/0x10 [ 328.851931][T10613] ? kasan_quarantine_put+0x104/0x240 [ 328.851989][T10613] ? putname+0xb1/0x110 [ 328.852010][T10613] ? kmem_cache_free+0x127/0x6c0 [ 328.852039][T10613] do_futex+0x2b2/0x440 [ 328.852066][T10613] ? __pfx_do_futex+0x10/0x10 [ 328.852094][T10613] ? __pfx_do_sys_openat2+0x10/0x10 [ 328.852118][T10613] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 328.852145][T10613] __ia32_sys_futex_time32+0x2f4/0x470 [ 328.852177][T10613] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 328.852206][T10613] ? __might_fault+0xc5/0x140 [ 328.852235][T10613] __do_fast_syscall_32+0x14b/0x8c0 [ 328.852257][T10613] ? lockdep_hardirqs_on+0x7d/0x110 [ 328.852280][T10613] do_fast_syscall_32+0x32/0x70 [ 328.852303][T10613] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.852325][T10613] RIP: 0023:0xf7f47fbc [ 328.852354][T10613] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 328.852372][T10613] RSP: 002b:00000000f53d55cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 328.852390][T10613] RAX: ffffffffffffffda RBX: 00000000f7405024 RCX: 0000000000000081 [ 328.852402][T10613] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 328.852413][T10613] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 328.852424][T10613] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 328.852434][T10613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.852459][T10613] [ 328.942345][T10615] FAULT_INJECTION: forcing a failure. [ 328.942345][T10615] name failslab, interval 1, probability 0, space 0, times 0 [ 328.942365][T10615] CPU: 2 UID: 0 PID: 10615 Comm: syz.4.1239 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.942380][T10615] Tainted: [L]=SOFTLOCKUP [ 328.942384][T10615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 328.942390][T10615] Call Trace: [ 328.942394][T10615] [ 328.942399][T10615] dump_stack_lvl+0x100/0x190 [ 328.942434][T10615] should_fail_ex.cold+0x5/0xa [ 328.942450][T10615] should_failslab+0xc2/0x120 [ 328.942463][T10615] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 328.942480][T10615] ? __d_alloc+0x34/0xad0 [ 328.942495][T10615] __d_alloc+0x34/0xad0 [ 328.942509][T10615] d_alloc_pseudo+0x1c/0xc0 [ 328.942525][T10615] alloc_file_pseudo+0x118/0x290 [ 328.942540][T10615] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 328.942559][T10615] ? _raw_spin_unlock+0x28/0x50 [ 328.942571][T10615] ? alloc_fd+0x471/0x7a0 [ 328.942584][T10615] __anon_inode_getfile+0xe8/0x280 [ 328.942602][T10615] anon_inode_getfd+0x68/0xc0 [ 328.942619][T10615] map_create+0x19e1/0x3150 [ 328.942641][T10615] ? __pfx_map_create+0x10/0x10 [ 328.942657][T10615] ? lock_acquire+0x1d1/0x380 [ 328.942669][T10615] ? __might_fault+0xc5/0x140 [ 328.942683][T10615] ? __might_fault+0xc5/0x140 [ 328.942701][T10615] __sys_bpf+0x14cb/0x4b60 [ 328.942715][T10615] ? __pfx___sys_bpf+0x10/0x10 [ 328.942724][T10615] ? lock_acquire+0x1d1/0x380 [ 328.942734][T10615] ? get_pid_task+0x2a/0x250 [ 328.942748][T10615] ? find_held_lock+0x2b/0x80 [ 328.942762][T10615] ? get_pid_task+0xfc/0x250 [ 328.942774][T10615] ? get_pid_task+0xfc/0x250 [ 328.942791][T10615] ? proc_fail_nth_write+0x9f/0x220 [ 328.942804][T10615] ? find_held_lock+0x2b/0x80 [ 328.942822][T10615] ? rcu_read_lock_any_held+0x6a/0x90 [ 328.942838][T10615] ? find_held_lock+0x2b/0x80 [ 328.942852][T10615] ? ksys_write+0x190/0x250 [ 328.942861][T10615] ? ksys_write+0x190/0x250 [ 328.942879][T10615] ? lock_acquire+0x1d1/0x380 [ 328.942890][T10615] ? __might_fault+0xc5/0x140 [ 328.942902][T10615] ? find_held_lock+0x2b/0x80 [ 328.942918][T10615] ? __ia32_sys_bpf+0xcc/0x170 [ 328.942928][T10615] __ia32_sys_bpf+0xcc/0x170 [ 328.942940][T10615] ? __might_fault+0x111/0x140 [ 328.942952][T10615] __do_fast_syscall_32+0x14b/0x8c0 [ 328.942966][T10615] ? lockdep_hardirqs_on+0x7d/0x110 [ 328.942979][T10615] do_fast_syscall_32+0x32/0x70 [ 328.942993][T10615] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.943007][T10615] RIP: 0023:0xf7f54fbc [ 328.943017][T10615] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 328.943027][T10615] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 328.943037][T10615] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000080 [ 328.943044][T10615] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.943050][T10615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.943056][T10615] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 328.943063][T10615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.943077][T10615] [ 329.070992][ T857] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 329.435024][ T857] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.03 [ 329.453917][ T857] usb 5-1: Dual-Role OTG device on HNP port [ 329.491070][ T857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.619398][ T857] gspca_main: spca501-2.14.0 probing 0000:0000 [ 329.619739][ T857] gspca_spca501: reg write: error -32 [ 329.619745][ T857] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 329.619778][ T857] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 331.689598][T10646] FAULT_INJECTION: forcing a failure. [ 331.689598][T10646] name failslab, interval 1, probability 0, space 0, times 0 [ 331.689619][T10646] CPU: 0 UID: 0 PID: 10646 Comm: syz.4.1249 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.689634][T10646] Tainted: [L]=SOFTLOCKUP [ 331.689637][T10646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 331.689644][T10646] Call Trace: [ 331.689648][T10646] [ 331.689653][T10646] dump_stack_lvl+0x100/0x190 [ 331.689685][T10646] should_fail_ex.cold+0x5/0xa [ 331.689703][T10646] should_failslab+0xc2/0x120 [ 331.689715][T10646] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 331.689732][T10646] ? __alloc_skb+0x140/0x710 [ 331.689750][T10646] __alloc_skb+0x140/0x710 [ 331.689763][T10646] ? __pfx___alloc_skb+0x10/0x10 [ 331.689784][T10646] tcp_stream_alloc_skb+0x34/0x660 [ 331.689807][T10646] tcp_connect+0xe13/0x4dc0 [ 331.689830][T10646] ? tcp_fastopen_defer_connect+0xf2/0x440 [ 331.689853][T10646] ? __pfx_secure_tcpv6_seq_and_ts_off+0x10/0x10 [ 331.689869][T10646] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 331.689884][T10646] ? __pfx_tcp_connect+0x10/0x10 [ 331.689895][T10646] ? inet6_hash_connect+0xe7/0x180 [ 331.689913][T10646] tcp_v6_connect+0x186d/0x2770 [ 331.689929][T10646] ? __pfx_tcp_v6_connect+0x10/0x10 [ 331.689947][T10646] __inet_stream_connect+0x208/0xff0 [ 331.689965][T10646] ? __pfx___inet_stream_connect+0x10/0x10 [ 331.689979][T10646] ? kasan_save_track+0x14/0x30 [ 331.689989][T10646] ? __kasan_kmalloc+0xaa/0xb0 [ 331.690002][T10646] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 331.690017][T10646] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 331.690036][T10646] tcp_sendmsg_fastopen+0x3ed/0x750 [ 331.690053][T10646] ? look_up_lock_class+0x64/0x120 [ 331.690067][T10646] tcp_sendmsg_locked+0x2726/0x42d0 [ 331.690087][T10646] ? __lock_acquire+0x5c0/0x1f40 [ 331.690103][T10646] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 331.690119][T10646] ? lock_acquire+0x1d1/0x380 [ 331.690130][T10646] ? do_raw_spin_lock+0x128/0x260 [ 331.690143][T10646] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 331.690160][T10646] ? __local_bh_enable_ip+0xa5/0x120 [ 331.690173][T10646] tcp_sendmsg+0x2e/0x50 [ 331.690187][T10646] ? __pfx_tcp_sendmsg+0x10/0x10 [ 331.690203][T10646] inet6_sendmsg+0xb9/0x140 [ 331.690220][T10646] ____sys_sendmsg+0x6da/0xc30 [ 331.690234][T10646] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.690251][T10646] ___sys_sendmsg+0x190/0x1e0 [ 331.690264][T10646] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.690282][T10646] ? find_held_lock+0x2b/0x80 [ 331.690306][T10646] __sys_sendmsg+0x160/0x210 [ 331.690321][T10646] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.690343][T10646] __do_fast_syscall_32+0x14b/0x8c0 [ 331.690357][T10646] ? lockdep_hardirqs_on+0x7d/0x110 [ 331.690370][T10646] do_fast_syscall_32+0x32/0x70 [ 331.690384][T10646] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 331.690397][T10646] RIP: 0023:0xf7f54fbc [ 331.690407][T10646] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 331.690417][T10646] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 331.690427][T10646] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 331.690434][T10646] RDX: 0000000020000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.690440][T10646] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 331.690446][T10646] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 331.690452][T10646] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 331.690467][T10646] [ 332.575026][T10659] jffs2: notice: (10659) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 332.823826][T10664] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1253'. [ 333.401031][T10688] net_ratelimit: 286 callbacks suppressed [ 335.048921][ T43] audit: type=1326 audit(1793260287.836:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.1256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 335.051639][ T43] audit: type=1326 audit(1793260287.846:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.1256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 335.065110][ T43] audit: type=1326 audit(1793260287.866:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.1256" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 335.065139][ T43] audit: type=1326 audit(1793260287.866:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.1256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 335.065159][ T43] audit: type=1326 audit(1793260287.866:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.1256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 335.067842][ T43] audit: type=1326 audit(1793260287.866:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.1256" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 335.067873][ T43] audit: type=1326 audit(1793260287.866:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.1256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 335.067893][ T43] audit: type=1326 audit(1793260287.866:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.1256" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 336.174195][T10732] batman_adv: batadv0: Adding interface: syzkaller0 [ 336.174202][T10732] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.174218][T10732] batman_adv: batadv0: Interface activated: syzkaller0 [ 336.205510][T10730] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 336.225565][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1264'. [ 336.235945][T10730] batman_adv: batadv0: Removing interface: syzkaller0 [ 336.338016][T10739] ip6gre1: entered allmulticast mode [ 336.339597][ T5865] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 336.445074][T10745] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 