last executing test programs: 1m10.376622052s ago: executing program 2 (id=32): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x2, 0x1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ff0000000000000000000000000000000000000000ff00000042f51a0e00000000006051a693248b91b3250000bf00000000000000000000000000000000000000013b0d", 0x58) 1m10.254828685s ago: executing program 2 (id=34): r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/14, 0xe}, {&(0x7f0000000200)=""/4097, 0x1001}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x3) r1 = socket$pppoe(0x18, 0x1, 0x0) socket$inet(0x2, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002240)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000002280)='./trace\x00', &(0x7f00000022c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002300)='./trace/current_tracer\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000023c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r3, &(0x7f0000002440)='e:mygroup/myevent sched.sched_switch', 0x24) r4 = openat(0xffffffffffffff9c, &(0x7f0000002480)='./tracefs/events/mygroup/myevent/enable\x00', 0x2, 0x1) write(r4, &(0x7f00000024c0)='1', 0x1) write(r2, &(0x7f0000002500)='blk', 0x3) ioctl$PPPIOCGCHAN(r1, 0x80047437, 0x0) 1m10.202134476s ago: executing program 2 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000280)={0x0, 0x0, 0x0, r1}) openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4c8d0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140", @ANYBLOB='_'], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x4000050) 1m8.466472483s ago: executing program 2 (id=45): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x8000002, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x10, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0xc, 0x1000002, 0x110, r6, 0x20000000) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x4000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000540)='100', 0x3) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6004, 0x1) r8 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000700)={'\x00', 0x9, 0x10008, 0x5, 0x3, 0x80}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f00000007c0)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000a80)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r9, &(0x7f0000000ac0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000b80)="dc", 0x1}], 0x1}}], 0x1, 0x3004c8d1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000000bc0)={0x0, 0x5}, 0x8) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2001, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x5f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x4000, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 1m7.224487718s ago: executing program 2 (id=49): mlockall(0x4) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000100)="000000000000000000000000000000000000000001") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x181403, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x40000000, 0x0, 0x6}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/rfcomm0\x00', 0x802, 0x0) write(r4, &(0x7f0000000300)="c7401b1e0741d6201c31a1d182ded8d555d2", 0x12) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone3(&(0x7f0000000080)={0x4000011, 0x0, 0x0, 0x0, {0x8000011}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001) unlinkat(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 1m6.731106377s ago: executing program 2 (id=55): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x8, 0x100000, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000040)={0x8, 0x20000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) r1 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) write(r1, &(0x7f00000000c0)='1', 0x1) socket(0x2, 0x2, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', @broadcast}) 51.611131371s ago: executing program 32 (id=55): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x8, 0x100000, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000040)={0x8, 0x20000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) r1 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) write(r1, &(0x7f00000000c0)='1', 0x1) socket(0x2, 0x2, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', @broadcast}) 7.404663703s ago: executing program 3 (id=294): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x8) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000005c0), 0x2, 0x141102) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000640)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0x2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x3}}}]}, 0x3c}}, 0x4150) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x300000a, 0x5d032, 0xffffffffffffffff, 0x0) mlockall(0x7) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) 5.554321738s ago: executing program 3 (id=297): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r1, &(0x7f0000002d40)={0x9, {"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", 0x35e}}, 0x1006) r2 = dup(r0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000002400)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, 0x0, 0x0, 0x40001) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271b, 0x0, 0x0) read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0xfffffdfc) r6 = syz_open_dev$evdev(&(0x7f0000002200), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000002240)=""/95) add_key$user(&(0x7f0000000080), 0x0, &(0x7f00000022c0), 0x0, 0xfffffffffffffffe) pipe2$watch_queue(0x0, 0x80) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0) 5.389284874s ago: executing program 0 (id=300): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/kernel/pid_max\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/kernel/pid_max\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x40046607, &(0x7f0000000400)=@v2={0x2, @adiantum, 0x10, '\x00', @c}) fspick(r2, &(0x7f0000000180)='./proc/sys/kernel/pid_max\x00', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 5.212772359s ago: executing program 0 (id=301): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 5.069428028s ago: executing program 1 (id=302): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb\v1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2', &(0x7f0000000300)='\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xc9\xe1\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x17\x81>\t\xc30-\xe2\xb3\xb00x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x16f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x9, 0x20fe, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x200148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2b060a919de89952, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9b4, 0x2000, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 4.078838757s ago: executing program 0 (id=307): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x1ff) r1 = open(&(0x7f0000000300)='./tracing/events/enable\x00', 0x2c00, 0x0) preadv(r1, &(0x7f0000000340), 0x0, 0x83, 0x5) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) getsockopt$inet6_buf(r0, 0x29, 0xca, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) write$cgroup_devices(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='c '], 0xb) unshare(0x40000000) 3.341934981s ago: executing program 0 (id=308): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x6e, &(0x7f0000001540)=""/110}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x6}, 0x28) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/51, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000440)=0x8101) 3.31778359s ago: executing program 3 (id=309): syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4010805) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000400)={'veth1_vlan\x00', &(0x7f0000000200)=@ethtool_rxfh_indir={0x39}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000340)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_EXT_SCAN_ENABLE={{0xfc}, 0x3}}}, 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.925319999s ago: executing program 1 (id=311): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe3e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x80, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002340)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f00000023c0)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r1, &(0x7f0000002400)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000044c0)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.599662712s ago: executing program 0 (id=312): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, &(0x7f0000000b40)}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x10, 0x803, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x2, 0x3, 0x3, 0x0, 0x0, 0x3}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f00000001c0)={0x2}, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) sendto$l2tp6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000200)={0xa, 0x0, 0xfffffdbb, @remote, 0x1}, 0x20) 1.982896139s ago: executing program 1 (id=314): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041891}, 0x2c038235532fbca) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='nv', 0x2) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r2, &(0x7f0000000580)="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", 0xffffff5d, 0x12, 0x0, 0x1200) recvfrom$inet(r2, &(0x7f0000000740), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) syz_emit_ethernet(0x46, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xc) recvmsg(r0, 0x0, 0x160) 1.719324737s ago: executing program 0 (id=315): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000002b00)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000002b40)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000002b80)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000002c00)={0x2, 0x15, @loopback}, 0x10) write(r2, &(0x7f0000002c40)='PASV\r\n', 0x6) r3 = accept4(r0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000002dc0)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000002e00)={0x1, 'lo\x00'}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000002e40)={0x2, 0x1388, @loopback}, 0x10) 1.56500196s ago: executing program 3 (id=316): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="6c327d9f2ea7", 0x6}], 0x1, 0x0, 0xe0, 0x20000000}}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400, 0x4100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x3c}}, 0x4000000) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040), 0x44) socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000390400000000fbdbdf250000", @ANYRES32=0x0, @ANYBLOB="01990000419aedfff8ed17c9efe62df30800998f68d94ae9462500c2ff6f73"], 0x30}}, 0x0) 1.467869618s ago: executing program 4 (id=317): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000380)=0x16, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x59be386d9135c8f, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x7ff7}, {0xfff3, 0xd}, {0xa, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x40010) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f00000008c0), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000700)="0000e5fff0895bbd57fe8e53ff", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) socket$inet6_sctp(0xa, 0x1, 0x84) shmctl$IPC_RMID(0x0, 0x0) r2 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r2) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000780)={0x0, 0xff00, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="4800000010001fff00000568000800a8792d7200", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.350278252s ago: executing program 4 (id=318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40900, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x29, 0x7, 0x80000000, 0x10001}, 0x65}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000400), 0x56) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540)="27030200dc0f14000e0005000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) 1.187859246s ago: executing program 3 (id=319): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$can_raw(0x1d, 0x3, 0x1) sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.099906463s ago: executing program 4 (id=320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0xffffff81, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x3ffd, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0xa, 0x8, 0x2, 0x0, 0x1, 0x8, 0xc, 0x6, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x2, 0x5, 0xc, 0x40, 0xfffc, 0x4, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 467.67002ms ago: executing program 4 (id=321): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e22, 0xfffffffd, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_ttl={{0x14, 0x0, 0x34, 0x2}}], 0x18}}], 0x1, 0x44000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x601, 0x1d) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000600)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={0x0, 0x20, &(0x7f0000000740)={&(0x7f0000000780)={0x30, r3, 0x1, 0x70bd2c, 0x9000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 458.298341ms ago: executing program 1 (id=322): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r1, 0x0, 0x8048880) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x200008, 0x7, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000540)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12011001e3b58120422cf816fa1e010203010902120001f5001004"], 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f00000015c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000020000"], 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32], 0x4c}}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 290.327575ms ago: executing program 3 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) socket$inet(0x2, 0x2, 0x1) write(r4, &(0x7f0000000300)='1', 0x1) 188.022376ms ago: executing program 4 (id=324): socket$nl_route(0x10, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) 0s ago: executing program 4 (id=325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xbef3f4b213cd21b6}, @TCA_TBF_PARMS={0x28, 0x1, {{0xca, 0x2, 0x9, 0xe, 0x7}, {0x8, 0x1, 0x401, 0x6, 0x7, 0xc}, 0x80000000, 0x38000, 0x6e0}}, @TCA_TBF_BURST={0x8, 0x6, 0xc}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x2000c080) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x7, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2400c045}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:22057' (ED25519) to the list of known hosts. [ 42.485086][ T5777] cgroup: Unknown subsys name 'net' [ 42.631064][ T5777] cgroup: Unknown subsys name 'cpuset' [ 42.638357][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.604562][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.556018][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.559908][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.560583][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.562896][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.563647][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.586780][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.587774][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.589767][ T67] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.590418][ T67] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.590768][ T67] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.591604][ T67] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.592594][ T67] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.592885][ T67] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.594642][ T67] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.594923][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.601086][ T67] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.602798][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.603448][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.616028][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.618931][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.782420][ T5794] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.783195][ T5794] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.803546][ T5794] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.868262][ T5790] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.890831][ T5795] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.895237][ T5794] infiniband rxe0: set active [ 47.897054][ T5794] infiniband rxe0: added rxe_eth0 [ 47.912180][ T57] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.913615][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.914988][ T5794] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 47.915015][ T5794] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 47.915049][ T5794] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 47.934691][ T5794] RDS/IB: rxe0: added [ 47.934813][ T5794] smc: adding ib device rxe0 with port count 1 [ 47.934848][ T5794] smc: ib device rxe0 port 1 has no pnetid [ 47.937587][ T57] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.995020][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.078228][ T5794] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.270217][ T5794] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.270572][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.271093][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.271356][ T5790] bridge_slave_0: entered allmulticast mode [ 48.272150][ T5790] bridge_slave_0: entered promiscuous mode [ 48.288929][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.288971][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.289025][ T5790] bridge_slave_1: entered allmulticast mode [ 48.289801][ T5790] bridge_slave_1: entered promiscuous mode [ 48.320935][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.322596][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.391438][ T5790] team0: Port device team_slave_0 added [ 48.420291][ T5790] team0: Port device