last executing test programs: 1m31.610845841s ago: executing program 0 (id=757): creat(&(0x7f0000000100)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f00000009c0), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000a80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002ac0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002b40)="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", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004c00)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000004c80)=0x0) io_submit(r3, 0x2, &(0x7f0000004cc0)=[&(0x7f0000004d00)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f0000004d40)='!', 0xffffff49, 0x3000000000000500}]) dup3(r2, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) inotify_init1(0x800) 1m31.279519381s ago: executing program 0 (id=763): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x44, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_a, @device_a, @random="a7e97e5efc56", {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x5}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m31.180906927s ago: executing program 0 (id=766): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000003c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000440)=@attr_riscv64=@attr_aplic={0x0, 0x1, @any=0x7fffffff, &(0x7f0000000400)}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x24}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0x8001) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(0x0, 0x0) timerfd_create(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='trans=rdma,') socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$apparmor_exec(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='stack :'], 0xe4) 1m30.102920809s ago: executing program 0 (id=771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x81c}]}]}, 0x50}}, 0x0) 1m29.919272135s ago: executing program 0 (id=773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20040054) 1m29.447900518s ago: executing program 0 (id=776): lchown(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x208, 0x2e0, 0x2e0, 0x208, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0xf0, 0x118, 0x0, {0x1000000}, [@common=@dst={{0x48}, {0x7fff, 0x3, 0x7de91c6f22c9938, [0x9, 0x1ff, 0x87e, 0x2a, 0xafd4, 0x9, 0xa, 0x7, 0x6, 0x1000, 0x6, 0x200, 0x9, 0x0, 0x7, 0x3], 0xa}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x1, 0x1, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_io_uring_setup(0x112, &(0x7f00000000c0)={0x0, 0x5a87, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000800)='n', 0x1) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000880), 0x185002, 0x0) dup(r2) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000980)={&(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) 1m14.397072107s ago: executing program 32 (id=776): lchown(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x208, 0x2e0, 0x2e0, 0x208, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0xf0, 0x118, 0x0, {0x1000000}, [@common=@dst={{0x48}, {0x7fff, 0x3, 0x7de91c6f22c9938, [0x9, 0x1ff, 0x87e, 0x2a, 0xafd4, 0x9, 0xa, 0x7, 0x6, 0x1000, 0x6, 0x200, 0x9, 0x0, 0x7, 0x3], 0xa}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x1, 0x1, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = syz_io_uring_setup(0x112, &(0x7f00000000c0)={0x0, 0x5a87, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000800)='n', 0x1) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000880), 0x185002, 0x0) dup(r2) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000980)={&(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) 50.151678288s ago: executing program 3 (id=1062): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x1, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000620afcff0000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf61000000000000bfa300000000000007030000fcffffffb7040000000000008500000046000000b70000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@cgroup=r2, r1, 0x3, 0x0, 0x0, @void, @value=0x0}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000640)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000680)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000006c0), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) 50.1514459s ago: executing program 3 (id=1063): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, 0x0, 0x0) 50.071706887s ago: executing program 3 (id=1064): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xec}]}}]}, 0x3c}}, 0x4000080) bind$packet(r0, &(0x7f0000000600)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000640)="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", 0x112, 0x880, 0x0, 0x0) 50.011164405s ago: executing program 3 (id=1065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x5001}) write$tun(r0, &(0x7f0000000140)={@void, @val={0x1, 0x1, 0x1c, 0x5, 0x14, 0x6}, @ipv4=@igmp={{0x8, 0x4, 0x3, 0x8, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @broadcast, {[@timestamp={0x44, 0xc, 0x14, 0x0, 0x6, [0x8, 0x5f]}]}}, {0x11, 0x8, 0x0, @private=0xa010101}}}, 0x32) 49.911729054s ago: executing program 3 (id=1066): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x10, 0x1411, 0x923, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4040004) 49.911558466s ago: executing program 3 (id=1067): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000004fc0)={0x0, 0x0, &(0x7f0000005100)={&(0x7f0000005140)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4080}, 0x10000800) r0 = syz_open_dev$dri(&(0x7f0000004e00), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000004e40)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000004e80)={&(0x7f0000004ec0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000004f00)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000004f40)={&(0x7f0000004f80)=[0x0, 0x0, 0x0], &(0x7f0000004fc0), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000005000)={0x401, 0x1, &(0x7f0000005040)=[r2], &(0x7f0000005080)=[0x3], &(0x7f00000050c0)=[r3], &(0x7f0000005100), 0x0, 0x2}) 45.511861093s ago: executing program 2 (id=1104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) clock_adjtime(0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x2}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000002f00)={'pim6reg1\x00', @remote}) 45.511739034s ago: executing program 2 (id=1105): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x3401) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f00000001c0), 0x800048, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 44.591890918s ago: executing program 2 (id=1107): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000380)="21000000470010aaaaaaaaaa0003000000000000000000000000000000030000000000000000000000000000000300"/57, 0x39) 44.591654329s ago: executing program 2 (id=1108): r0 = syz_open_dev$video(&(0x7f00000001c0), 0x485, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000800), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000840)=0x2) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000900)={0x9, 0x0, 0x1, {0x7, 0x0, 0x9, 0xffff7ffb}}) 44.511722504s ago: executing program 2 (id=1109): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) pipe(0x0) getsockopt$inet_mptcp_buf(r0, 0x6, 0x1e, 0x0, 0x0) 44.511309549s ago: executing program 2 (id=1111): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) creat(&(0x7f0000000140)='./proc\x00', 0x1) write(r0, &(0x7f0000000100)='100', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan1\x00'}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=ANY=[@ANYBLOB="700000006d79b91000"], 0x70}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000001200), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000012c0)={0x0, 0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0, 0x0, r4}) 34.831734406s ago: executing program 33 (id=1067): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000004fc0)={0x0, 0x0, &(0x7f0000005100)={&(0x7f0000005140)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4080}, 0x10000800) r0 = syz_open_dev$dri(&(0x7f0000004e00), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000004e40)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000004e80)={&(0x7f0000004ec0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000004f00)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000004f40)={&(0x7f0000004f80)=[0x0, 0x0, 0x0], &(0x7f0000004fc0), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000005000)={0x401, 0x1, &(0x7f0000005040)=[r2], &(0x7f0000005080)=[0x3], &(0x7f00000050c0)=[r3], &(0x7f0000005100), 0x0, 0x2}) 29.351378659s ago: executing program 34 (id=1111): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) creat(&(0x7f0000000140)='./proc\x00', 0x1) write(r0, &(0x7f0000000100)='100', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vlan1\x00'}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=ANY=[@ANYBLOB="700000006d79b91000"], 0x70}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000001200), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000012c0)={0x0, 0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0, 0x0, r4}) 2.715566277s ago: executing program 1 (id=1680): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001600)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000001640)="33000000080006010100fff400a0", 0xe) 2.71444344s ago: executing program 1 (id=1681): syz_emit_vhci(&(0x7f0000000800)=ANY=[], 0xff) 2.200296658s ago: executing program 4 (id=1683): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x5) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000005c0)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000640)={0x2, 0x15, @loopback}, 0x10) write(r1, &(0x7f0000000680)='PASV\r\n', 0x6) r2 = accept4(r0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000800)='227 E', 0x5) 2.200215081s ago: executing program 1 (id=1684): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 2.12036365s ago: executing program 1 (id=1685): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x100}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000300)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xfffffffffffffdbc, &(0x7f0000000380)=@new_dev={0x2, 0x682, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc5}}}, &(0x7f00000003c0)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000000400), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000440)={0x0, 0x3e0e, 0x1000, 0x3, 0x28e, 0x0, r1}, &(0x7f0000006440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x200, 0x2, 0x1af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6008, 0x2, 0x0, 0x32d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x1, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, 0x0, &(0x7f0000006740)) 2.119656784s ago: executing program 1 (id=1686): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x44, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc6}]}, 0x44}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000700)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r6 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x8922, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x4000090) 1.240091558s ago: executing program 4 (id=1694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYRES16=r1, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1.226443961s ago: executing program 1 (id=1695): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./dev\x00', 0x1c0) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./debug\x00', &(0x7f0000000640)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/dynamic_debug/control\x00', 0x2, 0x0) r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0xa, 0x43, 0x8, 0x8, 0x6737, 0x1, 0x9180, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8e, 0x5, 0x10, 0x7, "", [{{0x9, 0x4, 0xfb, 0xb, 0x2, 0x82, 0xd2, 0xd2, 0x0, [], [{{0x9, 0x5, 0x9f, 0x2, 0x40, 0x7, 0x0, 0x7}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000180)={0x0, 0xe, 0x5, "acdb955c0c"}, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/ttyUSB0\x00', 0x2, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000580)=0x7fff) 1.204862935s ago: executing program 4 (id=1696): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009b80)=@newtfilter={0x2978, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2948, 0x2, [@TCA_CGROUP_EMATCHES={0x1ec, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x1ff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x1}, {0x9, 0x9, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0x7}, {0xb, 0x60, 0x1}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x198, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xcc, 0x3, 0x0, 0x0, {{0x6, 0x0, 0x6}, "bb949062dbbdc2bac44e28b16d3db753b8d3bb9abd7d162a53466da118860f9f4ea1875d96136e6f833c42444576a511b23cbd7ebbf3fbf76126a4fd1676d385e02092ae85bd1bf28cf79425df6c64f56f5c365aa68db06eed04fd4cd0842ce614de1fcc66af66e713e787d7e0bf02714084028b134c6dc3a99858de79523cc36cc39298b4a6194c0d3ffb130e8e6e9a856adfee0055d40eb1f4e8f9c429590b2b80f726a8c53f3582f4642e11d622edef967ffdbaa8344b0ef646079b5ecd"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7fff, 0x3, 0x867}, {0x4, 0x6, 0x4, 0x8000}}}, @TCF_EM_IPT={0xac, 0x2, 0x0, 0x0, {{0x1, 0x9, 0x78c}, [@TCA_EM_IPT_MATCH_DATA={0x95, 0x5, "99cca969ec63820efd751cb1b7bb0c0efdb8bb49ecbf75905f0a24650a0ebf4c65e5494c3a72ce18b59139aef1ad9fbd94846e230515edea185b45d7d318c09f4e35f2eaedadb8b1013b1b309b6edd9ef842714c73f7492d6127d19c2dec88205192e4c6b8d302267eab072a2b0b2939e83ac3fc7d5c382c72fc71b751ba548e741c922da77ea9bea9508f303ec5384d28"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf5}}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_CGROUP_EMATCHES={0x220, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4b0}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x20c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xac, 0x1, 0x0, 0x0, {{0x4, 0x0, 0x8}, "e2afe2b11afff5a2137a7a31a8f7bf3f347ec0f2c86e8e86c4d30e589a2024863e9a21673fadac2609105c9d10153f85de6d6a4e931c12b3ea877c47108a39063dde26b9cf6602730d4d4f19c7120d0a43aab6534fac124d833da918e0969be3ba8aa24f18b0a072b507281bb81dd8b9156c65f4820c350315f23a02372504efb116be802c8efc5d3b10aa48a2ec796acbd139030c964f8517bde1fcca32be"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x4007}, {{0x0, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x6}, {0x7f, 0x9, 0x4, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xb98, 0x2, 0x2}, {0x8, 0x5, 0x0, "a9bc9d17bf"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x8}, {0x9, 0x1d55, 0x81, 0x81}}}, @TCF_EM_CONTAINER={0xf8, 0x3, 0x0, 0x0, {{0x3, 0x0, 0x5}, "4e0cdeefeb0c19dcca9a71a8e0d9d0661bc5ce9b1f0332e109364f030f70440285037ce433fbab737992629e7c7310e6b06447b60d50574a3fd2ab2cc445bba3a6e477442a973f4fbdb90392f9b4e463419413b0c19747235fcc979861f3a8a00e61dc94ae084165a1b203da69d91f6ae5dd441a2a52078ba960bb2e32aeeb697206186243acc6562a78d4d4739eabc5dcb03050f3d465b77e4bfa227e969f8aaaca75046470d5e0095d809792203733489986de8060bd895ce0769894233ef33212dbfe4f65c48ec6cce8fe96ee096fb6c9fff8e55fb66808b58fb007ad49fbfa4245af29fe7181d1"}}]}]}, @TCA_CGROUP_EMATCHES={0x117c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1134, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x8c, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x4}, "70731e9d973322ed263781be205faed4861362b731b71c69857d5f8e487782e0abbd4b4a366fb8c1c8ac2ab18a7e539166b79662209dda88e9ea8cc35f29762d483490f5cb09f457e6d5bbafd26dfacfa78896bdf79b5d1699cfcfbd65e359b7cce20823ab657c754bfaa6c7e244eb3c1fe050b079d81f498a5d8660f16536c4"}}, @TCF_EM_META={0x28, 0x3, 0x0, 0x0, {{0x0, 0x4, 0xee}, [@TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="070595ccf100a20f144c", @TCF_META_TYPE_VAR="86384dfe31a394", @TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1000, 0x8, 0x6}, {0x1}}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x0, 0x9, 0x8f01}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xac}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x200, 0x1, 0x81}, {0x2, 0x7, 0x38ff, 0x2, 0x6, 0x1}}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x2, 0x9, 0x7}, [@TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x4}, {0xffffffffffffffff}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x90, 0x8, 0xc}, {0x1, 0x1, 0x5}}}, @TCF_EM_CONTAINER={0x100c, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x40}, "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"}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x5, 0x0, 0x0, {{0xf, 0x1, 0xfb3b}, {0x40, 0x129, 0xffb6, 0x1, 0x8}}}]}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x9, 0x2, 0x8001}, {0x47d5, 0x0, 0x3}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x2}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}}}}]}]}, @TCA_CGROUP_POLICE={0x43c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x3, 0x7, 0x40, 0x3, 0x2f, 0x7, 0x2, 0x1, 0x2641, 0xffffffbf, 0x0, 0xf, 0xc1, 0x5, 0x9, 0x5, 0xfffffff7, 0xff, 0xfffbff7f, 0x3, 0x8, 0xffffffff, 0x1, 0x4e4b, 0x4, 0x0, 0x6, 0x5, 0x1, 0x7, 0x10, 0x5, 0x74, 0x4, 0xe5d, 0x400, 0x10000, 0x7, 0x7, 0xffffffff, 0x9, 0x81, 0x0, 0x4, 0x9, 0x3, 0x7fff, 0x7, 0x3d, 0x2, 0x2, 0x8, 0x713, 0x8, 0x1, 0x8, 0x4b2, 0x20f3, 0x3eb, 0x65ad8de0, 0xfffffffd, 0x1, 0x4fe, 0x10001, 0xdafa, 0xc8, 0x827, 0x9, 0x7, 0x1, 0x0, 0x7, 0x7, 0x0, 0x1, 0xcc9, 0x0, 0xc0000000, 0xc07f, 0x95e, 0x80000000, 0xf, 0x9, 0x2, 0x100, 0x25c, 0x3f6ca3f6, 0xd, 0x36f, 0x73b, 0x3, 0xdf72, 0x3, 0x9, 0x4, 0x1, 0x7, 0x3, 0x7ff, 0x6, 0xffffffff, 0x5, 0x2, 0x1000, 0x8008001, 0x4, 0x6, 0x3, 0xfffffff7, 0x7, 0x4, 0x40, 0x7, 0x3, 0xd, 0xa3e7, 0x6, 0x401, 0x1, 0x4, 0xfffffff9, 0x3, 0x2, 0x800, 0x4, 0xfffffff7, 0x10, 0x1, 0xa, 0xffffffff, 0xfff, 0x7, 0x7, 0x10000, 0xc, 0x1, 0x800, 0x1, 0x1000, 0x800, 0x0, 0x9, 0xfffffff7, 0xc74e, 0x81, 0x7, 0x7, 0xf6, 0x8, 0x5, 0x7fffffff, 0x5, 0x46db, 0x9, 0x0, 0x8000, 0x0, 0x1, 0x200, 0x4, 0x5, 0x8, 0xfffffff7, 0x4f, 0xea7, 0x6, 0xd, 0xfb4, 0xd5df, 0x9, 0x1, 0x9, 0x3817, 0xa324, 0x3ff, 0x44620000, 0x4, 0x3, 0x4, 0x4, 0xffffffff, 0x3a, 0x2, 0xe, 0x6, 0x1d8d, 0x101, 0x2, 0x2, 0xff, 0x1, 0x1, 0xffffffff, 0x81, 0xfffffffc, 0x7, 0x3, 0x8, 0xe648, 0x1, 0x9, 0x2, 0x2, 0x6, 0x1000000, 0x8, 0xfffffff0, 0x2, 0x0, 0x9, 0xc, 0x3ff, 0x100, 0x7, 0x2, 0x6, 0x30, 0x9, 0x1, 0x9, 0xae4, 0x9, 0x1, 0x7, 0xffffffff, 0x8, 0x7, 0x6, 0xb56b, 0xf, 0x11812, 0x8, 0x23, 0x0, 0x4, 0x9, 0x200, 0x81, 0x3, 0x4, 0x99, 0x2, 0xfffffffa, 0xe, 0xffff, 0x2, 0x0, 0x1, 0x8, 0x2, 0x7, 0x6, 0x8, 0x7fffffff, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8e7f}]}, @TCA_CGROUP_POLICE={0xc58, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xd20}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000000, 0xef84, 0x4, 0x9, {0xe, 0x0, 0x5, 0x5b9f, 0x2, 0xf}, {0x5d, 0x0, 0x81, 0x0, 0x8, 0x9}, 0x60b0, 0x0, 0xffff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x33f1, 0x1, 0x8, 0x0, 0x3, 0x2, 0x6, 0x0, 0x80, 0x72, 0x9, 0x7fffffff, 0x3, 0x2, 0x7fffffff, 0x7, 0x7ea6, 0xfffffffd, 0x9, 0x0, 0x4, 0x8, 0xd, 0x8, 0xc, 0xa3d8, 0x1, 0x270c, 0xc24a, 0xfffffffa, 0x81, 0x1, 0xc, 0x7, 0x10, 0x400, 0x9, 0x0, 0x10, 0x3, 0xa, 0xb, 0x80, 0xd, 0x4, 0x9, 0x8, 0xa3, 0x5, 0x3, 0x40, 0x1, 0x3, 0x3, 0x9, 0x9, 0xffffff7f, 0x6, 0x9f, 0x4, 0x8000, 0x4, 0x8, 0xf, 0xffffffff, 0x9, 0x7f, 0x7f, 0x5, 0xb25, 0x6, 0x4, 0x1000, 0x4, 0x7, 0x40, 0x8, 0x5, 0x4, 0x9, 0x200, 0x1ce5, 0x8000, 0xa3c, 0x6df30703, 0x80000001, 0x8, 0x527, 0x2, 0x7ff, 0x1, 0x400, 0x9, 0x1, 0x7, 0x0, 0x7, 0x1, 0x2, 0x3ff, 0xdd36, 0x4, 0x800, 0x8, 0x1, 0xffffff7f, 0x4, 0x2a897e25, 0x401, 0x0, 0x7, 0x5, 0xffff, 0x7, 0x2, 0x5, 0x1, 0x4, 0xd, 0xa4, 0x7f, 0xa9, 0xa, 0x2, 0x9, 0x3, 0x6, 0x1, 0x7ff, 0x7, 0x6, 0x4, 0xffffffff, 0x3, 0x3, 0x3, 0x7fffffff, 0xfffffff9, 0xfffffffb, 0x7, 0x7fffffff, 0x0, 0x1, 0xe3, 0x3, 0x80, 0xfffffffa, 0x559, 0xdd4, 0x1c, 0x3ff, 0x6, 0x2, 0x1, 0x188b, 0x0, 0x3, 0xfff, 0x0, 0xd755, 0x5, 0x1, 0x9, 0x5, 0x7, 0x2c667b41, 0x2, 0x7c, 0x4, 0x0, 0x85d, 0xebab, 0x6, 0x5, 0x8001, 0xffffff8d, 0x5, 0x4, 0x3, 0x6912b3a9, 0x4e5f, 0x7, 0xb, 0x80, 0x8000, 0x8, 0x8, 0x3, 0x8, 0x2, 0xe19, 0x3, 0x3, 0xd, 0x5, 0xab, 0x9, 0x5, 0x9, 0xfffffff7, 0x401, 0x3, 0x4, 0x80, 0xa, 0x8000, 0x5, 0x6, 0x5, 0xb, 0x4, 0x40, 0x3e, 0x6, 0x7, 0xd114, 0x50e3aa14, 0x8, 0x1000, 0x2, 0x7fff, 0xb4, 0x8, 0x2, 0x7, 0x57c, 0x0, 0x8, 0x4, 0x8, 0x8, 0x7, 0x400, 0x3, 0x9, 0xff0, 0x5, 0xffffffd9, 0x9, 0x2, 0x6, 0xfffffffd, 0x2, 0xb, 0x5, 0x4, 0x7, 0x7, 0x200, 0x7ff, 0x2, 0x2, 0x3, 0x32, 0x77b]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x16, 0x5, 0x8, 0x0, 0x7, 0x3, 0x3, 0x8, 0x1, 0x0, 0x6cf, 0x3, 0x9, 0x8, 0xd7, 0x10, 0x7, 0x5, 0x6, 0x6, 0x5ec6, 0x67c2, 0x9, 0x400, 0x9, 0x4, 0x18, 0x0, 0x25, 0xfffffffb, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x3, 0x0, 0x0, 0x8, 0x8, 0x0, 0x4, 0x9, 0x28, 0x6, 0x4, 0x4, 0xb1, 0x7, 0x2, 0x8001, 0x2, 0x6, 0xd, 0x0, 0x0, 0x7, 0x26f, 0x4, 0x2, 0x38, 0x6, 0x1, 0x1, 0xffff1e20, 0x3, 0xb, 0x81, 0xaea0, 0x4, 0xa, 0x8, 0x401, 0x0, 0x3, 0xd90, 0x68d, 0x814c, 0x7, 0x2, 0x0, 0x3, 0x8, 0x81, 0x4, 0x401, 0x4, 0x4, 0x8, 0xffffff01, 0x7, 0x4, 0x1, 0x4, 0x3, 0x6, 0xe, 0x9, 0x5, 0xb, 0x2, 0x3, 0x4, 0x409, 0x3, 0x8, 0xe7, 0x2, 0x9, 0x3, 0x7, 0x6, 0x3, 0xc9a, 0x1, 0x81, 0xfff, 0x3, 0x7, 0x80, 0xffffffff, 0x401, 0x0, 0x1, 0xffffffff, 0x3, 0x85, 0x68, 0x1, 0x7, 0x1, 0x40, 0x7, 0x6, 0x100, 0xffffffff, 0xb1, 0x1, 0x2, 0xfffffffc, 0x5, 0xc, 0x5, 0x5, 0x0, 0x8, 0x0, 0x9, 0x7, 0xfff, 0x1, 0x0, 0xfffffffa, 0x3, 0x3, 0x3, 0x7, 0x9, 0x6, 0x101, 0x7, 0x0, 0x3, 0x2, 0x40, 0x7ff, 0x88e6, 0x0, 0x8, 0x101, 0x3, 0x3, 0x2, 0x7, 0x208, 0x7fff, 