336.445087][T10745] block device autoloading is deprecated and will be removed. [ 337.664577][T10763] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1269'. [ 337.664645][T10763] FAULT_INJECTION: forcing a failure. [ 337.664645][T10763] name failslab, interval 1, probability 0, space 0, times 0 [ 337.664665][T10763] CPU: 2 UID: 0 PID: 10763 Comm: syz.3.1269 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.664687][T10763] Tainted: [L]=SOFTLOCKUP [ 337.664694][T10763] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 337.664704][T10763] Call Trace: [ 337.664711][T10763] [ 337.664718][T10763] dump_stack_lvl+0x100/0x190 [ 337.664747][T10763] should_fail_ex.cold+0x5/0xa [ 337.664771][T10763] should_failslab+0xc2/0x120 [ 337.664790][T10763] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 337.664815][T10763] ? __kasan_kmalloc+0xaa/0xb0 [ 337.664832][T10763] ? __request_module+0x2d5/0x6a0 [ 337.664859][T10763] kstrdup+0x51/0xe0 [ 337.664878][T10763] __request_module+0x2d5/0x6a0 [ 337.664901][T10763] ? __pfx___request_module+0x10/0x10 [ 337.664925][T10763] ? rcu_is_watching+0x13/0xc0 [ 337.664950][T10763] ? crypto_alg_lookup+0x10c/0x1e0 [ 337.664966][T10763] ? crypto_alg_lookup+0x10c/0x1e0 [ 337.664992][T10763] crypto_alg_mod_lookup+0x257/0x5d0 [ 337.665013][T10763] crypto_add_alg+0x28e/0x3b0 [ 337.665032][T10763] ? __pfx_crypto_add_alg+0x10/0x10 [ 337.665050][T10763] crypto_user_rcv_msg+0x2ed/0x570 [ 337.665090][T10763] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 337.665111][T10763] ? __lock_acquire+0x5c0/0x1f40 [ 337.665129][T10763] ? netlink_alloc_large_skb+0x69/0x150 [ 337.665151][T10763] ? netlink_sendmsg+0x755/0x10c0 [ 337.665171][T10763] ? ____sys_sendmsg+0xa99/0xc30 [ 337.665188][T10763] ? ___sys_sendmsg+0x190/0x1e0 [ 337.665203][T10763] ? __sys_sendmsg+0x160/0x210 [ 337.665238][T10763] ? rcu_is_watching+0x13/0xc0 [ 337.665259][T10763] ? trace_contention_end+0x126/0x160 [ 337.665279][T10763] ? __mutex_lock+0x267/0x1c10 [ 337.665303][T10763] netlink_rcv_skb+0x159/0x420 [ 337.665325][T10763] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 337.665346][T10763] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 337.665378][T10763] ? netlink_deliver_tap+0x1ae/0xb50 [ 337.665403][T10763] crypto_netlink_rcv+0x2a/0x40 [ 337.665420][T10763] netlink_unicast+0x668/0x950 [ 337.665445][T10763] ? __pfx_netlink_unicast+0x10/0x10 [ 337.665481][T10763] netlink_sendmsg+0x9ac/0x10c0 [ 337.665507][T10763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.665535][T10763] ? apparmor_socket_sendmsg+0x165/0x280 [ 337.665559][T10763] ? ____sys_sendmsg+0xa99/0xc30 [ 337.665573][T10763] ____sys_sendmsg+0xa99/0xc30 [ 337.665588][T10763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.665613][T10763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.665641][T10763] ___sys_sendmsg+0x190/0x1e0 [ 337.665660][T10763] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.665690][T10763] ? find_held_lock+0x2b/0x80 [ 337.665728][T10763] __sys_sendmsg+0x160/0x210 [ 337.665749][T10763] ? __pfx___sys_sendmsg+0x10/0x10 [ 337.665785][T10763] __do_fast_syscall_32+0x14b/0x8c0 [ 337.665805][T10763] ? lockdep_hardirqs_on+0x7d/0x110 [ 337.665826][T10763] do_fast_syscall_32+0x32/0x70 [ 337.665847][T10763] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 337.665867][T10763] RIP: 0023:0xf73aefbc [ 337.665882][T10763] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 337.665897][T10763] RSP: 002b:00000000f538450c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 337.665914][T10763] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 337.665925][T10763] RDX: 00000000200080c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 337.665935][T10763] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 337.665943][T10763] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 337.665953][T10763] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 337.665976][T10763] [ 338.012857][T10775] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1272'. [ 338.031570][T10774] FAULT_INJECTION: forcing a failure. [ 338.031570][T10774] name fail_futex, interval 1, probability 0, space 0, times 0 [ 338.031587][T10774] CPU: 2 UID: 0 PID: 10774 Comm: syz.0.1271 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.031603][T10774] Tainted: [L]=SOFTLOCKUP [ 338.031608][T10774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 338.031615][T10774] Call Trace: [ 338.031620][T10774] [ 338.031625][T10774] dump_stack_lvl+0x100/0x190 [ 338.031645][T10774] should_fail_ex.cold+0x5/0xa [ 338.031660][T10774] get_futex_key+0x1c9/0x13e0 [ 338.031678][T10774] ? __pfx_get_futex_key+0x10/0x10 [ 338.031696][T10774] futex_wake+0xf4/0x5e0 [ 338.031709][T10774] ? __pfx_futex_wake+0x10/0x10 [ 338.031720][T10774] ? kasan_quarantine_put+0x104/0x240 [ 338.031740][T10774] ? putname+0xb1/0x110 [ 338.031751][T10774] ? kmem_cache_free+0x127/0x6c0 [ 338.031766][T10774] do_futex+0x2b2/0x440 [ 338.031782][T10774] ? __pfx_do_futex+0x10/0x10 [ 338.031797][T10774] ? __pfx_do_sys_openat2+0x10/0x10 [ 338.031810][T10774] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 338.031826][T10774] __ia32_sys_futex_time32+0x2f4/0x470 [ 338.031844][T10774] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 338.031860][T10774] ? __might_fault+0xc5/0x140 [ 338.031876][T10774] __do_fast_syscall_32+0x14b/0x8c0 [ 338.031890][T10774] ? lockdep_hardirqs_on+0x7d/0x110 [ 338.031935][T10774] do_fast_syscall_32+0x32/0x70 [ 338.031951][T10774] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 338.031965][T10774] RIP: 0023:0xf7f47fbc [ 338.031976][T10774] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 338.031986][T10774] RSP: 002b:00000000f53d55cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 338.031998][T10774] RAX: ffffffffffffffda RBX: 00000000f7405024 RCX: 0000000000000081 [ 338.032005][T10774] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 338.032012][T10774] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 338.032019][T10774] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 338.032026][T10774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 338.032039][T10774] [ 339.000949][ C2] net_ratelimit: 189 callbacks suppressed [ 339.629451][T10810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1276'. [ 340.281025][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 340.712689][T10829] ip6gre1: entered allmulticast mode [ 340.724603][ T5865] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 340.754360][T10836] FAULT_INJECTION: forcing a failure. [ 340.754360][T10836] name failslab, interval 1, probability 0, space 0, times 0 [ 340.754379][T10836] CPU: 0 UID: 0 PID: 10836 Comm: syz.4.1281 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.754394][T10836] Tainted: [L]=SOFTLOCKUP [ 340.754398][T10836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 340.754404][T10836] Call Trace: [ 340.754409][T10836] [ 340.754414][T10836] dump_stack_lvl+0x100/0x190 [ 340.754433][T10836] should_fail_ex.cold+0x5/0xa [ 340.754450][T10836] should_failslab+0xc2/0x120 [ 340.754463][T10836] __kmalloc_noprof+0xfc/0x840 [ 340.754493][T10836] ? fib6_info_alloc+0x40/0x160 [ 340.754507][T10836] fib6_info_alloc+0x40/0x160 [ 340.754518][T10836] ip6_route_info_create+0x14c/0xad0 [ 340.754531][T10836] ip6_route_add+0x4b/0x1d0 [ 340.754546][T10836] inet6_rtm_newroute+0x157/0x160 [ 340.754561][T10836] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 340.754575][T10836] ? __lock_acquire+0x5c0/0x1f40 [ 340.754594][T10836] ? find_held_lock+0x2b/0x80 [ 340.754609][T10836] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 340.754626][T10836] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 340.754648][T10836] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 340.754663][T10836] rtnetlink_rcv_msg+0x95e/0xe90 [ 340.754681][T10836] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 340.754704][T10836] netlink_rcv_skb+0x159/0x420 [ 340.754721][T10836] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 340.754738][T10836] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 340.754753][T10836] ? __asan_memcpy+0x3c/0x60 [ 340.754772][T10836] ? netlink_deliver_tap+0x1ae/0xb50 [ 340.754790][T10836] netlink_unicast+0x668/0x950 [ 340.754807][T10836] ? __pfx_netlink_unicast+0x10/0x10 [ 340.754826][T10836] netlink_sendmsg+0x9ac/0x10c0 [ 340.754843][T10836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.754862][T10836] ? apparmor_socket_sendmsg+0x165/0x280 [ 340.754877][T10836] ? ____sys_sendmsg+0xa99/0xc30 [ 340.754887][T10836] ____sys_sendmsg+0xa99/0xc30 [ 340.754896][T10836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.754913][T10836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 340.754930][T10836] ___sys_sendmsg+0x190/0x1e0 [ 340.754942][T10836] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.754960][T10836] ? find_held_lock+0x2b/0x80 [ 340.754983][T10836] __sys_sendmsg+0x160/0x210 [ 340.755075][T10836] ? __pfx___sys_sendmsg+0x10/0x10 [ 340.755098][T10836] __do_fast_syscall_32+0x14b/0x8c0 [ 340.755111][T10836] ? lockdep_hardirqs_on+0x7d/0x110 [ 340.755125][T10836] do_fast_syscall_32+0x32/0x70 [ 340.755138][T10836] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 340.755152][T10836] RIP: 0023:0xf7f54fbc [ 340.755161][T10836] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 340.755172][T10836] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 340.755183][T10836] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800008c0 [ 340.755189][T10836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 340.755195][T10836] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 340.755201][T10836] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 340.755207][T10836] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 340.755221][T10836] [ 342.879153][T10878] FAULT_INJECTION: forcing a failure. [ 342.879153][T10878] name failslab, interval 1, probability 0, space 0, times 0 [ 342.879169][T10878] CPU: 0 UID: 0 PID: 10878 Comm: syz.1.1293 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.879184][T10878] Tainted: [L]=SOFTLOCKUP [ 342.879188][T10878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 342.879195][T10878] Call Trace: [ 342.879199][T10878] [ 342.879204][T10878] dump_stack_lvl+0x100/0x190 [ 342.879224][T10878] should_fail_ex.cold+0x5/0xa [ 342.879253][T10878] should_failslab+0xc2/0x120 [ 342.879266][T10878] __kmalloc_cache_noprof+0x91/0x6d0 [ 342.879281][T10878] ? ip6_mc_add_src+0x9bc/0x1170 [ 342.879298][T10878] ip6_mc_add_src+0x9bc/0x1170 [ 342.879318][T10878] ip6_mc_source+0x1448/0x18a0 [ 342.879334][T10878] ? lock_acquire+0x1d1/0x380 [ 342.879350][T10878] do_ipv6_mcast_group_source+0x196/0x270 [ 342.879364][T10878] ? __pfx_do_ipv6_mcast_group_source+0x10/0x10 [ 342.879377][T10878] ? __lock_acquire+0x5c0/0x1f40 [ 