team_slave_1 added [ 48.466841][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.466958][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.467055][ T5795] bridge_slave_0: entered allmulticast mode [ 48.468319][ T5795] bridge_slave_0: entered promiscuous mode [ 48.471465][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.471541][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.471631][ T5795] bridge_slave_1: entered allmulticast mode [ 48.473430][ T5795] bridge_slave_1: entered promiscuous mode [ 48.519113][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.519129][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.519149][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.538086][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.538101][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.538121][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.559924][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.564572][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.614964][ T5790] hsr_slave_0: entered promiscuous mode [ 48.615831][ T5790] hsr_slave_1: entered promiscuous mode [ 48.617563][ T5795] team0: Port device team_slave_0 added [ 48.618983][ T5795] team0: Port device team_slave_1 added [ 48.631253][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.631263][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.631275][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.632128][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.632135][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.632147][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.749919][ T5795] hsr_slave_0: entered promiscuous mode [ 48.751657][ T5795] hsr_slave_1: entered promiscuous mode [ 48.752232][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 48.752293][ T5795] Cannot create hsr debugfs directory [ 48.913507][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.913585][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.913677][ T5798] bridge_slave_0: entered allmulticast mode [ 48.914874][ T5798] bridge_slave_0: entered promiscuous mode [ 48.944280][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.944371][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.944467][ T5798] bridge_slave_1: entered allmulticast mode [ 48.945833][ T5798] bridge_slave_1: entered promiscuous mode [ 48.994373][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.018244][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.070457][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.070528][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.070588][ T5794] bridge_slave_0: entered allmulticast mode [ 49.071768][ T5794] bridge_slave_0: entered promiscuous mode [ 49.092117][ T5798] team0: Port device team_slave_0 added [ 49.092339][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.092513][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.092614][ T5794] bridge_slave_1: entered allmulticast mode [ 49.093987][ T5794] bridge_slave_1: entered promiscuous mode [ 49.108746][ T5798] team0: Port device team_slave_1 added [ 49.128092][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.133897][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.134877][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.138954][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.160536][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.160639][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.162899][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.163592][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.163603][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.163621][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.171010][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.171558][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.174380][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.175077][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.175087][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.175106][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.206662][ T5794] team0: Port device team_slave_0 added [ 49.208967][ T5794] team0: Port device team_slave_1 added [ 49.263156][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.263167][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.263179][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.264087][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.264095][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.264107][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.272909][ T5798] hsr_slave_0: entered promiscuous mode [ 49.273746][ T5798] hsr_slave_1: entered promiscuous mode [ 49.274316][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 49.274330][ T5798] Cannot create hsr debugfs directory [ 49.276365][ T5795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.281628][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.282049][ T5795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.286484][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.300892][ T5795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.304736][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.308434][ T5794] hsr_slave_0: entered promiscuous mode [ 49.308895][ T5794] hsr_slave_1: entered promiscuous mode [ 49.309211][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 49.309223][ T5794] Cannot create hsr debugfs directory [ 49.318205][ T5795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.322768][ T5795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.537607][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.543625][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.544423][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.549893][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.556026][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.563799][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.568519][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.571740][ T5798] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.594598][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.626980][ T5148] Bluetooth: hci2: command tx timeout [ 49.637067][ T5148] Bluetooth: hci1: command tx timeout [ 49.637234][ T5799] Bluetooth: hci0: command tx timeout [ 49.648083][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.660611][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.665363][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.675923][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.681319][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.683983][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.684105][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.690185][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.695079][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.698552][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.700505][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.700589][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.705151][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.708179][ T5799] Bluetooth: hci3: command tx timeout [ 49.710911][ T5794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.739309][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.757537][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.757582][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.759473][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.759516][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.844930][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.869803][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.883572][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.883617][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.895175][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.913452][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.913540][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.939418][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.950941][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.950986][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.968866][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.968952][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.332507][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.351586][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.397421][ T5795] veth0_vlan: entered promiscuous mode [ 50.411418][ T5795] veth1_vlan: entered promiscuous mode [ 50.430380][ T5790] veth0_vlan: entered promiscuous mode [ 50.434762][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.446000][ T5790] veth1_vlan: entered promiscuous mode [ 50.480414][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.481408][ T5795] veth0_macvtap: entered promiscuous mode [ 50.497389][ T5790] veth0_macvtap: entered promiscuous mode [ 50.500824][ T5795] veth1_macvtap: entered promiscuous mode [ 50.511207][ T5798] veth0_vlan: entered promiscuous mode [ 50.515840][ T5790] veth1_macvtap: entered promiscuous mode [ 50.532505][ T5798] veth1_vlan: entered promiscuous mode [ 50.539219][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.543361][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.554630][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.554710][ T5794] veth0_vlan: entered promiscuous mode [ 50.562974][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.582271][ T5794] veth1_vlan: entered promiscuous mode [ 50.612335][ T5798] veth0_macvtap: entered promiscuous mode [ 50.624234][ T5798] veth1_macvtap: entered promiscuous mode [ 50.668639][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.668651][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.672097][ T5794] veth0_macvtap: entered promiscuous mode [ 50.690852][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.694649][ T5794] veth1_macvtap: entered promiscuous mode [ 50.705843][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.705857][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.717062][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.729678][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.729695][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.755125][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.755143][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.759773][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.775423][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.849199][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.849214][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.877270][ T5869] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.877436][ T5869] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.877447][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.877463][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.877465][ T5869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.877492][ T5869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.877518][ T5869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.877545][ T5869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.881380][ T5795] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.895179][ T5795] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.901197][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.901219][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.907608][ T5790] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.908604][ T5790] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.915925][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.915941][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.918284][ T5604] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.918316][ T5604] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.918344][ T5604] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.944822][ T5790] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.946636][ T5604] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.966508][ T5604] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.966551][ T5604] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.966592][ T5604] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.966616][ T5604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.966641][ T5604] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.966664][ T5604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.138549][ T5799] Bluetooth: hci3: unexpected cc 0x204b length: 34 > 3 [ 51.156913][ T5954] Zero length message leads to an empty skb [ 51.162602][ T5957] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 25 (only 8 groups) [ 51.180664][ T5954] FAULT_INJECTION: forcing a failure. [ 51.180664][ T5954] name failslab, interval 1, probability 0, space 0, times 1 [ 51.180707][ T5954] CPU: 2 UID: 0 PID: 5954 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 51.180730][ T5954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.180751][ T5954] Call Trace: [ 51.180768][ T5954] [ 51.180775][ T5954] dump_stack_lvl+0x100/0x190 [ 51.180810][ T5954] should_fail_ex.cold+0x5/0xa [ 51.180839][ T5954] should_failslab+0xc2/0x120 [ 51.180863][ T5954] kmem_cache_alloc_noprof+0x92/0x6a0 [ 51.180893][ T5954] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 51.180918][ T5954] ? acpi_ut_create_update_state+0x72/0x130 [ 51.180946][ T5954] acpi_ut_create_update_state+0x72/0x130 [ 51.180970][ T5954] acpi_ut_create_update_state_and_push+0x2f/0x70 [ 51.180993][ T5954] acpi_ut_update_object_reference+0x32f/0x800 [ 51.181027][ T5954] ? __pfx_acpi_ut_update_object_reference+0x10/0x10 [ 51.181056][ T5954] ? __pfx_acpi_ut_trace+0x10/0x10 [ 51.181074][ T5954] ? __pfx_acpi_ut_trace+0x10/0x10 [ 51.181092][ T5954] ? acpi_ut_status_exit+0x111/0x1c0 [ 51.181115][ T5954] acpi_ut_add_reference+0x80/0x170 [ 51.181170][ T5954] acpi_ex_resolve_node_to_value+0x7e1/0x9a0 [ 51.181188][ T5954] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 51.181217][ T5954] ? acpi_ds_create_operand+0x267/0xc20 [ 51.181245][ T5954] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 51.181264][ T5954] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 51.181280][ T5954] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 51.181305][ T5954] ? __asan_memset+0x23/0x50 [ 51.181331][ T5954] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 51.181362][ T5954] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 51.181380][ T5954] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 51.181398][ T5954] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 51.181422][ T5954] ? acpi_ut_trace_ptr+0x181/0x2a0 [ 51.181452][ T5954] acpi_ds_exec_end_op+0xb78/0x1e60 [ 51.181478][ T5954] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 51.181495][ T5954] acpi_ps_parse_loop+0x5e1/0x26e0 [ 51.181522][ T5954] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 51.181545][ T5954] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 51.181573][ T5954] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 51.181600][ T5954] ? acpi_ut_create_thread_state+0x6d/0x170 [ 51.181633][ T5954] acpi_ps_parse_aml+0x81e/0x1120 [ 51.181663][ T5954] acpi_ps_execute_method+0x5c4/0xe90 [ 51.181697][ T5954] acpi_ns_evaluate+0x640/0x1670 [ 51.181729][ T5954] acpi_ut_evaluate_object+0xf7/0x610 [ 51.181762][ T5954] acpi_rs_get_prt_method_data+0xa0/0x150 [ 51.181778][ T5954] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 51.181796][ T5954] ? acpi_ut_status_exit+0x111/0x1c0 [ 51.181824][ T5954] ? acpi_rs_validate_parameters+0x104/0x210 [ 51.181845][ T5954] acpi_get_irq_routing_table+0xb8/0x140 [ 51.181865][ T5954] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 51.181884][ T5954] ? mark_held_locks+0x40/0x70 [ 51.181910][ T5954] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 51.181934][ T5954] ? preempt_schedule_thunk+0x16/0x40 [ 51.181959][ T5954] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 51.181987][ T5954] acpi_pci_irq_lookup+0x8e/0x6b0 [ 51.182007][ T5954] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 51.182034][ T5954] acpi_pci_irq_disable+0x1a8/0x360 [ 51.182053][ T5954] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 51.182071][ T5954] pcibios_disable_device+0x89/0xb0 [ 51.182090][ T5954] do_pci_disable_device+0x9f/0x100 [ 51.182121][ T5954] ? __pfx_do_pci_disable_device+0x10/0x10 [ 51.182153][ T5954] ? pci_release_region.part.0+0x15b/0x2e0 [ 51.182178][ T5954] pci_disable_device+0x130/0x270 [ 51.182213][ T5954] virtio_pci_remove+0xcf/0x110 [ 51.182238][ T5954] pci_device_remove+0xb2/0x1d0 [ 51.182260][ T5954] ? __pfx_pci_device_remove+0x10/0x10 [ 51.182286][ T5954] device_remove+0xcb/0x180 [ 51.182311][ T5954] device_release_driver_internal+0x441/0x610 [ 51.182344][ T5954] pci_stop_bus_device+0x120/0x160 [ 51.182374][ T5954] pci_stop_and_remove_bus_device+0x58/0xa0 [ 51.182403][ T5954] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 51.182433][ T5954] remove_store+0x123/0x140 [ 51.182451][ T5954] ? __pfx_remove_store+0x10/0x10 [ 51.182467][ T5954] ? find_held_lock+0x2b/0x80 [ 51.182491][ T5954] ? sysfs_file_kobj+0xe4/0x290 [ 51.182513][ T5954] ? sysfs_file_kobj+0xe4/0x290 [ 51.182537][ T5954] ? __pfx_remove_store+0x10/0x10 [ 51.182553][ T5954] dev_attr_store+0x58/0x80 [ 51.182578][ T5954] ? __pfx_dev_attr_store+0x10/0x10 [ 51.182603][ T5954] sysfs_kf_write+0xf2/0x150 [ 51.182626][ T5954] kernfs_fop_write_iter+0x3e0/0x5f0 [ 51.182643][ T5954] ? __pfx_sysfs_kf_write+0x10/0x10 [ 51.182666][ T5954] vfs_write+0x6af/0x1050 [ 51.182684][ T5954] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 51.182705][ T5954] ? __pfx_vfs_write+0x10/0x10 [ 51.182721][ T5954] ? find_held_lock+0x2b/0x80 [ 51.182766][ T5954] ksys_write+0x12a/0x250 [ 51.182784][ T5954] ? __pfx_ksys_write+0x10/0x10 [ 51.182811][ T5954] __do_fast_syscall_32+0x14b/0x8c0 [ 51.182833][ T5954] ? lockdep_hardirqs_on+0x7d/0x110 [ 51.182856][ T5954] do_fast_syscall_32+0x32/0x70 [ 51.182878][ T5954] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.182901][ T5954] RIP: 0023:0xf743efbc [ 51.182916][ T5954] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 51.182932][ T5954] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 51.182965][ T5954] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000ac0 [ 51.182977][ T5954] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.182988][ T5954] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.182998][ T5954] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 51.183009][ T5954] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.183032][ T5954] [ 51.183042][ T5954] ACPI Error: AE_NO_MEMORY, Could not update object reference count (20260408/utdelete-651) [ 51.706556][ T5799] Bluetooth: hci1: command tx timeout [ 51.706588][ T5799] Bluetooth: hci2: command tx timeout [ 51.717264][ T5148] Bluetooth: hci0: command tx timeout [ 51.896647][ T41] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.057080][ T41] usb 7-1: Using ep0 maxpacket: 32 [ 52.059328][ T41] usb 7-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 52.064400][ T41] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 52.077635][ T41] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 52.077897][ T41] usb 7-1: Product: syz [ 52.077951][ T41] usb 7-1: Manufacturer: syz [ 52.078005][ T41] usb 7-1: SerialNumber: syz [ 52.093891][ T41] usb 7-1: config 0 descriptor?? [ 52.097640][ T5967] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 52.104555][ T41] hub 7-1:0.0: bad descriptor, ignoring hub [ 52.104598][ T41] hub 7-1:0.0: probe with driver hub failed with error -5 [ 52.912098][ T42] audit: type=1800 audit(1793365295.408:2): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.15" name="file1" dev="sda1" ino=2038 res=0 errno=-22 [ 53.063899][ T5994] input: syz0 as /devices/virtual/input/input5 [ 53.102933][ T5993] netlink: 'syz.3.16': attribute type 1 has an invalid length. [ 53.229056][ T1350] usb 7-1: USB disconnect, device number 2 [ 53.376838][ T1350] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 53.556828][ T1350] usb 7-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 53.559393][ T1350] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 53.561577][ T1350] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 53.561589][ T1350] usb 7-1: Product: syz [ 53.561595][ T1350] usb 7-1: Manufacturer: syz [ 53.561602][ T1350] usb 7-1: SerialNumber: syz [ 53.564336][ T1350] usb 7-1: config 0 descriptor?? [ 53.564829][ T5980] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 53.565413][ T1350] hub 7-1:0.0: bad descriptor, ignoring hub [ 53.565424][ T1350] hub 7-1:0.0: probe with driver hub failed with error -5 [ 53.787164][ T5148] Bluetooth: hci2: command tx timeout [ 53.787186][ T5148] Bluetooth: hci0: command tx timeout [ 53.787197][ T5148] Bluetooth: hci1: command tx timeout [ 53.897240][ T34] usb 7-1: USB disconnect, device number 3 [ 54.027219][ T6021] ======================================================= [ 54.027219][ T6021] WARNING: The mand mount option has been deprecated and [ 54.027219][ T6021] and is ignored by this kernel. Remove the mand [ 54.027219][ T6021] option from the mount to silence this warning. [ 54.027219][ T6021] ======================================================= [ 54.092638][ T6023] gadgetfs: bound to dummy_udc driver [ 54.111842][ T6023] FAULT_INJECTION: forcing a failure. [ 54.111842][ T6023] name failslab, interval 1, probability 0, space 0, times 0 [ 54.111860][ T6023] CPU: 2 UID: 0 PID: 6023 Comm: syz.1.23 Not tainted syzkaller #0 PREEMPT(full) [ 54.111872][ T6023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.111878][ T6023] Call Trace: [ 54.111882][ T6023] [ 54.111887][ T6023] dump_stack_lvl+0x100/0x190 [ 54.111907][ T6023] should_fail_ex.cold+0x5/0xa [ 54.111922][ T6023] should_failslab+0xc2/0x120 [ 54.111935][ T6023] __kmalloc_noprof+0xfc/0x840 [ 54.111950][ T6023] ? ima_alloc_init_template+0x19d/0x6d0 [ 54.111967][ T6023] ima_alloc_init_template+0x19d/0x6d0 [ 54.111979][ T6023] ? d_absolute_path+0x136/0x1b0 [ 54.111995][ T6023] ? __pfx_d_absolute_path+0x10/0x10 [ 54.112012][ T6023] ima_store_measurement+0x1e3/0x5b0 [ 54.112027][ T6023] ? __pfx_ima_store_measurement+0x10/0x10 [ 54.112041][ T6023] ? ima_d_path+0x137/0x260 [ 54.112058][ T6023] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 54.112072][ T6023] process_measurement+0x19cc/0x2350 [ 54.112089][ T6023] ? __pfx_process_measurement+0x10/0x10 [ 54.112103][ T6023] ? add_lock_to_list+0x9d/0x1d0 [ 54.112121][ T6023] ? check_prev_add+0x354/0xe60 [ 54.112143][ T6023] ? mark_held_locks+0x40/0x70 [ 54.112157][ T6023] ima_file_check+0xc8/0x120 [ 54.112170][ T6023] ? __pfx_ima_file_check+0x10/0x10 [ 54.112186][ T6023] security_file_post_open+0xc4/0x210 [ 54.112200][ T6023] path_openat+0x5d0/0x23f0 [ 54.112215][ T6023] ? __pfx_path_openat+0x10/0x10 [ 54.112230][ T6023] do_file_open+0x20e/0x430 [ 54.112243][ T6023] ? __pfx_do_file_open+0x10/0x10 [ 54.112264][ T6023] ? _raw_spin_unlock+0x28/0x50 [ 54.112279][ T6023] ? alloc_fd+0x471/0x7a0 [ 54.112299][ T6023] do_sys_openat2+0x163/0x1d0 [ 54.112314][ T6023] ? __pfx_do_sys_openat2+0x10/0x10 [ 54.112334][ T6023] __ia32_compat_sys_openat+0x12d/0x210 [ 54.112350][ T6023] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 54.112372][ T6023] __do_fast_syscall_32+0x14b/0x8c0 [ 54.112388][ T6023] do_fast_syscall_32+0x32/0x70 [ 54.112401][ T6023] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.112415][ T6023] RIP: 0023:0xf7f97fbc [ 54.112424][ T6023] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 54.112433][ T6023] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 54.112443][ T6023] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240 [ 54.112450][ T6023] RDX: 0000000000000002 RSI: 0000000000000024 RDI: 0000000000000000 [ 54.112455][ T6023] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.112461][ T6023] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 54.112467][ T6023] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.112480][ T6023] [ 54.112996][ T42] audit: type=1804 audit(1793365296.608:3): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.23" name="/newroot/8/gadget/ep1in-bulk" dev="gadgetfs" ino=10648 res=0 errno=-12 [ 54.263651][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 54.263697][ T6030] bridge_slave_1: left allmulticast mode [ 54.263709][ T6030] bridge_slave_1: left promiscuous mode [ 54.264485][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.269932][ T6030] bridge_slave_0: left allmulticast mode [ 54.269947][ T6030] bridge_slave_0: left promiscuous mode [ 54.270051][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.458887][ T6041] Bluetooth: MGMT ver 1.23 [ 54.471256][ T6039] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.840307][ T6057] dummy0: entered allmulticast mode [ 54.845939][ T6057] pimreg: entered allmulticast mode [ 54.854211][ T6056] dummy0: left allmulticast mode [ 54.867442][ T42] audit: type=1800 audit(1793365297.368:4): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.33" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=-107 [ 54.984217][ T6064] loop9: detected capacity change from 0 to 7 [ 54.987344][ T6064] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.987369][ T6064] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.987386][ T6064] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.987400][ T6064] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.987422][ T6064] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.987443][ T6064] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.987456][ T6064] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.987464][ T6064] ldm_validate_partition_table(): Disk read failed. [ 54.987477][ T6064] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.987491][ T6064] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.987504][ T6064] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.987519][ T6064] Dev loop9: unable to read RDB block 0 [ 54.987549][ T6064] loop9: unable to read partition table [ 54.987640][ T6064] loop9: partition table beyond EOD, truncated [ 54.987650][ T6064] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 54.987650][ T6064] ) failed (rc=-5) [ 55.157529][ T5148] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 55.157566][ T5148] Bluetooth: hci3: Injecting HCI hardware error event [ 55.158675][ T5802] Bluetooth: hci3: hardware error 0x00 [ 55.326671][ T57] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 55.476870][ T57] usb 5-1: Using ep0 maxpacket: 16 [ 55.479027][ T57] usb 5-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 55.481473][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 55.483850][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.483869][ T57] usb 5-1: Product: syz [ 55.483881][ T57] usb 5-1: Manufacturer: syz [ 55.483892][ T57] usb 5-1: SerialNumber: syz [ 55.489159][ T57] usb 5-1: config 0 descriptor?? [ 55.492285][ T57] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 55.492310][ T57] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 55.867205][ T5799] Bluetooth: hci2: command tx timeout [ 55.867236][ T5799] Bluetooth: hci0: command tx timeout [ 55.867266][ T5148] Bluetooth: hci1: command tx timeout [ 56.107263][ T57] em28xx 5-1:0.0: chip ID is em2765 [ 56.133149][ T6035] Set syz1 is full, maxelem 65536 reached [ 56.454974][ T6058] Set syz1 is full, maxelem 6117 reached [ 56.628985][ T6090] FAULT_INJECTION: forcing a failure. [ 56.628985][ T6090] name failslab, interval 1, probability 0, space 0, times 0 [ 56.629005][ T6090] CPU: 0 UID: 0 PID: 6090 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT(full) [ 56.629018][ T6090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.629024][ T6090] Call Trace: [ 56.629028][ T6090] [ 56.629033][ T6090] dump_stack_lvl+0x100/0x190 [ 56.629054][ T6090] should_fail_ex.cold+0x5/0xa [ 56.629070][ T6090] should_failslab+0xc2/0x120 [ 56.629084][ T6090] kmem_cache_alloc_noprof+0x92/0x6a0 [ 56.629137][ T6090] ? __alloc_skb+0x4e9/0x710 [ 56.629150][ T6090] ? __alloc_skb+0x5b7/0x710 [ 56.629167][ T6090] ? sctp_chunkify+0x51/0x2f0 [ 56.629186][ T6090] sctp_chunkify+0x51/0x2f0 [ 56.629201][ T6090] _sctp_make_chunk+0x148/0x270 [ 56.629218][ T6090] sctp_make_cookie_ack+0x2e/0xe0 [ 56.629234][ T6090] sctp_sf_do_5_2_4_dupcook+0x23a2/0x3030 [ 56.629252][ T6090] ? __pfx_sctp_sf_do_5_2_4_dupcook+0x10/0x10 [ 56.629265][ T6090] ? sctp_sm_lookup_event+0x10e/0x520 [ 56.629281][ T6090] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 56.629297][ T6090] ? kmem_cache_free+0x127/0x6c0 [ 56.629311][ T6090] ? sctp_chunk_put+0x20a/0x2d0 [ 56.629326][ T6090] ? sctp_inq_pop+0x69a/0x1140 [ 56.629337][ T6090] ? sctp_assoc_bh_rcv+0x117/0x740 [ 56.629348][ T6090] ? sctp_inq_push+0x25c/0x320 [ 56.629359][ T6090] ? __pfx_sctp_cname+0x10/0x10 [ 56.629374][ T6090] sctp_do_sm+0x17a/0x5c30 [ 56.629387][ T6090] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 56.629404][ T6090] ? __pfx_sctp_do_sm+0x10/0x10 [ 56.629434][ T6090] ? ktime_get+0x22c/0x320 [ 56.629446][ T6090] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.629459][ T6090] sctp_assoc_bh_rcv+0x392/0x740 [ 56.629474][ T6090] sctp_inq_push+0x25c/0x320 [ 56.629486][ T6090] sctp_backlog_rcv+0x169/0x590 [ 56.629501][ T6090] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 56.629514][ T6090] __release_sock+0x39d/0x440 [ 56.629532][ T6090] release_sock+0x1e5/0x280 [ 56.629545][ T6090] sctp_sendmsg+0x1166/0x22e0 [ 56.629560][ T6090] ? __pfx_sctp_sendmsg+0x10/0x10 [ 56.629573][ T6090] ? __lock_acquire+0x5c0/0x1f40 [ 56.629586][ T6090] ? tomoyo_socket_sendmsg_permission+0x14e/0x3c0 [ 56.629606][ T6090] ? aa_sock_msg_perm+0x11e/0x200 [ 56.629618][ T6090] ? __pfx_sctp_sendmsg+0x10/0x10 [ 56.629631][ T6090] inet_sendmsg+0x11c/0x140 [ 56.629646][ T6090] ____sys_sendmsg+0xa23/0xc30 [ 56.629661][ T6090] ? __pfx_inet_sendmsg+0x10/0x10 [ 56.629677][ T6090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 56.629695][ T6090] ? futex_unqueue+0x133/0x2c0 [ 56.629712][ T6090] ___sys_sendmsg+0x190/0x1e0 [ 56.629729][ T6090] ? __pfx____sys_sendmsg+0x10/0x10 [ 56.629745][ T6090] ? __pfx___futex_wait+0x10/0x10 [ 56.629754][ T6090] ? __pfx_try_to_wake_up+0x10/0x10 [ 56.629765][ T6090] ? futex_hash+0x311/0x400 [ 56.629782][ T6090] ? __fget_files+0x34/0x3d0 [ 56.629804][ T6090] __sys_sendmmsg+0x304/0x440 [ 56.629820][ T6090] ? __pfx___sys_sendmmsg+0x10/0x10 [ 56.629845][ T6090] ? __might_fault+0xc5/0x140 [ 56.629857][ T6090] ? find_held_lock+0x2b/0x80 [ 56.629870][ T6090] ? __might_fault+0xc5/0x140 [ 56.629881][ T6090] ? __might_fault+0xc5/0x140 [ 56.629895][ T6090] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 56.629908][ T6090] __do_fast_syscall_32+0x14b/0x8c0 [ 56.629922][ T6090] do_fast_syscall_32+0x32/0x70 [ 56.629934][ T6090] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 56.629946][ T6090] RIP: 0023:0xf743efbc [ 56.629955][ T6090] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 56.629965][ T6090] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 56.629976][ T6090] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000ac0 [ 56.629982][ T6090] RDX: 0000000000000001 RSI: 000000003004c8d1 RDI: 0000000000000000 [ 56.629988][ T6090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 56.629993][ T6090] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 56.629999][ T6090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.630030][ T6090] [ 56.731999][ T57] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 56.732026][ T57] em28xx 5-1:0.0: board has no eeprom [ 57.067515][ T57] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 57.068084][ T57] em28xx 5-1:0.0: dvb set to bulk mode. [ 57.068911][ T34] em28xx 5-1:0.0: Binding DVB extension [ 57.236929][ T5802] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 57.495889][ T1822] rxe_eth0 speed is unknown, defaulting to 1000 [ 57.781027][ T6110] syzkaller0: entered promiscuous mode [ 57.781049][ T6110] syzkaller0: entered allmulticast mode [ 57.785996][ T6110] tipc: Started in network mode [ 57.786012][ T6110] tipc: Node identity 8227b1bd0ab4, cluster identity 4711 [ 57.786631][ T6110] tipc: Enabled bearer , priority 0 [ 57.806415][ T6110] tipc: Resetting bearer [ 57.813287][ T6108] tipc: Resetting bearer [ 57.821567][ T6108] tipc: Disabling bearer [ 57.982210][ T6115] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 58.511029][ T57] usb 5-1: USB disconnect, device number 2 [ 58.511670][ T57] em28xx 5-1:0.0: Disconnecting em28xx [ 58.540424][ T34] em28xx 5-1:0.0: Registering input extension [ 58.542166][ T57] em28xx 5-1:0.0: Closing input extension [ 58.559637][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'. [ 58.568764][ T57] em28xx: Freeing device [ 60.045177][ T6148] null_blk: disk nullb1 created [ 60.055614][ T6148] nvmet: adding nsid 1 to subsystem testsubsys [ 61.159720][ T6162] netlink: 48 bytes leftover after parsing attributes in process `syz.0.64'. [ 61.159763][ T6162] netlink: 48 bytes leftover after parsing attributes in process `syz.0.64'. [ 61.499646][ T6162] FAULT_INJECTION: forcing a failure. [ 61.499646][ T6162] name failslab, interval 1, probability 0, space 0, times 0 [ 61.499666][ T6162] CPU: 3 UID: 0 PID: 6162 Comm: syz.0.64 Not tainted syzkaller #0 PREEMPT(full) [ 61.499678][ T6162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.499684][ T6162] Call Trace: [ 61.499687][ T6162] [ 61.499691][ T6162] dump_stack_lvl+0x100/0x190 [ 61.499713][ T6162] should_fail_ex.cold+0x5/0xa [ 61.499729][ T6162] should_failslab+0xc2/0x120 [ 61.499742][ T6162] __kmalloc_cache_noprof+0x91/0x6d0 [ 61.499756][ T6162] ? assoc_array_insert+0x10b/0x32c0 [ 61.499775][ T6162] assoc_array_insert+0x10b/0x32c0 [ 61.499790][ T6162] ? __mutex_lock+0x267/0x1c10 [ 61.499802][ T6162] ? __key_link_lock+0x92/0xb0 [ 61.499820][ T6162] ? __pfx___mutex_lock+0x10/0x10 [ 61.499851][ T6162] ? __pfx_assoc_array_insert+0x10/0x10 [ 61.499872][ T6162] ? down_write+0x141/0x1f0 [ 61.499885][ T6162] ? __pfx_down_write+0x10/0x10 [ 61.499900][ T6162] __key_link_begin+0xf5/0x260 [ 61.499917][ T6162] key_instantiate_and_link+0x201/0x4b0 [ 61.499933][ T6162] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 61.499949][ T6162] ? keyctl_get_persistent+0x4b4/0x860 [ 61.499972][ T6162] keyring_alloc+0x7a/0xc0 [ 61.499988][ T6162] keyctl_get_persistent+0x694/0x860 [ 61.500005][ T6162] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 61.500019][ T6162] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 61.500036][ T6162] ? find_held_lock+0x2b/0x80 [ 61.500050][ T6162] ? __might_fault+0xc5/0x140 [ 61.500062][ T6162] ? __might_fault+0xc5/0x140 [ 61.500075][ T6162] __ia32_compat_sys_keyctl+0x38f/0x550 [ 61.500091][ T6162] __do_fast_syscall_32+0x14b/0x8c0 [ 61.500106][ T6162] do_fast_syscall_32+0x32/0x70 [ 61.500118][ T6162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.500131][ T6162] RIP: 0023:0xf73cefbc [ 61.500140][ T6162] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 61.500150][ T6162] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 61.500160][ T6162] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000000000 [ 61.500167][ T6162] RDX: 000000000994e36b RSI: 0000000000000000 RDI: 0000000000000000 [ 61.500172][ T6162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.500178][ T6162] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 61.500183][ T6162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.500197][ T6162] [ 61.733466][ T6168] syz.1.65: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 61.735817][ T6168] CPU: 0 UID: 0 PID: 6168 Comm: syz.1.65 Not tainted syzkaller #0 PREEMPT(full) [ 61.735854][ T6168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.735865][ T6168] Call Trace: [ 61.735871][ T6168] [ 61.735878][ T6168] dump_stack_lvl+0x100/0x190 [ 61.735912][ T6168] warn_alloc.cold+0x9e/0xb2 [ 61.735933][ T6168] ? __pfx_warn_alloc+0x10/0x10 [ 61.735964][ T6168] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 