0x1, 0xad4, 0x2, 0x0, 0xc1, 0x1, 0x6, 0x8, 0x3, 0x3, 0xffff, 0x10001, 0x6, 0x9, 0x7, 0xfffffff8, 0x460f0cda, 0xffff7a33, 0xffffffff, 0x7, 0x1, 0x8, 0x4, 0x1, 0x33, 0x1, 0x2, 0x80, 0x9026, 0x3, 0x1, 0x879, 0x2, 0x0, 0x100, 0x6, 0x5, 0xc00000, 0x8, 0x6, 0x8, 0x5, 0x1, 0x71, 0x444e, 0x9, 0x4, 0x1, 0xdf, 0x4, 0x3, 0x7, 0x200, 0xfffffffa, 0x4, 0x9, 0x6, 0x40, 0x8b7, 0x10000, 0xfffffff8, 0x1, 0x8, 0xa8, 0x7ff, 0x7, 0x2, 0x9, 0x5, 0x3, 0x4, 0x4, 0x1, 0x10001, 0x3, 0x87, 0x200]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0xffff, 0xffff2f1f, 0x4, 0x0, 0x9, 0x8f8, 0x5, 0x971, 0x575, 0x3, 0x6, 0x1, 0x0, 0x8, 0x7ff, 0xffffff95, 0x4e923fee, 0x200000, 0x1, 0xf764, 0x8, 0x2, 0x9a, 0x1020000, 0x4, 0x1, 0x1, 0xea0, 0x6, 0x7fffffff, 0x1c3c6bca, 0x1, 0x0, 0x80, 0x9, 0xa, 0x5, 0x2, 0x4, 0x2, 0x3, 0x3, 0x3, 0x4, 0x7, 0x3, 0xff, 0xff, 0x4, 0x830, 0x3, 0x7, 0x4, 0x2, 0x1, 0x1, 0xfffffffe, 0x8, 0x6b, 0x4, 0x6, 0x4, 0x7, 0x7, 0x3, 0x10, 0x0, 0xe, 0x80000001, 0x8, 0xb, 0x7, 0x20a, 0xb, 0x8, 0x3, 0x5, 0xffffffff, 0x200, 0xf89b, 0x9, 0x4, 0x8, 0x3, 0xfffffc00, 0x7, 0x7, 0x0, 0xfffffffe, 0x0, 0x5, 0x200, 0x0, 0x4, 0x9, 0x28, 0x7, 0xa, 0x0, 0xd3b, 0x23be, 0x7, 0x5, 0x1ff, 0x8, 0x7f, 0x4, 0x4322, 0x1, 0x3, 0x1ff, 0x101, 0x0, 0x3, 0x7, 0x800, 0x2, 0x1, 0xfff, 0x9, 0xfffffff9, 0x18b, 0x6a, 0x7, 0x5a, 0x1, 0x400, 0x1f21, 0x4, 0x4, 0x3ff, 0x8, 0x3, 0x1, 0x6, 0x8fd1, 0x1c000000, 0x9, 0x7, 0x1, 0x9, 0x2, 0x5, 0x2, 0xa, 0x1ff, 0x5, 0x3, 0x0, 0xfffffffc, 0x9, 0x8, 0x1, 0x0, 0x2, 0x10000, 0x2, 0x4, 0xa, 0x2, 0x1c6f, 0x6, 0x6, 0x10, 0x30000000, 0x2, 0x6, 0x6, 0x4, 0xa, 0x1, 0x3, 0x100, 0xd792, 0x5, 0x3, 0x40, 0x101, 0x3, 0x4, 0x1, 0x7f, 0x4, 0x8, 0x9, 0x401, 0x5, 0x6, 0x735, 0x3, 0x7, 0x7abba55c, 0x8, 0xa8fd, 0xb, 0x9, 0x6, 0xe7d, 0x9, 0x4, 0x7, 0x7fff, 0x2, 0x400, 0x1, 0x0, 0xa, 0x200, 0x7, 0x7f, 0x2, 0x3310, 0x401, 0x3, 0x4, 0x8, 0x5, 0xfffffff9, 0x2, 0x1, 0xde000000, 0x2, 0x4068d107, 0x1, 0x100, 0x2, 0x80000001, 0x2a92, 0x4, 0xfffffeff, 0x0, 0x9, 0xfffffffd, 0x0, 0x2, 0x4, 0x4, 0x32a6, 0x8, 0x40000000, 0xf, 0x5, 0x8, 0x101, 0x2, 0x7, 0x0, 0xa4, 0x3, 0x100, 0x40, 0xe03b, 0x4, 0x6]}]}, @TCA_CGROUP_ACT={0x324, 0x1, [@m_pedit={0xd0, 0x10, 0x0, 0x0, {{0xa}, {0x4}, {0xa4, 0x6, "7df2b8770dac8b0d2fec9af709aa3b5c850449a033ca7477144080226789cda42cc5b84fe202a6a0cec99190e5cf876ef6f8b1317c7d7ed2cf3c0b2e190ab07a71f1bd011d5e0c69694dde33cf48a60371ab0a4a446c4e9f9a7b156519122de0c76152fdf94f336cb4ff24f72c474f40c7fabb62eb507547e52790d761b45365c8a249b364aa90318bec827239736716b2fab26585c345cbb7781d9c492acbc6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x100, 0x10, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3f}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x75, 0x6, "50450e8203cc14af56776175d5c8f2a79b49616ae44cd25ff0c8b5ef0fa18833debebfdd7090d103c1b632dbad6d32826b2694a5b510e75ba3708e3b95b488b1deb31603783219322898e4d5720b243d9919e886a799343d7bfc3c0de79473327f0283916db1b4739dd9e0579f2fe6007f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x150, 0x9, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x2, 0x0, 0x1000, 0x9}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xbdc}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffff9}]}, {0xea, 0x6, "13714b45e310593f7e7dc46fd131082dcad8b6eb0d37679138fe78d00361f7badba14fd87e40b454b4fe923fcf0e7ec10def14adc5b2c1b53d2cbab2968e22180bc888e55c8d6f8f11c9ab9b3890139a741eda0364b1acf54e35f23d03810d2a2498b91083d659c75eb48f2e779be77b729a6c4b8311809a08a1164bc693e7cd9101b7ec311bd70e432d664c6872fafe48f492e05291be8856ffb6dad47e14d0f205ebc8e73714fb9e56230e874c14b1fe01faaed44bd57a232b5494e72de34fb035de351c22fff081da0bfdaea84391a4bd60089b4c221b02c5b6ce7b15dee519249b163b98"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_CGROUP_POLICE={0x4}]}}]}, 0x2978}}, 0x20040054) 1.200515167s ago: executing program 5 (id=1697): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0xffffffffffffff5e, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0880000008440000300012800b00010067656e65766500001e0002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.060085183s ago: executing program 5 (id=1701): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x402) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$SNDCTL_TMR_STOP(r0, 0x5403) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) mount(0x0, 0x0, &(0x7f00000004c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f00000007c0)='100', 0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x1d57, 0x50000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) 937.816112ms ago: executing program 4 (id=1702): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="18000000260001031dbd7002"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000f80)=""/149, 0x95}, {&(0x7f0000000d00)=""/217, 0xd9}, {&(0x7f0000000c40)=""/63, 0x3f}, {&(0x7f0000001700)=""/4097, 0x1001}, {&(0x7f0000002740)=""/151, 0x97}], 0x5}, 0x100}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xfffffffb}, {{0x0, 0x0, 0x0}, 0x103}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002840)=""/4081, 0xff1}, {&(0x7f0000003840)=""/4116, 0x1014}], 0x2}, 0x7}], 0x7, 0x0, 0x0) 890.158876ms ago: executing program 5 (id=1703): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfe, @remote}}}, 0x108) mkdirat(0xffffff9c, &(0x7f0000000b80)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000bc0)='./proc\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffff9c, &(0x7f0000000c40)='./proc/sys/net/ipv6/conf/all/force_mld_version\x00', 0x1, 0x5) write$cgroup_int(r2, &(0x7f0000000c80)=0x1, 0x12) close_range(r0, 0xffffffffffffffff, 0x0) 788.176196ms ago: executing program 5 (id=1704): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYRES16=r1, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 731.740395ms ago: executing program 5 (id=1705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000000206010800001f05730a5240bf1700040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000500050002000000050001"], 0x4c}}, 0x0) 661.744554ms ago: executing program 5 (id=1706): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000980)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000640)="000102030405060708090a", 0xb) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)='\x00'/216, 0xd8}], 0x1}, 0x0) read$alg(r1, &(0x7f0000000840)=""/288, 0x11f) 361.696825ms ago: executing program 6 (id=1708): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) listen(r0, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, 0x0, 0x0) 334.450629ms ago: executing program 6 (id=1709): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/video4linux/video0/dev_debug\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='655', 0x3) r1 = syz_open_dev$video(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000180)={0x990b80, 0x10}) 220.418957ms ago: executing program 6 (id=1710): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) 121.441944ms ago: executing program 6 (id=1711): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x402) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$SNDCTL_TMR_STOP(r0, 0x5403) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) mount(0x0, 0x0, &(0x7f00000004c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f00000007c0)='100', 0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x1d57, 0x50000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1', 0x1) 60.405108ms ago: executing program 6 (id=1712): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfe, @remote}}}, 0x108) mkdirat(0xffffff9c, &(0x7f0000000b80)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000bc0)='./proc\x00', &(0x7f0000000c00)='proc\x00', 0x0, 0x0) r2 = openat(0xffffff9c, 0x0, 0x1, 0x5) write$cgroup_int(r2, &(0x7f0000000c80)=0x1, 0x12) close_range(r0, 0xffffffffffffffff, 0x0) 60.235172ms ago: executing program 4 (id=1713): mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./debug\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./debug/dynamic_debug/control\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./tracefs\x00', &(0x7f00000004c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./tracefs/instances/foo\x00', 0x1ff) 237.236µs ago: executing program 6 (id=1714): mkdir(&(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:1f.0/remove\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) 0s ago: executing program 4 (id=1715): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='100', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/vhci\x00', 0x8002, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000440)="ff80", 0x2) kernel console output (not intermixed with test programs): T2369] microsoft 0003:045E:0713.000C: unknown main item tag 0x0 [ 144.361214][ T2369] microsoft 0003:045E:0713.000C: unknown main item tag 0x0 [ 144.373445][ T2369] microsoft 0003:045E:0713.000C: hiddev0,hidraw1: USB HID v0.01 Device [HID 045e:0713] on usb-dummy_hcd.2-1/input0 [ 144.528947][ T8782] vcan0: tx address claim with dlc 0 [ 145.167051][ T25] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 145.316824][ T25] usb 9-1: Using ep0 maxpacket: 8 [ 145.319007][ T25] usb 9-1: unable to get BOS descriptor or descriptor too short [ 145.319038][ T25] usb 9-1: New USB device found: idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 145.320850][ T25] usb 9-1: config 0 has an invalid interface number: 88 but max is 0 [ 145.320922][ T25] usb 9-1: config 0 has no interface number 0 [ 145.321019][ T25] usb 9-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 145.321043][ T25] usb 9-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 145.321063][ T25] usb 9-1: config 0 interface 88 has no altsetting 0 [ 145.326366][ T25] usb 9-1: string descriptor 0 read error: -22 [ 145.326487][ T25] usb 9-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 145.328990][ T25] usb 9-1: config 0 descriptor?? [ 145.360623][ T25] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.88/input/input14 [ 145.411148][ T5791] udevd[5791]: Error opening device "/dev/input/event4": Input/output error [ 145.411364][ T5791] udevd[5791]: Unable to EVIOCGABS device "/dev/input/event4" [ 145.411467][ T5791] udevd[5791]: Unable to EVIOCGABS device "/dev/input/event4" [ 145.446869][ T10] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 145.559524][ T35] net_ratelimit: 4 callbacks suppressed [ 145.559541][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.596338][ T43] audit: type=1326 audit(1794143853.498:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8789 comm="syz.4.1021" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3fbc code=0x0 [ 145.597549][ T10] usb 8-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 145.598655][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.598675][ T10] usb 8-1: config 0 has no interfaces? [ 145.600307][ T10] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 145.600322][ T10] usb 8-1: Product: syz [ 145.600329][ T10] usb 8-1: Manufacturer: syz [ 145.600337][ T10] usb 8-1: SerialNumber: syz [ 145.601848][ T10] usb 8-1: config 0 descriptor?? [ 145.647468][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.675808][ T1350] usb 9-1: USB disconnect, device number 4 [ 145.811251][ T25] usb 8-1: USB disconnect, device number 18 [ 145.936901][ T5839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.504324][ T50] stk1160: write failed on reg 0x208 (-71) [ 146.504593][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.504837][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.505824][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.506074][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.506316][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.506557][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.507191][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.508144][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.508433][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.508673][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.508942][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.509232][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.511695][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.511948][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.512282][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.512552][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.512799][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.513049][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.513298][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.513549][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.513835][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.514082][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.514327][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.514568][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.514808][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.515052][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.515292][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.515534][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.515774][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.516019][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.516050][ T50] saa7115 2-0025: gm7113c found @ 0x4a (stk1160) [ 146.518620][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.518870][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.519114][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.519355][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.519599][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.519912][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.520152][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.520391][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.520631][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.520875][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.521115][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.521354][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.521717][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.521975][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.522220][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.522505][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.522798][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.523044][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.523285][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.523525][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.523766][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.524049][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.524295][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.524618][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.524960][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.525312][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.526809][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.528790][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.529738][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.530159][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.530507][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.533258][ T50] stk1160: write failed on reg 0x2 (-71) [ 146.533485][ T50] stk1160: write failed on reg 0xd (-71) [ 146.533702][ T50] stk1160: write failed on reg 0xf (-71) [ 146.533936][ T50] stk1160: write failed on reg 0x18 (-71) [ 146.534153][ T50] stk1160: write failed on reg 0x19 (-71) [ 146.534368][ T50] stk1160: write failed on reg 0x1a (-71) [ 146.534588][ T50] stk1160: write failed on reg 0x1b (-71) [ 146.534803][ T50] stk1160: write failed on reg 0x1c (-71) [ 146.535020][ T50] stk1160: write failed on reg 0x300 (-71) [ 146.535234][ T50] stk1160: write failed on reg 0x350 (-71) [ 146.535448][ T50] stk1160: write failed on reg 0x351 (-71) [ 146.535661][ T50] stk1160: write failed on reg 0x352 (-71) [ 146.535875][ T50] stk1160: write failed on reg 0x353 (-71) [ 146.536089][ T50] stk1160: write failed on reg 0x300 (-71) [ 146.536322][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.536553][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.536861][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.537161][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.537478][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.537818][ T50] stk1160: write failed on reg 0x0 (-71) [ 146.538078][ T50] stk1160: read failed on reg 0x10 (-71) [ 146.538311][ T50] stk1160: read failed on reg 0x10 (-71) [ 146.538542][ T50] stk1160: write failed on reg 0x500 (-71) [ 146.538782][ T50] stk1160: write failed on reg 0x500 (-71) [ 146.539017][ T50] stk1160: write failed on reg 0x506 (-71) [ 146.539242][ T50] stk1160: write failed on reg 0x507 (-71) [ 146.539459][ T50] stk1160: write failed on reg 0x504 (-71) [ 146.539675][ T50] stk1160: write failed on reg 0x502 (-71) [ 146.539894][ T50] stk1160: write failed on reg 0x503 (-71) [ 146.540238][ T50] stk1160: write failed on reg 0x500 (-71) [ 146.540470][ T50] stk1160: read failed on reg 0x500 (-71) [ 146.540698][ T50] stk1160: write failed on reg 0x504 (-71) [ 146.540943][ T50] stk1160: write failed on reg 0x502 (-71) [ 146.541208][ T50] stk1160: write failed on reg 0x503 (-71) [ 146.541430][ T50] stk1160: write failed on reg 0x500 (-71) [ 146.541657][ T50] stk1160: read failed on reg 0x500 (-71) [ 146.541884][ T50] stk1160: write failed on reg 0x504 (-71) [ 146.542193][ T50] stk1160: write failed on reg 0x502 (-71) [ 146.542409][ T50] stk1160: write failed on reg 0x503 (-71) [ 146.542625][ T50] stk1160: write failed on reg 0x500 (-71) [ 146.542852][ T50] stk1160: read failed on reg 0x500 (-71) [ 146.543114][ T50] stk1160: write failed on reg 0x504 (-71) [ 146.543429][ T50] stk1160: write failed on reg 0x502 (-71) [ 146.543648][ T50] stk1160: write failed on reg 0x503 (-71) [ 146.543864][ T50] stk1160: write failed on reg 0x500 (-71) [ 146.544089][ T50] stk1160: read failed on reg 0x500 (-71) [ 146.544314][ T50] stk1160: write failed on reg 0x504 (-71) [ 146.544558][ T50] stk1160: write failed on reg 0x502 (-71) [ 146.544780][ T50] stk1160: write failed on reg 0x503 (-71) [ 146.545000][ T50] stk1160: write failed on reg 0x500 (-71) [ 146.545226][ T50] stk1160: read failed on reg 0x500 (-71) [ 146.545453][ T50] stk1160: write failed on reg 0x504 (-71) [ 146.545675][ T50] stk1160: write failed on reg 0x502 (-71) [ 146.545892][ T50] stk1160: write failed on reg 0x503 (-71) [ 146.546107][ T50] stk1160: write failed on reg 0x500 (-71) [ 146.546333][ T50] stk1160: read failed on reg 0x500 (-71) [ 146.546558][ T50] stk1160: write failed on reg 0x504 (-71) [ 146.547879][ T50] stk1160: write failed on reg 0x502 (-71) [ 146.548115][ T50] stk1160: write failed on reg 0x503 (-71) [ 146.548343][ T50] stk1160: write failed on reg 0x500 (-71) [ 146.549279][ T50] stk1160: read failed on reg 0x500 (-71) [ 146.549509][ T50] stk1160: write failed on reg 0x110 (-71) [ 146.549869][ T50] stk1160: write failed on reg 0x111 (-71) [ 146.550089][ T50] stk1160: write failed on reg 0x112 (-71) [ 146.550311][ T50] stk1160: write failed on reg 0x113 (-71) [ 146.550528][ T50] stk1160: write failed on reg 0x114 (-71) [ 146.550743][ T50] stk1160: write failed on reg 0x115 (-71) [ 146.550957][ T50] stk1160: write failed on reg 0x116 (-71) [ 146.551187][ T50] stk1160: write failed on reg 0x117 (-71) [ 146.552305][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.555680][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.555936][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.556236][ T50] stk1160: write failed on reg 0x203 (-71) [ 146.566064][ T50] stk1160 6-1:11.93: V4L2 device registered as video103 [ 146.575880][ T50] usb 6-1: USB disconnect, device number 18 [ 146.588100][ T10] usb 7-1: USB disconnect, device number 13 [ 146.596840][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.956704][ T2369] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 147.057020][ T6968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.091338][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 147.107614][ T2369] usb 8-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 147.108583][ T2369] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 147.108606][ T2369] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 147.108623][ T2369] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 147.108660][ T2369] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 147.108683][ T2369] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 147.110164][ T2369] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 147.110185][ T2369] usb 8-1: Product: syz [ 147.110199][ T2369] usb 8-1: Manufacturer: syz [ 147.118308][ T2369] cdc_wdm 8-1:1.0: skipping garbage [ 147.118324][ T2369] cdc_wdm 8-1:1.0: skipping garbage [ 147.121849][ T2369] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 147.121866][ T2369] cdc_wdm 8-1:1.0: Unknown control protocol [ 147.306830][ T1750] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 147.476786][ T1750] usb 6-1: Using ep0 maxpacket: 32 [ 147.479360][ T1750] usb 6-1: unable to get BOS descriptor or descriptor too short [ 147.479392][ T1750] usb 6-1: New USB device found: idVendor=0d8c, idProduct=000c, bcdDevice=0.40 [ 147.480654][ T1750] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.480724][ T1750] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 147.482733][ T1750] usb 