342.879400][T10878] ? __local_bh_enable_ip+0xa5/0x120 [ 342.879411][T10878] ? lockdep_hardirqs_on+0x7d/0x110 [ 342.879427][T10878] do_ipv6_setsockopt+0x274b/0x3a00 [ 342.879442][T10878] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 342.879456][T10878] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 342.879468][T10878] ? lock_acquire+0x1d1/0x380 [ 342.879479][T10878] ? get_pid_task+0x2a/0x250 [ 342.879493][T10878] ? find_held_lock+0x2b/0x80 [ 342.879506][T10878] ? get_pid_task+0xfc/0x250 [ 342.879524][T10878] ? get_pid_task+0xfc/0x250 [ 342.879541][T10878] ? __lock_acquire+0x5c0/0x1f40 [ 342.879561][T10878] ? ipv6_setsockopt+0xcb/0x170 [ 342.879572][T10878] ipv6_setsockopt+0xcb/0x170 [ 342.879586][T10878] udpv6_setsockopt+0x64/0xb0 [ 342.879600][T10878] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 342.879620][T10878] do_sock_setsockopt+0xf3/0x1d0 [ 342.879638][T10878] __sys_setsockopt+0x119/0x190 [ 342.879655][T10878] __ia32_sys_setsockopt+0xbc/0x160 [ 342.879668][T10878] ? __might_fault+0x111/0x140 [ 342.879681][T10878] __do_fast_syscall_32+0x14b/0x8c0 [ 342.879695][T10878] ? lockdep_hardirqs_on+0x7d/0x110 [ 342.879708][T10878] do_fast_syscall_32+0x32/0x70 [ 342.879722][T10878] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.879736][T10878] RIP: 0023:0xf7fb6fbc [ 342.879745][T10878] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 342.879755][T10878] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 342.879766][T10878] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000029 [ 342.879772][T10878] RDX: 000000000000002b RSI: 0000000080000200 RDI: 0000000000000108 [ 342.879779][T10878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 342.879785][T10878] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 342.879791][T10878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.879805][T10878] [ 342.880420][T10878] netlink: 'syz.1.1293': attribute type 49 has an invalid length. [ 343.021498][T10878] bond_slave_0: entered promiscuous mode [ 343.021508][T10878] bond_slave_0: entered allmulticast mode [ 343.159201][T10896] FAULT_INJECTION: forcing a failure. [ 343.159201][T10896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.159217][T10896] CPU: 2 UID: 0 PID: 10896 Comm: syz.1.1296 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.159232][T10896] Tainted: [L]=SOFTLOCKUP [ 343.159236][T10896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 343.159242][T10896] Call Trace: [ 343.159246][T10896] [ 343.159251][T10896] dump_stack_lvl+0x100/0x190 [ 343.159272][T10896] should_fail_ex.cold+0x5/0xa [ 343.159288][T10896] _copy_to_user+0x32/0xd0 [ 343.159305][T10896] simple_read_from_buffer+0xcb/0x170 [ 343.159319][T10896] proc_fail_nth_read+0x1af/0x230 [ 343.159332][T10896] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 343.159345][T10896] ? rw_verify_area+0xce/0x6d0 [ 343.159361][T10896] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 343.159373][T10896] vfs_read+0x1e4/0xb40 [ 343.159383][T10896] ? lock_acquire+0x1d1/0x380 [ 343.159395][T10896] ? __fget_files+0x34/0x3d0 [ 343.159406][T10896] ? __pfx_vfs_read+0x10/0x10 [ 343.159415][T10896] ? find_held_lock+0x2b/0x80 [ 343.159430][T10896] ? __fget_files+0x215/0x3d0 [ 343.159443][T10896] ? __fget_files+0x21f/0x3d0 [ 343.159458][T10896] ksys_read+0x12a/0x250 [ 343.159468][T10896] ? __pfx_ksys_read+0x10/0x10 [ 343.159482][T10896] do_int80_emulation+0x166/0x650 [ 343.159503][T10896] asm_int80_emulation+0x1a/0x20 [ 343.159513][T10896] RIP: 0023:0xf71a77ab [ 343.159523][T10896] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 343.159533][T10896] RSP: 002b:00000000f54664bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 343.159543][T10896] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54665d0 [ 343.159550][T10896] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 343.159556][T10896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 343.159562][T10896] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 343.159568][T10896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 343.159582][T10896] [ 344.281173][ C0] net_ratelimit: 78 callbacks suppressed [ 344.361004][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 346.583448][T10954] FAULT_INJECTION: forcing a failure. [ 346.583448][T10954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.583465][T10954] CPU: 2 UID: 0 PID: 10954 Comm: syz.3.1307 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.583480][T10954] Tainted: [L]=SOFTLOCKUP [ 346.583484][T10954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 346.583490][T10954] Call Trace: [ 346.583494][T10954] [ 346.583499][T10954] dump_stack_lvl+0x100/0x190 [ 346.583519][T10954] should_fail_ex.cold+0x5/0xa [ 346.583535][T10954] _copy_to_user+0x32/0xd0 [ 346.583552][T10954] simple_read_from_buffer+0xcb/0x170 [ 346.583565][T10954] proc_fail_nth_read+0x1af/0x230 [ 346.583579][T10954] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 346.583592][T10954] ? rw_verify_area+0xce/0x6d0 [ 346.583607][T10954] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 346.583620][T10954] vfs_read+0x1e4/0xb40 [ 346.583630][T10954] ? lock_acquire+0x1d1/0x380 [ 346.583641][T10954] ? __fget_files+0x34/0x3d0 [ 346.583652][T10954] ? __pfx_vfs_read+0x10/0x10 [ 346.583661][T10954] ? find_held_lock+0x2b/0x80 [ 346.583675][T10954] ? __fget_files+0x215/0x3d0 [ 346.583689][T10954] ? __fget_files+0x21f/0x3d0 [ 346.583703][T10954] ksys_read+0x12a/0x250 [ 346.583713][T10954] ? __pfx_ksys_read+0x10/0x10 [ 346.583727][T10954] do_int80_emulation+0x166/0x650 [ 346.583743][T10954] asm_int80_emulation+0x1a/0x20 [ 346.583753][T10954] RIP: 0023:0xf71077ab [ 346.583763][T10954] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 346.583773][T10954] RSP: 002b:00000000f53c64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 346.583784][T10954] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f53c65d0 [ 346.583791][T10954] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 346.583797][T10954] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 346.583803][T10954] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 346.583809][T10954] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 346.583823][T10954] [ 346.695531][T10959] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1308'. [ 346.718053][T10959] syzkaller0: entered promiscuous mode [ 346.718110][T10959] syzkaller0: entered allmulticast mode [ 346.999535][T10963] 9pnet_virtio: no channels available for device syz ** 2891 printk messages dropped ** ** 3085 printk messages dropped ** [ 348.121109][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.401120][ C2] net_ratelimit: 69 callbacks suppressed [ 351.437300][T11012] FAULT_INJECTION: forcing a failure. [ 351.437300][T11012] name failslab, interval 1, probability 0, space 0, times 0 [ 351.437320][T11012] CPU: 2 UID: 0 PID: 11012 Comm: syz.0.1322 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.437335][T11012] Tainted: [L]=SOFTLOCKUP [ 351.437339][T11012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 351.437346][T11012] Call Trace: [ 351.437350][T11012] [ 351.437355][T11012] dump_stack_lvl+0x100/0x190 [ 351.437375][T11012] should_fail_ex.cold+0x5/0xa [ 351.437391][T11012] should_failslab+0xc2/0x120 [ 351.437403][T11012] __kmalloc_noprof+0xfc/0x840 [ 351.437418][T11012] ? rcu_is_watching+0x13/0xc0 [ 351.437438][T11012] ? tomoyo_realpath_from_path+0xb6/0x690 [ 351.437458][T11012] tomoyo_realpath_from_path+0xb6/0x690 [ 351.437478][T11012] tomoyo_check_open_permission+0x2af/0x3c0 [ 351.437493][T11012] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 351.437509][T11012] ? reacquire_held_locks+0xdd/0x1f0 [ 351.437524][T11012] ? hook_file_open+0x245/0x8e0 [ 351.437552][T11012] tomoyo_file_open+0x6b/0x90 [ 351.437565][T11012] security_file_open+0xb5/0x1e0 [ 351.437581][T11012] do_dentry_open+0x552/0x1470 [ 351.437596][T11012] vfs_open_consume+0xcc/0x460 [ 351.437612][T11012] path_openat+0x1547/0x23f0 [ 351.437626][T11012] ? __pfx_path_openat+0x10/0x10 [ 351.437642][T11012] do_file_open+0x20e/0x430 [ 351.437655][T11012] ? __pfx_do_file_open+0x10/0x10 [ 351.437676][T11012] ? _raw_spin_unlock+0x28/0x50 [ 351.437687][T11012] ? alloc_fd+0x471/0x7a0 [ 351.437703][T11012] do_sys_openat2+0x163/0x1d0 [ 351.437717][T11012] ? __pfx_do_sys_openat2+0x10/0x10 [ 351.437732][T11012] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 351.437745][T11012] ? __fget_files+0x21f/0x3d0 [ 351.437759][T11012] __ia32_compat_sys_openat+0x12d/0x210 [ 351.437774][T11012] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 351.437788][T11012] ? ksys_write+0x1ac/0x250 [ 351.437803][T11012] do_int80_emulation+0x166/0x650 [ 351.437818][T11012] asm_int80_emulation+0x1a/0x20 [ 351.437843][T11012] RIP: 0023:0xf71377ab [ 351.437852][T11012] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 351.437862][T11012] RSP: 002b:00000000f53f642c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 351.437873][T11012] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72023bd [ 351.437880][T11012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.437886][T11012] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 351.437892][T11012] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 351.437898][T11012] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 351.437912][T11012] [ 351.437939][T11012] ERROR: Out of memory at tomoyo_realpath_from_path. [ 351.800754][T11010] ================================================================== [ 351.800763][T11010] BUG: KASAN: slab-use-after-free in acpi_ns_get_attached_object+0x148/0x1b0 [ 351.800780][T11010] Read of size 1 at addr ffff8880226fe480 by task syz.4.1321/11010 [ 351.800790][T11010] [ 351.800813][T11010] CPU: 2 UID: 0 PID: 11010 Comm: syz.4.1321 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.800830][T11010] Tainted: [L]=SOFTLOCKUP [ 351.800835][T11010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 351.800842][T11010] Call Trace: [ 351.800846][T11010] [ 351.800852][T11010] dump_stack_lvl+0x100/0x190 [ 351.800870][T11010] print_report+0x13d/0x4b0 [ 351.800885][T11010] ? __virt_addr_valid+0x239/0x430 [ 351.800898][T11010] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 351.800911][T11010] kasan_report+0xdf/0x1c0 [ 351.800923][T11010] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 351.800937][T11010] acpi_ns_get_attached_object+0x148/0x1b0 [ 351.800949][T11010] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 351.800961][T11010] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 351.800976][T11010] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 351.800989][T11010] ? acpi_ds_create_operand+0x267/0xc20 [ 351.801004][T11010] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 351.801015][T11010] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 