61.735988][ T6168] ? __pfx_get_page_from_freelist+0x10/0x10 [ 61.736023][ T6168] __alloc_frozen_pages_noprof+0xaf3/0x3280 [ 61.736079][ T6168] ? do_raw_spin_lock+0x128/0x260 [ 61.736104][ T6168] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 61.736136][ T6168] ? mark_held_locks+0x40/0x70 [ 61.736155][ T6168] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 61.736184][ T6168] ? lockdep_hardirqs_on+0x7d/0x110 [ 61.736203][ T6168] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 61.736242][ T6168] ? __kasan_kmalloc+0xaa/0xb0 [ 61.736259][ T6168] ? __kmalloc_noprof+0x32f/0x840 [ 61.736286][ T6168] ? comedi_isadma_alloc+0xc6/0x620 [ 61.736304][ T6168] ? pcl816_attach+0x909/0xb30 [ 61.736344][ T6168] alloc_pages_node_noprof+0x93/0x200 [ 61.736371][ T6168] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 61.736404][ T6168] alloc_pages_exact_nid_noprof+0x32/0xe0 [ 61.736432][ T6168] __dma_direct_alloc_pages.isra.0+0x34e/0x510 [ 61.736461][ T6168] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 61.736485][ T6168] dma_direct_alloc+0x3d1/0x8a0 [ 61.736515][ T6168] dma_alloc_attrs+0x1b9/0x3e0 [ 61.736543][ T6168] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 61.736568][ T6168] ? __kmalloc_noprof+0x350/0x840 [ 61.736596][ T6168] ? dma_direct_supported+0xca/0x220 [ 61.736629][ T6168] comedi_isadma_alloc+0x331/0x620 [ 61.736653][ T6168] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 61.736675][ T6168] ? request_threaded_irq+0x27b/0x3e0 [ 61.736702][ T6168] pcl816_attach+0x909/0xb30 [ 61.736730][ T6168] comedi_device_attach+0x40e/0x6b0 [ 61.736764][ T6168] do_devconfig_ioctl+0x1b3/0x6d0 [ 61.736782][ T6168] ? comedi_unlocked_ioctl+0x180/0x3310 [ 61.736804][ T6168] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 61.736837][ T6168] ? tomoyo_path_number_perm+0x46d/0x580 [ 61.736860][ T6168] ? kasan_save_stack+0x3f/0x50 [ 61.736876][ T6168] ? kasan_save_stack+0x30/0x50 [ 61.736891][ T6168] ? kasan_save_track+0x14/0x30 [ 61.736907][ T6168] ? kasan_save_free_info+0x3b/0x70 [ 61.736936][ T6168] comedi_unlocked_ioctl+0x860/0x3310 [ 61.736966][ T6168] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 61.737010][ T6168] ? kasan_quarantine_put+0x104/0x240 [ 61.737038][ T6168] ? lockdep_hardirqs_on+0x7d/0x110 [ 61.737059][ T6168] ? find_held_lock+0x2b/0x80 [ 61.737109][ T6168] ? tomoyo_path_number_perm+0x28f/0x580 [ 61.737130][ T6168] ? tomoyo_path_number_perm+0x28f/0x580 [ 61.737159][ T6168] ? tomoyo_path_number_perm+0x188/0x580 [ 61.737188][ T6168] comedi_compat_ioctl+0x438/0xe20 [ 61.737212][ T6168] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 61.737236][ T6168] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.737260][ T6168] ? do_vfs_ioctl+0x226/0x13e0 [ 61.737290][ T6168] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 61.737323][ T6168] ? __fget_files+0x34/0x3d0 [ 61.737343][ T6168] ? find_held_lock+0x2b/0x80 [ 61.737368][ T6168] ? __fget_files+0x215/0x3d0 [ 61.737386][ T6168] ? hook_file_ioctl_common+0x140/0x440 [ 61.737418][ T6168] ? __fget_files+0x21f/0x3d0 [ 61.737443][ T6168] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 61.737466][ T6168] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 61.737498][ T6168] __do_fast_syscall_32+0x14b/0x8c0 [ 61.737520][ T6168] ? lockdep_hardirqs_on+0x7d/0x110 [ 61.737541][ T6168] do_fast_syscall_32+0x32/0x70 [ 61.737563][ T6168] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.737586][ T6168] RIP: 0023:0xf7f97fbc [ 61.737601][ T6168] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 61.737618][ T6168] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 61.737636][ T6168] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400 [ 61.737648][ T6168] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.737659][ T6168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.737670][ T6168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.737681][ T6168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.737712][ T6168] [ 61.739448][ T6168] Mem-Info: [ 61.739544][ T6168] active_anon:6009 inactive_anon:121 isolated_anon:0 [ 61.739544][ T6168] active_file:8466 inactive_file:56270 isolated_file:0 [ 61.739544][ T6168] unevictable:1000 dirty:425 writeback:0 [ 61.739544][ T6168] slab_reclaimable:9932 slab_unreclaimable:55282 [ 61.739544][ T6168] mapped:23641 shmem:1517 pagetables:1047 [ 61.739544][ T6168] sec_pagetables:298 bounce:0 [ 61.739544][ T6168] kernel_misc_reclaimable:0 [ 61.739544][ T6168] free:29479 free_pcp:0 free_cma:0 [ 61.739624][ T6168] Node 0 active_anon:0kB inactive_anon:48kB active_file:468kB inactive_file:2988kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:128kB dirty:12kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8608kB pagetables:1076kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 61.739787][ T6168] Node 0 DMA free:2524kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 61.739893][ T6168] lowmem_reserve[]: 0 256 256 256 256 [ 61.740032][ T6168] Node 0 DMA: 81*4kB (U) 7*8kB (U) 1*16kB (U) 23*32kB (U) 10*64kB (U) 2*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2540kB [ 61.743305][ T6168] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 61.787348][ T6168] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 61.787515][ T6168] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 61.787803][ T6168] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 61.787851][ T6168] 67795 total pagecache pages [ 61.787937][ T6168] 160 pages in swap cache [ 61.788023][ T6168] Free swap = 122652kB [ 61.788108][ T6168] Total swap = 124996kB [ 61.788199][ T6168] 524155 pages RAM [ 61.788206][ T6168] 0 pages HighMem/MovableOnly [ 61.788493][ T6168] 217644 pages reserved [ 61.788514][ T6168] 0 pages cma reserved [ 63.886313][ T6195] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 63.906194][ T41] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.057911][ T41] usb 5-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 64.058727][ T41] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 64.058740][ T41] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 64.058757][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.067652][ T41] spcp8x5 5-1:1.0: SPCP8x5 conveqemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x1a0000) rter detected [ 64.073688][ T41] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 64.128295][ T1132] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 64.128314][ T1132] ata1: failed to read log page 10h (errno=-5) [ 64.128327][ T1132] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 64.128342][ T1132] ata1.00: irq_stat 0x41000008 [ 64.128356][ T1132] ata1.00: failed command: READ FPDMA QUEUED [ 64.128365][ T1132] ata1.00: cmd 60/00:f0:ee:32:01/0d:00:00:00:00/40 tag 30 ncq dma 1703936 in [ 64.128365][ T1132] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 64.128405][ T1132] ata1.00: status: { DRDY } [ 64.128415][ T1132] ata1.00: error: { ABRT } [ 64.129201][ T1132] ata1.00: configured for UDMA/100 [ 64.129515][ T1132] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 64.129549][ T1132] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 64.129577][ T1132] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 64.129612][ T1132] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 01 32 ee 00 0d 00 00 [ 64.129629][ T1132] I/O error, dev sda, sector 78574 op 0x0:(READ) flags 0x80700 phys_seg 74 prio class 2 [ 64.129896][ T1132] ata1: EH complete [ 64.309870][ T6198] trusted_key: encrypted_key: insufficient parameters specified [ 64.390085][ T10] usb 5-1: USB disconnect, device number 3 [ 64.398058][ T10] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 64.398372][ T10] spcp8x5 5-1:1.0: device disconnected [ 64.629151][ T6205] syz.3.76 (6205): drop_caches: 2 [ 64.632879][ T6205] syz.3.76 (6205): drop_caches: 2 [ 64.644056][ T6205] syz.3.76 (6205): drop_caches: 2 [ 64.964585][ T6210] syzkaller0: entered promiscuous mode [ 64.964600][ T6210] syzkaller0: entered allmulticast mode [ 65.092828][ T6212] syzkaller0: entered promiscuous mode [ 65.092850][ T6212] syzkaller0: entered allmulticast mode [ 65.099739][ T6212] tipc: Enabled bearer , priority 0 [ 65.109128][ T6215] ublk_ctrl_add_dev: invalid recovery flags 10 [ 65.118118][ T6212] tipc: Resetting bearer [ 65.125265][ T6211] tipc: Resetting bearer [ 65.134107][ T6211] tipc: Disabling bearer [ 65.184885][ T6216] bridge_slave_0: left allmulticast mode [ 65.184902][ T6216] bridge_slave_0: left promiscuous mode [ 65.185734][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.317465][ T6220] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 65.624170][ T41] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 65.802566][ T6226] overlay: ./file0 is not a directory [ 65.808291][ T41] usb 8-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 65.811240][ T41] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.811289][ T41] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 65.811647][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.886987][ T41] idmouse 8-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 66.601588][ T6241] syzkaller1: entered promiscuous mode [ 66.601603][ T6241] syzkaller1: entered allmulticast mode [ 67.102551][ T34] usb 8-1: USB disconnect, device number 2 [ 67.180102][ T34] idmouse 8-1:1.0: disconnected [ 67.799953][ T6253] syz.1.88 (6253): drop_caches: 2 [ 67.800128][ T6253] syz.1.88 (6253): drop_caches: 2 [ 67.804788][ T6253] syz.1.88 (6253): drop_caches: 2 [ 69.613007][ T42] audit: type=1800 audit(1793365312.108:5): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.90" name="bus" dev="ramfs" ino=10886 res=0 errno=-4 [ 69.716305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 69.816416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 69.916436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 70.296552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 70.406690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 70.426426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 70.526433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 70.626441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 70.646431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 70.716643][ T6300] syzkaller0: entered promiscuous mode [ 70.716664][ T6300] syzkaller0: entered allmulticast mode [ 70.993314][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.993814][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.053079][ T6317] syzkaller0: entered promiscuous mode [ 72.053092][ T6317] syzkaller0: entered allmulticast mode [ 72.140066][ T6320] bond1: entered allmulticast mode [ 72.168031][ T6320] macvlan2: entered promiscuous mode [ 72.168045][ T6320] macvlan2: entered allmulticast mode [ 72.168500][ T6320] bond1: entered promiscuous mode [ 72.169846][ T6320] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 72.174229][ T6320] bond1: left promiscuous mode [ 72.229549][ T6327] Bluetooth: Error in BCSP hdr checksum [ 72.545642][ T6336] sctp: [Deprecated]: syz.0.112 (pid 6336) Use of int in max_burst socket option deprecated. [ 72.545642][ T6336] Use struct sctp_assoc_value instead [ 72.650668][ T6338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.452324][ T5148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.453457][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.453933][ T5148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.454688][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.455025][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.657486][ T6349] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.010644][ T6349] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.010786][ T6349] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.010886][ T6349] bridge_slave_0: entered allmulticast mode [ 74.012162][ T6349] bridge_slave_0: entered promiscuous mode [ 74.014724][ T6349] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.014765][ T6349] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.014824][ T6349] bridge_slave_1: entered allmulticast mode [ 74.015539][ T6349] bridge_slave_1: entered promiscuous mode [ 74.033732][ T6349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.036427][ T6349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.058693][ T6349] team0: Port device team_slave_0 added [ 74.061323][ T6349] team0: Port device team_slave_1 added [ 74.081314][ T6349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.081328][ T6349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.081348][ T6349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.082903][ T6349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.082914][ T6349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.082933][ T6349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.112636][ T6349] hsr_slave_0: entered promiscuous mode [ 74.113458][ T6349] hsr_slave_1: entered promiscuous mode [ 74.114219][ T6349] debugfs: 'hsr0' already exists in 'hsr' [ 74.114236][ T6349] Cannot create hsr debugfs directory [ 74.252146][ T6349] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.255550][ T6349] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.256548][ T6349] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.262240][ T6349] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.262992][ T6349] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.267118][ T5802] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 74.269536][ T6349] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.298384][ T6349] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.303309][ T6349] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.412334][ T6349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.425437][ T6349] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.434936][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.434982][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.443575][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.443620][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.492127][ T6384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.121'. [ 74.511678][ T6384] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 74.768427][ T6349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.296547][ T6349] veth0_vlan: entered promiscuous mode [ 75.331510][ T6349] veth1_vlan: entered promiscuous mode [ 75.454573][ T6349] veth0_macvtap: entered promiscuous mode [ 75.481913][ T5148] Bluetooth: hci4: command tx timeout [ 75.487465][ T6349] veth1_macvtap: entered promiscuous mode [ 75.559390][ T6349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.637193][ T6349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.200507][ T24] cfg80211: failed to load regulatory.db [ 76.557939][ T5869] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.032983][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.033019][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.078710][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.078730][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.084030][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.084070][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.084099][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.221867][ T6419] evm: overlay not supported [ 77.236618][ T6419] overlayfs: failed to verify origin (0/file1, ino=27, err=-116) [ 77.236974][ T6419] overlayfs: failed to verify origin (0/file1, ino=27, err=-116) [ 77.469426][ T6428] syzkaller0: entered promiscuous mode [ 77.469449][ T6428] syzkaller0: entered allmulticast mode [ 77.481289][ T6428] simple: /dev/video#_3 [ 77.481307][ T6428] simple: /dev/video#_6 [ 77.481316][ T6428] simple: /dev/video#_9 [ 77.481325][ T6428] simple: /dev/video#_12 [ 77.481333][ T6428] simple: /dev/video#_15 [ 77.481343][ T6428] simple: /dev/video#_18 [ 77.481352][ T6428] simple: /dev/video#_21 [ 77.481359][ T6428] simple: /dev/video#_24 [ 77.481368][ T6428] simple: /dev/video#_27 [ 77.481375][ T6428] simple: /dev/video#_30 [ 77.481385][ T6428] simple: /dev/video#_33 [ 77.481392][ T6428] simple: /dev/video#_36 [ 77.481401][ T6428] simple: /dev/video#_39 [ 77.481410][ T6428] simple: /dev/video#_42 [ 77.481419][ T6428] simple: /dev/video#_45 [ 77.481427][ T6428] simple: /dev/video#_48 [ 77.481434][ T6428] simple: /dev/video#_51 [ 77.481443][ T6428] simple: /dev/video#_54 [ 77.481452][ T6428] simple: /dev/video#_57 [ 77.481460][ T6428] simple: /dev/video#_60 [ 77.481469][ T6428] simple: /dev/video#_63 [ 77.481477][ T6428] simple: /dev/video#_66 [ 77.481487][ T6428] simple: /dev/video#_69 [ 77.481494][ T6428] simple: /dev/video#_72 [ 77.481503][ T6428] simple: /dev/video#_75 [ 77.481511][ T6428] simple: /dev/video#_78 [ 77.481520][ T6428] simple: /dev/video#_81 [ 77.481527][ T6428] simple: /dev/video#_84 [ 77.481536][ T6428] simple: /dev/video#_87 [ 77.481543][ T6428] simple: /dev/video#_90 [ 77.481552][ T6428] simple: /dev/video#_93 [ 77.481561][ T6428] simple: /dev/video#_96 [ 77.481571][ T6428] TC_ACT_REPEAT abuse ? [ 77.546870][ T5148] Bluetooth: hci4: command tx timeout [ 77.799481][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 77.800304][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 78.115207][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 78.115224][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 78.115233][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 78.146181][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 78.146242][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 78.146251][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 78.196111][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.135'. [ 78.205077][ T6444] FAULT_INJECTION: forcing a failure. [ 78.205077][ T6444] name failslab, interval 1, probability 0, space 0, times 0 [ 78.205095][ T6444] CPU: 3 UID: 0 PID: 6444 Comm: syz.0.136 Not tainted syzkaller #0 PREEMPT(full) [ 78.205107][ T6444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.205114][ T6444] Call Trace: [ 78.205118][ T6444] [ 78.205122][ T6444] dump_stack_lvl+0x100/0x190 [ 78.205141][ T6444] should_fail_ex.cold+0x5/0xa [ 78.205158][ T6444] should_failslab+0xc2/0x120 [ 78.205170][ T6444] kmem_cache_alloc_noprof+0x92/0x6a0 [ 78.205187][ T6444] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 78.205203][ T6444] ? vm_area_alloc+0x1f/0x160 [ 78.205217][ T6444] vm_area_alloc+0x1f/0x160 [ 78.205228][ T6444] create_init_stack_vma+0x394/0xd60 [ 78.205244][ T6444] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 78.205261][ T6444] ? __pfx_create_init_stack_vma+0x10/0x10 [ 78.205278][ T6444] ? lock_acquire+0x1d1/0x380 [ 78.205289][ T6444] ? do_raw_spin_lock+0x128/0x260 [ 78.205301][ T6444] ? alloc_bprm+0x549/0x9d0 [ 78.205310][ T6444] ? alloc_bprm+0x549/0x9d0 [ 78.205322][ T6444] alloc_bprm+0x576/0x9d0 [ 78.205332][ T6444] do_execveat_common.isra.0+0x194/0x580 [ 78.205343][ T6444] ? do_getname+0x191/0x390 [ 78.205357][ T6444] __ia32_compat_sys_execve+0x9c/0xd0 [ 78.205370][ T6444] __do_fast_syscall_32+0x14b/0x8c0 [ 78.205385][ T6444] do_fast_syscall_32+0x32/0x70 [ 78.205397][ T6444] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.205409][ T6444] RIP: 0023:0xf73cefbc [ 78.205418][ T6444] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 78.205427][ T6444] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000000b [ 78.205437][ T6444] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 78.205443][ T6444] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.205449][ T6444] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.205454][ T6444] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 78.205460][ T6444] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.205473][ T6444] [ 78.977967][ T6451] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 78.978941][ T6451] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 78.979922][ T6451] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 78.981797][ T6451] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 78.988889][ T6451] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 78.990273][ T6451] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 78.991946][ T6451] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 78.993349][ T6451] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 78.994723][ T6451] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 78.995763][ T6451] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 79.626147][ T5148] Bluetooth: hci4: command tx timeout [ 79.634065][ T6461] lo: entered allmulticast mode [ 79.698454][ T6457] __nla_validate_parse: 2 callbacks suppressed [ 79.698467][ T6457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.138'. [ 79.874141][ T6461] lo: left allmulticast mode [ 80.046583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 80.559127][ T6476] syzkaller0: entered promiscuous mode [ 80.559144][ T6476] syzkaller0: entered allmulticast mode [ 81.706210][ T5148] Bluetooth: hci4: command tx timeout [ 83.835344][ T6513] tipc: Enabling of bearer rejected, failed to enable media [ 83.967959][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 84.042130][ T6530] syzkaller0: entered promiscuous mode [ 84.042144][ T6530] syzkaller0: entered allmulticast mode [ 84.206769][ T6543] syz.4.160 uses obsolete (PF_INET,SOCK_PACKET) [ 85.672333][ T6565] file system registered [ 85.799752][ T6557] sctp_transport_update_pmtu: 48 callbacks suppressed [ 85.799767][ T6557] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 85.800019][ T6557] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 85.800189][ T6557] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 85.800389][ T6557] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 85.800949][ T6557] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 85.801172][ T6557] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 85.801365][ T6557] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 85.801587][ T6557] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 85.819062][ T6557] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 85.819586][ T6557] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 85.881499][ T5798] ffs_data_put(): freeing [ 86.209352][ T6560] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 87.356206][ T57] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 87.530537][ T57] usb 6-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 87.531481][ T57] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 87.531494][ T57] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 87.531511][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.553063][ T57] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 87.568700][ T57] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 88.366645][ T6617] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -110) [ 88.370670][ T6617] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 88.564320][ T6587] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 88.586784][ T6587] CIFS: Attempting to mount //127.0.0.1/share [ 88.729888][ T6587] CIFS: VFS: Error connecting to socket. Aborting operation. [ 88.731248][ T6587] CIFS: VFS: cifs_mount failed w/return code = -111 [ 88.759104][ T6617] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 88.776353][ T63] usb 6-1: USB disconnect, device number 2 [ 88.815605][ T63] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 88.830693][ T63] spcp8x5 6-1:1.0: device disconnected [ 89.023562][ T6625] capability: warning: `syz.3.175' uses 32-bit capabilities (legacy support in use) [ 89.068514][ T6625] overlayfs: upper fs does not support file handles, falling back to index=off. [ 89.138785][ T5869] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.196910][ T6625] overlayfs: failed lookup in lower (newroot/60, name='file0', err=-40): overlapping layers [ 89.311280][ T5869] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.451374][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 89.454801][ T5869] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.472885][ T6634] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 89.489606][ T6630] syzkaller0: entered promiscuous mode [ 89.489620][ T6630] syzkaller0: entered allmulticast mode [ 89.494509][ T6630] tipc: Started in network mode [ 89.494525][ T6630] tipc: Node identity 125e3d8670ec, cluster identity 4711 [ 89.494699][ T6630] tipc: Enabled bearer , priority 0 [ 89.498546][ T6630] tipc: Resetting bearer [ 89.504895][ T6629] tipc: Resetting bearer [ 89.520407][ T6629] tipc: Disabling bearer [ 89.534534][ T5869] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.733573][ T5869] bridge_slave_1: left allmulticast mode [ 89.733621][ T5869] bridge_slave_1: left promiscuous mode [ 89.734667][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.748164][ T5869] bridge_slave_0: left allmulticast mode [ 89.748188][ T5869] bridge_slave_0: left promiscuous mode [ 89.748366][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.762811][ T6634] md/raid1:md4: active with 1 out of 2 mirrors [ 89.767282][ T6634] md4: detected capacity change from 0 to 1024 [ 90.390516][ T6645] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 90.390533][ T6645] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.391292][ T6645] vhci_hcd vhci_hcd.0: Device attached [ 90.623111][ T6370] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 90.716421][ T6370] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 90.755640][ T5869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.763831][ T5869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.765465][ T5869] bond0 (unregistering): Released all slaves [ 91.005755][ T6646] vhci_hcd: connection reset by peer [ 91.050274][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 91.122189][ T6656] syz.3.183 (pid 6656) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 91.218807][ T5604] vhci_hcd vhci_hcd.0: stop threads [ 91.220624][ T5604] vhci_hcd vhci_hcd.0: release socket [ 91.221659][ T5604] vhci_hcd vhci_hcd.0: disconnect device [ 92.720718][ T6637] md4: detected capacity change from 1024 to 0 [ 92.720732][ T6637] md: md4 stopped. [ 92.841213][ T5501] 8021q: adding VLAN 0 to HW filter on device eth2 [ 93.176630][ T6676] syzkaller0: entered promiscuous mode [ 93.176645][ T6676] syzkaller0: entered allmulticast mode [ 93.940351][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 94.053114][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 94.115008][ T5869] hsr_slave_0: left promiscuous mode [ 94.117672][ T5869] hsr_slave_1: left promiscuous mode [ 94.118752][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.118817][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.121229][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.121245][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.145299][ T5869] veth1_macvtap: left promiscuous mode [ 94.145397][ T5869] veth0_macvtap: left promiscuous mode [ 94.145556][ T5869] veth1_vlan: left promiscuous mode [ 94.145686][ T5869] veth0_vlan: left promiscuous mode [ 95.730749][ T5869] team0 (unregistering): Port device team_slave_1 removed [ 95.745762][ T5869] team0 (unregistering): Port device team_slave_0 removed [ 95.859193][ T6370] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 95.886192][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 95.921058][ T5501] 8021q: adding VLAN 0 to HW filter on device eth3 [ 96.036265][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 96.056871][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 96.056897][ T10] usb 9-1: New USB device found: idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 96.079182][ T10] usb 9-1: string descriptor 0 read error: -22 [ 96.079282][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.107103][ T10] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 96.107145][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 96.107425][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 96.120719][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 96.129224][ T10] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 96.129265][ T10] usb 9-1: media controller created [ 96.129511][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 96.129523][ T10] dw2102: i2c transfer failed. [ 96.129533][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 96.129542][ T10] dw2102: i2c transfer failed. [ 96.129550][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 96.129559][ T10] dw2102: i2c transfer failed. [ 96.129567][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 96.129575][ T10] dw2102: i2c transfer failed. [ 96.129583][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 96.129591][ T10] dw2102: i2c transfer failed. [ 96.129609][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 96.129618][ T10] dw2102: i2c transfer failed. [ 96.129623][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 96.173541][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.292899][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 96.292934][ T10] dw2102: command 0x0e transfer failed. [ 96.292941][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 96.292949][ T10] dw2102: command 0x0e transfer failed. [ 96.413502][ T5501] 8021q: adding VLAN 0 to HW filter on device eth4 [ 96.597369][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 96.597389][ T10] dw2102: command 0x0e transfer failed. [ 96.597394][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 96.597403][ T10] dw2102: command 0x0e transfer failed. [ 96.597408][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 96.597417][ T10] dw2102: command 0x51 transfer failed. [ 96.598496][ T6697] dvb-usb: bulk message failed: -22 (4/0) [ 96.598513][ T6697] dw2102: i2c transfer failed. [ 96.658771][ T10] DVB: Unable to find symbol ds3000_attach() [ 96.658784][ T10] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 96.681215][ T5501] 8021q: adding VLAN 0 to HW filter on device eth5 [ 96.756184][ T10] rc_core: IR keymap rc-su3000 not found [ 96.756199][ T10] Registered IR keymap rc-empty [ 96.758393][ T10] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 96.765584][ T10] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input8 [ 96.778025][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 96.778043][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 96.778055][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 96.783503][ T10] usb 9-1: USB disconnect, device number 2 [ 97.085479][ T6732] bridge0: port 1(syz_tun) entered blocking state [ 97.085642][ T6732] bridge0: port 1(syz_tun) entered disabled state [ 97.085908][ T6732] syz_tun: entered allmulticast mode [ 97.096942][ T6732] syz_tun: entered promiscuous mode [ 97.099830][ T6732] bridge0: port 1(syz_tun) entered blocking state [ 97.099937][ T6732] bridge0: port 1(syz_tun) entered forwarding state [ 97.415911][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 97.973895][ T6747] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 97.973917][ T6747] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 97.973939][ T6747] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 98.453121][ T6753] dvmrp0: entered allmulticast mode [ 98.704387][ T6765] input: syz1 as /devices/virtual/input/input9 [ 99.116923][ T57] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 99.276842][ T57] usb 9-1: Using ep0 maxpacket: 32 [ 99.281878][ T57] usb 9-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 99.283602][ T57] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 99.285537][ T57] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 99.285550][ T57] usb 9-1: Product: syz [ 99.285557][ T57] usb 9-1: Manufacturer: syz [ 99.285563][ T57] usb 9-1: SerialNumber: syz [ 99.287898][ T57] usb 9-1: config 0 descriptor?? [ 99.288728][ T6769] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 99.291284][ T57] hub 9-1:0.0: bad descriptor, ignoring hub [ 99.291295][ T57] hub 9-1:0.0: probe with driver hub failed with error -5 [ 99.446621][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'. [ 99.720351][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.213'. [ 100.207819][ T6370] usb 9-1: USB disconnect, device number 3 [ 100.599540][ T42] audit: type=1326 audit(1793365343.098:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.0.217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefbc code=0x7ffc0000 [ 100.601065][ T42] audit: type=1326 audit(1793365343.098:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.0.217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefbc code=0x7ffc0000 [ 100.601105][ T42] audit: type=1326 audit(1793365343.098:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.0.217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefbc code=0x7ffc0000 [ 100.601911][ T42] audit: type=1326 audit(1793365343.098:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.0.217" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73cefbc code=0x7ffc0000 [ 100.740825][ T42] audit: type=1326 audit(1793365343.238:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.0.217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefbc code=0x7ffc0000 [ 100.741095][ T42] audit: type=1326 audit(1793365343.238:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6802 comm="syz.0.217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefbc code=0x7ffc0000 [ 100.748457][ T6370] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 100.909407][ T6370] usb 9-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 100.910420][ T6370] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 100.912366][ T6370] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 100.912383][ T6370] usb 9-1: Product: syz [ 100.912395][ T6370] usb 9-1: Manufacturer: syz [ 100.912406][ T6370] usb 9-1: SerialNumber: syz [ 100.917384][ T6370] usb 9-1: config 0 descriptor?? [ 100.918828][ T6790] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 100.923558][ T6370] hub 9-1:0.0: bad descriptor, ignoring hub [ 100.923576][ T6370] hub 9-1:0.0: probe with driver hub failed with error -5 [ 100.938351][ T6806] syzkaller0: entered promiscuous mode [ 100.938369][ T6806] syzkaller0: entered allmulticast mode [ 100.951181][ T6370] usb 9-1: USB disconnect, device number 4 [ 101.088087][ T6370] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 101.154801][ T6769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.155060][ T6769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.209713][ T6815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.209736][ T6815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.210729][ T6815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.210744][ T6815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.278031][ T6815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.707986][ T6827] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 103.306205][ T5148] Bluetooth: hci2: command 0x0406 tx timeout [ 103.974081][ T6855] bridge0: port 3(macvlan2) entered blocking state [ 103.974239][ T6855] bridge0: port 3(macvlan2) entered disabled state [ 103.974297][ T6855] macvlan2: entered allmulticast mode [ 103.974305][ T6855] ip6gretap0: entered allmulticast mode [ 103.975150][ T6855] macvlan2: entered promiscuous mode [ 103.975532][ T6855] bridge0: port 3(macvlan2) entered blocking state [ 103.976630][ T6855] bridge0: port 3(macvlan2) entered forwarding state [ 104.156634][ T6858] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 104.180518][ T6859] siw: device registration error -23 [ 104.194450][ T6859] netlink: 14 bytes leftover after parsing attributes in process `syz.1.236'. [ 104.372601][ T6859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.394072][ T6859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.409188][ T6859] bond0 (unregistering): Released all slaves [ 104.516286][ T34] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.516414][ T6862] md/raid:md0: not enough operational