6-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3 [ 147.482749][ T1750] usb 6-1: Product: syz [ 147.482760][ T1750] usb 6-1: Manufacturer: syz [ 147.482771][ T1750] usb 6-1: SerialNumber: syz [ 147.576186][ C3] cdc_wdm 8-1:1.0: Unexpected error -71 [ 147.576255][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 147.576270][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 147.576527][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 147.576541][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 147.576777][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 147.576791][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 147.577074][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 147.577088][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 147.577309][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 147.577322][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 147.577405][ T35] usb 8-1: USB disconnect, device number 19 [ 147.577516][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 147.577529][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 147.577541][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 147.617200][ T3306] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 147.647424][ T858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.697816][ T1750] usb 6-1: 3:0: cannot get RANGE values for control 2 (id 3) [ 147.697836][ T1750] usb 6-1: applying playback min mute quirk [ 147.697844][ T1750] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 147.697853][ T1750] usb 6-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 147.698778][ T1750] usb 6-1: 3:0: cannot get RANGE values for control 8 (id 3) [ 147.699172][ T1750] usb 6-1: 3:0: failed to get current value for ch 1 (-71) [ 147.702011][ T1750] usb 6-1: 3:0: failed to get current value for ch 1 (-71) [ 147.732273][ T1750] usb 6-1: USB disconnect, device number 19 [ 147.767573][ T3306] usb 9-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00 [ 147.768759][ T3306] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.768799][ T3306] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.768834][ T3306] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.876719][ T30] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 148.027300][ T30] usb 7-1: New USB device found: idVendor=0552, idProduct=5510, bcdDevice=0.00 [ 148.029292][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 148.029307][ T30] usb 7-1: Product: syz [ 148.029315][ T30] usb 7-1: Manufacturer: syz [ 148.187495][ T7303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.216765][ T1750] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 148.366839][ T1750] usb 6-1: Using ep0 maxpacket: 32 [ 148.369331][ T1750] usb 6-1: unable to get BOS descriptor or descriptor too short [ 148.369356][ T1750] usb 6-1: New USB device found: idVendor=0d8c, idProduct=000c, bcdDevice=0.40 [ 148.370683][ T1750] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.370697][ T1750] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 148.372203][ T1750] usb 6-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3 [ 148.372216][ T1750] usb 6-1: Product: syz [ 148.372224][ T1750] usb 6-1: Manufacturer: syz [ 148.372232][ T1750] usb 6-1: SerialNumber: syz [ 148.602370][ T30] scsi host7: uas [ 148.613207][ C3] scsi 7:0:0:0: tag#12 bogus IU 61 uas-tag 1 inflight: CMD [ 148.613271][ C3] scsi 7:0:0:0: tag#12 CDB: Inquiry 12 00 00 00 24 00 [ 148.677023][ T4097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.686967][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.698053][ T8836] bond7: (slave dummy0): Releasing backup interface [ 148.779468][ T1750] usb 6-1: 3:0: cannot get RANGE values for control 2 (id 3) [ 148.779488][ T1750] usb 6-1: applying playback min mute quirk [ 148.779496][ T1750] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 148.779505][ T1750] usb 6-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 148.781265][ T1750] usb 6-1: 3:0: cannot get RANGE values for control 8 (id 3) [ 148.781804][ T1750] usb 6-1: 3:0: failed to get current value for ch 1 (-71) [ 148.785457][ T1750] usb 6-1: 3:0: failed to get current value for ch 1 (-71) [ 148.809809][ T1750] usb 6-1: USB disconnect, device number 20 [ 148.816071][ C3] usb 7-1: cmd cmplt err -71 [ 148.816227][ T30] usb 7-1: USB disconnect, device number 14 [ 148.821931][ T30] scsi 7:0:0:0: tag#12 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 148.822005][ T30] scsi 7:0:0:0: tag#12 CDB: Inquiry 12 00 00 00 24 00 [ 148.842954][ T6565] udevd[6565]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.010001][ T6000] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 149.147559][ T8846] fuse: Unknown parameter 'grou00000000000000000000' [ 149.327145][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.427238][ T3306] usb 9-1: USB disconnect, device number 5 [ 149.435688][ T6000] rtsx_usb_ms rtsx_usb_ms.3.auto: Runtime PM usage count underflow! [ 149.557613][ T8863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1043'. [ 149.589161][ T8868] usb usb7: usbfs: process 8868 (syz.2.1046) did not claim interface 0 before use [ 149.751725][ T8883] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 149.770148][ T8885] vcan0: tx address claim with dlc 4 [ 149.860038][ T8883] md/raid0:md0: chunk size must be set. [ 149.860051][ T8883] md: pers->run() failed ... [ 150.042066][ T8907] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 150.273428][ T8918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1064'. [ 150.536097][ T8928] fuse: Unknown parameter 'group_i00000000000000000000' [ 150.757429][ T35] net_ratelimit: 2 callbacks suppressed [ 150.757445][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.903756][ T8933] vcan0: tx address claim with dlc 6 [ 150.947413][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1073'. [ 150.987193][ T8939] netlink: 'syz.2.1074': attribute type 1 has an invalid length. [ 151.005453][ T8941] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input15 [ 151.438272][ T8959] vcan0: tx address claim with dlc 6 [ 151.616829][ T7303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.730703][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.796965][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.127102][ T6000] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 152.198240][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 152.500197][ T8978] netlink: 'syz.1.1088': attribute type 1 has an invalid length. [ 152.517343][ T8978] 8021q: adding VLAN 0 to HW filter on device bond9 [ 152.747104][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.826695][ T42] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 152.841052][ T1750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.977007][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 152.979711][ T42] usb 6-1: New USB device found: idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 152.984473][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.984498][ T42] usb 6-1: Product: syz [ 152.984512][ T42] usb 6-1: Manufacturer: syz [ 152.984526][ T42] usb 6-1: SerialNumber: syz [ 152.988421][ T42] usb 6-1: config 0 descriptor?? [ 152.991911][ T42] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 153.876987][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.889660][ T8065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.118273][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.186264][ T8986] vcan0: tx address claim with dlc 6 [ 154.209646][ T42] input: sonixj as /devices/platform/dummy_hcd.1/usb6/6-1/input/input16 [ 154.393524][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1097'. [ 154.413463][ T42] usb 6-1: USB disconnect, device number 21 [ 154.491251][ T4097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.494631][ T9002] bridge_slave_0: left allmulticast mode [ 154.494658][ T9002] bridge_slave_0: left promiscuous mode [ 154.494967][ T9002] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.507954][ T9002] bridge_slave_1: left allmulticast mode [ 154.507978][ T9002] bridge_slave_1: left promiscuous mode [ 154.508148][ T9002] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.515946][ T9002] bond0: (slave bond_slave_0): Releasing backup interface [ 154.522230][ T9002] bond0: (slave bond_slave_1): Releasing backup interface [ 154.539576][ T9002] team0: Port device team_slave_0 removed [ 154.544997][ T9002] team0: Port device team_slave_1 removed [ 154.573409][ T9005] team0: Mode "" not found [ 154.757658][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 155.951857][ T9041] net_ratelimit: 6 callbacks suppressed [ 155.951873][ T9041] netlink: zone id is out of range [ 155.951979][ T9041] netlink: zone id is out of range [ 155.951989][ T9041] netlink: zone id is out of range [ 155.951995][ T9041] netlink: zone id is out of range [ 155.952002][ T9041] netlink: zone id is out of range [ 155.960233][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.997176][ T9043] rxe_eth0 speed is unknown, defaulting to 1000 [ 156.114616][ T9043] lo speed is unknown, defaulting to 1000 [ 156.119819][ T9044] smc: removing ib device rxe0 [ 156.173505][ T9044] smbdirect: ib_dev[rxe0] removed [ 156.187496][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.682192][ T1750] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 156.996865][ T1750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.319433][ T6017] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 157.327684][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.515818][ T9060] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 157.567692][ T4097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.177505][ T4097] hid-generic 0005:0008:01FF.000D: item fetching failed at offset 0/1 [ 158.178457][ T4097] hid-generic 0005:0008:01FF.000D: probe with driver hid-generic failed with error -22 [ 159.440585][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1135'. [ 159.495601][ T9095] FAULT_INJECTION: forcing a failure. [ 159.495601][ T9095] name failslab, interval 1, probability 0, space 0, times 0 [ 159.495633][ T9095] CPU: 2 UID: 0 PID: 9095 Comm: syz.1.1136 Not tainted syzkaller #0 PREEMPT(full) [ 159.495656][ T9095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.495669][ T9095] Call Trace: [ 159.495677][ T9095] [ 159.495685][ T9095] dump_stack_lvl+0x100/0x190 [ 159.495723][ T9095] should_fail_ex.cold+0x5/0xa [ 159.495762][ T9095] should_failslab+0xc2/0x120 [ 159.495790][ T9095] __kmalloc_cache_noprof+0x91/0x6d0 [ 159.495819][ T9095] ? snd_seq_port_use_ptr+0x3c/0x300 [ 159.495846][ T9095] ? snd_seq_port_connect+0x61/0x550 [ 159.495876][ T9095] snd_seq_port_connect+0x61/0x550 [ 159.495903][ T9095] ? check_subscription_permission.isra.0+0x146/0x240 [ 159.495932][ T9095] snd_seq_ioctl_subscribe_port+0x219/0x490 [ 159.495963][ T9095] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 159.496003][ T9095] call_seq_client_ctl+0xa3/0x130 [ 159.496030][ T9095] snd_seq_kernel_client_ctl+0x7c/0xd0 [ 159.496057][ T9095] snd_seq_oss_midi_open+0x49f/0x700 [ 159.496091][ T9095] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 159.496134][ T9095] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 159.496168][ T9095] snd_seq_oss_midi_open_all+0x95/0xf0 [ 159.496204][ T9095] snd_seq_oss_open+0x84e/0xa40 [ 159.496236][ T9095] odev_open+0x6f/0x90 [ 159.496259][ T9095] ? __pfx_odev_open+0x10/0x10 [ 159.496283][ T9095] soundcore_open+0x2e3/0x5a0 [ 159.496311][ T9095] ? __pfx_soundcore_open+0x10/0x10 [ 159.496336][ T9095] chrdev_open+0x234/0x6a0 [ 159.496360][ T9095] ? __pfx_apparmor_file_open+0x10/0x10 [ 159.496390][ T9095] ? __pfx_chrdev_open+0x10/0x10 [ 159.496416][ T9095] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 159.496470][ T9095] do_dentry_open+0x674/0x1470 [ 159.496495][ T9095] ? __pfx_chrdev_open+0x10/0x10 [ 159.496527][ T9095] vfs_open_consume+0xcc/0x460 [ 159.496560][ T9095] path_openat+0x1547/0x23f0 [ 159.496612][ T9095] ? __pfx_path_openat+0x10/0x10 [ 159.496645][ T9095] do_file_open+0x20e/0x430 [ 159.496673][ T9095] ? __pfx_do_file_open+0x10/0x10 [ 159.496718][ T9095] ? _raw_spin_unlock+0x28/0x50 [ 159.496751][ T9095] ? alloc_fd+0x471/0x7a0 [ 159.496785][ T9095] do_sys_openat2+0x163/0x1d0 [ 159.496834][ T9095] ? __pfx_do_sys_openat2+0x10/0x10 [ 159.496865][ T9095] ? find_held_lock+0x2b/0x80 [ 159.496895][ T9095] ? __fget_files+0x215/0x3d0 [ 159.496926][ T9095] __ia32_compat_sys_openat+0x12d/0x210 [ 159.496957][ T9095] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 159.496999][ T9095] __do_fast_syscall_32+0x14b/0x8c0 [ 159.497034][ T9095] do_fast_syscall_32+0x32/0x70 [ 159.497065][ T9095] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.497091][ T9095] RIP: 0023:0xf746efbc [ 159.497108][ T9095] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 159.497128][ T9095] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 159.497149][ T9095] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000a80 [ 159.497163][ T9095] RDX: 0000000000080200 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.497188][ T9095] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.497200][ T9095] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 159.497213][ T9095] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.497241][ T9095] [ 160.036871][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 160.051828][ T5794] Bluetooth: hci0: command 0x0406 tx timeout [ 160.051860][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 160.518418][ T6017] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 161.089118][ T4097] net_ratelimit: 9 callbacks suppressed [ 161.089134][ T4097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.156815][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.603377][ T9131] syzkaller1: entered promiscuous mode [ 161.603401][ T9131] syzkaller1: entered allmulticast mode [ 161.797937][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.857182][ T7303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.016095][ T9159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1156'. [ 162.074574][ T9165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1158'. [ 162.196898][ T1750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.606764][ T1750] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 162.767503][ T1750] usb 9-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 162.768638][ T1750] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.768652][ T1750] usb 9-1: config 0 has no interfaces? [ 162.770466][ T1750] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 162.770484][ T1750] usb 9-1: Product: syz [ 162.770494][ T1750] usb 9-1: Manufacturer: syz [ 162.770505][ T1750] usb 9-1: SerialNumber: syz [ 162.772083][ T1750] usb 9-1: config 0 descriptor?? [ 162.772350][ T67] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 162.980011][ T1750] usb 9-1: USB disconnect, device number 6 [ 162.997220][ T6968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.077402][ T4097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.089457][ T6026] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 163.246826][ T1750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.089221][ T9204] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1175'. [ 164.090719][ T9204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1175'. [ 164.129273][ T6968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.149284][ T9206] FAULT_INJECTION: forcing a failure. [ 164.149284][ T9206] name failslab, interval 1, probability 0, space 0, times 0 [ 164.149306][ T9206] CPU: 0 UID: 0 PID: 9206 Comm: syz.1.1176 Not tainted syzkaller #0 PREEMPT(full) [ 164.149320][ T9206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.149328][ T9206] Call Trace: [ 164.149332][ T9206] [ 164.149337][ T9206] dump_stack_lvl+0x100/0x190 [ 164.149365][ T9206] should_fail_ex.cold+0x5/0xa [ 164.149386][ T9206] should_failslab+0xc2/0x120 [ 164.149402][ T9206] __kmalloc_cache_noprof+0x91/0x6d0 [ 164.149421][ T9206] ? key_link+0x2bb/0x390 [ 164.149435][ T9206] ? assoc_array_insert+0x262/0x32c0 [ 164.149468][ T9206] assoc_array_insert+0x262/0x32c0 [ 164.149481][ T9206] ? trace_contention_end+0x126/0x160 [ 164.149498][ T9206] ? __mutex_lock+0x267/0x1c10 [ 164.149517][ T9206] ? key_link+0x2bb/0x390 [ 164.149534][ T9206] ? __pfx_assoc_array_insert+0x10/0x10 [ 164.149549][ T9206] ? __pfx___might_resched+0x10/0x10 [ 164.149569][ T9206] ? keyring_free_preparse+0x9/0x10 [ 164.149608][ T9206] ? down_write+0x141/0x1f0 [ 164.149630][ T9206] __key_link_begin+0xf5/0x260 [ 164.149671][ T9206] key_link+0x103/0x390 [ 164.149686][ T9206] ? __pfx_key_link+0x10/0x10 [ 164.149701][ T9206] ? keyring_alloc+0x8e/0xc0 [ 164.149715][ T9206] look_up_user_keyrings+0x50c/0x760 [ 164.149741][ T9206] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 164.149758][ T9206] ? futex_wake+0x4ea/0x5e0 [ 164.149778][ T9206] lookup_user_key+0x10ad/0x14f0 [ 164.149798][ T9206] ? __pfx_lookup_user_key+0x10/0x10 [ 164.149821][ T9206] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 164.149845][ T9206] ? strncpy_from_user+0x19d/0x2d0 [ 164.149871][ T9206] __do_sys_add_key+0x2a6/0x460 [ 164.149885][ T9206] ? __pfx___do_sys_add_key+0x10/0x10 [ 164.149906][ T9206] __do_fast_syscall_32+0x14b/0x8c0 [ 164.149927][ T9206] do_fast_syscall_32+0x32/0x70 [ 164.149947][ T9206] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.149963][ T9206] RIP: 0023:0xf746efbc [ 164.149973][ T9206] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 164.149985][ T9206] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 164.149998][ T9206] RAX: ffffffffffffffda RBX: 00000000800008c0 RCX: 0000000000000000 [ 164.150006][ T9206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fffffffd [ 164.150013][ T9206] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 164.150020][ T9206] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 164.150027][ T9206] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 164.150042][ T9206] [ 164.194996][ T9208] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1177'. [ 164.195689][ T9208] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1177'. [ 164.286866][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.404166][ T9222] netlink: 'syz.4.1184': attribute type 1 has an invalid length. [ 164.414041][ T9222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.596710][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 164.757220][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 164.764252][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 164.764280][ T10] usb 6-1: New USB device found: idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 164.765036][ T10] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 164.765050][ T10] usb 6-1: config 0 has no interface number 0 [ 164.765069][ T10] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 164.765083][ T10] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 164.765095][ T10] usb 6-1: config 0 interface 88 has no altsetting 0 [ 164.769736][ T10] usb 6-1: string descriptor 0 read error: -22 [ 164.769794][ T10] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 164.770927][ T10] usb 6-1: config 0 descriptor?? [ 164.779396][ T10] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.88/input/input17 [ 164.823403][ T5800] udevd[5800]: Error opening device "/dev/input/event4": Input/output error [ 164.823464][ T5800] udevd[5800]: Unable to EVIOCGABS device "/dev/input/event4" [ 164.823515][ T5800] udevd[5800]: Unable to EVIOCGABS device "/dev/input/event4" [ 164.859592][ T9242] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 165.044780][ T42] usb 6-1: USB disconnect, device number 22 [ 165.176890][ T1750] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 165.339904][ T1750] usb 9-1: unable to get BOS descriptor or descriptor too short [ 165.339968][ T1750] usb 9-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 165.341427][ T1750] usb 9-1: config 142 has an invalid interface number: 251 but max is 0 [ 165.341463][ T1750] usb 9-1: config 142 has no interface number 0 [ 165.341524][ T1750] usb 9-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 165.341561][ T1750] usb 9-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 165.341598][ T1750] usb 9-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 165.341648][ T1750] usb 9-1: config 142 interface 251 has no altsetting 0 [ 165.345332][ T1750] usb 9-1: string descriptor 0 read error: -22 [ 165.345464][ T1750] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.378024][ T9245] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 165.378189][ T9245] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 165.379871][ T1750] cypress_m8 9-1:142.251: HID->COM RS232 Adapter converter detected [ 165.384995][ T1750] usb 9-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 165.557056][ T6017] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 165.686175][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.690485][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.693445][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.703805][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.705129][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.968381][ T9263] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.993617][ T9263] bridge_slave_0 (unregistering): left allmulticast mode [ 165.993650][ T9263] bridge_slave_0 (unregistering): left promiscuous mode [ 165.993754][ T9263] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.200300][ T9249] rxe_eth0 speed is unknown, defaulting to 1000 [ 166.202498][ T9249] rxe_eth0 speed is unknown, defaulting to 1000 [ 166.203090][ T9249] rxe_eth0 speed is unknown, defaulting to 1000 [ 166.277180][ T6000] net_ratelimit: 10 callbacks suppressed [ 166.334964][ T59] rxe_eth0 speed is unknown, defaulting to 1000 [ 166.335046][ T9249] infiniband rxe0: set active [ 166.335069][ T9249] infiniband rxe0: added rxe_eth0 [ 166.343162][ T9249] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 166.343186][ T9249] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 166.343209][ T9249] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 166.352591][ T9249] RDS/IB: rxe0: added [ 166.352612][ T9249] smc: adding ib device rxe0 with port count 1 [ 166.352624][ T9249] smc: ib device rxe0 port 1 has no pnetid [ 166.352663][ T59] rxe_eth0 speed is unknown, defaulting to 1000 [ 166.353078][ T9249] rxe_eth0 speed is unknown, defaulting to 1000 [ 166.360766][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.377168][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.473957][ T9249] rxe_eth0 speed is unknown, defaulting to 1000 [ 166.624616][ T9249] rxe_eth0 speed is unknown, defaulting to 1000 [ 166.782671][ T9249] rxe_eth0 speed is unknown, defaulting to 1000 [ 166.918240][ T9249] rxe_eth0 speed is unknown, defaulting to 1000 [ 166.948033][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1201'. [ 167.111053][ T9249] lo speed is unknown, defaulting to 1000 [ 167.111843][ T9249] rxe_eth0 speed is unknown, defaulting to 1000 [ 167.416782][ T9249] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.416867][ T9249] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.417041][ T9249] bridge_slave_0: entered allmulticast mode [ 167.417827][ T9249] bridge_slave_0: entered promiscuous mode [ 167.420352][ T9249] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.420423][ T9249] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.420527][ T9249] bridge_slave_1: entered allmulticast mode [ 167.421490][ T9249] bridge_slave_1: entered promiscuous mode [ 167.445487][ T9249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.447309][ T9249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.471984][ T9249] team0: Port device team_slave_0 added [ 167.473367][ T9249] team0: Port device team_slave_1 added [ 167.496540][ T9249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.496547][ T9249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.496561][ T9249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.497841][ T9249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.497848][ T9249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.497862][ T9249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.533260][ T9249] hsr_slave_0: entered promiscuous mode [ 167.533824][ T9249] hsr_slave_1: entered promiscuous mode [ 167.534184][ T9249] debugfs: 'hsr0' already exists in 'hsr' [ 167.534192][ T9249] Cannot create hsr debugfs directory [ 167.685233][ T9249] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.693812][ T9249] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 167.694789][ T9249] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.705774][ T9249] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.707315][ T9249] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.716352][ T9249] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.717201][ T9249] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.728167][ T9249] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.750435][ T9249] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.750476][ T9249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.750615][ T9249] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.750662][ T9249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.795483][ T9249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.803720][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.804799][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.808065][ T5801] Bluetooth: hci3: command tx timeout [ 167.819852][ T9249] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.823162][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.823210][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.829512][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.829586][ T6017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.070737][ T30] usb 9-1: USB disconnect, device number 7 [ 168.087384][ T30] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 168.096230][ T30] cypress_m8 9-1:142.251: device disconnected [ 168.166465][ T9249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.288660][ T9323] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1209'. [ 168.335137][ T9249] veth0_vlan: entered promiscuous mode [ 168.343398][ T9249] veth1_vlan: entered promiscuous mode [ 168.363529][ T9249] veth0_macvtap: entered promiscuous mode [ 168.365967][ T9249] veth1_macvtap: entered promiscuous mode [ 168.374321][ T9249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.378938][ T9249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.383521][ T6968] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.384529][ T7303] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.420092][ T6968] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.420130][ T6968] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.440358][ T6000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.440374][ T6000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.477194][ T6026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.477205][ T6026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.620544][ T5801] Bluetooth: hci3: connection err: -111 [ 168.848274][ T6000] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 169.218813][ T5801] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 169.346823][ T9342] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1215'. [ 169.347616][ T9342] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1215'. [ 169.576424][ T9350] FAULT_INJECTION: forcing a failure. [ 169.576424][ T9350] name failslab, interval 1, probability 0, space 0, times 0 [ 169.576442][ T9350] CPU: 3 UID: 0 PID: 9350 Comm: syz.5.1219 Not tainted syzkaller #0 PREEMPT(full) [ 169.576457][ T9350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.576465][ T9350] Call Trace: [ 169.576470][ T9350] [ 169.576476][ T9350] dump_stack_lvl+0x100/0x190 [ 169.576500][ T9350] should_fail_ex.cold+0x5/0xa [ 169.576519][ T9350] should_failslab+0xc2/0x120 [ 169.576537][ T9350] kmem_cache_alloc_noprof+0x92/0x6a0 [ 169.576550][ T9350] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 169.576590][ T9350] ? acpi_ut_create_generic_state+0x61/0xc0 [ 169.576614][ T9350] acpi_ut_create_generic_state+0x61/0xc0 [ 169.576635][ T9350] acpi_ps_push_scope+0x42/0x280 [ 169.576657][ T9350] acpi_ps_parse_loop+0x330/0x26e0 [ 169.576686][ T9350] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 169.576705][ T9350] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 169.576718][ T9350] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 169.576733][ T9350] ? acpi_ut_create_thread_state+0x6d/0x170 [ 169.576758][ T9350] acpi_ps_parse_aml+0x81e/0x1120 [ 169.576775][ T9350] acpi_ps_execute_method+0x5c4/0xe90 [ 169.576794][ T9350] acpi_ns_evaluate+0x640/0x1670 [ 169.576813][ T9350] acpi_ut_evaluate_object+0xf7/0x610 [ 169.576833][ T9350] acpi_rs_get_prt_method_data+0xa0/0x150 [ 169.576849][ T9350] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 169.576865][ T9350] ? acpi_ut_status_exit+0x111/0x1c0 [ 169.576880][ T9350] ? acpi_rs_validate_parameters+0x104/0x210 [ 169.576898][ T9350] acpi_get_irq_routing_table+0xb8/0x140 [ 169.576914][ T9350] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 169.576932][ T9350] ? do_raw_spin_lock+0x128/0x260 [ 169.576950][ T9350] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 169.576968][ T9350] ? do_raw_spin_lock+0x128/0x260 [ 169.576985][ T9350] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 169.577003][ T9350] ? mark_held_locks+0x40/0x70 [ 169.577016][ T9350] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 169.577035][ T9350] acpi_pci_irq_lookup+0x8e/0x6b0 [ 169.577052][ T9350] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 169.577072][ T9350] acpi_pci_irq_disable+0x1a8/0x360 [ 169.577088][ T9350] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 169.577104][ T9350] pcibios_disable_device+0x89/0xb0 [ 169.577120][ T9350] do_pci_disable_device+0x9f/0x100 [ 169.577166][ T9350] ? __pfx_do_pci_disable_device+0x10/0x10 [ 169.577184][ T9350] ? pci_release_region.part.0+0x15b/0x2e0 [ 169.577209][ T9350] pci_disable_device+0x130/0x270 [ 169.577224][ T9350] virtio_pci_remove+0xcf/0x110 [ 169.577248][ T9350] pci_device_remove+0xb2/0x1d0 [ 169.577268][ T9350] ? __pfx_pci_device_remove+0x10/0x10 [ 169.577289][ T9350] device_remove+0xcb/0x180 [ 169.577309][ T9350] device_release_driver_internal+0x441/0x610 [ 169.577326][ T9350] pci_stop_bus_device+0x120/0x160 [ 169.577342][ T9350] pci_stop_and_remove_bus_device+0x58/0xa0 [ 169.577357][ T9350] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 169.577372][ T9350] remove_store+0x123/0x140 [ 169.577395][ T9350] ? __pfx_remove_store+0x10/0x10 [ 169.577411][ T9350] ? find_held_lock+0x2b/0x80 [ 169.577429][ T9350] ? sysfs_file_kobj+0xe4/0x290 [ 169.577446][ T9350] ? sysfs_file_kobj+0xe4/0x290 [ 169.577464][ T9350] ? __pfx_remove_store+0x10/0x10 [ 169.577479][ T9350] dev_attr_store+0x58/0x80 [ 169.577492][ T9350] ? __pfx_dev_attr_store+0x10/0x10 [ 169.577506][ T9350] sysfs_kf_write+0xf2/0x150 [ 169.577523][ T9350] kernfs_fop_write_iter+0x3e0/0x5f0 [ 169.577538][ T9350] ? __pfx_sysfs_kf_write+0x10/0x10 [ 169.577555][ T9350] vfs_write+0x6af/0x1050 [ 169.577570][ T9350] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 169.577586][ T9350] ? __pfx_vfs_write+0x10/0x10 [ 169.577598][ T9350] ? find_held_lock+0x2b/0x80 [ 169.577649][ T9350] ksys_write+0x12a/0x250 [ 169.577664][ T9350] ? __pfx_ksys_write+0x10/0x10 [ 169.577683][ T9350] __do_fast_syscall_32+0x14b/0x8c0 [ 169.577703][ T9350] ? lockdep_hardirqs_on+0x7d/0x110 [ 169.577723][ T9350] do_fast_syscall_32+0x32/0x70 [ 169.577742][ T9350] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.577759][ T9350] RIP: 0023:0xf743efbc [ 169.577770][ T9350] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 169.577783][ T9350] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 169.577796][ T9350] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000240 [ 169.577804][ T9350] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.577811][ T9350] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.577818][ T9350] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 169.577825][ T9350] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.577841][ T9350] [ 169.579400][ T9350] ACPI Error: Aborting method \_SB.PCI0._PRT due to previous error (AE_NO_MEMORY) (20260408/psparse-543) [ 169.579578][ T9350] ACPI Error: Method execution failed \_SB.PCI0._PRT due to previous error (AE_NO_MEMORY) (20260408/uteval-68) [ 169.579770][ T9350] virtio-pci 0000:00:03.0: can't derive routing for PCI INT A [ 169.603671][ T9354] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.613889][ T9354] bridge_slave_0 (unregistering): left allmulticast mode [ 169.613901][ T9354] bridge_slave_0 (unregistering): left promiscuous mode [ 169.613941][ T9354] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.716441][ T9356] netlink: 'syz.4.1222': attribute type 1 has an invalid length. [ 169.744722][ T9356] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.790361][ T9356] bond2: (slave geneve2): making interface the new active one [ 169.796255][ T9356] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 169.876852][ T5801] Bluetooth: hci3: command tx timeout [ 169.938035][ T9370] device-mapper: ioctl: Target type does not support messages [ 170.314466][ T9406] lo speed is unknown, defaulting to 1000 [ 170.315215][ T9406] rxe_eth0 speed is unknown, defaulting to 1000 [ 170.522924][ T9404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.147443][ T67] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 171.154032][ T67] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 171.155594][ T67] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 171.159454][ T67] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 171.161733][ T67] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 171.258168][ T9432] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1253'. [ 171.299394][ T9436] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 171.398845][ T30] net_ratelimit: 402 callbacks suppressed [ 171.399667][ T6009] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 171.436292][ T9443] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input18 [ 171.458353][ T9446] netlink: 'syz.1.1257': attribute type 39 has an invalid length. [ 171.602513][ T9424] lo speed is unknown, defaulting to 1000 [ 171.603715][ T9424] rxe_eth0 speed is unknown, defaulting to 1000 [ 171.674159][ T9457] usb usb7: usbfs: process 9457 (syz.4.1261) did not claim interface 0 before use [ 171.956785][ T5801] Bluetooth: hci3: command tx timeout [ 172.063595][ T9476] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1267'. [ 172.154925][ T9424] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.155010][ T9424] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.155105][ T9424] bridge_slave_0: entered allmulticast mode [ 172.155886][ T9424] bridge_slave_0: entered promiscuous mode [ 172.157572][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.157716][ T9424] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.157799][ T9424] bridge_slave_1: entered allmulticast mode [ 172.158607][ T9424] bridge_slave_1: entered promiscuous mode [ 172.204281][ T9424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.207597][ T9424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.233672][ T9424] team0: Port device team_slave_0 added [ 172.235128][ T9424] team0: Port device team_slave_1 added [ 172.259149][ T9424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.259156][ T9424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.259171][ T9424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.260048][ T9424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.260055][ T9424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.260069][ T9424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.308193][ T9424] hsr_slave_0: entered promiscuous mode [ 172.308720][ T9424] hsr_slave_1: entered promiscuous mode [ 172.309086][ T9424] debugfs: 'hsr0' already exists in 'hsr' [ 172.309095][ T9424] Cannot create hsr debugfs directory [ 172.511966][ T9424] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 172.519147][ T9424] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 172.519679][ T9424] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 172.524879][ T9424] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.525911][ T9424] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 172.533167][ T9424] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 172.533782][ T9424] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 172.539286][ T9424] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.565754][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.565796][ T9424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.565937][ T9424] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.566012][ T9424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.627674][ T9424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.635644][ T9424] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.636849][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.638728][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.654230][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.654292][ T6017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.664365][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.664447][ T6017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.737105][ T9246] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 172.899624][ T9246] usb 6-1: unable to get BOS descriptor or descriptor too short [ 172.899665][ T9246] usb 6-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 172.900813][ T9246] usb 6-1: config 142 has an invalid interface number: 251 but max is 0 [ 172.900838][ T9246] usb 6-1: config 142 has no interface number 0 [ 172.900872][ T9246] usb 6-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 172.900899][ T9246] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 172.900922][ T9246] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 172.900946][ T9246] usb 6-1: config 142 interface 251 has no altsetting 0 [ 172.904758][ T9246] usb 6-1: string descriptor 0 read error: -22 [ 172.904883][ T9246] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.912029][ T9485] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 172.912085][ T9485] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 172.915207][ T9246] cypress_m8 6-1:142.251: HID->COM RS232 Adapter converter detected [ 172.925353][ T9246] usb 6-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 173.043610][ T9424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.145664][ T9511] device-mapper: table: 248:7: writecache: Origin data device lookup failed (-ENOENT) [ 173.145682][ T9511] device-mapper: ioctl: error adding target to table [ 173.209356][ T9520] device-mapper: ioctl: Invalid data size in the ioctl structure: 56 [ 173.237144][ T5801] Bluetooth: hci5: command tx timeout [ 173.245075][ T9424] veth0_vlan: entered promiscuous mode [ 173.258858][ T9424] veth1_vlan: entered promiscuous mode [ 173.265224][ T37] IPVS: starting estimator thread 0... [ 173.291103][ T9424] veth0_macvtap: entered promiscuous mode [ 173.296163][ T9424] veth1_macvtap: entered promiscuous mode [ 173.309586][ T9424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.313368][ T9424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.317077][ T14] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.317219][ T14] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.317296][ T14] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.317332][ T14] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.355539][ T9529] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1279'. [ 173.369993][ T9525] IPVS: using max 42 ests per chain, 100800 per kthread [ 173.425034][ T6017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.425044][ T6017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.433489][ T9527] syz.5.1278 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 173.433513][ T9527] CPU: 2 UID: 0 PID: 9527 Comm: syz.5.1278 Not tainted syzkaller #0 PREEMPT(full) [ 173.433528][ T9527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 173.433537][ T9527] Call Trace: [ 173.433542][ T9527] [ 173.433547][ T9527] dump_stack_lvl+0x100/0x190 [ 173.433571][ T9527] dump_header+0xfb/0x606 [ 173.433587][ T9527] oom_kill_process.cold+0xd/0x380 [ 173.433631][ T9527] out_of_memory+0x343/0x14c0 [ 173.433668][ T9527] ? __pfx_out_of_memory+0x10/0x10 [ 173.433692][ T9527] mem_cgroup_out_of_memory+0xc6/0x130 [ 173.433707][ T9527] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 173.433720][ T9527] ? find_held_lock+0x2b/0x80 [ 173.433741][ T9527] ? do_raw_spin_unlock+0x145/0x1e0 [ 173.433759][ T9527] ? _raw_spin_unlock+0x28/0x50 [ 173.433776][ T9527] try_charge_memcg+0x779/0xf30 [ 173.433797][ T9527] ? __pfx_try_charge_memcg+0x10/0x10 [ 173.433815][ T9527] ? find_held_lock+0x2b/0x80 [ 173.433832][ T9527] ? rcu_read_unlock+0x17/0x60 [ 173.433849][ T9527] ? rcu_read_unlock+0x17/0x60 [ 173.433872][ T9527] obj_cgroup_charge_pages+0x2b/0x1f0 [ 173.433891][ T9527] __memcg_slab_post_alloc_hook+0x476/0x10b0 [ 173.433914][ T9527] ? kasan_unpoison+0x27/0x60 [ 173.433928][ T9527] __kmalloc_cache_noprof+0x525/0x6d0 [ 173.433945][ T9527] ? ptmx_open+0x11a/0x360 [ 173.433968][ T9527] ? alloc_tty_struct+0x96/0x8e0 [ 173.433990][ T9527] alloc_tty_struct+0x96/0x8e0 [ 173.434009][ T9527] ? __pfx_alloc_tty_struct+0x10/0x10 [ 173.434034][ T9527] tty_init_dev.part.0+0x20/0x470 [ 173.434054][ T9527] tty_init_dev+0x60/0x80 [ 173.434073][ T9527] ? __pfx_ptmx_open+0x10/0x10 [ 173.434088][ T9527] ptmx_open+0x128/0x360 [ 173.434102][ T9527] ? __pfx_ptmx_open+0x10/0x10 [ 173.434117][ T9527] chrdev_open+0x234/0x6a0 [ 173.434133][ T9527] ? __pfx_apparmor_file_open+0x10/0x10 [ 173.434149][ T9527] ? __pfx_chrdev_open+0x10/0x10 [ 173.434166][ T9527] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 173.434193][ T9527] do_dentry_open+0x674/0x1470 [ 173.434208][ T9527] ? __pfx_chrdev_open+0x10/0x10 [ 173.434227][ T9527] vfs_open_consume+0xcc/0x460 [ 173.434248][ T9527] path_openat+0x1547/0x23f0 [ 173.434266][ T9527] ? __pfx_path_openat+0x10/0x10 [ 173.434287][ T9527] do_file_open+0x20e/0x430 [ 173.434304][ T9527] ? __pfx_do_file_open+0x10/0x10 [ 173.434331][ T9527] ? _raw_spin_unlock+0x28/0x50 [ 173.434346][ T9527] ? alloc_fd+0x471/0x7a0 [ 173.434366][ T9527] do_sys_openat2+0x163/0x1d0 [ 173.434383][ T9527] ? __pfx_do_sys_openat2+0x10/0x10 [ 173.434407][ T9527] __ia32_compat_sys_openat+0x12d/0x210 [ 173.434426][ T9527] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 173.434451][ T9527] __do_fast_syscall_32+0x14b/0x8c0 [ 173.434472][ T9527] do_fast_syscall_32+0x32/0x70 [ 173.434491][ T9527] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.434507][ T9527] RIP: 0023:0xf743efbc [ 173.434518][ T9527] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 173.434530][ T9527] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 173.434543][ T9527] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000740 [ 173.434551][ T9527] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.434558][ T9527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.434565][ T9527] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 173.434572][ T9527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.434587][ T9527] [ 173.434592][ T9527] memory: usage 92kB, limit 96kB, failcnt 30 [ 173.434600][ T9527] memory+swap: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 173.434607][ T9527] kmem: usage 92kB, limit 9007199254740988kB, failcnt 0 [ 173.434614][ T9527] Memory cgroup stats for /syz5/test: [ 173.434697][ T9527] cache 0 [ 173.434703][ T9527] rss 0 [ 173.434707][ T9527] rss_huge 0 [ 173.434712][ T9527] shmem 0 [ 173.434716][ T9527] mapped_file 0 [ 173.434721][ T9527] dirty 0 [ 173.434725][ T9527] writeback 0 [ 173.434730][ T9527] workingset_refault_anon 0 [ 173.434735][ T9527] workingset_refault_file 0 [ 173.434741][ T9527] swap 0 [ 173.434745][ T9527] swapcached 0 [ 173.434750][ T9527] pgpgin 0 [ 173.434755][ T9527] pgpgout 0 [ 173.434760][ T9527] pgfault 0 [ 173.434764][ T9527] pgmajfault 0 [ 173.434769][ T9527] inactive_anon 0 [ 173.434774][ T9527] active_anon 0 [ 173.434778][ T9527] inactive_file 0 [ 173.434783][ T9527] active_file 0 [ 173.434788][ T9527] unevictable 0 [ 173.434793][ T9527] hierarchical_memory_limit 98304 [ 173.434798][ T9527] hierarchical_memsw_limit 9223372036854771712 [ 173.434804][ T9527] total_cache 0 [ 173.434808][ T9527] total_rss 0 [ 173.434813][ T9527] total_rss_huge 0 [ 173.434817][ T9527] total_shmem 0 [ 173.434822][ T9527] total_mapped_file 0 [ 173.434826][ T9527] total_dirty 0 [ 173.434831][ T9527] total_writeback 0 [ 173.434835][ T9527] total_workingset_refault_anon 0 [ 173.434840][ T9527] total_workingset_refault_file 0 [ 173.434846][ T9527] total_swap 0 [ 173.434850][ T9527] total_swapcached 0 [ 173.434855][ T9527] total_pgpgin 0 [ 173.434859][ T9527] total_pgpgout 0 [ 173.434864][ T9527] total_pgfault 0 [ 173.434868][ T9527] total_pgmajfault 0 [ 173.434873][ T9527] total_inactive_anon 0 [ 173.434878][ T9527] total_active_anon 0 [ 173.434882][ T9527] total_inactive_file 0 [ 173.434887][ T9527] total_active_file 0 [ 173.434891][ T9527] total_unevictable 0 [ 173.434896][ T9527] anon_cost 0 [ 173.434900][ T9527] file_cost 0 [ 173.434905][ T9527] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.1278,pid=9526,uid=0 [ 173.435711][ T9527] Memory cgroup out of memory: Killed process 9526 (syz.5.1278) total-vm:102052kB, anon-rss:1312kB, file-rss:23720kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 173.470332][ T6017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.470342][ T6017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.588168][ T9538] syzkaller1: entered promiscuous mode [ 173.588178][ T9538] syzkaller1: entered allmulticast mode [ 173.667614][ T25] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 173.730165][ T9548] netlink: 'syz.5.1285': attribute type 1 has an invalid length. [ 173.819394][ T25] usb 9-1: unable to get BOS descriptor or descriptor too short [ 173.819438][ T25] usb 9-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 173.820487][ T25] usb 9-1: config 142 has an invalid interface number: 251 but max is 0 [ 173.820509][ T25] usb 9-1: config 142 has no interface number 0 [ 173.820538][ T25] usb 9-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 173.820560][ T25] usb 9-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 173.820581][ T25] usb 9-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 173.820600][ T25] usb 9-1: config 142 interface 251 has no altsetting 0 [ 173.823699][ T25] usb 9-1: string descriptor 0 read error: -22 [ 173.823817][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.831987][ T9531] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 173.832101][ T9531] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 173.835100][ T25] cypress_m8 9-1:142.251: HID->COM RS232 Adapter converter detected [ 173.841612][ T25] usb 9-1: HID->COM RS232 Adapter converter now attached to ttyUSB1 [ 174.048717][ T5801] Bluetooth: hci3: command tx timeout [ 174.373290][ T9568] : renamed from bond0 (while UP) [ 174.397310][ C0] usb 6-1: cypress_write_int_callback - unexpected nonzero write status received: -71 [ 174.397347][ C0] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 174.407450][ C0] usb 6-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 174.451673][ T9571] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1296'. [ 174.603316][ T50] usb 6-1: USB disconnect, device number 23 [ 174.610220][ T6017] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 174.623890][ T50] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 174.624182][ T50] cypress_m8 6-1:142.251: device disconnected [ 174.705535][ T9579] device-mapper: table: 248:8: mirror: Device lookup failure (-ENOENT) [ 174.705565][ T9579] device-mapper: ioctl: error adding target to table [ 175.317470][ T5801] Bluetooth: hci5: command tx timeout [ 175.639081][ T9603] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1309'. [ 175.676272][ T9605] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.685904][ T9605] bridge_slave_0 (unregistering): left allmulticast mode [ 175.685921][ T9605] bridge_slave_0 (unregistering): left promiscuous mode [ 175.685980][ T9605] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.341138][ T9613] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1314'. [ 176.407093][ T50] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 176.424057][ T5878] usb 9-1: USB disconnect, device number 8 [ 176.429917][ T5878] cyphidcom ttyUSB1: HID->COM RS232 Adapter converter now disconnected from ttyUSB1 [ 176.437154][ C0] net_ratelimit: 409 callbacks suppressed [ 176.440096][ T5878] cypress_m8 9-1:142.251: device disconnected [ 176.517688][ T6017] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 176.547187][ T5801] Bluetooth: hci4: link tx timeout [ 176.547193][ T5801] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 176.550405][ T6968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.560260][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 176.562588][ T50] usb 6-1: unable to get BOS descriptor or descriptor too short [ 176.562626][ T50] usb 6-1: New USB device found: idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 176.563748][ T50] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 176.563771][ T50] usb 6-1: config 0 has no interface number 0 [ 176.563814][ T50] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 176.563840][ T50] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 176.563864][ T50] usb 6-1: config 0 interface 88 has no altsetting 0 [ 176.567957][ T50] usb 6-1: string descriptor 0 read error: -22 [ 176.568090][ T50] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 176.573021][ T50] usb 6-1: config 0 descriptor?? [ 176.576318][ T50] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.88/input/input19 [ 176.683894][ T5800] udevd[5800]: Error opening device "/dev/input/event4": Input/output error [ 176.683918][ T5800] udevd[5800]: Unable to EVIOCGABS device "/dev/input/event4" [ 176.683945][ T5800] udevd[5800]: Unable to EVIOCGABS device "/dev/input/event4" [ 176.683979][ T5800] udevd[5800]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 176.700773][ T5202] udevd[5202]: worker [5800] terminated by signal 6 (Aborted) [ 176.700814][ T5202] udevd[5202]: worker [5800] failed while handling '/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.88/input/input19/event4' [ 176.722679][ T9627] usb usb7: usbfs: process 9627 (syz.5.1321) did not claim interface 0 before use [ 176.784246][ T43] audit: type=1326 audit(1794143884.688:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9608 comm="syz.1.1312" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746efbc code=0x0 [ 177.145280][ T5801] Bluetooth: hci4: unexpected event for opcode 0x2042 [ 177.207247][ T59] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 177.358408][ T59] usb 10-1: unable to get BOS descriptor or descriptor too short [ 177.358449][ T59] usb 10-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 177.359326][ T59] usb 10-1: config 142 has an invalid interface number: 251 but max is 0 [ 177.359349][ T59] usb 10-1: config 142 has no interface number 0 [ 177.359377][ T59] usb 10-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 177.359399][ T59] usb 10-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 177.359419][ T59] usb 10-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 177.359438][ T59] usb 10-1: config 142 interface 251 has no altsetting 0 [ 177.362059][ T59] usb 10-1: string descriptor 0 read error: -22 [ 177.362164][ T59] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.364953][ T9635] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 177.365037][ T9635] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 177.367695][ T59] cypress_m8 10-1:142.251: HID->COM RS232 Adapter converter detected [ 177.370282][ T59] usb 10-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 177.396816][ T5801] Bluetooth: hci5: command tx timeout [ 177.677618][ T9641] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1328'. [ 177.742631][ T9643] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1329'. [ 177.770669][ T9645] usb usb7: usbfs: process 9645 (syz.6.1330) did not claim interface 0 before use [ 178.092625][ T9635] cyphidcom ttyUSB0: cypress_serial_control - failed sending serial line settings - -32 [ 178.092648][ T9635] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 178.092913][ C3] usb 10-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 178.117878][ T9246] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 178.214679][ T9665] usb usb7: usbfs: process 9665 (syz.6.1340) did not claim interface 0 before use [ 178.276847][ T9246] usb 9-1: Using ep0 maxpacket: 8 [ 178.277307][ T9246] usb 9-1: New USB device found: idVendor=1e7d, idProduct=2db4, bcdDevice=0.00 [ 178.278134][ T9246] usb 9-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.278149][ T9246] usb 9-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.278161][ T9246] usb 9-1: config 0 interface 0 has no altsetting 0 [ 178.278187][ T9246] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.279848][ T9246] usb 9-1: config 0 descriptor?? [ 178.280783][ T9669] fuse: Unknown parameter '0x0000000000000004' [ 178.282201][ T9246] usbhid 9-1:0.0: can't add hid device: -22 [ 178.282269][ T9246] usbhid 9-1:0.0: probe with driver usbhid failed with error -22 [ 178.358672][ T9246] usb 10-1: USB disconnect, device number 2 [ 178.364602][ T9246] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 178.364956][ T9246] cypress_m8 10-1:142.251: device disconnected [ 178.488608][ T10] usb 9-1: USB disconnect, device number 9 [ 178.853638][ T9684] usb usb7: usbfs: process 9684 (syz.6.1349) did not claim interface 0 before use [ 178.929497][ T9689] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1351'. [ 178.929519][ T9689] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1351'. [ 178.981667][ T9692] netlink: 'syz.5.1352': attribute type 1 has an invalid length. [ 179.030571][ T9692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.049564][ T67] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 179.064848][ T9692] bond0: (slave geneve2): making interface the new active one [ 179.070200][ T9692] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 179.080812][ T30] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 179.173877][ T25] usb 6-1: USB disconnect, device number 24 [ 179.222626][ T9699] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1355'. [ 179.261836][ T9701] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1356'. [ 179.376714][ T50] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 179.477128][ T67] Bluetooth: hci5: command tx timeout [ 179.527669][ T50] usb 10-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 179.528814][ T50] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 179.528837][ T50] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.528853][ T50] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 179.528908][ T50] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.528930][ T50] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.530613][ T50] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 179.530630][ T50] usb 10-1: Product: syz [ 179.530644][ T50] usb 10-1: Manufacturer: syz [ 179.540047][ T50] cdc_wdm 10-1:1.0: skipping garbage [ 179.540059][ T50] cdc_wdm 10-1:1.0: skipping garbage [ 179.544778][ T50] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 179.544793][ T50] cdc_wdm 10-1:1.0: Unknown control protocol [ 179.586352][ T9713] netlink: 'syz.1.1362': attribute type 1 has an invalid length. [ 179.616361][ T9713] 8021q: adding VLAN 0 to HW filter on device bond10 [ 179.631060][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1362'. [ 179.717990][ T6017] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 179.748022][ T9697] cdc_wdm 10-1:1.0: Error submitting int urb - -90 [ 179.803161][ T50] usb 10-1: USB disconnect, device number 3 [ 179.853085][ T9727] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.873243][ T9738] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1372'. [ 179.873258][ T9738] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1372'. [ 179.890945][ T9735] tc action pedit offset must be on 32 bit boundaries [ 179.943935][ T9727] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 179.966050][ T9727] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 179.970011][ T9727] bond1: (slave wlan0): Enslaving as a backup interface with a down link [ 180.014149][ T9743] netlink: 'syz.4.1374': attribute type 1 has an invalid length. [ 180.028228][ T9743] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.036203][ T9743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1374'. [ 180.043402][ T9746] usb usb7: usbfs: process 9746 (syz.6.1376) did not claim interface 0 before use [ 180.190251][ T9759] syzkaller1: entered promiscuous mode [ 180.190269][ T9759] syzkaller1: entered allmulticast mode [ 180.372773][ T9775] : renamed from bond0 (while UP) [ 180.755154][ T9799] netlink: 'syz.4.1397': attribute type 10 has an invalid length. [ 180.755610][ T9799] syz_tun: entered promiscuous mode [ 180.760137][ T9799] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 180.835906][ T67] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 180.953166][ T9807] netlink: 'syz.6.1401': attribute type 1 has an invalid length. [ 181.232528][ T9821] usb usb7: usbfs: process 9821 (syz.1.1408) did not claim interface 0 before use [ 181.392928][ T9826] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 181.401079][ T9826] pci 0000:00:03.0: BAR 0 [io 0xc0a0-0xc0bf] [ 181.401168][ T9826] pci 0000:00:03.0: BAR 1 [mem 0xfeaf7000-0xfeaf7fff] [ 181.401444][ T9826] pci 0000:00:03.0: BAR 4 [mem 0xfe200000-0xfe203fff 64bit pref] [ 181.431009][ T9826] pci 0000:00:03.0: Adding to iommu group 3 [ 181.455914][ T9826] pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 conventional PCI endpoint [ 181.462136][ T9826] pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO [ 181.488118][ T9826] pci 0000:00:1f.0: Adding to iommu group 9 [ 181.495755][ T9826] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 181.506299][ T9826] pci 0000:00:03.0: BAR 1 [mem 0x80000000-0x80000fff]: assigned [ 181.508617][ T9826] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 181.559129][ T6045] net_ratelimit: 200 callbacks suppressed [ 181.559592][ T6045] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 181.729494][ T9826] lpc_ich 0000:00:1f.0: I/O space for GPIO uninitialized [ 181.756909][ T59] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 181.908300][ T59] usb 9-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 181.909079][ T59] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.909093][ T59] usb 9-1: config 0 has no interfaces? [ 181.910610][ T59] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 181.910621][ T59] usb 9-1: Product: syz [ 181.910630][ T59] usb 9-1: Manufacturer: syz [ 181.910638][ T59] usb 9-1: SerialNumber: syz [ 181.914948][ T59] usb 9-1: config 0 descriptor?? [ 182.133089][ T25] usb 9-1: USB disconnect, device number 10 [ 182.754632][ T9864] __nla_validate_parse: 3 callbacks suppressed [ 182.754646][ T9864] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1426'. [ 182.754665][ T9864] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1426'. [ 182.807919][ T59] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 182.933801][ T9868] netlink: 'syz.6.1428': attribute type 1 has an invalid length. [ 182.963109][ T9868] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.977348][ T59] usb 10-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 182.978309][ T59] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 182.978324][ T59] usb 10-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 182.978334][ T59] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 182.978366][ T59] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 182.978381][ T59] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 182.979797][ T59] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 182.979808][ T59] usb 10-1: Product: syz [ 182.979816][ T59] usb 10-1: Manufacturer: syz [ 182.986228][ T59] cdc_wdm 10-1:1.0: skipping garbage [ 182.986241][ T59] cdc_wdm 10-1:1.0: skipping garbage [ 182.986281][ T59] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 183.015785][ T9868] bond2: (slave geneve2): making interface the new active one [ 183.019246][ T9868] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 183.059424][ T6009] IPVS: starting estimator thread 0... [ 183.093016][ T9876] : renamed from bond0 (while UP) [ 183.166791][ T9872] IPVS: using max 40 ests per chain, 96000 per kthread [ 183.242865][ T42] usb 10-1: USB disconnect, device number 4 [ 183.318538][ T9900] : renamed from bond0 (while UP) [ 183.334141][ T9902] usb usb7: usbfs: process 9902 (syz.6.1443) did not claim interface 0 before use [ 183.372417][ T9904] FAULT_INJECTION: forcing a failure. [ 183.372417][ T9904] name failslab, interval 1, probability 0, space 0, times 0 [ 183.372432][ T9904] CPU: 2 UID: 0 PID: 9904 Comm: syz.4.1444 Not tainted syzkaller #0 PREEMPT(full) [ 183.372447][ T9904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.372455][ T9904] Call Trace: [ 183.372461][ T9904] [ 183.372467][ T9904] dump_stack_lvl+0x100/0x190 [ 183.372489][ T9904] should_fail_ex.cold+0x5/0xa [ 183.372507][ T9904] should_failslab+0xc2/0x120 [ 183.372524][ T9904] __kmalloc_cache_node_noprof+0x94/0x710 [ 183.372540][ T9904] ? __alloc_workqueue+0xa4f/0x1900 [ 183.372559][ T9904] __alloc_workqueue+0xa4f/0x1900 [ 183.372580][ T9904] alloc_workqueue_noprof+0xc7/0x130 [ 183.372595][ T9904] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 183.372614][ T9904] ? lockdep_init_map_type+0x5c/0x250 [ 183.372629][ T9904] ? lockdep_init_map_type+0x5c/0x250 [ 183.372645][ T9904] hci_register_dev+0x1cf/0xcc0 [ 183.372662][ T9904] ? __raw_spin_lock_init+0x3a/0x110 [ 183.372680][ T9904] __vhci_create_device+0x360/0x880 [ 183.372696][ T9904] vhci_write+0x2cd/0x4a0 [ 183.372716][ T9904] vfs_write+0x6af/0x1050 [ 183.372730][ T9904] ? __pfx_vhci_write+0x10/0x10 [ 183.372745][ T9904] ? __pfx_vfs_write+0x10/0x10 [ 183.372758][ T9904] ? find_held_lock+0x2b/0x80 [ 183.372786][ T9904] ksys_write+0x12a/0x250 [ 183.372801][ T9904] ? __pfx_ksys_write+0x10/0x10 [ 183.372820][ T9904] __do_fast_syscall_32+0x14b/0x8c0 [ 183.372841][ T9904] do_fast_syscall_32+0x32/0x70 [ 183.372861][ T9904] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.372876][ T9904] RIP: 0023:0xf7fc3fbc [ 183.372887][ T9904] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 183.372899][ T9904] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 183.372912][ T9904] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000440 [ 183.372919][ T9904] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.372927][ T9904] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.372934][ T9904] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 183.372941][ T9904] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.372956][ T9904] [ 183.372998][ T9904] Bluetooth: Can't register HCI device [ 183.544376][ T9915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1449'. [ 183.693230][ T9923] netlink: 'syz.4.1453': attribute type 1 has an invalid length. [ 183.715221][ T9923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.824479][ T9926] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 183.824601][ T9926] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 183.840081][ T9926] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 183.840182][ T9926] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 183.843619][ T9926] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 