351.801026][T11010] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 351.801041][T11010] ? __asan_memset+0x23/0x50 [ 351.801055][T11010] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 351.801072][T11010] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 351.801087][T11010] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 351.801101][T11010] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 351.801116][T11010] ? acpi_ut_trace_ptr+0x141/0x2a0 [ 351.801132][T11010] acpi_ds_exec_end_op+0xb78/0x1e60 [ 351.801146][T11010] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 351.801160][T11010] acpi_ps_parse_loop+0x5e1/0x26e0 [ 351.801177][T11010] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 351.801191][T11010] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 351.801206][T11010] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 351.801221][T11010] ? acpi_ut_create_thread_state+0x6d/0x170 [ 351.801238][T11010] acpi_ps_parse_aml+0x81e/0x1120 [ 351.801254][T11010] acpi_ps_execute_method+0x5c4/0xe90 [ 351.801265][T11010] acpi_ns_evaluate+0x640/0x1670 [ 351.801277][T11010] acpi_ut_evaluate_object+0xf7/0x610 [ 351.801289][T11010] acpi_rs_get_prt_method_data+0xa0/0x150 [ 351.801301][T11010] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 351.801312][T11010] ? acpi_ut_status_exit+0x111/0x1c0 [ 351.801327][T11010] ? acpi_rs_validate_parameters+0x104/0x210 [ 351.801339][T11010] acpi_get_irq_routing_table+0xb8/0x140 [ 351.801351][T11010] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 351.801364][T11010] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 351.801376][T11010] ? preempt_schedule_thunk+0x16/0x40 [ 351.801389][T11010] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 351.801403][T11010] acpi_pci_irq_lookup+0x8e/0x6b0 [ 351.801414][T11010] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 351.801434][T11010] acpi_pci_irq_disable+0x1a8/0x360 [ 351.801445][T11010] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 351.801457][T11010] pcibios_disable_device+0x89/0xb0 [ 351.801470][T11010] do_pci_disable_device+0x9f/0x100 [ 351.801483][T11010] ? __pfx_do_pci_disable_device+0x10/0x10 [ 351.801495][T11010] pci_disable_device+0x130/0x270 [ 351.801505][T11010] pci_device_remove+0xb2/0x1d0 [ 351.801520][T11010] ? __pfx_pci_device_remove+0x10/0x10 [ 351.801535][T11010] device_remove+0xcb/0x180 [ 351.801550][T11010] device_release_driver_internal+0x441/0x610 [ 351.801568][T11010] pci_stop_bus_device+0x120/0x160 [ 351.801579][T11010] pci_stop_and_remove_bus_device+0x58/0xa0 [ 351.801590][T11010] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 351.801600][T11010] remove_store+0x123/0x140 [ 351.801612][T11010] ? __pfx_remove_store+0x10/0x10 [ 351.801623][T11010] ? find_held_lock+0x2b/0x80 [ 351.801637][T11010] ? sysfs_file_kobj+0xe4/0x290 [ 351.801649][T11010] ? sysfs_file_kobj+0xe4/0x290 [ 351.801662][T11010] ? __pfx_remove_store+0x10/0x10 [ 351.801674][T11010] dev_attr_store+0x58/0x80 [ 351.801684][T11010] ? __pfx_dev_attr_store+0x10/0x10 [ 351.801693][T11010] sysfs_kf_write+0xf2/0x150 [ 351.801705][T11010] kernfs_fop_write_iter+0x3e0/0x5f0 [ 351.801715][T11010] ? __pfx_sysfs_kf_write+0x10/0x10 [ 351.801727][T11010] vfs_write+0x6af/0x1050 [ 351.801737][T11010] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 351.801748][T11010] ? __pfx_vfs_write+0x10/0x10 [ 351.801761][T11010] ksys_write+0x12a/0x250 [ 351.801771][T11010] ? __pfx_ksys_write+0x10/0x10 [ 351.801782][T11010] __do_fast_syscall_32+0x14b/0x8c0 [ 351.801795][T11010] ? lockdep_hardirqs_on+0x7d/0x110 [ 351.801807][T11010] do_fast_syscall_32+0x32/0x70 [ 351.801820][T11010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 351.801833][T11010] RIP: 0023:0xf7f54fbc [ 351.801842][T11010] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 351.801853][T11010] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 351.801864][T11010] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000400 [ 351.801871][T11010] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.801877][T11010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 351.801883][T11010] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 351.801889][T11010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 351.801899][T11010] [ 351.801903][T11010] [ 351.801905][T11010] Allocated by task 1: [ 351.801911][T11010] kasan_save_stack+0x30/0x50 [ 351.801921][T11010] kasan_save_track+0x14/0x30 [ 351.801930][T11010] __kasan_slab_alloc+0x89/0x90 [ 351.801940][T11010] kmem_cache_alloc_noprof+0x269/0x6a0 [ 351.801954][T11010] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 351.801967][T11010] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 351.801980][T11010] acpi_ds_build_internal_object+0x173/0x790 [ 351.801993][T11010] acpi_ds_create_node+0xe3/0x280 [ 351.802004][T11010] acpi_ds_exec_end_op+0x10cf/0x1e60 [ 351.802017][T11010] acpi_ps_parse_loop+0x5e1/0x26e0 [ 351.802030][T11010] acpi_ps_parse_aml+0x81e/0x1120 [ 351.802043][T11010] acpi_ps_execute_table+0x393/0x500 [ 351.802052][T11010] acpi_ns_execute_table+0x596/0x970 [ 351.802062][T11010] acpi_ns_parse_table+0xcb/0x160 [ 351.802072][T11010] acpi_ns_load_table+0xc9/0x490 [ 351.802081][T11010] acpi_tb_load_namespace+0x2b0/0x8f0 [ 351.802094][T11010] acpi_load_tables+0x89/0x160 [ 351.802105][T11010] acpi_init+0x146/0x840 [ 351.802113][T11010] do_one_initcall+0x11c/0x6f0 [ 351.802122][T11010] kernel_init_freeable+0x6ea/0x7b0 [ 351.802134][T11010] kernel_init+0x21/0x1e0 [ 351.802147][T11010] ret_from_fork+0x730/0xd60 [ 351.802158][T11010] ret_from_fork_asm+0x1a/0x30 [ 351.802168][T11010] [ 351.802170][T11010] Freed by task 10415: [ 351.802175][T11010] kasan_save_stack+0x30/0x50 [ 351.802184][T11010] kasan_save_track+0x14/0x30 [ 351.802193][T11010] kasan_save_free_info+0x3b/0x70 [ 351.802206][T11010] __kasan_slab_free+0x5f/0x80 [ 351.802215][T11010] kmem_cache_free+0x127/0x6c0 [ 351.802227][T11010] acpi_os_release_object+0x1c/0x30 [ 351.802236][T11010] acpi_ut_delete_object_desc+0xea/0x130 [ 351.802249][T11010] acpi_ut_update_ref_count.part.0+0x510/0x2250 [ 351.802258][T11010] acpi_ut_update_object_reference+0x5f9/0x800 [ 351.802268][T11010] acpi_ut_remove_reference+0x192/0x1d0 [ 351.802277][T11010] acpi_rs_get_prt_method_data+0xcd/0x150 [ 351.802287][T11010] acpi_get_irq_routing_table+0xb8/0x140 [ 351.802297][T11010] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 351.802307][T11010] acpi_pci_irq_lookup+0x8e/0x6b0 [ 351.802317][T11010] acpi_pci_irq_disable+0x1a8/0x360 [ 351.802327][T11010] pcibios_disable_device+0x89/0xb0 [ 351.802336][T11010] do_pci_disable_device+0x9f/0x100 [ 351.802345][T11010] pci_disable_device+0x130/0x270 [ 351.802355][T11010] virtio_pci_remove+0xcf/0x110 [ 351.802364][T11010] pci_device_remove+0xb2/0x1d0 [ 351.802377][T11010] device_remove+0xcb/0x180 [ 351.802389][T11010] device_release_driver_internal+0x441/0x610 [ 351.802404][T11010] pci_stop_bus_device+0x120/0x160 [ 351.802413][T11010] pci_stop_and_remove_bus_device+0x58/0xa0 [ 351.802428][T11010] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 351.802438][T11010] remove_store+0x123/0x140 [ 351.802450][T11010] dev_attr_store+0x58/0x80 [ 351.802459][T11010] sysfs_kf_write+0xf2/0x150 [ 351.802469][T11010] kernfs_fop_write_iter+0x3e0/0x5f0 [ 351.802479][T11010] vfs_write+0x6af/0x1050 [ 351.802488][T11010] ksys_write+0x12a/0x250 [ 351.802497][T11010] __do_fast_syscall_32+0x14b/0x8c0 [ 351.802509][T11010] do_fast_syscall_32+0x32/0x70 [ 351.802522][T11010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 351.802534][T11010] [ 351.802537][T11010] The buggy address belongs to the object at ffff8880226fe478 [ 351.802537][T11010] which belongs to the cache Acpi-Operand of size 72 [ 351.802545][T11010] The buggy address is located 8 bytes inside of [ 351.802545][T11010] freed 72-byte region [ffff8880226fe478, ffff8880226fe4c0) [ 351.802555][T11010] [ 351.802557][T11010] The buggy address belongs to the physical page: [ 351.802562][T11010] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880226fef08 pfn:0x226fe [ 351.802571][T11010] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 351.802581][T11010] page_type: f5(slab) [ 351.802589][T11010] raw: 00fff00000000200 ffff88801d44da40 ffffea0000956a50 ffffea00007abad0 [ 351.802598][T11010] raw: ffff8880226fef08 0000000200270006 00000000f5000000 0000000000000000 [ 351.802604][T11010] page dumped because: kasan: bad access detected [ 351.802609][T11010] page_owner tracks the page as allocated [ 351.802612][T11010] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2561747419 [ 351.802628][T11010] post_alloc_hook+0xfd/0x120 [ 351.802640][T11010] get_page_from_freelist+0x1113/0x35e0 [ 351.802653][T11010] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 351.802666][T11010] new_slab+0xb1/0x6d0 [ 351.802678][T11010] refill_objects+0xe3/0x410 [ 351.802690][T11010] __pcs_replace_empty_main+0x35e/0x650 [ 351.802702][T11010] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 351.802716][T11010] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 351.802729][T11010] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 351.802742][T11010] acpi_ds_create_operand+0x6be/0xc20 [ 351.802754][T11010] acpi_ds_eval_data_object_operands+0x125/0x640 [ 351.802768][T11010] acpi_ds_exec_end_op+0xe41/0x1e60 [ 351.802780][T11010] acpi_ps_parse_loop+0x5e1/0x26e0 [ 351.802794][T11010] acpi_ps_parse_aml+0x81e/0x1120 [ 351.802807][T11010] acpi_ps_execute_table+0x393/0x500 [ 351.802816][T11010] acpi_ns_execute_table+0x596/0x970 [ 351.802826][T11010] page_owner free stack trace missing [ 351.802829][T11010] [ 351.802832][T11010] Memory state around the buggy address: [ 351.802837][T11010] ffff8880226fe380: 00 fc fc fc fc fa fb fb fb fb fb fb fb fb fc fc [ 351.802844][T11010] ffff8880226fe400: fc fc fa fb fb fb fb fb fb fb fb fc fc fc fc fa [ 351.802850][T11010] >ffff8880226fe480: fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb [ 351.802856][T11010] ^ [ 351.802860][T11010] ffff8880226fe500: fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb [ 351.802867][T11010] ffff8880226fe580: fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb fc [ 351.802873][T11010] ================================================================== [ 351.804179][ C2] kobject: '25' (ffff8880252eb9c0): kobject_cleanup, parent 0000000000000000 [ 351.804194][ C2] kobject: '25' (ffff8880252eb9c0): calling ktype release [ 351.804217][ C2] kobject: '25': free name [ 351.821411][ C2] kobject: '26' (ffff8880252eb1c0): kobject_cleanup, parent 0000000000000000 [ 351.821429][ C2] kobject: '26' (ffff8880252eb1c0): calling ktype release [ 351.821446][ C2] kobject: '26': free name [ 351.961863][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 351.970922][ C0] wireguard: wg1: Handshake for peer 22 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 10) [ 