devices (3/3 failed) [ 104.734347][ T34] usb 5-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=1.00 [ 104.876026][ T6862] md/raid:md0: failed to run raid set. [ 105.036195][ T6862] md: pers->run() failed ... [ 105.312766][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.312794][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.129863][ T34] metro_usb 5-1:1.0: Metrologic USB to Serial converter detected [ 106.132139][ T34] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x26b000) qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xf6000) [ 106.536735][ T1132] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 106.536750][ T1132] ata1: failed to read log page 10h (errno=-5) [ 106.536758][ T1132] ata1.00: NCQ disabled due to excessive errors [ 106.536765][ T1132] ata1.00: exception Emask 0x1 SAct 0x48000001 SErr 0x0 action 0x0 [ 106.536775][ T1132] ata1.00: irq_stat 0x41000000 [ 106.536783][ T1132] ata1.00: failed command: READ FPDMA QUEUED [ 106.536789][ T1132] ata1.00: cmd 60/98:00:1e:63:01/02:00:00:00:00/40 tag 0 ncq dma 339968 in [ 106.536789][ T1132] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 106.536814][ T1132] ata1.00: status: { DRDY } [ 106.536821][ T1132] ata1.00: error: { ABRT } [ 106.536830][ T1132] ata1.00: failed command: READ FPDMA QUEUED [ 106.536835][ T1132] ata1.00: cmd 60/58:d8:56:38:01/13:00:00:00:00/40 tag 27 ncq dma 2535424 in [ 106.536835][ T1132] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 106.536883][ T1132] ata1.00: status: { DRDY } [ 106.536890][ T1132] ata1.00: error: { ABRT } [ 106.536898][ T1132] ata1.00: failed command: READ FPDMA QUEUED [ 106.536903][ T1132] ata1.00: cmd 60/b0:f0:6e:5b:01/07:00:00:00:00/40 tag 30 ncq dma 1007616 in [ 106.536903][ T1132] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 106.536929][ T1132] ata1.00: status: { DRDY } [ 106.536936][ T1132] ata1.00: error: { ABRT } [ 106.537750][ T1132] ata1.00: configured for UDMA/100 [ 106.538001][ T1132] sd 0:0:0:0: [sda] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 106.538023][ T1132] sd 0:0:0:0: [sda] tag#0 Sense Key : Aborted Command [current] [ 106.538040][ T1132] sd 0:0:0:0: [sda] tag#0 Add. Sense: No additional sense information [ 106.538058][ T1132] sd 0:0:0:0: [sda] tag#0 CDB: Read(10) 28 00 00 01 63 1e 00 02 98 00 [ 106.538069][ T1132] I/O error, dev sda, sector 90910 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2 [ 106.538148][ T1132] sd 0:0:0:0: [sda] tag#27 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 106.538167][ T1132] sd 0:0:0:0: [sda] tag#27 Sense Key : Aborted Command [current] [ 106.538192][ T1132] sd 0:0:0:0: [sda] tag#27 Add. Sense: No additional sense information [ 106.538218][ T1132] sd 0:0:0:0: [sda] tag#27 CDB: Read(10) 28 00 00 01 38 56 00 13 58 00 [ 106.538237][ T1132] I/O error, dev sda, sector 79958 op 0x0:(READ) flags 0x80700 phys_seg 77 prio class 2 [ 106.538497][ T1132] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 106.538516][ T1132] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 106.538533][ T1132] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 106.538549][ T1132] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 01 5b 6e 00 07 b0 00 [ 106.538559][ T1132] I/O error, dev sda, sector 88942 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 106.538709][ T1132] ata1: EH complete [ 106.890964][ T57] usb 5-1: USB disconnect, device number 4 [ 106.896918][ T57] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 106.903922][ T57] metro_usb 5-1:1.0: device disconnected [ 107.509256][ T6883] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.561754][ T6866] syz.3.239 (6866) used greatest stack depth: 19088 bytes left [ 108.129659][ T34] Process accounting resumed [ 108.339537][ T6902] exFAT-fs (nbd0): mounting with "discard" option, but the device does not support discard [ 108.346210][ T6902] exFAT-fs (nbd0): unable to read boot sector [ 108.346220][ T6902] exFAT-fs (nbd0): failed to read boot sector [ 108.346345][ T6902] exFAT-fs (nbd0): failed to recognize exfat type [ 108.698898][ T6906] syzkaller0: entered promiscuous mode [ 108.698918][ T6906] syzkaller0: entered allmulticast mode [ 109.441079][ T6920] device-mapper: table: 248:1: striped: Invalid chunk_size (-EINVAL) [ 109.441102][ T6920] device-mapper: ioctl: error adding target to table [ 109.619306][ T6926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.255'. [ 109.674839][ T6920] device-mapper: table: 248:1: ram8 too small for target: start=4096, len=8192, dev_size=8192 [ 109.674866][ T6920] device-mapper: core: Cannot calculate initial queue limits [ 109.674873][ T6920] device-mapper: ioctl: unable to set up device queue for new table. [ 109.698802][ T6924] FAULT_INJECTION: forcing a failure. [ 109.698802][ T6924] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 109.698830][ T6924] CPU: 2 UID: 0 PID: 6924 Comm: syz.3.254 Not tainted syzkaller #0 PREEMPT(full) [ 109.698851][ T6924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.698861][ T6924] Call Trace: [ 109.698867][ T6924] [ 109.698874][ T6924] dump_stack_lvl+0x100/0x190 [ 109.698903][ T6924] should_fail_ex.cold+0x5/0xa [ 109.698929][ T6924] copy_folio_from_iter_atomic+0x5cc/0x2020 [ 109.698958][ T6924] ? filemap_add_folio+0x114/0x640 [ 109.698986][ T6924] ? __pfx_filemap_add_folio+0x10/0x10 [ 109.699020][ T6924] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 109.699045][ T6924] ? trace_kmalloc+0xeb/0x110 [ 109.699066][ T6924] ? __filemap_get_folio_mpol+0x364/0x1230 [ 109.699102][ T6924] fuse_perform_write+0x715/0x1a10 [ 109.699137][ T6924] ? __pfx_fuse_perform_write+0x10/0x10 [ 109.699175][ T6924] ? __pfx_generic_write_checks+0x10/0x10 [ 109.699199][ T6924] ? file_update_time_flags+0x38c/0x520 [ 109.699219][ T6924] ? __pfx_down_write+0x10/0x10 [ 109.699245][ T6924] fuse_file_write_iter+0x436/0x9a0 [ 109.699267][ T6924] do_iter_readv_writev+0x6f7/0x930 [ 109.699294][ T6924] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 109.699319][ T6924] ? lock_acquire+0x1d1/0x380 [ 109.699349][ T6924] vfs_writev+0x360/0xdd0 [ 109.699374][ T6924] ? rcu_is_watching+0x13/0xc0 [ 109.699396][ T6924] ? trace_contention_end+0x126/0x160 [ 109.699417][ T6924] ? __pfx_vfs_writev+0x10/0x10 [ 109.699447][ T6924] ? lock_acquire+0x1d1/0x380 [ 109.699462][ T6924] ? __fget_files+0x34/0x3d0 [ 109.699490][ T6924] ? __fget_files+0x21f/0x3d0 [ 109.699513][ T6924] ? do_writev+0x13e/0x340 [ 109.699536][ T6924] do_writev+0x13e/0x340 [ 109.699560][ T6924] ? __pfx_do_writev+0x10/0x10 [ 109.699592][ T6924] __do_fast_syscall_32+0x14b/0x8c0 [ 109.699611][ T6924] ? lockdep_hardirqs_on+0x7d/0x110 [ 109.699631][ T6924] do_fast_syscall_32+0x32/0x70 [ 109.699651][ T6924] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.699672][ T6924] RIP: 0023:0xf7f25fbc [ 109.699686][ T6924] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 109.699701][ T6924] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 109.699736][ T6924] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080004380 [ 109.699748][ T6924] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.699758][ T6924] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.699768][ T6924] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 109.699779][ T6924] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.699806][ T6924] [ 109.787035][ T5802] Bluetooth: hci2: unexpected event for opcode 0x2016 [ 110.911697][ T6953] syzkaller0: entered promiscuous mode [ 110.911711][ T6953] syzkaller0: entered allmulticast mode [ 110.915110][ T6953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.918828][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.333872][ T6965] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 111.333893][ T6965] overlayfs: failed to set xattr on upper [ 111.333900][ T6965] overlayfs: ...falling back to redirect_dir=nofollow. [ 111.333907][ T6965] overlayfs: ...falling back to index=off. [ 111.333913][ T6965] overlayfs: ...falling back to uuid=null. [ 111.409538][ T6970] bridge0: port 1(syz_tun) entered disabled state [ 111.409729][ T6970] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.410176][ T6970] bridge0: entered allmulticast mode [ 111.418248][ T6970] syz_tun: left allmulticast mode [ 111.418262][ T6970] syz_tun: left promiscuous mode [ 111.419452][ T6970] bridge0: port 1(syz_tun) entered disabled state [ 111.424399][ T6966] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 111.425022][ T6970] bridge_slave_1: left allmulticast mode [ 111.425039][ T6970] bridge_slave_1: left promiscuous mode [ 111.425144][ T6970] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.840081][ T6977] syzkaller1: entered promiscuous mode [ 111.840103][ T6977] syzkaller1: entered allmulticast mode [ 111.844421][ T6979] syzkaller0: entered promiscuous mode [ 111.844440][ T6979] syzkaller0: entered allmulticast mode [ 112.116529][ T1132] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 112.116554][ T1132] ata1.00: irq_stat 0x40000000 [ 112.116568][ T1132] ata1.00: failed command: READ DMA EXT [ 112.116577][ T1132] ata1.00: cmd 25/00:d8:b6:12:08/00:10:00:00:00/e0 tag 11 dma 2207744 in [ 112.116577][ T1132] res 41/04:d8:b6:12:08/00:10:00:00:00/e0 Emask 0x1 (device error) [ 112.116625][ T1132] ata1.00: status: { DRDY ERR } [ 112.116637][ T1132] ata1.00: error: { ABRT } [ 112.118533][ T1132] ata1.00: configured for UDMA/100 [ 112.118703][ T1132] sd 0:0:0:0: [sda] tag#11 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 112.118739][ T1132] sd 0:0:0:0: [sda] tag#11 Sense Key : Aborted Command [current] [ 112.118769][ T1132] sd 0:0:0:0: [sda] tag#11 Add. Sense: No additional sense information [ 112.118802][ T1132] sd 0:0:0:0: [sda] tag#11 CDB: Read(10) 28 00 00 08 12 b6 00 10 d8 00 [ 112.118821][ T1132] I/O error, dev sda, sector 529078 op 0x0:(READ) flags 0x80700 phys_seg 163 prio class 2 [ 112.119088][ T1132] ata1: EH complete [ 112.551237][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'. [ 112.551308][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.559412][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.390027][ T7002] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 113.404287][ T225] Bluetooth: hci1: Frame reassembly failed (-84) [ 113.787111][ T5148] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 113.787159][ T5148] Bluetooth: hci2: Injecting HCI hardware error event [ 113.788341][ T5148] Bluetooth: hci2: hardware error 0x00 [ 114.332710][ T7018] netlink: 'syz.4.285': attribute type 4 has an invalid length. [ 114.332724][ T7018] netlink: 'syz.4.285': attribute type 10 has an invalid length. [ 114.332730][ T7018] netlink: 152 bytes leftover after parsing attributes in process `syz.4.285'. [ 114.332787][ T7018] bond_slave_0: mtu greater than device maximum [ 114.490311][ T6838] syz.0.229 (6838) used greatest stack depth: 18120 bytes left [ 114.664256][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.286'. [ 115.006139][ T6370] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 115.159936][ T6370] usb 5-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 115.160957][ T6370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.160979][ T6370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.160997][ T6370] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.161027][ T6370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.162826][ T6370] usb 5-1: config 0 descriptor?? [ 115.427549][ T1132] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 115.427759][ T1132] ata1.00: irq_stat 0x40000000 [ 115.428003][ T1132] ata1.00: failed command: READ DMA EXT [ 115.428574][ T1132] ata1.00: cmd 25/00:20:ae:48:01/00:05:00:00:00/e0 tag 14 dma 671744 in [ 115.428574][ T1132] res 41/04:20:ae:48:01/00:05:00:00:00/e0 Emask 0x1 (device error) [ 115.428666][ T1132] ata1.00: status: { DRDY ERR } [ 115.428674][ T1132] ata1.00: error: { ABRT } [ 115.436416][ T1132] ata1.00: configured for UDMA/100 [ 115.436640][ T1132] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 115.436662][ T1132] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 115.436704][ T1132] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 115.436987][ T1132] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 48 ae 00 05 20 00 [ 115.437000][ T1132] I/O error, dev sda, sector 84142 op 0x0:(READ) flags 0x80700 phys_seg 88 prio class 2 [ 115.439228][ T1132] ata1: EH complete [ 115.476324][ T5799] Bluetooth: hci1: command 0x1003 tx timeout [ 115.476568][ T5802] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 115.495920][ T7032] FAULT_INJECTION: forcing a failure. [ 115.495920][ T7032] name fail_futex, interval 1, probability 0, space 0, times 1 [ 115.495994][ T7032] CPU: 1 UID: 0 PID: 7032 Comm: syz.0.288 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.496019][ T7032] Tainted: [L]=SOFTLOCKUP [ 115.496025][ T7032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.496036][ T7032] Call Trace: [ 115.496054][ T7032] [ 115.496062][ T7032] dump_stack_lvl+0x100/0x190 [ 115.496093][ T7032] should_fail_ex.cold+0x5/0xa [ 115.496115][ T7032] get_futex_key+0x1c9/0x13e0 [ 115.496139][ T7032] ? __pfx_get_futex_key+0x10/0x10 [ 115.496158][ T7032] ? kasan_quarantine_put+0x104/0x240 [ 115.496182][ T7032] ? lockdep_hardirqs_on+0x7d/0x110 [ 115.496201][ T7032] ? proc_simple_write+0x100/0x1a0 [ 115.496222][ T7032] futex_wake+0xf4/0x5e0 [ 115.496240][ T7032] ? find_held_lock+0x2b/0x80 [ 115.496262][ T7032] ? __pfx_futex_wake+0x10/0x10 [ 115.496282][ T7032] ? rcu_read_lock_any_held+0x6a/0x90 [ 115.496304][ T7032] ? find_held_lock+0x2b/0x80 [ 115.496324][ T7032] ? ksys_write+0x190/0x250 [ 115.496339][ T7032] ? ksys_write+0x190/0x250 [ 115.496357][ T7032] do_futex+0x2b2/0x440 [ 115.496380][ T7032] ? __pfx_do_futex+0x10/0x10 [ 115.496403][ T7032] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 115.496432][ T7032] __ia32_sys_futex_time32+0x2f4/0x470 [ 115.496461][ T7032] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 115.496486][ T7032] ? __might_fault+0xc5/0x140 [ 115.496511][ T7032] __do_fast_syscall_32+0x14b/0x8c0 [ 115.496533][ T7032] do_fast_syscall_32+0x32/0x70 [ 115.496552][ T7032] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 115.496573][ T7032] RIP: 0023:0xf73cefbc [ 115.496587][ T7032] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 115.496601][ T7032] RSP: 002b:00000000f53c55cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 115.496618][ T7032] RAX: ffffffffffffffda RBX: 00000000f73f5024 RCX: 0000000000000081 [ 115.496628][ T7032] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 115.496637][ T7032] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 115.496647][ T7032] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 115.496656][ T7032] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 115.496678][ T7032] [ 115.671018][ T6370] usbhid 5-1:0.0: can't add hid device: -71 [ 115.671092][ T6370] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 115.680422][ T6370] usb 5-1: USB disconnect, device number 5 [ 115.866997][ T5148] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 116.065292][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 116.588237][ T5148] Bluetooth: hci0: command 0x0c3a tx timeout [ 116.590010][ T5792] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 116.837373][ T7041] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 119.617526][ T7068] EXT4-fs warning (device sda1): ext4_group_extend:1872: need to use ext2online to resize further [ 119.706344][ T29] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 119.896963][ T29] usb 8-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 119.898323][ T29] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 119.898346][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.899864][ T29] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 119.899874][ T29] usb 8-1: Manufacturer: syz [ 119.907279][ T29] usb 8-1: config 0 descriptor?? [ 119.908609][ T5578] libceph: connect (1)[c::]:6789 error -101 [ 119.908949][ T5578] libceph: mon0 (1)[c::]:6789 connect error [ 119.924347][ T5578] libceph: connect (1)[c::]:6789 error -101 [ 119.924481][ T5578] libceph: mon0 (1)[c::]:6789 connect error [ 120.006108][ T29] rc_core: IR keymap rc-hauppauge not found [ 120.006121][ T29] Registered IR keymap rc-empty [ 120.006859][ T29] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 120.007603][ T29] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input10 [ 120.041669][ T7076] ceph: No mds server is up or the cluster is laggy [ 120.117659][ T1132] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 120.117676][ T1132] ata1.00: irq_stat 0x40000000 [ 120.117686][ T1132] ata1.00: failed command: READ DMA EXT [ 120.117692][ T1132] ata1.00: cmd 25/00:90:16:39:01/00:0a:00:00:00/e0 tag 30 dma 1384448 in [ 120.117692][ T1132] res 41/04:90:16:39:01/00:0a:00:00:00/e0 Emask 0x1 (device error) [ 120.117718][ T1132] ata1.00: status: { DRDY ERR } [ 120.117725][ T1132] ata1.00: error: { ABRT } [ 120.118392][ T1132] ata1.00: configured for UDMA/100 [ 120.118487][ T1132] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 120.118508][ T1132] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 120.118528][ T1132] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 120.118552][ T1132] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 01 39 16 00 0a 90 00 [ 120.118565][ T1132] I/O error, dev sda, sector 80150 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 120.118737][ T1132] ata1: EH complete [ 120.501915][ T42] audit: type=1326 audit(1793365362.998:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.4.305" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 120.504515][ T42] audit: type=1326 audit(1793365362.998:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.4.305" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 120.555735][ T42] audit: type=1326 audit(1793365363.048:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.4.305" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 