183.843709][ T9926] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 183.845070][ T9926] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 183.845177][ T9926] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 183.846277][ T9926] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 183.992938][ T67] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 184.261315][ T43] audit: type=1326 audit(1794143892.168:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.6.1459" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x0 [ 184.406891][ T25] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 184.558594][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 184.558616][ T25] usb 6-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 184.559442][ T25] usb 6-1: config 142 has an invalid interface number: 251 but max is 0 [ 184.559456][ T25] usb 6-1: config 142 has no interface number 0 [ 184.559475][ T25] usb 6-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 184.559490][ T25] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 184.559505][ T25] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 184.559519][ T25] usb 6-1: config 142 interface 251 has no altsetting 0 [ 184.561996][ T25] usb 6-1: string descriptor 0 read error: -22 [ 184.562063][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.566541][ T9937] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 184.566763][ T9937] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 184.568371][ T25] cypress_m8 6-1:142.251: HID->COM RS232 Adapter converter detected [ 184.572062][ T25] usb 6-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 184.631967][ T9946] netlink: 'syz.4.1462': attribute type 1 has an invalid length. [ 184.657087][ T9946] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.849651][ T6009] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 184.946211][ T67] Bluetooth: hci5: unexpected event for opcode 0x2042 [ 184.965947][ T9959] usb usb7: usbfs: process 9959 (syz.4.1467) did not claim interface 0 before use [ 185.529818][ T67] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 185.530221][ T67] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 185.638164][ T9961] cyphidcom ttyUSB0: cypress_serial_control - failed to retrieve serial line settings - -32 [ 185.638178][ T9961] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 185.638421][ C3] usb 6-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 185.739001][ T9973] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 185.876951][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 185.876987][ T5801] Bluetooth: hci4: command 0x0406 tx timeout [ 185.877094][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 185.896734][ T9978] md/raid1:md5: active with 1 out of 1 mirrors [ 185.897471][ T9978] md5: detected capacity change from 0 to 4096 [ 185.908203][ T25] usb 6-1: USB disconnect, device number 25 [ 185.922375][ T25] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 185.923116][ T25] cypress_m8 6-1:142.251: device disconnected [ 185.963300][ T9978] md5: detected capacity change from 4096 to 0 [ 185.963309][ T9978] md: md5 stopped. [ 186.375978][ T67] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.377865][ T67] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.606729][ T6009] net_ratelimit: 264 callbacks suppressed [ 186.606980][ T6009] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 186.617089][ T8065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.216796][ T2369] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 187.368742][ T2369] usb 9-1: unable to get BOS descriptor or descriptor too short [ 187.368791][ T2369] usb 9-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 187.370077][ T2369] usb 9-1: config 142 has an invalid interface number: 251 but max is 0 [ 187.370099][ T2369] usb 9-1: config 142 has no interface number 0 [ 187.370131][ T2369] usb 9-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 187.370155][ T2369] usb 9-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 187.370176][ T2369] usb 9-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 187.370195][ T2369] usb 9-1: config 142 interface 251 has no altsetting 0 [ 187.373326][ T2369] usb 9-1: string descriptor 0 read error: -22 [ 187.373438][ T2369] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.379073][T10030] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 187.379222][T10030] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 187.380889][ T2369] cypress_m8 9-1:142.251: HID->COM RS232 Adapter converter detected [ 187.388568][ T2369] usb 9-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 187.734070][T10056] FAULT_INJECTION: forcing a failure. [ 187.734070][T10056] name failslab, interval 1, probability 0, space 0, times 0 [ 187.734101][T10056] CPU: 2 UID: 0 PID: 10056 Comm: syz.6.1507 Not tainted syzkaller #0 PREEMPT(full) [ 187.734142][T10056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.734155][T10056] Call Trace: [ 187.734163][T10056] [ 187.734171][T10056] dump_stack_lvl+0x100/0x190 [ 187.734207][T10056] should_fail_ex.cold+0x5/0xa [ 187.734237][T10056] should_failslab+0xc2/0x120 [ 187.734263][T10056] __kmalloc_noprof+0xfc/0x840 [ 187.734283][T10056] ? lock_acquire+0x1d1/0x380 [ 187.734304][T10056] ? __alloc_workqueue+0x8a/0x1900 [ 187.734333][T10056] __alloc_workqueue+0x8a/0x1900 [ 187.734360][T10056] ? is_dynamic_key+0xc3/0x170 [ 187.734381][T10056] ? lockdep_init_map_type+0xe6/0x250 [ 187.734407][T10056] alloc_workqueue_noprof+0xc7/0x130 [ 187.734433][T10056] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 187.734462][T10056] ? lockdep_init_map_type+0x5c/0x250 [ 187.734487][T10056] ? lockdep_init_map_type+0x5c/0x250 [ 187.734513][T10056] hci_register_dev+0x240/0xcc0 [ 187.734537][T10056] ? __raw_spin_lock_init+0x3a/0x110 [ 187.734565][T10056] __vhci_create_device+0x360/0x880 [ 187.734591][T10056] vhci_write+0x2cd/0x4a0 [ 187.734615][T10056] vfs_write+0x6af/0x1050 [ 187.734639][T10056] ? __pfx_vhci_write+0x10/0x10 [ 187.734663][T10056] ? __pfx_vfs_write+0x10/0x10 [ 187.734681][T10056] ? find_held_lock+0x2b/0x80 [ 187.734726][T10056] ksys_write+0x12a/0x250 [ 187.734749][T10056] ? __pfx_ksys_write+0x10/0x10 [ 187.734776][T10056] __do_fast_syscall_32+0x14b/0x8c0 [ 187.734812][T10056] do_fast_syscall_32+0x32/0x70 [ 187.734841][T10056] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.734866][T10056] RIP: 0023:0xf73aefbc [ 187.734883][T10056] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 187.734901][T10056] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 187.734922][T10056] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000440 [ 187.734935][T10056] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.734948][T10056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.734959][T10056] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 187.734970][T10056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.734996][T10056] [ 187.739606][T10056] Bluetooth: Can't register HCI device [ 187.902716][T10064] input: syz1 as /devices/virtual/input/input20 [ 187.958331][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 187.958360][ T5801] Bluetooth: hci4: command 0x0406 tx timeout [ 187.967080][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 188.001600][T10073] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.074901][T10073] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 188.092588][T10073] bond1: (slave wlan0): Enslaving as a backup interface with a down link [ 188.259833][T10088] netlink: 'syz.6.1521': attribute type 1 has an invalid length. [ 188.275720][T10088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.427351][T10102] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1527'. [ 188.459079][T10067] cyphidcom ttyUSB0: cypress_serial_control - failed to retrieve serial line settings - -32 [ 188.459092][T10067] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 188.459303][ C0] usb 9-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 188.554343][T10111] netlink: 'syz.1.1531': attribute type 1 has an invalid length. [ 188.583210][T10111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.709344][T10122] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 188.713939][T10122] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f] [ 188.713998][T10122] pci 0000:00:03.0: BAR 1 [mem 0x80000000-0x80000fff] [ 188.714178][T10122] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref] [ 188.722708][T10122] pci 0000:00:03.0: Adding to iommu group 3 [ 188.731123][T10122] pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 conventional PCI endpoint [ 188.733363][T10122] pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO [ 188.738161][ T30] usb 9-1: USB disconnect, device number 11 [ 188.738998][T10122] pci 0000:00:1f.0: Adding to iommu group 9 [ 188.742438][T10122] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 188.744549][T10122] pci 0000:00:03.0: BAR 1 [mem 0x80000000-0x80000fff]: assigned [ 188.744688][T10122] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 188.749638][ T30] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 188.750813][ T30] cypress_m8 9-1:142.251: device disconnected [ 188.811057][T10122] lpc_ich 0000:00:1f.0: I/O space for GPIO uninitialized [ 188.874310][T10125] 8021q: adding VLAN 0 to HW filter on device bond11 [ 188.883855][T10125] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 188.890203][T10125] bond11: (slave wlan0): Enslaving as a backup interface with a down link [ 189.421477][T10139] FAULT_INJECTION: forcing a failure. [ 189.421477][T10139] name failslab, interval 1, probability 0, space 0, times 0 [ 189.421503][T10139] CPU: 3 UID: 0 PID: 10139 Comm: syz.4.1542 Not tainted syzkaller #0 PREEMPT(full) [ 189.421518][T10139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.421545][T10139] Call Trace: [ 189.421550][T10139] [ 189.421556][T10139] dump_stack_lvl+0x100/0x190 [ 189.421580][T10139] should_fail_ex.cold+0x5/0xa [ 189.421599][T10139] should_failslab+0xc2/0x120 [ 189.421616][T10139] kmem_cache_alloc_noprof+0x92/0x6a0 [ 189.421629][T10139] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 189.421644][T10139] ? acpi_ut_create_update_state+0x72/0x130 [ 189.421667][T10139] acpi_ut_create_update_state+0x72/0x130 [ 189.421688][T10139] acpi_ut_create_update_state_and_push+0x2f/0x70 [ 189.421715][T10139] acpi_ut_update_object_reference+0x32f/0x800 [ 189.421745][T10139] ? __pfx_acpi_ut_update_object_reference+0x10/0x10 [ 189.421769][T10139] ? __pfx_acpi_ut_trace+0x10/0x10 [ 189.421789][T10139] ? __pfx_acpi_ut_trace+0x10/0x10 [ 189.421811][T10139] ? acpi_ut_status_exit+0x111/0x1c0 [ 189.421835][T10139] acpi_ut_add_reference+0x80/0x170 [ 189.421855][T10139] acpi_ex_resolve_node_to_value+0x7e1/0x9a0 [ 189.421879][T10139] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 189.421903][T10139] ? acpi_ds_create_operand+0x267/0xc20 [ 189.421933][T10139] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 189.421954][T10139] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 189.421974][T10139] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 189.421990][T10139] ? __asan_memset+0x23/0x50 [ 189.422016][T10139] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 189.422037][T10139] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 189.422064][T10139] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 189.422091][T10139] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 189.422115][T10139] ? acpi_ut_trace_ptr+0x1d1/0x2a0 [ 189.422136][T10139] acpi_ds_exec_end_op+0xb78/0x1e60 [ 189.422164][T10139] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 189.422189][T10139] acpi_ps_parse_loop+0x5e1/0x26e0 [ 189.422222][T10139] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 189.422246][T10139] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 189.422263][T10139] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 189.422280][T10139] ? acpi_ut_create_thread_state+0x6d/0x170 [ 189.422313][T10139] acpi_ps_parse_aml+0x81e/0x1120 [ 189.422334][T10139] acpi_ps_execute_method+0x5c4/0xe90 [ 189.422357][T10139] acpi_ns_evaluate+0x640/0x1670 [ 189.422382][T10139] acpi_ut_evaluate_object+0xf7/0x610 [ 189.422406][T10139] acpi_rs_get_prt_method_data+0xa0/0x150 [ 189.422428][T10139] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 189.422447][T10139] ? acpi_ut_status_exit+0x111/0x1c0 [ 189.422467][T10139] ? acpi_rs_validate_parameters+0x104/0x210 [ 189.422489][T10139] acpi_get_irq_routing_table+0xb8/0x140 [ 189.422511][T10139] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 189.422537][T10139] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 189.422565][T10139] ? preempt_schedule_thunk+0x16/0x40 [ 189.422595][T10139] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 189.422627][T10139] acpi_pci_irq_lookup+0x8e/0x6b0 [ 189.422649][T10139] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 189.422676][T10139] acpi_pci_irq_disable+0x1a8/0x360 [ 189.422702][T10139] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 189.422722][T10139] pcibios_disable_device+0x89/0xb0 [ 189.422746][T10139] do_pci_disable_device+0x9f/0x100 [ 189.422767][T10139] ? __pfx_do_pci_disable_device+0x10/0x10 [ 189.422789][T10139] ? pci_release_region.part.0+0x15b/0x2e0 [ 189.422817][T10139] pci_disable_device+0x130/0x270 [ 189.422836][T10139] virtio_pci_remove+0xcf/0x110 [ 189.422859][T10139] pci_device_remove+0xb2/0x1d0 [ 189.422884][T10139] ? __pfx_pci_device_remove+0x10/0x10 [ 189.422910][T10139] device_remove+0xcb/0x180 [ 189.422935][T10139] device_release_driver_internal+0x441/0x610 [ 189.422957][T10139] pci_stop_bus_device+0x120/0x160 [ 189.422977][T10139] pci_stop_and_remove_bus_device+0x58/0xa0 [ 189.422996][T10139] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 189.423015][T10139] remove_store+0x123/0x140 [ 189.423036][T10139] ? __pfx_remove_store+0x10/0x10 [ 189.423056][T10139] ? find_held_lock+0x2b/0x80 [ 189.423079][T10139] ? sysfs_file_kobj+0xe4/0x290 [ 189.423099][T10139] ? sysfs_file_kobj+0xe4/0x290 [ 189.423121][T10139] ? __pfx_remove_store+0x10/0x10 [ 189.423140][T10139] dev_attr_store+0x58/0x80 [ 189.423158][T10139] ? __pfx_dev_attr_store+0x10/0x10 [ 189.423175][T10139] sysfs_kf_write+0xf2/0x150 [ 189.423197][T10139] kernfs_fop_write_iter+0x3e0/0x5f0 [ 189.423215][T10139] ? __pfx_sysfs_kf_write+0x10/0x10 [ 189.423239][T10139] vfs_write+0x6af/0x1050 [ 189.423258][T10139] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 189.423279][T10139] ? __pfx_vfs_write+0x10/0x10 [ 189.423312][T10139] ? find_held_lock+0x2b/0x80 [ 189.423353][T10139] ksys_write+0x12a/0x250 [ 189.423372][T10139] ? __pfx_ksys_write+0x10/0x10 [ 189.423399][T10139] __do_fast_syscall_32+0x14b/0x8c0 [ 189.423425][T10139] ? lockdep_hardirqs_on+0x7d/0x110 [ 189.423452][T10139] do_fast_syscall_32+0x32/0x70 [ 189.423478][T10139] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.423499][T10139] RIP: 0023:0xf7fc3fbc [ 189.423514][T10139] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 189.423530][T10139] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 189.423546][T10139] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000240 [ 189.423558][T10139] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.423567][T10139] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.423577][T10139] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 189.423586][T10139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.423609][T10139] [ 189.423661][T10139] ACPI Error: AE_NO_MEMORY, Could not update object reference count (20260408/utdelete-651) [ 189.650769][T10151] device-mapper: table: 248:9: writecache: Origin data device lookup failed (-ENOENT) [ 189.650788][T10151] device-mapper: ioctl: error adding target to table [ 189.856942][T10168] netlink: 'syz.1.1555': attribute type 10 has an invalid length. [ 189.859296][T10168] syz_tun: entered promiscuous mode [ 189.876656][ T5878] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 189.885575][T10168] : (slave syz_tun): Enslaving as an active interface with an up link [ 189.957652][ T6009] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 189.991587][ T25] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 189.995430][T10176] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 190.014976][ T25] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 190.038298][ T5878] usb 10-1: unable to get BOS descriptor or descriptor too short [ 190.038327][ T5878] usb 10-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 190.039153][ T5878] usb 10-1: config 142 has an invalid interface number: 251 but max is 0 [ 190.039169][ T5878] usb 10-1: config 142 has no interface number 0 [ 190.039189][ T5878] usb 10-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 190.039203][ T5878] usb 10-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 190.039217][ T5878] usb 10-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 190.039230][ T5878] usb 10-1: config 142 interface 251 has no altsetting 0 [ 190.041599][ T5878] usb 10-1: string descriptor 0 read error: -22 [ 190.041668][ T5878] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.043188][T10181] netlink: 'syz.4.1561': attribute type 1 has an invalid length. [ 190.043376][T10149] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 190.043433][T10149] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 190.046541][ T5878] cypress_m8 10-1:142.251: HID->COM RS232 Adapter converter detected [ 190.051566][ T5878] usb 10-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 190.072492][T10181] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.086710][T10243] netlink: 'syz.6.1572': attribute type 1 has an invalid length. [ 191.108901][T10243] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.121787][T10222] cyphidcom ttyUSB0: cypress_serial_control - failed to retrieve serial line settings - -32 [ 191.121802][T10222] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 191.122022][ C2] usb 10-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 191.363507][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1578'. [ 191.390214][ T1750] usb 10-1: USB disconnect, device number 5 [ 191.398515][ T1750] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 191.399054][ T1750] cypress_m8 10-1:142.251: device disconnected [ 191.726731][ T6000] net_ratelimit: 231 callbacks suppressed [ 191.726977][ T6000] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 192.187331][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.280469][T10273] netlink: 'syz.1.1583': attribute type 10 has an invalid length. [ 192.357610][ T1750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.435922][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1589'. [ 192.480588][T10291] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1591'. [ 192.481299][ T5801] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 192.481368][ T5801] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 192.732539][T10305] netlink: 'syz.5.1598': attribute type 1 has an invalid length. [ 192.752362][T10305] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.821240][T10310] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1600'. [ 192.821269][T10310] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1600'. [ 192.826809][ T1750] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 192.998249][ T1750] usb 11-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 192.999597][ T1750] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 192.999613][ T1750] usb 11-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 192.999624][ T1750] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 192.999656][ T1750] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 192.999671][ T1750] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 193.000830][ T1750] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 193.000841][ T1750] usb 11-1: Product: syz [ 193.000849][ T1750] usb 11-1: Manufacturer: syz [ 193.008442][ T1750] cdc_wdm 11-1:1.0: skipping garbage [ 193.008453][ T1750] cdc_wdm 11-1:1.0: skipping garbage [ 193.008504][ T1750] cdc_wdm 11-1:1.0: probe with driver cdc_wdm failed with error -22 [ 193.268083][ T25] usb 11-1: USB disconnect, device number 2 [ 193.799260][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.799289][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.828174][T10365] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 193.828194][T10365] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 193.828221][T10365] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 193.855117][T10365] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1624'. [ 193.855596][T10365] bond_slave_0: left promiscuous mode [ 193.855694][T10365] bond_slave_1: left promiscuous mode [ 193.904054][T10365]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.909991][T10365]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.913334][T10365]  (unregistering): (slave syz_tun): Releasing backup interface [ 193.914296][T10365]  (unregistering): Released all slaves [ 193.994492][T10371] netlink: 'syz.1.1626': attribute type 1 has an invalid length. [ 194.011969][T10371] 8021q: adding VLAN 0 to HW filter on device bond12 [ 194.047497][ T5801] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 194.047566][ T5801] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 195.718501][ T6017] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.776447][T10427] usb usb7: usbfs: process 10427 (syz.1.1651) did not claim interface 0 before use [ 195.900334][ T5801] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 196.746866][ T6968] net_ratelimit: 184 callbacks suppressed [ 196.808371][T10462] netlink: 'syz.4.1664': attribute type 1 has an invalid length. [ 196.832945][T10462] 8021q: adding VLAN 0 to HW filter on device bond6 [ 196.839616][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1664'. [ 196.839633][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1664'. [ 197.012146][ T6017] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 197.340891][T10494] netlink: 'syz.4.1675': attribute type 1 has an invalid length. [ 197.354049][T10494] 8021q: adding VLAN 0 to HW filter on device bond7 [ 197.362747][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1675'. [ 197.362764][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1675'. [ 197.600034][ T5801] Bluetooth: hci4: unexpected event for opcode 0x0042 [ 198.431822][T10529] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.440497][T10529] bridge_slave_0 (unregistering): left allmulticast mode [ 198.440509][T10529] bridge_slave_0 (unregistering): left promiscuous mode [ 198.442321][T10529] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.975413][ T7303] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.028918][T10533] FAULT_INJECTION: forcing a failure. [ 199.028918][T10533] name failslab, interval 1, probability 0, space 0, times 0 [ 199.028944][T10533] CPU: 0 UID: 0 PID: 10533 Comm: syz.5.1691 Not tainted syzkaller #0 PREEMPT(full) [ 199.028967][T10533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 199.028978][T10533] Call Trace: [ 199.028984][T10533] [ 199.028989][T10533] dump_stack_lvl+0x100/0x190 [ 199.029012][T10533] should_fail_ex.cold+0x5/0xa [ 199.029029][T10533] should_failslab+0xc2/0x120 [ 199.029045][T10533] kmem_cache_alloc_noprof+0x92/0x6a0 [ 199.029059][T10533] ? __send_signal_locked+0x1d1/0x1420 [ 199.029080][T10533] __send_signal_locked+0x1d1/0x1420 [ 199.029100][T10533] do_notify_parent+0xf15/0x10c0 [ 199.029119][T10533] ? __pfx_do_notify_parent+0x10/0x10 [ 199.029137][T10533] ? do_raw_spin_lock+0x128/0x260 [ 199.029155][T10533] ? __wake_up+0x3f/0x60 [ 199.029174][T10533] ? release_task+0xc27/0x1ca0 [ 199.029192][T10533] release_task+0x14ea/0x1ca0 [ 199.029211][T10533] ? __pfx_release_task+0x10/0x10 [ 199.029227][T10533] ? do_raw_spin_lock+0x128/0x260 [ 199.029244][T10533] ? find_held_lock+0x2b/0x80 [ 199.029260][T10533] ? __wake_up+0x3f/0x60 [ 199.029277][T10533] ? __wake_up+0x3f/0x60 [ 199.029297][T10533] ? rcu_is_watching+0x13/0xc0 [ 199.029317][T10533] do_exit+0x1300/0x2a00 [ 199.029334][T10533] ? __pfx_do_exit+0x10/0x10 [ 199.029348][T10533] ? do_raw_spin_lock+0x128/0x260 [ 199.029363][T10533] ? find_held_lock+0x2b/0x80 [ 199.029379][T10533] ? get_signal+0xa28/0x22e0 [ 199.029393][T10533] do_group_exit+0xd5/0x2a0 [ 199.029409][T10533] get_signal+0x1f58/0x22e0 [ 199.029420][T10533] ? __pfx_futex_wait+0x10/0x10 [ 199.029438][T10533] ? __pfx_get_signal+0x10/0x10 [ 199.029451][T10533] ? do_futex+0x190/0x440 [ 199.029470][T10533] arch_do_signal_or_restart+0x91/0x7a0 [ 199.029513][T10533] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 199.029540][T10533] exit_to_user_mode_loop+0x139/0x700 [ 199.029556][T10533] ? rcu_is_watching+0x13/0xc0 [ 199.029574][T10533] __do_fast_syscall_32+0x5b0/0x8c0 [ 199.029593][T10533] ? lockdep_hardirqs_on+0x7d/0x110 [ 199.029611][T10533] do_fast_syscall_32+0x32/0x70 [ 199.029629][T10533] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.029645][T10533] RIP: 0023:0xf743efbc [ 199.029656][T10533] Code: Unable to access opcode bytes at 0xf743ef92. [ 199.029662][T10533] RSP: 002b:00000000f54565bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 199.029674][T10533] RAX: fffffffffffffe00 RBX: 00000000f7464f88 RCX: 0000000000000080 [ 199.029682][T10533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7464f8c [ 199.029689][T10533] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 199.029696][T10533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.029703][T10533] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 199.029717][T10533] [ 199.078799][ T7303] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.092496][T10538] Bluetooth: ISO socket layer initialized [ 199.204176][ T7303] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.213601][T10547] netlink: 'syz.5.1697': attribute type 1 has an invalid length. [ 199.265817][T10547] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.298538][ T7303] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.414470][ T7303] bridge_slave_1: left allmulticast mode [ 199.414512][ T7303] bridge_slave_1: left promiscuous mode [ 199.415514][ T7303] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.417940][T10559] FAULT_INJECTION: forcing a failure. [ 199.417940][T10559] name failslab, interval 1, probability 0, space 0, times 0 [ 199.417959][T10559] CPU: 2 UID: 0 PID: 10559 Comm: syz.5.1701 Not tainted syzkaller #0 PREEMPT(full) [ 199.417973][T10559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 199.417980][T10559] Call Trace: [ 199.417985][T10559] [ 199.417990][T10559] dump_stack_lvl+0x100/0x190 [ 199.418012][T10559] should_fail_ex.cold+0x5/0xa [ 199.418030][T10559] should_failslab+0xc2/0x120 [ 199.418046][T10559] kmem_cache_alloc_noprof+0x92/0x6a0 [ 199.418060][T10559] ? __send_signal_locked+0x1d1/0x1420 [ 199.418081][T10559] __send_signal_locked+0x1d1/0x1420 [ 199.418101][T10559] do_notify_parent+0xf15/0x10c0 [ 199.418121][T10559] ? __pfx_do_notify_parent+0x10/0x10 [ 199.418143][T10559] ? do_raw_spin_lock+0x128/0x260 [ 199.418160][T10559] ? __wake_up+0x3f/0x60 [ 199.418180][T10559] ? release_task+0xc27/0x1ca0 [ 199.418198][T10559] release_task+0x14ea/0x1ca0 [ 199.418217][T10559] ? __pfx_release_task+0x10/0x10 [ 199.418231][T10559] ? do_raw_spin_lock+0x128/0x260 [ 199.418247][T10559] ? find_held_lock+0x2b/0x80 [ 199.418264][T10559] ? __wake_up+0x3f/0x60 [ 199.418280][T10559] ? __wake_up+0x3f/0x60 [ 199.418300][T10559] ? rcu_is_watching+0x13/0xc0 [ 199.418319][T10559] do_exit+0x1300/0x2a00 [ 199.418336][T10559] ? __pfx_do_exit+0x10/0x10 [ 199.418350][T10559] ? do_raw_spin_lock+0x128/0x260 [ 199.418365][T10559] ? find_held_lock+0x2b/0x80 [ 199.418381][T10559] ? get_signal+0xa28/0x22e0 [ 199.418407][T10559] do_group_exit+0xd5/0x2a0 [ 199.418426][T10559] get_signal+0x1f58/0x22e0 [ 199.418437][T10559] ? __pfx_futex_wait+0x10/0x10 [ 199.418455][T10559] ? __pfx_get_signal+0x10/0x10 [ 199.418468][T10559] ? do_futex+0x190/0x440 [ 199.418486][T10559] arch_do_signal_or_restart+0x91/0x7a0 [ 199.418507][T10559] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 199.418534][T10559] exit_to_user_mode_loop+0x139/0x700 [ 199.418550][T10559] ? rcu_is_watching+0x13/0xc0 [ 199.418568][T10559] __do_fast_syscall_32+0x5b0/0x8c0 [ 199.418587][T10559] ? lockdep_hardirqs_on+0x7d/0x110 [ 199.418605][T10559] do_fast_syscall_32+0x32/0x70 [ 199.418623][T10559] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.418639][T10559] RIP: 0023:0xf743efbc [ 199.418649][T10559] Code: Unable to access opcode bytes at 0xf743ef92. [ 199.418654][T10559] RSP: 002b:00000000f54565bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 199.418666][T10559] RAX: fffffffffffffe00 RBX: 00000000f7464f88 RCX: 0000000000000080 [ 199.418674][T10559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7464f8c [ 199.418681][T10559] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 199.418688][T10559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.418695][T10559] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 199.418710][T10559] [ 199.424358][ T1750] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 199.429218][ T7303] bridge_slave_0: left allmulticast mode [ 199.429229][ T7303] bridge_slave_0: left promiscuous mode [ 199.430834][ T7303] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.653165][ T7303] bond1 (unregistering): (slave geneve2): Releasing active interface [ 199.689020][ T1750] usb 6-1: unable to get BOS descriptor or descriptor too short [ 199.689044][ T1750] usb 6-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 199.691954][ T1750] usb 6-1: config 142 has an invalid interface number: 251 but max is 0 [ 199.691968][ T1750] usb 6-1: config 142 has no interface number 0 [ 199.691989][ T1750] usb 6-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 199.692005][ T1750] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 199.692019][ T1750] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 199.692032][ T1750] usb 6-1: config 142 interface 251 has no altsetting 0 [ 199.709364][ T1750] usb 6-1: string descriptor 0 read error: -22 [ 199.709789][ T1750] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.733056][T10543] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 199.733204][T10543] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 199.734521][ T1750] cypress_m8 6-1:142.251: HID->COM RS232 Adapter converter detected [ 199.750150][ T1750] usb 6-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 199.770806][ T7303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.773337][ T7303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.774461][ T7303] bond0 (unregistering): Released all slaves [ 199.782015][ T7303] bond1 (unregistering): Released all slaves [ 199.795563][ T7303] bond2 (unregistering): Released all slaves [ 199.809174][ T7303] bond3 (unregistering): Released all slaves [ 199.819367][ T7303] bond4 (unregistering): Released all slaves [ 199.855926][ T7303] bond5 (unregistering): Released all slaves [ 199.893790][ T7303] bond6 (unregistering): Released all slaves [ 199.918829][ T7303] bond7 (unregistering): Released all slaves [ 200.234350][ T5505] 8021q: adding VLAN 0 to HW filter on device eth2 [ 200.341336][T10599] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 200.351293][T10599] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f] [ 200.351382][T10599] pci 0000:00:03.0: BAR 1 [mem 0x80000000-0x80000fff] [ 200.351639][T10599] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref] [ 200.370746][T10599] pci 0000:00:03.0: Adding to iommu group 3 [ 200.38 ** replaying previous printk message ** [ 200.388989][T10599] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 200.389003][ T7303] kernfs 139: removing [ 200.389026][ T7303] kernfs 140: removing [ 200.389049][ T7303] kernfs 141: removing [ 200.389072][ T7303] kernfs 142: removing [ 200.389094][ T7303] kernfs 143: removing [ 200.389116][ T7303] kernfs 144: removing [ 200.389139][ T7303] kernfs 145: removing [ 200.389161][ T7303] kernfs 146: removing [ 200.389183][ T7303] kernfs 147: removing [ 200.389209][ T7303] kernfs 148: removing [ 200.389232][ T7303] kernfs 149: removing [ 200.389255][ T7303] kernfs 150: removing [ 200.389277][ T7303] kernfs 151: removing [ 200.389300][ T7303] kernfs 152: removing [ 200.389323][ T7303] kernfs 153: removing [ 200.389345][ T7303] kernfs 154: removing [ 200.389368][ T7303] kernfs 155: removing [ 200.389391][ T7303] kernfs 156: removing [ 200.389414][ T7303] kernfs 157: removing [ 200.389436][ T7303] kernfs 158: removing [ 200.389459][ T7303] kernfs 159: removing [ 200.389511][ T7303] kernfs 160: removing [ 200.389551][ T7303] kernfs 161: removing [ 200.389579][ T7303] kernfs 162: removing [ 200.389602][ T7303] kernfs 163: removing [ 200.389631][ T7303] kernfs 164: removing [ 200.389654][ T7303] kernfs 165: removing [ 200.389676][ T7303] kernfs 166: removing [ 200.389699][ T7303] kernfs 167: removing [ 200.389721][ T7303] kernfs 168: removing [ 200.389744][ T7303] kernfs 169: removing [ 200.389766][ T7303] kernfs 170: removing [ 200.389788][ T7303] kernfs 171: removing [ 200.389811][ T7303] kernfs 172: removing [ 200.389835][ T7303] kernfs 173: removing [ 200.389857][ T7303] kernfs 174: removing [ 200.389879][ T7303] kernfs 175: removing [ 200.389902][ T7303] kernfs 176: removing [ 200.389924][ T7303] kernfs 177: removing [ 200.389947][ T7303] kernfs 178: removing [ 200.389970][ T7303] kernfs 179: removing [ 200.389992][ T7303] kernfs 180: removing [ 200.390014][ T7303] kernfs 181: removing [ 200.390037][ T7303] kernfs 182: removing [ 200.390059][ T7303] kernfs 183: removing [ 200.390081][ T7303] kernfs 184: removing [ 200.390103][ T7303] kernfs 185: removing [ 200.391863][T10599] pci 0000:00:03.0: BAR 1 [mem 0x80000000-0x80000fff]: assigned [ 200.391971][T10599] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 200.392176][T10599] pci 0000:00:03.0: save config 0x00: 0x10051af4 [ 200.392231][T10599] pci 0000:00:03.0: save config 0x04: 0x00100103 [ 200.392285][T10599] pci 0000:00:03.0: save config 0x08: 0x00ff0000 [ 200.392339][T10599] pci 0000:00:03.0: save config 0x0c: 0x00000000 [ 200.392393][T10599] pci 0000:00:03.0: save config 0x10: 0x00002001 [ 200.392446][T10599] pci 0000:00:03.0: save config 0x14: 0x80000000 [ 200.392499][T10599] pci 0000:00:03.0: save config 0x18: 0x00000000 [ 200.392555][T10599] pci 0000:00:03.0: save config 0x1c: 0x00000000 [ 200.392607][T10599] pci 0000:00:03.0: save config 0x20: 0x8000000c [ 200.392667][T10599] pci 0000:00:03.0: save config 0x24: 0x00000005 [ 200.392738][T10599] pci 0000:00:03.0: save config 0x28: 0x00000000 [ 200.392811][T10599] pci 0000:00:03.0: save config 0x2c: 0x00041af4 [ 200.392885][T10599] pci 0000:00:03.0: save config 0x30: 0x00000000 [ 200.393074][T10599] pci 0000:00:03.0: save config 0x34: 0x00000098 [ 200.393148][T10599] pci 0000:00:03.0: save config 0x38: 0x00000000 [ 200.393221][T10599] pci 0000:00:03.0: save config 0x3c: 0x0000010b [ 200.393941][ T7303] kernfs 186: removing [ 200.393967][ T7303] kernfs 187: removing [ 200.393965][T10599] pci 0000:00:03.0: bus: 'pci': __driver_probe_device: matched device with driver virtio-pci [ 200.393985][T10599] pci 0000:00:03.0: bus: 'pci': really_probe: probing driver virtio-pci with device [ 200.393990][ T7303] kernfs 188: removing [ 200.393999][T10599] virtio-pci 0000:00:03.0: Adding to IOMMU failed: -19 [ 200.394014][ T7303] kernfs 189: removing [ 200.394015][T10599] virtio-pci 0000:00:03.0: vgaarb: pci_notify [ 200.394037][ T7303] kernfs 190: removing [ 200.394059][ T7303] kernfs 191: removing [ 200.394089][ T7303] kernfs 192: removing [ 200.394113][ T7303] kernfs 193: removing [ 200.394136][ T7303] kernfs 194: removing [ 200.394159][ T7303] kernfs 195: removing [ 200.394182][ T7303] kernfs 196: removing [ 200.394216][ T7303] kernfs 197: removing [ 200.394216][T10599] virtio-pci 0000:00:03.0: runtime IRQ mapping not provided by arch [ 200.394239][ T7303] kernfs 198: removing [ 200.394261][ T7303] kernfs 199: removing [ 200.394284][ T7303] kernfs 200: removing [ 200.394311][ T7303] kernfs 201: removing [ 200.394333][ T7303] kernfs 202: removing [ 200.394356][ T7303] kernfs 203: removing [ 200.394379][ T7303] kernfs 204: removing [ 200.394402][ T7303] kernfs 205: removing [ 200.394424][ T7303] kernfs 206: removing [ 200.394447][ T7303] kernfs 207: removing [ 200.394469][ T7303] kernfs 208: removing [ 200.394492][ T7303] kernfs 209: removing [ 200.394515][ T7303] kernfs 210: removing [ 200.394537][ T7303] kernfs 211: removing [ 200.394560][ T7303] kernfs 212: removing [ 200.394582][ T7303] kernfs 213: removing [ 200.394605][ T7303] kernfs 214: removing [ 200.394627][ T7303] kernfs 215: removing [ 200.394649][ T7303] kernfs 216: removing [ 200.394674][ T7303] kernfs 217: removing [ 200.394696][ T7303] kernfs 218: removing [ 200.394718][ T7303] kernfs 219: removing [ 200.394741][ T7303] kernfs 220: removing [ 200.394764][ T7303] kernfs 221: removing [ 200.394786][ T7303] kernfs 222: removing [ 200.394809][ T7303] kernfs 223: removing [ 200.394831][ T7303] kernfs 224: removing [ 200.394854][ T7303] kernfs 225: removing [ 200.394877][ T7303] kernfs 226: removing [ 200.394899][ T7303] kernfs 227: removing [ 200.394928][ T7303] kernfs 228: removing [ 200.394950][ T7303] kernfs 229: removing [ 200.394973][ T7303] kernfs 230: removing [ 200.394995][ T7303] kernfs 231: removing [ 200.395017][ T7303] kernfs 232: removing [ 200.395042][ T7303] kernfs 233: removing [ 200.395064][ T7303] kernfs 234: removing [ 200.395086][ T7303] kernfs 235: removing [ 200.395108][ T7303] kernfs 236: removing [ 200.395131][ T7303] kernfs 237: removing [ 200.395153][ T7303] kernfs 238: removing [ 200.395176][ T7303] kernfs 239: removing [ 200.395186][T10599] ================================================================== [ 200.395203][ T7303] kernfs 240: removing [ 200.395194][T10599] BUG: KASAN: slab-use-after-free in acpi_ns_get_attached_object+0x148/0x1b0 [ 200.395226][ T7303] kernfs 241: removing [ 200.395230][T10599] Read of size 1 at addr ffff888022a071a8 by task syz.6.1714/10599 [ 200.395241][T10599] [ 200.395248][ T7303] kernfs 242: removing [ 200.395249][T10599] CPU: 3 UID: 0 PID: 10599 Comm: syz.6.1714 Not tainted syzkaller #0 PREEMPT(full) [ 200.395264][T10599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.395271][ T7303] kernfs 243: removing [ 200.395273][T10599] Call Trace: [ 200.395279][T10599] [ 200.395284][T10599] dump_stack_lvl+0x100/0x190 [ 200.395293][ T7303] kernfs 244: removing [ 200.395304][T10599] print_report+0x13d/0x4b0 [ 200.395315][ T7303] kernfs 245: removing [ 200.395324][T10599] ? __virt_addr_valid+0x239/0x430 [ 200.395337][ T7303] kernfs 246: removing [ 200.395338][T10599] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 200.395353][T10599] kasan_report+0xdf/0x1c0 [ 200.395359][ T7303] kernfs 247: removing [ 200.395370][T10599] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 200.395382][ T7303] kernfs 248: removing [ 200.395388][T10599] acpi_ns_get_attached_object+0x148/0x1b0 [ 200.395405][ T7303] kernfs 249: removing [ 200.395404][T10599] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 200.395420][T10599] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 200.395427][ T7303] kernfs 250: removing [ 200.395434][T10599] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 200.395450][ T7303] kernfs 251: removing [ 200.395450][T10599] ? acpi_ds_create_operand+0x267/0xc20 [ 200.395472][ T7303] kernfs 252: removing [ 200.395470][T10599] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 200.395486][T10599] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 200.395494][ T7303] kernfs 253: removing [ 200.395502][T10599] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 200.395516][ T7303] kernfs 254: removing [ 200.395514][T10599] ? __asan_memset+0x23/0x50 [ 200.395538][ T7303] kernfs 255: removing [ 200.395535][T10599] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 200.395550][T10599] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 200.395561][ T7303] kernfs 256: removing [ 200.395569][T10599] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 200.395583][ T7303] kernfs 257: removing [ 200.395588][T10599] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 200.395606][ T7303] kernfs 258: removing [ 200.395608][T10599] ? acpi_ut_trace_ptr+0x1d1/0x2a0 [ 200.395621][T10599] acpi_ds_exec_end_op+0xb78/0x1e60 [ 200.395628][ T7303] kernfs 259: removing [ 200.395641][T10599] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 200.395650][ T7303] kernfs 260: removing [ 200.395660][T10599] acpi_ps_parse_loop+0x5e1/0x26e0 [ 200.395673][ T7303] kernfs 261: removing [ 200.395681][T10599] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 200.395695][ T7303] kernfs 262: removing [ 200.395700][T10599] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 200.395712][T10599] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 200.395718][ T7303] kernfs 263: removing [ 200.395726][T10599] ? acpi_ut_create_thread_state+0x6d/0x170 [ 200.395740][ T7303] kernfs 264: removing [ 200.395754][T10599] acpi_ps_parse_aml+0x81e/0x1120 [ 200.395762][ T7303] kernfs 265: removing [ 200.395774][T10599] acpi_ps_execute_method+0x5c4/0xe90 [ 200.395784][ T7303] kernfs 266: removing [ 200.395798][T10599] acpi_ns_evaluate+0x640/0x1670 [ 200.395806][ T7303] kernfs 267: removing [ 200.395828][ T7303] kernfs 268: removing [ 200.395824][T10599] acpi_ut_evaluate_object+0xf7/0x610 [ 200.395851][ T7303] kernfs 269: removing [ 200.395852][T10599] acpi_rs_get_prt_method_data+0xa0/0x150 [ 200.395876][T10599] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 200.395899][ T7303] kernfs 270: removing [ 200.395899][T10599] ? acpi_ut_status_exit+0x111/0x1c0 [ 200.395923][ T7303] kernfs 271: removing [ 200.395921][T10599] ? acpi_rs_validate_parameters+0x104/0x210 [ 200.395946][ T7303] kernfs 272: removing [ 200.395949][T10599] acpi_get_irq_routing_table+0xb8/0x140 [ 200.395968][ T7303] kernfs 273: removing [ 200.395974][T10599] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 200.395991][ T7303] kernfs 274: removing [ 200.396002][T10599] ? do_raw_spin_lock+0x128/0x260 [ 200.396013][ T7303] kernfs 275: removing [ 200.396036][ T7303] kernfs 276: removing [ 200.396036][T10599] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 200.396058][ T7303] kernfs 277: removing [ 200.396065][T10599] ? mark_held_locks+0x40/0x70 [ 200.396089][T10599] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 200.396114][T10599] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 200.396141][T10599] ? pci_conf1_read+0x138/0x240 [ 200.396167][T10599] ? __pfx_vprintk_emit+0x10/0x10 [ 200.396201][T10599] acpi_pci_irq_lookup+0x8e/0x6b0 [ 200.396226][T10599] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 200.396249][T10599] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 200.396275][T10599] ? __driver_probe_device+0x210/0x460 [ 200.396303][T10599] ? __device_attach_driver+0x1df/0x320 [ 200.396323][T10599] ? bus_for_each_drv+0x159/0x1e0 [ 200.396346][T10599] ? __device_attach+0x1e4/0x4c0 [ 200.396364][T10599] acpi_pci_irq_enable+0x1f5/0x6f0 [ 200.396380][T10599] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 200.396396][T10599] ? __pfx_pci_enable_resources+0x10/0x10 [ 200.396412][T10599] ? __pfx___pci_set_power_state+0x10/0x10 [ 200.396427][T10599] pcibios_enable_device+0xb6/0xe0 [ 200.396443][T10599] do_pci_enable_device+0x21f/0x4a0 [ 200.396457][T10599] ? __pfx_do_pci_enable_device+0x10/0x10 [ 200.396471][T10599] ? pci_update_current_state+0x102/0x240 [ 200.396483][T10599] ? __pfx_pci_update_current_state+0x10/0x10 [ 200.396496][T10599] ? rmap_walk_ksm+0x830/0x850 [ 200.396509][T10599] ? __kasan_kmalloc+0xaa/0xb0 [ 200.396525][T10599] pci_enable_device_flags+0x27c/0x370 [ 200.396542][T10599] ? __pfx_virtio_pci_probe+0x10/0x10 [ 200.396556][T10599] virtio_pci_probe+0x1d5/0x410 [ 200.396571][T10599] local_pci_probe+0xdd/0x1b0 [ 200.396591][T10599] pci_call_probe+0x176/0x800 [ 200.396603][T10599] ? pci_match_device+0x147/0x7d0 [ 200.396615][T10599] ? __pfx_pci_call_probe+0x10/0x10 [ 200.396631][T10599] ? __pfx_pci_match_device+0x10/0x10 [ 200.396653][T10599] pci_device_probe+0x25b/0x400 [ 200.396674][T10599] ? __pfx_pci_device_probe+0x10/0x10 [ 200.396697][T10599] ? sysfs_create_link+0x68/0xc0 [ 200.396726][T10599] ? __pfx_pci_device_probe+0x10/0x10 [ 200.396747][T10599] really_probe+0x241/0xa60 [ 200.396778][T10599] __driver_probe_device+0x210/0x460 [ 200.396807][T10599] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 200.396836][T10599] driver_probe_device+0x4a/0x140 [ 200.396866][T10599] __device_attach_driver+0x1df/0x320 [ 200.396887][T10599] ? __pfx___device_attach_driver+0x10/0x10 [ 200.396914][T10599] bus_for_each_drv+0x159/0x1e0 [ 200.396938][T10599] ? __pfx_bus_for_each_drv+0x10/0x10 [ 200.396964][T10599] ? lockdep_hardirqs_on+0x7d/0x110 [ 200.397005][T10599] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 200.397041][T10599] __device_attach+0x1e4/0x4c0 [ 200.397060][T10599] ? __pfx___device_attach+0x10/0x10 [ 200.397079][T10599] ? do_raw_spin_unlock+0x145/0x1e0 [ 200.397108][T10599] device_initial_probe+0xaf/0xf0 [ 200.397127][T10599] pci_bus_add_device+0xc5/0x100 [ 200.397152][T10599] pci_bus_add_devices+0x9a/0x1f0 [ 200.397179][T10599] pci_rescan_bus+0x2a/0x40 [ 200.397200][T10599] rescan_store+0xfb/0x130 [ 200.397220][T10599] ? __pfx_rescan_store+0x10/0x10 [ 200.397236][T10599] ? sysfs_file_kobj+0xe4/0x290 [ 200.397262][T10599] ? __pfx_rescan_store+0x10/0x10 [ 200.397282][T10599] bus_attr_store+0x74/0xb0 [ 200.397307][T10599] ? __pfx_bus_attr_store+0x10/0x10 [ 200.397328][T10599] sysfs_kf_write+0xf2/0x150 [ 200.397355][T10599] kernfs_fop_write_iter+0x3e0/0x5f0 [ 200.397376][T10599] ? __pfx_sysfs_kf_write+0x10/0x10 [ 200.397403][T10599] vfs_write+0x6af/0x1050 [ 200.397426][T10599] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 200.397449][T10599] ? __pfx_vfs_write+0x10/0x10 [ 200.397493][T10599] ? find_held_lock+0x2b/0x80 [ 200.397531][T10599] ksys_write+0x12a/0x250 [ 200.397551][T10599] ? __pfx_ksys_write+0x10/0x10 [ 200.397576][T10599] __do_fast_syscall_32+0x14b/0x8c0 [ 200.397607][T10599] do_fast_syscall_32+0x32/0x70 [ 200.397634][T10599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.397659][T10599] RIP: 0023:0xf73aefbc [ 200.397676][T10599] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 200.397695][T10599] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 200.397718][T10599] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 200.397733][T10599] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.397745][T10599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 200.397756][T10599] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 200.397768][T10599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.397787][T10599] [ 200.397794][T10599] [ 200.397799][T10599] Allocated by task 1: [ 200.397809][T10599] kasan_save_stack+0x30/0x50 [ 200.397830][T10599] kasan_save_track+0x14/0x30 [ 200.397848][T10599] __kasan_slab_alloc+0x89/0x90 [ 200.397869][T10599] kmem_cache_alloc_noprof+0x269/0x6a0 [ 200.397887][T10599] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 200.397914][T10599] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 200.397935][T10599] acpi_ds_build_internal_object+0x173/0x790 [ 200.397954][T10599] acpi_ds_create_node+0xe3/0x280 [ 200.397970][T10599] acpi_ds_exec_end_op+0x10cf/0x1e60 [ 200.397988][T10599] acpi_ps_parse_loop+0x5e1/0x26e0 [ 200.398007][T10599] acpi_ps_parse_aml+0x81e/0x1120 [ 200.398018][T10599] acpi_ps_execute_table+0x393/0x500 [ 200.398037][T10599] acpi_ns_execute_table+0x596/0x970 [ 200.398054][T10599] acpi_ns_parse_table+0xcb/0x160 [ 200.398068][T10599] acpi_ns_load_table+0xc9/0x490 [ 200.398081][T10599] acpi_tb_load_namespace+0x2b0/0x8f0 [ 200.398099][T10599] acpi_load_tables+0x89/0x160 [ 200.398116][T10599] acpi_init+0x146/0x840 [ 200.398129][T10599] do_one_initcall+0x11c/0x6f0 [ 200.398140][T10599] kernel_init_freeable+0x6ea/0x7b0 [ 200.398158][T10599] kernel_init+0x21/0x1e0 [ 200.398169][T10599] ret_from_fork+0x730/0xd60 [ 200.398182][T10599] ret_from_fork_asm+0x1a/0x30 [ 200.398194][T10599] [ 200.398198][T10599] Freed by task 10139: [ 200.398205][T10599] kasan_save_stack+0x30/0x50 [ 200.398216][T10599] kasan_save_track+0x14/0x30 [ 200.398228][T10599] kasan_save_free_info+0x3b/0x70 [ 200.398244][T10599] __kasan_slab_free+0x5f/0x80 [ 200.398256][T10599] kmem_cache_free+0x127/0x6c0 [ 200.398272][T10599] acpi_os_release_object+0x1c/0x30 [ 200.398284][T10599] acpi_ut_delete_object_desc+0xea/0x130 [ 200.398301][T10599] acpi_ut_update_ref_count.part.0+0x510/0x2250 [ 200.398314][T10599] acpi_ut_update_object_reference+0x5f9/0x800 [ 200.398328][T10599] acpi_ut_remove_reference+0x192/0x1d0 [ 200.398340][T10599] acpi_rs_get_prt_method_data+0xcd/0x150 [ 200.398354][T10599] acpi_get_irq_routing_table+0xb8/0x140 [ 200.398368][T10599] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 200.398382][T10599] acpi_pci_irq_lookup+0x8e/0x6b0 [ 200.398395][T10599] acpi_pci_irq_disable+0x1a8/0x360 [ 200.398409][T10599] pcibios_disable_device+0x89/0xb0 [ 200.398423][T10599] do_pci_disable_device+0x9f/0x100 [ 200.398436][T10599] pci_disable_device+0x130/0x270 [ 200.398448][T10599] virtio_pci_remove+0xcf/0x110 [ 200.398461][T10599] pci_device_remove+0xb2/0x1d0 [ 200.398480][T10599] device_remove+0xcb/0x180 [ 200.398497][T10599] device_release_driver_internal+0x441/0x610 [ 200.398509][T10599] pci_stop_bus_device+0x120/0x160 [ 200.398521][T10599] pci_stop_and_remove_bus_device+0x58/0xa0 [ 200.398535][T10599] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 200.398549][T10599] remove_store+0x123/0x140 [ 200.398563][T10599] dev_attr_store+0x58/0x80 [ 200.398574][T10599] sysfs_kf_write+0xf2/0x150 [ 200.398587][T10599] kernfs_fop_write_iter+0x3e0/0x5f0 [ 200.398599][T10599] vfs_write+0x6af/0x1050 [ 200.398611][T10599] ksys_write+0x12a/0x250 [ 200.398622][T10599] __do_fast_syscall_32+0x14b/0x8c0 [ 200.398640][T10599] do_fast_syscall_32+0x32/0x70 [ 200.398664][T10599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.398686][T10599] [ 200.398691][T10599] The buggy address belongs to the object at ffff888022a071a0 [ 200.398691][T10599] which belongs to the cache Acpi-Operand of size 72 [ 200.398706][T10599] The buggy address is located 8 bytes inside of [ 200.398706][T10599] freed 72-byte region [ffff888022a071a0, ffff888022a071e8) [ 200.398724][T10599] [ 200.398730][T10599] The buggy address belongs to the physical page: [ 200.398739][T10599] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888022a07958 pfn:0x22a07 [ 200.398756][T10599] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 200.398775][T10599] page_type: f5(slab) [ 200.398791][T10599] raw: 00fff00000000200 ffff88801d44da40 ffffea0000890d50 ffffea00008a8c10 [ 200.398810][T10599] raw: ffff888022a07958 0000000200270009 00000000f5000000 0000000000000000 [ 200.398822][T10599] page dumped because: kasan: bad access detected [ 200.398831][T10599] page_owner tracks the page as allocated [ 200.398837][T10599] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2488417746 [ 200.398866][T10599] post_alloc_hook+0xfd/0x120 [ 200.398892][T10599] get_page_from_freelist+0x112f/0x3640 [ 200.398921][T10599] __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 200.398949][T10599] new_slab+0xb1/0x6d0 [ 200.398974][T10599] refill_objects+0xe3/0x410 [ 200.399000][T10599] __pcs_replace_empty_main+0x35e/0x650 [ 200.399032][T10599] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 200.399048][T10599] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 200.399078][T10599] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 200.399106][T10599] acpi_ds_build_internal_object+0x173/0x790 [ 200.399132][T10599] acpi_ds_build_internal_package_obj+0x481/0xe60 [ 200.399162][T10599] acpi_ds_eval_data_object_operands+0x2fd/0x640 [ 200.399190][T10599] acpi_ds_exec_end_op+0xe41/0x1e60 [ 200.399217][T10599] acpi_ps_parse_loop+0x5e1/0x26e0 [ 200.399245][T10599] acpi_ps_parse_aml+0x81e/0x1120 [ 200.399255][ T7303] kernfs 278: removing [ 200.399257][T10599] acpi_ps_execute_table+0x393/0x500 [ 200.399269][T10599] page_owner free stack trace missing [ 200.399273][T10599] [ 200.399276][T10599] Memory state around the buggy address: [ 200.399281][ T7303] kernfs 279: removing [ 200.399282][T10599] ffff888022a07080: 00 00 00 00 00 00 fc fc fc fc fa fb fb fb fb fb [ 200.399291][T10599] ffff888022a07100: fb fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb [ 200.399299][T10599] >ffff888022a07180: fc fc fc fc fa fb fb fb fb fb fb fb fb fc fc fc [ 200.399305][ T7303] kernfs 280: removing [ 200.399306][T10599] ^ [ 200.399313][T10599] ffff888022a07200: fc fa fb fb fb fb fb fb fb fb fc fc fc fc fa fb [ 200.399321][T10599] ffff888022a07280: fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb fb [ 200.399328][T10599] ================================================================== [ 200.399328][ T7303] kernfs 281: removing [ 200.399351][ T7303] kernfs 282: removing [ 200.399374][ T7303] kernfs 283: removing [ 200.399784][T10599] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 201.093569][T10599] CPU: 3 UID: 0 PID: 10599 Comm: syz.6.1714 Not tainted syzkaller #0 PREEMPT(full) [ 201.096130][T10599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.098915][T10599] Call Trace: [ 201.099854][T10599] [ 201.100707][T10599] dump_stack_lvl+0x100/0x190 [ 201.102048][T10599] vpanic+0x2dc/0x6f8 [ 201.103159][T10599] panic+0xd1/0xe0 [ 201.104211][T10599] ? __pfx_panic+0x10/0x10 [ 201.105462][T10599] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 201.107133][T10599] ? preempt_schedule+0x57/0xd0 [ 201.108478][T10599] check_panic_on_warn.cold+0x19/0x34 [ 201.109983][T10599] end_report.part.0+0x3a/0x90 [ 201.111329][T10599] kasan_report.cold+0xe/0x18 [ 201.112635][T10599] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 201.114307][T10599] acpi_ns_get_attached_object+0x148/0x1b0 [ 201.115909][T10599] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 201.117561][T10599] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 201.118982][T10599] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 201.120777][T10599] ? acpi_ds_create_operand+0x267/0xc20 [ 201.122343][T10599] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 201.123898][T10599] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 201.125607][T10599] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 201.127043][T10599] ? __asan_memset+0x23/0x50 [ 201.128332][T10599] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 201.129980][T10599] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 201.131575][T10599] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 201.133303][T10599] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 201.134954][T10599] ? acpi_ut_trace_ptr+0x1d1/0x2a0 [ 201.136375][T10599] acpi_ds_exec_end_op+0xb78/0x1e60 [ 201.137875][T10599] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 201.139498][T10599] acpi_ps_parse_loop+0x5e1/0x26e0 [ 201.141005][T10599] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 201.142615][T10599] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 201.144192][T10599] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 201.145907][T10599] ? acpi_ut_create_thread_state+0x6d/0x170 [ 201.147610][T10599] acpi_ps_parse_aml+0x81e/0x1120 [ 201.149059][T10599] acpi_ps_execute_method+0x5c4/0xe90 [ 201.150604][T10599] acpi_ns_evaluate+0x640/0x1670 [ 201.152050][T10599] acpi_ut_evaluate_object+0xf7/0x610 [ 201.153591][T10599] acpi_rs_get_prt_method_data+0xa0/0x150 [ 201.155232][T10599] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 201.157031][T10599] ? acpi_ut_status_exit+0x111/0x1c0 [ 201.158540][T10599] ? acpi_rs_validate_parameters+0x104/0x210 [ 201.160269][T10599] acpi_get_irq_routing_table+0xb8/0x140 [ 201.161904][T10599] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 201.163709][T10599] ? do_raw_spin_lock+0x128/0x260 [ 201.165166][T10599] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 201.166863][T10599] ? mark_held_locks+0x40/0x70 [ 201.168267][T10599] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 201.170099][T10599] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 201.171799][T10599] ? pci_conf1_read+0x138/0x240 [ 201.173221][T10599] ? __pfx_vprintk_emit+0x10/0x10 [ 201.174691][T10599] acpi_pci_irq_lookup+0x8e/0x6b0 [ 201.176194][T10599] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 201.177826][T10599] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 201.179567][T10599] ? __driver_probe_device+0x210/0x460 [ 201.181190][T10599] ? __device_attach_driver+0x1df/0x320 [ 201.182793][T10599] ? bus_for_each_drv+0x159/0x1e0 [ 201.184249][T10599] ? __device_attach+0x1e4/0x4c0 [ 201.185717][T10599] acpi_pci_irq_enable+0x1f5/0x6f0 [ 201.187189][T10599] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 201.188736][T10599] ? __pfx_pci_enable_resources+0x10/0x10 [ 201.190390][T10599] ? __pfx___pci_set_power_state+0x10/0x10 [ 201.192077][T10599] pcibios_enable_device+0xb6/0xe0 [ 201.193559][T10599] do_pci_enable_device+0x21f/0x4a0 [ 201.195067][T10599] ? __pfx_do_pci_enable_device+0x10/0x10 [ 201.196699][T10599] ? pci_update_current_state+0x102/0x240 [ 201.198352][T10599] ? __pfx_pci_update_current_state+0x10/0x10 [ 201.200102][T10599] ? rmap_walk_ksm+0x830/0x850 [ 201.201504][T10599] ? __kasan_kmalloc+0xaa/0xb0 [ 201.202901][T10599] pci_enable_device_flags+0x27c/0x370 [ 201.204424][T10599] ? __pfx_virtio_pci_probe+0x10/0x10 [ 201.205899][T10599] virtio_pci_probe+0x1d5/0x410 [ 201.207262][T10599] local_pci_probe+0xdd/0x1b0 [ 201.208582][T10599] pci_call_probe+0x176/0x800 [ 201.209874][T10599] ? pci_match_device+0x147/0x7d0 [ 201.211354][T10599] ? __pfx_pci_call_probe+0x10/0x10 [ 201.212857][T10599] ? __pfx_pci_match_device+0x10/0x10 [ 201.214412][T10599] pci_device_probe+0x25b/0x400 [ 201.215840][T10599] ? __pfx_pci_device_probe+0x10/0x10 [ 201.217364][T10599] ? sysfs_create_link+0x68/0xc0 [ 201.218751][T10599] ? __pfx_pci_device_probe+0x10/0x10 [ 201.220283][T10599] really_probe+0x241/0xa60 [ 201.221643][T10599] __driver_probe_device+0x210/0x460 [ 201.223172][T10599] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 201.224861][T10599] driver_probe_device+0x4a/0x140 [ 201.226333][T10599] __device_attach_driver+0x1df/0x320 [ 201.227880][T10599] ? __pfx___device_attach_driver+0x10/0x10 [ 201.229602][T10599] bus_for_each_drv+0x159/0x1e0 [ 201.231026][T10599] ? __pfx_bus_for_each_drv+0x10/0x10 [ 201.232584][T10599] ? lockdep_hardirqs_on+0x7d/0x110 [ 201.234062][T10599] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 201.235749][T10599] __device_attach+0x1e4/0x4c0 [ 201.237145][T10599] ? __pfx___device_attach+0x10/0x10 [ 201.238686][T10599] ? do_raw_spin_unlock+0x145/0x1e0 [ 201.240186][T10599] device_initial_probe+0xaf/0xf0 [ 201.241657][T10599] pci_bus_add_device+0xc5/0x100 [ 201.243102][T10599] pci_bus_add_devices+0x9a/0x1f0 [ 201.244566][T10599] pci_rescan_bus+0x2a/0x40 [ 201.245898][T10599] rescan_store+0xfb/0x130 [ 201.247187][T10599] ? __pfx_rescan_store+0x10/0x10 [ 201.248572][T10599] ? sysfs_file_kobj+0xe4/0x290 [ 201.249971][T10599] ? __pfx_rescan_store+0x10/0x10 [ 201.251439][T10599] bus_attr_store+0x74/0xb0 [ 201.252757][T10599] ? __pfx_bus_attr_store+0x10/0x10 [ 201.254262][T10599] sysfs_kf_write+0xf2/0x150 [ 201.255551][T10599] kernfs_fop_write_iter+0x3e0/0x5f0 [ 201.257094][T10599] ? __pfx_sysfs_kf_write+0x10/0x10 [ 201.258738][T10599] vfs_write+0x6af/0x1050 [ 201.260177][T10599] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 201.261900][T10599] ? __pfx_vfs_write+0x10/0x10 [ 201.263289][T10599] ? find_held_lock+0x2b/0x80 [ 201.265122][T10599] ksys_write+0x12a/0x250 [ 201.266757][T10599] ? __pfx_ksys_write+0x10/0x10 [ 201.268582][T10599] __do_fast_syscall_32+0x14b/0x8c0 [ 201.270502][T10599] do_fast_syscall_32+0x32/0x70 [ 201.271954][T10599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.273824][T10599] RIP: 0023:0xf73aefbc [ 201.275024][T10599] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 201.280845][T10599] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 201.283273][T10599] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 201.285530][T10599] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.287797][T10599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.290052][T10599] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 201.292326][T10599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.294602][T10599] [ 201.296078][T10599] Kernel Offset: disabled [ 201.297344][T10599] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:18:27 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000002 RDX=ffff88802761a580 RSI=ffffffff8200f96e RDI=0000000000000005 RBP=ffff88802b1424c0 RSP=ffffc9000c4ff150 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=ffffed1004ec3763 R13=0000000000000003 R14=ffffed1005628499 R15=0000000000000001 RIP=ffffffff8200f970 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095279000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c4667f5 CR3=000000000fd96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffc9000536c400 RCX=0000000000000439 RDX=ffff88804a692580 RSI=ffffc90004cfd71c RDI=ffffc9000536c71c RBP=0000000000001400 RSP=ffffc90003ec71d0 R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90003ec7380 R11=0000000000000001 R12=ffffc90004cfd400 R13=0000000000000000 R14=ffffc9000536c400 R15=0000000000001400 RIP=ffffffff8570abb7 RFL=00010206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095379000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055dd06736078 CR3=0000000059b15000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000004 RBX=ffff888059160c00 RCX=ffffffff97c44940 RDX=0000000000000008 RSI=ffff888059160c00 RDI=ffff888059160000 RBP=ffffc9000765f1b8 RSP=ffffc9000765f190 R8 =0000000000000000 R9 =0000000000000002 R10=0000000000000002 R11=0000000000000001 R12=ffff888059160000 R13=0000000000000002 R14=ffff888059160000 R15=ffff888059160c00 RIP=ffffffff81e89c77 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095479000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f008e272286 CR3=0000000059f74000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c4c0c004 Opmask01=0000000000000000 Opmask02=0000000011000303 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002f72 73752f3a6e69622f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002a2e 2573257325003a25 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0f0e 0d0c0b0a09080706 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055eea375df28 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7273752f3a6e69 622f3a6e6962732f ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 00007f008e16d42d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055eea374f760 000055eea374f760 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055eea375a710 000055eea374d910 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055eea300662d 000055eea375df28 000055eea375df48 665f65676e006d72 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055eea300662d 000055eea375df28 000055eea375df48 665f65676e006d72 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c18c004902 000055c18c5adf07 000055c18c5adf48 495f4a484100425d ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055eea375a2f8 0000000000000000 000000000000000f 000055eea300873d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055eea3754b58 0000000000000000 000000000000000f 0000000000875d81 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c199d5 RDI=ffffffff9cf42560 RBP=ffffffff9cf42520 RSP=ffffc90004ee6520 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=3230383838666666 R12=0000000000000000 R13=0000000000000066 R14=000000000000000e R15=ffffc90004ee6838 RIP=ffffffff85c199ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888095579000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f71895d0 CR3=0000000060722000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000009000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000