351.985998][T11017] kcov: kcov_start: t = ffff888025270000, size = 524288, area = ffffc9000c181000 [ 352.083580][T11000] ceph: destroy_mount_options ffff88802700bc80 [ 352.083604][T11000] libceph: destroy_options ffff88802668da00 [ 352.168948][T11018] kcov: kcov_start: t = ffff888025252580, size = 524288, area = ffffc90026fa2000 [ 352.193481][T10972] 842_decompress: template is 1c [ 352.193494][T10972] 842_decompress: template is 1b [ 352.193499][T10972] 842_decompress: template is 9 [ 352.193505][T10972] 842_decompress: op is 22 [ 352.193510][T10972] 842_decompress: op is 12 [ 352.193516][T10972] 842_decompress: index2 to b off 16 adjoff 16 tot 18 data 0 [ 352.193526][T10972] 842_decompress: op is 14 [ 352.193531][T10972] 842_decompress: index4 to 5 off 14 adjoff 14 tot 18 data 0 [ 352.193540][T10972] 842_decompress: op is 40 [ 352.193546][T10972] 842_decompress: template is 1c [ 352.193551][T10972] 842_decompress: template is 1b [ 352.193557][T10972] 842_decompress: template is 14 [ 352.193562][T10972] 842_decompress: op is 14 [ 352.193567][T10972] 842_decompress: index4 to 11 off 44 adjoff 44 tot 48 data 0 [ 352.193577][T10972] 842_decompress: op is 24 [ 352.193582][T10972] 842_decompress: op is 40 [ 352.193587][T10972] 842_decompress: op is 40 [ 352.193592][T10972] 842_decompress: template is 9 [ 352.193597][T10972] 842_decompress: op is 22 [ 352.193602][T10972] 842_decompress: op is 12 [ 352.193607][T10972] 842_decompress: index2 to 25 off 4a adjoff 4a tot 50 data 0 [ 352.193617][T10972] 842_decompress: op is 14 [ 352.193622][T10972] 842_decompress: index4 to 12 off 48 adjoff 48 tot 50 data 0 [ 352.193631][T10972] 842_decompress: op is 40 [ 352.193636][T10972] 842_decompress: template is 1c [ 352.193641][T10972] 842_decompress: template is 1b [ 352.193646][T10972] 842_decompress: template is 18 [ 352.193652][T10972] 842_decompress: op is 14 [ 352.193657][T10972] 842_decompress: index4 to 25 off 94 adjoff 94 tot 98 data 0 [ 352.193666][T10972] 842_decompress: op is 14 [ 352.193671][T10972] 842_decompress: index4 to 6 off 18 adjoff 18 tot 98 data 1000000 [ 352.193680][T10972] 842_decompress: op is 40 [ 352.193685][T10972] 842_decompress: op is 40 [ 352.193690][T10972] 842_decompress: template is 1c [ 352.193696][T10972] 842_decompress: template is 1b [ 352.193701][T10972] 842_decompress: template is 9 [ 352.193706][T10972] 842_decompress: op is 22 [ 352.193711][T10972] 842_decompress: op is 12 [ 352.193716][T10972] 842_decompress: index2 to 27 off 4e adjoff 4e tot d0 data 21f7 [ 352.193726][T10972] 842_decompress: op is 14 [ 352.193731][T10972] 842_decompress: index4 to 14 off 50 adjoff 50 tot d0 data 3000000 [ 352.193741][T10972] 842_decompress: op is 40 [ 352.193746][T10972] 842_decompress: template is 1c [ 352.193751][T10972] 842_decompress: template is 1b [ 352.193757][T10972] 842_decompress: template is 19 [ 352.193762][T10972] 842_decompress: op is 18 [ 352.193767][T10972] 842_decompress: index8 to 3 off 18 adjoff 18 tot 120 data 100000000000000 [ 352.193777][T10972] 842_decompress: op is 40 [ 352.193782][T10972] 842_decompress: op is 40 [ 352.193787][T10972] 842_decompress: op is 40 [ 352.193792][T10972] 842_decompress: template is 1c [ 352.193797][T10972] 842_decompress: template is 1b [ 352.193802][T10972] 842_decompress: template is 14 [ 352.193808][T10972] 842_decompress: op is 14 [ 352.193813][T10972] 842_decompress: index4 to 53 off 14c adjoff 14c tot 150 data 0 [ 352.193822][T10972] 842_decompress: op is 24 [ 352.193827][T10972] 842_decompress: op is 40 [ 352.193832][T10972] 842_decompress: op is 40 [ 352.193837][T10972] 842_decompress: template is 19 [ 352.193843][T10972] 842_decompress: op is 18 [ 352.193848][T10972] 842_decompress: index8 to a off 50 adjoff 50 tot 158 data 300000000000000 [ 352.193857][T10972] 842_decompress: op is 40 [ 352.193862][T10972] 842_decompress: op is 40 [ 352.193867][T10972] 842_decompress: op is 40 [ 352.193872][T10972] 842_decompress: template is 1c [ 352.193878][T10972] 842_decompress: template is 1b [ 352.193883][T10972] 842_decompress: template is 19 [ 352.193888][T10972] 842_decompress: op is 18 [ 352.193893][T10972] 842_decompress: index8 to 13 off 98 adjoff 98 tot 1a0 data 1000000 [ 352.193903][T10972] 842_decompress: op is 40 [ 352.193908][T10972] 842_decompress: op is 40 [ 352.193913][T10972] 842_decompress: op is 40 [ 352.193918][T10972] 842_decompress: template is 1c [ 352.193923][T10972] 842_decompress: template is 1b [ 352.193929][T10972] 842_decompress: template is 9 [ 352.193934][T10972] 842_decompress: op is 22 [ 352.193939][T10972] 842_decompress: op is 12 [ 352.193944][T10972] 842_decompress: index2 to ab off 156 adjoff 156 tot 1d8 data 1ff7 [ 352.193953][T10972] 842_decompress: op is 14 [ 352.193958][T10972] 842_decompress: index4 to 56 off 158 adjoff 158 tot 1d8 data 3000000 [ 352.193968][T10972] 842_decompress: op is 40 [ 352.193973][T10972] 842_decompress: template is 1c [ 352.193978][T10972] 842_decompress: template is 1b [ 352.193984][T10972] 842_decompress: template is 19 [ 352.193989][T10972] 842_decompress: op is 18 [ 352.193994][T10972] 842_decompress: index8 to 24 off 120 adjoff 120 tot 228 data 100000000000000 [ 352.194004][T10972] 842_decompress: op is 40 [ 352.194008][T10972] 842_decompress: op is 40 [ 352.194013][T10972] 842_decompress: op is 40 [ 352.194018][T10972] 842_decompress: template is 1c [ 352.194024][T10972] 842_decompress: template is 1b [ 352.194029][T10972] 842_decompress: template is 15 [ 352.194034][T10972] 842_decompress: op is 14 [ 352.194039][T10972] 842_decompress: index4 to 95 off 254 adjoff 254 tot 258 data 0 [ 352.194049][T10972] 842_decompress: op is 22 [ 352.194054][T10972] 842_decompress: op is 12 [ 352.194059][T10972] 842_decompress: index2 to ed off 1da adjoff 1da tot 258 data 1ff7 [ 352.194068][T10972] 842_decompress: op is 40 [ 352.194073][T10972] 842_decompress: template is 19 [ 352.194079][T10972] 842_decompress: op is 18 [ 352.194084][T10972] 842_decompress: index8 to 2b off 158 adjoff 158 tot 260 data 300000000000000 [ 352.194093][T10972] 842_decompress: op is 40 [ 352.194098][T10972] 842_decompress: op is 40 [ 352.194103][T10972] 842_decompress: op is 40 [ 352.194108][T10972] 842_decompress: template is 1c [ 352.194114][T10972] 842_decompress: template is 1b [ 352.194119][T10972] 842_decompress: template is 19 [ 352.194124][T10972] 842_decompress: op is 18 [ 352.194129][T10972] 842_decompress: index8 to 34 off 1a0 adjoff 1a0 tot 2a8 data 1000000 [ 352.194139][T10972] 842_decompress: op is 40 [ 352.194144][T10972] 842_decompress: op is 40 [ 352.194149][T10972] 842_decompress: op is 40 [ 352.194154][T10972] 842_decompress: template is 1c [ 352.194159][T10972] 842_decompress: template is 1b [ 352.194165][T10972] 842_decompress: template is 4 [ 352.194170][T10972] 842_decompress: op is 24 [ 352.194175][T10972] 842_decompress: op is 14 [ 352.194180][T10972] 842_decompress: index4 to 98 off 260 adjoff 260 tot 2e0 data 3000000 [ 352.194190][T10972] 842_decompress: op is 40 [ 352.194194][T10972] 842_decompress: op is 40 [ 352.194199][T10972] 842_decompress: template is 1c [ 352.194205][T10972] 842_decompress: template is 1b [ 352.194210][T10972] 842_decompress: template is 19 [ 352.194215][T10972] 842_decompress: op is 18 [ 352.194221][T10972] 842_decompress: index8 to 45 off 228 adjoff 228 tot 330 data 100000000000000 [ 352.194230][T10972] 842_decompress: op is 40 [ 352.194235][T10972] 842_decompress: op is 40 [ 352.194240][T10972] 842_decompress: op is 40 [ 352.194245][T10972] 842_decompress: template is 1c [ 352.194251][T10972] 842_decompress: template is 1b [ 352.194256][T10972] 842_decompress: template is 15 [ 352.194261][T10972] 842_decompress: op is 14 [ 352.194266][T10972] 842_decompress: index4 to d7 off 35c adjoff 35c tot 360 data 0 [ 352.194276][T10972] 842_decompress: op is 22 [ 352.194281][T10972] 842_decompress: op is 12 [ 352.194286][T10972] 842_decompress: index2 to 2f off 5e adjoff 25e tot 360 data 1ff7 [ 352.194295][T10972] 842_decompress: op is 40 [ 352.194300][T10972] 842_decompress: template is 19 [ 352.194306][T10972] 842_decompress: op is 18 [ 352.194311][T10972] 842_decompress: index8 to 4c off 260 adjoff 260 tot 368 data 300000000000000 [ 352.194321][T10972] 842_decompress: op is 40 [ 352.194325][T10972] 842_decompress: op is 40 [ 352.194330][T10972] 842_decompress: op is 40 [ 352.194335][T10972] 842_decompress: template is 1c [ 352.194340][T10972] 842_decompress: template is 1b [ 352.194346][T10972] 842_decompress: template is 19 [ 352.194351][T10972] 842_decompress: op is 18 [ 352.194356][T10972] 842_decompress: index8 to 55 off 2a8 adjoff 2a8 tot 3b0 data 1000000 [ 352.194366][T10972] 842_decompress: op is 40 [ 352.194371][T10972] 842_decompress: op is 40 [ 352.194376][T10972] 842_decompress: op is 40 [ 352.194380][T10972] 842_decompress: template is 1c [ 352.194386][T10972] 842_decompress: template is 1b [ 352.194391][T10972] 842_decompress: template is 9 [ 352.194396][T10972] 842_decompress: op is 22 [ 352.194401][T10972] 842_decompress: op is 12 [ 352.194407][T10972] 842_decompress: index2 to b3 off 166 adjoff 366 tot 3e8 data 1ff7 [ 352.194420][T10972] 842_decompress: op is 14 [ 352.194426][T10972] 842_decompress: index4 to da off 368 adjoff 368 tot 3e8 data 3000000 [ 352.194435][T10972] 842_decompress: op is 40 [ 352.194440][T10972] 842_decompress: template is 1c [ 352.194446][T10972] 842_decompress: template is 1b [ 352.194452][T10972] 842_decompress: template is 19 [ 352.194457][T10972] 842_decompress: op is 18 [ 352.194462][T10972] 842_decompress: index8 to 66 off 330 adjoff 330 tot 438 data 100000000000000 [ 352.194471][T10972] 842_decompress: op is 40 [ 352.194476][T10972] 842_decompress: op is 40 [ 352.194481][T10972] 842_decompress: op is 40 [ 352.194486][T10972] 842_decompress: template is 1c [ 352.194492][T10972] 842_decompress: template is 1b [ 352.194497][T10972] 842_decompress: template is 15 [ 352.194502][T10972] 842_decompress: op is 14 [ 352.194507][T10972] 842_decompress: index4 to 119 off 464 adjoff 464 tot 468 data 0 [ 352.194558][T10972] 842_decompress: op is 22 [ 352.194565][T10972] 842_decompress: op is 12 [ 352.194570][T10972] 842_decompress: index2 to f5 off 1ea adjoff 3ea tot 468 data 1ff7 [ 352.194580][T10972] 842_decompress: op is 40 [ 352.194585][T10972] 842_decompress: template is 19 [ 352.194590][T10972] 842_decompress: op is 18 [ 352.194595][T10972] 842_decompress: index8 to 6d off 368 adjoff 368 tot 470 data 300000000000000 [ 352.194605][T10972] 842_decompress: op is 40 [ 352.194610][T10972] 842_decompress: op is 40 [ 352.194615][T10972] 842_decompress: op is 40 [ 352.194620][T10972] 842_decompress: template is 1c [ 352.194625][T10972] 842_decompress: template is 1b [ 352.194631][T10972] 842_decompress: template is 19 [ 352.194636][T10972] 