120.555915][ T42] audit: type=1326 audit(1793365363.048:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.4.305" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 120.556484][ T42] audit: type=1326 audit(1793365363.048:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.4.305" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 120.556727][ T42] audit: type=1326 audit(1793365363.058:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.4.305" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 120.557135][ T42] audit: type=1326 audit(1793365363.058:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.4.305" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 120.557830][ T42] audit: type=1326 audit(1793365363.058:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.4.305" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 120.557969][ T42] audit: type=1326 audit(1793365363.058:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.4.305" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 120.558161][ T42] audit: type=1326 audit(1793365363.058:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.4.305" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 120.945778][ T29] usb 8-1: USB disconnect, device number 3 [ 121.034859][ T7103] FAULT_INJECTION: forcing a failure. [ 121.034859][ T7103] name failslab, interval 1, probability 0, space 0, times 0 [ 121.034878][ T7103] CPU: 1 UID: 0 PID: 7103 Comm: syz.0.307 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.034893][ T7103] Tainted: [L]=SOFTLOCKUP [ 121.034896][ T7103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.034903][ T7103] Call Trace: [ 121.034907][ T7103] [ 121.034911][ T7103] dump_stack_lvl+0x100/0x190 [ 121.034932][ T7103] should_fail_ex.cold+0x5/0xa [ 121.034961][ T7103] should_failslab+0xc2/0x120 [ 121.034974][ T7103] __kmalloc_noprof+0xfc/0x840 [ 121.034990][ T7103] ? neigh_hash_alloc+0x8e/0x1c0 [ 121.035007][ T7103] neigh_hash_alloc+0x8e/0x1c0 [ 121.035022][ T7103] neigh_table_register+0x34a/0x11b0 [ 121.035035][ T7103] ? __pfx_arp_net_init+0x10/0x10 [ 121.035048][ T7103] arp_net_init+0x21/0x160 [ 121.035060][ T7103] ops_init+0x1e2/0x5f0 [ 121.035076][ T7103] setup_net+0x118/0x3a0 [ 121.035090][ T7103] ? __pfx_setup_net+0x10/0x10 [ 121.035105][ T7103] ? bpf_lsm_namespace_init+0x9/0x10 [ 121.035119][ T7103] copy_net_ns+0x340/0x7a0 [ 121.035136][ T7103] create_new_namespaces+0x3ea/0xac0 [ 121.035150][ T7103] unshare_nsproxy_namespaces+0xf6/0x210 [ 121.035163][ T7103] ksys_unshare+0x44f/0x980 [ 121.035188][ T7103] ? __pfx_ksys_unshare+0x10/0x10 [ 121.035201][ T7103] ? __might_fault+0xc5/0x140 [ 121.035218][ T7103] __ia32_sys_unshare+0x30/0x40 [ 121.035229][ T7103] __do_fast_syscall_32+0x14b/0x8c0 [ 121.035244][ T7103] do_fast_syscall_32+0x32/0x70 [ 121.035256][ T7103] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 121.035269][ T7103] RIP: 0023:0xf73cefbc [ 121.035278][ T7103] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 121.035287][ T7103] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 121.035298][ T7103] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 121.035304][ T7103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.035310][ T7103] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 121.035316][ T7103] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 121.035321][ T7103] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.035340][ T7103] [ 121.854527][ T7115] FAULT_INJECTION: forcing a failure. [ 121.854527][ T7115] name failslab, interval 1, probability 0, space 0, times 0 [ 121.854559][ T7115] CPU: 1 UID: 0 PID: 7115 Comm: syz.4.310 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.854585][ T7115] Tainted: [L]=SOFTLOCKUP [ 121.854592][ T7115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.854603][ T7115] Call Trace: [ 121.854609][ T7115] [ 121.854617][ T7115] dump_stack_lvl+0x100/0x190 [ 121.854650][ T7115] should_fail_ex.cold+0x5/0xa [ 121.854677][ T7115] should_failslab+0xc2/0x120 [ 121.854700][ T7115] kmem_cache_alloc_noprof+0x92/0x6a0 [ 121.854728][ T7115] ? rcu_read_unlock+0x17/0x60 [ 121.854753][ T7115] ? ptlock_alloc+0x1f/0x70 [ 121.854779][ T7115] ptlock_alloc+0x1f/0x70 [ 121.854799][ T7115] pte_alloc_one+0x82/0x3d0 [ 121.854827][ T7115] collapse_huge_page+0xac1/0x44d0 [ 121.854885][ T7115] ? lock_acquire+0x1d1/0x380 [ 121.854909][ T7115] ? do_raw_spin_lock+0x128/0x260 [ 121.854933][ T7115] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 121.854954][ T7115] ? __thp_vma_allowable_orders+0x1de/0x1600 [ 121.854979][ T7115] ? __pfx_collapse_huge_page+0x10/0x10 [ 121.854999][ T7115] ? vm_normal_page+0x1d1/0x380 [ 121.855020][ T7115] ? __pfx_vm_normal_page+0x10/0x10 [ 121.855040][ T7115] ? find_held_lock+0x2b/0x80 [ 121.855058][ T7115] ? find_held_lock+0x2b/0x80 [ 121.855078][ T7115] ? collapse_scan_anon+0x105f/0x1ae0 [ 121.855097][ T7115] ? collapse_scan_anon+0x105f/0x1ae0 [ 121.855120][ T7115] ? rcu_is_watching+0x13/0xc0 [ 121.855151][ T7115] ? __bitmap_weight+0xd7/0x110 [ 121.855181][ T7115] collapse_anon+0x59c/0x700 [ 121.855214][ T7115] collapse_single_pmd+0x3574/0x6340 [ 121.855242][ T7115] ? __flush_work+0x73c/0xd20 [ 121.855275][ T7115] ? find_held_lock+0x2b/0x80 [ 121.855298][ T7115] ? __lru_add_drain_all+0x4a1/0x820 [ 121.855316][ T7115] ? __lru_add_drain_all+0x4a1/0x820 [ 121.855338][ T7115] ? __pfx_collapse_single_pmd+0x10/0x10 [ 121.855363][ T7115] ? __mutex_unlock_slowpath+0x35d/0x930 [ 121.855389][ T7115] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 121.855413][ T7115] ? __pfx___might_resched+0x10/0x10 [ 121.855440][ T7115] ? queue_work_on+0x11b/0x1e0 [ 121.855465][ T7115] ? lockdep_hardirqs_on+0x7d/0x110 [ 121.855488][ T7115] ? __lru_add_drain_all+0x4a6/0x820 [ 121.855511][ T7115] madvise_collapse+0x588/0xa10 [ 121.855540][ T7115] ? __pfx_madvise_collapse+0x10/0x10 [ 121.855565][ T7115] ? mas_prev_slot+0x768/0x11b0 [ 121.855598][ T7115] madvise_vma_behavior+0x10b4/0x2170 [ 121.855623][ T7115] ? __pfx_mas_prev+0x10/0x10 [ 121.855649][ T7115] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 121.855674][ T7115] ? find_vma_prev+0xd8/0x150 [ 121.855690][ T7115] ? __pfx_find_vma_prev+0x10/0x10 [ 121.855706][ T7115] ? lock_acquire+0x1d1/0x380 [ 121.855740][ T7115] madvise_walk_vmas+0x30e/0xf00 [ 121.855767][ T7115] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 121.855792][ T7115] ? __pfx_futex_wake_mark+0x10/0x10 [ 121.855816][ T7115] ? lock_acquire+0x1d1/0x380 [ 121.855843][ T7115] madvise_do_behavior+0x1ea/0x510 [ 121.855866][ T7115] ? __pfx_madvise_do_behavior+0x10/0x10 [ 121.855890][ T7115] ? down_read+0x136/0x4c0 [ 121.855926][ T7115] do_madvise+0x238/0x290 [ 121.855948][ T7115] ? __pfx_do_madvise+0x10/0x10 [ 121.855977][ T7115] ? __sys_connect+0xe4/0x170 [ 121.856010][ T7115] ? __might_fault+0xc5/0x140 [ 121.856032][ T7115] ? __might_fault+0xc5/0x140 [ 121.856058][ T7115] __ia32_sys_madvise+0xa7/0x110 [ 121.856082][ T7115] __do_fast_syscall_32+0x14b/0x8c0 [ 121.856105][ T7115] do_fast_syscall_32+0x32/0x70 [ 121.856124][ T7115] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 121.856144][ T7115] RIP: 0023:0xf73fefbc [ 121.856160][ T7115] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 121.856179][ T7115] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 00000000000000db [ 121.856199][ T7115] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600003 [ 121.856212][ T7115] RDX: 0000000000000019 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.856223][ T7115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 121.856234][ T7115] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 121.856244][ T7115] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.856269][ T7115] [ 121.886781][ T7112] kvm [7111]: vcpu0, guest rIP: 0x363 Unhandled WRMSR(0xc2) = 0x8000 [ 121.966907][ T7112] kvm [7111]: vcpu0, guest rIP: 0x363 Unhandled WRMSR(0x187) = 0x8000 [ 122.028267][ T7112] kvm [7111]: vcpu0, guest rIP: 0x363 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 122.068192][ T7112] kvm [7111]: vcpu0, guest rIP: 0x363 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 122.180435][ T7112] kvm [7111]: vcpu0, guest rIP: 0x363 Unhandled WRMSR(0xc2) = 0x8000 [ 123.260653][ T65] IPVS: starting estimator thread 0... [ 123.346897][ T7130] IPVS: using max 44 ests per chain, 105600 per kthread [ 123.427655][ T7133] IPVS: Error connecting to the multicast addr [ 123.501886][ T7136] netlink: 16 bytes leftover after parsing attributes in process `syz.3.316'. [ 123.519173][ T7138] netlink: 16 bytes leftover after parsing attributes in process `syz.4.317'. [ 123.519194][ T7138] netlink: 16 bytes leftover after parsing attributes in process `syz.4.317'. [ 123.556248][ T5869] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.556288][ T5869] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.556316][ T5869] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.556342][ T5869] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.635620][ T7140] syzkaller0: entered promiscuous mode [ 123.635634][ T7140] syzkaller0: entered allmulticast mode [ 123.901852][ T7145] syzkaller0: entered promiscuous mode [ 123.901867][ T7145] syzkaller0: entered allmulticast mode [ 123.919443][ T7145] tipc: Started in network mode [ 123.919460][ T7145] tipc: Node identity 4eb6329d933, cluster identity 4711 [ 123.919611][ T7145] tipc: Enabled bearer , priority 0 [ 123.920961][ T7144] tipc: Resetting bearer [ 123.943658][ T7144] tipc: Disabling bearer [ 124.776651][ T5899] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 124.807490][ T7155] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 124.883810][ T7155] pci 0000:00:00.0: Adding to iommu group 0 [ 124.883884][ T7154] syz_tun: entered allmulticast mode [ 124.942832][ T5899] usb 6-1: Using ep0 maxpacket: 32 [ 124.944107][ T5899] usb 6-1: New USB device found: idVendor=2c42, idProduct=16f8, bcdDevice=1e.fa [ 124.945171][ T5899] usb 6-1: config 245 has an invalid descriptor of length 0, skipping remainder of the config [ 124.945193][ T5899] usb 6-1: config 245 has 0 interfaces, different from the descriptor's value: 1 [ 124.950481][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.950502][ T5899] usb 6-1: Product: syz [ 124.950513][ T5899] usb 6-1: Manufacturer: syz [ 124.950524][ T5899] usb 6-1: SerialNumber: syz [ 124.980232][ T7155] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 125.017110][ T7155] pci 0000:00:05.0: BAR 0 [io 0xc0c0-0xc0df] [ 125.017186][ T7155] pci 0000:00:05.0: BAR 1 [mem 0xfeaf8000-0xfeaf8fff] [ 125.017402][ T7155] pci 0000:00:05.0: BAR 4 [mem 0xfe204000-0xfe207fff 64bit pref] [ 125.017579][ T7157] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 125.018910][ T7157] syzkaller0: entered promiscuous mode [ 125.018929][ T7157] syzkaller0: entered allmulticast mode [ 125.032071][ T7157] tipc: Enabled bearer , priority 0 [ 125.042744][ T7157] tipc: Resetting bearer [ 125.084202][ T7155] pci 0000:00:05.0: Adding to iommu group 5 [ 125.106717][ T7155] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 125.110243][ T7155] pci 0000:00:05.0: BAR 1 [mem 0x80000000-0x80000fff]: assigned [ 125.111691][ T7155] pci 0000:00:05.0: BAR 0 ** replaying previous printk message ** [ 125.111691][ T7155] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f]: assigned [ 125.121046][ T7155] ================================================================== [ 125.121059][ T7155] BUG: KASAN: slab-use-after-free in acpi_ns_get_attached_object+0x148/0x1b0 [ 125.121085][ T7155] Read of size 1 at addr ffff8880225c04e8 by task syz.3.323/7155 [ 125.121099][ T7155] [ 125.121110][ T7155] CPU: 3 UID: 0 PID: 7155 Comm: syz.3.323 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.121136][ T7155] Tainted: [L]=SOFTLOCKUP [ 125.121143][ T7155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.121153][ T7155] Call Trace: [ 125.121160][ T7155] [ 125.121167][ T7155] dump_stack_lvl+0x100/0x190 [ 125.121196][ T7155] print_report+0x13d/0x4b0 [ 125.121224][ T7155] ? __virt_addr_valid+0x239/0x430 [ 125.121245][ T7155] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 125.121263][ T7155] kasan_report+0xdf/0x1c0 [ 125.121285][ T7155] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 125.121308][ T7155] acpi_ns_get_attached_object+0x148/0x1b0 [ 125.121328][ T7155] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 125.121355][ T7155] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 125.121383][ T7155] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 125.121401][ T7155] ? acpi_ds_create_operand+0x267/0xc20 [ 125.121421][ T7155] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 125.121438][ T7155] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 125.121453][ T7155] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 125.121475][ T7155] ? __asan_memset+0x23/0x50 [ 125.121498][ T7155] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 125.121525][ T7155] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 125.121549][ T7155] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 125.121573][ T7155] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 125.121596][ T7155] ? acpi_ut_trace_ptr+0x181/0x2a0 [ 125.121640][ T7155] acpi_ds_exec_end_op+0xb78/0x1e60 [ 125.121666][ T7155] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 125.121688][ T7155] acpi_ps_parse_loop+0x5e1/0x26e0 [ 125.121714][ T7155] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 125.121736][ T7155] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 125.121763][ T7155] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 125.121788][ T7155] ? acpi_ut_create_thread_state+0x6d/0x170 [ 125.121814][ T7155] acpi_ps_parse_aml+0x81e/0x1120 [ 125.121840][ T7155] acpi_ps_execute_method+0x5c4/0xe90 [ 125.121869][ T7155] acpi_ns_evaluate+0x640/0x1670 [ 125.121898][ T7155] acpi_ut_evaluate_object+0xf7/0x610 [ 125.121927][ T7155] acpi_rs_get_prt_method_data+0xa0/0x150 [ 125.121945][ T7155] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 125.121962][ T7155] ? acpi_ut_status_exit+0x111/0x1c0 [ 125.121987][ T7155] ? acpi_rs_validate_parameters+0x104/0x210 [ 125.122006][ T7155] acpi_get_irq_routing_table+0xb8/0x140 [ 125.122024][ T7155] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 125.122043][ T7155] ? do_raw_spin_lock+0x128/0x260 [ 125.122066][ T7155] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 125.122085][ T7155] ? mark_held_locks+0x40/0x70 [ 125.122104][ T7155] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 125.122122][ T7155] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 125.122151][ T7155] ? pci_conf1_read+0x138/0x240 [ 125.122172][ T7155] acpi_pci_irq_lookup+0x8e/0x6b0 [ 125.122189][ T7155] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 125.122206][ T7155] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 125.122234][ T7155] ? __driver_probe_device+0x210/0x460 [ 125.122260][ T7155] ? __device_attach_driver+0x1df/0x320 [ 125.122285][ T7155] ? bus_for_each_drv+0x159/0x1e0 [ 125.122303][ T7155] ? __device_attach+0x1e4/0x4c0 [ 125.122326][ T7155] acpi_pci_irq_enable+0x1f5/0x6f0 [ 125.122352][ T7155] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 125.122375][ T7155] ? __pfx_pci_enable_resources+0x10/0x10 [ 125.122396][ T7155] ? __pfx___pci_set_power_state+0x10/0x10 [ 125.122424][ T7155] pcibios_enable_device+0xb6/0xe0 [ 125.122440][ T7155] do_pci_enable_device+0x21f/0x4a0 [ 125.122468][ T7155] ? __pfx_do_pci_enable_device+0x10/0x10 [ 125.122494][ T7155] ? pci_update_current_state+0x102/0x240 [ 125.122519][ T7155] ? __pfx_pci_update_current_state+0x10/0x10 [ 125.122543][ T7155] ? ksm_scan_thread+0x34e0/0x71e0 [ 125.122567][ T7155] ? __kasan_kmalloc+0xaa/0xb0 [ 125.122585][ T7155] pci_enable_device_flags+0x27c/0x370 [ 125.122604][ T7155] ? __pfx_virtio_pci_probe+0x10/0x10 [ 125.122622][ T7155] virtio_pci_probe+0x1d5/0x410 [ 125.122639][ T7155] local_pci_probe+0xdd/0x1b0 [ 125.122663][ T7155] pci_call_probe+0x176/0x800 [ 125.122686][ T7155] ? pci_match_device+0x147/0x7d0 [ 125.122711][ T7155] ? __pfx_pci_call_probe+0x10/0x10 [ 125.122739][ T7155] ? __pfx_pci_match_device+0x10/0x10 [ 125.122761][ T7155] ? pci_find_host_bridge+0x3c/0x80 [ 125.122792][ T7155] pci_device_probe+0x25b/0x400 [ 125.122817][ T7155] ? __pfx_pci_device_probe+0x10/0x10 [ 125.122843][ T7155] ? sysfs_create_link+0x68/0xc0 [ 125.122866][ T7155] ? __pfx_pci_device_probe+0x10/0x10 [ 125.122891][ T7155] really_probe+0x241/0xa60 [ 125.122914][ T7155] __driver_probe_device+0x210/0x460 [ 125.122936][ T7155] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 125.122966][ T7155] driver_probe_device+0x4a/0x140 [ 125.122987][ T7155] __device_attach_driver+0x1df/0x320 [ 125.123011][ T7155] ? __pfx___device_attach_driver+0x10/0x10 [ 125.123036][ T7155] bus_for_each_drv+0x159/0x1e0 [ 125.123054][ T7155] ? __pfx_bus_for_each_drv+0x10/0x10 [ 125.123072][ T7155] ? lockdep_hardirqs_on+0x7d/0x110 [ 125.123091][ T7155] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 125.123119][ T7155] __device_attach+0x1e4/0x4c0 [ 125.123142][ T7155] ? __pfx___device_attach+0x10/0x10 [ 125.123165][ T7155] ? do_raw_spin_unlock+0x145/0x1e0 [ 125.123188][ T7155] device_initial_probe+0xaf/0xf0 [ 125.123213][ T7155] pci_bus_add_device+0xc5/0x100 [ 125.123232][ T7155] pci_bus_add_devices+0x9a/0x1f0 [ 125.123254][ T7155] pci_rescan_bus+0x2a/0x40 [ 125.123278][ T7155] rescan_store+0xfb/0x130 [ 125.123302][ T7155] ? __pfx_rescan_store+0x10/0x10 [ 125.123328][ T7155] ? sysfs_file_kobj+0xe4/0x290 [ 125.123358][ T7155] ? __pfx_rescan_store+0x10/0x10 [ 125.123383][ T7155] bus_attr_store+0x74/0xb0 [ 125.123400][ T7155] ? __pfx_bus_attr_store+0x10/0x10 [ 125.123418][ T7155] sysfs_kf_write+0xf2/0x150 [ 125.123441][ T7155] kernfs_fop_write_iter+0x3e0/0x5f0 [ 125.123458][ T7155] ? __pfx_sysfs_kf_write+0x10/0x10 [ 125.123478][ T7155] vfs_write+0x6af/0x1050 [ 125.123496][ T7155] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 125.123515][ T7155] ? __pfx_vfs_write+0x10/0x10 [ 125.123530][ T7155] ? find_held_lock+0x2b/0x80 [ 125.123560][ T7155] ksys_write+0x12a/0x250 [ 125.123576][ T7155] ? __pfx_ksys_write+0x10/0x10 [ 125.123597][ T7155] __do_fast_syscall_32+0x14b/0x8c0 [ 125.123620][ T7155] do_fast_syscall_32+0x32/0x70 [ 125.123645][ T7155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 125.123668][ T7155] RIP: 0023:0xf7f25fbc [ 125.123683][ T7155] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 125.123702][ T7155] RSP: 002b:00000000f53b550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 125.123720][ T7155] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000300 [ 125.123732][ T7155] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.123743][ T7155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 125.123754][ T7155] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 125.123764][ T7155] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 125.123781][ T7155] [ 125.123787][ T7155] [ 125.123790][ T7155] Allocated by task 1: [ 125.123797][ T7155] kasan_save_stack+0x30/0x50 [ 125.123812][ T7155] kasan_save_track+0x14/0x30 [ 125.123826][ T7155] __kasan_slab_alloc+0x89/0x90 [ 125.123843][ T7155] kmem_cache_alloc_noprof+0x269/0x6a0 [ 125.123865][ T7155] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 125.123883][ T7155] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 125.123899][ T7155] acpi_ds_build_internal_object+0x173/0x790 [ 125.123916][ T7155] acpi_ds_create_node+0xe3/0x280 [ 125.123932][ T7155] acpi_ds_exec_end_op+0x10cf/0x1e60 [ 125.123949][ T7155] acpi_ps_parse_loop+0x5e1/0x26e0 [ 125.123969][ T7155] acpi_ps_parse_aml+0x81e/0x1120 [ 125.123990][ T7155] acpi_ps_execute_table+0x393/0x500 [ 125.124013][ T7155] acpi_ns_execute_table+0x596/0x970 [ 125.124029][ T7155] acpi_ns_parse_table+0xcb/0x160 [ 125.124043][ T7155] acpi_ns_load_table+0xc9/0x490 [ 125.124065][ T7155] acpi_tb_load_namespace+0x2b0/0x8f0 [ 125.124084][ T7155] acpi_load_tables+0x89/0x160 [ 125.124101][ T7155] acpi_init+0x146/0x840 [ 125.124122][ T7155] do_one_initcall+0x11c/0x6f0 [ 125.124139][ T7155] kernel_init_freeable+0x6ea/0x7b0 [ 125.124158][ T7155] kernel_init+0x21/0x1e0 [ 125.124178][ T7155] ret_from_fork+0x730/0xd60 [ 125.124195][ T7155] ret_from_fork_asm+0x1a/0x30 [ 125.124212][ T7155] [ 125.124215][ T7155] Freed by task 5954: [ 125.124223][ T7155] kasan_save_stack+0x30/0x50 [ 125.124237][ T7155] kasan_save_track+0x14/0x30 [ 125.124252][ T7155] kasan_save_free_info+0x3b/0x70 [ 125.124274][ T7155] __kasan_slab_free+0x5f/0x80 [ 125.124291][ T7155] kmem_cache_free+0x127/0x6c0 [ 125.124312][ T7155] acpi_os_release_object+0x1c/0x30 [ 125.124343][ T7155] acpi_ut_delete_object_desc+0xea/0x130 [ 125.124362][ T7155] acpi_ut_update_ref_count.part.0+0x510/0x2250 [ 125.124388][ T7155] acpi_ut_update_object_reference+0x5f9/0x800 [ 125.124414][ T7155] acpi_ut_remove_reference+0x192/0x1d0 [ 125.124439][ T7155] acpi_rs_get_prt_method_data+0xcd/0x150 [ 125.124454][ T7155] acpi_get_irq_routing_table+0xb8/0x140 [ 125.124470][ T7155] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 125.124485][ T7155] acpi_pci_irq_lookup+0x8e/0x6b0 [ 125.124499][ T7155] acpi_pci_irq_disable+0x1a8/0x360 [ 125.124513][ T7155] pcibios_disable_device+0x89/0xb0 [ 125.124528][ T7155] do_pci_disable_device+0x9f/0x100 [ 125.124553][ T7155] pci_disable_device+0x130/0x270 [ 125.124577][ T7155] virtio_pci_remove+0xcf/0x110 [ 125.124600][ T7155] pci_device_remove+0xb2/0x1d0 [ 125.124620][ T7155] device_remove+0xcb/0x180 [ 125.124640][ T7155] device_release_driver_internal+0x441/0x610 [ 125.124661][ T7155] pci_stop_bus_device+0x120/0x160 [ 125.124685][ T7155] pci_stop_and_remove_bus_device+0x58/0xa0 [ 125.124710][ T7155] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 125.124733][ T7155] remove_store+0x123/0x140 [ 125.124749][ T7155] dev_attr_store+0x58/0x80 [ 125.124771][ T7155] sysfs_kf_write+0xf2/0x150 [ 125.124816][ T7155] kernfs_fop_write_iter+0x3e0/0x5f0 [ 125.124832][ T7155] vfs_write+0x6af/0x1050 [ 125.124845][ T7155] ksys_write+0x12a/0x250 [ 125.124860][ T7155] __do_fast_syscall_32+0x14b/0x8c0 [ 125.124878][ T7155] do_fast_syscall_32+0x32/0x70 [ 125.124896][ T7155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 125.124916][ T7155] [ 125.124920][ T7155] The buggy address belongs to the object at ffff8880225c04e0 [ 125.124920][ T7155] which belongs to the cache Acpi-Operand of size 72 [ 125.124935][ T7155] The buggy address is located 8 bytes inside of [ 125.124935][ T7155] freed 72-byte region [ffff8880225c04e0, ffff8880225c0528) [ 125.124951][ T7155] [ 125.124956][ T7155] The buggy address belongs to the physical page: [ 125.124963][ T7155] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880225c0f70 pfn:0x225c0 [ 125.124981][ T7155] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 125.124998][ T7155] page_type: f5(slab) [ 125.125011][ T7155] raw: 00fff00000000200 ffff88801d44da40 ffffea00008a8350 ffffea0000897c10 [ 125.125025][ T7155] raw: ffff8880225c0f70 0000000200270006 00000000f5000000 0000000000000000 [ 125.125034][ T7155] page dumped because: kasan: bad access detected [ 125.125043][ T7155] page_owner tracks the page as allocated [ 125.125048][ T7155] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2635601770 [ 125.125071][ T7155] post_alloc_hook+0xfd/0x120 [ 125.125092][ T7155] get_page_from_freelist+0x1113/0x35e0 [ 125.125113][ T7155] __alloc_frozen_pages_noprof+0x2bd/0x3280 [ 125.125136][ T7155] new_slab+0xb1/0x6d0 [ 125.125156][ T7155] refill_objects+0xe3/0x410 [ 125.125176][ T7155] __pcs_replace_empty_main+0x35e/0x650 [ 125.125195][ T7155] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 125.125220][ T7155] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 125.125240][ T7155] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 125.125261][ T7155] acpi_ds_build_internal_package_obj+0xa8c/0xe60 [ 125.125282][ T7155] acpi_ds_eval_data_object_operands+0x2fd/0x640 [ 125.125304][ T7155] acpi_ds_exec_end_op+0xe41/0x1e60 [ 125.125324][ T7155] acpi_ps_parse_loop+0x5e1/0x26e0 [ 125.125351][ T7155] acpi_ps_parse_aml+0x81e/0x1120 [ 125.125372][ T7155] acpi_ps_execute_table+0x393/0x500 [ 125.125394][ T7155] acpi_ns_execute_table+0x596/0x970 [ 125.125410][ T7155] page_owner free stack trace missing [ 125.125415][ T7155] [ 125.125418][ T7155] Memory state around the buggy address: [ 125.125426][ T7155] ffff8880225c0380: fb fc fc fc fc 00 00 00 00 00 00 00 00 00 fc fc [ 125.125438][ T7155] ffff8880225c0400: fc fc fa fb fb fb fb fb fb fb fb fc fc fc fc fa [ 125.125449][ T7155] >ffff8880225c0480: fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb [ 125.125458][ T7155] ^ [ 125.125467][ T7155] ffff8880225c0500: fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb [ 125.125479][ T7155] ffff8880225c0580: fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb fc [ 125.125488][ T7155] ================================================================== [ 125.125553][ T7155] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 125.667329][ T7155] CPU: 3 UID: 0 PID: 7155 Comm: syz.3.323 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.671838][ T7155] Tainted: [L]=SOFTLOCKUP [ 125.673669][ T7155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.677788][ T7155] Call Trace: [ 125.679202][ T7155] [ 125.680465][ T7155] dump_stack_lvl+0x100/0x190 [ 125.682492][ T7155] vpanic+0x2dc/0x6f8 [ 125.684194][ T7155] panic+0xd1/0xe0 [ 125.685811][ T7155] ? __pfx_panic+0x10/0x10 [ 125.687705][ T7155] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 125.690212][ T7155] ? preempt_schedule+0x57/0xd0 [ 125.692286][ T7155] check_panic_on_warn.cold+0x19/0x34 [ 125.694582][ T7155] end_report.part.0+0x3a/0x90 [ 125.696634][ T7155] kasan_report.cold+0xe/0x18 [ 125.698669][ T7155] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 125.701168][ T7155] acpi_ns_get_attached_object+0x148/0x1b0 [ 125.703638][ T7155] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 125.706140][ T7155] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 125.708300][ T7155] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 125.711026][ T7155] ? acpi_ds_create_operand+0x267/0xc20 [ 125.713374][ T7155] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 125.715681][ T7155] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 125.718272][ T7155] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 125.720400][ T7155] ? __asan_memset+0x23/0x50 [ 125.722374][ T7155] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 125.724860][ T7155] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 125.727261][ T7155] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 125.729898][ T7155] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 125.732337][ T7155] ? acpi_ut_trace_ptr+0x181/0x2a0 [ 125.734441][ T7155] acpi_ds_exec_end_op+0xb78/0x1e60 [ 125.736586][ T7155] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 125.738927][ T7155] acpi_ps_parse_loop+0x5e1/0x26e0 [ 125.741092][ T7155] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 125.743432][ T7155] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 125.745784][ T7155] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 125.748345][ T7155] ? acpi_ut_create_thread_state+0x6d/0x170 [ 125.750833][ T7155] acpi_ps_parse_aml+0x81e/0x1120 [ 125.752961][ T7155] acpi_ps_execute_method+0x5c4/0xe90 [ 125.755212][ T7155] acpi_ns_evaluate+0x640/0x1670 [ 125.757340][ T7155] acpi_ut_evaluate_object+0xf7/0x610 [ 125.759574][ T7155] acpi_rs_get_prt_method_data+0xa0/0x150 [ 125.761903][ T7155] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 125.764586][ T7155] ? acpi_ut_status_exit+0x111/0x1c0 [ 125.766794][ T7155] ? acpi_rs_validate_parameters+0x104/0x210 [ 125.769321][ T7155] acpi_get_irq_routing_table+0xb8/0x140 [ 125.771660][ T7155] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 125.774295][ T7155] ? do_raw_spin_lock+0x128/0x260 [ 125.776432][ T7155] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 125.778885][ T7155] ? mark_held_locks+0x40/0x70 [ 125.780899][ T7155] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 125.783518][ T7155] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 125.785957][ T7155] ? pci_conf1_read+0x138/0x240 [ 125.788010][ T7155] acpi_pci_irq_lookup+0x8e/0x6b0 [ 125.790118][ T7155] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 125.792454][ T7155] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 125.795012][ T7155] ? __driver_probe_device+0x210/0x460 [ 125.797343][ T7155] ? __device_attach_driver+0x1df/0x320 [ 125.799656][ T7155] ? bus_for_each_drv+0x159/0x1e0 [ 125.801771][ T7155] ? __device_attach+0x1e4/0x4c0 [ 125.803753][ T7155] acpi_pci_irq_enable+0x1f5/0x6f0 [ 125.805918][ T7155] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 125.808184][ T7155] ? __pfx_pci_enable_resources+0x10/0x10 [ 125.810582][ T7155] ? __pfx___pci_set_power_state+0x10/0x10 [ 125.812989][ T7155] pcibios_enable_device+0xb6/0xe0 [ 125.815129][ T7155] do_pci_enable_device+0x21f/0x4a0 [ 125.817339][ T7155] ? __pfx_do_pci_enable_device+0x10/0x10 [ 125.819715][ T7155] ? pci_update_current_state+0x102/0x240 [ 125.821955][ T7155] ? __pfx_pci_update_current_state+0x10/0x10 [ 125.824464][ T7155] ? ksm_scan_thread+0x34e0/0x71e0 [ 125.826612][ T7155] ? __kasan_kmalloc+0xaa/0xb0 [ 125.828664][ T7155] pci_enable_device_flags+0x27c/0x370 [ 125.830962][ T7155] ? __pfx_virtio_pci_probe+0x10/0x10 [ 125.833212][ T7155] virtio_pci_probe+0x1d5/0x410 [ 125.835281][ T7155] local_pci_probe+0xdd/0x1b0 [ 125.837299][ T7155] pci_call_probe+0x176/0x800 [ 125.839279][ T7155] ? pci_match_device+0x147/0x7d0 [ 125.841409][ T7155] ? __pfx_pci_call_probe+0x10/0x10 [ 125.843579][ T7155] ? __pfx_pci_match_device+0x10/0x10 [ 125.845829][ T7155] ? pci_find_host_bridge+0x3c/0x80 [ 125.848029][ T7155] pci_device_probe+0x25b/0x400 [ 125.850101][ T7155] ? __pfx_pci_device_probe+0x10/0x10 [ 125.852363][ T7155] ? sysfs_create_link+0x68/0xc0 [ 125.854471][ T7155] ? __pfx_pci_device_probe+0x10/0x10 [ 125.856725][ T7155] really_probe+0x241/0xa60 [ 125.858674][ T7155] __driver_probe_device+0x210/0x460 [ 125.860892][ T7155] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 125.863320][ T7155] driver_probe_device+0x4a/0x140 [ 125.865468][ T7155] __device_attach_driver+0x1df/0x320 [ 125.867727][ T7155] ? __pfx___device_attach_driver+0x10/0x10 [ 125.870237][ T7155] bus_for_each_drv+0x159/0x1e0 [ 125.872259][ T7155] ? __pfx_bus_for_each_drv+0x10/0x10 [ 125.874511][ T7155] ? lockdep_hardirqs_on+0x7d/0x110 [ 125.876721][ T7155] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 125.879211][ T7155] __device_attach+0x1e4/0x4c0 [ 125.881248][ T7155] ? __pfx___device_attach+0x10/0x10 [ 125.883461][ T7155] ? do_raw_spin_unlock+0x145/0x1e0 [ 125.885653][ T7155] device_initial_probe+0xaf/0xf0 [ 125.887769][ T7155] pci_bus_add_device+0xc5/0x100 [ 125.889859][ T7155] pci_bus_add_devices+0x9a/0x1f0 [ 125.891959][ T7155] pci_rescan_bus+0x2a/0x40 [ 125.893922][ T7155] rescan_store+0xfb/0x130 [ 125.895723][ T7155] ? __pfx_rescan_store+0x10/0x10 [ 125.897906][ T7155] ? sysfs_file_kobj+0xe4/0x290 [ 125.899953][ T7155] ? __pfx_rescan_store+0x10/0x10 [ 125.902086][ T7155] bus_attr_store+0x74/0xb0 [ 125.903968][ T7155] ? __pfx_bus_attr_store+0x10/0x10 [ 125.906162][ T7155] sysfs_kf_write+0xf2/0x150 [ 125.908156][ T7155] kernfs_fop_write_iter+0x3e0/0x5f0 [ 125.910405][ T7155] ? __pfx_sysfs_kf_write+0x10/0x10 [ 125.912592][ T7155] vfs_write+0x6af/0x1050 [ 125.914409][ T7155] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 125.916833][ T7155] ? __pfx_vfs_write+0x10/0x10 [ 125.918832][ T7155] ? find_held_lock+0x2b/0x80 [ 125.920861][ T7155] ksys_write+0x12a/0x250 [ 125.922842][ T7155] ? __pfx_ksys_write+0x10/0x10 [ 125.924858][ T7155] __do_fast_syscall_32+0x14b/0x8c0 [ 125.927040][ T7155] do_fast_syscall_32+0x32/0x70 [ 125.929109][ T7155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 125.931734][ T7155] RIP: 0023:0xf7f25fbc [ 125.933459][ T7155] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 125.941481][ T7155] RSP: 002b:00000000f53b550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 125.945137][ T7155] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000300 [ 125.948449][ T7155] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.951773][ T7155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 125.955041][ T7155] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 125.958473][ T7155] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 125.961851][ T7155] [ 125.964092][ T7155] Kernel Offset: disabled [ 125.965943][ T7155] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:02:47 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000002 RDX=ffff88801dfb0000 RSI=ffffffff820118be RDI=0000000000000005 RBP=ffffc9000044fcd8 RSP=ffffc9000044fbc0 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff926ab05f R11=ffff88802b134120 R12=ffff88802ae3dc00 R13=ffffed10055c7b81 R14=ffff88802ae3dc08 R15=0000000000000001 RIP=ffffffff820118c0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095283000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8fd84f82d8 CR3=000000006da81000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=fffffbfff1fcee2c RBX=fffffbfff1fcee2d RCX=ffffffff81c959ae RDX=0000000000000001 RSI=0000000000000004 RDI=ffffffff8fe77160 RBP=fffffbfff1fcee2c RSP=ffffc900006af920 R8 =0000000000000000 R9 =fffffbfff1fcee2c R10=ffffffff8fe77163 R11=3030303020696370 R12=ffffffff90e08ec0 R13=ffffc900006afda8 R14=0000000000000000 R15=ffffc900006afdb4 RIP=ffffffff8286a189 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095383000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f445f334 CR3=0000000069cd4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000001 RDX=ffff888040b58000 RSI=ffffffff8200ee2e RDI=0000000000000005 RBP=ffff88802b1443a0 RSP=ffffc9000224ef10 R8 =0000000000000000 R9 =0000000000000001 R10=ffff88802b0241c7 R11=0000000000000000 R12=ffffed100816b2b3 R13=0000000000000003 R14=ffffed1005628875 R15=0000000000000001 RIP=ffffffff8200ee34 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095483000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000031be6ff8 CR3=000000005672c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c034f5 RDI=ffffffff9cf36f60 RBP=ffffffff9cf36f20 RSP=ffffc90003b96520 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=0000000035313754 R12=0000000000000000 R13=0000000000000031 R14=0000000000000003 R15=ffffc90003b96838 RIP=ffffffff85c0351f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888095583000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8fd84f82d8 CR3=000000006da81000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010020200 Opmask01=0000000000000000 Opmask02=0000000001000037 Opmask03=0000000000000000 Opmask04=00000000ffffff7f Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff0f0e0d 0c0b0a0908070605 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559214903170 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d005d392d305b2a 6b6c62006963703d ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 000000000000ff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fd8952c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000 0000000000000000 0000559700696370 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d005d392d305b2a 6b6c62006963703d 6d65747379736275 732d2d2062647768 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4d005d190d105b0a 4b4c42004943501d 4d45545359534255 530d0d0042445748 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559214906ab0 0000559214906af0 000055921490c970 000055921490c1b0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005592149198e0 00005592149028c0 00005592148f25e0 0000559214912510 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055921490af60 00005592149086f0 0000559214908540 00005592148fb3d0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559214917460 00005592148f2340 0000559214900280 00005592148fe4a0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000