842_decompress: op is 18 [ 352.194641][T10972] 842_decompress: index8 to 76 off 3b0 adjoff 3b0 tot 4b8 data 1000000 [ 352.194650][T10972] 842_decompress: op is 40 [ 352.194655][T10972] 842_decompress: op is 40 [ 352.194660][T10972] 842_decompress: op is 40 [ 352.194665][T10972] 842_decompress: template is 1c [ 352.194670][T10972] 842_decompress: template is 1b [ 352.194675][T10972] 842_decompress: template is 4 [ 352.194680][T10972] 842_decompress: op is 24 [ 352.194685][T10972] 842_decompress: op is 14 [ 352.194690][T10972] 842_decompress: index4 to 11c off 470 adjoff 470 tot 4f0 data 3000000 [ 352.194700][T10972] 842_decompress: op is 40 [ 352.194705][T10972] 842_decompress: op is 40 [ 352.194710][T10972] 842_decompress: template is 1c [ 352.194715][T10972] 842_decompress: template is 1b [ 352.194721][T10972] 842_decompress: template is 19 [ 352.194726][T10972] 842_decompress: op is 18 [ 352.194731][T10972] 842_decompress: index8 to 87 off 438 adjoff 438 tot 540 data 100000000000000 [ 352.194740][T10972] 842_decompress: op is 40 [ 352.194745][T10972] 842_decompress: op is 40 [ 352.194750][T10972] 842_decompress: op is 40 [ 352.194755][T10972] 842_decompress: template is 1c [ 352.194760][T10972] 842_decompress: template is 1b [ 352.194766][T10972] 842_decompress: template is 15 [ 352.194771][T10972] 842_decompress: op is 14 [ 352.194776][T10972] 842_decompress: index4 to 15b off 56c adjoff 56c tot 570 data 0 [ 352.194785][T10972] 842_decompress: op is 22 [ 352.194790][T10972] 842_decompress: op is 12 [ 352.194795][T10972] 842_decompress: index2 to 37 off 6e adjoff 46e tot 570 data 1ff7 [ 352.194805][T10972] 842_decompress: op is 40 [ 352.194810][T10972] 842_decompress: template is 19 [ 352.194815][T10972] 842_decompress: op is 18 [ 352.194820][T10972] 842_decompress: index8 to 8e off 470 adjoff 470 tot 578 data 300000000000000 [ 352.194829][T10972] 842_decompress: op is 40 [ 352.194834][T10972] 842_decompress: op is 40 [ 352.194839][T10972] 842_decompress: op is 40 [ 352.194844][T10972] 842_decompress: template is 1c [ 352.194849][T10972] 842_decompress: template is 1b [ 352.194855][T10972] 842_decompress: template is 19 [ 352.194860][T10972] 842_decompress: op is 18 [ 352.194865][T10972] 842_decompress: index8 to 97 off 4b8 adjoff 4b8 tot 5c0 data 1000000 [ 352.194874][T10972] 842_decompress: op is 40 [ 352.194879][T10972] 842_decompress: op is 40 [ 352.194884][T10972] 842_decompress: op is 40 [ 352.194889][T10972] 842_decompress: template is 1c [ 352.194894][T10972] 842_decompress: template is 1b [ 352.194935][T10972] 842_decompress: template is 9 [ 352.194942][T10972] 842_decompress: op is 22 [ 352.194948][T10972] 842_decompress: op is 12 [ 352.194953][T10972] 842_decompress: index2 to bb off 176 adjoff 576 tot 5f8 data 1ff7 [ 352.194962][T10972] 842_decompress: op is 14 [ 352.194968][T10972] 842_decompress: index4 to 15e off 578 adjoff 578 tot 5f8 data 3000000 [ 352.194977][T10972] 842_decompress: op is 40 [ 352.194982][T10972] 842_decompress: template is 1c [ 352.194987][T10972] 842_decompress: template is 1b [ 352.194992][T10972] 842_decompress: template is 19 [ 352.194997][T10972] 842_decompress: op is 18 [ 352.195003][T10972] 842_decompress: index8 to a8 off 540 adjoff 540 tot 648 data 100000000000000 [ 352.195012][T10972] 842_decompress: op is 40 [ 352.195017][T10972] 842_decompress: op is 40 [ 352.195022][T10972] 842_decompress: op is 40 [ 352.195027][T10972] 842_decompress: template is 1c [ 352.195032][T10972] 842_decompress: template is 1b [ 352.195037][T10972] 842_decompress: template is 15 [ 352.195042][T10972] 842_decompress: op is 14 [ 352.195047][T10972] 842_decompress: index4 to 19d off 674 adjoff 674 tot 678 data 0 [ 352.195057][T10972] 842_decompress: op is 22 [ 352.195062][T10972] 842_decompress: op is 12 [ 352.195067][T10972] 842_decompress: index2 to fd off 1fa adjoff 5fa tot 678 data 1ff7 [ 352.195076][T10972] 842_decompress: op is 40 [ 352.195081][T10972] 842_decompress: template is 19 [ 352.195086][T10972] 842_decompress: op is 18 [ 352.195091][T10972] 842_decompress: index8 to af off 578 adjoff 578 tot 680 data 300000000000000 [ 352.195101][T10972] 842_decompress: op is 40 [ 352.195106][T10972] 842_decompress: op is 40 [ 352.195111][T10972] 842_decompress: op is 40 [ 352.195116][T10972] 842_decompress: template is 1c [ 352.195121][T10972] 842_decompress: template is 1b [ 352.195126][T10972] 842_decompress: template is 19 [ 352.195131][T10972] 842_decompress: op is 18 [ 352.195137][T10972] 842_decompress: index8 to b8 off 5c0 adjoff 5c0 tot 6c8 data 1000000 [ 352.195146][T10972] 842_decompress: op is 40 [ 352.195151][T10972] 842_decompress: op is 40 [ 352.195156][T10972] 842_decompress: op is 40 [ 352.195161][T10972] 842_decompress: template is 1c [ 352.195166][T10972] 842_decompress: template is 1b [ 352.195171][T10972] 842_decompress: template is 9 [ 352.195176][T10972] 842_decompress: op is 22 [ 352.195182][T10972] 842_decompress: op is 12 [ 352.195187][T10972] 842_decompress: index2 to 3f off 7e adjoff 67e tot 700 data 1ff7 [ 352.195196][T10972] 842_decompress: op is 14 [ 352.195201][T10972] 842_decompress: index4 to 1a0 off 680 adjoff 680 tot 700 data 3000000 [ 352.195210][T10972] 842_decompress: op is 40 [ 352.195215][T10972] 842_decompress: template is 1c [ 352.195221][T10972] 842_decompress: template is 1b [ 352.195226][T10972] 842_decompress: template is 19 [ 352.195232][T10972] 842_decompress: op is 18 [ 352.195237][T10972] 842_decompress: index8 to c9 off 648 adjoff 648 tot 750 data 100000000000000 [ 352.195246][T10972] 842_decompress: op is 40 [ 352.195251][T10972] 842_decompress: op is 40 [ 352.195256][T10972] 842_decompress: op is 40 [ 352.195261][T10972] 842_decompress: template is 1c [ 352.195267][T10972] 842_decompress: template is 1b [ 352.195272][T10972] 842_decompress: template is 15 [ 352.195277][T10972] 842_decompress: op is 14 [ 352.195282][T10972] 842_decompress: index4 to 1df off 77c adjoff 77c tot 780 data 0 [ 352.195292][T10972] 842_decompress: op is 22 [ 352.195297][T10972] 842_decompress: op is 12 [ 352.195302][T10972] 842_decompress: index2 to 81 off 102 adjoff 702 tot 780 data 1ff7 [ 352.195311][T10972] 842_decompress: op is 40 [ 352.195316][T10972] 842_decompress: template is 19 [ 352.195321][T10972] 842_decompress: op is 18 [ 352.195326][T10972] 842_decompress: index8 to d0 off 680 adjoff 680 tot 788 data 300000000000000 [ 352.195336][T10972] 842_decompress: op is 40 [ 352.195341][T10972] 842_decompress: op is 40 [ 352.195346][T10972] 842_decompress: op is 40 [ 352.195351][T10972] 842_decompress: template is 1c [ 352.195356][T10972] 842_decompress: template is 1b [ 352.195361][T10972] 842_decompress: template is 19 [ 352.195366][T10972] 842_decompress: op is 18 [ 352.195371][T10972] 842_decompress: index8 to d9 off 6c8 adjoff 6c8 tot 7d0 data 1000000 [ 352.195381][T10972] 842_decompress: op is 40 [ 352.195386][T10972] 842_decompress: op is 40 [ 352.195390][T10972] 842_decompress: op is 40 [ 352.195395][T10972] 842_decompress: template is 1c [ 352.195401][T10972] 842_decompress: template is 1b [ 352.195406][T10972] 842_decompress: template is 9 [ 352.195411][T10972] 842_decompress: op is 22 [ 352.195420][T10972] 842_decompress: op is 12 [ 352.195425][T10972] 842_decompress: index2 to c3 off 186 adjoff 786 tot 808 data 1ff7 [ 352.195434][T10972] 842_decompress: op is 14 [ 352.195439][T10972] 842_decompress: index4 to 1e2 off 788 adjoff 788 tot 808 data 3000000 [ 352.195449][T10972] 842_decompress: op is 40 [ 352.195454][T10972] 842_decompress: template is 1c [ 352.195459][T10972] 842_decompress: template is 1b [ 352.195464][T10972] 842_decompress: template is 19 [ 352.195469][T10972] 842_decompress: op is 18 [ 352.195475][T10972] 842_decompress: index8 to ea off 750 adjoff 750 tot 858 data 100000000000000 [ 352.195484][T10972] 842_decompress: op is 40 [ 352.195489][T10972] 842_decompress: op is 40 [ 352.195494][T10972] 842_decompress: op is 40 [ 352.195499][T10972] 842_decompress: template is 1c [ 352.195504][T10972] 842_decompress: template is 1b [ 352.195509][T10972] 842_decompress: template is 15 [ 352.195515][T10972] 842_decompress: op is 14 [ 352.195520][T10972] 842_decompress: index4 to 21 off 84 adjoff 884 tot 888 data 0 [ 352.195529][T10972] 842_decompress: op is 22 [ 352.195534][T10972] 842_decompress: op is 12 [ 352.195539][T10972] 842_decompress: index2 to 5 off a adjoff 80a tot 888 data 1ff7 [ 352.195548][T10972] 842_decompress: op is 40 [ 352.195553][T10972] 842_decompress: template is 19 [ 352.195558][T10972] 842_decompress: op is 18 [ 352.195563][T10972] 842_decompress: index8 to f1 off 788 adjoff 788 tot 890 data 300000000000000 [ 352.195573][T10972] 842_decompress: op is 40 [ 352.195578][T10972] 842_decompress: op is 40 [ 352.195582][T10972] 842_decompress: op is 40 [ 352.195587][T10972] 842_decompress: template is 1c [ 352.195592][T10972] 842_decompress: template is 1b [ 352.195598][T10972] 842_decompress: template is 19 [ 352.195603][T10972] 842_decompress: op is 18 [ 352.195608][T10972] 842_decompress: index8 to fa off 7d0 adjoff 7d0 tot 8d8 data 1000000 [ 352.195617][T10972] 842_decompress: op is 40 [ 352.195622][T10972] 842_decompress: op is 40 [ 352.195627][T10972] 842_decompress: op is 40 [ 352.195632][T10972] 842_decompress: template is 1c [ 352.195637][T10972] 842_decompress: template is 1b [ 352.195643][T10972] 842_decompress: template is 9 [ 352.195648][T10972] 842_decompress: op is 22 [ 352.195653][T10972] 842_decompress: op is 12 [ 352.195658][T10972] 842_decompress: index2 to 47 off 8e adjoff 88e tot 910 data 1ff7 [ 352.195667][T10972] 842_decompress: op is 14 [ 352.195672][T10972] 842_decompress: index4 to 24 off 90 adjoff 890 tot 910 data 3000000 [ 352.195681][T10972] 842_decompress: op is 40 [ 352.195686][T10972] 842_decompress: template is 1c [ 352.195691][T10972] 842_decompress: template is 1b [ 352.195697][T10972] 842_decompress: template is 19 [ 352.195702][T10972] 842_decompress: op is 18 [ 352.195707][T10972] 842_decompress: index8 to b off 58 adjoff 858 tot 960 data 100000000000000 [ 352.195716][T10972] 842_decompress: op is 40 [ 352.195721][T10972] 842_decompress: op is 40 [ 352.195726][T10972] 842_decompress: op is 40 [ 352.195731][T10972] 842_decompress: template is 1c [ 352.195736][T10972] 842_decompress: template is 1b [ 352.195741][T10972] 842_decompress: template is 15 [ 352.195746][T10972] 842_decompress: op is 14 [ 352.195751][T10972] 842_decompress: index4 to 63 off 18c adjoff 98c tot 990 data 0 [ 352.195760][T10972] 842_decompress: op is 22 [ 352.195765][T10972] 842_decompress: op is 12 [ 352.195770][T10972] 842_decompress: index2 to 89 off 112 adjoff 912 tot 990 data 1ff7 [ 352.195780][T10972] 842_decompress: op is 40 [ 352.195785][T10972] 842_decompress: template is 19 [ 352.195790][T10972] 842_decompress: op is 18 [ 352.195794][T10972] 842_decompress: index8 to 12 off 90 adjoff 890 tot 998 data 300000000000000 [ 352.195804][T10972] 842_decompress: op is 40 [ 352.195809][T10972] 842_decompress: op is 40 [ 352.195814][T10972] 842_decompress: op is 40 [ 352.195819][T10972] 842_decompress: template is 1c [ 352.195824][T10972] 842_decompress: template is 1b [ 352.195829][T10972] 842_decompress: template is 19 [ 352.195852][T10972] 842_decompress: op is 18 [ 352.195858][T10972] 842_decompress: index8 to 1b off d8 adjoff 8d8 tot 9e0 data 1000000 [ 352.195867][T10972] 842_decompress: op is 40 [ 352.195872][T10972] 842_decompress: op is 40 [ 352.195877][T10972] 842_decompress: op is 40 [ 352.195882][T10972] 842_decompress: template is 1c [ 352.195888][T10972] 842_decompress: template is 1b [ 352.195893][T10972] 842_decompress: template is 4 [ 352.195898][T10972] 842_decompress: op is 24 [ 352.195903][T10972] 842_decompress: op is 14 [ 352.195908][T10972] 842_decompress: index4 to 66 off 198 adjoff 998 tot a18 data 3000000 [ 352.195918][T10972] 842_decompress: op is 40 [ 352.195923][T10972] 842_decompress: op is 40 [ 352.195928][T10972] 842_decompress: template is 1c [ 352.195933][T10972] 842_decompress: template is 1b [ 352.195939][T10972] 842_decompress: template is 19 [ 352.195944][T10972] 842_decompress: op is 18 [ 352.195949][T10972] 842_decompress: index8 to 2c off 160 adjoff 960 tot a68 data 100000000000000 [ 352.195958][T10972] 842_decompress: op is 40 [ 352.195963][T10972] 842_decompress: op is 40 [ 352.195968][T10972] 842_decompress: op is 40 [ 352.195973][T10972] 842_decompress: template is 1c [ 352.195978][T10972] 842_decompress: template is 1b [ 352.195984][T10972] 842_decompress: template is 15 [ 352.195989][T10972] 842_decompress: op is 14 [ 352.195994][T10972] 842_decompress: index4 to a5 off 294 adjoff a94 tot a98 data 0 [ 352.196003][T10972] 842_decompress: op is 22 [ 352.196008][T10972] 842_decompress: op is 12 [ 352.196013][T10972] 842_decompress: index2 to cb off 196 adjoff 996 tot a98 data 1ff7 [ 352.196023][T10972] 842_decompress: op is 40 [ 352.196028][T10972] 842_decompress: template is 19 [ 352.196033][T10972] 842_decompress: op is 18 [ 352.196038][T10972] 842_decompress: index8 to 33 off 198 adjoff 998 tot aa0 data 300000000000000 [ 352.196048][T10972] 842_decompress: op is 40 [ 352.196053][T10972] 842_decompress: op is 40 [ 352.196057][T10972] 842_decompress: op is 40 [ 352.196062][T10972] 842_decompress: template is 1c [ 352.196068][T10972] 842_decompress: template is 1b [ 352.196073][T10972] 842_decompress: template is 19 [ 352.196078][T10972] 842_decompress: op is 18 [ 352.196084][T10972] 842_decompress: index8 to 3c off 1e0 adjoff 9e0 tot ae8 data 1000000 [ 352.196093][T10972] 842_decompress: op is 40 [ 352.196098][T10972] 842_decompress: op is 40 [ 352.196103][T10972] 842_decompress: op is 40 [ 352.196108][T10972] 842_decompress: template is 1c [ 352.196113][T10972] 842_decompress: template is 1b [ 352.196118][T10972] 842_decompress: template is 9 [ 352.196123][T10972] 842_decompress: op is 22 [ 352.196128][T10972] 842_decompress: op is 12 [ 352.196134][T10972] 842_decompress: index2 to 4f off 9e adjoff a9e tot b20 data 1ff7 [ 352.196143][T10972] 842_decompress: op is 14 [ 352.196148][T10972] 842_decompress: index4 to a8 off 2a0 adjoff aa0 tot b20 data 3000000 [ 352.196157][T10972] 842_decompress: op is 40 [ 352.196162][T10972] 842_decompress: template is 1c [ 352.196168][T10972] 842_decompress: template is 1b [ 352.196173][T10972] 842_decompress: template is 19 [ 352.196178][T10972] 842_decompress: op is 18 [ 352.196183][T10972] 842_decompress: index8 to 4d off 268 adjoff a68 tot b70 data 100000000000000 [ 352.196193][T10972] 842_decompress: op is 40 [ 352.196198][T10972] 842_decompress: op is 40 [ 352.196203][T10972] 842_decompress: op is 40 [ 352.196208][T10972] 842_decompress: template is 1c [ 352.196213][T10972] 842_decompress: template is 1b [ 352.196218][T10972] 842_decompress: template is 15 [ 352.196223][T10972] 842_decompress: op is 14 [ 352.196228][T10972] 842_decompress: index4 to e7 off 39c adjoff b9c tot ba0 data 0 [ 352.196238][T10972] 842_decompress: op is 22 [ 352.196243][T10972] 842_decompress: op is 12 [ 352.196248][T10972] 842_decompress: index2 to 91 off 122 adjoff b22 tot ba0 data 1ff7 [ 352.196257][T10972] 842_decompress: op is 40 [ 352.196262][T10972] 842_decompress: template is 19 [ 352.196267][T10972] 842_decompress: op is 18 [ 352.196272][T10972] 842_decompress: index8 to 54 off 2a0 adjoff aa0 tot ba8 data 300000000000000 [ 352.196282][T10972] 842_decompress: op is 40 [ 352.196287][T10972] 842_decompress: op is 40 [ 352.196292][T10972] 842_decompress: op is 40 [ 352.196297][T10972] 842_decompress: template is 1c [ 352.196302][T10972] 842_decompress: template is 1b [ 352.196308][T10972] 842_decompress: template is 19 [ 352.196313][T10972] 842_decompress: op is 18 [ 352.196318][T10972] 842_decompress: index8 to 5d off 2e8 adjoff ae8 tot bf0 data 1000000 [ 352.196327][T10972] 842_decompress: op is 40 [ 352.196332][T10972] 842_decompress: op is 40 [ 352.196337][T10972] 842_decompress: op is 40 [ 352.196342][T10972] 842_decompress: template is 1c [ 352.196347][T10972] 842_decompress: template is 1b [ 352.196353][T10972] 842_decompress: template is 9 [ 352.196358][T10972] 842_decompress: op is 22 [ 352.196363][T10972] 842_decompress: op is 12 [ 352.196368][T10972] 842_decompress: index2 to d3 off 1a6 adjoff ba6 tot c28 data 1ff7 [ 352.196377][T10972] 842_decompress: op is 14 [ 352.196382][T10972] 842_decompress: index4 to ea off 3a8 adjoff ba8 tot c28 data 3000000 [ 352.196392][T10972] 842_decompress: op is 40 [ 352.196397][T10972] 842_decompress: template is 1c [ 352.196402][T10972] 842_decompress: template is 1b [ 352.196407][T10972] 842_decompress: template is 19 [ 352.196413][T10972] 842_decompress: op is 18 [ 352.196421][T10972] 842_decompress: index8 to 6e off 370 adjoff b70 tot c78 data 100000000000000 [ 352.196431][T10972] 842_decompress: op is 40 [ 352.196436][T10972] 842_decompress: op is 40 [ 352.196441][T10972] 842_decompress: op is 40 [ 352.196446][T10972] 842_decompress: template is 1c [ 352.196451][T10972] 842_decompress: template is 1b [ 352.196457][T10972] 842_decompress: template is 15 [ 352.196462][T10972] 842_decompress: op is 14 [ 352.196467][T10972] 842_decompress: index4 to 129 off 4a4 adjoff ca4 tot ca8 data 0 [ 352.196476][T10972] 842_decompress: op is 22 [ 352.196481][T10972] 842_decompress: op is 12 [ 352.196486][T10972] 842_decompress: index2 to 15 off 2a adjoff c2a tot ca8 data 1ff7 [ 352.196496][T10972] 842_decompress: op is 40 [ 352.196501][T10972] 842_decompress: template is 19 [ 352.196506][T10972] 842_decompress: op is 18 [ 352.196511][T10972] 842_decompress: index8 to 75 off 3a8 adjoff ba8 tot cb0 data 300000000000000 [ 352.196520][T10972] 842_decompress: op is 40 [ 352.196525][T10972] 842_decompress: op is 40 [ 352.196530][T10972] 842_decompress: op is 40 [ 352.196535][T10972] 842_decompress: template is 1c [ 352.196540][T10972] 842_decompress: template is 1b [ 352.196546][T10972] 842_decompress: template is 19 [ 352.196551][T10972] 842_decompress: op is 18 [ 352.196556][T10972] 842_decompress: index8 to 7e off 3f0 adjoff bf0 tot cf8 data 1000000 [ 352.196565][T10972] 842_decompress: op is 40 [ 352.196570][T10972] 842_decompress: op is 40 [ 352.196575][T10972] 842_decompress: op is 40 [ 352.196580][T10972] 842_decompress: template is 1c [ 352.196585][T10972] 842_decompress: template is 1b [ 352.196591][T10972] 842_decompress: template is 9 [ 352.196596][T10972] 842_decompress: op is 22 [ 352.196601][T10972] 842_decompress: op is 12 [ 352.196606][T10972] 842_decompress: index2 to 57 off ae adjoff cae tot d30 data 1ff7 [ 352.196615][T10972] 842_decompress: op is 14 [ 352.196621][T10972] 842_decompress: index4 to 12c off 4b0 adjoff cb0 tot d30 data 3000000 [ 352.196630][T10972] 842_decompress: op is 40 [ 352.196635][T10972] 842_decompress: template is 1c [ 352.196640][T10972] 842_decompress: template is 1b [ 352.196646][T10972] 842_decompress: template is 19 [ 352.196651][T10972] 842_decompress: op is 18 [ 352.196656][T10972] 842_decompress: index8 to 8f off 478 adjoff c78 tot d80 data 100000000000000 [ 352.196666][T10972] 842_decompress: op is 40 [ 352.196671][T10972] 842_decompress: op is 40 [ 352.196676][T10972] 842_decompress: op is 40 [ 352.196681][T10972] 842_decompress: template is 1c [ 352.196686][T10972] 842_decompress: template is 1b [ 352.196692][T10972] 842_decompress: template is 15 [ 352.196697][T10972] 842_decompress: op is 14 [ 352.196702][T10972] 842_decompress: index4 to 16b off 5ac adjoff dac tot db0 data 0 [ 352.196711][T10972] 842_decompress: op is 22 [ 352.196717][T10972] 842_decompress: op is 12 [ 352.196722][T10972] 842_decompress: index2 to 99 off 132 adjoff d32 tot db0 data 1ff7 [ 352.196731][T10972] 842_decompress: op is 40 [ 352.196736][T10972] 842_decompress: template is 19 [ 352.196741][T10972] 842_decompress: op is 18 [ 352.196746][T10972] 842_decompress: index8 to 96 off 4b0 adjoff cb0 tot db8 data 300000000000000 [ 352.196756][T10972] 842_decompress: op is 40 [ 352.196761][T10972] 842_decompress: op is 40 [ 352.196766][T10972] 842_decompress: op is 40 [ 352.196771][T10972] 842_decompress: template is 1c [ 352.196776][T10972] 842_decompress: template is 1b [ 352.196781][T10972] 842_decompress: template is 19 [ 352.196786][T10972] 842_decompress: op is 18 [ 352.196792][T10972] 842_decompress: index8 to 9f off 4f8 adjoff cf8 tot e00 data 1000000 [ 352.196801][T10972] 842_decompress: op is 40 [ 352.196806][T10972] 842_decompress: op is 40 [ 352.196811][T10972] 842_decompress: op is 40 [ 352.196816][T10972] 842_decompress: template is 1c [ 352.196822][T10972] 842_decompress: template is 1b [ 352.196827][T10972] 842_decompress: template is 9 [ 352.196832][T10972] 842_decompress: op is 22 [ 352.196838][T10972] 842_decompress: op is 12 [ 352.196843][T10972] 842_decompress: index2 to db off 1b6 adjoff db6 tot e38 data 1ff7 [ 352.196852][T10972] 842_decompress: op is 14 [ 352.196857][T10972] 842_decompress: index4 to 16e off 5b8 adjoff db8 tot e38 data 3000000 [ 352.196867][T10972] 842_decompress: op is 40 [ 352.196873][T10972] 842_decompress: template is 1c [ 352.196878][T10972] 842_decompress: template is 1b [ 352.196884][T10972] 842_decompress: template is 19 [ 352.196889][T10972] 842_decompress: op is 18 [ 352.196894][T10972] 842_decompress: index8 to b0 off 580 adjoff d80 tot e88 data 100000000000000 [ 352.196904][T10972] 842_decompress: op is 40 [ 352.196909][T10972] 842_decompress: op is 40 [ 352.196914][T10972] 842_decompress: op is 40 [ 352.196919][T10972] 842_decompress: template is 1c [ 352.196924][T10972] 842_decompress: template is 1b [ 352.196929][T10972] 842_decompress: template is 15 [ 352.196934][T10972] 842_decompress: op is 14 [ 352.196939][T10972] 842_decompress: index4 to 1ad off 6b4 adjoff eb4 tot eb8 data 0 [ 352.196949][T10972] 842_decompress: op is 22 [ 352.196954][T10972] 842_decompress: op is 12 [ 352.196959][T10972] 842_decompress: index2 to 1d off 3a adjoff e3a tot eb8 data 1ff7 [ 352.196968][T10972] 842_decompress: op is 40 [ 352.196973][T10972] 842_decompress: template is 19 [ 352.196978][T10972] 842_decompress: op is 18 [ 352.196983][T10972] 842_decompress: index8 to b7 off 5b8 adjoff db8 tot ec0 data 300000000000000 [ 352.196993][T10972] 842_decompress: op is 40 [ 352.196998][T10972] 842_decompress: op is 40 [ 352.197002][T10972] 842_decompress: op is 40 [ 352.197007][T10972] 842_decompress: template is 1c [ 352.197013][T10972] 842_decompress: template is 1b [ 352.197018][T10972] 842_decompress: template is 19 [ 352.197023][T10972] 842_decompress: op is 18 [ 352.197029][T10972] 842_decompress: index8 to c0 off 600 adjoff e00 tot f08 data 1000000 [ 352.197038][T10972] 842_decompress: op is 40 [ 352.197043][T10972] 842_decompress: op is 40 [ 352.197048][T10972] 842_decompress: op is 40 [ 352.197053][T10972] 842_decompress: template is 1c [ 352.197058][T10972] 842_decompress: template is 1b [ 352.197063][T10972] 842_decompress: template is 9 [ 352.197068][T10972] 842_decompress: op is 22 [ 352.197073][T10972] 842_decompress: op is 12 [ 352.197079][T10972] 842_decompress: index2 to 5f off be adjoff ebe tot f40 data 1ff7 [ 352.197088][T10972] 842_decompress: op is 14 [ 352.197093][T10972] 842_decompress: index4 to 1b0 off 6c0 adjoff ec0 tot f40 data 3000000 [ 352.197158][T10972] 842_decompress: op is 40 [ 352.197165][T10972] 842_decompress: template is 1c [ 352.197170][T10972] 842_decompress: template is 1b [ 352.197176][T10972] 842_decompress: template is 19 [ 352.197181][T10972] 842_decompress: op is 18 [ 352.197186][T10972] 842_decompress: index8 to d1 off 688 adjoff e88 tot f90 data 100000000000000 [ 352.197196][T10972] 842_decompress: op is 40 [ 352.197200][T10972] 842_decompress: op is 40 [ 352.197234][T10972] 842_decompress: op is 40 [ 352.197241][T10972] 842_decompress: template is 1c [ 352.197247][T10972] 842_decompress: template is 1b [ 352.197252][T10972] 842_decompress: template is 15 [ 352.197257][T10972] 842_decompress: op is 14 [ 352.197262][T10972] 842_decompress: index4 to 1ef off 7bc adjoff fbc tot fc0 data 0 [ 352.197272][T10972] 842_decompress: op is 22 [ 352.197277][T10972] 842_decompress: op is 12 [ 352.197282][T10972] 842_decompress: index2 to a1 off 142 adjoff f42 tot fc0 data 1ff7 [ 352.197291][T10972] 842_decompress: op is 40 [ 352.197296][T10972] 842_decompress: template is 19 [ 352.197301][T10972] 842_decompress: op is 18 [ 352.197306][T10972] 842_decompress: index8 to d8 off 6c0 adjoff ec0 tot fc8 data 300000000000000 [ 352.197315][T10972] 842_decompress: op is 40 [ 352.197320][T10972] 842_decompress: op is 40 [ 352.197325][T10972] 842_decompress: op is 40 [ 352.197330][T10972] 842_decompress: template is 1c [ 352.197335][T10972] 842_decompress: template is 1b [ 352.197341][T10972] 842_decompress: template is 1e [ 352.199936][T11010] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 353.258565][T11010] CPU: 0 UID: 0 PID: 11010 Comm: syz.4.1321 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.262839][T11010] Tainted: [L]=SOFTLOCKUP [ 353.264555][T11010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 353.268493][T11010] Call Trace: [ 353.269842][T11010] [ 353.271049][T11010] dump_stack_lvl+0x100/0x190 [ 353.272966][T11010] vpanic+0x2dc/0x6f8 [ 353.274634][T11010] panic+0xd1/0xe0 [ 353.276231][T11010] ? __pfx_panic+0x10/0x10 [ 353.278068][T11010] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 353.280522][T11010] ? preempt_schedule+0x57/0xd0 [ 353.282499][T11010] check_panic_on_warn.cold+0x19/0x34 [ 353.284653][T11010] end_report.part.0+0x3a/0x90 [ 353.286606][T11010] kasan_report.cold+0xe/0x18 [ 353.288572][T11010] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 353.290995][T11010] acpi_ns_get_attached_object+0x148/0x1b0 [ 353.293315][T11010] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 353.295626][T11010] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 353.297675][T11010] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 353.300270][T11010] ? acpi_ds_create_operand+0x267/0xc20 [ 353.302522][T11010] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 353.304845][T11010] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 353.307316][T11010] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 353.309216][T11010] ? __asan_memset+0x23/0x50 [ 353.310824][T11010] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 353.312849][T11010] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 353.314635][T11010] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 353.316666][T11010] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 353.318534][T11010] ? acpi_ut_trace_ptr+0x141/0x2a0 [ 353.320169][T11010] acpi_ds_exec_end_op+0xb78/0x1e60 [ 353.321825][T11010] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 353.323589][T11010] acpi_ps_parse_loop+0x5e1/0x26e0 [ 353.325232][T11010] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 353.326975][T11010] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 353.328751][T11010] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 353.330686][T11010] ? acpi_ut_create_thread_state+0x6d/0x170 [ 353.333164][T11010] acpi_ps_parse_aml+0x81e/0x1120 [ 353.335255][T11010] acpi_ps_execute_method+0x5c4/0xe90 [ 353.337001][T11010] acpi_ns_evaluate+0x640/0x1670 [ 353.338540][T11010] acpi_ut_evaluate_object+0xf7/0x610 [ 353.340201][T11010] acpi_rs_get_prt_method_data+0xa0/0x150 [ 353.342031][T11010] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 353.343986][T11010] ? acpi_ut_status_exit+0x111/0x1c0 [ 353.345665][T11010] ? acpi_rs_validate_parameters+0x104/0x210 [ 353.347611][T11010] acpi_get_irq_routing_table+0xb8/0x140 [ 353.349353][T11010] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 353.351367][T11010] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 353.353184][T11010] ? preempt_schedule_thunk+0x16/0x40 [ 353.354860][T11010] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 353.356825][T11010] acpi_pci_irq_lookup+0x8e/0x6b0 [ 353.358546][T11010] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 353.360292][T11010] acpi_pci_irq_disable+0x1a8/0x360 [ 353.362111][T11010] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 353.364223][T11010] pcibios_disable_device+0x89/0xb0 [ 353.366190][T11010] do_pci_disable_device+0x9f/0x100 [ 353.367958][T11010] ? __pfx_do_pci_disable_device+0x10/0x10 [ 353.369761][T11010] pci_disable_device+0x130/0x270 [ 353.371380][T11010] pci_device_remove+0xb2/0x1d0 [ 353.372920][T11010] ? __pfx_pci_device_remove+0x10/0x10 [ 353.374613][T11010] device_remove+0xcb/0x180 [ 353.376042][T11010] device_release_driver_internal+0x441/0x610 [ 353.377954][T11010] pci_stop_bus_device+0x120/0x160 [ 353.379536][T11010] pci_stop_and_remove_bus_device+0x58/0xa0 [ 353.381371][T11010] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 353.383365][T11010] remove_store+0x123/0x140 [ 353.384820][T11010] ? __pfx_remove_store+0x10/0x10 [ 353.386385][T11010] ? find_held_lock+0x2b/0x80 [ 353.387872][T11010] ? sysfs_file_kobj+0xe4/0x290 [ 353.389386][T11010] ? sysfs_file_kobj+0xe4/0x290 [ 353.390900][T11010] ? __pfx_remove_store+0x10/0x10 [ 353.392462][T11010] dev_attr_store+0x58/0x80 [ 353.393873][T11010] ? __pfx_dev_attr_store+0x10/0x10 [ 353.395487][T11010] sysfs_kf_write+0xf2/0x150 [ 353.396902][T11010] kernfs_fop_write_iter+0x3e0/0x5f0 [ 353.398739][T11010] ? __pfx_sysfs_kf_write+0x10/0x10 [ 353.400358][T11010] vfs_write+0x6af/0x1050 [ 353.401674][T11010] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 353.403502][T11010] ? __pfx_vfs_write+0x10/0x10 [ 353.405003][T11010] ksys_write+0x12a/0x250 [ 353.406315][T11010] ? __pfx_ksys_write+0x10/0x10 [ 353.407808][T11010] __do_fast_syscall_32+0x14b/0x8c0 [ 353.409442][T11010] ? lockdep_hardirqs_on+0x7d/0x110 [ 353.411053][T11010] do_fast_syscall_32+0x32/0x70 [ 353.412577][T11010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 353.414529][T11010] RIP: 0023:0xf7f54fbc [ 353.415819][T11010] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 353.421713][T11010] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 353.424265][T11010] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000400 [ 353.426687][T11010] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 353.429125][T11010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 353.431548][T11010] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 353.433982][T11010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 353.436443][T11010] [ 353.437974][T11010] Kernel Offset: disabled [ 353.439318][T11010] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:51:44 Registers: info registers vcpu 0 CPU#0 RAX=000000d63fb494fd RBX=ffff88802ae24040 RCX=00000000000006e0 RDX=00000000000000d6 RSI=ffffffff81fd5085 RDI=0000000000000001 RBP=00000051e1f0a707 RSP=ffffc90000007d90 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=1ffff92000000fbc R13=0000000000000001 R14=0000000000000001 R15=ffff88802ae24080 RIP=ffffffff81fd5098 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095292000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008000b000 CR3=000000004fccf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801e35a580 RSI=ffffffff81b80e9e RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000003 R9 =0000000000000006 R10=ffff88802af243fb R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b80e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095392000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa7235efdb0 CR3=000000000fd96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85bf0935 RDI=ffffffff9cf27f60 RBP=ffffffff9cf27f20 RSP=ffffc900006bf9d8 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=3230383838666666 R12=0000000000000000 R13=0000000000000020 R14=000000000000000e R15=ffffc900006bfda8 RIP=ffffffff85bf095f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095492000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f53f6da4 CR3=000000006e2db000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=0000000000000001 RDX=ffff88801e3fa580 RSI=ffffffff81b80e9e RDI=0000000000000001 RBP=0000000000000003 RSP=ffffc9000048fdf8 R8 =0000000000000003 R9 =0000000000000006 R10=ffff88802b1243fb R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=0000000000000000 RIP=ffffffff81b80e9f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095592000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73d6288 CR3=000000000fd96000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001b400000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000